@tryvitris/website-harness 0.1.0-beta.7 → 1.0.0

package/bin/chunks/{chunk-TTAUU3AZ.js → chunk-3OKR5AZJ.js}

@@ -6,7 +6,7 @@ import {
   selectStageKnowledge,
   signalsFromSite,
   siteWidgets
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   coverageReport,
   loadKnowledgeV2

package/bin/chunks/{chunk-PGFFKPK6.js → chunk-A2XMAPVW.js}

@@ -6,10 +6,10 @@ import {
   planKitUpgrade,
   recoverKitUpgrade,
   rollbackKitUpgrade
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   findHarnessRoot
-} from "./chunk-VTI32UGJ.js";
+} from "./chunk-H3BS2EBR.js";
 import {
   json,
   save

package/bin/chunks/{chunk-O55LAQ2C.js → chunk-FGSQE3DU.js}

@@ -7,7 +7,7 @@ import {
   sourceRevision,
   verifyRefine,
   withMutationLock
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   assertRequestId,
   parseChangePlan,
@@ -17,7 +17,7 @@ import {
 import {
   buildVerified,
   findHarnessRoot
-} from "./chunk-VTI32UGJ.js";
+} from "./chunk-H3BS2EBR.js";
 import {
   files,
   fingerprint,

package/bin/chunks/{chunk-VTI32UGJ.js → chunk-H3BS2EBR.js}

@@ -2,10 +2,10 @@ import {
   buildSite,
   connectForms,
   loadSiteDir
-} from "./chunk-4MFPATAB.js";
+} from "./chunk-L44ZTNDM.js";
 import {
   leadsJs
-} from "./chunk-ZIROO2U4.js";
+} from "./chunk-37F7XIMH.js";
 import {
   acquirePathLock,
   files,

package/bin/chunks/{chunk-DSS2U2OM.js → chunk-KVMZSQ3D.js}

@@ -37,6 +37,12 @@ const $=id=>document.getElementById(id),allThemes=m=>[...m.themes,...m.archiveTh
 let brandIndex=0,selected=null,selectedRelease=null,pending=null,opened=null,lastFocus=null,galleryY=0,detailFrame=null;
 let example='story',viewport='desktop',compareExample='story',compareViewport='desktop',comparePair=[],compareTab=0;
 const cards=new Map(),frames=new Set(),positions=new Map(),demoMemory=new Map();let compareFrames=[];
+// Native lazy images can occupy every HTTP/1 connection while the server renders
+// thumbnails. Reserve connections for the live preview document, fonts and images.
+const thumbnailJobs=new Map();let thumbnailActive=0;
+function pumpThumbnails(){for(const [img,job] of thumbnailJobs){if(!img.isConnected){thumbnailObserver.unobserve(img);job.cancel?.();thumbnailJobs.delete(img);continue;}if(thumbnailActive>=2||!job.visible||job.started)continue;job.started=true;thumbnailActive++;const finish=()=>{thumbnailObserver.unobserve(img);img.removeEventListener('load',finish);img.removeEventListener('error',finish);job.cancel=null;thumbnailActive--;thumbnailJobs.delete(img);pumpThumbnails();};job.cancel=finish;img.addEventListener('load',finish);img.addEventListener('error',finish);img.loading='eager';img.src=job.src;}}
+const thumbnailObserver=new IntersectionObserver(entries=>{for(const entry of entries){const job=thumbnailJobs.get(entry.target);if(job)job.visible=entry.isIntersecting;}pumpThumbnails();},{rootMargin:'300px 0px'});
+function thumbnailSource(img,src){if(img.dataset.thumbnailSource===src)return;const prior=thumbnailJobs.get(img);if(prior){thumbnailJobs.delete(img);prior.cancel?.();img.removeAttribute('src');}img.dataset.thumbnailSource=src;if(src.startsWith('data:')){thumbnailObserver.unobserve(img);img.src=src;return;}thumbnailJobs.set(img,{src,visible:false,started:false});thumbnailObserver.unobserve(img);thumbnailObserver.observe(img);}
 const model=()=>models[brandIndex],draftKey=()=> 'vitris-theme-draft:'+model().brand.siteId+':'+model().brandHash,browseKey=()=> 'vitris-theme-browse:v3:'+model().themes[0].release+':'+model().brand.siteId;
 const findTheme=(id,release)=>allThemes(model()).find(t=>t.id===id&&t.release===release),byKey=k=>allThemes(model()).find(t=>key(t)===k);
 const defaults=()=>({collection:'All directions',families:[],identities:[],industries:[],media:[],tasks:[],query:'',group:'none',sort:'curated',archive:'current',shortlist:[],compare:[],palette:'brand',viewport:innerWidth<768?'mobile':'desktop'});
@@ -68,7 +74,7 @@ function makeCard(t,archive){
  const c={element,theme:t,host,progress,choose:chooseButton,save,check,state:null,archive,role:pageKey(t.pages[0]),thumbs:[]};let active=false;
  c.deactivate=(focus=true)=>{active=false;dispose(c.state);c.state=null;host.replaceChildren();host.hidden=true;top.hidden=true;if(focus){c.lastButton?.focus({preventScroll:true});if(Number.isFinite(c.galleryY))scrollTo({top:c.galleryY,behavior:'instant'});}};c.isActive=()=>active;
  c.show=(role,focus)=>{for(const other of cards.values())if(other!==c&&other.state)other.deactivate(false);if(!active)c.galleryY=scrollY;c.role=role;c.lastButton=focus;active=true;host.hidden=false;top.hidden=false;dispose(c.state);c.state=mount(host,t,role,browse.viewport);c.syncThumbs();host.scrollIntoView({block:'center',behavior:'instant'});host.focus({preventScroll:true});};
- c.syncThumbs=()=>{for(const item of c.thumbs){const r=resourceFor(t,item.role,browse.viewport);item.tile.dataset.visible=String(item.role===c.role);item.img.alt=t.name+' · '+item.label+' · '+(browse.palette==='brand'?model().brand.name:'Original palette');if(r.thumbnail){item.img.src=r.thumbnail;item.img.hidden=false;item.fallback.hidden=true;}else{item.img.hidden=true;item.fallback.hidden=false;}}mobileSelect.value=c.role;c.full.href=resourceFor(t,pageKey(t.pages[0]),browse.viewport).full;c.full.textContent=t.pageCount>5?'Explore all '+t.pageCount+' pages':archive?'Open preserved preview ↗':'Open full site ↗';if(!session){c.full.onclick=e=>{e.preventDefault();openDetail(t,c.full,pageKey(t.pages[0]));};}};
+ c.syncThumbs=()=>{for(const item of c.thumbs){const r=resourceFor(t,item.role,browse.viewport);item.tile.dataset.visible=String(item.role===c.role);item.img.alt=t.name+' · '+item.label+' · '+(browse.palette==='brand'?model().brand.name:'Original palette');if(r.thumbnail){thumbnailSource(item.img,r.thumbnail);item.img.hidden=false;item.fallback.hidden=true;}else{item.img.hidden=true;item.fallback.hidden=false;}}mobileSelect.value=c.role;c.full.href=resourceFor(t,pageKey(t.pages[0]),browse.viewport).full;c.full.textContent=t.pageCount>5?'Explore all '+t.pageCount+' pages':archive?'Open preserved preview ↗':'Open full site ↗';if(!session){c.full.onclick=e=>{e.preventDefault();openDetail(t,c.full,pageKey(t.pages[0]));};}};
  for(const page of t.pages.filter(p=>p.featured!==false).slice(0,t.pageCount>5?5:99)){const tile=document.createElement('section');tile.className='page-tile';tile.dataset.role=pageKey(page);const imageButton=button('',()=>openDetail(t,imageButton));imageButton.className='thumbnail-button';imageButton.setAttribute('aria-label','Explore '+t.name+' '+page.label);imageButton.onclick=()=>{openDetail(t,imageButton,pageKey(page));};const img=document.createElement('img');img.loading='lazy';img.decoding='async';img.width=480;img.height=300;const fallback=document.createElement('span');fallback.className='thumb-fallback';fallback.textContent='Open the live page';img.onerror=()=>{img.hidden=true;fallback.hidden=false;fallback.textContent='Live page available';};imageButton.append(img,fallback);const caption=document.createElement('div');caption.className='tile-caption';const text=document.createElement('strong');text.textContent=page.label;const scroll=button('Scroll preview',()=>c.show(pageKey(page),scroll));scroll.setAttribute('aria-label','Scroll '+t.name+' '+page.label);caption.append(text,scroll);tile.append(imageButton,caption);tiles.append(tile);c.thumbs.push({tile,img,fallback,role:pageKey(page),label:page.label});const option=document.createElement('option');option.value=pageKey(page);option.textContent=page.label;mobileSelect.append(option);}
  for(const page of t.pages){if([...mobileSelect.options].some(o=>o.value===pageKey(page)))continue;const option=document.createElement('option');option.value=pageKey(page);option.textContent=page.label;mobileSelect.append(option);}const full=document.createElement('a');full.className='full-site-tile';full.target='_blank';full.rel='noopener';full.textContent=archive?'Open preserved preview ↗':'Open full site ↗';c.full=full;tiles.append(full);mobileSelect.onchange=()=>{c.role=mobileSelect.value;if(c.state)c.show(c.role,mobileSelect);else c.syncThumbs();};overview.append(mobileSelect,tiles);element.append(meta,overview,top,host);c.syncThumbs();exit.onclick=()=>c.deactivate();
  host.onkeydown=e=>{const map={ArrowDown:80,ArrowUp:-80,PageDown:Math.max(250,(c.state?.viewHeight||600)*.85),PageUp:-Math.max(250,(c.state?.viewHeight||600)*.85),Home:0,End:Number.MAX_SAFE_INTEGER};if(e.key==='Escape'){e.preventDefault();c.deactivate();}else if(e.key in map){e.preventDefault();scrollFrame(c.state,e.key==='Home'||e.key==='End'?map[e.key]:(c.state?.y||0)+map[e.key]);}};
@@ -82,7 +88,7 @@ function syncControls(){$('allentry').setAttribute('aria-pressed',String(browse.
 document.addEventListener('wheel',e=>{if(e.defaultPrevented||e.ctrlKey||e.metaKey||Math.abs(e.deltaX)>Math.abs(e.deltaY))return;for(const s of frames){if(!s.host.isConnected||!s.ready||!s.host.getClientRects().length)continue;const r=s.host.getBoundingClientRect();if(e.clientX<r.left||e.clientX>=r.right||e.clientY<r.top||e.clientY>=r.bottom)continue;const delta=e.deltaY*(e.deltaMode===1?16:e.deltaMode===2?s.viewHeight:1);if((delta>0&&s.y<s.height-s.viewHeight-1)||(delta<0&&s.y>1)){e.preventDefault();scrollFrame(s,s.y+delta);}break;}},{capture:true,passive:false});
 function applyFilter(){const result=browseResults(baseThemes(),browse);for(const c of cards.values())visibleObserver.unobserve(c.host);const fragment=document.createDocumentFragment();for(const g of result.groups){const section=document.createElement('section');section.className='group';if(g.name){const h=document.createElement('h2');h.textContent=g.name+' · '+g.themes.length;section.append(h);}const grid=document.createElement('div');grid.className='grid';grid.setAttribute('role','list');for(const t of g.themes)grid.append(cards.get(key(t)).element);section.append(grid);fragment.append(section);}$('grid').replaceChildren(fragment);const visible=new Set(result.visible.map(key));for(const [k,c] of cards)if(visible.has(k))visibleObserver.observe(c.host);else if(c.state){dispose(c.state);c.state=null;}$('count').textContent=result.visible.length+' of '+baseThemes().length+' directions'+(browse.query?' for “'+browse.query+'”':'');$('empty').hidden=!!result.visible.length;syncControls();syncFacetCounts();syncChips();syncShort();persist();}
 function syncChips(){$('chips').replaceChildren();const chips=[];if(browse.collection!=='All directions')chips.push(['Collection: '+browse.collection,()=>{browse.collection='All directions';applyFilter();}]);for(const k of ['industries','families','identities','media','tasks'])for(const value of browse[k])chips.push([value,()=>{browse[k]=browse[k].filter(x=>x!==value);applyFilter();}]);if(browse.query)chips.push(['Search: '+browse.query,()=>{browse.query='';applyFilter();}]);for(const [name,remove] of chips){const b=button(name+' ×',remove);b.setAttribute('aria-label','Remove '+name);$('chips').append(b);}if(!chips.length)$('chips').hidden=true;else $('chips').hidden=false;$('empty').querySelector('p').textContent='Current filters: '+(chips.map(c=>c[0]).join(' · ')||'none')+'. Try a broader phrase or remove a filter.';}
-function facetUI(){const specs=[['industries','Industry',vocabulary.industries||[]],['families','Family',Object.keys(vocabulary.families)],['identities','Identity',vocabulary.identities],['media','Images',['none','light','photo-led']],['tasks','Customer task',['call','quote','appointment','understand work','inspection','estimate']]];$('facets').replaceChildren();const advanced=document.createElement('details'),summary=document.createElement('summary');summary.textContent='More filters';advanced.append(summary);for(const [facet,name,values] of specs){const field=document.createElement('fieldset'),legend=document.createElement('legend');legend.textContent=name;field.append(legend);if(facet==='identities'){const explanation=document.createElement('p');explanation.className='family-description';explanation.textContent='How you want your business to feel.';field.append(explanation);}for(const value of values){const label=document.createElement('label'),input=document.createElement('input'),count=document.createElement('small');input.type='checkbox';input.value=value;input.dataset.facet=facet;input.onchange=()=>{browse[facet]=input.checked?[...browse[facet],value]:browse[facet].filter(x=>x!==value);applyFilter();};const display={none:'No photos needed',light:'A few images','photo-led':'Photography leads',call:'Phone enquiry',quote:'Request a quote',appointment:'Appointment / class','understand work':'Understand the work'};count.textContent=baseThemes().filter(t=>{if(facet==='families')return t.browse.family===value;if(facet==='media')return t.browse.media===value;if(facet==='industries')return (t.browse.industries||[t.browse.industry]).includes(value);return (t.browse[facet]||[]).includes(value);}).length;label.append(input,display[value]||value,count);field.append(label);if(facet==='families'){const d=document.createElement('p');d.className='family-description';d.textContent=vocabulary.families[value];field.append(d);if(browse.archive==='current'){const strip=document.createElement('div');strip.className='family-samples';strip.setAttribute('aria-label',value+' examples');for(const t of model().themes.filter(t=>t.browse.family===value&&vocabulary.samples[t.id]).slice(0,3)){const img=document.createElement('img');img.src=vocabulary.samples[t.id];img.alt=t.name+' original palette opening';img.title=t.name;strip.append(img);}field.append(strip);}}}if(['media','tasks'].includes(facet))advanced.append(field);else $('facets').append(field);}$('facets').append(advanced);}
+function facetUI(){const specs=[['industries','Industry',vocabulary.industries||[]],['families','Family',Object.keys(vocabulary.families)],['identities','Identity',vocabulary.identities],['media','Images',['none','light','photo-led']],['tasks','Customer task',['call','quote','appointment','understand work','inspection','estimate']]];$('facets').replaceChildren();const advanced=document.createElement('details'),summary=document.createElement('summary');summary.textContent='More filters';advanced.append(summary);for(const [facet,name,values] of specs){const field=document.createElement('fieldset'),legend=document.createElement('legend');legend.textContent=name;field.append(legend);if(facet==='identities'){const explanation=document.createElement('p');explanation.className='family-description';explanation.textContent='How you want your business to feel.';field.append(explanation);}for(const value of values){const label=document.createElement('label'),input=document.createElement('input'),count=document.createElement('small');input.type='checkbox';input.value=value;input.dataset.facet=facet;input.onchange=()=>{browse[facet]=input.checked?[...browse[facet],value]:browse[facet].filter(x=>x!==value);applyFilter();};const display={none:'No photos needed',light:'A few images','photo-led':'Photography leads',call:'Phone enquiry',quote:'Request a quote',appointment:'Appointment / class','understand work':'Understand the work'};count.textContent=baseThemes().filter(t=>{if(facet==='families')return t.browse.family===value;if(facet==='media')return t.browse.media===value;if(facet==='industries')return (t.browse.industries||[t.browse.industry]).includes(value);return (t.browse[facet]||[]).includes(value);}).length;label.append(input,display[value]||value,count);field.append(label);if(facet==='families'){const d=document.createElement('p');d.className='family-description';d.textContent=vocabulary.families[value];field.append(d);if(browse.archive==='current'){const strip=document.createElement('div');strip.className='family-samples';strip.setAttribute('aria-label',value+' examples');for(const t of model().themes.filter(t=>t.browse.family===value&&vocabulary.samples[t.id]).slice(0,3)){const img=document.createElement('img');thumbnailSource(img,vocabulary.samples[t.id]);img.alt=t.name+' original palette opening';img.title=t.name;strip.append(img);}field.append(strip);}}}if(['media','tasks'].includes(facet))advanced.append(field);else $('facets').append(field);}$('facets').append(advanced);}
 function notice(text){$('browsenotice').textContent=text;setTimeout(()=>{$('browsenotice').textContent='';},5000);}
 function syncFacetCounts(){for(const input of $('facets').querySelectorAll('input[data-facet]')){const facet=input.dataset.facet;const count=browseResults(baseThemes(),{...browse,[facet]:[input.value]}).visible.length;input.parentElement.querySelector('small').textContent=count;}}
 function toggleShort(t){const k=key(t);if(browse.shortlist.includes(k)){browse.shortlist=browse.shortlist.filter(x=>x!==k);browse.compare=browse.compare.filter(x=>x!==k);}else if(browse.shortlist.length<6)browse.shortlist.push(k);else notice('Your shortlist holds six directions. Remove one to add another.');syncShort();persist();}

package/bin/chunks/{chunk-4MFPATAB.js → chunk-L44ZTNDM.js}

@@ -12,7 +12,7 @@ import {
   siteCss,
   siteIslands,
   sitemapXml
-} from "./chunk-ZIROO2U4.js";
+} from "./chunk-37F7XIMH.js";
 import {
   mergeTheme,
   themeCss
@@ -258,6 +258,7 @@ async function buildSite(input) {
     const js = siteIslands([page], input.catalog);
     pageAssets[page.path] = { css: asset(siteCss([page], input.catalog), "css"), js: js ? asset(js, "js") : null };
   }
+  if (backendOrigin) pageAssets[COOKIE_COMPLIANCE_PATH] = { css: asset(siteCss([], input.catalog), "css"), js: null };
   const files = compileSite({
     site,
     pages: input.pages,
@@ -267,11 +268,14 @@ async function buildSite(input) {
     publicOrigin: input.publicOrigin,
     pageAssets,
     webAnalyticsToken: input.webAnalyticsToken
-  });
+  }, compiled);
   const written = [];
   await mkdir(input.outDir, { recursive: true });
   await mkdir(join(input.outDir, "assets/immutable"), { recursive: true });
-  for (const [path, body] of routeAssets) await writeFile(join(input.outDir, path.slice(1)), body, "utf8");
+  for (const [path, body] of routeAssets) {
+    await writeFile(join(input.outDir, path.slice(1)), body, "utf8");
+    written.push(path.slice(1));
+  }
   for (const file of files) {
     const rel = file.path === "/" ? "index.html" : `${file.path.replace(/^\//, "").replace(/\/$/, "")}/index.html`;
     const dest = join(input.outDir, rel);
@@ -281,7 +285,10 @@ async function buildSite(input) {
   }
   await writeFile(join(input.outDir, "site.css"), siteCss(compiled, input.catalog), "utf8");
   await writeFile(join(input.outDir, "theme.css"), themeCss(theme), "utf8");
-  if (backendOrigin) await writeFile(join(input.outDir, "beacon.js"), beaconJs, "utf8");
+  if (backendOrigin) {
+    await writeFile(join(input.outDir, "beacon.js"), beaconJs, "utf8");
+    written.push("beacon.js");
+  }
   await writeFile(join(input.outDir, "robots.txt"), robotsTxt(input.publicOrigin), "utf8");
   await writeFile(
     join(input.outDir, "sitemap.xml"),
@@ -300,7 +307,7 @@ async function buildSite(input) {
     written.push(motionAssetHref.slice(1));
   }
   if (islands) written.push("islands.js");
-  written.push("site.css", "theme.css", "beacon.js", "robots.txt", "sitemap.xml");
+  written.push("site.css", "theme.css", "robots.txt", "sitemap.xml");
   return written;
 }
 async function fetchLiveContent(kernelOrigin, slug, token) {

package/bin/chunks/{chunk-7V3OKLKH.js → chunk-LZC37OJZ.js}

@@ -1,7 +1,7 @@
 import {
   capturePreservedSite,
   verifyPreservedSite
-} from "./chunk-QRWGFLUU.js";
+} from "./chunk-R2WRQDVE.js";
 import {
   AGENT_RUNTIME_HISTORY_ENTRIES
 } from "./chunk-34H54KEY.js";
@@ -68,7 +68,7 @@ import {
   verifyAllowedWrites,
   withMutationLock,
   writeVisualProbe
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   QUESTION_VERSION,
   questionSemanticsHash
@@ -99,7 +99,7 @@ import {
   findHarnessRoot,
   findKernelRoot,
   isPreserveSite
-} from "./chunk-VTI32UGJ.js";
+} from "./chunk-H3BS2EBR.js";
 import {
   STUDY_CAPTURE_HEIGHT,
   STUDY_CAPTURE_VIEWPORTS,
@@ -253,7 +253,7 @@ function scaffoldNestedSite(opts) {
   for (const [key, value] of Object.entries(pkg.scripts)) pkg.scripts[key] = value.replaceAll("__SLUG__", opts.slug);
   writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}
 `);
-  for (const file2 of ["site.json", "README.md", "AGENTS.md"]) {
+  for (const file2 of ["site.json", "README.md", "AGENTS.md", "deployment/github-actions.yml.example"]) {
     const p = join2(dest, file2);
     if (!existsSync2(p)) continue;
     if (file2 === "site.json") {

package/bin/chunks/{chunk-5YSPWKFF.js → chunk-PYCRUMCT.js}

@@ -13,7 +13,7 @@ import {
   formatExclusion,
   isErrorPage,
   isPlaywrightLaunchFailure
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   json,
   save

package/bin/chunks/{chunk-QRWGFLUU.js → chunk-R2WRQDVE.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-XL2DRAYI.js";
 import {
   sourceRevision
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   previewServer
 } from "./chunk-WEFDVXFX.js";
@@ -22,7 +22,7 @@ import {
   providerConsoleWarning,
   readOnlyEmbedProvider,
   unresolvedCaptureBlockers
-} from "./chunk-VTI32UGJ.js";
+} from "./chunk-H3BS2EBR.js";
 import {
   save,
   within

package/bin/chunks/{chunk-YZWEXHT4.js → chunk-SEMH6MCV.js}

@@ -11,48 +11,48 @@ import {
   runDoctor,
   shareSite,
   synthesizeSite
-} from "./chunk-ZWFG4GPG.js";
+} from "./chunk-YXJAQYDE.js";
 import {
   verifySite
-} from "./chunk-P56ZDMX7.js";
+} from "./chunk-WMJVLMU2.js";
 import {
   upgradeSite
-} from "./chunk-PGFFKPK6.js";
+} from "./chunk-A2XMAPVW.js";
 import {
   createSite
-} from "./chunk-H7Y72HXC.js";
+} from "./chunk-UFTVWTEZ.js";
 import {
   explainStage
-} from "./chunk-TTAUU3AZ.js";
+} from "./chunk-3OKR5AZJ.js";
 import {
   runSite,
   statusSite,
   workflowArgvFromFlags
-} from "./chunk-7V3OKLKH.js";
+} from "./chunk-LZC37OJZ.js";
 import {
   EXIT_CODES
 } from "./chunk-JCRGE6AL.js";
 import {
   siteInputsFromFlags
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   buildVerified,
   findHarnessRoot
-} from "./chunk-VTI32UGJ.js";
+} from "./chunk-H3BS2EBR.js";
 import {
   approvedOrigin,
   inspectForms,
   safeId,
   validateFormConfig
-} from "./chunk-4MFPATAB.js";
+} from "./chunk-L44ZTNDM.js";
 import {
   files
 } from "./chunk-T6PE4KN4.js";
 
 // src/cli/index.ts
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
-import { resolve as resolve2 } from "node:path";
-import { spawnSync } from "node:child_process";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "node:fs";
+import { resolve as resolve3 } from "node:path";
+import { spawnSync as spawnSync2 } from "node:child_process";
 
 // src/cli/events.ts
 var EventStream = class {
@@ -270,6 +270,106 @@ async function formsCommand(command, opts) {
   }
 }
 
+// src/cli/admin.ts
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { resolve as resolve2 } from "node:path";
+import { createRequire } from "node:module";
+import { spawnSync } from "node:child_process";
+import { parseManifest } from "@tryvitris/website-admin-contracts";
+
+// src/admin/connection.ts
+async function readConnection(manifest, token, resource, test = false, transport = fetch) {
+  if (!manifest.backend || !/^[a-zA-Z0-9_-]{32,200}$/.test(token)) throw Error("A dedicated VITRIS_ADMIN_API_TOKEN and backend connection are required");
+  const url = new URL(`/api/admin/v1/${encodeURIComponent(manifest.backend.tenantId)}/${resource}`, manifest.backend.origin);
+  if (test) url.searchParams.set("mode", "test");
+  const response = await transport(url, { redirect: "manual", signal: AbortSignal.timeout(12e3), headers: { authorization: `Bearer ${token}`, "x-vitris-installation": manifest.installationId, "x-vitris-site-origin": manifest.site.origin } });
+  if (!response.ok) throw Error(`Admin v1 ${resource} rejected (${response.status}); connection is not verified`);
+  const reader = response.body?.getReader();
+  if (!reader) throw Error("Empty backend response");
+  const chunks = [];
+  let size = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    size += value.length;
+    if (size > 4e6) {
+      await reader.cancel();
+      throw Error("Backend response too large");
+    }
+    chunks.push(value);
+  }
+  const bytes = new Uint8Array(size);
+  let offset = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, offset);
+    offset += chunk.length;
+  }
+  const data = JSON.parse(new TextDecoder().decode(bytes));
+  if (data?.schemaVersion !== 1 || data.installationId !== manifest.installationId || data.tenantId !== manifest.backend.tenantId || data.siteOrigin !== manifest.site.origin) throw Error("Backend contract or installation identity mismatch");
+  if (resource === "status") {
+    if (!Array.isArray(data.scopes)) throw Error("Invalid backend scopes");
+  } else {
+    if (data.source !== "connected" || !Array.isArray(data.rows) || data.rows.length > 200) throw Error("Invalid backend records");
+    if (resource === "leads" && data.rows.some((r) => ["id", "name", "email", "message", "created_at", "status"].some((k) => typeof r?.[k] !== "string"))) throw Error("Invalid lead response");
+    if (resource === "analytics" && data.rows.some((r) => typeof r?.day !== "string" || !/^\d{4}-\d{2}-\d{2}$/.test(r.day) || ["views", "visitors", "enquiries"].some((k) => typeof r[k] !== "number" || !Number.isFinite(r[k]) || r[k] < 0))) throw Error("Invalid analytics response");
+  }
+  return data;
+}
+
+// src/cli/admin.ts
+function mergeAdminGrant(existing, addition) {
+  const object = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+  if (!object(existing) || !object(addition) || Object.keys(addition).length !== 1) throw Error("Expected complete grant map and one installation grant");
+  for (const [id, raw] of Object.entries({ ...existing, ...addition })) {
+    const g = raw;
+    if (!/^[a-z][a-z0-9-]{0,50}$/.test(id) || !object(g) || typeof g.tenantId !== "string" || !/^[a-zA-Z0-9_-]{1,100}$/.test(g.tenantId) || typeof g.tokenHash !== "string" || !/^[a-f0-9]{64}$/.test(g.tokenHash) || typeof g.siteOrigin !== "string" || new URL(g.siteOrigin).origin !== g.siteOrigin || !g.siteOrigin.startsWith("https://") || !Array.isArray(g.scopes) || g.scopes.some((s) => !["leads:read", "analytics:read", "leads:write"].includes(s)) || Object.keys(g).some((k) => !["tenantId", "siteOrigin", "tokenHash", "scopes"].includes(k))) throw Error("Invalid hashed grant; raw credentials are forbidden");
+  }
+  for (const id of Object.keys(addition)) if (Object.hasOwn(existing, id) && JSON.stringify(existing[id]) !== JSON.stringify(addition[id])) throw Error("Grant already exists with different authority; rotate explicitly");
+  return { ...existing, ...addition };
+}
+async function adminCommand(command, options) {
+  try {
+    const site = resolve2(options.site || ".");
+    if (command === "grant") {
+      if (!options.dir || !options.grants || !options.out || options.dryRun) throw Error("admin grant requires --dir, --grants COMPLETE_MAP_FILE and --out NEW_IGNORED_FILE");
+      const addition = JSON.parse(readFileSync2(resolve2(options.dir, ".vitris/backend-grant.json"), "utf8"));
+      const manifest2 = parseManifest(JSON.parse(readFileSync2(resolve2(options.dir, "admin.config.json"), "utf8")));
+      const grant = addition[manifest2.installationId];
+      if (!grant || grant.tenantId !== manifest2.backend?.tenantId || grant.siteOrigin !== manifest2.site.origin) throw Error("Grant and installation identity differ");
+      const merged = mergeAdminGrant(JSON.parse(readFileSync2(resolve2(options.grants), "utf8")), addition);
+      writeFileSync2(resolve2(options.out), JSON.stringify(merged, null, 2) + "\n", { flag: "wx", mode: 384 });
+      return { ok: true, exitCode: 0, summary: "Merged hashed grants into the new local file. No backend secret changed; review and install explicitly through secret stdin." };
+    }
+    if (command === "setup") {
+      if (!options.dir || !options.domain || !options.tenant || !!options.plan === !!options.apply) throw Error("admin setup requires --dir, --domain, --tenant and exactly one of --plan or --apply");
+      if (options.dryRun) throw Error("Use --plan for local setup planning; --dry-run does not write a setup plan");
+      const args = ["setup", "--site", site, "--dir", resolve2(options.dir), "--domain", options.domain, "--tenant", options.tenant, options.apply ? "--apply" : "--plan"];
+      if (options.website) args.push("--website", options.website);
+      if (options.backendOrigin) args.push("--backend-origin", options.backendOrigin);
+      if (options.leadWrite) args.push("--lead-write");
+      const entry = createRequire(import.meta.url).resolve("@tryvitris/website-admin-harness/cli");
+      const output = spawnSync(process.execPath, [entry, ...args], { encoding: "utf8", windowsHide: true, maxBuffer: 1024 * 1024 });
+      if (output.status !== 0) throw Error(output.error?.message || output.stderr.trim() || "Admin setup failed");
+      return { ok: true, exitCode: 0, summary: output.stdout.trim() };
+    }
+    if (!["status", "verify"].includes(command)) throw Error("Use vitris admin setup|status|verify|grant");
+    const launch = JSON.parse(readFileSync2(resolve2(site, "launch.json"), "utf8"));
+    if (command === "status") return { ok: true, exitCode: 0, summary: launch.admin ? "Local admin metadata exists. Backend, authentication and deployment are unverified; run admin verify with --dir." : "No admin connection. Read docs/ADMIN.md; scaffolding alone does not enable collection.", data: { connection: launch.admin || null, verified: false } };
+    if (!options.dir) throw Error("admin verify requires --dir ADMIN_DIRECTORY");
+    const manifest = parseManifest(JSON.parse(readFileSync2(resolve2(options.dir, "admin.config.json"), "utf8")));
+    if (!launch.admin || manifest.installationId !== launch.admin.installationId || manifest.site.id !== launch.admin.siteId || manifest.adminOrigin !== launch.admin.url || manifest.site.origin !== launch.admin.siteOrigin || manifest.backend?.tenantId !== launch.admin.tenantId) throw Error("Website and admin installation identities differ");
+    const token = process.env.VITRIS_ADMIN_API_TOKEN || "";
+    const status = await readConnection(manifest, token, "status");
+    if (!["leads:read", "analytics:read"].every((scope) => status.scopes.includes(scope))) throw Error("Default read scopes are missing");
+    const leads = await readConnection(manifest, token, "leads");
+    const tests = await readConnection(manifest, token, "leads", true);
+    const analytics = await readConnection(manifest, token, "analytics");
+    return { ok: true, exitCode: 0, summary: "Admin v1 data connection verified. Authentication, collection and deployment require separate acceptance checks.", data: { verified: true, productionLeads: leads.rows.length, testSubmissions: tests.rows.length, analyticsDays: analytics.rows.length, scopes: status.scopes } };
+  } catch (error) {
+    return { ok: false, exitCode: EXIT_CODES.PRECONDITION_FAILED, error: error instanceof Error ? error.message : String(error) };
+  }
+}
+
 // src/cli/index.ts
 function parseArgs(args) {
   const command = [];
@@ -309,9 +409,9 @@ function parseArgs(args) {
 }
 function resolvePrecedence(flags, siteRoot) {
   const merged = {};
-  if (siteRoot && existsSync2(resolve2(siteRoot, "launch.json"))) {
+  if (siteRoot && existsSync2(resolve3(siteRoot, "launch.json"))) {
     try {
-      const launch = JSON.parse(readFileSync2(resolve2(siteRoot, "launch.json"), "utf8"));
+      const launch = JSON.parse(readFileSync3(resolve3(siteRoot, "launch.json"), "utf8"));
       if (typeof launch.ownerEmail === "string") merged.owner = launch.ownerEmail;
       if (typeof launch.slug === "string") merged.slug = launch.slug;
       if (typeof launch.name === "string") merged.name = launch.name;
@@ -320,9 +420,9 @@ function resolvePrecedence(flags, siteRoot) {
   }
   if (flags.config && typeof flags.config === "string") {
     try {
-      const configPath = resolve2(flags.config);
+      const configPath = resolve3(flags.config);
       if (existsSync2(configPath)) {
-        const cfg = JSON.parse(readFileSync2(configPath, "utf8"));
+        const cfg = JSON.parse(readFileSync3(configPath, "utf8"));
         for (const [k, v] of Object.entries(cfg)) {
           if (typeof v === "string" || typeof v === "boolean") merged[k] = v;
         }
@@ -354,7 +454,7 @@ async function runCli(argv) {
   }
   const stream = new EventStream(outputMode);
   if (flags.version || flags.v) {
-    stream.log(`@tryvitris/website-harness v${JSON.parse(readFileSync2(resolve2(findHarnessRoot(), "package.json"), "utf8")).version}`);
+    stream.log(`@tryvitris/website-harness v${JSON.parse(readFileSync3(resolve3(findHarnessRoot(), "package.json"), "utf8")).version}`);
     return EXIT_CODES.SUCCESS;
   }
   if (flags.help || flags.h || command.length === 0) {
@@ -363,6 +463,7 @@ async function runCli(argv) {
 Usage: vitris <command> [options]
 
 Commands:
+  admin setup|status|verify             Separate business admin; explicit cloud rollout
   forms inspect|setup|status            Inventory, provision, and check contact forms
   doctor                                Check environment, dependencies, and site health
   site create --dir DIR --slug SLUG    Scaffold a new customer site repo (--from URL or --blank)
@@ -379,6 +480,7 @@ Commands:
   verify                                Verify compilation and evaluate all quality gates
   preview [--port PORT]                 Serve local verified dist preview
   deploy [--provider cloudflare]        Deploy site to Cloudflare Pages with smoke verification
+    --quick                            Build and deploy, skipping review and quality gates
   cloudflare [doctor|whoami|login]      Cloudflare credentials and permissions diagnostics
   share [--run ID]                      Start local preview or design comparison review share
   knowledge explain --stage STAGE       Show the knowledge that stage would load. No model call.
@@ -390,6 +492,7 @@ Options:
   --template-release RELEASE            Optional template revision
   --content TEXT                        Additional business content or instructions
   --content-file FILE                   UTF-8 content file (instead of --content)
+  --admin                               New-site opt-in: prepare sibling admin next steps
   --backend-origin URL                  Backend origin for a new site
   --site DIR                            Site directory path (default: current directory)
   --json                                Output single structured JSON result at completion
@@ -412,7 +515,10 @@ Options:
   const secondary = command[1];
   let result;
   try {
-    if (primary === "forms") {
+    if (primary === "admin") {
+      const value = (key) => typeof opts[key] === "string" ? opts[key] : void 0;
+      result = await adminCommand(secondary || "status", { site: siteRoot, dir: value("dir"), domain: value("domain"), website: value("website"), tenant: value("tenant"), backendOrigin: value("backend-origin"), plan: !!opts.plan, apply: !!opts.apply, leadWrite: !!opts["lead-write"], grants: value("grants"), out: value("out"), dryRun });
+    } else if (primary === "forms") {
       const list = (name) => typeof opts[name] === "string" ? opts[name].split(",").map((s) => s.trim()).filter(Boolean) : void 0;
       result = await formsCommand(secondary || "status", { site: siteRoot, tenant: typeof opts.tenant === "string" ? opts.tenant : void 0, backendOrigin: typeof opts["backend-origin"] === "string" ? opts["backend-origin"] : void 0, origins: list("origins"), recipients: list("recipients"), mode: typeof opts.mode === "string" ? opts.mode : void 0, apply: !!opts.apply, testKeys: !!opts["test-keys"], cloudflare: !!opts.cloudflare, worker: typeof opts.worker === "string" ? opts.worker : void 0, config: typeof opts["forms-config"] === "string" ? opts["forms-config"] : void 0, dryRun });
     } else if (primary === "doctor") {
@@ -424,6 +530,7 @@ Options:
     } else if (primary === "site" && secondary === "create") {
       result = await createSite({
         ...siteInputsFromFlags(opts),
+        admin: !!opts.admin,
         dir: typeof opts.dir === "string" ? opts.dir : "",
         slug: typeof opts.slug === "string" ? opts.slug : "",
         name: typeof opts.name === "string" ? opts.name : void 0,
@@ -548,6 +655,7 @@ Options:
         provider: "cloudflare",
         environment: opts.environment === "production" ? "production" : "preview",
         branch: typeof opts.branch === "string" ? opts.branch : void 0,
+        quick: flags.quick === true,
         dryRun,
         signal: abortController.signal,
         onLog: (line) => stream.log(line)
@@ -557,14 +665,14 @@ Options:
       if (sub === "doctor") {
         result = await runDoctor({ provider: "cloudflare", operation: "pages" });
       } else if (sub === "whoami") {
-        const probe = spawnSync(process.platform === "win32" ? "npx.cmd" : "npx", ["wrangler", "whoami"], { encoding: "utf8" });
+        const probe = spawnSync2(process.platform === "win32" ? "npx.cmd" : "npx", ["wrangler", "whoami"], { encoding: "utf8" });
         result = {
           ok: probe.status === 0,
           exitCode: probe.status === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.CONFIG_OR_CLI_ERROR,
           summary: probe.stdout || probe.stderr
         };
       } else if (sub === "login") {
-        const probe = spawnSync(process.platform === "win32" ? "npx.cmd" : "npx", ["wrangler", "login"], { stdio: "inherit" });
+        const probe = spawnSync2(process.platform === "win32" ? "npx.cmd" : "npx", ["wrangler", "login"], { stdio: "inherit" });
         result = {
           ok: probe.status === 0,
           exitCode: probe.status === 0 ? EXIT_CODES.SUCCESS : EXIT_CODES.GENERIC_ERROR,
@@ -578,7 +686,7 @@ Options:
         };
       }
     } else if (primary === "knowledge" && secondary === "explain") {
-      const explained = explainStage(resolve2(typeof opts.site === "string" ? opts.site : "."), typeof opts.stage === "string" ? opts.stage : "direction");
+      const explained = explainStage(resolve3(typeof opts.site === "string" ? opts.site : "."), typeof opts.stage === "string" ? opts.stage : "direction");
       result = { ok: true, exitCode: EXIT_CODES.SUCCESS, summary: explained.text, data: explained };
     } else if (primary === "share") {
       result = await shareSite({

package/bin/chunks/{chunk-H7Y72HXC.js → chunk-UFTVWTEZ.js}

@@ -7,19 +7,19 @@ import {
 import {
   gatherBlankOnboard,
   persistOnboard
-} from "./chunk-5YSPWKFF.js";
+} from "./chunk-PYCRUMCT.js";
 import {
   persistSiteInputs,
   recordManagedKit,
   resolveSiteInputsLive
-} from "./chunk-FRABKM65.js";
+} from "./chunk-XY73ZLHB.js";
 import {
   initialState,
   parseGraphYaml
 } from "./chunk-BBV7PMFC.js";
 import {
   findHarnessRoot
-} from "./chunk-VTI32UGJ.js";
+} from "./chunk-H3BS2EBR.js";
 import {
   save
 } from "./chunk-T6PE4KN4.js";
@@ -103,6 +103,7 @@ async function createSite(opts) {
     pkg.scripts.go = "node ./node_modules/@tryvitris/website-harness/bin/vitris.js run --site .";
     pkg.scripts.eval = "node ./node_modules/@tryvitris/website-harness/bin/vitris.js verify --site .";
     pkg.scripts.deploy = "node ./node_modules/@tryvitris/website-harness/bin/vitris.js deploy --site . --environment preview";
+    pkg.scripts["deploy:quick"] = "node ./node_modules/@tryvitris/website-harness/bin/vitris.js deploy --site . --environment preview --quick";
     pkg.scripts["verify:browser"] = pkg.scripts.eval;
   }
   for (const [key, value] of Object.entries(pkg.scripts)) pkg.scripts[key] = value.replaceAll("__SLUG__", slug);
@@ -150,7 +151,9 @@ Preserved custom website from ${fromArg}.
 2. npx playwright install chromium
 3. npm run go
 4. npm run preview
-5. npm run deploy (temporary Cloudflare preview)
+5. npm run deploy (build and verify locally, then upload a temporary Cloudflare preview)
+
+Local builds and direct uploads are the default. GitHub stores source; no deployment workflow runs automatically. Keep dist/ and release bundles out of Git.
 
 Custom source: preserved/. Verification: agent/reviews/preserve.json. See AGENTS.md and the installed harness docs/PRESERVE.md. Run vitris forms inspect and vitris forms setup to register and connect contact forms; backendOrigin alone does not enable submission or notifications. See docs/CONTACT-FORMS.md.
 `);
@@ -160,10 +163,14 @@ Run npm run go to capture and verify the existing client-facing site. Keep its a
 
 Repair source in preserved/ when agent/reviews/preserve.json reports a failure; run npm run go again. Never change reference screenshots or hashes to make a check pass. Do not overwrite source by recapturing. onboarding/preserve.json records the source and captured routes. Contact forms require explicit registration and public launch.json forms bindings. backendOrigin alone does not enable delivery. Default previews show a notice without submitting. See docs/CONTACT-FORMS.md.
 
-Use npm run deploy for a temporary Cloudflare preview after verification. Production and customer domains are outside this mode. Scaffold a later redesign separately from the same source URL.
+Use npm run deploy to build and verify locally and directly upload a temporary Cloudflare preview. Keep dist/ and release bundles out of Git. Hosted automation is opt-in; deployment/github-actions.yml.example is inactive by default. Production and customer domains are outside this mode. Scaffold a later redesign separately from the same source URL.
 `);
   }
-  const workflow = join(dest, ".github", "workflows", "deploy.yml");
+  if (mode === "preserve") {
+    const instructions = join(dest, "AGENTS.md");
+    writeFileSync(instructions, readFileSync(instructions, "utf8") + "\nFor a requested sibling business admin, read agent/refs/admin.md and the installed harness docs/ADMIN.md. Use vitris admin setup --plan then reviewed --apply. Preserve current forms and backend identity; cloud provisioning, authentication and deployment remain separate.\n");
+  }
+  const workflow = join(dest, "deployment", "github-actions.yml.example");
   if (existsSync(workflow)) {
     if (mode === "preserve") {
       writeFileSync(workflow, `name: Preserve preview
@@ -197,6 +204,18 @@ jobs:
     copyMarkdown: gathered.copyMarkdown
   });
   persistSiteInputs(dest, inputs);
+  if (opts.admin) {
+    writeFileSync(join(dest, "ADMIN-SETUP.md"), `# Optional business admin
+
+Read node_modules/@tryvitris/website-harness/docs/ADMIN.md and agent/refs/admin.md.
+
+Prepare a separate sibling installation after confirming the exact website origin, existing tenant ID and backend origin:
+
+vitris admin setup --site . --dir ../${slug}-admin --domain admin.CUSTOMER_DOMAIN --website https://www.CUSTOMER_DOMAIN --tenant EXISTING_TENANT_ID --backend-origin https://BACKEND --plan
+
+Review artifacts/admin/setup-plan.json, then repeat with --apply and a dedicated VITRIS_ADMIN_API_TOKEN in the operator environment. This opt-in has created instructions only. No backend, grant, account, collection, authentication, DNS or cloud resources have been changed.
+`);
+  }
   const graphPath = join(dest, "agent", "graph.yaml");
   if (existsSync(graphPath)) {
     const graph = parseGraphYaml(readFileSync(graphPath, "utf8"));
@@ -209,7 +228,7 @@ jobs:
   return {
     ok: true,
     exitCode: EXIT_CODES.SUCCESS,
-    summary: `Created site ${slug} at ${dest}`,
+    summary: `Created site ${slug} at ${dest}${opts.admin ? "; optional admin next steps: ADMIN-SETUP.md" : ""}`,
     data: { dest, slug, name }
   };
 }