@x12i/map-store-client 0.1.3 → 0.1.5

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,qCAAqC,EACrC,UAAU,EACV,kCAAkC,EAClC,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,mBAAmB,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,qCAAqC,EACrC,UAAU,EACV,kCAAkC,EAClC,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,4BAA4B,EAC5B,4BAA4B,EAC5B,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,mBAAmB,SAAS,CAAC"}

package/dist/index.js

@@ -11,5 +11,6 @@ export { fetchObjectSecurityContext, normalizeObjectSecurityContext, } from './o
 export { fetchInvestigationPackets, fetchInvestigationPacket, parsePacketIndex, } from './packets';
 export { ALL_BROWSEABLE_WORKING_PRODUCTS, ON_DEMAND_WORKING_PRODUCTS, browseableProduct, } from './products';
 export { BAG_PRODUCTS, SERVING_OBJECT_TYPE, DISALLOWED_SECURITY_MAP_CONTENT_TYPES, bagProduct, isDisallowedSecurityMapContentType, memorixRecordId, mapStoreWorkingPath, } from './bagCatalog';
+export { queryFindings, parseFindingSignal, fetchVulnerabilitiesBriefing, parseVulnerabilitiesBriefing, parseRelevantCritical, briefingDescriptionLine, cveRelevantCriticals, VENDOR_NO_DESCRIPTION, } from './queries';
 export { fetchAttackSurfacesIndex, fetchAttackSurfaceDossier, fetchVpnSitesIndex, fetchVpnSiteDossier, fetchAttackCasePacketsIndex, fetchAttackCasePacket, readEntrySurfaces, recordRefToRoute, defaultEpistemicChrome, parseEpistemicBuckets, } from './attackSurfaces';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,qCAAqC,EACrC,UAAU,EACV,kCAAkC,EAClC,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EACL,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,qCAAqC,EACrC,UAAU,EACV,kCAAkC,EAClC,eAAe,EACf,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,4BAA4B,EAC5B,4BAA4B,EAC5B,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AAUnB,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC"}

package/dist/queries.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The two map-store routes that are POST queries rather than working products.
+ * Both pin the session pair from `fetchBootstrap` and read the open vulnerability set.
+ * Descriptions come from the vendor feed the station stored. Nothing here invents text.
+ */
+export type DescriptionStatus = 'AVAILABLE' | 'VENDOR_NOT_PROVIDED';
+/**
+ * Scanner fields for one open finding.
+ * Severity and CVSS come from the scanner. KEV and EPSS are the land stamp.
+ * A missing field stays null.
+ */
+export type FindingSignal = {
+    id: string | null;
+    cveId: string | null;
+    severity: string | null;
+    cvssScore: number | null;
+    kevListed: boolean | null;
+    epss: number | null;
+    exprtRating: string | null;
+    description: string | null;
+    descriptionStatus: DescriptionStatus | null;
+};
+export declare function parseFindingSignal(row: unknown): FindingSignal | null;
+export type FindingsQueryInput = {
+    snapshotSetId: string;
+    analysisSnapshotId?: string | null;
+    /** Defaults to `tgi`. */
+    tenantId?: string;
+    signal?: AbortSignal;
+    /** Defaults to 200. */
+    limit?: number;
+};
+/**
+ * `POST /map-store/v1/tenants/{tenant}/findings:query`.
+ * Open vulnerability findings for the pinned pair. The vulnerability catalog joins
+ * these onto the walked `findings-query` rows by finding id and by CVE id.
+ */
+export declare function queryFindings(input: FindingsQueryInput): Promise<FindingSignal[]>;
+export type BriefingGap = {
+    id: string;
+    kind: string | null;
+    message: string | null;
+    count: number | null;
+};
+export type RelevantCritical = {
+    uniqueRiskKey: string | null;
+    riskId: string | null;
+    kind: 'cve' | 'cwe' | 'check' | string;
+    cveId: string | null;
+    title: string | null;
+    description: string | null;
+    descriptionStatus: DescriptionStatus | null;
+    hostCount: number;
+    findingCount: number | null;
+    cvssScore: number | null;
+    exprtRating: string | null;
+    kevListed: boolean | null;
+    exploitAvailable: boolean | null;
+    cisaKev: boolean | null;
+};
+export type VulnerabilitiesBriefing = {
+    snapshotSetId: string | null;
+    relevantCriticals: RelevantCritical[];
+    gaps: BriefingGap[];
+    /** True when gaps[] includes `gap:soes:cve-name-unavailable`. */
+    cveNameUnavailable: boolean;
+};
+export declare const VENDOR_NO_DESCRIPTION = "Vendor did not provide a description";
+export declare function parseRelevantCritical(row: unknown): RelevantCritical | null;
+export declare function parseVulnerabilitiesBriefing(payload: unknown): VulnerabilitiesBriefing;
+/**
+ * Caption for a CVE chip.
+ * AVAILABLE → description, then title. VENDOR_NOT_PROVIDED → the explicit vendor gap.
+ * No status → only text the row already carries.
+ */
+export declare function briefingDescriptionLine(row: {
+    description: string | null;
+    title: string | null;
+    descriptionStatus: DescriptionStatus | null;
+}): string | null;
+export type VulnerabilitiesBriefingInput = {
+    snapshotSetId: string;
+    analysisSnapshotId?: string | null;
+    /** Defaults to `tgi`. */
+    tenantId?: string;
+    /** Defaults to 10. */
+    relevantLimit?: number;
+    signal?: AbortSignal;
+};
+/**
+ * `POST /map-store/v1/tenants/{tenant}/vulnerabilities:briefing`.
+ * Ranked CVE hubs for the pinned pair. The CVE catalog paints these first,
+ * ahead of the walked `cve-catalog` and the bundled CVE text.
+ */
+export declare function fetchVulnerabilitiesBriefing(input: VulnerabilitiesBriefingInput): Promise<VulnerabilitiesBriefing>;
+/** CVE hubs only, ranked by host count. */
+export declare function cveRelevantCriticals(briefing: VulnerabilitiesBriefing | null, limit?: number): RelevantCritical[];
+//# sourceMappingURL=queries.d.ts.map

package/dist/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../src/queries.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,qBAAqB,CAAC;AAkCpE;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC7C,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAerE;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAevF;AAMD,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IACtC,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,iEAAiE;IACjE,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAGF,eAAO,MAAM,qBAAqB,yCAAyC,CAAC;AAU5E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CA0B3E;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,CAuBtF;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE;IAC3C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iBAAiB,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC7C,GAAG,MAAM,GAAG,IAAI,CAIhB;AAED,MAAM,MAAM,4BAA4B,GAAG;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,yBAAyB;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAWlC;AAED,2CAA2C;AAC3C,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,GAAG,IAAI,EACxC,KAAK,SAAI,GACR,gBAAgB,EAAE,CAMpB"}

package/dist/queries.js

@@ -0,0 +1,180 @@
+/**
+ * The two map-store routes that are POST queries rather than working products.
+ * Both pin the session pair from `fetchBootstrap` and read the open vulnerability set.
+ * Descriptions come from the vendor feed the station stored. Nothing here invents text.
+ */
+import { mapPost } from './fetch';
+import { asList, asRecord, firstString } from './util';
+const DEFAULT_TENANT = 'tgi';
+/** A CVE id wherever it is written, or null when the text names none. */
+function readLooseCve(value) {
+    if (typeof value === 'string') {
+        const match = value.match(/CVE-\d{4}-\d+/i);
+        return match ? match[0].toUpperCase() : null;
+    }
+    const rec = asRecord(value);
+    if (!rec)
+        return null;
+    return readLooseCve(rec.id ?? rec.cveId ?? rec.value ?? rec.cve);
+}
+function num(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value === 'string' && value.trim() && Number.isFinite(Number(value)))
+        return Number(value);
+    return null;
+}
+function bool(value) {
+    if (value === true || value === false)
+        return value;
+    return null;
+}
+function statusOf(value) {
+    const s = firstString(value)?.toUpperCase();
+    if (s === 'AVAILABLE' || s === 'VENDOR_NOT_PROVIDED')
+        return s;
+    return null;
+}
+export function parseFindingSignal(row) {
+    const rec = asRecord(row);
+    if (!rec)
+        return null;
+    const signals = asRecord(rec.globalSignals);
+    return {
+        id: firstString(rec.id, rec.findingId, rec.objectId) ?? null,
+        cveId: firstString(rec.cveId) ?? null,
+        severity: firstString(rec.severity, signals?.severity) ?? null,
+        cvssScore: num(rec.cvssScore ?? signals?.cvssScore ?? asRecord(signals?.cvss)?.baseScore),
+        kevListed: bool(rec.kevListed ?? rec.cisaKev ?? signals?.kevListed ?? signals?.cisaKev ?? signals?.kev),
+        epss: num(rec.epss ?? signals?.epss ?? asRecord(signals?.epss)?.score ?? signals?.epssScore),
+        exprtRating: firstString(rec.exprtRating) ?? null,
+        description: firstString(rec.description) ?? null,
+        descriptionStatus: statusOf(rec.descriptionStatus),
+    };
+}
+/**
+ * `POST /map-store/v1/tenants/{tenant}/findings:query`.
+ * Open vulnerability findings for the pinned pair. The vulnerability catalog joins
+ * these onto the walked `findings-query` rows by finding id and by CVE id.
+ */
+export async function queryFindings(input) {
+    const tenant = encodeURIComponent(input.tenantId ?? DEFAULT_TENANT);
+    const body = await mapPost(`/tenants/${tenant}/findings:query`, {
+        snapshotSetId: input.snapshotSetId,
+        ...(input.analysisSnapshotId ? { analysisSnapshotId: input.analysisSnapshotId } : {}),
+        status: 'open',
+        findingType: 'vulnerability',
+        format: 'json',
+        limit: input.limit ?? 200,
+    }, { signal: input.signal });
+    const rec = asRecord(body);
+    return asList(rec?.items ?? rec?.findings ?? rec?.records).flatMap((row) => {
+        const parsed = parseFindingSignal(row);
+        return parsed ? [parsed] : [];
+    });
+}
+const VENDOR_GAP = 'gap:soes:cve-name-unavailable';
+export const VENDOR_NO_DESCRIPTION = 'Vendor did not provide a description';
+function distinctFromId(text, cveId) {
+    if (!text)
+        return null;
+    const t = text.trim();
+    if (!t)
+        return null;
+    if (cveId && t.toUpperCase() === cveId.toUpperCase())
+        return null;
+    return t;
+}
+export function parseRelevantCritical(row) {
+    const rec = asRecord(row);
+    if (!rec)
+        return null;
+    const cveId = readLooseCve(rec.cveId ?? rec.cve) ??
+        readLooseCve(rec.riskId) ??
+        readLooseCve(rec.uniqueRiskKey);
+    const kindRaw = (firstString(rec.kind) ?? (cveId ? 'cve' : '')).toLowerCase();
+    const kind = kindRaw || (cveId ? 'cve' : 'unknown');
+    if (!cveId && kind === 'cve')
+        return null;
+    return {
+        uniqueRiskKey: firstString(rec.uniqueRiskKey) ?? null,
+        riskId: firstString(rec.riskId) ?? cveId,
+        kind,
+        cveId,
+        title: distinctFromId(firstString(rec.title) ?? null, cveId),
+        description: distinctFromId(firstString(rec.description) ?? null, cveId),
+        descriptionStatus: statusOf(rec.descriptionStatus),
+        hostCount: num(rec.hostCount) ?? 0,
+        findingCount: num(rec.findingCount),
+        cvssScore: num(rec.cvssScore),
+        exprtRating: firstString(rec.exprtRating, rec.vendorExploitRating) ?? null,
+        kevListed: bool(rec.kevListed),
+        exploitAvailable: bool(rec.exploitAvailable),
+        cisaKev: bool(rec.cisaKev),
+    };
+}
+export function parseVulnerabilitiesBriefing(payload) {
+    const top = asRecord(payload) ?? {};
+    const briefing = asRecord(top.briefing) ?? top;
+    const gaps = asList(briefing.gaps).flatMap((raw) => {
+        const rec = asRecord(raw);
+        if (!rec)
+            return [];
+        const id = firstString(rec.id) ?? '';
+        if (!id)
+            return [];
+        return [{
+                id,
+                kind: firstString(rec.kind) ?? null,
+                message: firstString(rec.message) ?? null,
+                count: num(rec.count),
+            }];
+    });
+    return {
+        snapshotSetId: firstString(briefing.snapshotSetId, top.snapshotSetId) ?? null,
+        relevantCriticals: asList(briefing.relevantCriticals)
+            .map(parseRelevantCritical)
+            .filter((row) => row != null),
+        gaps,
+        cveNameUnavailable: gaps.some((g) => g.id === VENDOR_GAP),
+    };
+}
+/**
+ * Caption for a CVE chip.
+ * AVAILABLE → description, then title. VENDOR_NOT_PROVIDED → the explicit vendor gap.
+ * No status → only text the row already carries.
+ */
+export function briefingDescriptionLine(row) {
+    if (row.descriptionStatus === 'VENDOR_NOT_PROVIDED')
+        return VENDOR_NO_DESCRIPTION;
+    if (row.descriptionStatus === 'AVAILABLE')
+        return row.description ?? row.title;
+    return row.description ?? row.title;
+}
+/**
+ * `POST /map-store/v1/tenants/{tenant}/vulnerabilities:briefing`.
+ * Ranked CVE hubs for the pinned pair. The CVE catalog paints these first,
+ * ahead of the walked `cve-catalog` and the bundled CVE text.
+ */
+export async function fetchVulnerabilitiesBriefing(input) {
+    const tenant = encodeURIComponent(input.tenantId ?? DEFAULT_TENANT);
+    const body = await mapPost(`/tenants/${tenant}/vulnerabilities:briefing`, {
+        snapshotSetId: input.snapshotSetId,
+        ...(input.analysisSnapshotId ? { analysisSnapshotId: input.analysisSnapshotId } : {}),
+        status: 'open',
+        findingType: 'vulnerability',
+        format: 'json',
+        relevantLimit: input.relevantLimit ?? 10,
+    }, { signal: input.signal });
+    return parseVulnerabilitiesBriefing(body);
+}
+/** CVE hubs only, ranked by host count. */
+export function cveRelevantCriticals(briefing, limit = 5) {
+    if (!briefing)
+        return [];
+    return briefing.relevantCriticals
+        .filter((row) => row.kind === 'cve' && row.cveId)
+        .sort((a, b) => b.hostCount - a.hostCount || (a.cveId ?? '').localeCompare(b.cveId ?? ''))
+        .slice(0, limit);
+}
+//# sourceMappingURL=queries.js.map

package/dist/queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.js","sourceRoot":"","sources":["../src/queries.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEvD,MAAM,cAAc,GAAG,KAAK,CAAC;AAI7B,yEAAyE;AACzE,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,YAAY,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,qBAAqB;QAAE,OAAO,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAuBD,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI;QAC5D,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI;QACrC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI;QAC9D,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC;QACzF,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,GAAG,CAAC;QACvG,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,OAAO,EAAE,SAAS,CAAC;QAC5F,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI;QACjD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI;QACjD,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;KACnD,CAAC;AACJ,CAAC;AAYD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,MAAM,iBAAiB,EAAE;QAC9D,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG;KAC1B,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAsCD,MAAM,UAAU,GAAG,+BAA+B,CAAC;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,sCAAsC,CAAC;AAE5E,SAAS,cAAc,CAAC,IAAmB,EAAE,KAAoB;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GACT,YAAY,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC;QAClC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;QACxB,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI;QACrD,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK;QACxC,IAAI;QACJ,KAAK;QACL,KAAK,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,KAAK,CAAC;QAC5D,WAAW,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,EAAE,KAAK,CAAC;QACxE,iBAAiB,EAAE,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClD,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QAClC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;QACnC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI;QAC1E,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACnB,OAAO,CAAC;gBACN,EAAE;gBACF,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;gBACnC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;gBACzC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;aACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI;QAC7E,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;aAClD,GAAG,CAAC,qBAAqB,CAAC;aAC1B,MAAM,CAAC,CAAC,GAAG,EAA2B,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC;QACxD,IAAI;QACJ,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAIvC;IACC,IAAI,GAAG,CAAC,iBAAiB,KAAK,qBAAqB;QAAE,OAAO,qBAAqB,CAAC;IAClF,IAAI,GAAG,CAAC,iBAAiB,KAAK,WAAW;QAAE,OAAO,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC;IAC/E,OAAO,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC;AACtC,CAAC;AAYD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,KAAmC;IAEnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,MAAM,2BAA2B,EAAE;QACxE,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,MAAM;QACd,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;KACzC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7B,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,oBAAoB,CAClC,QAAwC,EACxC,KAAK,GAAG,CAAC;IAET,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,OAAO,QAAQ,CAAC,iBAAiB;SAC9B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;SAChD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;SACzF,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@x12i/map-store-client",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "Browser HTTP client for map-store /map-store/v1 (Memorix estate via map-store only)",
   "type": "module",
   "license": "UNLICENSED",
@@ -43,6 +43,10 @@
       "types": "./dist/packets.d.ts",
       "import": "./dist/packets.js"
     },
+    "./estate": {
+      "types": "./dist/estate/index.d.ts",
+      "import": "./dist/estate/index.js"
+    },
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -53,8 +57,17 @@
     "node": ">=20"
   },
   "devDependencies": {
+    "@x12i/storyflowix": "1.2.0",
     "typescript": "~5.9.2"
   },
+  "peerDependencies": {
+    "@x12i/storyflowix": ">=1.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@x12i/storyflowix": {
+      "optional": true
+    }
+  },
   "publishConfig": {
     "access": "public"
   }