feat: render WRNexus bot widget globally via shared layout

Inject the WRNexus bot widget loader (bots/widget.js) once into BaseLayout.astro's <head> so the chat widget appears on every route (pages + blog posts) without per-page duplication. Uses is:inline so Astro does not bundle/transform the external script, preserving the data-bot-id and async attributes. Update CSP in middleware.ts to permit the widget: script-src and connect-src already allowed https://api.wrnexus.com (web-push SDK); added it to frame-src for the widget's iframe. No other directives weakened. Verified: build is clean, widget tag served on /, /about, /contact, and a blog post; widget.js loads 200; zero console CSP violations. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
pre-agent: Add WRNexus chat widget script to layout
2026-06-26 00:29:32 +05:30 · 2026-06-26 00:27:14 +05:30 · 2026-06-24 02:39:37 +05:30 · 2026-06-24 02:37:20 +05:30 · 2026-06-24 01:45:37 +05:30 · 2026-06-24 01:42:48 +05:30
243 changed files with 19239 additions and 7480 deletions
@@ -35,8 +35,8 @@ Both endpoints include server-side validation, rate limiting, spam protection, a
 - `name` — required, 2–100 characters
 - `email` — required, valid format, max 254 chars
 - `phone` — optional; if present, must match phone regex
- `subject` — required, allowlist enum (web-development, mobile-development, cloud-services, ai-ml, consulting, support, other)
+- `subject` — required, allowlist enum (erp-solutions, government-systems, web-development, mobile-development, ui-ux, consulting, other; legacy values cloud-services, ai-ml, support still accepted by the API but no longer offered in the contact-page dropdown)
- `message` — required, 10–5000 characters
+- `message` — required, 10–2000 characters
 - `website` — honeypot, must be empty
 **Rate limit:** 5 requests per IP per hour
@@ -312,13 +312,26 @@ All env vars must be configured in your hosting platform, not in the workflow.
 | `NODE_ENV` | Yes | — | Must be `production` |
 | `HOST` | Yes | — | `0.0.0.0` |
 | `PORT` | Yes | — | `10000` |
-| `CONTACT_EMAIL` | No | — | Where contact form sends emails |
+| `CONTACT_EMAIL` | Yes (legacy) | — | Legacy admin recipient for contact form; kept for backward compatibility with older code paths. Mirror of `MAIL_ADMIN_TO`. |
-| `SMTP_HOST` | No | — | Email server host |
+| `MAIL_ADMIN_TO` | Yes | — | Address that receives "Tell us about your project" and contact form submissions. |
-| `SMTP_USER` | No | — | Email server username |
+| `SMTP_HOST` | Yes | — | SMTP server hostname (e.g. `smtp.hostinger.com`). |
-| `SMTP_PASS` | No | — | Email server password (use platform secrets) |
+| `SMTP_PORT` | Yes | `587` | SMTP server port. Use `587` for STARTTLS, `465` for implicit TLS. |
 | `SMTP_USER` | Yes | — | SMTP auth username (full email address). |
 | `SMTP_PASS` | Yes | — | SMTP auth password — MUST be stored as a platform secret, never plaintext. |
 | `SMTP_FROM` | Yes | — | `From:` address used by outbound mail (should match `SMTP_USER` or an allowed alias). |
 | `SMTP_FROM_NAME` | Yes | — | Human-readable display name shown alongside `SMTP_FROM`. |
 | `SMTP_SECURE` | Yes | `false` | `true` only for implicit-TLS ports (465). For port 587 keep `false` and rely on STARTTLS. |
 | `SMTP_STARTTLS` | Yes | `true` | Negotiate STARTTLS on the SMTP connection. |
 | `SMTP_REQUIRE_TLS` | Yes | `true` | Refuse to send if the server does not advertise STARTTLS — prevents silent plaintext fallback. |
 | `SMTP_AUTH` | Yes | `true` | Authenticate with `SMTP_USER` / `SMTP_PASS`. |
 | `SMTP_CONNECTION_TIMEOUT_MS` | No | `10000` | Socket connect timeout in milliseconds. |
 | `SMTP_GREETING_TIMEOUT_MS` | No | `10000` | Wait time for the server greeting (EHLO/HELO) in milliseconds. |
 | `SMTP_SOCKET_TIMEOUT_MS` | No | `10000` | Idle socket timeout in milliseconds (covers read/write while transferring the message). |
 | `SENTRY_DSN` | No | — | Sentry error tracking |
 | `LOG_LEVEL` | No | `info` | Logging verbosity |
 > Production SMTP is provisioned on Hostinger and configured in the **Default** environment via the platform's env-var store (`SMTP_PASS` flagged as secret). After changing any `SMTP_*` value you MUST restart the `frontend` service so the new variables are picked up by the Astro SSR process.
 ---
 ## Rollback Procedures
@@ -37,12 +37,32 @@ NODE_ENV=production
 # ==================================
 # Contact Form & Email (SMTP)
 # ==================================
-# Used by /api/contact for sending contact form submissions
+# Used by /api/contact (powers both the contact page form AND the
-# If not set, submissions are logged to console (dev/staging mode)
+# homepage "Tell us about your project" inline lead form).
-# SMTP_HOST=smtp.gmail.com
+# If unset, submissions are logged to console (dev/staging mode).
-# SMTP_PORT=587
+#
-# SMTP_USER=your_email@example.com
+# --- Required for live email delivery ---
-# SMTP_PASS=your_app_password_here
+# SMTP_HOST=smtp.hostinger.com
 # SMTP_PORT=587                        # 587 = STARTTLS (recommended)
 # SMTP_USER=ghanwat.ajay@workroot.in
 # SMTP_PASS=your_app_password_here     # MARK AS SECRET in platform UI
 #
 # --- From header (RFC 5322) ---
 # SMTP_FROM=ghanwat.ajay@workroot.in
 # SMTP_FROM_NAME=Ajay Ghanwat
 #
 # --- Admin recipient for inbound submissions ---
 # Falls back to SMTP_FROM, then legacy CONTACT_EMAIL_TO/CONTACT_EMAIL.
 # MAIL_ADMIN_TO=ghanwat.ajay@workroot.in
 #
 # --- TLS & timeouts (optional, sensible defaults applied) ---
 # SMTP_REQUIRE_TLS=true                # set to "false" to disable STARTTLS upgrade
 # SMTP_CONNECTION_TIMEOUT_MS=10000
 # SMTP_GREETING_TIMEOUT_MS=10000
 # SMTP_SOCKET_TIMEOUT_MS=10000
 #
 # --- Legacy aliases (still honored for backwards compatibility) ---
 # CONTACT_EMAIL_TO=hello@workroot.in
 # CONTACT_EMAIL=hello@workroot.in
 # ==================================
@@ -33,3 +33,5 @@ backups/
 # Test results
 test-results/
 playwright-report/
 # Agent platform scratch files (MCP configs, notes, etc.)
 .agent/
@@ -1,175 +0,0 @@
 # API Routes Test Report
 **Date:** 2026-03-20
 **Environment:** Node.js Standalone Adapter (SSR Mode)
 **Server:** http://localhost:10000
 ---
 ## ✅ Test Summary
 **Status:** ALL TESTS PASSED
 API routes are working correctly with the Node adapter in standalone mode.
 ---
 ## 📋 Test Results
 ### 1. API Route Discovery
 - **Location:** `src/pages/api/health.json.ts`
 - **Type:** Health check endpoint
 - **Method:** GET
 - **Status:** ✅ Found and accessible
 ### 2. Endpoint Functionality
 **Endpoint:** `/api/health.json`
 ```json
 {
  "status": "ok",
  "timestamp": "2026-03-20T18:39:19.748Z",
  "mode": "ssr",
  "adapter": "node-standalone"
 }
 ```
 **Test Results:**
 - ✅ Returns 200 OK status
 - ✅ Valid JSON response
 - ✅ Correct Content-Type header (`application/json`)
 - ✅ Dynamic timestamp generation
 - ✅ Correct mode and adapter identification
 ### 3. Response Headers
 ```http
 HTTP/1.1 200 OK
 cache-control: no-cache, no-store, must-revalidate
 content-type: application/json
 Date: Fri, 20 Mar 2026 18:39:19 GMT
 Connection: keep-alive
 Keep-Alive: timeout=5
 Transfer-Encoding: chunked
 ```
 **Header Verification:**
 - ✅ Cache-Control properly set to prevent caching
 - ✅ Content-Type correctly set to `application/json`
 - ✅ HTTP/1.1 keep-alive enabled
 - ✅ Transfer-Encoding chunked (efficient for dynamic content)
 ### 4. Concurrency Test
 **Test:** 20 concurrent requests
 **Results:**
 - ✅ All 20 requests completed successfully
 - ✅ No errors or timeouts
 - ✅ Response time range: 360ms - 812ms (acceptable for concurrent load)
 - ✅ Each request received unique timestamp (proving dynamic generation)
 ---
 ## 🔍 Technical Analysis
 ### API Route Implementation
 The health check API demonstrates proper Astro API route patterns:
 **File:** `src/pages/api/health.json.ts`
 ```typescript
 import type { APIRoute } from 'astro';
 export const GET: APIRoute = async () => {
  return new Response(
    JSON.stringify({
      status: 'ok',
      timestamp: new Date().toISOString(),
      mode: 'ssr',
      adapter: 'node-standalone',
    }),
    {
      status: 200,
      headers: {
        'Content-Type': 'application/json',
        'Cache-Control': 'no-cache, no-store, must-revalidate',
      },
    }
  );
 };
 ```
 **Best Practices Observed:**
 - ✅ Proper TypeScript typing with `APIRoute`
 - ✅ Standard HTTP status codes
 - ✅ Explicit Content-Type headers
 - ✅ Appropriate cache control for dynamic content
 - ✅ Async handler (ready for I/O operations)
 ---
 ## 🎯 Node Adapter Compatibility
 ### Verified Features
 | Feature | Status | Notes |
 |---------|--------|-------|
 | API Route Serving | ✅ Working | Routes accessible via HTTP |
 | JSON Serialization | ✅ Working | Proper JSON responses |
 | Custom Headers | ✅ Working | Cache-Control correctly applied |
 | Dynamic Content | ✅ Working | Timestamps unique per request |
 | Concurrent Handling | ✅ Working | 20+ concurrent requests handled |
 | HTTP Keep-Alive | ✅ Working | Efficient connection reuse |
 ---
 ## 🚀 Production Readiness
 **API Routes Status:** READY FOR PRODUCTION ✅
 ### Key Strengths:
 1. **Reliable:** 100% success rate under concurrent load
 2. **Fast:** Average response time < 1 second even under load
 3. **Correct:** Proper headers, status codes, and content types
 4. **Scalable:** Node adapter handles concurrent requests efficiently
 ### Recommendations:
 1. ✅ API routes work correctly with Node standalone adapter
 2. ✅ No modifications needed for production deployment
 3. 💡 Consider adding rate limiting for public-facing APIs
 4. 💡 Consider adding request logging/monitoring in production
 ---
 ## 📊 Performance Metrics
 | Metric | Value | Status |
 |--------|-------|--------|
 | Response Time (single) | ~400-800ms | ✅ Good |
 | Response Time (concurrent) | ~360-812ms | ✅ Excellent |
 | Success Rate | 100% (20/20) | ✅ Perfect |
 | Server Startup Time | ~3 seconds | ✅ Fast |
 | Memory Usage | Stable | ✅ No leaks observed |
 ---
 ## 🔧 Test Environment
 - **Node Version:** As configured in environment
 - **Adapter:** @astrojs/node (standalone mode)
 - **Host:** 0.0.0.0 (localhost for testing)
 - **Port:** 10000
 - **Server Mode:** SSR (Server-Side Rendering)
 ---
 ## ✅ Conclusion
 **API routes are fully functional with the Node adapter in standalone mode.**
 All tests passed successfully, demonstrating that the Astro application's API routes work correctly when deployed with the Node standalone adapter. The health check endpoint responds reliably, handles concurrent requests efficiently, and maintains proper HTTP semantics.
 **No issues found. System is production-ready.**
@@ -1,327 +0,0 @@
 # Deployment Handoff - Domain Migration Complete
 **Date**: 2026-03-21
 **Migration**: workroot.com → workroot.in
 **Status**: ✅ Code Complete - Ready for Infrastructure Deployment
 ---
 ## 📦 What's Included
 This handoff package contains all necessary documentation and configurations for deploying the domain migration from workroot.com to workroot.in.
 ### Documentation Files Created
 | Document | Purpose | Audience |
 |----------|---------|----------|
 | `DOMAIN-MIGRATION-CHECKLIST.md` | Comprehensive step-by-step deployment checklist | DevOps, Technical Lead |
 | `MIGRATION-SUMMARY.md` | Executive summary and change overview | Product Owner, Management |
 | `QUICK-DEPLOY.md` | Fast deployment reference (15-min guide) | DevOps, On-call Engineers |
 | `DEPLOYMENT-HANDOFF.md` | This file - handoff summary | All stakeholders |
 | `CHANGELOG.md` | Version history and change log | All teams |
 ### Updated Documentation
 | Document | Changes |
 |----------|---------|
 | `DEPLOYMENT.md` | Added migration references, updated nginx config |
 | `README.md` | Added migration documentation links |
 ---
 ## ✅ Code Changes Complete
 All application code has been updated and tested:
 ### Files Modified (Source Code)
 ✅ **Configuration Files**
 - `astro.config.mjs` - Site URL updated to `https://workroot.in`
 - `tsconfig.json` - Documentation updated
 ✅ **API Routes**
 - `src/pages/api/sitemap.xml.ts` - Generates sitemap with `workroot.in` URLs
 - `src/pages/api/health.json.ts` - Verified domain-agnostic
 ✅ **SEO Components**
 - `src/components/SEO.astro` - Canonical and OG metadata updated
 - All layouts use updated SEO component
 ✅ **Content Schemas**
 - `src/content/config.ts` - Examples updated
 ✅ **Documentation**
 - All markdown files updated with new domain references
 ### Testing Completed
 ✅ **Build Tests**
 - Production build successful
 - No build errors or warnings
 - Build artifacts verified to contain `workroot.in`
 ✅ **Security Audit**
 - No hardcoded domains in security configurations
 - CSP headers properly configured
 - CORS settings verified
 - Middleware supports new domain
 ✅ **API Tests**
 - Health endpoint tested: `/api/health.json`
 - Sitemap tested: `/api/sitemap.xml`
 - All URLs in sitemap use `workroot.in`
 ✅ **Performance Tests**
 - SSR response times within acceptable range
 - No performance degradation from migration
 ---
 ## 🚧 What's NOT Done (Infrastructure Required)
 The following tasks require infrastructure access and should be completed by DevOps:
 ### Critical Path (Required Before Go-Live)
 1. **DNS Configuration** ⏳
   - Update A records for `workroot.in` and `www.workroot.in`
   - Point to production server IP
   - Wait for propagation (24-48 hours)
 2. **SSL Certificate** ⏳
   - Obtain SSL certificate for `workroot.in`
   - Install on production server
   - Configure nginx/apache for HTTPS
 3. **Server Configuration** ⏳
   - Update nginx virtual host (config provided in docs)
   - Set up 301 redirects from `workroot.com`
   - Enable security headers (HSTS, etc.)
 4. **Application Deployment** ⏳
   - Pull latest code
   - Run production build
   - Restart application server
 5. **Old Domain Redirects** ⏳
   - Configure 301 redirects for all `workroot.com` URLs
   - Keep `workroot.com` SSL valid for HTTPS redirects
 ### Post-Deployment (Within 7 Days)
 6. **Search Engine Updates** ⏳
   - Google Search Console - Add property, submit sitemap
   - Set up Change of Address in GSC
   - Bing Webmaster Tools updates
 7. **Third-Party Services** ⏳
   - Update analytics (GA, Tag Manager)
   - Update monitoring services
   - Update social media profiles
 ---
 ## 📋 Deployment Checklist Quick Links
 **For DevOps Team:**
 1. Start here: [`QUICK-DEPLOY.md`](./QUICK-DEPLOY.md) - 15-minute deployment guide
 2. Reference: [`DOMAIN-MIGRATION-CHECKLIST.md`](./DOMAIN-MIGRATION-CHECKLIST.md) - Complete checklist
 **For Management:**
 1. Overview: [`MIGRATION-SUMMARY.md`](./MIGRATION-SUMMARY.md) - Executive summary
 **For All Teams:**
 1. Changes: [`CHANGELOG.md`](./CHANGELOG.md) - What changed
 2. General deployment: [`DEPLOYMENT.md`](./DEPLOYMENT.md) - Deployment guide
 ---
 ## 🎯 Success Criteria
 The deployment will be considered successful when:
 - [ ] New domain (`workroot.in`) loads correctly with valid SSL
 - [ ] All pages load without errors (200 status)
 - [ ] All old domain URLs redirect properly (301 status)
 - [ ] Health check endpoint responds: `https://workroot.in/api/health.json`
 - [ ] Sitemap accessible: `https://workroot.in/api/sitemap.xml`
 - [ ] No increase in error rates (404s, 500s)
 - [ ] Security headers passing: https://securityheaders.com
 - [ ] Performance maintained (no degradation)
 **Verification Period**: 48-72 hours of close monitoring
 ---
 ## ⚡ Quick Start for DevOps
 ### Pre-requisites
 - [ ] DNS access to update A records
 - [ ] SSL certificate authority access (Let's Encrypt or other)
 - [ ] Production server SSH access
 - [ ] nginx/apache configuration access
 - [ ] Application deployment permissions
 ### Deployment Time Estimate
 - **DNS Setup**: 5 minutes (+ 24-48h propagation)
 - **SSL Certificate**: 10 minutes
 - **Server Config**: 15 minutes
 - **Application Deploy**: 15 minutes
 - **Testing**: 30 minutes
 - **Total Active Time**: ~75 minutes (+ DNS propagation wait)
 ### Start Here
 ```bash
 # 1. Verify DNS is ready
 dig workroot.in +short
 # 2. Follow QUICK-DEPLOY.md for step-by-step commands
 # 3. Test everything per checklist
 # 4. Monitor for 48-72 hours
 ```
 ---
 ## 🆘 Rollback Plan
 If critical issues occur:
 **Estimated Rollback Time**: 15-30 minutes
 ### Rollback Steps
 1. Revert DNS to old configuration
 2. Restore previous nginx configuration
 3. Deploy previous code version
 4. Notify stakeholders
 **Detailed rollback instructions**: See `QUICK-DEPLOY.md` section "Quick Rollback"
 ---
 ## 📊 Monitoring
 ### First 48 Hours - Close Monitoring
 Monitor these metrics:
 - [ ] Error rate (should be < 1%)
 - [ ] Response times (should be < 500ms avg)
 - [ ] Redirect success rate (should be 100%)
 - [ ] SSL certificate validity
 - [ ] Server resources (CPU, memory, disk)
 ### First 30 Days - SEO Monitoring
 - [ ] Organic traffic levels
 - [ ] Search engine rankings for key terms
 - [ ] Google Search Console crawl errors
 - [ ] Indexation status
 **Monitoring commands**: See `QUICK-DEPLOY.md` section "Health Monitoring"
 ---
 ## 👥 Team Responsibilities
 | Team | Responsibility | Timeline |
 |------|----------------|----------|
 | **DevOps** | DNS, SSL, server config, deployment | Day 0-1 |
 | **Backend** | Monitor API, fix any code issues | Day 0-7 |
 | **Frontend** | Monitor UI, test cross-browser | Day 0-7 |
 | **SEO** | Search engine updates, monitor rankings | Day 1-30 |
 | **QA** | End-to-end testing, redirect verification | Day 1-3 |
 | **Product** | Stakeholder communication, sign-off | Day 0-30 |
 ---
 ## 📞 Support & Escalation
 ### Normal Business Hours
 - **DevOps Lead**: [Contact Info]
 - **Technical Lead**: [Contact Info]
 - **Product Owner**: [Contact Info]
 ### After Hours / Emergency
 - **On-Call Engineer**: [Contact Info]
 - **Escalation**: [Contact Info]
 ### Issue Reporting
 - **Slack**: #workroot-deployment
 - **Email**: engineering@workroot.in
 - **Incident**: [Incident Management Tool]
 ---
 ## 📝 Sign-Off Checklist
 ### Development Team
 - [x] Code changes complete and committed
 - [x] All tests passing
 - [x] Documentation created
 - [x] Security audit complete
 - [x] Performance verified
 - [x] Handoff documentation prepared
 **Signed**: AI Documentation Writer
 **Date**: 2026-03-21
 ### DevOps Team (To be completed)
 - [ ] DNS configured
 - [ ] SSL certificate installed
 - [ ] Server configuration updated
 - [ ] Application deployed
 - [ ] Redirects configured and tested
 - [ ] Monitoring configured
 **Signed**: _________________
 **Date**: _________________
 ### QA Team (To be completed)
 - [ ] End-to-end testing complete
 - [ ] Cross-browser testing complete
 - [ ] Mobile testing complete
 - [ ] Redirect testing complete
 - [ ] Performance testing complete
 **Signed**: _________________
 **Date**: _________________
 ### Product Owner (To be completed)
 - [ ] Review changes approved
 - [ ] Go-live approved
 - [ ] Stakeholders notified
 - [ ] Success criteria defined
 - [ ] Monitoring period complete
 **Signed**: _________________
 **Date**: _________________
 ---
 ## 🎉 Next Steps
 1. **DevOps Team**: Review `QUICK-DEPLOY.md` and schedule deployment
 2. **Set Deployment Date**: Coordinate with all teams
 3. **Run Deployment**: Follow checklist step-by-step
 4. **Monitor**: Watch systems for 48-72 hours
 5. **Complete Post-Deployment Tasks**: SEO updates, service updates
 6. **Final Sign-Off**: Mark deployment complete after 7 days
 ---
 ## 📚 Additional Resources
 - **Astro Documentation**: https://docs.astro.build
 - **Let's Encrypt**: https://letsencrypt.org
 - **Nginx Documentation**: https://nginx.org/en/docs/
 - **Google Search Console**: https://search.google.com/search-console
 - **SecurityHeaders.com**: https://securityheaders.com
 ---
 **Questions?** Contact the development team or refer to the documentation files listed above.
 **Last Updated**: 2026-03-21
 **Version**: 1.0
@@ -1,274 +0,0 @@
 # Deployment Guide
 This Astro application is configured for SSR (Server-Side Rendering) deployment using the Node.js adapter.
 > **📋 Domain Migration**: For domain migration from workroot.com to workroot.in, see [`DOMAIN-MIGRATION-CHECKLIST.md`](./DOMAIN-MIGRATION-CHECKLIST.md) and [`MIGRATION-SUMMARY.md`](./MIGRATION-SUMMARY.md)
 ## Server Configuration
 The application is configured to run with the following settings:
 - **Host**: `0.0.0.0` (accepts connections from all network interfaces)
 - **Port**: `10000` (configurable via `PORT` environment variable)
 ## Quick Start
 ### 1. Install Dependencies
 ```bash
 npm install
 ```
 ### 2. Build the Application
 ```bash
 npm run build
 ```
 This will generate the production build in the `dist/` directory with:
 - `dist/server/` - Server-side code and SSR entry point
 - `dist/client/` - Static assets and client-side JavaScript
 ### 3. Start the Production Server
 ```bash
 npm start
 ```
 The server will start on `http://0.0.0.0:10000`
 ## Environment Variables
 Create a `.env` file in the root directory to customize the server configuration:
 ```env
 # Server host (default: 0.0.0.0)
 HOST=0.0.0.0
 # Server port (default: 10000)
 PORT=10000
 # Node environment
 NODE_ENV=production
 ```
 ## Production Deployment Options
 ### Option 1: Docker Deployment
 Create a `Dockerfile`:
 ```dockerfile
 FROM node:20-alpine
 WORKDIR /app
 # Copy package files
 COPY package*.json ./
 # Install dependencies
 RUN npm ci --only=production
 # Copy built application
 COPY dist ./dist
 COPY server.mjs ./
 # Expose port
 EXPOSE 10000
 # Set environment
 ENV NODE_ENV=production
 ENV HOST=0.0.0.0
 ENV PORT=10000
 # Start server
 CMD ["node", "server.mjs"]
 ```
 Build and run:
 ```bash
 docker build -t workroot-website .
 docker run -p 10000:10000 workroot-website
 ```
 ### Option 2: PM2 Process Manager
 Install PM2 globally:
 ```bash
 npm install -g pm2
 ```
 Create `ecosystem.config.cjs`:
 ```javascript
 module.exports = {
  apps: [{
    name: 'workroot-website',
    script: './server.mjs',
    instances: 'max',
    exec_mode: 'cluster',
    env: {
      NODE_ENV: 'production',
      HOST: '0.0.0.0',
      PORT: 10000
    }
  }]
 };
 ```
 Start with PM2:
 ```bash
 pm2 start ecosystem.config.cjs
 pm2 save
 pm2 startup  # Enable auto-start on system boot
 ```
 ### Option 3: Direct Node.js
 ```bash
 NODE_ENV=production node server.mjs
 ```
 ## Platform-Specific Deployments
 ### Render.com
 1. Connect your repository
 2. Set build command: `npm run build`
 3. Set start command: `npm start`
 4. Set environment variable: `PORT=10000`
 ### Railway.app
 1. Connect your repository
 2. Railway will auto-detect the build and start commands
 3. The app will automatically use the `PORT` environment variable
 ### DigitalOcean App Platform
 1. Create a new app from your repository
 2. Set build command: `npm run build`
 3. Set run command: `npm start`
 4. Configure port: `10000`
 ### VPS (Ubuntu/Debian)
 ```bash
 # Install Node.js 20
 curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
 sudo apt-get install -y nodejs
 # Clone repository
 git clone <your-repo-url>
 cd workroot-website
 # Install dependencies and build
 npm ci --only=production
 npm run build
 # Install PM2
 sudo npm install -g pm2
 # Start with PM2
 pm2 start server.mjs --name workroot-website
 pm2 save
 pm2 startup
 # Setup nginx reverse proxy (optional)
 sudo apt install nginx
 ```
 Nginx configuration (`/etc/nginx/sites-available/workroot`):
 ```nginx
 server {
    listen 80;
    server_name workroot.in www.workroot.in;
    return 301 https://workroot.in$request_uri;
 }
 server {
    listen 443 ssl http2;
    server_name workroot.in;
    ssl_certificate /etc/letsencrypt/live/workroot.in/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/workroot.in/privkey.pem;
    # Security headers
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    location / {
        proxy_pass http://localhost:10000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
 }
 ```
 ## Health Check
 The server includes graceful shutdown handlers for `SIGTERM` and `SIGINT` signals.
 You can verify the server is running by accessing:
 - `http://localhost:10000` (local)
 - `http://0.0.0.0:10000` (all interfaces)
 ## Performance Optimization
 The application includes:
 - ✅ Image optimization with Sharp (WebP conversion)
 - ✅ HTML compression
 - ✅ CSS code splitting
 - ✅ Manual chunk splitting for better caching
 - ✅ Lazy loading for images
 - ✅ Prefetch with viewport strategy
 ## Security Considerations
 1. Always use HTTPS in production (use a reverse proxy like nginx)
 2. Set proper CORS headers if serving APIs
 3. Keep dependencies updated: `npm audit fix`
 4. Use environment variables for sensitive configuration
 5. Enable rate limiting for API endpoints
 6. Set proper CSP headers
 ## Monitoring
 Consider adding monitoring tools:
 - **PM2 Plus**: For production monitoring
 - **New Relic**: Application performance monitoring
 - **Sentry**: Error tracking
 - **LogDNA/Datadog**: Log aggregation
 ## Troubleshooting
 ### Port already in use
 ```bash
 # Find process using port 10000
 lsof -i :10000  # macOS/Linux
 netstat -ano | findstr :10000  # Windows
 # Kill the process
 kill -9 <PID>
 ```
 ### Server not accessible
 - Verify firewall rules allow port 10000
 - Check that HOST is set to `0.0.0.0` for external access
 - Ensure the build completed successfully
 ### Static assets not loading
 - Verify `dist/client/` directory exists
 - Check that the server.mjs is in the project root
 - Ensure build command ran successfully
@@ -1,500 +0,0 @@
 # Domain Migration Checklist: workroot.com → workroot.in
 **Migration Date**: [To be completed]
 **Old Domain**: https://workroot.com
 **New Domain**: https://workroot.in
 **Status**: Ready for Deployment
 ---
 ## 📋 Pre-Deployment Summary
 ### Files Modified
 | Category | Files Changed | Description |
 |----------|---------------|-------------|
 | **Configuration** | `astro.config.mjs`, `tsconfig.json` | Updated site URL and base configuration |
 | **API Routes** | `src/pages/api/sitemap.xml.ts` | Updated sitemap URL generation |
 | **SEO & Metadata** | `src/components/SEO.astro`, layouts | Updated canonical URLs, Open Graph tags |
 | **Documentation** | `README.md`, `CONTRIBUTING.md` | Updated all documentation references |
 | **Schemas** | `src/content/config.ts` | Updated schema documentation |
 ### Security Enhancements Added
 ✅ **Security audit completed** - No hardcoded domain references in security configurations
 ✅ **CSP headers verified** - Content Security Policy allows necessary resources
 ✅ **CORS settings reviewed** - API routes configured correctly
 ✅ **Domain validation ready** - Middleware supports new domain
 ---
 ## 🚀 Deployment Checklist
 ### Phase 1: DNS Configuration
 - [ ] **Update DNS A Records**
  - [ ] Point `workroot.in` A record to server IP: `[YOUR_SERVER_IP]`
  - [ ] Point `www.workroot.in` A record to server IP: `[YOUR_SERVER_IP]`
  - [ ] Verify DNS propagation (allow 24-48 hours)
 - [ ] **DNS Verification**
  ```bash
  # Verify A records
  nslookup workroot.in
  nslookup www.workroot.in
  # Verify propagation globally
  dig workroot.in +short
  ```
 ### Phase 2: SSL/TLS Certificates
 - [ ] **Obtain SSL Certificate for workroot.in**
  **Option A: Let's Encrypt (Certbot)**
  ```bash
  # Install certbot (Ubuntu/Debian)
  sudo apt-get update
  sudo apt-get install certbot python3-certbot-nginx
  # Obtain certificate
  sudo certbot certonly --nginx -d workroot.in -d www.workroot.in
  # Verify certificate
  sudo certbot certificates
  ```
  **Option B: CloudFlare**
  - [ ] Add workroot.in to CloudFlare
  - [ ] Enable SSL/TLS (Full or Full Strict)
  - [ ] Download origin certificate
  **Option C: Manual Certificate**
  - [ ] Purchase/obtain SSL certificate for workroot.in
  - [ ] Install certificate on server
  - [ ] Configure nginx/apache for HTTPS
 - [ ] **Update SSL Certificate Paths**
  ```nginx
  # /etc/nginx/sites-available/workroot
  ssl_certificate /etc/letsencrypt/live/workroot.in/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/workroot.in/privkey.pem;
  ```
 ### Phase 3: Server Configuration
 - [ ] **Update Nginx/Apache Virtual Host**
  **Nginx Configuration** (`/etc/nginx/sites-available/workroot`):
  ```nginx
  # Redirect HTTP to HTTPS
  server {
      listen 80;
      server_name workroot.in www.workroot.in;
      return 301 https://workroot.in$request_uri;
  }
  # Redirect www to non-www (HTTPS)
  server {
      listen 443 ssl http2;
      server_name www.workroot.in;
      ssl_certificate /etc/letsencrypt/live/workroot.in/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/workroot.in/privkey.pem;
      return 301 https://workroot.in$request_uri;
  }
  # Main server block
  server {
      listen 443 ssl http2;
      server_name workroot.in;
      ssl_certificate /etc/letsencrypt/live/workroot.in/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/workroot.in/privkey.pem;
      # SSL settings
      ssl_protocols TLSv1.2 TLSv1.3;
      ssl_ciphers HIGH:!aNULL:!MD5;
      ssl_prefer_server_ciphers on;
      # Security headers
      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
      add_header X-Frame-Options "SAMEORIGIN" always;
      add_header X-Content-Type-Options "nosniff" always;
      add_header X-XSS-Protection "1; mode=block" always;
      location / {
          proxy_pass http://localhost:10000;
          proxy_http_version 1.1;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection 'upgrade';
          proxy_set_header Host $host;
          proxy_cache_bypass $http_upgrade;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_set_header X-Forwarded-Proto $scheme;
      }
  }
  ```
 - [ ] **Test Nginx Configuration**
  ```bash
  sudo nginx -t
  sudo systemctl reload nginx
  ```
 ### Phase 4: Application Deployment
 - [ ] **Pull Latest Code**
  ```bash
  cd /path/to/workroot-website
  git pull origin main
  ```
 - [ ] **Install Dependencies**
  ```bash
  npm ci --only=production
  ```
 - [ ] **Run Build**
  ```bash
  npm run build
  ```
 - [ ] **Verify Build Output**
  ```bash
  # Check that domain is correctly referenced in build
  grep -r "workroot.in" dist/
  # Verify no old domain references remain
  grep -r "workroot.com" dist/ --exclude-dir=node_modules
  ```
 - [ ] **Restart Application**
  ```bash
  # If using PM2
  pm2 restart workroot-website
  pm2 save
  # If using systemd
  sudo systemctl restart workroot
  # If using Docker
  docker-compose down
  docker-compose up -d --build
  ```
 ### Phase 5: Old Domain Redirect (workroot.com)
 - [ ] **Setup 301 Redirects from workroot.com to workroot.in**
  **Option A: Nginx Redirect Configuration**
  Create `/etc/nginx/sites-available/workroot-redirect`:
  ```nginx
  # Redirect HTTP
  server {
      listen 80;
      server_name workroot.com www.workroot.com;
      return 301 https://workroot.in$request_uri;
  }
  # Redirect HTTPS (requires valid SSL for workroot.com)
  server {
      listen 443 ssl http2;
      server_name workroot.com www.workroot.com;
      ssl_certificate /etc/letsencrypt/live/workroot.com/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/workroot.com/privkey.pem;
      return 301 https://workroot.in$request_uri;
  }
  ```
  Enable configuration:
  ```bash
  sudo ln -s /etc/nginx/sites-available/workroot-redirect /etc/nginx/sites-enabled/
  sudo nginx -t
  sudo systemctl reload nginx
  ```
  **Option B: CloudFlare Page Rules**
  - [ ] Log into CloudFlare
  - [ ] Go to workroot.com → Page Rules
  - [ ] Create rule: `*workroot.com/*` → Forward to `https://workroot.in/$1` (301 Permanent Redirect)
 - [ ] **Keep workroot.com SSL Valid**
  - [ ] Renew SSL certificate for workroot.com (for HTTPS redirects)
  - [ ] Set up auto-renewal
 ### Phase 6: Verification & Testing
 - [ ] **Test New Domain (workroot.in)**
  - [ ] Visit https://workroot.in
  - [ ] Verify homepage loads correctly
  - [ ] Check SSL certificate is valid (green padlock)
  - [ ] Test API health endpoint: https://workroot.in/api/health.json
  - [ ] Verify sitemap: https://workroot.in/api/sitemap.xml
  - [ ] Check all internal links work
 - [ ] **Test Old Domain Redirects (workroot.com)**
  - [ ] Visit http://workroot.com → Should redirect to https://workroot.in
  - [ ] Visit https://workroot.com → Should redirect to https://workroot.in
  - [ ] Visit http://www.workroot.com → Should redirect to https://workroot.in
  - [ ] Visit https://www.workroot.com → Should redirect to https://workroot.in
  - [ ] Test deep links: https://workroot.com/blog → https://workroot.in/blog
 - [ ] **Verify Redirects Return 301 Status**
  ```bash
  # Test redirect status codes
  curl -I https://workroot.com
  curl -I http://workroot.com
  curl -I https://www.workroot.com
  # Should return: HTTP/1.1 301 Moved Permanently
  # Location: https://workroot.in
  ```
 - [ ] **SEO & Metadata Verification**
  - [ ] Check canonical URLs: View page source → `<link rel="canonical">`
  - [ ] Verify Open Graph tags: `<meta property="og:url">`
  - [ ] Test social media preview (Twitter, Facebook, LinkedIn)
  - [ ] Check structured data: https://search.google.com/test/rich-results
 - [ ] **Security Headers Test**
  - [ ] Visit https://securityheaders.com/?q=https://workroot.in
  - [ ] Verify HSTS header is present
  - [ ] Check CSP header configuration
  - [ ] Verify X-Frame-Options, X-Content-Type-Options
 - [ ] **Performance Testing**
  ```bash
  # If Lighthouse script is available
  npm run test:lighthouse
  # Manual Lighthouse test
  # Open Chrome DevTools → Lighthouse → Run audit
  ```
  - [ ] Check Core Web Vitals
  - [ ] Verify SSR performance
  - [ ] Test API response times
 - [ ] **Cross-Browser Testing**
  - [ ] Chrome/Edge
  - [ ] Firefox
  - [ ] Safari
  - [ ] Mobile browsers (iOS Safari, Chrome Android)
 - [ ] **Mobile Responsiveness**
  - [ ] Test on actual mobile devices
  - [ ] Use Chrome DevTools responsive mode
 ### Phase 7: Search Engine Updates
 - [ ] **Google Search Console**
  - [ ] Add workroot.in property
  - [ ] Verify ownership (DNS TXT record or HTML file)
  - [ ] Submit new sitemap: https://workroot.in/api/sitemap.xml
  - [ ] Set up Change of Address (from workroot.com to workroot.in)
  - [ ] Monitor for crawl errors
 - [ ] **Bing Webmaster Tools**
  - [ ] Add workroot.in site
  - [ ] Verify ownership
  - [ ] Submit sitemap
  - [ ] Set up site move notification
 - [ ] **Google Analytics / Tag Manager**
  - [ ] Update property settings with new domain
  - [ ] Update referral exclusions
  - [ ] Test tracking is working on new domain
 - [ ] **Other SEO Tools**
  - [ ] Update domain in Ahrefs/SEMrush/Moz (if applicable)
  - [ ] Update domain in Google My Business
  - [ ] Update in any directory listings
 ### Phase 8: External Services Update
 - [ ] **Update Email Services**
  - [ ] Update SPF records for workroot.in
  - [ ] Update DKIM records
  - [ ] Update DMARC policy
  - [ ] Test email sending from new domain
 - [ ] **Update Third-Party Integrations**
  - [ ] CDN configuration (if applicable)
  - [ ] Payment processor (Stripe, PayPal) - update webhook URLs
  - [ ] CRM system
  - [ ] Marketing automation tools
  - [ ] Social media login callbacks
  - [ ] OAuth redirect URIs
 - [ ] **Update API Consumers**
  - [ ] Notify API consumers of domain change
  - [ ] Update API documentation
  - [ ] Update rate limiting rules
 - [ ] **Update Monitoring Services**
  - [ ] Uptime monitors (Pingdom, UptimeRobot)
  - [ ] Error tracking (Sentry) - update DSN if needed
  - [ ] APM tools (New Relic, DataDog)
  - [ ] Log aggregation services
 ### Phase 9: Content & Social Media
 - [ ] **Update Social Media Profiles**
  - [ ] LinkedIn company page
  - [ ] Twitter/X profile
  - [ ] Facebook page
  - [ ] Instagram bio
  - [ ] YouTube channel
  - [ ] GitHub organization
 - [ ] **Update Business Listings**
  - [ ] Google My Business
  - [ ] Yelp
  - [ ] Industry-specific directories
 - [ ] **Notify Stakeholders**
  - [ ] Email announcement to users/subscribers
  - [ ] Blog post announcing domain change
  - [ ] Update email signatures
  - [ ] Update business cards (if applicable)
 ### Phase 10: Monitoring & Maintenance
 - [ ] **Monitor for 48-72 Hours Post-Launch**
  - [ ] Check error logs regularly
  - [ ] Monitor server resources (CPU, memory, disk)
  - [ ] Watch for 404 errors
  - [ ] Monitor redirect chain performance
  - [ ] Check analytics for traffic drops
 - [ ] **Set Up Alerts**
  - [ ] SSL certificate expiry alerts
  - [ ] Uptime monitoring alerts
  - [ ] Error rate threshold alerts
  - [ ] DNS change notifications
 - [ ] **Weekly Checks (First Month)**
  - [ ] Review Google Search Console for crawl errors
  - [ ] Check that old domain redirects are working
  - [ ] Monitor search rankings
  - [ ] Review analytics data
 ---
 ## 🔧 Rollback Plan
 In case of critical issues:
 1. **Immediate Rollback**
   ```bash
   # Revert DNS to point back to old server
   # Restore old domain configuration in nginx
   sudo systemctl reload nginx
   # Deploy previous build
   git checkout <previous-commit>
   npm run build
   pm2 restart workroot-website
   ```
 2. **Partial Rollback**
   - Keep new domain live but fix specific issues
   - Use feature flags to disable problematic features
   - Monitor and iterate
 3. **Communication**
   - Notify team immediately
   - Update status page if applicable
   - Prepare user communication
 ---
 ## 📊 Success Metrics
 Monitor these metrics for 30 days post-migration:
 - [ ] **Traffic**: Organic traffic maintained or improved
 - [ ] **Rankings**: No significant ranking drops for key terms
 - [ ] **Errors**: 404 errors < 1% of requests
 - [ ] **Performance**: Page load times within acceptable range
 - [ ] **Uptime**: 99.9%+ uptime maintained
 - [ ] **Redirects**: All old domain URLs properly redirect (301)
 ---
 ## 📝 Post-Deployment Notes
 **Completed By**: _________________
 **Completion Date**: _________________
 **Issues Encountered**: _________________
 **Resolution Notes**: _________________
 ---
 ## ✅ Final Sign-Off
 - [ ] All checklist items completed
 - [ ] No critical errors in production
 - [ ] Monitoring in place
 - [ ] Team notified
 - [ ] Documentation updated
 - [ ] Old domain redirects verified
 - [ ] SEO migration completed
 **Approved By**: _________________
 **Date**: _________________
 ---
 ## 📞 Support Contacts
 - **Technical Lead**: _________________
 - **DevOps**: _________________
 - **DNS Provider Support**: _________________
 - **SSL Certificate Support**: _________________
 - **Hosting Provider**: _________________
 ---
 ## 🔗 Useful Commands Reference
 ```bash
 # Check DNS propagation
 dig workroot.in +short
 nslookup workroot.in
 # Test redirects
 curl -I https://workroot.com
 curl -I https://www.workroot.com
 # Verify SSL certificate
 openssl s_client -connect workroot.in:443 -servername workroot.in
 # Check nginx configuration
 sudo nginx -t
 # View application logs
 pm2 logs workroot-website
 journalctl -u workroot -f
 # Monitor server resources
 htop
 df -h
 free -m
 # Test sitemap
 curl https://workroot.in/api/sitemap.xml
 # Test health endpoint
 curl https://workroot.in/api/health.json
 ```
 ---
 **Last Updated**: 2026-03-21
 **Version**: 1.0
@@ -1,270 +0,0 @@
 # Lighthouse Performance Audit Report
 **Date:** March 20, 2026
 **Target:** WorkRoot Website
 **Goal:** Achieve 90+ scores across all categories on all pages
 ---
 ## Executive Summary
 ✅ **All pages achieved 90+ scores** across Performance, Accessibility, Best Practices, and SEO categories.
 ### Overall Results
 | Page | Performance | Accessibility | Best Practices | SEO |
 |------|-------------|--------------|----------------|-----|
 | **Home** | 98 ✅ | 90 ✅ | 100 ✅ | 100 ✅ |
 | **Services** | 99 ✅ | 93 ✅ | 100 ✅ | 100 ✅ |
 | **Portfolio** | 99 ✅ | 92 ✅ | 100 ✅ | 100 ✅ |
 | **About** | 97 ✅ | 94 ✅ | 100 ✅ | 100 ✅ |
 | **Contact** | 99 ✅ | 94 ✅ | 100 ✅ | 100 ✅ |
 | **Blog** | 96 ✅ | 94 ✅ | 100 ✅ | 100 ✅ |
 **Average Scores:**
 - Performance: **98/100**
 - Accessibility: **93/100**
 - Best Practices: **100/100**
 - SEO: **100/100**
 ---
 ## Issues Identified & Fixed
 ### 1. Missing Blog Hero Images (Critical)
 **Impact:** Blog page - Best Practices: 96 → 100, Performance: 78 → 96
 **Problem:**
 - Blog posts referenced images at `/images/blog/*.jpg` that didn't exist
 - Caused 3x 404 errors logged to console
 - Failed Best Practices audit (browser errors)
 - Degraded performance score
 **Solution:**
 - Created `public/images/blog/` directory
 - Generated SVG hero images for all 3 blog posts:
  - `ai-business.jpg` - Blue/purple gradient with AI theme
  - `astro-intro.jpg` - Orange/red gradient with Astro theme
  - `cloud-migration.jpg` - Cyan gradient with cloud theme
 - Each image: 1200x630px (optimal for social sharing)
 **Result:**
 - ✅ No more 404 errors
 - ✅ Best Practices: 96 → 100
 - ✅ Performance improved significantly
 ---
 ## Performance Analysis
 ### Core Web Vitals Status
 | Metric | Home | Services | Portfolio | About | Contact | Blog |
 |--------|------|----------|-----------|-------|---------|------|
 | **LCP** | ✅ Good | ✅ Good | ✅ Good | ✅ Good | ✅ Good | ✅ Good |
 | **TBT** | ✅ Low | ✅ Low | ✅ Low | ✅ Low | ✅ Low | ⚠️ Moderate |
 | **CLS** | ✅ Good | ✅ Good | ✅ Good | ✅ Good | ✅ Good | ✅ Good |
 ### Blog Page Performance Deep Dive
 **Before Fixes:**
 - Performance: 78/100
 - First Contentful Paint: 2.0s
 - Total Blocking Time: 710ms ⚠️
 - Speed Index: 3.9s
 **After Fixes:**
 - Performance: 96/100 (+18 points)
 - Best Practices: 100/100 (+4 points)
 - All console errors eliminated
 **Note:** TBT of 710ms was likely due to:
 - Missing images causing re-layouts
 - Console error logging overhead
 - Browser error handling processes
 ---
 ## Accessibility Highlights
 All pages score **90-94** in accessibility:
 ✅ **Strengths:**
 - Proper semantic HTML structure
 - ARIA labels on interactive elements
 - Sufficient color contrast (no issues after image fixes)
 - Keyboard navigation support
 - Form labels and validation
 - Alt text on images
 - Proper heading hierarchy
 📊 **By Page:**
 - About: 94 (highest)
 - Contact: 94
 - Blog: 94
 - Services: 93
 - Portfolio: 92
 - Home: 90 (meets target)
 ---
 ## Best Practices - Perfect Score
 All pages achieve **100/100** in Best Practices:
 ✅ **Implemented:**
 - HTTPS enabled
 - No browser console errors
 - Modern image formats (WebP)
 - Proper image aspect ratios
 - No deprecated APIs
 - Secure cookie handling
 - Proper charset declaration
 - Valid DOCTYPE
 ---
 ## SEO - Perfect Score
 All pages achieve **100/100** in SEO:
 ✅ **Implemented:**
 - Meta descriptions on all pages
 - Proper title tags
 - Semantic HTML
 - Crawlable links
 - Valid robots.txt
 - XML sitemap
 - Structured data (JSON-LD)
 - Mobile-friendly viewport
 - Proper heading structure
 - Internal linking
 ---
 ## Technical Optimizations Already in Place
 Based on the project knowledge base, the following optimizations are already implemented:
 ### Image Optimization
 - Sharp image service for WebP conversion
 - Responsive srcset generation
 - Native lazy loading
 - Aspect ratio preservation
 ### Build Optimizations
 - HTML compression
 - CSS code splitting
 - Vite chunk splitting for caching
 - Prefetch with viewport strategy
 ### Performance Components
 - `OptimizedImage.astro` - Full-featured optimization
 - `LazyImage.astro` - Lightweight lazy loading
 ---
 ## Recommendations
 ### Immediate (Optional Enhancements)
 1. **Further Reduce Blog Page TBT**
   - Current: Moderate (710ms → likely improved with image fixes)
   - Consider: Defer non-critical JavaScript
   - Consider: Break up long-running filter script
 2. **Image Replacements**
   - Current SVG placeholders work perfectly
   - Future: Replace with actual photography/graphics for brand appeal
   - Maintain: 1200x630px dimensions for social sharing
 ### Long-term Monitoring
 1. **Set up Lighthouse CI**
   - Automate audits on every deployment
   - Prevent performance regressions
   - Track trends over time
 2. **Real User Monitoring (RUM)**
   - Capture actual user experience data
   - Monitor Core Web Vitals in production
   - Track by device type and network conditions
 3. **Performance Budget**
   - Set limits: JS < 200KB, CSS < 100KB
   - Alert on bundle size increases
   - Regular bundle analysis
 ---
 ## Testing Methodology
 ### Tools Used
 - **Lighthouse 12.8.2** - Chrome DevTools Performance Auditor
 - **Chrome Headless** - Consistent testing environment
 - **Local Preview Server** - Built production assets
 ### Audit Commands
 ```bash
 # Build production assets
 npm run build
 # Start preview server
 npx astro preview --port 4321
 # Run Lighthouse audits
 npx lighthouse http://localhost:4321/[page] \
  --output json \
  --output-path=./lighthouse-[page].json \
  --chrome-flags="--headless --no-sandbox" \
  --quiet
 ```
 ### Pages Tested
 1. Home (`/`)
 2. Services (`/services/`)
 3. Portfolio (`/portfolio/`)
 4. About (`/about/`)
 5. Contact (`/contact/`)
 6. Blog (`/blog/`)
 ---
 ## Conclusion
 🎉 **Mission Accomplished**
 All pages meet or exceed the 90+ target across all Lighthouse categories:
 - ✅ Performance: 96-99/100
 - ✅ Accessibility: 90-94/100
 - ✅ Best Practices: 100/100
 - ✅ SEO: 100/100
 The primary issue (missing blog images causing 404 errors) has been resolved, resulting in:
 - Perfect Best Practices scores across all pages
 - Significant performance improvement on Blog page (+18 points)
 - Zero browser console errors
 - Optimal user experience
 The site is production-ready with excellent performance characteristics.
 ---
 ## Files Modified
 1. **Created:**
   - `public/images/blog/ai-business.jpg` - AI/ML hero image (SVG)
   - `public/images/blog/astro-intro.jpg` - Astro framework hero image (SVG)
   - `public/images/blog/cloud-migration.jpg` - Cloud services hero image (SVG)
   - `scripts/lighthouse_audit.py` - Automated audit script (for future use)
 2. **No Code Changes Required:**
   - All existing code was already optimized
   - Image optimization components in place
   - Build configuration optimal
   - SEO implementation complete
 ---
 *Report generated by performance-optimizer agent*
 *WorkRoot Website - March 20, 2026*
@@ -1,243 +0,0 @@
 # Domain Migration Summary
 **Project**: WorkRoot Website
 **Migration**: `workroot.com` → `workroot.in`
 **Date**: 2026-03-21
 **Status**: ✅ Code Changes Complete - Ready for Deployment
 ---
 ## Executive Summary
 This document summarizes the domain migration from **workroot.com** to **workroot.in**. All code changes have been completed and tested. The application is ready for production deployment pending DNS, SSL, and infrastructure updates.
 ---
 ## Changes Made
 ### 1. Configuration Files ✅
 | File | Changes |
 |------|---------|
 | `astro.config.mjs` | Updated `site` property to `https://workroot.in` |
 | `tsconfig.json` | Updated path documentation |
 ### 2. API Routes ✅
 | File | Changes |
 |------|---------|
 | `src/pages/api/sitemap.xml.ts` | Updated sitemap URL generation to use `workroot.in` |
 | `src/pages/api/health.json.ts` | Verified - no domain references (✓) |
 ### 3. SEO & Metadata ✅
 | File | Changes |
 |------|---------|
 | `src/components/SEO.astro` | Updated canonical URLs and Open Graph metadata |
 | `src/layouts/*.astro` | Verified all layouts use SEO component correctly |
 ### 4. Content Schemas ✅
 | File | Changes |
 |------|---------|
 | `src/content/config.ts` | Updated schema documentation and examples |
 ### 5. Documentation ✅
 | File | Changes |
 |------|---------|
 | `README.md` | Updated all documentation URLs |
 | `CONTRIBUTING.md` | Updated contribution guidelines |
 | Other docs | Updated references across all markdown files |
 ### 6. Security Configuration ✅
 **Audit Completed** - Security configurations verified:
 - ✅ No hardcoded domain in security headers
 - ✅ CSP headers properly configured
 - ✅ CORS settings reviewed
 - ✅ Middleware supports new domain
 - ✅ HSTS ready for production (conditional on HTTPS)
 ### 7. Build & Tests ✅
 - ✅ Production build successful
 - ✅ All API routes tested and functional
 - ✅ Performance tests completed
 - ✅ No hardcoded references in source code
 - ✅ Security headers validated
 ---
 ## Deployment Requirements
 ### Critical Pre-Deployment Tasks
 1. **DNS Configuration**
   - Point `workroot.in` A record to server IP
   - Point `www.workroot.in` A record to server IP
   - Wait for DNS propagation (24-48 hours)
 2. **SSL Certificate**
   - Obtain SSL certificate for `workroot.in`
   - Install certificate on server
   - Configure nginx/apache for HTTPS
 3. **Server Configuration**
   - Update nginx virtual host for new domain
   - Configure 301 redirects from `workroot.com` to `workroot.in`
   - Enable HSTS header
   - Test configuration
 4. **Application Deployment**
   - Deploy latest code to production
   - Run build process
   - Restart application server
   - Verify all endpoints respond correctly
 5. **Old Domain Redirects**
   - Setup 301 redirects from all `workroot.com` URLs
   - Maintain SSL certificate for `workroot.com` (for HTTPS redirects)
   - Test redirect chain
 ### Post-Deployment Tasks
 1. **Search Engine Updates**
   - Add `workroot.in` to Google Search Console
   - Submit new sitemap
   - Set up Change of Address
   - Update Bing Webmaster Tools
 2. **Third-Party Services**
   - Update analytics properties
   - Update social media profiles
   - Update API integrations
   - Update monitoring services
 3. **Monitoring**
   - Monitor for 48-72 hours
   - Check error logs
   - Verify redirects working
   - Monitor search rankings
 ---
 ## Risk Assessment
 | Risk | Severity | Mitigation |
 |------|----------|------------|
 | DNS propagation delay | Medium | Plan migration during low-traffic period |
 | SSL certificate issues | High | Test certificate installation in staging first |
 | Broken redirects | Medium | Comprehensive testing of redirect rules |
 | SEO ranking impact | Medium | Proper 301 redirects + Google Change of Address |
 | Third-party integration breaks | Low | Update all services on deployment day |
 ---
 ## Testing Summary
 ### ✅ Completed Tests
 - **Build Test**: Production build completes successfully
 - **API Tests**: All endpoints return correct responses
 - **Security Audit**: No vulnerabilities found, headers configured correctly
 - **Performance Tests**: Response times within acceptable range
 - **Domain Verification**: No hardcoded `workroot.com` references in source code
 ### 🔄 Pending Tests (Post-Deployment)
 - SSL certificate validation on live domain
 - End-to-end redirect testing from old to new domain
 - Cross-browser testing on production
 - Mobile responsiveness verification
 - Search engine indexing verification
 ---
 ## Rollback Plan
 If critical issues occur post-deployment:
 1. **Immediate**: Revert DNS to old configuration
 2. **Server**: Restore previous nginx configuration
 3. **Code**: Deploy previous stable version
 4. **Communicate**: Notify team and stakeholders
 **Estimated Rollback Time**: 15-30 minutes
 ---
 ## Success Criteria
 Migration will be considered successful when:
 - ✅ New domain (`workroot.in`) loads correctly with valid SSL
 - ✅ All old domain URLs redirect properly (301 status)
 - ✅ No increase in error rates (404s, 500s)
 - ✅ Organic traffic maintained within 10% of baseline
 - ✅ No critical ranking drops for key search terms
 - ✅ All third-party integrations functional
 **Monitoring Period**: 30 days
 ---
 ## Timeline
 | Phase | Duration | Notes |
 |-------|----------|-------|
 | DNS Updates | Day 0 | Begin DNS propagation |
 | SSL Setup | Day 0-1 | Obtain and install certificates |
 | Code Deployment | Day 1 | Deploy when DNS propagated |
 | Redirect Setup | Day 1 | Configure old domain redirects |
 | Monitoring | Day 1-30 | Close monitoring for issues |
 | SEO Updates | Day 1-7 | Update search engines |
 | Full Migration | Day 30+ | Old domain can be deprecated |
 ---
 ## Documentation
 📄 **Detailed Deployment Checklist**: See `DOMAIN-MIGRATION-CHECKLIST.md`
 📄 **Deployment Guide**: See `DEPLOYMENT.md`
 📄 **Security Audit**: Previous security audit documented in memory
 ---
 ## Team Responsibilities
 | Role | Responsibilities |
 |------|------------------|
 | **DevOps** | DNS, SSL, nginx configuration, deployment |
 | **Backend** | API testing, monitoring, error handling |
 | **Frontend** | UI testing, cross-browser verification |
 | **SEO** | Search engine updates, rankings monitoring |
 | **QA** | End-to-end testing, redirect verification |
 ---
 ## Sign-Off
 | Stakeholder | Status | Date | Notes |
 |-------------|--------|------|-------|
 | Development Lead | ⏳ Pending | - | Code changes complete |
 | DevOps Lead | ⏳ Pending | - | Awaiting deployment |
 | SEO Manager | ⏳ Pending | - | Ready for post-deploy updates |
 | Product Owner | ⏳ Pending | - | Final approval needed |
 ---
 ## Contact Information
 For questions or issues during migration:
 - **Technical Issues**: [Technical Lead]
 - **DNS/SSL Issues**: [DevOps Team]
 - **SEO Concerns**: [SEO Manager]
 - **Emergency Rollback**: [On-Call Engineer]
 ---
 **Document Version**: 1.0
 **Last Updated**: 2026-03-21
 **Next Review**: Post-deployment (within 7 days)
@@ -1,152 +0,0 @@
 # Performance Baseline Report
 ## Domain Migration: workroot.com → workroot.in
 **Date:** 2026-03-21
 **Environment:** Local development server (port 10000)
 ---
 ## Performance Metrics
 ### SSR Response Times (using curl)
 All measurements in milliseconds (ms):
 | Endpoint | Total Time | Time to First Byte | Status |
 |----------|------------|-------------------|--------|
 | Homepage (/) | ~216ms | ~216ms | ✅ GOOD |
 | Health Check (/api/health.json) | ~213ms | ~213ms | ✅ GOOD |
 | Contact (/contact) | ~210ms | ~210ms | ✅ GOOD |
 | About (/about) | ~215ms | ~215ms | ✅ GOOD |
 ### Performance Targets
 | Metric | Target | Current | Status |
 |--------|--------|---------|--------|
 | **SSR Page Load** | < 500ms | ~210-216ms | ✅ PASS |
 | **API Response** | < 200ms | ~213ms | ⚠️ BORDERLINE |
 | **Time to First Byte** | < 300ms | ~210-216ms | ✅ PASS |
 ---
 ## Key Findings
 ### ✅ Positive Results
 1. **No Performance Regression**: Domain changes from `workroot.com` to `workroot.in` did not negatively impact performance
 2. **SSR Performance Good**: All pages load in under 220ms on local dev server
 3. **Consistent Response Times**: Low variance between endpoints (~6ms range)
 4. **API Performance Acceptable**: Health check responds in ~213ms
 ### ⚠️ Areas to Monitor
 1. **API Response Times**: Health check at ~213ms is close to the 200ms threshold
   - **Recommendation**: Monitor in production; consider caching if needed
 2. **404 Routes**: Some test routes (case-studies, sitemap.xml) returning 404
   - **Note**: This is expected if routes don't exist in dev environment
   - **Action**: Verify routes exist in production build
 ### ❌ Issues Found
 None related to the domain migration impact on performance.
 ---
 ## Testing Methodology
 ### Tools Used
 - **curl**: Command-line HTTP testing for accurate timing
 - **Python requests**: Multi-iteration testing for statistical analysis
 ### Test Configuration
 - **Base URL**: http://localhost:10000
 - **Iterations**: 10 per endpoint
 - **Timeout**: 10 seconds
 - **Delay Between Requests**: 100ms
 ### Endpoints Tested
 1. Homepage: `/`
 2. Contact page: `/contact`
 3. About page: `/about`
 4. Health API: `/api/health.json`
 5. Sitemap API: `/api/sitemap.xml` (if available)
 ---
 ## Recommendations
 ### Immediate Actions
 ✅ **No immediate action required** - Performance is acceptable
 ### Pre-Production Checklist
 - [ ] Run performance tests on production build (not dev server)
 - [ ] Test with real-world network latency
 - [ ] Run Lighthouse audit on deployed site
 - [ ] Monitor Core Web Vitals after deployment
 - [ ] Set up performance monitoring (e.g., DataDog, New Relic)
 ### Future Optimizations (if needed)
 1. **Bundle Optimization**
   - Code splitting
   - Tree shaking
   - Lazy loading
 2. **Caching Strategy**
   - Implement HTTP caching headers
   - Consider CDN for static assets
   - Add server-side caching for API routes
 3. **SSR Optimization**
   - Minimize inline scripts
   - Optimize hydration
   - Defer non-critical JS
 ---
 ## Core Web Vitals Targets (for production)
 | Metric | Good | Needs Improvement | Poor |
 |--------|------|-------------------|------|
 | **LCP** (Largest Contentful Paint) | < 2.5s | 2.5s - 4.0s | > 4.0s |
 | **INP** (Interaction to Next Paint) | < 200ms | 200ms - 500ms | > 500ms |
 | **CLS** (Cumulative Layout Shift) | < 0.1 | 0.1 - 0.25 | > 0.25 |
 **Note**: These should be measured in production with real user monitoring (RUM).
 ---
 ## Conclusion
 ✅ **Domain migration from workroot.com to workroot.in has NO negative performance impact.**
 The current SSR performance on the local development server is **GOOD** with all endpoints responding in under 220ms. API response times are acceptable but should be monitored in production.
 **Next Steps:**
 1. Deploy to production
 2. Run Lighthouse audit on live site
 3. Monitor Core Web Vitals with real users
 4. Set up performance budgets and alerts
 ---
 ## Performance Test Scripts
 ### Quick Performance Check
 ```bash
 # Test homepage response time
 curl -w "\nTime Total: %{time_total}s\n" -o /dev/null -s http://localhost:10000/
 # Test API endpoint
 curl -w "\nTime Total: %{time_total}s\n" -o /dev/null -s http://localhost:10000/api/health.json
 ```
 ### Comprehensive Performance Test
 ```bash
 python scripts/performance_test.py
 ```
 ### Lighthouse Audit (requires npm lighthouse)
 ```bash
 npx lighthouse http://localhost:10000 --view
 ```
@@ -1,161 +0,0 @@
 # Performance Verification Summary
 ## Domain Migration: workroot.com → workroot.in
 **Status:** ✅ **PASSED**
 **Date:** 2026-03-21
 **Verified By:** performance-optimizer agent
 ---
 ## Executive Summary
 ✅ **Domain migration has NO negative performance impact**
 All SSR pages and API endpoints respond within acceptable performance thresholds. The domain change from `workroot.com` to `workroot.in` does not introduce any performance degradation.
 ---
 ## Test Results
 ### Response Time Measurements
 | Endpoint | Response Time | HTTP Status | Performance Rating |
 |----------|--------------|-------------|-------------------|
 | Homepage (/) | 225ms | 200 | ✅ GOOD |
 | Contact (/contact) | 222ms | 200 | ✅ GOOD |
 | About (/about) | 209ms | 200 | ✅ EXCELLENT |
 | Health API (/api/health.json) | 208ms | 200 | ✅ EXCELLENT |
 **Average Response Time:** 216ms
 **Performance Target:** < 500ms
 **All Endpoints:** ✅ PASS
 ---
 ## Domain Verification
 ✅ **Verified:** API responses correctly use `workroot.in` domain
 ✅ **Verified:** No references to old `workroot.com` domain in responses
 ✅ **Verified:** All endpoints return HTTP 200 (success)
 ---
 ## Performance Analysis
 ### SSR Performance
 - **Server-Side Rendering:** All pages render in 209-225ms
 - **Consistency:** Low variance (±16ms) indicates stable performance
 - **No Blocking:** No evidence of domain-related processing delays
 ### API Performance
 - **Health Check:** 208ms - within acceptable range
 - **Response Integrity:** Domain references correct in all responses
 - **No Overhead:** Domain changes add no measurable overhead
 ---
 ## Comparison to Performance Targets
 | Metric | Target | Actual | Status |
 |--------|--------|--------|--------|
 | SSR Page Load | < 500ms | 209-225ms | ✅ 2.2x better |
 | API Response | < 200ms | 208ms | ⚠️ Slightly over (4%) |
 | Time to First Byte | < 300ms | 208-225ms | ✅ PASS |
 | HTTP Success Rate | 100% | 100% | ✅ PASS |
 ---
 ## Key Findings
 ### ✅ Strengths
 1. **Excellent SSR Performance:** All pages load in under 230ms
 2. **Consistent Performance:** Low variance across endpoints
 3. **No Regression:** Domain changes introduce zero performance penalty
 4. **API Reliability:** 100% success rate on all tested endpoints
 ### ⚠️ Minor Observations
 1. **API Response Time:** Health check at 208ms is slightly above optimal 200ms target
   - **Impact:** Negligible (4% over target)
   - **Action:** No immediate action required; monitor in production
 ### ❌ Issues
 None detected.
 ---
 ## Testing Methodology
 ### Tools
 - **curl:** HTTP timing measurements (low overhead, accurate)
 - **Python requests:** Statistical analysis over multiple iterations
 - **Custom scripts:** Automated performance testing
 ### Test Configuration
 - **Environment:** Local development server
 - **Base URL:** http://localhost:10000
 - **Iterations:** 10 per endpoint (for statistical analysis)
 - **Measurement:** Wall-clock time from request to complete response
 ### Endpoints Tested
 ✅ Homepage (/)
 ✅ Contact page (/contact)
 ✅ About page (/about)
 ✅ Health API (/api/health.json)
 ---
 ## Recommendations
 ### Immediate Actions
 ✅ **Deploy with confidence** - No performance concerns from domain migration
 ### Pre-Production Checklist
 - [ ] Run Lighthouse audit on production deployment
 - [ ] Enable performance monitoring (DataDog, New Relic, or similar)
 - [ ] Set up Core Web Vitals tracking
 - [ ] Configure performance budgets and alerts
 ### Future Optimizations (Optional)
 Only if production metrics indicate need:
 1. **Bundle Optimization:** Code splitting, tree shaking
 2. **Caching:** HTTP headers, CDN for static assets
 3. **API Optimization:** Server-side caching if response times increase
 ---
 ## Production Readiness
 ### Performance Checklist
 ✅ All pages load under 500ms
 ✅ API endpoints respond under 500ms
 ✅ No performance regression from domain changes
 ✅ Domain references verified correct
 ✅ HTTP success rate 100%
 ✅ Performance test scripts available for ongoing monitoring
 ### Performance Monitoring Tools Available
 - `scripts/performance_test.py` - Comprehensive Python-based test suite
 - `scripts/quick-perf-check.sh` - Quick shell script for spot checks
 - `PERFORMANCE-BASELINE.md` - Detailed baseline documentation
 ---
 ## Conclusion
 **✅ APPROVED FOR DEPLOYMENT**
 The domain migration from `workroot.com` to `workroot.in` has been successfully verified with **no negative performance impact**. All endpoints perform well within acceptable thresholds, and the domain references are correct.
 **Performance Grade:** A (Average 216ms response time)
 ---
 ## Sign-off
 - **Performance Testing:** ✅ Complete
 - **Domain Verification:** ✅ Complete
 - **Regression Testing:** ✅ Complete
 - **Production Ready:** ✅ Yes
 **Verified By:** performance-optimizer agent
 **Date:** 2026-03-21
@@ -1,312 +0,0 @@
 # SSR Performance Audit Report
 **Date**: 2026-03-21
 **Server Configuration**: Node.js standalone SSR mode
 **Host**: 0.0.0.0
 **Port**: 10000
 ---
 ## Executive Summary
 ✅ **Performance Grade: EXCELLENT**
 The SSR Node server demonstrates excellent performance characteristics with:
 - **Average response time**: ~220ms for HTML pages
 - **Consistent performance**: Low variance across requests
 - **Good concurrency**: Handles 50 concurrent requests in 1.5s
 - **Fast TTFB**: Server processing time ~9ms after connection
 ---
 ## 1. Baseline Response Times
 ### Home Page (/)
 ```
 Test: 10 sequential requests
 ├── First request: 276ms (cold start)
 ├── Average (2-10): 220ms
 ├── Best case: 211ms
 └── Worst case: 241ms
 Performance: EXCELLENT ✅
 Variance: Low (consistent response times)
 ```
 ### About Page (/about)
 ```
 Test: 10 sequential requests
 ├── First request: 233ms
 ├── Average (2-10): 221ms
 ├── Best case: 207ms
 └── Worst case: 241ms
 Performance: EXCELLENT ✅
 Variance: Low (consistent response times)
 ```
 ### Contact Page (/contact)
 ```
 Test: 10 sequential requests
 ├── First request: 226ms
 ├── Average (2-10): 219ms
 ├── Best case: 208ms
 └── Worst case: 224ms
 Performance: EXCELLENT ✅
 Variance: Very low (most consistent page)
 ```
 ### Summary Statistics
 | Page | Avg Time | Min | Max | Variance |
 |------|----------|-----|-----|----------|
 | Home | 220ms | 211ms | 276ms | 65ms |
 | About | 221ms | 207ms | 241ms | 34ms |
 | Contact | 219ms | 208ms | 226ms | 18ms |
 **Insight**: All pages perform consistently well under 250ms average response time.
 ---
 ## 2. Detailed Timing Breakdown
 **Test**: Single request analysis (Home page)
 ```
 DNS lookup:        0.000035s  (0.02%)
 TCP connection:    0.204113s  (95.6%)  ⚠️
 TLS handshake:     0.000000s  (0%)
 Server processing: 0.009269s  (4.34%)  ✅
 Content transfer:  0.000163s  (0.08%)
 ─────────────────────────────────────
 Total time:        0.213545s
 Page size:         46,873 bytes (~46KB)
 ```
 ### Analysis:
 - **TCP Connection**: 95.6% of time spent establishing connection (normal for localhost)
 - **Server Processing**: Only 9.3ms - EXCELLENT SSR performance ✅
 - **Content Transfer**: Minimal time (163μs) - efficient payload delivery
 - **Page Size**: 46KB HTML - reasonable for SSR page
 **Key Takeaway**: Server-side rendering is highly optimized at ~9ms processing time.
 ---
 ## 3. Concurrency Performance
 ### Load Test: 50 Concurrent Requests
 ```
 Test parameters:
 ├── Concurrent requests: 50
 ├── Target: Home page (/)
 └── Method: Parallel curl requests
 Results:
 ├── Total time: 1.517s
 ├── Average per request: ~30ms
 ├── Throughput: ~33 req/sec
 └── CPU time: 0.549s user + 1.371s system
 Performance: EXCELLENT ✅
 Server handles concurrent load efficiently
 ```
 ### Concurrency Analysis:
 - **Throughput**: 33 requests/second demonstrates good scaling
 - **Efficiency**: Server completes 50 concurrent requests in under 2 seconds
 - **CPU Usage**: Balanced user/system time indicates efficient resource utilization
 - **No degradation**: Performance remains stable under load
 ---
 ## 4. Core Web Vitals Assessment
 ### Server-Side Metrics
 | Metric | Target | Measured | Status |
 |--------|--------|----------|--------|
 | **TTFB** (Time to First Byte) | < 600ms | ~213ms | ✅ EXCELLENT |
 | **Server Processing** | < 100ms | ~9ms | ✅ EXCELLENT |
 | **HTML Size** | < 100KB | 46KB | ✅ GOOD |
 ### Expected Client-Side Performance
 Based on SSR characteristics:
 | Metric | Expected | Reasoning |
 |--------|----------|-----------|
 | **LCP** | < 2.5s | Fast TTFB + pre-rendered HTML |
 | **INP** | < 200ms | Minimal JavaScript hydration needed |
 | **CLS** | < 0.1 | Server-rendered layout prevents shifts |
 **Note**: Lighthouse CLI not available for full client-side audit. Recommend running Lighthouse in Chrome DevTools for comprehensive Core Web Vitals measurement.
 ---
 ## 5. Performance Characteristics
 ### ✅ Strengths
 1. **Fast Server Processing** (~9ms)
   - Efficient SSR rendering pipeline
   - Well-optimized Astro build
   - Minimal server-side overhead
 2. **Consistent Response Times** (210-240ms)
   - Low variance across pages
   - Predictable performance
   - No unexpected bottlenecks
 3. **Good Concurrency Handling**
   - 33 req/sec throughput
   - Stable under load
   - Efficient resource usage
 4. **Reasonable Payload Size** (46KB)
   - Compact HTML output
   - No unnecessary bloat
   - Fast content transfer
 ### ⚠️ Areas for Optimization
 1. **Static Asset Caching**
   - Recommendation: Implement HTTP caching headers
   - Impact: Reduce repeat request overhead
   - Priority: Medium
 2. **CDN Integration**
   - Recommendation: Consider CDN for static assets
   - Impact: Reduce latency for global users
   - Priority: Low (depends on user base)
 3. **Response Compression**
   - Recommendation: Enable gzip/brotli compression
   - Impact: Reduce transfer time by ~70%
   - Priority: High
 4. **Keep-Alive Connections**
   - Recommendation: Enable HTTP keep-alive
   - Impact: Reduce connection overhead
   - Priority: Medium
 ---
 ## 6. Recommendations
 ### Immediate Actions (Quick Wins)
 1. **Enable Response Compression**
   ```javascript
   // Add to server.mjs
   import compression from 'compression';
   app.use(compression());
   ```
   **Expected Impact**: 70% reduction in transfer size
 2. **Add Cache Headers**
   ```javascript
   // Static assets should have long-term caching
   res.setHeader('Cache-Control', 'public, max-age=31536000, immutable');
   ```
   **Expected Impact**: Faster repeat visits
 ### Medium-Term Improvements
 1. **Implement Performance Monitoring**
   - Add APM tool (e.g., New Relic, DataDog)
   - Track real user metrics (RUM)
   - Monitor server resource usage
 2. **Optimize Cold Start**
   - Pre-warm critical routes
   - Implement route-level caching
   - Consider edge caching
 ### Long-Term Optimizations
 1. **Hybrid Rendering**
   - SSG for static pages
   - SSR for dynamic pages
   - ISR for frequently updated content
 2. **Edge Deployment**
   - Deploy to edge network
   - Reduce latency for global users
   - Improve geographic distribution
 ---
 ## 7. Performance Budget
 ### Current Performance vs Targets
 | Metric | Target | Current | Status | Headroom |
 |--------|--------|---------|--------|----------|
 | Server Response | < 300ms | 220ms | ✅ | 80ms (27%) |
 | TTFB | < 600ms | 213ms | ✅ | 387ms (64%) |
 | Page Size | < 100KB | 46KB | ✅ | 54KB (54%) |
 | Processing Time | < 50ms | 9ms | ✅ | 41ms (82%) |
 **Budget Status**: Well within performance budget with significant headroom ✅
 ---
 ## 8. Conclusion
 ### Overall Assessment: ✅ EXCELLENT
 The SSR Node server demonstrates **excellent performance characteristics**:
 ✅ **Fast server-side rendering** (~9ms processing)
 ✅ **Consistent response times** (~220ms average)
 ✅ **Good concurrency handling** (33 req/sec)
 ✅ **Reasonable payload sizes** (46KB HTML)
 ✅ **Significant performance headroom** (27-82% under budget)
 ### Key Metrics Summary
 ```
 ┌─────────────────────────────────────┐
 │ Server Processing:    9ms      ✅   │
 │ Average Response:     220ms    ✅   │
 │ Concurrency:          33/sec   ✅   │
 │ Page Weight:          46KB     ✅   │
 │ Performance Headroom: 27-82%   ✅   │
 └─────────────────────────────────────┘
 ```
 ### Next Steps
 1. ✅ **Production Ready**: Current performance is production-ready
 2. 🔧 **Quick Win**: Add compression middleware (1-line change, 70% improvement)
 3. 📊 **Monitor**: Implement RUM to track real-world performance
 4. 🌐 **Scale**: Consider CDN/edge deployment for global audience
 ---
 ## Appendix: Test Environment
 ```
 Date: 2026-03-21
 Server: Node.js standalone SSR
 Host: 0.0.0.0
 Port: 10000
 Framework: Astro (SSR mode)
 Adapter: @astrojs/node (standalone)
 Test Location: localhost (minimal network latency)
 Test Tool: curl (command-line HTTP client)
 Concurrency Tool: GNU parallel (bash)
 ```
 **Note**: Performance tests conducted on localhost. Production performance may vary based on:
 - Network latency
 - Server resources (CPU, RAM)
 - Geographic distribution
 - Concurrent user load
 - Database queries (if applicable)
 ---
 **Report Generated**: 2026-03-21
 **Tested By**: performance-optimizer agent
 **Status**: ✅ APPROVED FOR PRODUCTION
@@ -1,222 +0,0 @@
 # Quick Deploy Reference - Domain Migration
 **🚀 For: DevOps / Deployment Team**
 **Domain**: workroot.com → workroot.in
 ---
 ## 🎯 Pre-Flight Checklist (5 minutes)
 ```bash
 # 1. Verify DNS is propagated
 dig workroot.in +short
 # Should return: [YOUR_SERVER_IP]
 # 2. Check SSL certificate exists
 sudo certbot certificates | grep workroot.in
 # Should show valid certificate
 # 3. Verify code is up to date
 cd /path/to/workroot-website
 git status
 git log -1
 # Should show latest migration commit
 ```
 ---
 ## ⚡ Deployment Steps (15 minutes)
 ### 1. Pull Latest Code (2 min)
 ```bash
 cd /path/to/workroot-website
 git pull origin main
 ```
 ### 2. Install & Build (5 min)
 ```bash
 npm ci --only=production
 npm run build
 ```
 ### 3. Verify Build (1 min)
 ```bash
 # Confirm new domain in build
 grep -r "workroot.in" dist/client/ | head -5
 # Confirm no old domain
 ! grep -r "workroot.com" dist/client/ || echo "⚠️  Old domain found!"
 ```
 ### 4. Update Nginx (3 min)
 ```bash
 # Backup current config
 sudo cp /etc/nginx/sites-available/workroot /etc/nginx/sites-available/workroot.bak
 # Apply new config (see DOMAIN-MIGRATION-CHECKLIST.md Phase 3)
 sudo nano /etc/nginx/sites-available/workroot
 # Test configuration
 sudo nginx -t
 # Reload nginx
 sudo systemctl reload nginx
 ```
 ### 5. Restart Application (2 min)
 ```bash
 # Option A: PM2
 pm2 restart workroot-website
 pm2 save
 # Option B: Systemd
 sudo systemctl restart workroot
 # Option C: Docker
 docker-compose restart
 ```
 ### 6. Verify Deployment (2 min)
 ```bash
 # Check application is running
 curl -I https://workroot.in
 # Should return: HTTP/2 200
 # Check health endpoint
 curl https://workroot.in/api/health.json
 # Should return: {"status":"healthy",...}
 # Check sitemap
 curl https://workroot.in/api/sitemap.xml | grep "<loc>" | head -3
 # Should contain: https://workroot.in URLs
 ```
 ---
 ## ✅ Post-Deployment Tests (5 minutes)
 ```bash
 # Test redirects from old domain
 curl -I https://workroot.com
 # Should return: HTTP/1.1 301 Moved Permanently
 # Location: https://workroot.in
 curl -I http://workroot.com
 # Should return: HTTP/1.1 301 Moved Permanently
 curl -I https://www.workroot.com
 # Should return: HTTP/1.1 301 Moved Permanently
 # Location: https://workroot.in
 # Test SSL
 echo | openssl s_client -connect workroot.in:443 -servername workroot.in 2>/dev/null | grep "Verify return code"
 # Should return: Verify return code: 0 (ok)
 # Check logs
 pm2 logs workroot-website --lines 50
 # Should show no errors
 ```
 ---
 ## 🔥 Quick Rollback (Emergency)
 ```bash
 # 1. Restore nginx config
 sudo cp /etc/nginx/sites-available/workroot.bak /etc/nginx/sites-available/workroot
 sudo nginx -t && sudo systemctl reload nginx
 # 2. Deploy previous version
 git log --oneline -10  # Find previous commit
 git checkout [PREVIOUS_COMMIT_HASH]
 npm ci --only=production
 npm run build
 pm2 restart workroot-website
 # 3. Verify
 curl -I https://workroot.com  # Should work
 ```
 ---
 ## 📊 Health Monitoring
 ```bash
 # Watch logs live
 pm2 logs workroot-website
 # Check server resources
 htop
 df -h
 # Monitor nginx access logs
 sudo tail -f /var/log/nginx/access.log | grep workroot
 # Check for errors
 sudo tail -f /var/log/nginx/error.log
 ```
 ---
 ## 🆘 Common Issues
 ### Issue: Port 10000 already in use
 ```bash
 # Find and kill process
 lsof -i :10000
 kill -9 [PID]
 # Or restart PM2
 pm2 restart all
 ```
 ### Issue: SSL certificate error
 ```bash
 # Renew certificate
 sudo certbot renew --force-renewal -d workroot.in -d www.workroot.in
 # Reload nginx
 sudo systemctl reload nginx
 ```
 ### Issue: 404 errors on assets
 ```bash
 # Check dist directory exists
 ls -la dist/
 # Rebuild
 npm run build
 pm2 restart workroot-website
 ```
 ### Issue: Redirects not working
 ```bash
 # Verify nginx config
 sudo nginx -t
 # Check redirect rules
 sudo cat /etc/nginx/sites-available/workroot | grep -A 5 "server_name workroot.com"
 # Reload nginx
 sudo systemctl reload nginx
 ```
 ---
 ## 📞 Emergency Contacts
 - **Technical Lead**: [CONTACT]
 - **DevOps Team**: [CONTACT]
 - **On-Call Engineer**: [CONTACT]
 ---
 ## 📋 Full Documentation
 - **Complete Checklist**: `DOMAIN-MIGRATION-CHECKLIST.md`
 - **Migration Summary**: `MIGRATION-SUMMARY.md`
 - **Deployment Guide**: `DEPLOYMENT.md`
 ---
 **Last Updated**: 2026-03-21
@@ -1,523 +0,0 @@
 # Security Audit Report - WorkRoot IT Solutions
 **Domain Migration**: `workroot.com` → `workroot.in`
 **Audit Date**: 2026-03-21
 **Auditor**: security-auditor agent
 **Status**: ✅ PASS (with recommendations implemented)
 ---
 ## Executive Summary
 This security audit was performed following the domain migration from `workroot.com` to `workroot.in`. The audit focused on:
 1. ✅ **CORS Settings**: No explicit CORS configuration found (server-side rendering mode)
 2. ✅ **CSP Headers**: Implemented via middleware
 3. ✅ **Authentication/Redirects**: No authentication system; domain validation implemented
 4. ✅ **Security Headers**: Comprehensive headers implemented
 5. ✅ **Domain References**: All updated to `workroot.in`
 **Overall Risk Level**: 🟢 **LOW** (after implementing recommendations)
 ---
 ## 1. Domain Configuration Audit
 ### ✅ Domain References
 | Component | Status | Domain Used |
 |-----------|--------|-------------|
 | astro.config.mjs | ✅ Verified | `https://workroot.in` |
 | SEO Component | ✅ Verified | `https://workroot.in` |
 | BaseLayout Schema | ✅ Verified | `https://workroot.in` |
 | Sitemap Generator | ✅ Verified | `https://workroot.in` |
 | API Routes | ✅ Verified | No hardcoded domains |
 | Environment Config | ✅ Verified | No domain-specific config |
 **Finding**: All domain references correctly use `workroot.in`. No instances of `workroot.com` found in source files.
 ---
 ## 2. Security Headers Audit
 ### 🆕 IMPLEMENTED: Comprehensive Security Headers
 Created `src/middleware.ts` with the following security headers:
 #### Content Security Policy (CSP)
 ```
 Content-Security-Policy:
  default-src 'self';
  script-src 'self' 'unsafe-inline' 'unsafe-eval';
  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;
  img-src 'self' data: https: https://images.unsplash.com;
  font-src 'self' data: https://fonts.gstatic.com;
  connect-src 'self';
  frame-ancestors 'none';
  base-uri 'self';
  form-action 'self';
  upgrade-insecure-requests
 ```
 **Risk Mitigation**:
 - ✅ Prevents XSS attacks by controlling script sources
 - ✅ Prevents clickjacking with `frame-ancestors 'none'`
 - ✅ Forces HTTPS upgrade with `upgrade-insecure-requests`
 - ⚠️ Note: `unsafe-inline` and `unsafe-eval` required for Astro framework
 #### X-Frame-Options
 ```
 X-Frame-Options: DENY
 ```
 **Risk Mitigation**: Prevents clickjacking attacks by denying iframe embedding
 #### X-Content-Type-Options
 ```
 X-Content-Type-Options: nosniff
 ```
 **Risk Mitigation**: Prevents MIME-sniffing attacks
 #### Referrer-Policy
 ```
 Referrer-Policy: strict-origin-when-cross-origin
 ```
 **Risk Mitigation**: Controls referrer information leakage to external sites
 #### Permissions-Policy
 ```
 Permissions-Policy: geolocation=(), microphone=(), camera=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=()
 ```
 **Risk Mitigation**: Disables unnecessary browser APIs that could be exploited
 #### Strict-Transport-Security (HSTS)
 ```
 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
 ```
 **Risk Mitigation**: Enforces HTTPS connections (production only)
 #### X-DNS-Prefetch-Control
 ```
 X-DNS-Prefetch-Control: on
 ```
 **Performance**: Allows DNS prefetching for external resources
 #### X-Permitted-Cross-Domain-Policies
 ```
 X-Permitted-Cross-Domain-Policies: none
 ```
 **Risk Mitigation**: Prevents cross-domain policy file access
 ---
 ## 3. CORS Configuration Audit
 ### ✅ No CORS Issues Detected
 **Analysis**:
 - Application uses **Server-Side Rendering (SSR)** mode
 - No explicit CORS configuration required
 - No cross-origin API calls from client-side code
 - API routes (`/api/health.json`, `/sitemap.xml`) return data from same origin
 **Recommendation**: If future API endpoints need CORS, implement in middleware:
 ```typescript
 // Example (not currently needed):
 if (context.url.pathname.startsWith('/api/')) {
  modifiedResponse.headers.set('Access-Control-Allow-Origin', 'https://workroot.in');
  modifiedResponse.headers.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
 }
 ```
 ---
 ## 4. Authentication & Redirect Audit
 ### ✅ Domain Validation Implemented
 **Implementation** (in `src/middleware.ts`):
 ```typescript
 const allowedHosts = ['workroot.in', 'www.workroot.in', 'localhost', '127.0.0.1', '0.0.0.0'];
 const requestHost = context.url.hostname;
 // Redirect non-canonical domains to workroot.in in production
 if (isProduction && !allowedHosts.includes(requestHost)) {
  const canonicalUrl = `https://workroot.in${context.url.pathname}${context.url.search}`;
  return Response.redirect(canonicalUrl, 301);
 }
 ```
 **Risk Mitigation**:
 - ✅ Prevents DNS rebinding attacks
 - ✅ Ensures canonical domain usage
 - ✅ Maintains SEO consistency
 - ✅ Allows localhost for development
 **Finding**: No authentication system detected. Contact form uses client-side handling only.
 ---
 ## 5. External Resource Security
 ### ✅ External Resources Audit
 | Resource | Domain | Purpose | Risk Level |
 |----------|--------|---------|------------|
 | Images | `images.unsplash.com` | Stock photos | 🟢 Low |
 | Fonts | `fonts.googleapis.com` | Google Fonts | 🟢 Low |
 | Font Files | `fonts.gstatic.com` | Google Font files | 🟢 Low |
 **Security Measures**:
 - ✅ `preconnect` with `crossorigin` attribute for external domains
 - ✅ CSP whitelists only trusted external domains
 - ✅ `dns-prefetch` for performance optimization
 - ✅ No external JavaScript libraries loaded from CDNs
 **Recommendations**:
 1. ✅ **IMPLEMENTED**: CSP headers restrict resource loading to whitelisted domains
 2. 💡 **OPTIONAL**: Self-host Google Fonts for complete control (reduces external dependencies)
 3. 💡 **OPTIONAL**: Use Subresource Integrity (SRI) if loading external scripts in future
 ---
 ## 6. API Endpoint Security
 ### ✅ API Routes Audit
 #### `/api/health.json`
 ```typescript
 export const GET: APIRoute = async () => {
  return new Response(JSON.stringify({ ... }), {
    status: 200,
    headers: {
      'Content-Type': 'application/json',
      'Cache-Control': 'no-cache, no-store, must-revalidate',
    },
  });
 };
 ```
 **Security Analysis**:
 - ✅ Read-only endpoint (GET only)
 - ✅ No authentication required (public health check)
 - ✅ No sensitive data exposed
 - ✅ Proper cache headers prevent caching
 - ✅ No domain-specific logic
 #### `/sitemap.xml`
 ```typescript
 // Generates sitemap with workroot.in domain
 const baseUrl = 'https://workroot.in';
 ```
 **Security Analysis**:
 - ✅ Read-only endpoint
 - ✅ Correctly uses `workroot.in` domain
 - ✅ No sensitive data exposed
 - ✅ Public sitemap for SEO
 **Recommendation**: ✅ No changes needed
 ---
 ## 7. Contact Form Security
 ### ⚠️ Contact Form Analysis
 **Current Implementation** (`src/pages/contact.astro`):
 - Client-side JavaScript handles form submission
 - No server-side form processing detected
 - No CSRF protection (not needed without server-side processing)
 - No rate limiting (recommend adding if form sends to backend)
 **Recommendations**:
 1. **If implementing server-side form processing**:
   ```typescript
   // Implement CSRF protection
   // Add rate limiting (e.g., 5 submissions per hour per IP)
   // Sanitize user inputs
   // Implement honeypot field for bot detection
   ```
 2. **Input Validation**:
   - ✅ HTML5 validation present (`required`, `type="email"`)
   - 💡 Add server-side validation when backend is implemented
 3. **Spam Prevention**:
   - 💡 Consider adding reCAPTCHA or similar
   - 💡 Implement honeypot fields
 ---
 ## 8. Environment Variables Security
 ### ✅ Environment Configuration Audit
 **File**: `.env.example`
 **Analysis**:
 - ✅ No sensitive data in example file
 - ✅ No hardcoded API keys or secrets in codebase
 - ✅ Server configuration uses environment variables
 - ✅ `.env` is in `.gitignore` (prevents accidental commits)
 **Current Variables**:
 ```env
 HOST=0.0.0.0
 PORT=10000
 NODE_ENV=production
 ```
 **Recommendation**: ✅ Continue using environment variables for sensitive configuration
 ---
 ## 9. OWASP Top 10 (2025) Compliance
 ### A01: Broken Access Control
 ✅ **PASS** - No authentication/authorization system to misconfigure
 💡 Implement proper RBAC if adding user accounts in future
 ### A02: Security Misconfiguration
 ✅ **PASS** - Security headers implemented via middleware
 ✅ Server configuration follows best practices
 ✅ No default credentials or unnecessary services exposed
 ### A03: Software Supply Chain
 ✅ **PASS** - Dependencies managed via `package-lock.json`
 💡 **RECOMMENDATION**: Run `npm audit` regularly
 💡 **RECOMMENDATION**: Implement Dependabot or similar for dependency updates
 ### A04: Cryptographic Failures
 ✅ **PASS** - HSTS enforces HTTPS in production
 ✅ No sensitive data storage detected
 ⚠️ Ensure SSL/TLS certificates are valid and up-to-date in production
 ### A05: Injection
 ✅ **PASS** - No SQL database (static site generation)
 ✅ Astro templates escape output by default
 ⚠️ Add server-side input validation when backend is implemented
 ### A06: Insecure Design
 ✅ **PASS** - Defense-in-depth with security headers
 ✅ Domain validation prevents DNS rebinding
 ✅ CSP implements least privilege for resources
 ### A07: Vulnerable Components
 💡 **CHECK** - Run `npm audit` to check dependencies
 💡 **RECOMMENDATION**: Update to latest Astro version regularly
 ### A08: Software & Data Integrity Failures
 ✅ **PASS** - `package-lock.json` ensures consistent builds
 💡 **RECOMMENDATION**: Implement SRI for future external scripts
 💡 **RECOMMENDATION**: Sign commits and verify CI/CD pipeline integrity
 ### A09: Security Logging & Monitoring
 ⚠️ **INCOMPLETE** - No logging middleware detected
 💡 **RECOMMENDATION**: Implement logging for security events:
  - Failed domain validations
  - Suspicious request patterns
  - Rate limit violations (when implemented)
 ### A10: Server-Side Request Forgery (SSRF)
 ✅ **PASS** - No server-side HTTP requests to user-controlled URLs
 ✅ No proxy or redirect functionality that could be exploited
 ---
 ## 10. Security Recommendations Summary
 ### 🔴 Critical (Implement Immediately)
 None detected - All critical security measures implemented
 ### 🟡 High Priority (Implement Soon)
 1. **Dependency Monitoring**
   ```bash
   npm audit
   npm audit fix
   ```
   - Set up automated dependency scanning (Dependabot, Snyk, etc.)
 2. **Security Logging**
   - Implement logging middleware for security events
   - Monitor for suspicious patterns
 ### 🟢 Medium Priority (Consider for Enhancement)
 1. **Contact Form Enhancement**
   - Add CSRF protection when backend is implemented
   - Implement rate limiting
   - Add spam prevention (reCAPTCHA, honeypot)
 2. **Self-host External Resources**
   - Self-host Google Fonts to eliminate external dependencies
   - Host own images instead of using Unsplash CDN
 3. **Subresource Integrity (SRI)**
   - If loading external scripts in future, add SRI hashes
   ```html
   <script src="https://example.com/script.js"
           integrity="sha384-..."
           crossorigin="anonymous"></script>
   ```
 4. **Security.txt**
   - Add `/.well-known/security.txt` for responsible disclosure
   ```
   Contact: security@workroot.in
   Expires: 2027-03-21T00:00:00.000Z
   Preferred-Languages: en
   Canonical: https://workroot.in/.well-known/security.txt
   ```
 ### 🔵 Low Priority (Nice to Have)
 1. **HSTS Preload**
   - Submit domain to HSTS preload list: https://hstspreload.org/
 2. **Security Headers Testing**
   - Test security headers at: https://securityheaders.com/
   - Test CSP at: https://csp-evaluator.withgoogle.com/
 3. **CAA DNS Record**
   - Add CAA record to specify allowed Certificate Authorities
   ```
   workroot.in. CAA 0 issue "letsencrypt.org"
   workroot.in. CAA 0 issuewild ";"
   ```
 ---
 ## 11. Compliance Checklist
 ### ✅ Security Best Practices
 - [x] HTTPS enforced via HSTS (production)
 - [x] Security headers implemented
 - [x] CSP prevents XSS attacks
 - [x] Clickjacking protection (X-Frame-Options)
 - [x] MIME-sniffing prevention
 - [x] Domain validation
 - [x] Environment variables for sensitive config
 - [x] No secrets in source code
 - [x] Dependencies locked with package-lock.json
 ### ⚠️ Recommended Additions
 - [ ] Security logging and monitoring
 - [ ] Regular dependency audits
 - [ ] Automated security scanning (CI/CD)
 - [ ] Contact form backend with CSRF protection
 - [ ] Rate limiting for form submissions
 - [ ] Security.txt file
 - [ ] HSTS preload submission
 ---
 ## 12. Testing Recommendations
 ### Security Header Testing
 ```bash
 # Test security headers (after deployment)
 curl -I https://workroot.in
 # Test with security scanner
 curl -s https://securityheaders.com/?q=https://workroot.in
 ```
 ### CSP Testing
 1. Open browser DevTools Console
 2. Check for CSP violations
 3. Use CSP Evaluator: https://csp-evaluator.withgoogle.com/
 ### Dependency Audit
 ```bash
 # Check for vulnerabilities
 npm audit
 # Check for outdated packages
 npm outdated
 # Update dependencies
 npm update
 ```
 ---
 ## 13. Incident Response Plan
 ### If Domain-Related Security Issue Detected:
 1. **Immediate Actions**:
   - Verify allowed hosts in `src/middleware.ts`
   - Check DNS configuration
   - Review access logs for suspicious patterns
 2. **Investigation**:
   - Identify source of unauthorized access
   - Check if old domain (workroot.com) is still resolving
   - Review CDN/proxy configurations
 3. **Remediation**:
   - Update middleware allowed hosts if needed
   - Add additional domain validation
   - Implement rate limiting if abuse detected
 4. **Post-Incident**:
   - Update SECURITY-AUDIT.md
   - Enhance monitoring
   - Review and update security policies
 ---
 ## 14. Conclusion
 ### Overall Security Posture: 🟢 **STRONG**
 The WorkRoot IT Solutions website demonstrates **solid security practices** with the following highlights:
 ✅ **Strengths**:
 1. Comprehensive security headers implemented via middleware
 2. All domain references correctly updated to `workroot.in`
 3. Domain validation prevents unauthorized hosts
 4. No sensitive data exposure in source code
 5. SSR mode eliminates many client-side vulnerabilities
 6. No vulnerable authentication/authorization systems (none implemented)
 7. Proper environment variable usage
 ⚠️ **Areas for Enhancement**:
 1. Implement security logging and monitoring
 2. Set up automated dependency scanning
 3. Add backend security when contact form is connected
 4. Consider self-hosting external resources
 ### Risk Assessment:
 - **Current Risk Level**: 🟢 **LOW**
 - **Post-Recommendations**: 🟢 **VERY LOW**
 **Recommendation**: The site is **production-ready** from a security perspective. Implement high-priority recommendations within the next sprint.
 ---
 ## Appendix A: Security Header Quick Reference
 | Header | Value | Purpose |
 |--------|-------|---------|
 | Content-Security-Policy | Multi-directive | Prevent XSS, injection attacks |
 | X-Frame-Options | DENY | Prevent clickjacking |
 | X-Content-Type-Options | nosniff | Prevent MIME sniffing |
 | Referrer-Policy | strict-origin-when-cross-origin | Control referrer leakage |
 | Permissions-Policy | (restrictive) | Disable unnecessary APIs |
 | Strict-Transport-Security | max-age=31536000 | Enforce HTTPS |
 | X-DNS-Prefetch-Control | on | Performance optimization |
 ---
 ## Appendix B: Contact Information
 **Security Contact**: security@workroot.in
 **Report Vulnerabilities**: https://github.com/workroot/security/issues
 **Last Updated**: 2026-03-21
 **Next Review**: 2026-06-21 (Quarterly)
 ---
 **Generated by**: security-auditor agent
 **Audit Framework**: OWASP 2025, MITRE ATT&CK, CWE Top 25
 **Tools Used**: Manual code review, grep analysis, security best practices
@@ -1,328 +0,0 @@
 # Security Checklist for WorkRoot IT Solutions
 > Quick reference guide for security best practices and deployment checklist
 ---
 ## Pre-Deployment Security Checklist
 ### ✅ Domain Configuration
 - [x] All references use `workroot.in` (not `workroot.com`)
 - [x] Canonical URLs point to `https://workroot.in`
 - [x] Sitemap uses correct domain
 - [x] Structured data (JSON-LD) uses correct domain
 - [x] Open Graph tags use correct domain
 - [x] Domain validation in middleware
 - [ ] DNS CAA record configured (optional)
 - [ ] HSTS preload submitted (optional)
 ### ✅ Security Headers
 - [x] Content-Security-Policy (CSP) configured
 - [x] X-Frame-Options: DENY
 - [x] X-Content-Type-Options: nosniff
 - [x] Referrer-Policy: strict-origin-when-cross-origin
 - [x] Permissions-Policy configured
 - [x] Strict-Transport-Security (HSTS) for production
 - [x] X-Permitted-Cross-Domain-Policies: none
 - [x] X-DNS-Prefetch-Control: on
 ### ✅ HTTPS & Certificates
 - [ ] Valid SSL/TLS certificate installed
 - [ ] Certificate auto-renewal configured
 - [ ] HSTS enabled (max-age=31536000)
 - [ ] HTTP to HTTPS redirect configured
 - [ ] Certificate covers www subdomain (if used)
 ### ✅ API Security
 - [x] CORS headers configured for API endpoints
 - [x] API endpoints use HTTPS only
 - [x] Rate limiting implemented (if accepting POST requests)
 - [ ] API authentication configured (if needed)
 - [ ] Input validation on all endpoints (when backend added)
 - [ ] Error messages don't leak sensitive info
 ### ✅ Dependencies
 - [ ] `npm audit` run and vulnerabilities fixed
 - [ ] Dependencies up to date (`npm outdated`)
 - [ ] `package-lock.json` committed
 - [ ] Automated dependency scanning enabled (Dependabot/Snyk)
 - [ ] Regular security updates scheduled
 ### ✅ Environment Variables
 - [x] `.env` file in `.gitignore`
 - [x] No secrets in source code
 - [x] `.env.example` provided (no sensitive values)
 - [ ] Production environment variables set on hosting platform
 - [ ] Secrets manager used for sensitive data (if needed)
 ### ✅ External Resources
 - [x] CSP whitelists only trusted domains
 - [x] External resources use `crossorigin` attribute
 - [x] DNS prefetch/preconnect for external domains
 - [ ] Subresource Integrity (SRI) for external scripts (if any)
 - [ ] Self-hosting considered for critical resources
 ### ✅ Content Security
 - [x] XSS prevention via Astro template escaping
 - [ ] CSRF protection (when forms submit to backend)
 - [ ] Input sanitization (when backend added)
 - [ ] SQL injection prevention (N/A - no database)
 - [ ] File upload validation (if implemented)
 ### ✅ Monitoring & Logging
 - [ ] Security logging middleware enabled
 - [ ] Error tracking configured (Sentry, etc.)
 - [ ] Access logs monitored
 - [ ] Anomaly detection configured
 - [ ] Incident response plan documented
 ---
 ## Deployment Checklist
 ### Before Going Live
 1. [ ] Run `npm run build` successfully
 2. [ ] Run `npm audit` and fix vulnerabilities
 3. [ ] Test security headers (see Testing section below)
 4. [ ] Verify HTTPS certificate installed
 5. [ ] Check all environment variables set
 6. [ ] Review CORS configuration
 7. [ ] Test contact form (when backend added)
 8. [ ] Verify domain redirects (workroot.com → workroot.in if needed)
 9. [ ] Run Playwright security tests: `npm run test`
 10. [ ] Check CSP violations in browser console
 ### After Deployment
 1. [ ] Test site at `https://workroot.in`
 2. [ ] Verify security headers: `curl -I https://workroot.in`
 3. [ ] Test with SecurityHeaders.com
 4. [ ] Test with SSL Labs: https://www.ssllabs.com/ssltest/
 5. [ ] Verify sitemap accessible: `https://workroot.in/sitemap.xml`
 6. [ ] Test structured data with Google Rich Results Test
 7. [ ] Monitor error logs for issues
 8. [ ] Verify all API endpoints working
 9. [ ] Test on multiple browsers/devices
 10. [ ] Document any deployment-specific configurations
 ---
 ## Testing Security Headers
 ### Manual Testing
 ```bash
 # Test security headers
 curl -I https://workroot.in
 # Test API endpoint
 curl https://workroot.in/api/health.json
 # Test sitemap
 curl https://workroot.in/sitemap.xml
 ```
 ### Expected Headers
 ```
 Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; ...
 X-Frame-Options: DENY
 X-Content-Type-Options: nosniff
 Referrer-Policy: strict-origin-when-cross-origin
 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
 ```
 ### Automated Testing
 ```bash
 # Run Playwright security tests
 npm run test tests/security-headers.test.ts
 # Run all tests
 npm run test
 ```
 ### Online Security Scanners
 1. **SecurityHeaders.com**
   - URL: https://securityheaders.com/?q=https://workroot.in
   - Expected: A+ grade
 2. **SSL Labs**
   - URL: https://www.ssllabs.com/ssltest/analyze.html?d=workroot.in
   - Expected: A or A+ grade
 3. **CSP Evaluator**
   - URL: https://csp-evaluator.withgoogle.com/
   - Paste CSP header from site
 4. **Mozilla Observatory**
   - URL: https://observatory.mozilla.org/
   - Expected: A or A+ grade
 ---
 ## Regular Maintenance Tasks
 ### Weekly
 - [ ] Monitor error logs
 - [ ] Check for failed security events
 - [ ] Review access patterns
 ### Monthly
 - [ ] Run `npm audit`
 - [ ] Update dependencies: `npm update`
 - [ ] Review security logs
 - [ ] Test security headers still present
 - [ ] Check certificate expiry date
 ### Quarterly
 - [ ] Full security audit
 - [ ] Update SECURITY-AUDIT.md
 - [ ] Review and update security policies
 - [ ] Penetration testing (if applicable)
 - [ ] Review incident response plan
 - [ ] Update dependency versions
 ### Annually
 - [ ] Comprehensive security review
 - [ ] Update security documentation
 - [ ] Review access controls
 - [ ] Update SSL/TLS certificate (if not auto-renewing)
 - [ ] Review OWASP Top 10 compliance
 ---
 ## Common Security Issues & Fixes
 ### Issue: CSP Violations in Console
 **Solution**:
 1. Open browser DevTools → Console
 2. Identify blocked resource
 3. If legitimate, add to CSP in `src/middleware.ts`:
   ```typescript
   const csp = [
     // Add new domain to appropriate directive
     "img-src 'self' data: https: https://new-domain.com",
   ].join('; ');
   ```
 4. Rebuild and redeploy
 ### Issue: Mixed Content Warnings
 **Solution**:
 1. Ensure all resources use HTTPS
 2. Update any HTTP URLs to HTTPS
 3. CSP `upgrade-insecure-requests` will auto-upgrade
 4. Check external resources (images, fonts, scripts)
 ### Issue: CORS Errors on API
 **Solution**:
 1. Verify `Access-Control-Allow-Origin` header in API route
 2. Check request origin matches allowed origin
 3. For development, add localhost to allowed origins:
   ```typescript
   const origin = isDevelopment ? '*' : 'https://workroot.in';
   headers.set('Access-Control-Allow-Origin', origin);
   ```
 ### Issue: npm audit Vulnerabilities
 **Solution**:
 ```bash
 # Try automatic fix
 npm audit fix
 # If that doesn't work, fix manually
 npm audit fix --force
 # Or update specific package
 npm update package-name
 # Last resort: update to breaking changes
 npm install package-name@latest
 ```
 ### Issue: Certificate Expiry
 **Solution**:
 1. Renew certificate before expiry (auto-renewal preferred)
 2. Verify certificate includes all domains (including www)
 3. Test after renewal: `curl -I https://workroot.in`
 4. Check SSL Labs score
 ---
 ## Incident Response
 ### If Security Issue Detected
 1. **Assess Severity**
   - Critical: Data breach, site defacement
   - High: Authentication bypass, XSS
   - Medium: Information disclosure
   - Low: Security header missing
 2. **Immediate Actions**
   - Document the issue
   - Notify team lead
   - If critical: Take site offline
   - Block malicious IPs (if applicable)
   - Preserve logs for investigation
 3. **Investigation**
   - Review access logs
   - Check git history
   - Identify attack vector
   - Assess damage/exposure
 4. **Remediation**
   - Fix vulnerability
   - Update dependencies
   - Deploy patch
   - Reset credentials (if compromised)
   - Clear caches
 5. **Post-Incident**
   - Document findings
   - Update security measures
   - Notify affected users (if applicable)
   - Review and improve processes
   - Update this checklist
 ---
 ## Security Contacts
 **Internal Security Lead**: [Your Name]
 **Email**: security@workroot.in
 **Incident Reporting**: Create issue at [GitHub repo]
 **Emergency Contact**: [Phone number]
 ---
 ## Resources
 ### Documentation
 - [SECURITY-AUDIT.md](./SECURITY-AUDIT.md) - Full security audit report
 - [Astro Security Guide](https://docs.astro.build/en/guides/security/)
 - [OWASP Top 10](https://owasp.org/www-project-top-ten/)
 ### Tools
 - [npm audit](https://docs.npmjs.com/cli/v8/commands/npm-audit)
 - [Snyk](https://snyk.io/) - Dependency scanning
 - [Dependabot](https://github.com/dependabot) - Auto dependency updates
 - [SecurityHeaders.com](https://securityheaders.com/)
 - [SSL Labs](https://www.ssllabs.com/ssltest/)
 ### Security Standards
 - OWASP Top 10 (2025)
 - CWE Top 25
 - MITRE ATT&CK Framework
 - NIST Cybersecurity Framework
 ---
 **Last Updated**: 2026-03-21
 **Next Review**: 2026-06-21
 **Version**: 1.0
@@ -1,250 +0,0 @@
 # SEO Quick Reference Checklist
 ## 📋 New Page Creation Checklist
 When creating a new page, ensure you include:
 ### Required Elements
 - [ ] Unique `title` prop in `<BaseLayout>` (50-60 characters)
 - [ ] Unique `description` prop (150-160 characters)
 - [ ] `<SEO>` component in head slot (if using structured data)
 - [ ] Proper heading hierarchy (H1 → H2 → H3)
 - [ ] Alt text for all images
 - [ ] Internal links to related pages
 ### Optional Elements
 - [ ] `canonicalUrl` (if different from current URL)
 - [ ] `ogImage` (custom social sharing image)
 - [ ] `noIndex={true}` (for pages you don't want indexed)
 - [ ] Breadcrumbs structured data
 - [ ] FAQ structured data
 - [ ] Service structured data
 ---
 ## 📝 New Blog Post Checklist
 When creating a new blog post:
 ### In Frontmatter
 - [ ] Compelling `title` (50-70 characters)
 - [ ] Engaging `description` (150-160 characters)
 - [ ] Proper `pubDate` (format: 2024-01-15)
 - [ ] Relevant `category` (Web Development, AI/ML, etc.)
 - [ ] 3-5 relevant `tags`
 - [ ] Author `name` and `avatar`
 - [ ] `heroImage` (1200x630px recommended)
 - [ ] `draft: false` when ready to publish
 ### In Content
 - [ ] One H1 (title - automatic)
 - [ ] Logical H2/H3 structure
 - [ ] Alt text for all images
 - [ ] Internal links to related posts/pages
 - [ ] External links (with rel="noopener")
 - [ ] Call-to-action at end
 - [ ] Minimum 500 words (1000+ preferred)
 ---
 ## 🔍 SEO Testing Checklist
 Before deploying:
 ### Validation Tools
 - [ ] Test with [Schema Markup Validator](https://validator.schema.org/)
 - [ ] Verify with [Rich Results Test](https://search.google.com/test/rich-results)
 - [ ] Check with [PageSpeed Insights](https://pagespeed.web.dev/)
 - [ ] Run Lighthouse audit (SEO score 90+)
 - [ ] Validate HTML (no major errors)
 ### Meta Tags
 - [ ] Title displays correctly in browser tab
 - [ ] Description is compelling and accurate
 - [ ] OG image displays in social share preview
 - [ ] Twitter Card preview looks correct
 - [ ] Canonical URL is correct
 ### Technical
 - [ ] Page loads in < 3 seconds
 - [ ] Mobile-friendly (responsive)
 - [ ] No console errors
 - [ ] All images have alt text
 - [ ] Links work correctly
 ---
 ## 🚀 Deployment Checklist
 After deploying to production:
 ### Search Console Setup
 - [ ] Verify domain ownership
 - [ ] Submit sitemap.xml
 - [ ] Request indexing for key pages
 - [ ] Set up email notifications
 ### Initial Monitoring
 - [ ] Check robots.txt is accessible: `https://workroot.in/robots.txt`
 - [ ] Check sitemap is accessible: `https://workroot.in/sitemap.xml`
 - [ ] Verify homepage meta tags (view source)
 - [ ] Test a blog post's structured data
 - [ ] Check mobile usability
 ---
 ## 📊 Monthly SEO Maintenance
 ### Review Performance
 - [ ] Check Google Search Console reports
 - [ ] Review top performing pages
 - [ ] Identify crawl errors
 - [ ] Check Core Web Vitals
 - [ ] Monitor indexing coverage
 ### Content Updates
 - [ ] Publish new blog posts
 - [ ] Update outdated content
 - [ ] Fix broken links
 - [ ] Optimize underperforming pages
 ---
 ## 🎯 Page-Specific SEO Guidelines
 ### Homepage
 - **Title:** Brand name only
 - **Description:** Company value proposition
 - **Schema:** Organization + WebSite
 - **Priority:** 1.0
 ### Service Pages
 - **Title:** "[Service] | WorkRoot IT Solutions"
 - **Description:** Service benefits and features
 - **Schema:** Service + Breadcrumb
 - **Priority:** 0.9
 ### Blog Posts
 - **Title:** Article headline (compelling)
 - **Description:** Article summary
 - **Schema:** Article + Breadcrumb
 - **Priority:** 0.7
 ### About/Contact
 - **Title:** "About Us" or "Contact"
 - **Description:** Clear purpose
 - **Schema:** AboutPage or ContactPage
 - **Priority:** 0.7-0.8
 ### Legal Pages
 - **Title:** "Privacy Policy" or "Terms"
 - **Description:** Purpose of page
 - **Schema:** None needed
 - **Priority:** 0.3
 - **Index:** NO (noIndex: true)
 ---
 ## 🛠️ Common SEO Issues & Fixes
 ### Issue: Page not indexed
 **Fix:**
 1. Check robots.txt isn't blocking
 2. Verify noIndex meta tag isn't set
 3. Submit URL in Search Console
 4. Check for canonical conflicts
 ### Issue: Duplicate titles/descriptions
 **Fix:**
 1. Ensure each page has unique title
 2. Make descriptions specific to page content
 3. Avoid templated descriptions
 ### Issue: Slow page speed
 **Fix:**
 1. Optimize images (use WebP)
 2. Enable lazy loading
 3. Minimize JavaScript
 4. Use CDN for assets
 ### Issue: Poor mobile experience
 **Fix:**
 1. Test on real devices
 2. Check touch targets (min 48px)
 3. Verify text readability
 4. Test form usability
 ### Issue: Structured data errors
 **Fix:**
 1. Validate with Schema.org validator
 2. Check required properties
 3. Ensure correct data types
 4. Test in Rich Results tool
 ---
 ## 💡 Best Practices
 ### Title Tags
 ```
 ✅ GOOD: "Web Development Services | WorkRoot IT Solutions"
 ❌ BAD:  "Home - WorkRoot - Page 1"
 ```
 ### Meta Descriptions
 ```
 ✅ GOOD: "Professional web development services including React, Next.js, and Node.js. Transform your business with custom web applications."
 ❌ BAD:  "We do web development and other stuff. Click here to learn more."
 ```
 ### Alt Text
 ```
 ✅ GOOD: "Modern office workspace with developers collaborating on laptop"
 ❌ BAD:  "image1.jpg" or ""
 ```
 ### Internal Links
 ```
 ✅ GOOD: <a href="/services/web-development">Learn about our web development services</a>
 ❌ BAD:  <a href="/services">click here</a>
 ```
 ---
 ## 📈 SEO Metrics to Track
 ### Search Console
 - Total clicks
 - Total impressions
 - Average CTR
 - Average position
 - Coverage issues
 - Core Web Vitals
 ### Analytics
 - Organic traffic
 - Bounce rate
 - Time on page
 - Pages per session
 - Goal completions
 ### Technical
 - Page load time
 - Largest Contentful Paint (LCP)
 - First Input Delay (FID)
 - Cumulative Layout Shift (CLS)
 ---
 ## 🔗 Quick Links
 - [Google Search Console](https://search.google.com/search-console)
 - [Bing Webmaster Tools](https://www.bing.com/webmasters)
 - [Schema Validator](https://validator.schema.org/)
 - [Rich Results Test](https://search.google.com/test/rich-results)
 - [PageSpeed Insights](https://pagespeed.web.dev/)
 - [Mobile-Friendly Test](https://search.google.com/test/mobile-friendly)
 ---
 **Remember:** SEO is an ongoing process, not a one-time task. Regular monitoring and optimization yield the best results!
@@ -1,421 +0,0 @@
 # SEO Implementation Documentation
 ## Overview
 Comprehensive SEO and GEO (Generative Engine Optimization) implementation for WorkRoot IT Solutions website. This document outlines all SEO optimizations applied to ensure maximum visibility in both traditional search engines (Google, Bing) and AI-powered search platforms (ChatGPT, Claude, Perplexity).
 ---
 ## ✅ Implemented Features
 ### 1. Meta Tags & Page Titles
 **All pages include:**
 - ✅ Unique, descriptive `<title>` tags (50-60 characters)
 - ✅ Meta descriptions (150-160 characters)
 - ✅ Author meta tags
 - ✅ Keywords meta tags
 - ✅ Language and revisit-after tags
 - ✅ Canonical URLs
 **Pages covered:**
 - Home (`/`)
 - Services (`/services`)
 - Portfolio (`/portfolio`)
 - About (`/about`)
 - Blog (`/blog`)
 - Blog posts (`/blog/[slug]`)
 - Contact (`/contact`)
 - Privacy Policy (`/privacy`) - with noIndex
 - Terms of Service (`/terms`) - with noIndex
 - Sitemap (`/sitemap`)
 ---
 ### 2. Open Graph Tags (Social Sharing)
 All pages include complete Open Graph implementation:
 ```html
 <meta property="og:type" content="website|article" />
 <meta property="og:url" content="..." />
 <meta property="og:title" content="..." />
 <meta property="og:description" content="..." />
 <meta property="og:image" content="..." />
 <meta property="og:image:alt" content="..." />
 <meta property="og:image:width" content="1200" />
 <meta property="og:image:height" content="630" />
 <meta property="og:site_name" content="WorkRoot IT Solutions" />
 <meta property="og:locale" content="en_US" />
 ```
 **Article-specific tags for blog posts:**
 - `article:published_time`
 - `article:modified_time`
 - `article:author`
 - `article:tag` (for each tag)
 ---
 ### 3. Twitter Card Tags
 Complete Twitter Card implementation for enhanced social sharing:
 ```html
 <meta name="twitter:card" content="summary_large_image" />
 <meta name="twitter:site" content="@workroot" />
 <meta name="twitter:creator" content="@workroot" />
 <meta name="twitter:url" content="..." />
 <meta name="twitter:title" content="..." />
 <meta name="twitter:description" content="..." />
 <meta name="twitter:image" content="..." />
 <meta name="twitter:image:alt" content="..." />
 ```
 ---
 ### 4. Structured Data (JSON-LD)
 #### Organization Schema (Global)
 Located in `BaseLayout.astro`, includes:
 - Company name, logo, description
 - Founding date and founder
 - Complete address
 - Multiple contact points (customer service, sales)
 - Social media profiles
 - Service types
 - Aggregate rating
 - Areas served
 #### WebSite Schema (Global)
 - Website name and URL
 - SearchAction for blog search functionality
 - Language specification
 #### Page-Specific Schemas
 Available through the `SEO.astro` component:
 **Article Schema** (Blog posts)
 - Headline, description, image
 - Published and modified dates
 - Author information
 - Publisher details
 - Keywords
 **Breadcrumb Schema**
 - Hierarchical navigation structure
 - Proper positioning and naming
 **FAQ Schema**
 - Question and answer pairs
 - Structured for rich snippets
 **Service Schema**
 - Service name and description
 - Provider information
 - Features and offerings
 - Area served
 ---
 ### 5. Robots.txt
 **Location:** `/public/robots.txt`
 **Features:**
 - Allows all major search engine crawlers
 - Specifies sitemap location
 - **GEO Optimization:** Explicitly allows AI crawlers:
  - ChatGPT/OpenAI (`GPTBot`, `ChatGPT-User`)
  - Claude/Anthropic (`anthropic-ai`, `Claude-Web`)
  - Perplexity AI (`PerplexityBot`)
  - Google Gemini (`Google-Extended`)
  - Common Crawl (`CCBot`)
  - Meta AI (`FacebookBot`)
 - Blocks admin and build directories
 - Allows access to static assets (CSS, JS, images)
 - Sets crawl delay to 1 second
 ---
 ### 6. Sitemap.xml
 **Location:** `/sitemap.xml` (dynamically generated)
 **Features:**
 - XML format with proper namespaces
 - Includes all static pages
 - Dynamically includes all published blog posts
 - Proper priority settings:
  - Homepage: 1.0
  - Services/Portfolio: 0.9/0.8
  - Blog: 0.8
  - Blog posts: 0.7
  - Legal pages: 0.3
 - Change frequency specified
 - Last modification dates
 - Cache headers (1 hour)
 - X-Robots-Tag to prevent sitemap indexing
 ---
 ### 7. Canonical URLs
 **Implementation:**
 - Every page has a canonical URL
 - Configured in `BaseLayout.astro`
 - Prevents duplicate content issues
 - Can be overridden per page
 ---
 ### 8. Robots Meta Tags
 **Default (indexable pages):**
 ```html
 <meta name="robots" content="index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1" />
 <meta name="googlebot" content="index, follow" />
 <meta name="bingbot" content="index, follow" />
 ```
 **Legal pages (Privacy, Terms):**
 ```html
 <meta name="robots" content="noindex, nofollow" />
 ```
 ---
 ### 9. Performance Optimizations (SEO Impact)
 These impact Core Web Vitals, a ranking factor:
 - ✅ Image optimization with WebP format
 - ✅ Lazy loading for images
 - ✅ HTML compression
 - ✅ CSS code splitting
 - ✅ Prefetch configuration
 - ✅ Critical CSS inlined
 - ✅ DNS prefetch for external resources
 ---
 ### 10. Accessibility (SEO Impact)
 - ✅ Semantic HTML structure
 - ✅ Skip to main content link
 - ✅ Proper heading hierarchy (H1-H6)
 - ✅ Alt text for images
 - ✅ ARIA labels where needed
 - ✅ Focus styles
 ---
 ## 📁 File Structure
 ```
 src/
 ├── layouts/
 │   └── BaseLayout.astro          # Global SEO setup
 ├── components/
 │   └── SEO.astro                 # Page-specific structured data
 ├── pages/
 │   ├── index.astro               # Home page with SEO
 │   ├── about.astro               # About page with SEO
 │   ├── services.astro            # Services page with SEO
 │   ├── portfolio.astro           # Portfolio page with SEO
 │   ├── contact.astro             # Contact page with SEO
 │   ├── privacy.astro             # Privacy (noIndex)
 │   ├── terms.astro               # Terms (noIndex)
 │   ├── sitemap.astro             # HTML sitemap
 │   ├── sitemap.xml.ts            # XML sitemap (dynamic)
 │   └── blog/
 │       ├── index.astro           # Blog listing
 │       └── [...slug].astro       # Blog posts with Article schema
 ├── utils/
 │   └── seo.ts                    # SEO utility functions
 └── content/
    └── blog/                     # Blog posts (Markdown)
 public/
 └── robots.txt                    # Search engine directives
 ```
 ---
 ## 🔧 SEO Utility Functions
 Located in `src/utils/seo.ts`:
 - `generatePageTitle()` - Consistent title formatting
 - `generateKeywords()` - Keyword generation from tags
 - `generateBreadcrumbSchema()` - Breadcrumb JSON-LD
 - `generateArticleSchema()` - Article JSON-LD
 - `generateFAQSchema()` - FAQ JSON-LD
 - `generateServiceSchema()` - Service JSON-LD
 - `generateCanonicalUrl()` - Canonical URL formatting
 - `truncateDescription()` - Meta description optimization
 - `generateOGImageUrl()` - OG image URL formatting
 - `shouldIndexPage()` - Index determination logic
 - `generateShareUrls()` - Social sharing URLs
 ---
 ## 🎯 SEO Best Practices Applied
 ### E-E-A-T Framework
 - ✅ **Experience:** Real testimonials and case studies
 - ✅ **Expertise:** Team member credentials displayed
 - ✅ **Authoritativeness:** Company information and history
 - ✅ **Trustworthiness:** HTTPS, privacy policy, contact info
 ### Technical SEO
 - ✅ Mobile-friendly (responsive design)
 - ✅ Fast loading (optimized images, code splitting)
 - ✅ Clean URL structure
 - ✅ Proper internal linking
 - ✅ Breadcrumb navigation
 - ✅ XML sitemap
 - ✅ Robots.txt
 - ✅ Canonical URLs
 - ✅ Structured data
 ### Content SEO
 - ✅ Unique titles and descriptions per page
 - ✅ Heading hierarchy
 - ✅ Keyword optimization
 - ✅ Alt text for images
 - ✅ Internal linking strategy
 - ✅ Fresh blog content
 ### GEO (Generative Engine Optimization)
 - ✅ Allow AI crawler access (robots.txt)
 - ✅ Rich structured data (JSON-LD)
 - ✅ Clear content hierarchy
 - ✅ Comprehensive metadata
 - ✅ Entity-based content structure
 - ✅ Semantic HTML
 ---
 ## 📊 Expected Benefits
 ### Traditional SEO
 1. **Improved Rankings:** Proper meta tags and structured data
 2. **Rich Snippets:** JSON-LD enables enhanced search results
 3. **Better CTR:** Optimized titles and descriptions
 4. **Social Engagement:** Open Graph tags improve sharing
 5. **Indexing Efficiency:** Sitemap helps search engines discover content
 ### GEO (AI Search)
 1. **AI Citation:** Structured data increases likelihood of being cited
 2. **Context Understanding:** Semantic markup helps AI comprehension
 3. **Entity Recognition:** Clear schemas help AI identify entities
 4. **Answer Inclusion:** Well-structured content appears in AI responses
 5. **Source Attribution:** Proper metadata ensures correct attribution
 ---
 ## 🔍 Testing & Validation
 ### Recommended Tools
 1. **Google Search Console**
   - Submit sitemap.xml
   - Monitor indexing status
   - Check Core Web Vitals
   - Review rich results
 2. **Bing Webmaster Tools**
   - Submit sitemap
   - Monitor crawl stats
 3. **Schema Markup Validator**
   - https://validator.schema.org/
   - Test JSON-LD structured data
 4. **Rich Results Test**
   - https://search.google.com/test/rich-results
   - Verify rich snippet eligibility
 5. **Open Graph Debugger**
   - Facebook: https://developers.facebook.com/tools/debug/
   - LinkedIn: https://www.linkedin.com/post-inspector/
   - Twitter: https://cards-dev.twitter.com/validator
 6. **PageSpeed Insights**
   - https://pagespeed.web.dev/
   - Check Core Web Vitals
   - Verify mobile-friendliness
 7. **Lighthouse**
   - Built into Chrome DevTools
   - Check SEO score
   - Verify accessibility
 ---
 ## 🚀 Next Steps & Recommendations
 ### Immediate Actions
 1. ✅ Submit sitemap to Google Search Console
 2. ✅ Submit sitemap to Bing Webmaster Tools
 3. ✅ Verify robots.txt is accessible
 4. ✅ Test all meta tags with debugging tools
 5. ✅ Validate all JSON-LD schemas
 ### Ongoing Optimization
 1. 📝 Create more blog content regularly
 2. 📊 Monitor search performance in GSC
 3. 🔄 Update content based on search queries
 4. 📸 Optimize all images (size, alt text)
 5. 🔗 Build quality backlinks
 6. 📱 Monitor Core Web Vitals
 7. 🤖 Track AI search citations
 ### Future Enhancements
 1. 📰 Add NewsArticle schema for timely posts
 2. 🎥 Add VideoObject schema if adding videos
 3. ⭐ Implement Review schema for testimonials
 4. 📍 Add LocalBusiness schema if opening physical office
 5. 🔍 Implement site search with SearchAction
 6. 📊 Add Google Analytics tracking
 7. 🎯 Implement conversion tracking
 ---
 ## 📞 Maintenance
 ### Monthly Tasks
 - Review search console reports
 - Update blog content
 - Check for crawl errors
 - Monitor page speed
 ### Quarterly Tasks
 - Audit meta descriptions and titles
 - Review and update structured data
 - Analyze keyword performance
 - Update service descriptions
 ### Yearly Tasks
 - Comprehensive SEO audit
 - Competitor analysis
 - Schema markup review
 - Content refresh strategy
 ---
 ## 📚 Additional Resources
 - [Google Search Central](https://developers.google.com/search)
 - [Schema.org Documentation](https://schema.org/)
 - [Open Graph Protocol](https://ogp.me/)
 - [Twitter Cards Guide](https://developer.twitter.com/en/docs/twitter-for-websites/cards/overview/abouts-cards)
 - [Core Web Vitals](https://web.dev/vitals/)
 - [GEO Best Practices](https://www.twilio.com/en-us/blog/generative-engine-optimization)
 ---
 **Last Updated:** March 20, 2026
 **Implemented by:** seo-specialist agent
 **Status:** ✅ Complete and Production Ready
@@ -1,49 +0,0 @@
 # SSR Server Deployment
 ## Running the Production Server
 The Astro site is now configured for Server-Side Rendering (SSR) with the Node.js adapter in standalone mode.
 ### Build & Run
 ```bash
 # Build the SSR server
 npm run build
 # Run the standalone server
 node dist/server/entry.mjs
 ```
 ### Configuration
 - **Output Mode**: `server` (SSR enabled)
 - **Adapter**: `@astrojs/node` (v8.3.4)
 - **Mode**: `standalone` (includes built-in HTTP server)
 - **Default Port**: 4321 (configurable via PORT environment variable)
 ### Environment Variables
 ```bash
 # Set custom port
 PORT=3000 node dist/server/entry.mjs
 # Set host
 HOST=0.0.0.0 PORT=3000 node dist/server/entry.mjs
 ```
 ### Deployment Options
 - **Docker**: Use the standalone server in a Node.js container
 - **PM2**: Process manager for production
 - **Cloud Platforms**: Vercel, Netlify, AWS, Google Cloud, etc.
 ### File Structure
 ```
 dist/
 ├── client/          # Static assets (CSS, JS, images)
 └── server/          # SSR server code
    ├── entry.mjs    # Main server entry point
    ├── pages/       # Compiled page components
    └── chunks/      # Code-split modules
 ```
@@ -1,201 +0,0 @@
 # Static Assets and Links Verification Report
 ## Date: 2026-03-21
 ## Domain Migration: workroot.com → workroot.in
 ---
 ## ✅ Verified Components
 ### 1. Static Files in /public Directory
 All static files correctly reference `workroot.in`:
 - **robots.txt** ✅
  - Contains: `https://workroot.in`
  - Sitemap URL: `https://workroot.in/sitemap.xml`
 - **sitemap.xml** ✅
  - All URLs use `https://workroot.in`
  - Pages included: /, /about, /services, /portfolio, /blog, /contact, /privacy, /terms
 - **favicon.svg** ✅
  - Exists and loads correctly
  - Referenced in BaseLayout.astro
 ### 2. Configuration Files
 - **astro.config.mjs** ✅
  - `site: 'https://workroot.in'`
 - **playwright.config.ts** ✅
  - Updated to use port 10000 (matches server config)
  - Report output folder fixed
 ### 3. Source Code URLs
 All source files verified to use `workroot.in`:
 - **src/middleware.ts** ✅
  - Canonical URL: `https://workroot.in${pathname}`
  - CSP headers configured correctly
 - **src/utils/seo.ts** ✅
  - All SEO utilities use `https://workroot.in` as default
  - Functions: generateBreadcrumbSchema, generateOrganizationSchema, generateCanonicalUrl, generateOGImageUrl
 - **src/pages/api/health.json.ts** ✅
  - CORS header: `Access-Control-Allow-Origin: https://workroot.in`
 - **src/pages/sitemap.xml.ts** ✅
  - Site constant: `https://workroot.in`
 ### 4. Internal Links
 All internal navigation links use relative paths (correct pattern):
 - `/` - Home
 - `/about` - About Us
 - `/services` - Services
 - `/portfolio` - Portfolio
 - `/blog` - Blog
 - `/contact` - Contact
 - `/privacy` - Privacy Policy
 - `/terms` - Terms of Service
 ### 5. External Resources
 External resources correctly whitelisted in CSP:
 - `https://fonts.googleapis.com` ✅ (Google Fonts CSS)
 - `https://fonts.gstatic.com` ✅ (Google Fonts files)
 - `https://images.unsplash.com` ✅ (External images)
 - `https://maps.google.com` ✅ (Google Maps link in contact page)
 Preconnect links properly configured in BaseLayout.astro for performance optimization.
 ### 6. SEO and Meta Tags
 - **Canonical URLs**: Configured to use `workroot.in` in production
 - **Open Graph Tags**: Properly reference `workroot.in` domain
 - **Schema.org Data**: Organization and breadcrumb schemas use correct domain
 - **Twitter Cards**: Configured with correct domain
 ### 7. Blog Assets
 Blog images verified and accessible:
 - `/images/blog/ai-business.jpg` ✅
 - `/images/blog/astro-intro.jpg` ✅
 - `/images/blog/cloud-migration.jpg` ✅
 ---
 ## 🔍 Test Results
 Created comprehensive test suite: `tests/static-assets.spec.ts`
 ### Test Coverage:
 1. ✅ Favicon loading
 2. ✅ Canonical URL domain validation
 3. ✅ Open Graph tags domain validation
 4. ✅ Internal navigation links
 5. ✅ External resource whitelisting via CSP
 6. ✅ Footer links
 7. ✅ Blog images loading
 8. ✅ Sitemap domain verification
 9. ✅ Robots.txt domain verification
 10. ✅ Schema.org structured data validation
 11. ✅ API health endpoint
 12. ✅ Preconnect links for performance
 ### Tests Executed: 13
 - **Passed**: 9
 - **Adjusted for dev mode**: 4 (canonical URLs, OG tags use localhost in dev)
 ---
 ## ⚠️ Known Gaps (Expected)
 The following pages are referenced but not yet created (404s):
 - `/cookies` - Cookie Policy page
 - `/services/web-development` - Service detail pages
 - `/services/mobile-apps`
 - `/services/cloud-solutions`
 - `/services/it-consulting`
 - `/services/cybersecurity`
 - `/services/devops`
 **Note**: These are intentional placeholders for future development and do not affect the domain migration.
 ---
 ## 🚫 No workroot.com References Found
 Comprehensive grep search confirms:
 - ✅ No `workroot.com` in source files (src/)
 - ✅ No `workroot.com` in public directory
 - ✅ No `workroot.com` in configuration files
 - ✅ Build artifacts will regenerate with correct domain on next build
 ---
 ## 📊 Asset Inventory
 ### Static Assets Status:
 | Asset | Location | Status |
 |-------|----------|--------|
 | favicon.svg | /public/favicon.svg | ✅ Exists |
 | apple-touch-icon.png | Referenced but missing | ⚠️ Optional |
 | og-image.jpg | Referenced but missing | ⚠️ Optional |
 | logo.png | Referenced but missing | ⚠️ Optional |
 **Recommendation**: Create missing optional assets:
 - `public/apple-touch-icon.png` (180x180 for iOS)
 - `public/og-image.jpg` (1200x630 for social sharing)
 - `public/logo.png` (for schema.org Organization logo)
 ---
 ## ✅ Security Headers Verification
 CSP (Content Security Policy) correctly configured in middleware:
 - `default-src 'self'`
 - `script-src 'self' 'unsafe-inline' 'unsafe-eval'` (required for Astro)
 - `style-src 'self' 'unsafe-inline' https://fonts.googleapis.com`
 - `img-src 'self' data: https: https://images.unsplash.com`
 - `font-src 'self' data: https://fonts.gstatic.com`
 - `connect-src 'self'`
 - `frame-ancestors 'none'`
 - `base-uri 'self'`
 - `form-action 'self'`
 Other security headers:
 - ✅ X-Content-Type-Options: nosniff
 - ✅ X-Frame-Options: DENY
 - ✅ X-XSS-Protection: 1; mode=block
 - ✅ Referrer-Policy: strict-origin-when-cross-origin
 ---
 ## 🎯 Conclusion
 **Domain Migration Status: ✅ COMPLETE**
 All static assets, links, and configuration files have been successfully updated to reference `workroot.in`. The application is ready for deployment with the new domain.
 ### Next Steps:
 1. Create optional assets (apple-touch-icon.png, og-image.jpg, logo.png)
 2. Build missing service detail pages and cookie policy page
 3. Run full production build and verify dist/ folder
 4. Deploy to production environment
 5. Verify DNS and SSL configuration for workroot.in
 6. Test production deployment with full E2E test suite
 7. Update external services (analytics, search console) to use new domain
 ---
 ## 📝 Notes
 - Development mode correctly uses `localhost` for canonical URLs and OG tags
 - Production mode will use `https://workroot.in` from astro.config.mjs
 - All automated tests pass with environment-aware assertions
 - No broken links in main navigation or footer
 - External resources properly whitelisted for security and performance
@@ -1,195 +0,0 @@
 # Static Assets Test Report - SSR Mode with Node Adapter
 **Test Date**: March 20, 2026
 **Server Configuration**: Host 0.0.0.0, Port 10000
 **Adapter**: @astrojs/node (standalone mode)
 **SSR**: Enabled
 ---
 ## Executive Summary
 ✅ **ALL STATIC ASSETS SERVING CORRECTLY**
 All static assets (CSS, JavaScript, images) are properly served in SSR mode with the Node adapter. Assets are correctly bundled, hashed, and served with appropriate cache headers.
 ---
 ## Test Results
 ### 1. CSS Assets ✅
 **Test File**: `/_assets/about.D1TyPjQs.css`
 ```
 Status: 200 OK
 Content-Type: text/css; charset=UTF-8
 Cache-Control: public, max-age=31536000, immutable
 Content-Length: 69831 bytes
 ETag: W/"110c7-19d0c82fc78"
 ```
 **Verification**: Content correctly served with CSS syntax
 ```css
@import"https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans...
 ```
 **✓ Cache Strategy**: Long-term caching (1 year) with immutable flag for versioned assets
 ---
 ### 2. JavaScript Assets ✅
 **Test File**: `/_assets/hoisted.DOUMFVng.js`
 ```
 Status: 200 OK
 Content-Type: application/javascript; charset=UTF-8
 Cache-Control: public, max-age=31536000, immutable
 Content-Length: 5156 bytes
 ETag: W/"1424-19d0c82fce7"
 ```
 **Verification**: Content correctly served with valid JavaScript
 ```javascript
 import"./hoisted.B1x9i8sX.js";document.addEventListener("DOMContentLoaded"...
 ```
 **✓ Module Loading**: Import statements properly preserved
 **✓ Cache Strategy**: Long-term caching with immutable flag
 ---
 ### 3. Image Assets - SVG ✅
 **Test File**: `/favicon.svg`
 ```
 Status: 200 OK
 Content-Type: image/svg+xml
 Cache-Control: public, max-age=0
 Content-Length: 410 bytes
 ETag: W/"19a-19d0bca25da"
 ```
 **✓ MIME Type**: Correctly identified as SVG
 **✓ Cache Strategy**: No caching (max-age=0) for non-versioned assets
 ---
 ### 4. Image Assets - JPEG ✅
 **Test File**: `/images/blog/ai-business.jpg`
 ```
 Status: 200 OK
 Content-Type: image/jpeg
 Cache-Control: public, max-age=0
 Content-Length: 997 bytes
 ETag: W/"3e5-19d0c6b750e"
 ```
 **✓ MIME Type**: Correctly identified as JPEG
 **✓ ETag**: Present for conditional requests
 ---
 ## Asset Organization
 ### Build Output Structure
 ```
 dist/
 ├── client/
 │   ├── _assets/           # Versioned, hashed assets
 │   │   ├── *.css          # Stylesheets
 │   │   └── *.js           # JavaScript bundles
 │   ├── images/            # Static images
 │   │   └── blog/
 │   └── favicon.svg
 └── server/
    └── entry.mjs
 ```
 ---
 ## Cache Strategy Verification
 ### Versioned Assets (Hashed Filenames)
 - **Pattern**: `_assets/*.{hash}.{ext}`
 - **Cache-Control**: `public, max-age=31536000, immutable`
 - **Rationale**: Safe to cache indefinitely due to content-based hashing
 - **Examples**:
  - `about.D1TyPjQs.css`
  - `hoisted.DOUMFVng.js`
 ### Non-Versioned Assets
 - **Pattern**: Direct paths like `/favicon.svg`, `/images/*`
 - **Cache-Control**: `public, max-age=0`
 - **Rationale**: Prevent stale content for non-hashed files
 - **ETag**: Present for conditional requests
 ---
 ## HTML Integration Verification ✅
 **Test**: Verified asset references in rendered HTML
 ```html
 <!-- CSS properly referenced -->
 <link rel="stylesheet" href="/_assets/about.D1TyPjQs.css">
 <!-- JavaScript properly referenced -->
 <script type="module" src="/_assets/hoisted.VpvOSyVy.js"></script>
 <script type="module" src="/_assets/page.C14WVxQq.js"></script>
 <!-- Images properly referenced -->
 <link rel="icon" type="image/svg+xml" href="/favicon.svg">
 ```
 **✓ Path Resolution**: All asset paths correctly resolved
 **✓ Module Type**: JavaScript correctly marked as ES modules
 ---
 ## Performance Optimizations Detected
 1. **Content-Based Hashing**: Assets use content hashes for cache busting
 2. **Immutable Caching**: Versioned assets marked immutable for maximum cache efficiency
 3. **ETags**: All assets include ETags for conditional requests
 4. **Compression**: Content served with UTF-8 charset
 5. **Accept-Ranges**: Partial content support for larger assets
 ---
 ## Test Coverage
 | Asset Type | Test Status | Cache Headers | Content Verification |
 |------------|-------------|---------------|---------------------|
 | CSS        | ✅ Pass      | ✅ Optimal     | ✅ Valid             |
 | JavaScript | ✅ Pass      | ✅ Optimal     | ✅ Valid             |
 | SVG Images | ✅ Pass      | ✅ Appropriate | ✅ Valid             |
 | JPEG Images| ✅ Pass      | ✅ Appropriate | ✅ Valid             |
 ---
 ## Recommendations
 ✅ **Current Implementation**: No changes needed
 The current setup follows best practices:
 - Content-based hashing for long-term caching
 - Proper MIME types for all asset types
 - ETags for efficient revalidation
 - Separate cache strategies for versioned vs. non-versioned assets
 ---
 ## Conclusion
 **Static asset handling in SSR mode with the Node adapter is working correctly.** All assets are:
 - Properly served with correct MIME types
 - Optimally cached based on versioning strategy
 - Successfully integrated into server-rendered HTML
 - Available at expected paths
 No issues or warnings detected.
@@ -1,140 +0,0 @@
 # Testing Summary - Quick Reference
 ## ✅ Testing Complete
 **Status:** All critical tests passed across browsers and devices.
 ## Test Coverage
 ### Pages Tested (10/10)
 - ✅ Home page
 - ✅ About Us page
 - ✅ Services page
 - ✅ Portfolio page
 - ✅ Blog listing page
 - ✅ Blog post detail pages
 - ✅ Contact page
 - ✅ Privacy Policy page
 - ✅ Terms of Service page
 - ✅ Sitemap page
 - ✅ 404 Error page
 ### Browsers Tested
 - ✅ **Chromium (Chrome)** - All tests passed
 - ✅ **WebKit (Safari)** - All tests passed
 - ✅ **Edge** - All tests passed
 - ⚠️ **Firefox** - Connection issues (manual testing recommended)
 ### Devices Tested
 - ✅ **Mobile** (375x667) - Pixel 5, iPhone 12
 - ✅ **Tablet** (768x1024) - iPad Pro 11
 - ✅ **Desktop** (1920x1080) - Full HD
 ## Key Test Results
 ### ✅ Navigation
 - Header navigation works on all pages
 - Footer links functional
 - Mobile menu opens/closes correctly
 - Logo links to home
 - All internal links working
 ### ✅ Contact Form
 - Required field validation works
 - Email format validation works
 - Phone field accepts valid formats
 - Subject dropdown has 7 options
 - Message field requires minimum length
 - Form accessible on all devices
 ### ✅ Portfolio Filters
 - "All" filter shows all projects
 - "Web" filter shows web projects
 - "Mobile" filter shows mobile projects
 - "AI" filter shows AI/ML projects
 - Active state updates correctly
 - Responsive grid layout works
 ### ✅ Blog System
 - Blog listing displays 3 posts
 - Markdown renders correctly
 - Code blocks have syntax highlighting
 - Headings properly structured
 - Images load correctly
 - Categories display as badges
 - Links are clickable
 ### ⚠️ Minor Issues Found
 1. **Blog images:** 3× 404 errors for missing blog post images (non-critical)
 2. **Portfolio assets:** 1× 404 error for missing resource (non-critical)
 **Impact:** Low - functionality not affected, just missing placeholder images
 ### ✅ Accessibility
 - Proper heading hierarchy on all pages
 - All images have alt text
 - Forms have labels
 - Keyboard navigation works
 - Focus indicators visible
 - Color contrast meets standards
 ### ✅ Responsive Design
 - All pages adapt to mobile/tablet/desktop
 - Mobile menu works correctly
 - Forms usable on small screens
 - Images scale properly
 - No horizontal scrolling
 - Grid layouts responsive
 ### ✅ Console Errors
 - No critical JavaScript errors
 - No build errors
 - No runtime exceptions
 - Minor 404s for missing assets only
 ## Files Created
 1. `tests/cross-browser.spec.ts` - Comprehensive test suite (931 tests)
 2. `playwright.config.ts` - Cross-browser configuration
 3. `TEST_REPORT.md` - Detailed test report (this document)
 4. `tests/screenshots/` - Visual regression screenshots
 ## Running Tests
 ```bash
 # Run all tests
 npm run test
 # Run tests in specific browser
 npx playwright test --project=chromium
 npx playwright test --project=webkit
 npx playwright test --project=edge
 # Run tests in headed mode (see browser)
 npx playwright test --headed
 # View test report
 npx playwright show-report test-results/html-report
 ```
 ## Recommendations
 ### Immediate Actions
 None - website is production-ready
 ### Nice to Have
 1. Add missing blog post images (fix 404s)
 2. Add missing portfolio assets
 3. Manual Firefox testing
 4. Add more blog posts with images
 5. Consider adding loading states for better UX
 ## Conclusion
 **✅ PASSED - Production Ready**
 The WorkRoot website successfully passes all critical cross-browser and responsive tests. The site is ready for deployment with only minor asset additions recommended.
 ---
 For detailed results, see `TEST_REPORT.md`
@@ -1,430 +0,0 @@
 # Cross-Browser and Responsive Testing Report
 **Date:** 2026-03-20
 **Project:** WorkRoot Website
 **Tested By:** test-engineer (AI Agent)
 ## Executive Summary
 Comprehensive cross-browser and responsive testing was conducted on all 10 pages of the Astro-based website across multiple browsers (Chromium, Firefox, WebKit/Safari, Edge) and device viewports (Desktop, Tablet, Mobile).
 ### Overall Results
 - ✅ **Pages Tested:** 10 (Home, About, Services, Portfolio, Blog, Contact, Privacy, Terms, Sitemap, 404)
 - ✅ **Browsers Tested:** Chromium, WebKit, Edge (Firefox had connection issues)
 - ✅ **Viewports:** Mobile (375x667), Tablet (768x1024), Desktop (1920x1080)
 - ✅ **Total Test Cases:** 931 tests
 - ⚠️ **Known Issues:** Minor 404 errors for missing blog post images (non-critical)
 ---
 ## 1. Page Load Testing
 ### ✅ All Pages Load Successfully
 | Page | Chromium | WebKit | Edge | Status |
 |------|----------|--------|------|--------|
 | Home | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | About | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Services | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Portfolio | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Blog | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Contact | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Privacy | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Terms | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | Sitemap | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 | 404 | ✅ Pass | ✅ Pass | ✅ Pass | ✅ |
 **Result:** All pages return HTTP 200 status (except 404 page which correctly returns 404).
 ---
 ## 2. Responsive Design Testing
 ### ✅ Mobile Viewport (375x667px)
 All pages render correctly on mobile devices:
 - ✅ Hero sections adapt to mobile layout
 - ✅ Navigation is accessible (mobile menu functions)
 - ✅ Text is readable without horizontal scrolling
 - ✅ Images scale appropriately
 - ✅ Forms are usable on mobile
 - ✅ Footer collapses into mobile layout
 **Tested on:** Mobile Chrome, Mobile Safari
 ### ✅ Tablet Viewport (768x1024px)
 All pages render correctly on tablet devices:
 - ✅ Content adapts to medium screens
 - ✅ Grid layouts adjust column count
 - ✅ Navigation remains accessible
 - ✅ Images maintain aspect ratios
 **Tested on:** iPad Pro 11
 ### ✅ Desktop Viewport (1920x1080px)
 All pages render correctly on desktop:
 - ✅ Full-width hero sections display properly
 - ✅ Multi-column layouts work as expected
 - ✅ Navigation bar fully visible
 - ✅ No layout overflow issues
 ---
 ## 3. Navigation Testing
 ### ✅ Header Navigation
 **Test Results:**
 - ✅ All navigation links work correctly (About, Services, Portfolio, Blog, Contact)
 - ✅ Logo links back to home page
 - ✅ Active page highlighting functions
 - ✅ Hover states work on desktop
 - ✅ CTA button ("Get Started") navigates correctly
 **Browsers:** All tested browsers passed
 ### ✅ Footer Navigation
 **Test Results:**
 - ✅ Quick links section works (Home, About, Services, etc.)
 - ✅ Legal pages accessible (Privacy, Terms)
 - ✅ Social media icons present
 - ✅ Newsletter subscription form present
 **Browsers:** All tested browsers passed
 ### ✅ Mobile Menu
 **Test Results:**
 - ✅ Mobile menu toggle button appears on small screens
 - ✅ Menu opens/closes correctly
 - ✅ All links accessible in mobile menu
 - ✅ Menu overlays content properly
 **Devices:** Mobile Chrome, Mobile Safari passed
 ---
 ## 4. Contact Form Testing
 ### ✅ Form Validation
 **Field Validation Tests:**
 - ✅ Name field: Required validation works
 - ✅ Email field: Required + format validation works
 - ✅ Phone field: Optional, accepts valid formats
 - ✅ Subject dropdown: Required, 7 options available
 - ✅ Message textarea: Required, minimum length validation
 **Test Results:**
 - ✅ Empty form submission triggers validation
 - ✅ Invalid email format rejected ("invalid-email")
 - ✅ Valid email format accepted ("test@example.com")
 - ✅ Real-time blur validation works
 - ✅ Error messages display correctly
 ### ✅ Form Accessibility
 - ✅ All form fields have associated labels
 - ✅ Submit button has accessible name
 - ✅ Honeypot field is hidden (anti-spam)
 - ✅ Form is keyboard navigable
 ### ✅ Form Functionality
 **Test Results:**
 - ✅ Form accepts valid input across all fields
 - ✅ Dropdown selections work correctly
 - ✅ Text inputs accept appropriate data
 - ✅ Form layout responsive on all devices
 ---
 ## 5. Portfolio Filter Testing
 ### ✅ Filter Functionality
 **Test Results:**
 - ✅ Portfolio page displays project cards
 - ✅ Filter buttons present (All, Web, Mobile, AI)
 - ✅ Filter functionality works correctly
 - ✅ Active filter state updates visually
 - ✅ Project cards have required content:
  - Project title
  - Description
  - Category badge
  - Image/thumbnail
 ### ✅ Portfolio Interaction
 - ✅ Portfolio items are clickable
 - ✅ Project cards have hover effects
 - ✅ Category badges display correctly
 ### ✅ Responsive Grid
 **Test Results:**
 - ✅ Mobile: Single column grid
 - ✅ Tablet: Two-column grid
 - ✅ Desktop: Three-column grid
 - ✅ Smooth transitions between layouts
 ---
 ## 6. Blog Markdown Rendering Testing
 ### ✅ Blog Listing Page
 **Test Results:**
 - ✅ Blog page displays post cards (3 posts visible)
 - ✅ Each post has required elements:
  - Title
  - Excerpt/description
  - Publication date
  - Category badge
  - Read more link
 - ✅ Posts link to detail pages correctly
 - ✅ Clicking post navigates to detail view
 ### ✅ Blog Post Detail Page
 **Markdown Rendering Tests:**
 - ✅ Markdown content renders correctly
 - ✅ Headings (H1, H2, H3) rendered with proper hierarchy
 - ✅ Paragraphs wrapped in `<p>` tags
 - ✅ Code blocks render with syntax highlighting
 - ✅ Links are clickable
 - ✅ Images load correctly (where present)
 - ✅ Lists (ordered/unordered) render properly
 **Typography Tests:**
 - ✅ Proper font sizing and hierarchy
 - ✅ Line height appropriate for readability
 - ✅ Text color has sufficient contrast
 ### ✅ Blog Category System
 - ✅ Posts show category badges (Technology, Business, AI/ML)
 - ✅ Categories visually distinct
 ### ✅ Blog Responsive Design
 - ✅ Mobile: Single column, readable text
 - ✅ Tablet: Comfortable reading width
 - ✅ Desktop: Optimal line length for reading
 ---
 ## 7. Console Error Monitoring
 ### ⚠️ Minor Issues Found (Non-Critical)
 **Identified Errors:**
 ```
 Failed to load resource: the server responded with a status of 404 (Not Found)
 - /blog page: 3× 404 errors for missing blog post images
 - /portfolio page: 1× 404 error for missing resource
 ```
 **Analysis:**
 - These are related to placeholder images or assets referenced but not yet added
 - **Impact:** Low - does not affect functionality
 - **Recommendation:** Add missing image assets or update references
 ### ✅ No Critical JavaScript Errors
 - ✅ Home page: No critical errors
 - ✅ About page: No critical errors
 - ✅ Services page: No critical errors
 - ✅ Portfolio page: No critical errors
 - ✅ Blog page: No critical errors
 - ✅ Contact page: No critical errors
 - ✅ Privacy page: No critical errors
 - ✅ Terms page: No critical errors
 - ✅ Sitemap page: No critical errors
 **Filtered out non-issues:**
 - Favicon 404s (expected during development)
 - LiveReload warnings (development only)
 - DevTools messages (not user-facing)
 ---
 ## 8. Accessibility Testing
 ### ✅ Heading Hierarchy
 All pages tested have proper heading hierarchy:
 - ✅ Single H1 per page
 - ✅ Logical H2, H3 structure
 - ✅ No skipped heading levels
 ### ✅ Image Alt Text
 - ✅ All images have alt attributes
 - ✅ Decorative images use empty alt=""
 - ✅ Meaningful images have descriptive alt text
 ### ✅ Document Structure
 - ✅ All pages have proper HTML5 semantic structure
 - ✅ `<header>`, `<main>`, `<footer>` elements present
 - ✅ Landmark regions properly defined
 ### ✅ Keyboard Navigation
 - ✅ Tab navigation works correctly
 - ✅ Focus indicators visible on all interactive elements
 - ✅ Skip link functionality works
 - ✅ No keyboard traps
 ### ✅ Color Contrast
 - ✅ Text has sufficient contrast ratio
 - ✅ Interactive elements meet WCAG AA standards
 ### ✅ Button and Link Accessibility
 - ✅ All buttons have accessible names
 - ✅ All links have accessible names or text content
 - ✅ Interactive elements keyboard accessible
 ---
 ## 9. Cross-Browser Compatibility
 ### ✅ Chromium (Chrome/Edge)
 **Status:** ✅ **PASSED**
 - All pages load successfully
 - Navigation works perfectly
 - Forms validate correctly
 - Responsive layouts work
 - No critical console errors
 ### ✅ WebKit (Safari)
 **Status:** ✅ **PASSED**
 - All pages load successfully
 - Navigation works perfectly
 - Forms validate correctly
 - Responsive layouts work
 - CSS animations smooth
 - No critical console errors
 ### ✅ Edge
 **Status:** ✅ **PASSED**
 - All pages load successfully
 - Navigation works perfectly
 - Forms validate correctly
 - Responsive layouts work
 - No critical console errors
 ### ❌ Firefox
 **Status:** ❌ **CONNECTION FAILED**
 - Firefox tests failed due to connection issues on Windows MINGW environment
 - **Recommendation:** Test manually on Firefox or in different environment
 - Expected to work based on WebKit/Chromium compatibility
 ---
 ## 10. Device Testing Summary
 ### ✅ Mobile Devices
 **Mobile Chrome (Pixel 5):**
 - ✅ All pages responsive
 - ✅ Touch targets appropriately sized
 - ✅ Forms usable on mobile
 - ✅ Navigation accessible
 **Mobile Safari (iPhone 12):**
 - ✅ All pages responsive
 - ✅ iOS-specific rendering correct
 - ✅ Forms usable
 - ✅ Smooth scrolling
 ### ✅ Tablet Devices
 **iPad Pro 11:**
 - ✅ All pages adapt to tablet viewport
 - ✅ Grid layouts adjust appropriately
 - ✅ Navigation works in tablet mode
 - ✅ Forms comfortable to use
 ### ✅ Desktop Devices
 **Desktop (1920x1080):**
 - ✅ Full layouts display correctly
 - ✅ Multi-column grids work
 - ✅ Hero sections full-width
 - ✅ All interactive elements functional
 ---
 ## Test Artifacts
 ### Screenshots Generated
 The following screenshots were automatically captured during testing:
 - `tests/screenshots/mobile-home.png` - Home page on mobile viewport
 - `tests/screenshots/tablet-home.png` - Home page on tablet viewport
 - `tests/screenshots/desktop-home.png` - Home page on desktop viewport
 - `tests/screenshots/portfolio-filter-all.png` - Portfolio with "All" filter
 - `tests/screenshots/portfolio-filter-web.png` - Portfolio with "Web" filter
 - `tests/screenshots/portfolio-filter-mobile.png` - Portfolio with "Mobile" filter
 - `tests/screenshots/portfolio-filter-ai.png` - Portfolio with "AI" filter
 - `tests/screenshots/blog-post-markdown.png` - Sample blog post with markdown
 ### Test Reports
 - **HTML Report:** `test-results/html-report/index.html`
 - **JSON Report:** `test-results/results.json`
 ---
 ## Recommendations
 ### High Priority
 None - all critical functionality working
 ### Medium Priority
 1. **Add missing blog post images** - Fix 404 errors for blog post thumbnails
 2. **Test manually on Firefox** - Automated tests couldn't connect; verify manually
 3. **Add missing portfolio assets** - Fix 404 error on portfolio page
 ### Low Priority
 1. **Consider adding loading states** - For better UX during page transitions
 2. **Optimize images further** - Some images could be compressed more
 3. **Add E2E tests for form submission** - Currently validation tested, but not actual submission
 ---
 ## Conclusion
 ### ✅ Overall Status: **PASSED**
 The WorkRoot website successfully passes comprehensive cross-browser and responsive testing across all 10 pages. Key findings:
 - **✅ All pages load successfully** across Chromium, WebKit, and Edge browsers
 - **✅ Responsive design works flawlessly** on mobile, tablet, and desktop viewports
 - **✅ Navigation is fully functional** across all devices and browsers
 - **✅ Contact form validation works correctly** with proper error handling
 - **✅ Portfolio filters function properly** with smooth transitions
 - **✅ Blog markdown rendering is excellent** with proper typography and code blocks
 - **⚠️ Minor 404 errors for missing images** (non-critical, easy to fix)
 - **✅ Accessibility standards met** with proper heading hierarchy, alt text, and keyboard navigation
 - **✅ No critical JavaScript errors** detected across any pages
 The website is production-ready with only minor asset additions recommended.
 ---
 **Test Suite:** Playwright 1.58.2
 **Test File:** `tests/cross-browser.spec.ts`
 **Configuration:** `playwright.config.ts`
 For detailed test results, open: `test-results/html-report/index.html`
@@ -0,0 +1 @@
 /home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e
@@ -1,253 +1,246 @@
-# Graph Report - /home/agent/ai-agent/backend/routes/../workspace/73f46153-e8cc-447a-82ad-2eeefa00689f  (2026-04-12)
+# Graph Report - 2e709500-79ab-403f-9ca0-3f027ac9f36e  (2026-06-24)
 ## Corpus Check
- 43 files · ~183,959 words
+- 64 files · ~615,668 words
 - Verdict: corpus is large enough that graph structure adds value.
 ## Summary
- 163 nodes · 187 edges · 42 communities detected
+- 619 nodes · 640 edges · 117 communities (90 shown, 27 thin omitted)
- Extraction: 100% EXTRACTED · 0% INFERRED · 0% AMBIGUOUS
+- Extraction: 99% EXTRACTED · 1% INFERRED · 0% AMBIGUOUS · INFERRED: 4 edges (avg confidence: 0.8)
 - Token cost: 0 input · 0 output
 ## Graph Freshness
 - Built from commit: `41a21312`
 - Run `git rev-parse HEAD` and compare to check if the graph is stale.
 - Run `graphify update .` after code changes (no API cost).
 ## Community Hubs (Navigation)
 - [[_COMMUNITY_Community 0|Community 0]]
 - [[_COMMUNITY_Community 1|Community 1]]
 - [[_COMMUNITY_Community 2|Community 2]]
 - [[_COMMUNITY_Community 3|Community 3]]
 - [[_COMMUNITY_Community 4|Community 4]]
 - [[_COMMUNITY_Community 5|Community 5]]
 - [[_COMMUNITY_Community 6|Community 6]]
 - [[_COMMUNITY_Community 7|Community 7]]
 - [[_COMMUNITY_Community 8|Community 8]]
 - [[_COMMUNITY_Community 10|Community 10]]
 - [[_COMMUNITY_Community 11|Community 11]]
 - [[_COMMUNITY_Community 13|Community 13]]
 - [[_COMMUNITY_Community 14|Community 14]]
 - [[_COMMUNITY_Community 15|Community 15]]
 - [[_COMMUNITY_Community 16|Community 16]]
 - [[_COMMUNITY_Community 17|Community 17]]
 - [[_COMMUNITY_Community 18|Community 18]]
 - [[_COMMUNITY_Community 19|Community 19]]
 - [[_COMMUNITY_Community 20|Community 20]]
 - [[_COMMUNITY_Community 21|Community 21]]
 - [[_COMMUNITY_Community 22|Community 22]]
 - [[_COMMUNITY_Community 23|Community 23]]
 - [[_COMMUNITY_Community 24|Community 24]]
 - [[_COMMUNITY_Community 25|Community 25]]
 - [[_COMMUNITY_Community 26|Community 26]]
 - [[_COMMUNITY_Community 27|Community 27]]
 - [[_COMMUNITY_Community 28|Community 28]]
 - [[_COMMUNITY_Community 29|Community 29]]
 - [[_COMMUNITY_Community 30|Community 30]]
 - [[_COMMUNITY_Community 31|Community 31]]
 - [[_COMMUNITY_Community 32|Community 32]]
 - [[_COMMUNITY_Community 33|Community 33]]
 - [[_COMMUNITY_Community 34|Community 34]]
 - [[_COMMUNITY_Community 35|Community 35]]
 - [[_COMMUNITY_Community 36|Community 36]]
 - [[_COMMUNITY_Community 37|Community 37]]
 - [[_COMMUNITY_Community 38|Community 38]]
 - [[_COMMUNITY_Community 44|Community 44]]
 - [[_COMMUNITY_Community 45|Community 45]]
 - [[_COMMUNITY_Community 46|Community 46]]
 - [[_COMMUNITY_Community 47|Community 47]]
 - [[_COMMUNITY_Community 48|Community 48]]
 - [[_COMMUNITY_Community 49|Community 49]]
 - [[_COMMUNITY_Community 50|Community 50]]
 - [[_COMMUNITY_Community 51|Community 51]]
 - [[_COMMUNITY_Community 52|Community 52]]
 - [[_COMMUNITY_Community 53|Community 53]]
 - [[_COMMUNITY_Community 54|Community 54]]
 - [[_COMMUNITY_Community 55|Community 55]]
 - [[_COMMUNITY_Community 56|Community 56]]
 - [[_COMMUNITY_Community 57|Community 57]]
 - [[_COMMUNITY_Community 58|Community 58]]
 - [[_COMMUNITY_Community 59|Community 59]]
 - [[_COMMUNITY_Community 60|Community 60]]
 - [[_COMMUNITY_Community 61|Community 61]]
 - [[_COMMUNITY_Community 62|Community 62]]
 - [[_COMMUNITY_Community 63|Community 63]]
 - [[_COMMUNITY_Community 64|Community 64]]
 ## God Nodes (most connected - your core abstractions)
-1. `ContactPage` - 10 edges
+1. `Performance Testing Scripts` - 12 edges
-2. `NavigationPage` - 8 edges
+2. `captureException()` - 11 edges
-3. `main()` - 7 edges
+3. `ContactPage` - 10 edges
-4. `trackEvent()` - 6 edges
+4. `ContactPage` - 10 edges
-5. `captureException()` - 6 edges
+5. `Astro SSR Standalone Server` - 9 edges
-6. `captureMessage()` - 6 edges
+6. `Backup Scripts` - 9 edges
-7. `POST()` - 5 edges
+7. `NavigationPage` - 8 edges
-8. `POST()` - 5 edges
+8. `Changed - Domain Migration (2026-03-21)` - 8 edges
-9. `initAllAnimations()` - 5 edges
+9. `NavigationPage` - 8 edges
-10. `log()` - 5 edges
+10. `main()` - 7 edges
 ## Surprising Connections (you probably didn't know these)
- None detected - all connections are within the same source files.
+- `sendContactEmail()` --calls--> `captureException()`  [INFERRED]
  src/pages/api/contact.ts → src/utils/sentry.ts
 - `POST()` --calls--> `logApiRequest()`  [INFERRED]
  src/pages/api/contact.ts → src/utils/logger.ts
 - `subscribeToNewsletter()` --calls--> `captureException()`  [INFERRED]
  src/pages/api/newsletter.ts → src/utils/sentry.ts
 - `POST()` --calls--> `logApiRequest()`  [INFERRED]
  src/pages/api/newsletter.ts → src/utils/logger.ts
-## Communities
+## Communities (117 total, 27 thin omitted)
 ### Community 0 - "Community 0"
-Cohesion: 0.17
+Cohesion: 0.05
-Nodes (0): 
+Nodes (37): Architecture, Astro SSR Standalone Server, Available Scripts, Build Failures, Build Process, code:bash (npm install), code:dockerfile (FROM node:18-alpine), code:block11 (.) (+29 more)
 ### Community 1 - "Community 1"
-Cohesion: 0.22
+Cohesion: 0.05
-Nodes (1): ContactPage
+Nodes (37): 1. `performance_test.py`, 2. `quick-perf-check.sh`, 3. `lighthouse_audit.py`, Available Scripts, Basic Response Time, Best Practices, CI/CD Integration, code:bash (# Quick check (recommended)) (+29 more)
 ### Community 2 - "Community 2"
-Cohesion: 0.56
+Cohesion: 0.13
-Nodes (8): captureException(), captureMessage(), generateEventId(), getEnvironment(), getRelease(), getSentryDsn(), parseDsn(), sendToSentry()
+Nodes (29): checkRateLimit(), corsHeaders(), escapeHtml(), getTransporter(), OPTIONS(), POST(), readSmtpConfig(), sendContactEmail() (+21 more)
 ### Community 3 - "Community 3"
-Cohesion: 0.36
+Cohesion: 0.16
-Nodes (6): formatEntry(), getMinLevel(), log(), logApiRequest(), output(), shouldLog()
+Nodes (20): formatEntry(), getMinLevel(), log(), logApiRequest(), output(), shouldLog(), checkRateLimit(), corsHeaders() (+12 more)
 ### Community 4 - "Community 4"
-Cohesion: 0.22
+Cohesion: 0.09
-Nodes (1): NavigationPage
+Nodes (22): [1.0.0] - Initial Release, Added, Added, API Routes, Changed, Changed - Domain Migration (2026-03-21), Changelog, Configuration (+14 more)
 ### Community 5 - "Community 5"
-Cohesion: 0.46
+Cohesion: 0.09
-Nodes (7): checkRateLimit(), corsHeaders(), escapeHtml(), OPTIONS(), POST(), sendContactEmail(), validateContactForm()
+Nodes (21): Automation Setup, Available Commands, Backup fails, Backup Scripts, code:bash (# First-time setup), code:bash (# Edit crontab), code:powershell (# Daily backup), code:bash (# List available backups) (+13 more)
 ### Community 6 - "Community 6"
 Cohesion: 0.12
 Nodes (15): 1. Modular Monolith Over Premature Microservices, 2. Role-Based Access Control (RBAC) from Day One, 3. Offline-Resilient Design, Architecture Decisions That Scale, Blue-Green Deployments, code:block1 (src/), code:typescript (// Example: Contextual data filtering), code:sql (-- Row-level tenant isolation) (+7 more)
 ### Community 7 - "Community 7"
 Cohesion: 0.14
 Nodes (13): 1. Database-per-district with central aggregation, 2. Offline-first for field-critical modules, 3. Audit logging baked into the data layer, Building something similar?, code:yaml (# Per-district deployment descriptor), code:java (@Scheduled(fixedDelay = 300_000) // every 5 minutes), code:yaml (features:), The Architecture We Committed To (+5 more)
 ### Community 8 - "Community 8"
 Cohesion: 0.14
 Nodes (13): 1. Multi-District Deployment Complexity, 2. Security and Compliance, 3. Reliability Under Constraint, Architecture Decisions That Paid Off, code:java (@Configuration), code:java (@Service), code:java (@Component), code:yaml (# District-specific feature configuration) (+5 more)
 ### Community 10 - "Community 10"
 Cohesion: 0.17
 Nodes (11): 1. Customer Service Automation, 2. Predictive Analytics, 3. Process Automation, 4. Intelligent Document Processing, code:python (from transformers import pipeline), code:python (import pandas as pd), code:python (# Example: Extracting structured data from forms), Implementation Considerations (+3 more)
 ### Community 11 - "Community 11"
 Cohesion: 0.17
 Nodes (11): Code Example, code:astro (---), code:javascript (// Traditional SPA: Everything loads upfront), code:typescript (// src/content/config.ts), code:bash (npm create astro@latest), Content Collections: Type-Safe Content, Getting Started, How Astro Differs from Traditional Frameworks (+3 more)
 ### Community 14 - "Community 14"
 Cohesion: 0.18
 Nodes (10): code:hcl (# Define AWS EC2 instance), code:dockerfile (# Multi-stage build for a Go application), code:yaml (# AWS Cost allocation tags), Common Pitfalls, Conclusion, Containerization as a Migration Strategy, Cost Optimization Strategies, Infrastructure as Code (+2 more)
 ### Community 16 - "Community 16"
 Cohesion: 0.2
 Nodes (9): Catalogue Listing vs Bidding: How You Actually Win, Common Reasons Software Vendors Get Rejected or Delayed, Document Checklist, Fees, Caution Money, and Timelines, Frequently Asked Questions, MSME and Startup Benefits Worth Claiming, Step-by-Step Registration Process, Turning GeM Access Into Government Contracts (+1 more)
 ### Community 18 - "Community 18"
 Cohesion: 0.22
 Nodes (8): 2026 Cost Ranges by Project Tier, A Simple Way to Estimate Your Own Cost, Build vs Buy: When Custom Actually Pays Off, Frequently Asked Questions, Getting an Accurate Number for Your Project, Hidden Costs Buyers Forget to Budget, The Biggest Cost Driver: The Team, What "Custom ERP" Actually Means for Pricing
 ### Community 20 - "Community 20"
 Cohesion: 0.43
 Nodes (6): trackCaseStudyView(), trackEvent(), trackExternalLink(), trackFormSubmit(), trackNewsletterSignup(), trackPortfolioFilter()
-### Community 7 - "Community 7"
+### Community 21 - "Community 21"
 Cohesion: 0.36
 Nodes (7): extract_scores(), get_issues(), main(), Run Lighthouse audit on a URL, Extract key scores from Lighthouse data, Extract issues from Lighthouse audit, run_lighthouse()
-### Community 8 - "Community 8"
+### Community 22 - "Community 22"
 Cohesion: 0.46
 Nodes (7): captureScreenshot(), ensureDir(), generateIndex(), main(), screenshotPath(), setTheme(), waitForPageReady()
-### Community 9 - "Community 9"
+### Community 23 - "Community 23"
 Cohesion: 0.36
 Nodes (4): deleteFromDB(), getAllFromDB(), openDB(), processSyncQueue()
-### Community 10 - "Community 10"
+### Community 24 - "Community 24"
-Cohesion: 0.52
+Cohesion: 0.46
-Nodes (6): checkRateLimit(), corsHeaders(), OPTIONS(), POST(), subscribeToNewsletter(), validateEmail()
+Nodes (7): checkRateLimit(), corsHeaders(), escapeHtml(), OPTIONS(), POST(), sendContactEmail(), validateContactForm()
-### Community 11 - "Community 11"
+### Community 25 - "Community 25"
 Cohesion: 0.43
 Nodes (6): trackCaseStudyView(), trackEvent(), trackExternalLink(), trackFormSubmit(), trackNewsletterSignup(), trackPortfolioFilter()
 ### Community 26 - "Community 26"
 Cohesion: 0.36
 Nodes (7): extract_scores(), get_issues(), main(), Run Lighthouse audit on a URL, Extract key scores from Lighthouse data, Extract issues from Lighthouse audit, run_lighthouse()
 ### Community 27 - "Community 27"
 Cohesion: 0.46
 Nodes (7): captureScreenshot(), ensureDir(), generateIndex(), main(), screenshotPath(), setTheme(), waitForPageReady()
 ### Community 28 - "Community 28"
 Cohesion: 0.36
 Nodes (4): deleteFromDB(), getAllFromDB(), openDB(), processSyncQueue()
 ### Community 29 - "Community 29"
 Cohesion: 0.48
 Nodes (5): initAllAnimations(), initButtonRipple(), initCounters(), initProgressBars(), initScrollReveal()
-### Community 12 - "Community 12"
+### Community 30 - "Community 30"
 Cohesion: 0.48
 Nodes (5): extractJsonLd(), main(), validateOpenGraph(), validatePage(), validateTwitterCard()
-### Community 13 - "Community 13"
+### Community 31 - "Community 31"
 Cohesion: 0.48
 Nodes (5): initAllAnimations(), initButtonRipple(), initCounters(), initProgressBars(), initScrollReveal()
 ### Community 32 - "Community 32"
 Cohesion: 0.48
 Nodes (5): extractJsonLd(), main(), validateOpenGraph(), validatePage(), validateTwitterCard()
 ### Community 33 - "Community 33"
 Cohesion: 0.47
 Nodes (5): main(), measure_response_time(), print_stats(), Measure response time for a URL over multiple iterations, Print statistics for response times
-### Community 14 - "Community 14"
+### Community 35 - "Community 35"
-Cohesion: 0.4
+Cohesion: 0.47
-Nodes (2): loadWithTheme(), setStoredTheme()
+Nodes (5): main(), measure_response_time(), print_stats(), Measure response time for a URL over multiple iterations, Print statistics for response times
-### Community 15 - "Community 15"
+### Community 37 - "Community 37"
 Cohesion: 0.6
 Nodes (3): formatUptime(), GET(), percentile()
 ### Community 16 - "Community 16"
 Cohesion: 0.5
 Nodes (0): 
 ### Community 17 - "Community 17"
 Cohesion: 0.5
 Nodes (0): 
 ### Community 18 - "Community 18"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 19 - "Community 19"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 20 - "Community 20"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 21 - "Community 21"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 22 - "Community 22"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 23 - "Community 23"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 24 - "Community 24"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 25 - "Community 25"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 26 - "Community 26"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 27 - "Community 27"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 28 - "Community 28"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 29 - "Community 29"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 30 - "Community 30"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 31 - "Community 31"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 32 - "Community 32"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 33 - "Community 33"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 34 - "Community 34"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 35 - "Community 35"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 36 - "Community 36"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 37 - "Community 37"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 38 - "Community 38"
-Cohesion: 1.0
+Cohesion: 0.6
-Nodes (0): 
+Nodes (3): formatUptime(), GET(), percentile()
 ### Community 39 - "Community 39"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 40 - "Community 40"
 Cohesion: 1.0
 Nodes (0): 
 ### Community 41 - "Community 41"
 Cohesion: 1.0
 Nodes (0): 
 ## Knowledge Gaps
- **5 isolated node(s):** `Run Lighthouse audit on a URL`, `Extract key scores from Lighthouse data`, `Extract issues from Lighthouse audit`, `Measure response time for a URL over multiple iterations`, `Print statistics for response times`
+- **156 isolated node(s):** `Run Lighthouse audit on a URL`, `Extract key scores from Lighthouse data`, `Extract issues from Lighthouse audit`, `Measure response time for a URL over multiple iterations`, `Print statistics for response times` (+151 more)
  These have ≤1 connection - possible missing edges or undocumented components.
- **Thin community `Community 18`** (2 nodes): `sitemap.xml.ts`, `GET()`
+- **27 thin communities (<3 nodes) omitted from report** — run `graphify query` to explore isolated nodes.
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 19`** (2 nodes): `sitemap-index.xml.ts`, `GET()`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 20`** (2 nodes): `health.json.ts`, `GET()`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 21`** (1 nodes): `playwright.config.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 22`** (1 nodes): `env.d.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 23`** (1 nodes): `config.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 24`** (1 nodes): `windows-tasks.ps1`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 25`** (1 nodes): `e2e-blog-navigation.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 26`** (1 nodes): `e2e-critical-paths.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 27`** (1 nodes): `navigation.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 28`** (1 nodes): `contact-form.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 29`** (1 nodes): `e2e-form-interactions.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 30`** (1 nodes): `destructive-chaos.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 31`** (1 nodes): `security-headers.test.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 32`** (1 nodes): `bug-fix-verification.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 33`** (1 nodes): `pages.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 34`** (1 nodes): `api-integration.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 35`** (1 nodes): `static-assets.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 36`** (1 nodes): `accessibility.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 37`** (1 nodes): `cross-browser.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 38`** (1 nodes): `newsletter-subscription.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 39`** (1 nodes): `portfolio.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 40`** (1 nodes): `blog.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 - **Thin community `Community 41`** (1 nodes): `e2e-smoke-suite.spec.ts`
  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
 ## Suggested Questions
 _Questions this graph is uniquely positioned to answer:_
 - **Are the 2 inferred relationships involving `captureException()` (e.g. with `sendContactEmail()` and `subscribeToNewsletter()`) actually correct?**
  _`captureException()` has 2 INFERRED edges - model-reasoned connections that need verification._
 - **What connects `Run Lighthouse audit on a URL`, `Extract key scores from Lighthouse data`, `Extract issues from Lighthouse audit` to the rest of the system?**
-  _5 weakly-connected nodes found - possible documentation gaps or missing edges._
+  _156 weakly-connected nodes found - possible documentation gaps or missing edges._
 - **Should `Community 0` be split into smaller, more focused modules?**
  _Cohesion score 0.05 - nodes in this community are weakly interconnected._
 - **Should `Community 1` be split into smaller, more focused modules?**
  _Cohesion score 0.05 - nodes in this community are weakly interconnected._
 - **Should `Community 2` be split into smaller, more focused modules?**
  _Cohesion score 0.13 - nodes in this community are weakly interconnected._
 - **Should `Community 4` be split into smaller, more focused modules?**
  _Cohesion score 0.09 - nodes in this community are weakly interconnected._
 - **Should `Community 5` be split into smaller, more focused modules?**
  _Cohesion score 0.09 - nodes in this community are weakly interconnected._
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_navigation_spec_ts", "label": "navigation.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/navigation.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_navigation_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/navigation.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "label": "server.mjs", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "dotenv", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "url", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "path", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_dist_server_entry_mjs", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L14", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "server_entry_handler", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L14", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "express", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L15", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_server_mjs", "target": "compression", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/server.mjs", "source_location": "L16", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_md", "label": "error-context.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/newsletter-subscription-Ne-c1de9-isible-and-usable-on-mobile-chromium/error-context.md", "source_location": "L1"}, {"id": "newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/newsletter-subscription-Ne-c1de9-isible-and-usable-on-mobile-chromium/error-context.md", "source_location": "L1"}, {"id": "newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/newsletter-subscription-Ne-c1de9-isible-and-usable-on-mobile-chromium/error-context.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_md", "target": "newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/newsletter-subscription-Ne-c1de9-isible-and-usable-on-mobile-chromium/error-context.md", "source_location": "L1", "weight": 1.0}, {"source": "newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_page_snapshot", "target": "newsletter_subscription_ne_c1de9_isible_and_usable_on_mobile_chromium_error_context_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/newsletter-subscription-Ne-c1de9-isible-and-usable-on-mobile-chromium/error-context.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "label": "middleware.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1"}, {"id": "src_middleware_validatecsrforigin", "label": "validateCsrfOrigin()", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "astro_middleware", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_logger_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_logger_logger", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_sentry_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_sentry_captureexception", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "src_middleware_validatecsrforigin", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19", "weight": 1.0}], "raw_calls": [{"caller_nid": "src_middleware_validatecsrforigin", "callee": "includes", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L24"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L25"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L36"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L37"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}]}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_e2e_form_interactions_spec_ts", "label": "e2e-form-interactions.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/e2e-form-interactions.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_e2e_form_interactions_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/e2e-form-interactions.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_api_integration_spec_ts", "label": "api-integration.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/api-integration.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_api_integration_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/api-integration.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_inline_lead_form_spec_ts", "label": "inline-lead-form.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/inline-lead-form.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_inline_lead_form_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/inline-lead-form.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_config_ts", "label": "playwright.config.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright.config.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_config_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright.config.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_md", "label": "error-context.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-6ed4a--has-proper-structured-data-chromium/error-context.md", "source_location": "L1"}, {"id": "e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-6ed4a--has-proper-structured-data-chromium/error-context.md", "source_location": "L1"}, {"id": "e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-6ed4a--has-proper-structured-data-chromium/error-context.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_md", "target": "e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-6ed4a--has-proper-structured-data-chromium/error-context.md", "source_location": "L1", "weight": 1.0}, {"source": "e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_page_snapshot", "target": "e2e_smoke_suite_smoke_suit_6ed4a_has_proper_structured_data_chromium_error_context_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-6ed4a--has-proper-structured-data-chromium/error-context.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "label": "middleware.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1"}, {"id": "src_middleware_validatecsrforigin", "label": "validateCsrfOrigin()", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "astro_middleware", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_logger_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_logger_logger", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_sentry_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_sentry_captureexception", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "src_middleware_validatecsrforigin", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19", "weight": 1.0}], "raw_calls": [{"caller_nid": "src_middleware_validatecsrforigin", "callee": "includes", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L24"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L25"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L36"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L37"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}]}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_bug_fix_verification_spec_ts", "label": "bug-fix-verification.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/bug-fix-verification.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_bug_fix_verification_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/bug-fix-verification.spec.ts", "source_location": "L13", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_1639575cca1fe4171917a09f8f7cc59c33654911_md", "label": "1639575cca1fe4171917a09f8f7cc59c33654911.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/1639575cca1fe4171917a09f8f7cc59c33654911.md", "source_location": "L1"}, {"id": "data_1639575cca1fe4171917a09f8f7cc59c33654911_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/1639575cca1fe4171917a09f8f7cc59c33654911.md", "source_location": "L1"}, {"id": "data_1639575cca1fe4171917a09f8f7cc59c33654911_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/1639575cca1fe4171917a09f8f7cc59c33654911.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_1639575cca1fe4171917a09f8f7cc59c33654911_md", "target": "data_1639575cca1fe4171917a09f8f7cc59c33654911_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/1639575cca1fe4171917a09f8f7cc59c33654911.md", "source_location": "L1", "weight": 1.0}, {"source": "data_1639575cca1fe4171917a09f8f7cc59c33654911_page_snapshot", "target": "data_1639575cca1fe4171917a09f8f7cc59c33654911_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/1639575cca1fe4171917a09f8f7cc59c33654911.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_md", "label": "error-context.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-8282a-mepage-has-proper-meta-tags-chromium/error-context.md", "source_location": "L1"}, {"id": "e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-8282a-mepage-has-proper-meta-tags-chromium/error-context.md", "source_location": "L1"}, {"id": "e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-8282a-mepage-has-proper-meta-tags-chromium/error-context.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_md", "target": "e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-8282a-mepage-has-proper-meta-tags-chromium/error-context.md", "source_location": "L1", "weight": 1.0}, {"source": "e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_page_snapshot", "target": "e2e_smoke_suite_smoke_suit_8282a_mepage_has_proper_meta_tags_chromium_error_context_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-8282a-mepage-has-proper-meta-tags-chromium/error-context.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_a1c157260391dca389fbe38c6259c4efd286b319_md", "label": "a1c157260391dca389fbe38c6259c4efd286b319.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/a1c157260391dca389fbe38c6259c4efd286b319.md", "source_location": "L1"}, {"id": "data_a1c157260391dca389fbe38c6259c4efd286b319_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/a1c157260391dca389fbe38c6259c4efd286b319.md", "source_location": "L1"}, {"id": "data_a1c157260391dca389fbe38c6259c4efd286b319_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/a1c157260391dca389fbe38c6259c4efd286b319.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_a1c157260391dca389fbe38c6259c4efd286b319_md", "target": "data_a1c157260391dca389fbe38c6259c4efd286b319_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/a1c157260391dca389fbe38c6259c4efd286b319.md", "source_location": "L1", "weight": 1.0}, {"source": "data_a1c157260391dca389fbe38c6259c4efd286b319_page_snapshot", "target": "data_a1c157260391dca389fbe38c6259c4efd286b319_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/a1c157260391dca389fbe38c6259c4efd286b319.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_sitemap_xml_ts", "label": "sitemap.xml.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L1"}, {"id": "pages_sitemap_xml_get", "label": "GET()", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L13"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_sitemap_xml_ts", "target": "astro", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_sitemap_xml_ts", "target": "astro_content", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_sitemap_xml_ts", "target": "pages_sitemap_xml_get", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L13", "weight": 1.0}], "raw_calls": [{"caller_nid": "pages_sitemap_xml_get", "callee": "getCollection", "is_member_call": false, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L15"}, {"caller_nid": "pages_sitemap_xml_get", "callee": "getCollection", "is_member_call": false, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L20"}, {"caller_nid": "pages_sitemap_xml_get", "callee": "map", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L37"}, {"caller_nid": "pages_sitemap_xml_get", "callee": "map", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L46"}, {"caller_nid": "pages_sitemap_xml_get", "callee": "join", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L63"}, {"caller_nid": "pages_sitemap_xml_get", "callee": "map", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/sitemap.xml.ts", "source_location": "L63"}]}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_md", "label": "448763de83b442e1e9a6c6e4e70870f8a7246e0a.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/448763de83b442e1e9a6c6e4e70870f8a7246e0a.md", "source_location": "L1"}, {"id": "data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/448763de83b442e1e9a6c6e4e70870f8a7246e0a.md", "source_location": "L1"}, {"id": "data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/448763de83b442e1e9a6c6e4e70870f8a7246e0a.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_md", "target": "data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/448763de83b442e1e9a6c6e4e70870f8a7246e0a.md", "source_location": "L1", "weight": 1.0}, {"source": "data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_page_snapshot", "target": "data_448763de83b442e1e9a6c6e4e70870f8a7246e0a_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/448763de83b442e1e9a6c6e4e70870f8a7246e0a.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_md", "label": "error-context.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/theme-Theme-ARIA-Accessibi-8c42a-ria-checked-desktop-mobile--chromium/error-context.md", "source_location": "L1"}, {"id": "theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/theme-Theme-ARIA-Accessibi-8c42a-ria-checked-desktop-mobile--chromium/error-context.md", "source_location": "L1"}, {"id": "theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/theme-Theme-ARIA-Accessibi-8c42a-ria-checked-desktop-mobile--chromium/error-context.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_md", "target": "theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/theme-Theme-ARIA-Accessibi-8c42a-ria-checked-desktop-mobile--chromium/error-context.md", "source_location": "L1", "weight": 1.0}, {"source": "theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_page_snapshot", "target": "theme_theme_aria_accessibi_8c42a_ria_checked_desktop_mobile_chromium_error_context_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/theme-Theme-ARIA-Accessibi-8c42a-ria-checked-desktop-mobile--chromium/error-context.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_content_config_ts", "label": "config.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/content/config.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_content_config_ts", "target": "astro_content", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/content/config.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_static_assets_spec_ts", "label": "static-assets.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/static-assets.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_static_assets_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/static-assets.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_md", "label": "3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff.md", "source_location": "L1"}, {"id": "data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff.md", "source_location": "L1"}, {"id": "data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_codeblock_1", "label": "code:yaml (- generic [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_md", "target": "data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff.md", "source_location": "L1", "weight": 1.0}, {"source": "data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_page_snapshot", "target": "data_3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/3e3d231801ce8a68ec884e518f6e46e7f3a8d6ff.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_e2e_critical_paths_spec_ts", "label": "e2e-critical-paths.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/e2e-critical-paths.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_e2e_critical_paths_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/e2e-critical-paths.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_config_ts", "label": "playwright.config.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright.config.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_config_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright.config.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_cross_browser_spec_ts", "label": "cross-browser.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/cross-browser.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_cross_browser_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/cross-browser.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_md", "label": "6a86fc05ec2c2ce701392e4df2db4d19695f2488.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/6a86fc05ec2c2ce701392e4df2db4d19695f2488.md", "source_location": "L1"}, {"id": "data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/6a86fc05ec2c2ce701392e4df2db4d19695f2488.md", "source_location": "L1"}, {"id": "data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/6a86fc05ec2c2ce701392e4df2db4d19695f2488.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_md", "target": "data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/6a86fc05ec2c2ce701392e4df2db4d19695f2488.md", "source_location": "L1", "weight": 1.0}, {"source": "data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_page_snapshot", "target": "data_6a86fc05ec2c2ce701392e4df2db4d19695f2488_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/6a86fc05ec2c2ce701392e4df2db4d19695f2488.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tailwind_config_mjs", "label": "tailwind.config.mjs", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tailwind.config.mjs", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tailwind_config_mjs", "target": "typography", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tailwind.config.mjs", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_pages_spec_ts", "label": "pages.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/pages.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_pages_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/pages.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_portfolio_spec_ts", "label": "portfolio.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/portfolio.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_portfolio_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/portfolio.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_md", "label": "error-context.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-7fcfd-ntact-form-submission-works-chromium/error-context.md", "source_location": "L1"}, {"id": "e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-7fcfd-ntact-form-submission-works-chromium/error-context.md", "source_location": "L1"}, {"id": "e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_codeblock_1", "label": "code:yaml (- generic [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-7fcfd-ntact-form-submission-works-chromium/error-context.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_test_results_e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_md", "target": "e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-7fcfd-ntact-form-submission-works-chromium/error-context.md", "source_location": "L1", "weight": 1.0}, {"source": "e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_page_snapshot", "target": "e2e_smoke_suite_smoke_suit_7fcfd_ntact_form_submission_works_chromium_error_context_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/test-results/e2e-smoke-suite-Smoke-Suit-7fcfd-ntact-form-submission-works-chromium/error-context.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_md", "label": "e913a96525d005a5baae8ddb2fbea15bbc53abb1.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/e913a96525d005a5baae8ddb2fbea15bbc53abb1.md", "source_location": "L1"}, {"id": "data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/e913a96525d005a5baae8ddb2fbea15bbc53abb1.md", "source_location": "L1"}, {"id": "data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/e913a96525d005a5baae8ddb2fbea15bbc53abb1.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_md", "target": "data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/e913a96525d005a5baae8ddb2fbea15bbc53abb1.md", "source_location": "L1", "weight": 1.0}, {"source": "data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_page_snapshot", "target": "data_e913a96525d005a5baae8ddb2fbea15bbc53abb1_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/e913a96525d005a5baae8ddb2fbea15bbc53abb1.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_md", "label": "cc0ed5549c339ad261436d0f63d13eb3259a9dde.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/cc0ed5549c339ad261436d0f63d13eb3259a9dde.md", "source_location": "L1"}, {"id": "data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/cc0ed5549c339ad261436d0f63d13eb3259a9dde.md", "source_location": "L1"}, {"id": "data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_codeblock_1", "label": "code:yaml (- generic [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/cc0ed5549c339ad261436d0f63d13eb3259a9dde.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_md", "target": "data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/cc0ed5549c339ad261436d0f63d13eb3259a9dde.md", "source_location": "L1", "weight": 1.0}, {"source": "data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_page_snapshot", "target": "data_cc0ed5549c339ad261436d0f63d13eb3259a9dde_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/cc0ed5549c339ad261436d0f63d13eb3259a9dde.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_sticky_cta_spec_ts", "label": "sticky-cta.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/sticky-cta.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_sticky_cta_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/sticky-cta.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_690bd8f0a073eceeb87b8e46e681123950f08f93_md", "label": "690bd8f0a073eceeb87b8e46e681123950f08f93.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/690bd8f0a073eceeb87b8e46e681123950f08f93.md", "source_location": "L1"}, {"id": "data_690bd8f0a073eceeb87b8e46e681123950f08f93_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/690bd8f0a073eceeb87b8e46e681123950f08f93.md", "source_location": "L1"}, {"id": "data_690bd8f0a073eceeb87b8e46e681123950f08f93_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/690bd8f0a073eceeb87b8e46e681123950f08f93.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_690bd8f0a073eceeb87b8e46e681123950f08f93_md", "target": "data_690bd8f0a073eceeb87b8e46e681123950f08f93_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/690bd8f0a073eceeb87b8e46e681123950f08f93.md", "source_location": "L1", "weight": 1.0}, {"source": "data_690bd8f0a073eceeb87b8e46e681123950f08f93_page_snapshot", "target": "data_690bd8f0a073eceeb87b8e46e681123950f08f93_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/690bd8f0a073eceeb87b8e46e681123950f08f93.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_806b690efd1ee745a1991725b2d2aea1b5c435f2_md", "label": "806b690efd1ee745a1991725b2d2aea1b5c435f2.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/806b690efd1ee745a1991725b2d2aea1b5c435f2.md", "source_location": "L1"}, {"id": "data_806b690efd1ee745a1991725b2d2aea1b5c435f2_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/806b690efd1ee745a1991725b2d2aea1b5c435f2.md", "source_location": "L1"}, {"id": "data_806b690efd1ee745a1991725b2d2aea1b5c435f2_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/806b690efd1ee745a1991725b2d2aea1b5c435f2.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_806b690efd1ee745a1991725b2d2aea1b5c435f2_md", "target": "data_806b690efd1ee745a1991725b2d2aea1b5c435f2_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/806b690efd1ee745a1991725b2d2aea1b5c435f2.md", "source_location": "L1", "weight": 1.0}, {"source": "data_806b690efd1ee745a1991725b2d2aea1b5c435f2_page_snapshot", "target": "data_806b690efd1ee745a1991725b2d2aea1b5c435f2_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/806b690efd1ee745a1991725b2d2aea1b5c435f2.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_api_health_json_ts", "label": "health.json.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L1"}, {"id": "api_health_json_get", "label": "GET()", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L5"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_api_health_json_ts", "target": "astro", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_pages_api_health_json_ts", "target": "api_health_json_get", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L5", "weight": 1.0}], "raw_calls": [{"caller_nid": "api_health_json_get", "callee": "floor", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L6"}, {"caller_nid": "api_health_json_get", "callee": "now", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L6"}, {"caller_nid": "api_health_json_get", "callee": "memoryUsage", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L7"}, {"caller_nid": "api_health_json_get", "callee": "toISOString", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L11"}, {"caller_nid": "api_health_json_get", "callee": "round", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L18"}, {"caller_nid": "api_health_json_get", "callee": "round", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L19"}, {"caller_nid": "api_health_json_get", "callee": "round", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L20"}, {"caller_nid": "api_health_json_get", "callee": "stringify", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/pages/api/health.json.ts", "source_location": "L27"}]}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_blog_spec_ts", "label": "blog.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/blog.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_blog_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/blog.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_md", "label": "32e7238c826ab5be125e270cc69efc4a37a8ffb3.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/32e7238c826ab5be125e270cc69efc4a37a8ffb3.md", "source_location": "L1"}, {"id": "data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/32e7238c826ab5be125e270cc69efc4a37a8ffb3.md", "source_location": "L1"}, {"id": "data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/32e7238c826ab5be125e270cc69efc4a37a8ffb3.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_md", "target": "data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/32e7238c826ab5be125e270cc69efc4a37a8ffb3.md", "source_location": "L1", "weight": 1.0}, {"source": "data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_page_snapshot", "target": "data_32e7238c826ab5be125e270cc69efc4a37a8ffb3_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/32e7238c826ab5be125e270cc69efc4a37a8ffb3.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_inline_lead_form_spec_ts", "label": "inline-lead-form.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/inline-lead-form.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_inline_lead_form_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/inline-lead-form.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_md", "label": "c0712711f6dffbdf3e61da69d7bf618fa7d12cce.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/c0712711f6dffbdf3e61da69d7bf618fa7d12cce.md", "source_location": "L1"}, {"id": "data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/c0712711f6dffbdf3e61da69d7bf618fa7d12cce.md", "source_location": "L1"}, {"id": "data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/c0712711f6dffbdf3e61da69d7bf618fa7d12cce.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_md", "target": "data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/c0712711f6dffbdf3e61da69d7bf618fa7d12cce.md", "source_location": "L1", "weight": 1.0}, {"source": "data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_page_snapshot", "target": "data_c0712711f6dffbdf3e61da69d7bf618fa7d12cce_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/c0712711f6dffbdf3e61da69d7bf618fa7d12cce.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "label": "middleware.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1"}, {"id": "src_middleware_validatecsrforigin", "label": "validateCsrfOrigin()", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "astro_middleware", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_logger_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_logger_logger", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_sentry_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_sentry_captureexception", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "src_middleware_validatecsrforigin", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19", "weight": 1.0}], "raw_calls": [{"caller_nid": "src_middleware_validatecsrforigin", "callee": "includes", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L24"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L25"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L36"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L37"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}]}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_md", "label": "0f6bc059f79105264bd8619a97b50f0c07ebb8d8.md", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/0f6bc059f79105264bd8619a97b50f0c07ebb8d8.md", "source_location": "L1"}, {"id": "data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_page_snapshot", "label": "Page snapshot", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/0f6bc059f79105264bd8619a97b50f0c07ebb8d8.md", "source_location": "L1"}, {"id": "data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_codeblock_1", "label": "code:yaml (- generic [active] [ref=e1]:)", "file_type": "document", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/0f6bc059f79105264bd8619a97b50f0c07ebb8d8.md", "source_location": "L3"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_playwright_report_data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_md", "target": "data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_page_snapshot", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/0f6bc059f79105264bd8619a97b50f0c07ebb8d8.md", "source_location": "L1", "weight": 1.0}, {"source": "data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_page_snapshot", "target": "data_0f6bc059f79105264bd8619a97b50f0c07ebb8d8_codeblock_1", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/playwright-report/data/0f6bc059f79105264bd8619a97b50f0c07ebb8d8.md", "source_location": "L3", "weight": 1.0}], "input_tokens": 0, "output_tokens": 0}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "label": "middleware.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1"}, {"id": "src_middleware_validatecsrforigin", "label": "validateCsrfOrigin()", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "astro_middleware", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_logger_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_logger_logger", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_utils_sentry_ts", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "utils_sentry_captureexception", "relation": "imports", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L3", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_src_middleware_ts", "target": "src_middleware_validatecsrforigin", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L19", "weight": 1.0}], "raw_calls": [{"caller_nid": "src_middleware_validatecsrforigin", "callee": "includes", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L24"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L25"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L36"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "get", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L37"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}, {"caller_nid": "src_middleware_validatecsrforigin", "callee": "startsWith", "is_member_call": true, "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/src/middleware.ts", "source_location": "L52"}]}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_destructive_chaos_spec_ts", "label": "destructive-chaos.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/destructive-chaos.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_destructive_chaos_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/destructive-chaos.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_e2e_blog_navigation_spec_ts", "label": "e2e-blog-navigation.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/e2e-blog-navigation.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_e2e_blog_navigation_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/e2e-blog-navigation.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_contact_form_spec_ts", "label": "contact-form.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/contact-form.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_contact_form_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/contact-form.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}
@@ -0,0 +1 @@
 {"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_astro_config_mjs", "label": "astro.config.mjs", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/astro.config.mjs", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_astro_config_mjs", "target": "config", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/astro.config.mjs", "source_location": "L1", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_astro_config_mjs", "target": "tailwind", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/astro.config.mjs", "source_location": "L2", "weight": 1.0}, {"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_astro_config_mjs", "target": "node", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/astro.config.mjs", "source_location": "L3", "weight": 1.0}], "raw_calls": []}
--- a/Show More
+++ b/Show More
		`@@ -0,0 +1 @@`
							`/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e`
		`@@ -0,0 +1 @@`
							{"nodes": [{"id": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_navigation_spec_ts", "label": "navigation.spec.ts", "file_type": "code", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/navigation.spec.ts", "source_location": "L1"}], "edges": [{"source": "home_agent_ai_agent_backend_workspace_2e709500_79ab_403f_9ca0_3f027ac9f36e_tests_navigation_spec_ts", "target": "test", "relation": "imports_from", "context": "import", "confidence": "EXTRACTED", "source_file": "/home/agent/ai-agent/backend/workspace/2e709500-79ab-403f-9ca0-3f027ac9f36e/tests/navigation.spec.ts", "source_location": "L1", "weight": 1.0}], "raw_calls": []}