https://shipreadyai.dev/learn/findings/o3-source-maps

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Source maps are published next to the app code

Anyone can rebuild your original files, including comments, file names, and any logic you assumed was hidden.

## Why AI-built apps get this

Source maps are on by default in development and a build setting away from being published. An agent optimising for a working deploy has no reason to turn them off, and nothing in your app looks different when they ship, so they sit there handing out your file names and comments.

## Evidence line

https://example.com/assets/index-4f2a.js.map returned 200, 1.2 MB

## The fix

Turn off source map output for production builds, or stop uploading the .map files. Seen at {map_url} for {bundle}.

## Prompt

Your production source map is public at {map_url}. Turn off source map output for production builds, or stop uploading the .map files, so readers only get the compiled bundle.