@siteverb/audit 0.1.0-rc.0

package/README.md

@@ -0,0 +1,19 @@
+# @siteverb/audit
+
+Static source-to-contract coverage for Siteverb WebMCP projects.
+
+```sh
+npx @siteverb/audit --root . --contract siteverb.webmcp.json --output .siteverb/audit.json
+```
+
+The audit uses Babel's TypeScript parser for JavaScript/TypeScript/JSX/TSX and executable scripts in
+HTML, Vue, and Svelte files. `parse5` extracts declarative forms without regular expressions. It
+understands definitions, inline client registrations, static batches, and local static factories.
+
+It blocks raw `document.modelContext.registerTool` calls, state-changing declarative autosubmit,
+unsafe cross-origin exposure, duplicate stable IDs or wire names, contract/source drift, and missing
+contract entries. Dynamic `exposedTo` policy and known third-party registration runtimes require
+review; third-party runtimes become errors under `--strict-external`.
+
+Static coverage does not prove runtime behavior. Pair this audit with `@siteverb/runner` in the
+customer-owned GitHub Action.

package/dist/audit.d.ts

@@ -0,0 +1,3 @@
+import type { AuditProjectOptions, AuditReport } from './types.js';
+export declare function auditProject(options: AuditProjectOptions): Promise<AuditReport>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAgB,mBAAmB,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAmC7F,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CAqHrF"}

package/dist/audit.js

@@ -0,0 +1,140 @@
+import { readFile } from 'node:fs/promises';
+import { isAbsolute, relative, resolve } from 'node:path';
+import { parseProjectContract } from '@siteverb/contracts';
+import { scanProjectSources } from './source-scan.js';
+function duplicateFindings(tools) {
+    const findings = [];
+    for (const field of ['id', 'name']) {
+        const seen = new Map();
+        for (const tool of tools) {
+            const value = tool[field];
+            if (!value)
+                continue;
+            const previous = seen.get(value);
+            if (previous) {
+                if (field === 'name' &&
+                    previous.owner === 'declarative' &&
+                    tool.owner === 'declarative' &&
+                    previous.file !== tool.file) {
+                    continue;
+                }
+                findings.push({
+                    code: field === 'id' ? 'duplicate-stable-id' : 'duplicate-wire-name',
+                    file: tool.file,
+                    line: tool.line,
+                    column: tool.column,
+                    message: `Duplicate source tool ${field} "${value}".`,
+                    severity: 'error',
+                });
+            }
+            else {
+                seen.set(value, tool);
+            }
+        }
+    }
+    return findings;
+}
+export async function auditProject(options) {
+    const root = resolve(options.root);
+    const contractPath = resolve(root, options.contractPath);
+    const relativeContractPath = relative(root, contractPath);
+    if (relativeContractPath === '..' ||
+        relativeContractPath.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`) ||
+        isAbsolute(relativeContractPath)) {
+        throw new TypeError('The contract must be inside the audited project root.');
+    }
+    const contract = parseProjectContract(JSON.parse(await readFile(contractPath, 'utf8')));
+    const source = await scanProjectSources(root);
+    const findings = [
+        ...source.findings.map((finding) => options.strictExternal && finding.code === 'external-registration-runtime'
+            ? { ...finding, severity: 'error' }
+            : finding),
+        ...duplicateFindings(source.tools),
+    ];
+    const sourceById = new Map(source.tools.filter((tool) => tool.id).map((tool) => [tool.id, tool]));
+    for (const tool of contract.tools) {
+        if (tool.registration === 'declarative') {
+            const implementations = source.tools.filter((candidate) => candidate.owner === 'declarative' && candidate.name === tool.name);
+            if (implementations.length === 0) {
+                findings.push({
+                    code: 'contract-tool-missing-source',
+                    file: relativeContractPath,
+                    message: `Declarative contract tool "${tool.id}" has no matching form toolname.`,
+                    severity: 'error',
+                });
+            }
+            for (const implementation of implementations) {
+                if (implementation.autoSubmit && tool.risk !== 'read-only') {
+                    findings.push({
+                        code: 'unsafe-declarative-autosubmit',
+                        file: implementation.file,
+                        line: implementation.line,
+                        column: implementation.column,
+                        message: `State-changing declarative tool "${tool.id}" cannot use toolautosubmit.`,
+                        severity: 'error',
+                    });
+                }
+            }
+            continue;
+        }
+        const implementation = sourceById.get(tool.id);
+        if (!implementation) {
+            findings.push({
+                code: 'contract-tool-missing-source',
+                file: relativeContractPath,
+                message: `Contract tool "${tool.id}" has no static Siteverb definition in source.`,
+                severity: 'error',
+            });
+        }
+        else if (implementation.name !== tool.name) {
+            findings.push({
+                code: 'contract-name-mismatch',
+                file: implementation.file,
+                line: implementation.line,
+                column: implementation.column,
+                message: `Source name "${implementation.name ?? 'unknown'}" does not match contract name "${tool.name}" for "${tool.id}".`,
+                severity: 'error',
+            });
+        }
+    }
+    const contractIds = new Set(contract.tools.map((tool) => tool.id));
+    const contractDeclarativeNames = new Set(contract.tools.filter((tool) => tool.registration === 'declarative').map((tool) => tool.name));
+    for (const tool of source.tools) {
+        if (tool.owner === 'siteverb' && tool.id && !contractIds.has(tool.id)) {
+            findings.push({
+                code: 'source-tool-missing-contract',
+                file: tool.file,
+                line: tool.line,
+                column: tool.column,
+                message: `Source tool "${tool.id}" is missing from the portable contract.`,
+                severity: 'error',
+            });
+        }
+        if (tool.owner === 'declarative' && tool.name && !contractDeclarativeNames.has(tool.name)) {
+            findings.push({
+                code: 'source-tool-missing-contract',
+                file: tool.file,
+                line: tool.line,
+                column: tool.column,
+                message: `Declarative source tool "${tool.name}" is missing from the portable contract.`,
+                severity: 'error',
+            });
+        }
+    }
+    findings.sort((left, right) => `${left.file}:${left.line ?? 0}:${left.code}`.localeCompare(`${right.file}:${right.line ?? 0}:${right.code}`));
+    return {
+        version: 1,
+        root: '.',
+        contract: relativeContractPath,
+        summary: {
+            errors: findings.filter((finding) => finding.severity === 'error').length,
+            warnings: findings.filter((finding) => finding.severity === 'warning').length,
+            filesScanned: source.filesScanned,
+            sourceTools: source.tools.length,
+            contractTools: contract.tools.length,
+        },
+        tools: source.tools,
+        findings,
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,SAAS,iBAAiB,CAAC,KAA4B;IACrD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,CAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,QAAQ,EAAE,CAAC;gBACb,IACE,KAAK,KAAK,MAAM;oBAChB,QAAQ,CAAC,KAAK,KAAK,aAAa;oBAChC,IAAI,CAAC,KAAK,KAAK,aAAa;oBAC5B,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAC3B,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB;oBACpE,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO,EAAE,yBAAyB,KAAK,KAAK,KAAK,IAAI;oBACrD,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC1D,IACE,oBAAoB,KAAK,IAAI;QAC7B,oBAAoB,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACjF,UAAU,CAAC,oBAAoB,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG;QACf,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACjC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,+BAA+B;YACxE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAgB,EAAE;YAC5C,CAAC,CAAC,OAAO,CACZ;QACD,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC;KACnC,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAY,EAAE,IAAI,CAAC,CAAC,CAChF,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YACxC,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CACzC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,aAAa,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CACjF,CAAC;YACF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,8BAA8B;oBACpC,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,8BAA8B,IAAI,CAAC,EAAE,kCAAkC;oBAChF,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;gBAC7C,IAAI,cAAc,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3D,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,+BAA+B;wBACrC,IAAI,EAAE,cAAc,CAAC,IAAI;wBACzB,IAAI,EAAE,cAAc,CAAC,IAAI;wBACzB,MAAM,EAAE,cAAc,CAAC,MAAM;wBAC7B,OAAO,EAAE,oCAAoC,IAAI,CAAC,EAAE,8BAA8B;wBAClF,QAAQ,EAAE,OAAO;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,kBAAkB,IAAI,CAAC,EAAE,gDAAgD;gBAClF,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,cAAc,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,OAAO,EAAE,gBAAgB,cAAc,CAAC,IAAI,IAAI,SAAS,mCAAmC,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,IAAI;gBAC1H,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,wBAAwB,GAAG,IAAI,GAAG,CACtC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9F,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,gBAAgB,IAAI,CAAC,EAAE,0CAA0C;gBAC1E,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1F,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,4BAA4B,IAAI,CAAC,IAAI,0CAA0C;gBACxF,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5B,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,CACzD,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CACjD,CACF,CAAC;IACF,OAAO;QACL,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,oBAAoB;QAC9B,OAAO,EAAE;YACP,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM;YACzE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;YAC7E,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAChC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;SACrC;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+import { mkdir, writeFile } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { parseArgs } from 'node:util';
+import { auditProject } from './audit.js';
+const HELP = `Usage: siteverb-audit [options]
+
+Options:
+  --root <path>       Project root (default: current directory)
+  --contract <path>   Contract relative to root (default: siteverb.webmcp.json)
+  --output <path>     Optional JSON report path relative to root
+  --strict-external   Treat known third-party registration runtimes as errors
+  --help              Show this message
+`;
+const { values } = parseArgs({
+    options: {
+        root: { type: 'string', default: '.' },
+        contract: { type: 'string', default: 'siteverb.webmcp.json' },
+        output: { type: 'string' },
+        'strict-external': { type: 'boolean', default: false },
+        help: { type: 'boolean', short: 'h', default: false },
+    },
+    strict: true,
+});
+if (values.help) {
+    process.stdout.write(HELP);
+    process.exit(0);
+}
+try {
+    const root = resolve(values.root);
+    const report = await auditProject({
+        root,
+        contractPath: values.contract,
+        strictExternal: values['strict-external'],
+    });
+    for (const finding of report.findings) {
+        const location = finding.line ? `:${finding.line}:${finding.column ?? 1}` : '';
+        process.stdout.write(`${finding.severity.toUpperCase()} ${finding.code} ${finding.file}${location} ${finding.message}\n`);
+    }
+    process.stdout.write(`Siteverb audit: ${report.summary.errors} errors, ${report.summary.warnings} warnings, ${report.summary.sourceTools}/${report.summary.contractTools} source/contract tools\n`);
+    if (values.output) {
+        const output = resolve(root, values.output);
+        await mkdir(dirname(output), { recursive: true });
+        await writeFile(output, `${JSON.stringify(report, null, 2)}\n`);
+    }
+    process.exitCode = report.summary.errors > 0 ? 1 : 0;
+}
+catch (error) {
+    process.stderr.write(`Siteverb audit failed: ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exitCode = 2;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,IAAI,GAAG;;;;;;;;CAQZ,CAAC;AAEF,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE;QACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE;QAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QACtD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;KACtD;IACD,MAAM,EAAE,IAAI;CACb,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,IAAI;QACJ,YAAY,EAAE,MAAM,CAAC,QAAQ;QAC7B,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC;KAC1C,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,GAAG,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mBAAmB,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,cAAc,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,0BAA0B,CAC9K,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACrF,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { auditProject } from './audit.js';
+export { scanProjectSources } from './source-scan.js';
+export type { AuditFinding, AuditFindingCode, AuditProjectOptions, AuditReport, SourceTool, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { auditProject } from './audit.js';
+export { scanProjectSources } from './source-scan.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/source-scan.d.ts

@@ -0,0 +1,9 @@
+import type { AuditFinding, SourceTool } from './types.js';
+interface ScanResult {
+    filesScanned: number;
+    readonly findings: AuditFinding[];
+    readonly tools: SourceTool[];
+}
+export declare function scanProjectSources(root: string, limit?: number): Promise<ScanResult>;
+export {};
+//# sourceMappingURL=source-scan.d.ts.map

package/dist/source-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-scan.d.ts","sourceRoot":"","sources":["../src/source-scan.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAyB3D,UAAU,UAAU;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;CAC9B;AA6dD,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAc1F"}

package/dist/source-scan.js

@@ -0,0 +1,477 @@
+import { readFile, readdir } from 'node:fs/promises';
+import { relative, resolve } from 'node:path';
+import { parse as parseJavaScript } from '@babel/parser';
+import { parse } from 'parse5';
+const ignoredDirectories = new Set([
+    '.git',
+    '.next',
+    '.output',
+    '.siteverb',
+    '.svelte-kit',
+    'coverage',
+    'dist',
+    'node_modules',
+]);
+const sourceExtension = /\.(?:[cm]?[jt]sx?)$/i;
+const htmlExtension = /\.(?:html?|astro)$/i;
+const componentExtension = /\.(?:vue|svelte)$/i;
+const externalRuntimes = new Set([
+    '@nekuda/webmcp-sdk',
+    '@nekuda/webmcp',
+    '@agentlane/webmcp',
+    'usewebmcp',
+    'use-webmcp-tool',
+    '@mcp-b/react-webmcp',
+    '@mcp-b/webmcp-ts-sdk',
+]);
+function location(node, lineOffset = 0) {
+    return {
+        line: (node.loc?.start.line ?? 1) + lineOffset,
+        column: (node.loc?.start.column ?? 0) + 1,
+    };
+}
+function literalProperty(object, name) {
+    const property = object.properties.find((candidate) => candidate.type === 'ObjectProperty' &&
+        ((candidate.key.type === 'Identifier' && candidate.key.name === name) ||
+            (candidate.key.type === 'StringLiteral' && candidate.key.value === name)));
+    return property?.type === 'ObjectProperty' && property.value.type === 'StringLiteral'
+        ? property.value.value
+        : undefined;
+}
+function propertyValue(object, name) {
+    const property = object.properties.find((candidate) => candidate.type === 'ObjectProperty' &&
+        ((candidate.key.type === 'Identifier' && candidate.key.name === name) ||
+            (candidate.key.type === 'StringLiteral' && candidate.key.value === name)));
+    return property?.type === 'ObjectProperty' ? property.value : undefined;
+}
+function callName(call) {
+    return call.callee.type === 'Identifier' ? call.callee.name : undefined;
+}
+function memberPath(node) {
+    if (!node)
+        return undefined;
+    if (node.type === 'Identifier')
+        return node.name;
+    if (node.type !== 'MemberExpression' && node.type !== 'OptionalMemberExpression')
+        return undefined;
+    const object = memberPath(node.object);
+    const property = !node.computed && node.property.type === 'Identifier'
+        ? node.property.name
+        : node.computed && node.property.type === 'StringLiteral'
+            ? node.property.value
+            : undefined;
+    return object && property ? `${object}.${property}` : undefined;
+}
+function walk(node, visit) {
+    visit(node);
+    for (const value of Object.values(node)) {
+        if (Array.isArray(value)) {
+            for (const entry of value) {
+                if (entry && typeof entry === 'object' && typeof entry.type === 'string') {
+                    walk(entry, visit);
+                }
+            }
+        }
+        else if (value && typeof value === 'object' && typeof value.type === 'string') {
+            walk(value, visit);
+        }
+    }
+}
+function isExternalRuntime(moduleName) {
+    return externalRuntimes.has(moduleName) || moduleName.startsWith('@mcp-b/');
+}
+function isExternalRuntimeReference(reference) {
+    return /(?:@mcp-b\/|@nekuda\/webmcp|@agentlane\/webmcp|usewebmcp|(?:^|\/)latch(?:@|\/|\.|$))/i.test(reference);
+}
+function unwrapExpression(node) {
+    if (!node)
+        return undefined;
+    if (node.type === 'TSAsExpression' ||
+        node.type === 'TSSatisfiesExpression' ||
+        node.type === 'TypeCastExpression' ||
+        node.type === 'TSNonNullExpression' ||
+        node.type === 'ParenthesizedExpression') {
+        return unwrapExpression(node.expression);
+    }
+    return node;
+}
+function returnedExpression(node) {
+    if (node.type === 'ArrowFunctionExpression' && node.body.type !== 'BlockStatement') {
+        return unwrapExpression(node.body);
+    }
+    const body = node.type === 'FunctionDeclaration' ||
+        node.type === 'FunctionExpression' ||
+        node.type === 'ArrowFunctionExpression'
+        ? node.body
+        : undefined;
+    if (!body || body.type !== 'BlockStatement')
+        return undefined;
+    const returns = body.body.filter((statement) => statement.type === 'ReturnStatement');
+    return returns.length === 1 ? unwrapExpression(returns[0]?.argument) : undefined;
+}
+function scanSource(path, root, sourceText, lineOffset = 0) {
+    const file = relative(root, path);
+    const findings = [];
+    const tools = [];
+    let source;
+    try {
+        source = parseJavaScript(sourceText, {
+            sourceType: 'unambiguous',
+            sourceFilename: path,
+            plugins: ['jsx', 'typescript', 'decorators-legacy', 'importAttributes'],
+        });
+    }
+    catch {
+        return {
+            filesScanned: 1,
+            findings: [
+                {
+                    code: 'source-parse-failed',
+                    file,
+                    line: lineOffset + 1,
+                    message: 'Source could not be parsed for static WebMCP ownership coverage.',
+                    severity: 'warning',
+                },
+            ],
+            tools,
+        };
+    }
+    const toolDefinitionFunctions = new Set();
+    const siteverbClientFactories = new Set();
+    const siteverbNamespaces = new Set();
+    for (const statement of source.program.body) {
+        if (statement.type !== 'ImportDeclaration')
+            continue;
+        const moduleName = statement.source.value;
+        if (isExternalRuntime(moduleName)) {
+            findings.push({
+                code: 'external-registration-runtime',
+                file,
+                ...location(statement, lineOffset),
+                message: `External WebMCP registration runtime "${moduleName}" requires an explicit coexistence or migration decision.`,
+                severity: 'warning',
+            });
+        }
+        if (moduleName !== '@siteverb/webmcp' && moduleName !== '@siteverb/react')
+            continue;
+        for (const specifier of statement.specifiers) {
+            if (specifier.type === 'ImportNamespaceSpecifier') {
+                siteverbNamespaces.add(specifier.local.name);
+                continue;
+            }
+            if (specifier.type !== 'ImportSpecifier')
+                continue;
+            const imported = specifier.imported.type === 'Identifier'
+                ? specifier.imported.name
+                : specifier.imported.value;
+            if (imported === 'defineTool' ||
+                imported === 'useSiteverbTool' ||
+                imported === 'useSiteverbTools') {
+                toolDefinitionFunctions.add(specifier.local.name);
+            }
+            if (moduleName === '@siteverb/webmcp' && imported === 'createSiteverb') {
+                siteverbClientFactories.add(specifier.local.name);
+            }
+        }
+    }
+    const staticValues = new Map();
+    const staticFactories = new Map();
+    const siteverbClients = new Set();
+    const addedToolObjects = new Set();
+    const isSiteverbFactory = (call) => {
+        const name = callName(call);
+        const path = memberPath(call.callee);
+        return Boolean((name && siteverbClientFactories.has(name)) ||
+            (path && [...siteverbNamespaces].some((namespace) => path === `${namespace}.createSiteverb`)));
+    };
+    const isToolDefinitionCall = (call) => {
+        const name = callName(call);
+        const path = memberPath(call.callee);
+        return Boolean((name && toolDefinitionFunctions.has(name)) ||
+            (path &&
+                [...siteverbNamespaces].some((namespace) => path === `${namespace}.defineTool` || path === `${namespace}.useSiteverbTool`)));
+    };
+    walk(source.program, (node) => {
+        if (node.type === 'VariableDeclarator' && node.id.type === 'Identifier' && node.init) {
+            staticValues.set(node.id.name, node.init);
+            if (node.init.type === 'CallExpression' && isSiteverbFactory(node.init)) {
+                siteverbClients.add(node.id.name);
+            }
+            if (node.init.type === 'FunctionExpression' || node.init.type === 'ArrowFunctionExpression') {
+                staticFactories.set(node.id.name, node.init);
+            }
+        }
+        if (node.type === 'FunctionDeclaration' && node.id) {
+            staticFactories.set(node.id.name, node);
+        }
+    });
+    const resolveToolObjects = (node, seen = new Set()) => {
+        const value = unwrapExpression(node);
+        if (!value)
+            return [];
+        if (value.type === 'ObjectExpression')
+            return [value];
+        if (value.type === 'ArrayExpression') {
+            return value.elements.flatMap((element) => element && element.type !== 'SpreadElement'
+                ? resolveToolObjects(element, new Set(seen))
+                : []);
+        }
+        if (value.type === 'Identifier') {
+            if (seen.has(value.name))
+                return [];
+            seen.add(value.name);
+            return resolveToolObjects(staticValues.get(value.name), seen);
+        }
+        if (value.type === 'CallExpression') {
+            if (isToolDefinitionCall(value)) {
+                const first = value.arguments[0];
+                return first && first.type !== 'SpreadElement' ? resolveToolObjects(first, seen) : [];
+            }
+            const factoryName = callName(value);
+            if (!factoryName || seen.has(factoryName))
+                return [];
+            const factory = staticFactories.get(factoryName);
+            if (!factory)
+                return [];
+            seen.add(factoryName);
+            return resolveToolObjects(returnedExpression(factory), seen);
+        }
+        return [];
+    };
+    const addTool = (object) => {
+        if (addedToolObjects.has(object))
+            return;
+        addedToolObjects.add(object);
+        const position = location(object, lineOffset);
+        const id = literalProperty(object, 'id');
+        const wireName = literalProperty(object, 'name');
+        tools.push({
+            file,
+            ...position,
+            ...(id ? { id } : {}),
+            ...(wireName ? { name: wireName } : {}),
+            owner: 'siteverb',
+        });
+        if (!id || !wireName) {
+            findings.push({
+                code: 'dynamic-tool-metadata',
+                file,
+                ...position,
+                message: 'Siteverb tool id and name must be static string literals for source coverage.',
+                severity: 'warning',
+            });
+        }
+    };
+    const staticObject = (node) => {
+        const value = unwrapExpression(node);
+        if (!value)
+            return undefined;
+        if (value.type === 'ObjectExpression')
+            return value;
+        if (value.type !== 'Identifier')
+            return undefined;
+        const resolved = unwrapExpression(staticValues.get(value.name));
+        return resolved?.type === 'ObjectExpression' ? resolved : undefined;
+    };
+    const isSafeExposureOrigin = (value) => {
+        try {
+            const url = new URL(value);
+            const isLoopback = url.hostname === 'localhost' || url.hostname === '127.0.0.1' || url.hostname === '[::1]';
+            return (url.origin === value &&
+                (url.protocol === 'https:' || (url.protocol === 'http:' && isLoopback)));
+        }
+        catch {
+            return false;
+        }
+    };
+    const inspectExposure = (call) => {
+        const optionsArgument = call.arguments[1];
+        const options = optionsArgument && optionsArgument.type !== 'SpreadElement'
+            ? staticObject(optionsArgument)
+            : undefined;
+        if (!options) {
+            if (optionsArgument) {
+                findings.push({
+                    code: 'dynamic-origin-exposure',
+                    file,
+                    ...location(call, lineOffset),
+                    message: 'Dynamic Siteverb registration options require manual exposedTo review.',
+                    severity: 'warning',
+                });
+            }
+            return;
+        }
+        const exposedTo = propertyValue(options, 'exposedTo');
+        if (!exposedTo)
+            return;
+        const resolved = unwrapExpression(exposedTo.type === 'Identifier' ? staticValues.get(exposedTo.name) : exposedTo);
+        if (resolved?.type !== 'ArrayExpression' ||
+            resolved.elements.some((element) => element?.type !== 'StringLiteral')) {
+            findings.push({
+                code: 'dynamic-origin-exposure',
+                file,
+                ...location(exposedTo, lineOffset),
+                message: 'Siteverb exposedTo must use reviewed static origin literals for source coverage.',
+                severity: 'warning',
+            });
+            return;
+        }
+        for (const element of resolved.elements) {
+            if (element?.type !== 'StringLiteral' || isSafeExposureOrigin(element.value))
+                continue;
+            findings.push({
+                code: 'unsafe-origin-exposure',
+                file,
+                ...location(element, lineOffset),
+                message: `Siteverb exposedTo value "${element.value}" is not an exact secure origin.`,
+                severity: 'error',
+            });
+        }
+    };
+    walk(source.program, (node) => {
+        if (node.type !== 'CallExpression')
+            return;
+        const calleePath = memberPath(node.callee);
+        if (calleePath && /^(?:document|navigator)\.modelContext\.registerTool$/.test(calleePath)) {
+            findings.push({
+                code: 'raw-native-registration',
+                file,
+                ...location(node, lineOffset),
+                message: 'Raw native registration bypasses Siteverb callback coverage.',
+                severity: 'error',
+            });
+        }
+        if (isToolDefinitionCall(node)) {
+            const first = node.arguments[0];
+            const position = location(node, lineOffset);
+            const objects = first && first.type !== 'SpreadElement' ? resolveToolObjects(first) : [];
+            if (objects.length === 0) {
+                findings.push({
+                    code: 'dynamic-tool-metadata',
+                    file,
+                    ...position,
+                    message: 'Siteverb tool definitions must resolve to static objects for source coverage.',
+                    severity: 'warning',
+                });
+                return;
+            }
+            objects.forEach(addTool);
+            inspectExposure(node);
+            return;
+        }
+        const registrationPath = memberPath(node.callee);
+        const registrationMethod = registrationPath?.split('.').at(-1);
+        const clientName = registrationPath?.split('.').at(-2);
+        const directFactoryClient = node.callee.type === 'MemberExpression' &&
+            node.callee.object.type === 'CallExpression' &&
+            isSiteverbFactory(node.callee.object);
+        if ((registrationMethod !== 'registerTool' && registrationMethod !== 'registerTools') ||
+            (!directFactoryClient && (!clientName || !siteverbClients.has(clientName)))) {
+            return;
+        }
+        const first = node.arguments[0];
+        const objects = first && first.type !== 'SpreadElement' ? resolveToolObjects(first) : [];
+        if (objects.length === 0) {
+            findings.push({
+                code: 'dynamic-tool-metadata',
+                file,
+                ...location(node, lineOffset),
+                message: 'Siteverb registrations must resolve to static tool objects for source coverage.',
+                severity: 'warning',
+            });
+            return;
+        }
+        objects.forEach(addTool);
+        inspectExposure(node);
+    });
+    return { filesScanned: 1, findings, tools };
+}
+function attribute(node, name) {
+    return node.attrs.find((candidate) => candidate.name === name)?.value;
+}
+function hasAttribute(node, name) {
+    return node.attrs.some((candidate) => candidate.name === name);
+}
+function scanMarkup(path, root, sourceText) {
+    const file = relative(root, path);
+    const tools = [];
+    const findings = [];
+    const document = parse(sourceText, { sourceCodeLocationInfo: true });
+    const visit = (node) => {
+        if ('tagName' in node && node.tagName === 'form') {
+            const name = attribute(node, 'toolname');
+            if (name) {
+                const start = node.sourceCodeLocation?.startTag;
+                tools.push({
+                    file,
+                    line: start?.startLine ?? 1,
+                    column: start?.startCol ?? 1,
+                    name,
+                    ...(hasAttribute(node, 'toolautosubmit') ? { autoSubmit: true } : {}),
+                    owner: 'declarative',
+                });
+            }
+        }
+        if ('tagName' in node && node.tagName === 'script') {
+            const sourceReference = attribute(node, 'src');
+            if (sourceReference && isExternalRuntimeReference(sourceReference)) {
+                const start = node.sourceCodeLocation?.startTag;
+                findings.push({
+                    code: 'external-registration-runtime',
+                    file,
+                    line: start?.startLine ?? 1,
+                    column: start?.startCol ?? 1,
+                    message: `External WebMCP registration runtime "${sourceReference}" requires an explicit coexistence or migration decision.`,
+                    severity: 'warning',
+                });
+            }
+            const type = attribute(node, 'type')?.toLowerCase();
+            if (!sourceReference && (!type || type === 'module' || /javascript|typescript/.test(type))) {
+                for (const child of node.childNodes) {
+                    if (!('value' in child) || !child.value.trim())
+                        continue;
+                    const scriptLocation = child.sourceCodeLocation;
+                    const scanned = scanSource(path, root, child.value, (scriptLocation?.startLine ?? 1) - 1);
+                    findings.push(...scanned.findings);
+                    tools.push(...scanned.tools);
+                }
+            }
+        }
+        if ('childNodes' in node)
+            node.childNodes.forEach(visit);
+    };
+    visit(document);
+    return { filesScanned: 1, findings, tools };
+}
+async function collectFiles(directory, output, limit) {
+    if (output.length >= limit)
+        throw new Error(`Source audit exceeded the ${limit}-file safety limit.`);
+    const entries = await readdir(directory, { withFileTypes: true });
+    for (const entry of entries) {
+        if (entry.isSymbolicLink() || ignoredDirectories.has(entry.name))
+            continue;
+        const path = resolve(directory, entry.name);
+        if (entry.isDirectory())
+            await collectFiles(path, output, limit);
+        else if (sourceExtension.test(entry.name) ||
+            htmlExtension.test(entry.name) ||
+            componentExtension.test(entry.name))
+            output.push(path);
+    }
+}
+export async function scanProjectSources(root, limit = 10_000) {
+    const paths = [];
+    await collectFiles(root, paths, limit);
+    const result = { filesScanned: 0, findings: [], tools: [] };
+    for (const path of paths) {
+        const source = await readFile(path, 'utf8');
+        const scanned = sourceExtension.test(path)
+            ? scanSource(path, root, source)
+            : scanMarkup(path, root, source);
+        result.filesScanned += scanned.filesScanned;
+        result.findings.push(...scanned.findings);
+        result.tools.push(...scanned.tools);
+    }
+    return result;
+}
+//# sourceMappingURL=source-scan.js.map

package/dist/source-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-scan.js","sourceRoot":"","sources":["../src/source-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,KAAK,IAAI,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzD,OAAO,EAAE,KAAK,EAA8B,MAAM,QAAQ,CAAC;AAG3D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,OAAO;IACP,SAAS;IACT,WAAW;IACX,aAAa;IACb,UAAU;IACV,MAAM;IACN,cAAc;CACf,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,oBAAoB;IACpB,gBAAgB;IAChB,mBAAmB;IACnB,WAAW;IACX,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;CACvB,CAAC,CAAC;AAQH,SAAS,QAAQ,CAAC,IAAU,EAAE,UAAU,GAAG,CAAC;IAC1C,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,UAAU;QAC9C,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAwB,EAAE,IAAY;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CACrC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,gBAAgB;QACnC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;YACnE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAC9E,CAAC;IACF,OAAO,QAAQ,EAAE,IAAI,KAAK,gBAAgB,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe;QACnF,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;QACtB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,MAAwB,EAAE,IAAY;IAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CACrC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,gBAAgB;QACnC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;YACnE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAC9E,CAAC;IACF,OAAO,QAAQ,EAAE,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAoB;IACpC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B;QAC9E,OAAO,SAAS,CAAC;IACnB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GACZ,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;QACnD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;QACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe;YACvD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK;YACrB,CAAC,CAAC,SAAS,CAAC;IAClB,OAAO,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,IAAU,EAAE,KAA2B;IACnD,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACzE,IAAI,CAAC,KAAa,EAAE,KAAK,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChF,IAAI,CAAC,KAAa,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB;IACnD,OAAO,uFAAuF,CAAC,IAAI,CACjG,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IACE,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAC9B,IAAI,CAAC,IAAI,KAAK,uBAAuB;QACrC,IAAI,CAAC,IAAI,KAAK,oBAAoB;QAClC,IAAI,CAAC,IAAI,KAAK,qBAAqB;QACnC,IAAI,CAAC,IAAI,KAAK,yBAAyB,EACvC,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU;IACpC,IAAI,IAAI,CAAC,IAAI,KAAK,yBAAyB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnF,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,KAAK,qBAAqB;QACnC,IAAI,CAAC,IAAI,KAAK,oBAAoB;QAClC,IAAI,CAAC,IAAI,KAAK,yBAAyB;QACrC,CAAC,CAAC,IAAI,CAAC,IAAI;QACX,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,UAAkB,EAAE,UAAU,GAAG,CAAC;IAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE;YACnC,UAAU,EAAE,aAAa;YACzB,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,YAAY,EAAE,CAAC;YACf,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,qBAAqB;oBAC3B,IAAI;oBACJ,IAAI,EAAE,UAAU,GAAG,CAAC;oBACpB,OAAO,EAAE,kEAAkE;oBAC3E,QAAQ,EAAE,SAAS;iBACpB;aACF;YACD,KAAK;SACN,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAClD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAClD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB;YAAE,SAAS;QACrD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;QAC1C,IAAI,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,+BAA+B;gBACrC,IAAI;gBACJ,GAAG,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;gBAClC,OAAO,EAAE,yCAAyC,UAAU,2DAA2D;gBACvH,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,iBAAiB;YAAE,SAAS;QACpF,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBAClD,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;gBAAE,SAAS;YACnD,MAAM,QAAQ,GACZ,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY;gBACtC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI;gBACzB,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC/B,IACE,QAAQ,KAAK,YAAY;gBACzB,QAAQ,KAAK,iBAAiB;gBAC9B,QAAQ,KAAK,kBAAkB,EAC/B,CAAC;gBACD,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,UAAU,KAAK,kBAAkB,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBACvE,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC7C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAgB,CAAC;IAChD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACrD,MAAM,iBAAiB,GAAG,CAAC,IAAoB,EAAW,EAAE;QAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,OAAO,CACZ,CAAC,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC,IAAI,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,SAAS,iBAAiB,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,CAAC,IAAoB,EAAW,EAAE;QAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,OAAO,CACZ,CAAC,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3C,CAAC,IAAI;gBACH,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAC1B,CAAC,SAAS,EAAE,EAAE,CACZ,IAAI,KAAK,GAAG,SAAS,aAAa,IAAI,IAAI,KAAK,GAAG,SAAS,kBAAkB,CAChF,CAAC,CACL,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrF,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBAC5F,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACnD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,CACzB,IAA6B,EAC7B,IAAI,GAAG,IAAI,GAAG,EAAU,EACJ,EAAE;QACtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe;gBACzC,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC,CAAC,EAAE,CACP,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACpC,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACjC,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtB,OAAO,kBAAkB,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,MAAwB,EAAQ,EAAE;QACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QACzC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,GAAG,QAAQ;YACX,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,IAAI;gBACJ,GAAG,QAAQ;gBACX,OAAO,EAAE,+EAA+E;gBACxF,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,IAA6B,EAAgC,EAAE;QACnF,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,OAAO,QAAQ,EAAE,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;YAC3F,OAAO,CACL,GAAG,CAAC,MAAM,KAAK,KAAK;gBACpB,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,CAAC,CACxE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,IAAoB,EAAQ,EAAE;QACrD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,OAAO,GACX,eAAe,IAAI,eAAe,CAAC,IAAI,KAAK,eAAe;YACzD,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC;YAC/B,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,eAAe,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,yBAAyB;oBAC/B,IAAI;oBACJ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;oBAC7B,OAAO,EAAE,wEAAwE;oBACjF,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/E,CAAC;QACF,IACE,QAAQ,EAAE,IAAI,KAAK,iBAAiB;YACpC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,KAAK,eAAe,CAAC,EACtE,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,IAAI;gBACJ,GAAG,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;gBAClC,OAAO,EAAE,kFAAkF;gBAC3F,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,OAAO,EAAE,IAAI,KAAK,eAAe,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YACvF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,wBAAwB;gBAC9B,IAAI;gBACJ,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;gBAChC,OAAO,EAAE,6BAA6B,OAAO,CAAC,KAAK,kCAAkC;gBACrF,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO;QAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,UAAU,IAAI,sDAAsD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1F,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,IAAI;gBACJ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;gBAC7B,OAAO,EAAE,8DAA8D;gBACvE,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,uBAAuB;oBAC7B,IAAI;oBACJ,GAAG,QAAQ;oBACX,OAAO,EAAE,+EAA+E;oBACxF,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzB,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,kBAAkB,GAAG,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,mBAAmB,GACvB,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB;YACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB;YAC5C,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IACE,CAAC,kBAAkB,KAAK,cAAc,IAAI,kBAAkB,KAAK,eAAe,CAAC;YACjF,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAC3E,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,IAAI;gBACJ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;gBAC7B,OAAO,EAAE,iFAAiF;gBAC1F,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzB,eAAe,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,IAAsC,EAAE,IAAY;IACrE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC;AACxE,CAAC;AAED,SAAS,YAAY,CAAC,IAAsC,EAAE,IAAY;IACxE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,UAAkB;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,IAAmC,EAAQ,EAAE;QAC1D,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACzC,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC;gBAChD,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI;oBACJ,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC;oBAC3B,MAAM,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC;oBAC5B,IAAI;oBACJ,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,KAAK,EAAE,aAAa;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnD,MAAM,eAAe,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,eAAe,IAAI,0BAA0B,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC;gBAChD,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,+BAA+B;oBACrC,IAAI;oBACJ,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC;oBAC3B,MAAM,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC;oBAC5B,OAAO,EAAE,yCAAyC,eAAe,2DAA2D;oBAC5H,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC3F,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;wBAAE,SAAS;oBACzD,MAAM,cAAc,GAAG,KAAK,CAAC,kBAAkB,CAAC;oBAChD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC1F,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,YAAY,IAAI,IAAI;YAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC;IACF,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChB,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAgB,EAAE,KAAa;IAC5E,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK;QACxB,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,qBAAqB,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;aAC5D,IACH,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAEnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAK,GAAG,MAAM;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,MAAM,GAAe,EAAE,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YACxC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;YAChC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,38 @@
+export type AuditFindingCode = 'contract-name-mismatch' | 'contract-tool-missing-source' | 'duplicate-stable-id' | 'duplicate-wire-name' | 'dynamic-origin-exposure' | 'dynamic-tool-metadata' | 'external-registration-runtime' | 'raw-native-registration' | 'source-parse-failed' | 'source-tool-missing-contract' | 'unsafe-declarative-autosubmit' | 'unsafe-origin-exposure';
+export interface AuditFinding {
+    readonly code: AuditFindingCode;
+    readonly column?: number;
+    readonly file: string;
+    readonly line?: number;
+    readonly message: string;
+    readonly severity: 'error' | 'warning';
+}
+export interface SourceTool {
+    readonly autoSubmit?: boolean;
+    readonly column: number;
+    readonly file: string;
+    readonly id?: string;
+    readonly line: number;
+    readonly name?: string;
+    readonly owner: 'siteverb' | 'declarative';
+}
+export interface AuditReport {
+    readonly version: 1;
+    readonly root: string;
+    readonly contract: string;
+    readonly summary: {
+        readonly errors: number;
+        readonly warnings: number;
+        readonly filesScanned: number;
+        readonly sourceTools: number;
+        readonly contractTools: number;
+    };
+    readonly tools: readonly SourceTool[];
+    readonly findings: readonly AuditFinding[];
+}
+export interface AuditProjectOptions {
+    readonly contractPath: string;
+    readonly root: string;
+    readonly strictExternal?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,qBAAqB,GACrB,qBAAqB,GACrB,yBAAyB,GACzB,uBAAuB,GACvB,+BAA+B,GAC/B,yBAAyB,GACzB,qBAAqB,GACrB,8BAA8B,GAC9B,+BAA+B,GAC/B,wBAAwB,CAAC;AAE7B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,aAAa,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@siteverb/audit",
+  "version": "0.1.0-rc.0",
+  "description": "Static coverage audit for Siteverb and WebMCP registration paths.",
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "bin": {
+    "siteverb-audit": "dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "package:check": "publint && attw --pack . --profile esm-only",
+    "test": "vitest run",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "keywords": [
+    "webmcp",
+    "static-analysis",
+    "typescript",
+    "ci"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/siteverb/siteverb.git",
+    "directory": "packages/audit"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "dependencies": {
+    "@siteverb/contracts": "^0.1.0-rc.0",
+    "@babel/parser": "^7.28.4",
+    "@babel/types": "^7.28.4",
+    "parse5": "^8.0.0"
+  }
+}