{"actions":{"bootstrapAndRun":{"effect":"installs rote if missing, inspects, prepares, and asks before running","href":"https://play.modiqo.ai/install?play=lgoyal6/sourcemap-exposure@0.1.0","method":"GET","rel":"https://rote.dev/rels/bootstrap-and-run","requiresConsent":true,"responseMediaType":"text/x-shellscript"},"inspect":{"command":"rote play inspect https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0","effect":"read-only"},"installCliOnly":{"effect":"installs the rote CLI, nothing else","href":"https://play.modiqo.ai/install","method":"GET","rel":"https://rote.dev/rels/install-cli","requiresConsent":true,"responseMediaType":"text/x-shellscript"},"run":{"command":"rote play run https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0","effect":"executes the play locally after consent","headless":{"approvalAssertion":"--yes","approvalRequiredBeforeInvocation":true,"commandTemplate":"rote play run https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0 <name=value...> --yes","stdinPolicy":"never pipe input to automate the interactive Ready selector"},"requiresConsent":true}},"description":"Finds production build output that hands the public your original source. Grades by reach and by content instead of counting *.map files. A map in .next/static is served to every visitor, a map in .next/server ships inside the image but no browser can fetch it, and a map under .next/dev or .next/cache was written by the dev server and never published at all. Content then decides severity, because a map carrying sourcesContent for your own code is full source disclosure, the same map carrying only node_modules source leaks bundle shape, and a map with relative sources and no content leaks a file tree and nothing more. Reads index maps through their sections, so a turbopack map with an empty top-level sources array is still graded on what its sections carry. Follows every sourceMappingURL comment and separates a reference whose target is shipped from a broken one that 404s, and decodes data URI maps that travel inside the bundle where there is no separate file to delete. Also reads the build config that decides","distribution":{"digest":"sha256:f48b2e45ceb8717c240f34abf9ba90db29b252bc744e5e693bbb893df29d8718","mediaType":"application/vnd.modiqo.rote-flow","size":23487,"verifiedBy":"rote verifies the downloaded archive against this digest before it runs"},"effects":{"credentialsProvidedBy":"runner","credentialsRemainLocal":true,"declaredWrites":[],"publisherReceivesCredentials":false},"id":"https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0","inputPolicy":{"optionalWithDefault":"show_default_and_accept_override","optionalWithoutDefault":"omit_unless_supplied","required":"ask","secrets":"collect_locally_outside_conversation"},"links":{"docs":"https://rote.dev","page":"https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0","protocol":"https://play.modiqo.ai/.well-known/rote","self":"https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0.json"},"name":"sourcemap-exposure","owner":{"kind":"user","slug":"lgoyal6"},"parameters":[{"description":"Directory to search for projects with build output","example":".","input":{"allowCustom":true,"choices":[],"label":"Root"},"name":"root","required":true,"type":"string"},{"default":"4","description":"How many directory levels below root to search for package.json","example":"3","input":{"allowCustom":true,"choices":[],"label":"Depth"},"name":"depth","required":false,"type":"string"},{"default":"false","description":"Also list the maps that are never published (dev server, build cache, node_modules, server-only stubs) instead of only counting them","example":"true","input":{"allowCustom":true,"choices":[],"label":"Include not shipped"},"name":"include_not_shipped","required":false,"type":"string"}],"preparation":[{"action":{"command":"rote play inspect https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0 --json","effect":"read-only"},"step":1,"type":"inspect_local_readiness"},{"references":["/parameters"],"step":2,"type":"collect_parameters"},{"references":["/parameters","/requirements","/effects"],"step":3,"type":"review"},{"consentBoundary":"the user approves the exact play and parameter values","references":["/parameters","/requirements","/effects"],"step":4,"type":"obtain_run_consent"},{"action":{"command":"rote play run https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0","headlessCommandTemplate":"rote play run https://play.modiqo.ai/lgoyal6/sourcemap-exposure@0.1.0 <name=value...> --yes"},"preservesAcquisitionBoundaries":["adapter_selection","oauth_dcr","google_discovery","static_token_setup","runtime_security_checks"],"requiresConsent":true,"step":5,"type":"run"}],"producedBy":{"roteVersion":"0.78.0"},"publishedAt":"2026-09-03T00:47:45.102045+00:00","reference":"lgoyal6/sourcemap-exposure@0.1.0","requirements":{"adapters":[],"browser":{"dependencies":[],"runtime":false,"signIn":false},"localTools":["python3","bash","find","sort","mktemp","rm","wc","tr","dirname"],"roteCli":{"minimumVersion":"0.62.0"},"sessions":false},"resolution":"pinned","schema":"rote.play.v1","stats":{"downloads":1,"installs":0},"steps":{"count":2,"names":["analyze","discover"]},"title":"sourcemap-exposure","type":"play","version":"0.1.0","visibility":"public"}