siteplane 0.1.40 → 0.1.42

package/dist/next.js

@@ -1216,6 +1216,8 @@ var CONTINUE_SITE_SETUP_LOCATOR_HINT_MAX_BYTES = 512;
 var CONTINUE_SITE_SETUP_REQUESTED_LABEL_MAX_BYTES = 120;
 var CONTINUE_SITE_SETUP_REQUESTED_SECTION_MAX_BYTES = 120;
 var CONTINUE_SITE_SETUP_REQUESTED_SUBSECTION_MAX_BYTES = 120;
+var SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_LENGTH = 2e3;
+var SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_BYTES = 8e3;
 var CONTINUE_SITE_SETUP_ITEMS_MAX_BYTES = 32 * 1024;
 var CONTINUE_SITE_SETUP_HTTP_BODY_MAX_BYTES = 64 * 1024;
 var siteSetupRunStatusSchema = z14.enum(SITE_SETUP_RUN_STATUSES);
@@ -1305,6 +1307,7 @@ var editorDefinitionV1Schema = z14.object({
   }
 });
 var forbiddenControlOrBidi = /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/u;
+var forbiddenOwnerNoteControlOrBidi = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/u;
 var unsafeLocator = /<\/?[a-z][^>]*>|\b(?:javascript|data:text\/html)\s*:|\bon[a-z]+\s*=/iu;
 var renderedPathSchema = z14.string().trim().transform((value) => value !== "/" ? value.replace(/\/+$/u, "") : value).superRefine((value, context) => {
   if (!value.startsWith("/") || value === "$global" || value.includes("?") || value.includes("#")) {
@@ -1357,6 +1360,175 @@ var setupCorrectionItemsSchema = z14.array(setupCorrectionItemSchema).max(CONTIN
     });
   }
 });
+var siteSetupOwnerEditabilityNoteSchema = z14.string().max(SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_LENGTH).superRefine((value, context) => {
+  if (utf8Bytes(value) > SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_BYTES) {
+    context.addIssue({
+      code: "custom",
+      message: `ownerEditabilityNote exceeds ${SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_BYTES} UTF-8 bytes.`
+    });
+  }
+  if (forbiddenOwnerNoteControlOrBidi.test(value)) {
+    context.addIssue({
+      code: "custom",
+      message: "ownerEditabilityNote contains a forbidden control or bidi character."
+    });
+  }
+});
+var SITE_SETUP_MODULE_SCOPES = {
+  editing: ["setup:read", "setup:write"],
+  analytics: [
+    "analytics:setup",
+    "analytics:sync",
+    "analytics:test",
+    "analytics:readiness",
+    "analytics:agent_instructions",
+    "analytics:public_key_read"
+  ]
+};
+var siteSetupModulesSchema = z14.array(z14.enum(["editing", "analytics"])).min(1).max(2).refine((modules) => modules[0] === "editing" && (modules.length === 1 || modules[1] === "analytics"), "Choose Editing with optional Analytics.");
+function siteSetupScopes(modules) {
+  return modules.flatMap((module) => [...SITE_SETUP_MODULE_SCOPES[module]]);
+}
+function hasExactSiteSetupScopes(scopes, modules) {
+  const matches = (expected) => scopes.length === expected.length && expected.every((scope) => scopes.includes(scope));
+  return modules ? matches(siteSetupScopes(modules)) : matches(siteSetupScopes(["editing"])) || matches(siteSetupScopes(["editing", "analytics"]));
+}
+var siteSetupActivityInputSchema = z14.object({
+  phase: z14.enum([
+    "inspecting",
+    "integrating",
+    "deploying",
+    "verifying",
+    "repairing"
+  ]),
+  textId: z14.enum([
+    "inspecting",
+    "integrating",
+    "deploying",
+    "verifying",
+    "repairing"
+  ])
+}).strict().refine((value) => value.phase === value.textId, "Activity text must describe its phase.");
+var nextActionFields = {
+  actor: z14.enum(["agent", "user", "siteplane"]),
+  boundary: z14.enum([
+    "source",
+    "environment",
+    "deployment",
+    "verification",
+    "authorization",
+    "review"
+  ]),
+  precondition: z14.string().min(1).max(1e3),
+  instruction: z14.string().min(1).max(2e3),
+  expectedEvidence: z14.string().min(1).max(1e3)
+};
+var siteSetupNextActionSchema = z14.discriminatedUnion("kind", [
+  z14.object({
+    ...nextActionFields,
+    kind: z14.literal("run_command"),
+    command: z14.string().min(1).max(500)
+  }).strict(),
+  z14.object({ ...nextActionFields, kind: z14.literal("agent_edit") }).strict(),
+  z14.object({ ...nextActionFields, kind: z14.literal("needs_user_action") }).strict(),
+  z14.object({ ...nextActionFields, kind: z14.literal("wait") }).strict(),
+  z14.object({ ...nextActionFields, kind: z14.literal("done") }).strict()
+]);
+var siteSetupTaskRunSchema = z14.object({
+  runId: z14.string().uuid(),
+  mode: siteSetupRunModeSchema,
+  status: siteSetupRunStatusSchema,
+  fieldContractHash: z14.string().nullable(),
+  deploymentOrigin: z14.string().url().nullable(),
+  deploymentRevision: z14.string().nullable(),
+  publicRuntimeKeyId: z14.string().uuid().nullable(),
+  reviewVersion: z14.string().nullable()
+}).strict();
+var siteSetupTaskProgressSchema = z14.object({
+  progressStage: z14.enum([
+    "waiting_for_connection",
+    "agent_connected",
+    "project_context_loaded",
+    "fields_prepared",
+    "deployment_verification",
+    "ready_for_review",
+    "action_required",
+    "completed"
+  ]),
+  lastVerifiedAt: z14.string().datetime().nullable(),
+  lastActivityAt: z14.string().datetime(),
+  activitySource: z14.enum(["user", "server", "agent"]),
+  activityPhase: siteSetupActivityInputSchema.shape.phase.nullable(),
+  activityTextId: siteSetupActivityInputSchema.shape.textId.nullable()
+}).strict();
+var siteSetupTaskSchema = z14.object({
+  contractVersion: z14.literal("siteplane.setup-task.v2"),
+  workflow: z14.enum(["initial_setup", "structure_update"]),
+  goal: z14.string().min(1),
+  modules: siteSetupModulesSchema,
+  authorizationVersion: z14.number().int().positive(),
+  authorizedScopes: z14.array(z14.string()).min(2),
+  site: z14.object({
+    siteId: z14.string().uuid(),
+    portalPath: z14.string(),
+    adminOrigin: z14.string().url()
+  }).strict().nullable(),
+  run: siteSetupTaskRunSchema.nullable(),
+  progress: siteSetupTaskProgressSchema.nullable(),
+  assignment: z14.literal("owned"),
+  deadline: z14.string().datetime().nullable(),
+  userInstructions: z14.object({
+    text: siteSetupOwnerEditabilityNoteSchema,
+    source: z14.literal("user"),
+    trust: z14.literal("untrusted")
+  }).strict(),
+  corrections: setupCorrectionItemsSchema,
+  environmentBindings: z14.array(z14.object({
+    name: z14.string().regex(/^[A-Z][A-Z0-9_]+$/u),
+    source: z14.string().min(1),
+    sensitivity: z14.enum(["public", "secret"]),
+    usage: z14.enum(["build", "server", "build_and_server"]),
+    evidence: z14.string().min(1)
+  }).strict()),
+  nextAction: siteSetupNextActionSchema,
+  error: z14.object({
+    code: z14.string().regex(/^[a-z0-9_.]+$/u).max(160),
+    boundary: nextActionFields.boundary,
+    responsibleActor: nextActionFields.actor,
+    retryable: z14.boolean(),
+    retryAfter: z14.number().int().nonnegative().nullable(),
+    requestId: z14.string().regex(/^[A-Za-z0-9_-]+$/u).max(128)
+  }).strict().nullable(),
+  packages: z14.object({
+    siteplane: z14.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u),
+    runtimeNext: z14.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u)
+  }).strict(),
+  communication: z14.object({
+    beforeSourceChanges: z14.string().min(1),
+    updates: z14.array(z14.string().min(1)).min(1),
+    blocker: z14.string().min(1)
+  }).strict(),
+  discovery: z14.object({
+    inspectPublicRoutes: z14.boolean(),
+    contentKinds: z14.array(z14.enum(["text", "longText", "link", "image"])).min(1),
+    rules: z14.array(z14.string().min(1)).min(1)
+  }).strict(),
+  steps: z14.array(z14.object({
+    id: z14.enum([
+      "inspect_repository",
+      "install_packages",
+      "instrument_fields",
+      "apply_contract",
+      "deploy_production",
+      "verify_deployment"
+    ]),
+    instruction: z14.string().min(1)
+  }).strict()).length(6),
+  completion: z14.object({
+    verifiedStatus: z14.literal("ready_for_review"),
+    instruction: z14.string().min(1)
+  }).strict()
+}).strict().refine((task) => hasExactSiteSetupScopes(task.authorizedScopes, task.modules), "Task scopes must exactly match its modules.");
 var canonicalHashSchema = z14.string().regex(/^sha256:[0-9a-f]{64}$/iu);
 var deploymentRevisionSchema = normalizedSafeTextSchema(256, "deploymentRevision");
 var continueSiteSetupInputSchema = z14.object({
@@ -1364,7 +1536,15 @@ var continueSiteSetupInputSchema = z14.object({
   runId: z14.string().uuid(),
   expectedFieldContractHash: canonicalHashSchema,
   expectedDeploymentRevision: deploymentRevisionSchema,
-  correctionItems: setupCorrectionItemsSchema
+  correctionItems: setupCorrectionItemsSchema,
+  ownerEditabilityNote: siteSetupOwnerEditabilityNoteSchema.optional()
+}).strict();
+var saveSiteSetupOwnerNoteInputSchema = z14.object({
+  siteId: z14.string().uuid(),
+  runId: z14.string().uuid(),
+  expectedFieldContractHash: canonicalHashSchema,
+  expectedDeploymentRevision: deploymentRevisionSchema,
+  ownerEditabilityNote: siteSetupOwnerEditabilityNoteSchema
 }).strict();
 var siteSetupContextInputSchema = z14.object({}).strict();
 var siteSetupApplyInputSchema = z14.object({
@@ -1529,6 +1709,7 @@ var FIELD_BRIDGE_MESSAGE_TYPES = [
   "siteplane:field-bridge:preview-ack",
   "siteplane:field-bridge:set-visual-control-state",
   "siteplane:field-bridge:missing-content",
+  "siteplane:field-bridge:preview-scrolled",
   "siteplane:field-bridge:error"
 ];
 var canonicalFieldContractHashSchema = z15.string().regex(/^sha256:[0-9a-f]{64}$/u);
@@ -1659,6 +1840,10 @@ var fieldBridgeMissingContentMessageSchema = fieldBridgeBaseSchema.extend({
     suggestedSection: bridgeSectionSchema.optional()
   }).strict()
 });
+var fieldBridgePreviewScrolledMessageSchema = fieldBridgeBaseSchema.extend({
+  type: z15.literal("siteplane:field-bridge:preview-scrolled"),
+  payload: z15.object({ renderedPath: realRenderedPathSchema }).strict()
+});
 var fieldBridgeErrorMessageSchema = fieldBridgeBaseSchema.extend({
   type: z15.literal("siteplane:field-bridge:error"),
   payload: z15.object({
@@ -1678,6 +1863,7 @@ var fieldBridgeMessageSchema = z15.discriminatedUnion("type", [
   fieldBridgePreviewAckMessageSchema,
   fieldBridgeSetVisualControlStateMessageSchema,
   fieldBridgeMissingContentMessageSchema,
+  fieldBridgePreviewScrolledMessageSchema,
   fieldBridgeErrorMessageSchema
 ]);
 
@@ -1897,40 +2083,35 @@ alwaysApply: true
 
 ${bookingRulesTemplate}`;
 
-// ../cli/dist/commands/connect.js
-import { spawn } from "child_process";
-import { randomBytes } from "crypto";
-import { z as z27 } from "zod";
-
-// ../cli/dist/config/credentials.js
-import { execFile } from "child_process";
+// ../cli/dist/config/project-config.js
+import { access, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
 import { randomUUID as randomUUID2 } from "crypto";
-import { chmod, mkdir as mkdir5, open, readFile as readFile5, rename, rm } from "fs/promises";
-import { dirname as dirname5, join as join3, relative } from "path";
-import { promisify } from "util";
+import { join as join3 } from "path";
 import { z as z24 } from "zod";
-var siteplaneCredentialsSchema = z24.object({
-  accessToken: z24.string().trim().min(1),
-  siteRevalidationSecret: z24.string().trim().min(1)
+var siteplaneProjectConfigSchema = z24.object({
+  version: z24.literal(1),
+  apiBaseUrl: z24.string().url(),
+  siteId: z24.string().uuid(),
+  publicSiteKeyId: z24.string().uuid(),
+  publicSiteKey: z24.string().trim().min(1),
+  fieldContractHash: z24.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
 }).strict();
-var execFileAsync = promisify(execFile);
+async function readProjectConfig(projectDir) {
+  return siteplaneProjectConfigSchema.parse(JSON.parse(await readFile5(join3(projectDir, "siteplane.config.json"), "utf8")));
+}
 
-// ../cli/dist/config/project-config.js
-import { access, chmod as chmod2, open as open2, readFile as readFile6, rename as rename2, rm as rm2 } from "fs/promises";
+// ../cli/dist/config/credentials.js
+import { execFile } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
-import { join as join4 } from "path";
+import { chmod as chmod2, mkdir as mkdir5, open as open2, readFile as readFile6, rename as rename2, rm as rm2 } from "fs/promises";
+import { dirname as dirname5, join as join4, relative } from "path";
+import { promisify } from "util";
 import { z as z25 } from "zod";
-var siteplaneProjectConfigSchema = z25.object({
-  version: z25.literal(1),
-  apiBaseUrl: z25.string().url(),
-  siteId: z25.string().uuid(),
-  publicSiteKeyId: z25.string().uuid(),
-  publicSiteKey: z25.string().trim().min(1),
-  fieldContractHash: z25.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
+var siteplaneCredentialsSchema = z25.object({
+  accessToken: z25.string().trim().min(1),
+  siteRevalidationSecret: z25.string().trim().min(1)
 }).strict();
-async function readProjectConfig(projectDir) {
-  return siteplaneProjectConfigSchema.parse(JSON.parse(await readFile6(join4(projectDir, "siteplane.config.json"), "utf8")));
-}
+var execFileAsync = promisify(execFile);
 
 // ../cli/dist/commands/init.js
 import { join as join5 } from "path";
@@ -1958,24 +2139,6 @@ var bootstrapResponseSchema = z26.object({
   ])
 }).strict();
 
-// ../cli/dist/commands/connect.js
-var claimResponseSchema = z27.object({
-  ok: z27.literal(true),
-  data: z27.object({
-    pairingId: z27.string().uuid(),
-    status: z27.literal("approval_required"),
-    approvalUrl: z27.string().url()
-  }).passthrough()
-}).strict();
-var waitingResponseSchema = z27.object({
-  ok: z27.literal(true),
-  data: z27.object({ status: z27.literal("approval_required") }).strict()
-}).strict();
-var bootstrapResponseSchema2 = z27.object({
-  ok: z27.literal(true),
-  data: siteSetupBootstrapDataSchema
-}).strict();
-
 // ../cli/dist/commands/scan.js
 import { readdir } from "fs/promises";
 import { extname, join as join6 } from "path";
@@ -2021,7 +2184,7 @@ async function collectSourceFiles(directory) {
 import { execFile as execFile2 } from "child_process";
 import { readFile as readFile7 } from "fs/promises";
 import { promisify as promisify2 } from "util";
-import { z as z28 } from "zod";
+import { z as z27 } from "zod";
 
 // ../cli/dist/scan/next-source-scan.js
 import ts2 from "typescript";
@@ -2688,52 +2851,30 @@ function isPositionalFieldReference(value) {
 
 // ../cli/dist/commands/site-setup.js
 var execFileAsync2 = promisify2(execFile2);
-var safeErrorSchema = z28.object({
-  code: z28.string().trim().min(1),
-  message: z28.string().trim().min(1)
+var safeErrorSchema = z27.object({
+  code: z27.string().trim().min(1),
+  message: z27.string().trim().min(1)
 }).passthrough();
-var errorResponseSchema2 = z28.object({ ok: z28.literal(false), error: safeErrorSchema }).passthrough();
-var contextDataSchema = z28.object({
-  site: z28.object({ siteId: z28.string().uuid(), portalPath: z28.string() }),
-  run: z28.object({
-    runId: z28.string().uuid(),
-    mode: z28.enum(["initial", "update"]),
-    status: z28.enum([
-      "waiting_for_agent",
-      "working",
-      "action_required",
-      "ready_for_review"
-    ]),
-    fieldContractHash: z28.string().nullable(),
-    deploymentOrigin: z28.string().nullable(),
-    deploymentRevision: z28.string().nullable(),
-    errorCode: z28.string().nullable(),
-    errorMessage: z28.string().nullable()
-  }),
-  structureHandoff: z28.object({
-    pendingFields: z28.array(setupCorrectionItemSchema).min(1).max(50)
-  }).strict().nullable(),
-  allowedTasks: z28.array(z28.string()),
-  requiredEnvironmentNames: z28.array(z28.string())
-}).strict();
-var contextResponseSchema = z28.object({ ok: z28.literal(true), data: contextDataSchema }).strict();
-var applyDataSchema = z28.object({
-  status: z28.enum(["applied", "ready_for_review"]),
-  runId: z28.string().uuid().optional(),
-  contractVersionId: z28.string().uuid().optional(),
-  fieldContractHash: z28.string().regex(/^sha256:[0-9a-f]{64}$/u),
-  editorDefinitionHash: z28.string().regex(/^sha256:[0-9a-f]{64}$/u).optional(),
-  fieldCount: z28.number().int().nonnegative().optional(),
-  routeCount: z28.number().int().nonnegative().optional()
+var errorResponseSchema2 = z27.object({ ok: z27.literal(false), error: safeErrorSchema }).passthrough();
+var contextDataSchema = z27.object({ task: siteSetupTaskSchema }).strict();
+var contextResponseSchema = z27.object({ ok: z27.literal(true), data: contextDataSchema }).strict();
+var applyDataSchema = z27.object({
+  status: z27.enum(["applied", "ready_for_review"]),
+  runId: z27.string().uuid().optional(),
+  contractVersionId: z27.string().uuid().optional(),
+  fieldContractHash: z27.string().regex(/^sha256:[0-9a-f]{64}$/u),
+  editorDefinitionHash: z27.string().regex(/^sha256:[0-9a-f]{64}$/u).optional(),
+  fieldCount: z27.number().int().nonnegative().optional(),
+  routeCount: z27.number().int().nonnegative().optional()
 }).strict();
-var applyResponseSchema = z28.object({ ok: z28.literal(true), data: applyDataSchema }).strict();
-var verifyDataSchema = z28.object({
-  status: z28.literal("ready_for_review"),
-  runId: z28.string().uuid().optional(),
-  deploymentOrigin: z28.string().url().optional(),
-  deploymentRevision: z28.string().optional()
+var applyResponseSchema = z27.object({ ok: z27.literal(true), data: applyDataSchema }).strict();
+var verifyDataSchema = z27.object({
+  status: z27.literal("ready_for_review"),
+  runId: z27.string().uuid().optional(),
+  deploymentOrigin: z27.string().url().optional(),
+  deploymentRevision: z27.string().optional()
 }).strict();
-var verifyResponseSchema = z28.object({ ok: z28.literal(true), data: verifyDataSchema }).strict();
+var verifyResponseSchema = z27.object({ ok: z27.literal(true), data: verifyDataSchema }).strict();
 
 // src/next.ts
 var SiteplaneNextContractError = class extends Error {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "siteplane",
   "private": false,
-  "version": "0.1.40",
+  "version": "0.1.42",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
   "publishConfig": {