chore: ai support - #539

rg -n '"access": "public"|requester: Requester|principalId.*tenantId' deployment/segments development/common/security development/social/domain | head -110

set -e
cat -n deployment/segments/moderation.bff.json
echo '---create index---'
cat -n development/moderation/domain/report/create/index.ts
echo '---createRecord---'
cat -n development/moderation/domain/report/create/createRecord.ts
echo '---validate---'
cat -n development/moderation/domain/report/create/validate.ts
echo '---persist---'
cat -n development/moderation/domain/report/create/persist.ts
echo '---common security definitions---'
cat -n development/common/security/definitions.ts
echo '---moderation report definitions---'
cat -n development/moderation/domain/report/definitions.ts | head -60

set -e
ls deployment/services/production/ deployment/segments/ | head -80
echo '---moderation-app/bff services---'
cat -n deployment/services/production/bff.json
cat -n deployment/services/production/moderation-app.json
echo '---moderation.writes / errors segments---'
cat -n deployment/segments/moderation.writes.json
cat -n deployment/segments/moderation.errors.json
echo '---social bff segment (comparison)---'
cat -n deployment/segments/social.bff.json | head -12
echo '---security dir---'
rg --files development/common/security | head -50

set -e
cat -n development/common/security/index.ts
echo '---auth dir---'
rg --files development/common/integrations/authentication development/common/integrations/tenancy | head -60
echo '---authenticationMiddleware---'
cat -n development/common/integrations/authentication/authenticationMiddleware.ts 2>/dev/null || rg -n -F 'authenticationMiddleware' development/common/integrations | head -20
echo '---tenantMiddleware---'
cat -n development/common/integrations/tenancy/tenantMiddleware.ts 2>/dev/null || rg -n -F 'tenantMiddleware' development/common/integrations | head -20

set -e
echo '---requester references outside domain---'
rg -n -F --glob '*.ts' --glob '*.tsx' -e 'requester' -e 'Requester' development/common development/social/app development/moderation | head -80 || test "$?" -eq 1
echo '---package.json jitar deps---'
rg -n -F -e 'jitar' -e 'theshelf' package.json | head -30 || test "$?" -eq 1
echo '---moderation spec---'
cat -n testing/moderation/domain/report/create.spec.ts | head -80

set -e
ls node_modules/@jitar-plugins/authentication 2>/dev/null && ls node_modules/@jitar-plugins/authentication/dist 2>/dev/null | head -40 || echo 'NO_PLUGIN_DIR'
echo '---requesterMiddleware (repo)---'
cat -n development/common/integrations/authentication/requesterMiddleware.ts
echo '---MultiTenantMiddleware---'
cat -n development/common/integrations/tenancy/middleware/MultiTenantMiddleware.ts
echo '---plugin server files with requester---'
rg -n -F -e 'requester' node_modules/@jitar-plugins/authentication 2>/dev/null | head -60 || echo 'NO_MATCHES_OR_NO_PLUGIN'

set -e
mkdir -p /tmp/jp-auth && cd /tmp/jp-auth
npm pack @jitar-plugins/authentication@0.2.1 --silent 2>&1 | tail -3 || true
ls -la /tmp/jp-auth
tarball=$(ls /tmp/jp-auth/*.tgz 2>/dev/null | head -1)
if [ -n "$tarball" ]; then
  mkdir -p extracted && tar -xzf "$tarball" -C extracted
  find extracted -type f \( -name '*.js' -o -name '*.ts' -o -name '*.mjs' \) | head -60
  echo '---server middleware source---'
  for f in $(find extracted -type f \( -name 'AuthenticationMiddleware*.js' -o -name 'AuthenticationMiddleware*.ts' -o -name 'authenticationMiddleware*' \) | head -4); do
    echo "== $f"; cat -n "$f"
  done
  echo '---requester / setArgument references---'
  grep -rn -e 'setArgument' -e 'requester' extracted --include='*.js' --include='*.ts' | head -60 || true
else
  echo 'NO_TARBALL'
fi

set -e
echo '---jitar version in repo---'
rg -n -F -e '"jitar"' -e '"@jitar/' package.json | head -10 || test "$?" -eq 1
ver=$(node -e "const p=require('./package.json');console.log((p.dependencies&&p.dependencies.jitar)||(p.devDependencies&&p.devDependencies.jitar)||'')" 2>/dev/null || true)
echo "declared: $ver"
mkdir -p /tmp/jitar-pkg && cd /tmp/jitar-pkg
spec=$(echo "$ver" | sed 's/^[\^~]//')
[ -z "$spec" ] && spec=latest
npm pack "jitar@$spec" --silent 2>&1 | tail -2 || true
tgz=$(ls /tmp/jitar-pkg/*.tgz 2>/dev/null | head -1)
if [ -n "$tgz" ]; then
  mkdir -p x && tar -xzf "$tgz" -C x
  echo '---jitar optional-arg (*) handling---'
  grep -rn -e "'\*'" -e '"\*"' -e 'startsWith' -e 'optional' -e 'Optional' x/package/dist --include='*.js' | head -40 || true
else
  echo NO_TARBALL
fi

set -e
cd /tmp/jitar-pkg 2>/dev/null || { echo NO_PKG; exit 0; }
[ -d x/package/dist ] || { echo NO_DIST; exit 0; }
echo '---trust key references (bounded context)---'
grep -o -n -e '.\{0,220\}X-Jitar-Trust-Key.\{0,220\}' -e '.\{0,200\}trustKey.\{0,200\}' x/package/dist/*.js | head -20 || true
echo '---trust key comparison sites---'
grep -o -n -e '.\{0,160\}JITAR_TRUST.\{0,160\}' x/package/dist/*.js | head -10 || true

set -e
cd /tmp/jitar-pkg 2>/dev/null || { echo NO_PKG; exit 0; }
echo '---args deserialization / Map construction from body (bounded)---'
grep -o -n -e '.\{0,260\}X-Jitar-Data-Encoding.\{0,260\}' x/package/dist/*.js | head -6 || true
echo '---deserializeRequest / args map build---'
grep -o -n -e '.\{0,200\}new Map(Object.entries(.\{0,160\}' -e '.\{0,200\}deserializeArgs.\{0,200\}' x/package/dist/*.js | head -8 || true

sed -n '1,85p' development/social/app/components/common/components/RemoveOption.tsx; rg -n 'aria-label|type=.flag.|<ClickArea' development/social/app/components/common/components | head -70

rg -n '@maskingtech/designsystem' -g 'package.json' -g 'package-lock.json' -g 'pnpm-lock.yaml' -g 'yarn.lock' . || test "$?" -eq 1
echo '---node_modules---'
ls node_modules/@maskingtech 2>/dev/null || echo 'no node_modules in sandbox'
find / -path '*@maskingtech/designsystem*' -maxdepth 8 -not -path '*/proc/*' 2>/dev/null | head -20
echo '---search ClickArea/Icon source in repo---'
rg -n -F -e 'ClickArea' -e 'export function Icon' -e 'aria-label' --glob '!*.lock' -- development/ 2>/dev/null | head -60 || test "$?" -eq 1

set -e
mkdir -p /tmp/mtds && cd /tmp/mtds
curl -sSfL -o pkg.tgz https://registry.npmjs.org/@maskingtech/designsystem/-/designsystem-0.1.0.tgz && tar -xzf pkg.tgz
find package -type f \( -name '*.js' -o -name '*.mjs' -o -name '*.tsx' -o -name '*.ts' -o -name '*.jsx' -o -name '*.d.ts' \) | head -200
echo '--- ClickArea / Icon sources ---'
rg -n -i -e 'ClickArea' -e 'export.*Icon' -e 'function Icon' -- package || test "$?" -eq 1
echo '--- aria / title / label attrs ---'
rg -n -e 'aria-' -e 'aria[A-Z]' -e 'title' -e 'role=' -e 'role:' -- package || test "$?" -eq 1

cd /tmp/mtds || exit 1
echo '--- mtds.js grep (excluding CSS lines) ---'
rg -n -e 'clickarea' -e 'icon' -e 'aria' -e 'role' -e 'ClickArea' -e 'Icon' package/dist/mtds.js | cut -c1-300 || test "$?" -eq 1
echo '--- mtds.js lines 55-90 ---'
sed -n '55,90p' package/dist/mtds.js | cut -c1-400
echo '--- mtds.js lines 380-440 ---'
sed -n '380,440p' package/dist/mtds.js | cut -c1-400
echo '--- d.ts ClickArea / Icon declarations ---'
rg -n -e 'ClickArea' -e 'Icon' -e 'aria' -e 'role' -e 'Props_' package/dist/mtds.d.ts | cut -c1-300 || test "$?" -eq 1

cd /tmp/mtds || exit 1
echo '--- mtds.js 142-146 ---'
sed -n '142,146p' package/dist/mtds.js | cut -c1-300
echo '--- d.ts Props_12 and Props_6 ---'
rg -n -A4 -e 'declare type Props_12 = ' -e 'declare type Props_6 = ' package/dist/mtds.d.ts | cut -c1-200
cd /repo 2>/dev/null || cd "$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
echo '--- ReportOption usages ---'
rg -n -F -e 'ReportOption' -- development/social/app || test "$?" -eq 1
echo '--- ReportOption consumer context ---'
rg -n -F -B3 -A3 -e '<ReportOption' -- development/social/app || test "$?" -eq 1

ROOT="$(pwd)"
echo "root=$ROOT"
echo '--- ReportOption usages ---'
rg -n -F -e 'ReportOption' -- "$ROOT/development/social/app" || test "$?" -eq 1
echo '--- consumer context ---'
rg -n -F -B4 -A4 -e '<ReportOption' -- "$ROOT/development/social/app" || test "$?" -eq 1
echo '--- ClickArea in ReportOption and RemoveOption siblings for comparison ---'
rg -n -F -e 'aria-' -e 'role=' -e 'title=' -- "$ROOT/development/social/app/components/common/components" || test "$?" -eq 1

rg -n 'handleCancel|onCancel|navigate\(-1\)|type=.secondary.' development/social/app/components/post.report development/social/app/components/post | head -85

nl -ba development/social/app/components/post.report/components/Form.tsx | sed -n '1,60p'
echo '---'
nl -ba development/social/app/components/post.report/components/hooks/useReportHandler.ts | sed -n '1,40p'
echo '---'
nl -ba development/social/app/components/post/hooks/useReportPost.ts | sed -n '1,40p'
echo '---'
nl -ba development/social/app/components/post/Report.tsx | sed -n '1,30p'

rg -n 'navigate\(-1\)|useNavigate\(|path=.report.' development/social/app/components/post development/social/app/components/post.report | head -95

cd development/social/app/components/post && echo '== Routes.tsx ==' && cat -n Routes.tsx && echo '== Report.tsx ==' && cat -n Report.tsx && echo '== Remove.tsx ==' && cat -n Remove.tsx && echo '== hooks/useReportPost.ts ==' && cat -n hooks/useReportPost.ts && echo '== report links ==' && cd /tmp && cd - >/dev/null && rg -n -F --glob '*.tsx' --glob '*.ts' -e '/report' -e "'report'" -e '"report"' -e 'report`' -- development/social/app || test "$?" -eq 1

rg -n -F --glob '*.tsx' --glob '*.ts' -e '/report' -e "'report'" -e '"report"' -e 'report`' -e 'Outlet' -- development/social/app || test "$?" -eq 1
echo '== Details.tsx =='; cat -n development/social/app/components/post/Details.tsx
echo '== DetailsPanel.tsx =='; cat -n development/social/app/components/post/components/DetailsPanel.tsx
echo '== Highlight.tsx =='; cat -n development/social/app/components/post/Highlight.tsx
echo '== Modal search =='; rg -n -F -e 'export default function Modal' -e 'function Modal' -e 'const Modal' -- development/social/app/components/common || test "$?" -eq 1