@universalcms/connect 0.1.0 → 0.13.0

package/dist/reviewed-commerce-ownership.mjs

@@ -0,0 +1,26 @@
+/** Exact reviewed native commerce routes. No source execution or private reads.
+ * These paths remain owned by the website; editorial routes are CMS managed.
+ * A changed source/data module requires a fresh review rather than broadening
+ * a route prefix and accidentally exposing newly added application URLs.
+ */
+import { readProjectFile } from './project-files.mjs';
+import { contentDigest } from './content-registry.mjs';
+import { REVIEWED_ICECREAM_PROFILE, reviewedNativePaths } from './content-registry-validation.mjs';
+const fingerprints = {
+  'src/app/menu/[id]/page.tsx':'803a7576ee4ce35ac1e971ae9d4cc643336f3b46468f085e46d2d252462d3432',
+  'src/data/products.ts':'92c20343a13f855c0f075af05ed13e18b1f5b0e37349cf61489e867b34c314f1',
+  'src/components/ProductCard.tsx':'de714ca19062576f91887c5f5648b699bf51d854fec665cf006621af36a60c09',
+  'src/context/CartContext.tsx':'654ce1500812ae64f24e5e206dd93519dccadb761492fd8ac89ae8c103620abf',
+  'src/app/cart/page.tsx':'f621ea9dea46ef4fd748bb5414a8698cbb18b3f81d9ddd18a319d5e38d4fe037',
+  'src/app/checkout/page.tsx':'ac57d998f0d9b27e8962773edf25e905b5a2226a044d5668861b351d97fca889',
+  'src/app/order-success/page.tsx':'c6d8fa3addbb6d63a765d4e130fdc799da6098a8ac5993bf9fe9c36c00fd672f',
+};
+export async function inspectReviewedCommerceOwnership(root) {
+  const files = [];
+  for (const [path,sha256] of Object.entries(fingerprints)) {
+    const content = await readProjectFile(root,path);
+    if (content === null || contentDigest(content) !== sha256) return null;
+    files.push({path,content,state:'unchanged'});
+  }
+  return {profile:REVIEWED_ICECREAM_PROFILE,nativePaths:reviewedNativePaths(REVIEWED_ICECREAM_PROFILE),files};
+}

package/dist/reviewed-commerce-settings-setup.mjs

@@ -0,0 +1,243 @@
+/** Exact reviewed native website settings slots. No customer code execution or key reads. */
+import path from 'node:path';
+import { lstat, readdir } from 'node:fs/promises';
+import { readProjectFile, SetupError } from './core.mjs';
+import { CONTENT_BINDINGS_FILE, contentDigest, readFrozenContent, REVIEWED_ICECREAM_PROFILE } from './content-registry.mjs';
+import { inspectReviewedCommerceOwnership } from './reviewed-commerce-ownership.mjs';
+import { nextPublicationProxyTemplate, nextWebsiteProxyTemplate, planNextPublication } from './publication-next-setup.mjs';
+import { inspectOwnedDemo, nextContentPageTemplate } from './content-next-setup.mjs';
+import { inspectSourceRoutes } from './source-routes.mjs';
+const FILE = '.universalcms/website.integration.json';
+const sections = ['branding','social','seo','languages','analytics','navigation','experience','scripts','redirects','authors','templates','taxonomies'];
+const prefixes = ['/menu/', '/cart/', '/checkout/', '/order-success/'];
+const hashes = {
+  'src/app/layout.tsx': '388e113c0bad1ad8524f6f56374648b94a672eca7ebebb4f39afd7c0eae62ad5',
+  'src/components/Navbar.tsx': '92c74a7d63b2d5640e97cbcef0403d4959fd4f58dfd4e8c136ca27c86958ea92',
+  'src/components/Footer.tsx': '0eaca8f58c2fe7f6b3725d72db11e6d882969c73ff97b9991cd70c7c85b58698',
+};
+const baseOutputs = [...Object.keys(hashes), 'src/proxy.ts', 'src/cms/website-navigation.server.ts', 'src/cms/website-navigation.css', 'src/cms/NativeSettings.tsx', 'src/app/[...cmsPath]/page.tsx'];
+const fail = message => { throw new SetupError(message); };
+const json = value => JSON.stringify(value, null, 2) + '\n';
+const relative = (from,to) => { const value = path.posix.relative(path.posix.dirname(from),to); return value.startsWith('.') ? value : './' + value; };
+async function ordinary(root, name) {
+  const content = await readProjectFile(root, name);
+  if (content !== null && (await lstat(path.join(root, name))).nlink !== 1) fail('Reviewed navigation cannot replace linked files.');
+  return content;
+}
+async function reviewedNavigationSources(root) {
+  const originals = {};
+  for (const [name,digest] of Object.entries(hashes)) { const content = await ordinary(root,name); if (content === null || contentDigest(content) !== digest) fail('This native header/footer layout has changed and needs reviewed Navigation slots. Existing website code was preserved.'); originals[name] = content; }
+  return originals;
+}
+/** Check the exact supported native slots before content files are installed. */
+export async function reviewPlannedCommerceSettings(root, registry) {
+  if (registry.profile !== REVIEWED_ICECREAM_PROFILE) return false;
+  if (registry.routes.some(row => !row.sourceFile.startsWith('src/app/')) || !await inspectReviewedCommerceOwnership(root)) fail('Reviewed native commerce ownership changed. Existing header/footer and commerce routes were preserved.');
+  reviewedCommerceNavigationTemplates(await reviewedNavigationSources(root));
+  return true;
+}
+const replace = (source, before, after) => {
+  if (source.split(before).length !== 2) fail('A reviewed navigation slot changed. Existing header and footer were preserved.');
+  return source.replace(before, after);
+};
+
+/** Pure transformations, called only after exact source fingerprint validation. */
+export function reviewedCommerceNavigationTemplates(sources) {
+  let layout = sources['src/app/layout.tsx'];
+  layout = replace(layout, "import './globals.css';", "import './globals.css';\nimport '@universalcms/connect/website.css';\nimport '@/cms/website-navigation.css';\nimport { WebsiteProvider } from '@universalcms/connect/react-website';\nimport { NativeSettings } from '@/cms/NativeSettings';\nimport { websiteSettings, websiteScope } from '@/cms/website-navigation.server';");
+  layout = replace(layout, 'export default function RootLayout(', 'export default async function RootLayout(');
+  layout = replace(layout, '  return (', '  const settings = await websiteSettings();\n  return (');
+  layout = replace(layout, '        <CartProvider>', '        <WebsiteProvider initialSettings={settings} scope={websiteScope}>\n        <NativeSettings><CartProvider>');
+  layout = replace(layout, '        </CartProvider>', '        </CartProvider></NativeSettings>\n        </WebsiteProvider>');
+  let navbar = sources['src/components/Navbar.tsx'];
+  navbar = replace(navbar, "import { useCart } from '@/context/CartContext';", "import { useCart } from '@/context/CartContext';\nimport { CmsBranding, CmsLanguages, CmsNavigation } from '@universalcms/connect/react-website';");
+  navbar = replace(navbar, '<div className="container" style={{', '<div className="container cms-native-navbar-row" style={{');
+  navbar = replace(navbar, "height: '76px'", "minHeight: '76px', flexWrap: 'wrap', gap: '8px 16px'");
+  navbar = replace(navbar, '<Link href="/" style={{', '<Link href="/" className="cms-native-brand" style={{');
+  navbar = replace(navbar, "textDecoration: 'none'\n          }}>", "textDecoration: 'none', order: 1, flexShrink: 0\n          }}>");
+  const logoStart = navbar.indexOf('          <Link href="/" className="cms-native-brand"'), logoEnd = navbar.indexOf('\n          {/* Desktop Navigation */}',logoStart);
+  if (logoStart < 0 || logoEnd < 0) fail('The reviewed branding slot changed. Native branding was preserved.');
+  const nativeLogo = navbar.slice(logoStart,logoEnd).trim();
+  navbar = navbar.slice(0,logoStart) + '          <div className="cms-native-brand-slot"><CmsBranding fallback={' + nativeLogo + '}/></div>\n' + navbar.slice(logoEnd);
+  navbar = replace(navbar, '<nav style={{', '<nav aria-label="Main navigation" style={{');
+  navbar = replace(navbar, "gap: '24px'\n          }} className=\"desktop-nav\">", "gap: '8px', flexWrap: 'wrap', justifyContent: 'center', flexBasis: '100%', order: 3, paddingBottom: '10px'\n          }} className=\"desktop-nav\">");
+  navbar = replace(navbar, '            })}\n          </nav>', '            })}\n            <CmsNavigation excludeUrls={[\'/\', ...navLinks.map(link => link.href)]} />\n            <CmsLanguages />\n          </nav>');
+  navbar = replace(navbar, "<div style={{ display: 'flex', alignItems: 'center', gap: '12px' }}>", "<div className=\"cms-native-nav-actions\" style={{ display: 'flex', alignItems: 'center', gap: '12px', order: 2, flexShrink: 0 }}>");
+  navbar = replace(navbar, 'aria-label="Toggle Mobile Menu"', 'aria-label="Toggle Mobile Menu"\n              aria-expanded={mobileMenuOpen}\n              aria-controls="cms-native-mobile-navigation"');
+  navbar = replace(navbar, '<span style={{ display: \'inline-block\' }}>Box</span>', '<span className="cms-native-cart-label" style={{ display: \'inline-block\' }}>Box</span>');
+  navbar = replace(navbar, "{mobileMenuOpen && (\n          <div style={{", "{mobileMenuOpen && (\n          <div id=\"cms-native-mobile-navigation\" role=\"navigation\" aria-label=\"Mobile navigation\" className=\"cms-native-mobile-navigation\" style={{");
+  navbar = replace(navbar, "            ))}\n            <div style={{ display: 'flex', gap: '10px', marginTop: '10px' }}>", "            ))}\n            <CmsNavigation excludeUrls={['/', ...navLinks.map(link => link.href)]} onNavigate={() => setMobileMenuOpen(false)} />\n            <CmsLanguages />\n            <div style={{ display: 'flex', gap: '10px', marginTop: '10px' }}>");
+  let footer = sources['src/components/Footer.tsx'];
+  footer = replace(footer, "import Link from 'next/link';", "import Link from 'next/link';\nimport { CmsBranding, CmsNavigation, CmsSocialLinks, CmsExperience } from '@universalcms/connect/react-website';");
+  const footerBrandStart = footer.indexOf("            <div style={{ display: 'flex', alignItems: 'center', gap: '10px', marginBottom: '16px' }}>"), footerBrandEnd = footer.indexOf("            <div style={{ display: 'flex', alignItems: 'center', gap: '8px', fontSize: '0.82rem'",footerBrandStart);
+  if (footerBrandStart < 0 || footerBrandEnd < 0) fail('The reviewed footer branding slot changed. Native branding was preserved.');
+  footer = footer.slice(0,footerBrandStart) + '            <CmsBranding fallback={<>' + footer.slice(footerBrandStart,footerBrandEnd).trim() + '</>}/>\n' + footer.slice(footerBrandEnd);
+  const nativeFooter = [...new Set([...footer.matchAll(/\bhref="([^"]+)"/g)].map(match => match[1]))];
+  footer = replace(footer, '        {/* Bottom Bar */}', `        <CmsNavigation location="footer" excludeUrls={${JSON.stringify(nativeFooter)}} />\n        <CmsSocialLinks />\n        <CmsExperience />\n\n        {/* Bottom Bar */}`);
+  return {'src/app/layout.tsx': layout, 'src/components/Navbar.tsx': navbar, 'src/components/Footer.tsx': footer};
+}
+function serverTemplate() {
+  return `// Generated server-only website settings. Private keys are read by the runtime.
+import { cache } from 'react';
+import { connection } from 'next/server';
+import { createWebsiteRuntime } from '@universalcms/connect/website-runtime';
+import configuration from '../../.universalcms/publication.config.json';
+import contentBindings from '../../.universalcms/content.bindings.json';
+export const websiteScope = configuration.siteId + ':' + configuration.environmentId;
+export const websiteOrigin = configuration.websiteOrigin;
+export const website = createWebsiteRuntime({
+  configuration: configuration as Parameters<typeof createWebsiteRuntime>[0]['configuration'],
+  nativePaths: contentBindings.nativePaths,
+  nativePathPrefixes: ${JSON.stringify(prefixes)},
+  installedSections: ${JSON.stringify(sections)},
+});
+export const websiteSettings = cache(async () => { await connection(); return website.settings(); });
+`;
+}
+function nativeSettingsTemplate() {
+  return `"use client";
+import type { CSSProperties, ReactNode } from 'react';
+import { useWebsiteSettings } from '@universalcms/connect/react-website';
+// The reviewed theme uses these accent variables. Removing Branding restores its native CSS.
+export function NativeSettings({children}: {children: ReactNode}) {
+  const {settings} = useWebsiteSettings(), branding = settings.sections.branding;
+  const color = branding.state === 'ready' && typeof branding.data?.accentColor === 'string' && /^#[a-f0-9]{6}$/i.test(branding.data.accentColor) ? branding.data.accentColor : undefined;
+  const style = color ? {'--cms-website-accent':color,'--berry-500':color,'--berry-600':color,'--caramel-500':color,'--caramel-600':color} as CSSProperties : undefined;
+  return <div className="cms-native-settings" style={style}>{children}</div>;
+}
+`;
+}
+const metadataTemplate = (entry, pathname) => `const snapshot = await websiteSettings(), entry = ${entry};
+  if (snapshot.sections.seo.state !== 'ready') return { title: entry?.document.title ?? (result.state === 'archive' ? result.title : ''), description: entry?.document.excerpt };
+  const value = websiteMetadata(entry, snapshot, ${pathname}, websiteOrigin);
+  return { title: result.state === 'archive' ? result.title : value.title, description:value.description, robots:value.robots, alternates:{canonical:value.canonical,languages:Object.fromEntries((value.alternates ?? []).map(item => [item.locale,item.url]))}, openGraph:value.openGraph ? {...value.openGraph,images:value.openGraph.image ? [value.openGraph.image] : []} : undefined,twitter:value.twitter,other:{'universalcms-seo':'managed'} };`;
+function originalPageTemplate(row) {
+  const typed = row.sourceFile.endsWith('.tsx'), pathname = JSON.stringify(row.path);
+  return `// Generated native website content and settings; root layout owns shared header/footer effects.
+import { cache } from 'react';
+import { connection } from 'next/server';
+import { notFound } from 'next/navigation';
+import { CmsWebsite } from '@universalcms/connect/react-website';
+import { PublishedDocumentProvider } from '@universalcms/connect/react-publication';
+import { websiteMetadata } from '@universalcms/connect/website-runtime';
+import { website, websiteSettings, websiteScope, websiteOrigin } from '@/cms/website-navigation.server';
+import inventory from ${JSON.stringify(relative(row.sourceFile,row.inventoryFile))};
+import NativePage from ${JSON.stringify(relative(row.sourceFile,row.nativeFile).replace(/\.[jt]sx?$/,''))};
+const load = cache(async () => { await connection(); const result = await website.page(${pathname}); if (result.state === 'missing') notFound(); if (result.state !== 'published') throw new Error('Published content is temporarily unavailable'); return result; });
+export async function generateMetadata() {
+  const result = await load();
+  ${metadataTemplate('result.entry',pathname).replace("result.state === 'archive' ? result.title : ''", "''").replace("result.state === 'archive' ? result.title : value.title", 'value.title')}
+}
+export default async function Page() {
+  const result = await load(), snapshot = await websiteSettings(), entry = result.entry;
+  const structured = websiteMetadata(entry,snapshot,${pathname},websiteOrigin).jsonLd;
+  return <>{structured && <script type="application/ld+json" data-universalcms-setting="seo" dangerouslySetInnerHTML={{__html:JSON.stringify(structured).replace(/</g,'\\\\u003c')}}/>}<CmsWebsite scope={websiteScope} initialSettings={snapshot} entry={entry} chrome={false}><PublishedDocumentProvider initialEntry={entry} pathname={${pathname}} route={inventory${typed ? " as import('@universalcms/connect/react-publication').Inventory" : ''}}><NativePage/></PublishedDocumentProvider></CmsWebsite></>;
+}
+`;
+}
+function catchallTemplate() {
+  return `// Generated CMS-created pages; native routes and commerce prefixes remain website-owned.
+import { cache } from 'react';
+import { connection } from 'next/server';
+import { notFound } from 'next/navigation';
+import { CmsWebsitePage } from '@universalcms/connect/react-website';
+import { websiteMetadata } from '@universalcms/connect/website-runtime';
+import { website, websiteSettings, websiteScope, websiteOrigin } from '@/cms/website-navigation.server';
+const load = cache(async (pathname: string) => {
+  await connection();
+  const result = await website.resolve(pathname);
+  if (result.state === 'missing' || result.state === 'unmanaged') notFound();
+  if (result.state !== 'published' && result.state !== 'archive') throw new Error('Published website content unavailable');
+  return result;
+});
+type Props = { params: Promise<{ cmsPath: string[] }> };
+export async function generateMetadata({ params }: Props) {
+  const pathname = '/' + (await params).cmsPath.join('/'), result = await load(pathname);
+  ${metadataTemplate("result.state === 'published' ? result.entry : null",'pathname')}
+}
+export default async function Page({ params }: Props) {
+  const pathname = '/' + (await params).cmsPath.join('/'), result = await load(pathname), snapshot = await websiteSettings();
+  const structured = websiteMetadata(result.state === 'published' ? result.entry : null,snapshot,pathname,websiteOrigin).jsonLd;
+  return <>{structured && <script type="application/ld+json" data-universalcms-setting="seo" dangerouslySetInnerHTML={{__html:JSON.stringify(structured).replace(/</g,'\\\\u003c')}}/>}<CmsWebsitePage pathname={pathname} scope={websiteScope} initialResult={result} initialSettings={snapshot} chrome={false}/></>;
+}
+`;
+}
+const css = `/* Preserve native menus, including mobile behavior and cart actions. */
+.cms-native-settings { min-height:100vh; display:flex; flex-direction:column; }
+.cms-native-brand-slot { order:1; flex-shrink:0; max-width:60%; }
+.cms-native-brand-slot .cms-website-branding img { max-width:min(15rem,45vw); }
+.cms-native-navbar-row { padding-top:12px; padding-bottom:12px; }
+header .cms-website-navigation { color:var(--cocoa-700); }
+header .cms-website-navigation > nav > ul { display:flex; flex-wrap:wrap; align-items:center; gap:8px; }
+header .cms-website-navigation a, header .cms-website-navigation summary { padding:8px 12px; font-size:.92rem; font-weight:600; }
+.cms-native-mobile-navigation .cms-website-navigation > nav > ul { align-items:stretch; flex-direction:column; }
+.cms-native-mobile-navigation .cms-website-navigation a { display:block; }
+footer .cms-website-navigation { color:var(--cream-300); margin:24px 0; }
+footer .cms-website-navigation h2 { color:inherit; font-size:1.05rem; }
+@media(max-width:600px) { .cms-native-brand { gap:7px!important; } .cms-native-brand > div:first-child { width:32px!important; height:36px!important; } .cms-native-brand > div:last-child > span:first-child { font-size:1.05rem!important; } .cms-native-brand > div:last-child > span:last-child { display:none!important; } .cms-native-nav-actions { gap:6px!important; } .cms-native-cart-label { display:none!important; } }
+`;
+
+export async function planReviewedCommerceSettings(root, {config, registry, source, manifest}) {
+  if (registry.profile !== REVIEWED_ICECREAM_PROFILE) return null;
+  if (!(manifest.dependencies?.next ?? manifest.devDependencies?.next) || registry.routes.some(row => !row.sourceFile.startsWith('src/app/'))) fail('The reviewed navigation profile requires its original Next application layout.');
+  const ownership = await inspectReviewedCommerceOwnership(root);
+  if (!ownership) fail('Reviewed native commerce ownership changed. Existing header/footer and commerce routes were preserved.');
+  const previousText = await ordinary(root, FILE), existing = previousText !== null;
+  const outputs = [...baseOutputs,CONTENT_BINDINGS_FILE,...registry.routes.map(row => row.sourceFile)].sort();
+  const connection = {siteId:config.siteId,environmentId:config.environmentId,apiOrigin:config.apiOrigin,websiteOrigin:config.websiteOrigin,adminOrigin:source.adminOrigin};
+  const demo = await inspectOwnedDemo(root), inventory = await inspectSourceRoutes(root);
+  const allowedDynamic = ['src/app/menu/[id]', ...(existing ? ['src/app/[...cmsPath]'] : []), ...(demo ? [demo.path] : [])];
+  if (inventory.unresolvedPaths.some(name => !allowedDynamic.includes(name)) || inventory.routes.some(route => !config.routes.some(row => row.path === '/' + route) && !ownership.nativePaths.includes('/' + route))) fail('Native routing changed. Review every new route before installing website navigation.');
+  let count = 0;
+  async function scan(directory, depth = 0) {
+    if (depth > 14) fail('Route inspection exceeded its bound.');
+    for (const item of await readdir(path.join(root, directory), {withFileTypes:true})) {
+      if (++count > 4000 || item.isSymbolicLink()) fail('Linked or oversized routes require manual navigation review.');
+      if (item.isDirectory()) { const name = directory + '/' + item.name; if (item.name.includes('[') && !allowedDynamic.includes(name)) fail('Unreviewed dynamic routes require manual navigation composition.'); await scan(name, depth + 1); }
+    }
+  }
+  await scan('src/app');
+  const publication = await planNextPublication(root, config, {websiteSettings:existing,installedSections:sections});
+  if (publication.files.some(file => file.state !== 'unchanged')) fail('The reviewed publication layout changed. Restore or review it before navigation setup.');
+  // These endpoints become settings-owned only when no native owner exists.
+  for (const name of ['public/sitemap.xml','public/robots.txt',...['js','jsx','ts','tsx'].flatMap(ext => [`src/app/sitemap.${ext}`,`src/app/robots.${ext}`,`src/app/api/universalcms/settings/route.${ext}`,`src/app/api/universalcms/page/route.${ext}`,`src/app/sitemap.xml/route.${ext}`,`src/app/robots.txt/route.${ext}`])]) if (await ordinary(root,name) !== null) fail('An existing settings, sitemap or robots route needs manual composition. It was preserved.');
+  const observations = [...ownership.files, ...(demo?.files ?? [])];
+  for (const row of registry.routes) {
+    const frozen = await readFrozenContent(root, row);
+    observations.push(...Object.entries(frozen.texts).map(([name,content]) => ({path:row[name + 'File'],content,state:'unchanged'})));
+  }
+  for (const name of ['package.json', CONTENT_BINDINGS_FILE, '.universalcms/publication.config.json', '.universalcms/source.config.json', ...['js','mjs','cjs','ts'].map(ext => `next.config.${ext}`)]) {
+    const content = await ordinary(root, name); if (content !== null) observations.push({path:name,content,state:'unchanged'});
+  }
+  if (existing) {
+    let previous; try { previous = JSON.parse(previousText); } catch { fail('Invalid website navigation manifest.'); }
+    if (Object.keys(previous).sort().join() !== 'adminOrigin,apiOrigin,environmentId,files,profile,sections,siteId,version,websiteOrigin' || previous.version !== 1 || previous.profile !== REVIEWED_ICECREAM_PROFILE || Object.entries(connection).some(([name,value]) => previous[name] !== value) || JSON.stringify(previous.sections) !== JSON.stringify(sections) || !Array.isArray(previous.files) || JSON.stringify(previous.files.map(row => row?.path).sort()) !== JSON.stringify(outputs) || previous.files.some(row => !row || Object.keys(row).sort().join() !== 'path,sha256' || !/^[a-f0-9]{64}$/.test(row.sha256))) fail('Website navigation scope or manifest is invalid.');
+    for (const row of previous.files) { const content = await ordinary(root, row.path); if (content === null || contentDigest(content) !== row.sha256) fail('A website navigation adapter was customized. Preserve it and review the shared integration manually.'); observations.push({path:row.path,content,state:'unchanged'}); }
+    observations.push({path:FILE,content:previousText,state:'unchanged'});
+    return {root, files:[...new Map(observations.map(file => [file.path,file])).values()], sections, config};
+  }
+  const originals = await reviewedNavigationSources(root);
+  const templates = {...reviewedCommerceNavigationTemplates(originals), 'src/proxy.ts':nextWebsiteProxyTemplate('src/app',{installedSections:sections}), 'src/cms/website-navigation.server.ts':serverTemplate(), 'src/cms/website-navigation.css':css, 'src/cms/NativeSettings.tsx':nativeSettingsTemplate(), 'src/app/[...cmsPath]/page.tsx':catchallTemplate()};
+  const nextRegistry = JSON.parse(json(registry));
+  for (const row of nextRegistry.routes) {
+    const current = await ordinary(root,row.sourceFile);
+    if (current !== nextContentPageTemplate(row)) fail('An original content wrapper was customized. Preserve it and review the settings integration.');
+    originals[row.sourceFile] = current;
+    templates[row.sourceFile] = originalPageTemplate(row);
+    row.sourceHash = contentDigest(templates[row.sourceFile]);
+  }
+  originals[CONTENT_BINDINGS_FILE] = await ordinary(root,CONTENT_BINDINGS_FILE);
+  templates[CONTENT_BINDINGS_FILE] = json(nextRegistry);
+  const files = [];
+  for (const [name,content] of Object.entries(templates)) {
+    const previous = await ordinary(root,name), expected = name === 'src/proxy.ts' ? nextPublicationProxyTemplate('src/app') : originals[name] ?? null;
+    if (previous !== expected) fail('A navigation adapter path already contains a custom file. Existing files were preserved.');
+    files.push({path:name,content,state:previous === null?'create':'update',...(previous === null?{}:{previous})});
+  }
+  // Create the supporting modules before editing native entrypoints. The final
+  // manifest is written last and is never evidence of a partially saved adapter.
+  files.sort((left,right) => Number(left.state !== 'create') - Number(right.state !== 'create'));
+  files.push({path:FILE,content:json({version:1,profile:REVIEWED_ICECREAM_PROFILE,...connection,sections,files:files.map(file => ({path:file.path,sha256:contentDigest(file.content)}))}),state:'create'});
+  const writes = new Set(files.map(file => file.path));
+  return {root,files:[...[...new Map(observations.map(file => [file.path,file])).values()].filter(file => !writes.has(file.path)),...files],sections,config};
+}

package/dist/reviewed-native-ownership.mjs

@@ -0,0 +1,118 @@
+/** Read an explicit local review without executing source or reading secrets. */
+import { lstat, readdir } from 'node:fs/promises';
+import path from 'node:path';
+import ts from './vendor/typescript.cjs';
+import { createHash } from 'node:crypto';
+import { projectRoot, readProjectFile, SetupError } from './project-files.mjs';
+import { inspectSourceRoutes } from './source-routes.mjs';
+import { REVIEWED_NEXT_NATIVE_PROFILE, validateNativeRoutes, isNativeReviewFilePath } from './native-routes.mjs';
+export const NATIVE_ROUTES_FILE = '.universalcms/native.routes.json';
+const digest = value => createHash('sha256').update(value).digest('hex');
+const fail = message => { throw new SetupError(message); };
+export async function inspectReviewedNativeOwnership(directory, { candidate } = {}) {
+  // The CLI can validate a prospective review before writing it. Runtime callers
+  // omit candidate and must still validate the exact installed ordinary file.
+  if (candidate !== undefined && (typeof candidate !== 'string' || Buffer.byteLength(candidate) > 128 * 1024)) fail('Invalid native ownership review candidate.');
+  const root = await projectRoot(directory), text = candidate ?? await readProjectFile(root, NATIVE_ROUTES_FILE);
+  if (text === null) return null;
+  if (candidate === undefined && (await lstat(path.join(root, NATIVE_ROUTES_FILE))).nlink !== 1) fail('Native ownership must use ordinary single-link files.');
+  let value;
+  try { value = JSON.parse(text); validateNativeRoutes(value); } catch { fail('The reviewed native ownership manifest is invalid. Preserve the files and review .universalcms/native.routes.json.'); }
+  if (Object.keys(value).sort().join() !== 'files,nativePaths,nativePatterns,profile,version' || value.version !== 1 || value.profile !== REVIEWED_NEXT_NATIVE_PROFILE ||
+      !Array.isArray(value.files) || !value.files.length || value.files.length > 200 || value.files.some(file => !file || Object.keys(file).sort().join() !== 'path,sha256' ||
+        !isNativeReviewFilePath(file.path) || !/^[a-f0-9]{64}$/.test(file.sha256)) ||
+      new Set(value.files.map(file => file.path)).size !== value.files.length) fail('Native ownership must list bounded reviewed source modules and their SHA-256 hashes.');
+  const observed = [];
+  for (const file of value.files) {
+    const content = await readProjectFile(root, file.path);
+    if (content === null || digest(content) !== file.sha256 || (await lstat(path.join(root, file.path))).nlink !== 1) fail('A reviewed native module changed or is linked. Review its ownership before setup or deployment.');
+    observed.push({ path: file.path, content, state: 'unchanged' });
+  }
+  const inventory = await inspectSourceRoutes(root), names = new Set(value.files.map(file => file.path));
+  const app = Object.values(inventory.files)[0].startsWith('src/app/') ? 'src/app' : 'app';
+  const pkg = JSON.parse(await readProjectFile(root, 'package.json'));
+  if (pkg.imports && Object.keys(pkg.imports).length) fail('Package import aliases need a separate native ownership review.');
+  let alias = false, configs = 0;
+  for (const filename of ['tsconfig.json','jsconfig.json']) {
+    const configText = await readProjectFile(root, filename);
+    if (configText === null) continue;
+    if (++configs > 1 || (await lstat(path.join(root, filename))).nlink !== 1) fail('Ambiguous or linked module resolution needs a separate native ownership review.');
+    const parsed = ts.parseConfigFileTextToJson(filename, configText), config = parsed.config;
+    const options = config?.compilerOptions ?? {}, expected = app.startsWith('src/') ? './src/*' : './*';
+    if (parsed.error || !config || config.extends || config.references || options.baseUrl !== undefined || options.rootDirs || options.moduleSuffixes ||
+        options.paths && (Object.keys(options.paths).join() !== '@/*' || JSON.stringify(options.paths['@/*']) !== JSON.stringify([expected]))) fail('Only conventional @/* source aliases are supported by native ownership. Review custom module resolution manually.');
+    alias = !!options.paths;
+  }
+  for (const extension of ['js','mjs','cjs','ts']) {
+    const config = await readProjectFile(root, `next.config.${extension}`);
+    if (config && /\b(?:webpack|resolveAlias|alias)\b/.test(config)) fail('Custom Next module aliases need a separate native ownership review.');
+  }
+  // The shared app root layout is validated by publication/settings setup.
+  // Route-specific boundary modules belong to the explicit native review.
+  const directories = new Set([...value.nativePaths, ...value.nativePatterns].flatMap(pathname => {
+    const result = []; let current = `${app}${pathname === '/' ? '' : pathname}`;
+    while (current !== app) { result.push(current); current = path.posix.dirname(current); }
+    return result;
+  }));
+  for (const directory of directories) for (const name of ['layout','template','loading','error','default','not-found']) for (const ext of ['js','jsx','ts','tsx']) {
+    const filename = `${directory}/${name}.${ext}`;
+    if (await readProjectFile(root, filename) !== null && !names.has(filename)) fail('Native route boundary modules must be included in the review.');
+  }
+  // Every local dependency of the reviewed modules is explicit too. Parse
+  // syntax only: a route review never executes application code.
+  for (const file of observed) {
+    if (!/\.[cm]?[jt]sx?$/.test(file.path)) continue;
+    const parsed = ts.createSourceFile(file.path, file.content, ts.ScriptTarget.Latest, true, /x$/.test(file.path) ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+    if (parsed.parseDiagnostics.length) fail('A reviewed native source module cannot be parsed safely.');
+    const imports = [];
+    function visit(node) {
+      if ((ts.isImportDeclaration(node) || ts.isExportDeclaration(node)) && node.moduleSpecifier && ts.isStringLiteral(node.moduleSpecifier)) imports.push(node.moduleSpecifier.text);
+      if (ts.isCallExpression(node) && (node.expression.kind === ts.SyntaxKind.ImportKeyword || ts.isIdentifier(node.expression) && node.expression.text === 'require')) {
+        if (node.arguments.length !== 1 || !ts.isStringLiteral(node.arguments[0])) fail('Dynamic native module loading needs manual ownership review.');
+        imports.push(node.arguments[0].text);
+      }
+      ts.forEachChild(node, visit);
+    }
+    visit(parsed);
+    for (const specifier of imports) {
+      if (specifier.startsWith('#') || specifier.startsWith('/') || specifier.includes('\\')) fail('Unknown local native import aliases need manual review.');
+      if (specifier.startsWith('@/') && !alias) fail('A native @/ import requires the conventional explicit source alias.');
+      if (!specifier.startsWith('.') && !specifier.startsWith('@/')) {
+        const packageName = specifier.startsWith('@') ? specifier.split('/').slice(0,2).join('/') : specifier.split('/')[0];
+        if (!specifier.startsWith('node:') && !Object.hasOwn(pkg.dependencies ?? {}, packageName) && !Object.hasOwn(pkg.devDependencies ?? {}, packageName)) fail('Unknown native import aliases need an explicit dependency or manual review.');
+        continue;
+      }
+      const base = specifier.startsWith('@/') ? (app.startsWith('src/') ? 'src/' : '') + specifier.slice(2) : path.posix.normalize(path.posix.join(path.posix.dirname(file.path), specifier));
+      const candidates = [base, ...['.ts','.tsx','.js','.jsx','.mjs','.cjs','.mts','.cts','.json','/index.ts','/index.tsx','/index.js','/index.jsx'].map(suffix => base + suffix)];
+      if (!candidates.some(name => names.has(name))) fail('Every local dependency of a native route must be explicitly included in its reviewed file hashes.');
+    }
+  }
+  for (const pathname of value.nativePaths) {
+    const file = inventory.files[pathname === '/' ? 'home' : pathname.slice(1)];
+    if (!file || !names.has(file) || !['js','jsx','ts','tsx'].some(ext => file === `${app}${pathname === '/' ? '' : pathname}/page.${ext}`)) fail('Each reviewed native path must identify an existing static page included in the file review.');
+  }
+  const dynamicDirectories = value.nativePatterns.map(pattern => `${app}${pattern}`);
+  let inspected = 0;
+  for (const directory of dynamicDirectories) {
+    if (!inventory.unresolvedPaths.includes(directory)) fail('Each reviewed native pattern must identify one existing final dynamic route. Route groups, parallel and catch-all routes need separate review.');
+    let pages = 0;
+    async function scan(current, depth = 0) {
+      if (depth > 12) fail('Native route review exceeded its directory budget.');
+      const stat = await lstat(path.join(root, current));
+      if (!stat.isDirectory() || stat.isSymbolicLink()) fail('Native route directories must be ordinary, without links.');
+      for (const item of await readdir(path.join(root, current), { withFileTypes: true })) {
+        if (++inspected > 4000 || item.isSymbolicLink()) fail('Native route review exceeds its budget or contains a link.');
+        const filename = `${current}/${item.name}`;
+        if (item.isDirectory()) { if (/[[\]@()]/.test(item.name)) fail('Nested dynamic, parallel or intercepted native routes need separate review.'); await scan(filename, depth + 1); }
+        else if (/^(?:page|route)\./.test(item.name)) {
+          if (current !== directory || !/^page\.[jt]sx?$/.test(item.name) || !names.has(filename)) fail('Unreviewed native route descendants or handlers cannot inherit a reviewed pattern.');
+          pages++;
+        } else if (/^(?:layout|template|loading|error|default|not-found)\.[jt]sx?$/.test(item.name) && !names.has(filename)) fail('Native route boundary modules must be included in the review.');
+      }
+    }
+    await scan(directory);
+    if (pages !== 1) fail('A reviewed native dynamic route must contain exactly one ordinary page module.');
+  }
+  return { profile: value.profile, nativePaths: value.nativePaths, nativePatterns: value.nativePatterns,
+    dynamicDirectories, files: observed, manifest: { path: NATIVE_ROUTES_FILE, content: text, state: 'unchanged' } };
+}