siteplane 0.1.50 → 0.1.52

package/README.md

@@ -10,6 +10,17 @@ policies and check real rendered images after the change. This preparation does
 Public Siteplane CLI for connected-site setup, field synchronization, Analytics
 instrumentation and Booking integration.
 
+## Controlled guest review
+
+After a controlled accountless setup reaches `ready_for_review`, run `siteplane setup review`
+in the same website repository. Its protected local installation key opens access to that project's
+saved review without creating another site or deployment. Give the one-time link to the user;
+they choose **Open review** in their own browser. Do not consume the link on their behalf.
+Issue a fresh link only when needed. The URL fragment is a short-lived credential, so do not
+write it to source, documentation, analytics or shared logs. Guest review can organize and finish
+the setup; activation and account ownership require the later claim step. This entry remains
+controlled while Batch 3 is being completed.
+
 ## Initial setup
 
 Copy the setup prompt in Siteplane, then run its exact one-time command in the
@@ -72,8 +83,8 @@ Before starting, add `.siteplane/credentials.json` to the repository’s `.gitig
 unprotected credentials before any provisioning request.
 
 ```bash
-npx -y siteplane@0.1.50 setup start --modules editing --instructions-file instructions.txt
-npx -y siteplane@0.1.50 setup context
+npx -y siteplane@0.1.51 setup start --modules editing --instructions-file instructions.txt
+npx -y siteplane@0.1.51 setup context
 ```
 
 Start performs read-only preflight and saves the installation key and original request privately before the

package/dist/bin/siteplane.js

@@ -1934,6 +1934,18 @@ var fieldBridgeIdentitySchema = z17.object({
   fieldContractHash: canonicalFieldContractHashSchema,
   deploymentRevision: z17.string().trim().min(1).max(256)
 }).strict();
+var setupPreviewAccessSchema = z17.object({
+  capability: z17.string().regex(/^v1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{43}$/u).max(4096),
+  expiresAt: z17.string().datetime()
+}).strict();
+var setupPreviewReadSchema = fieldBridgeIdentitySchema.extend({
+  scope: z17.literal("setup_preview"),
+  siteId: z17.string().uuid(),
+  runId: z17.string().uuid(),
+  bridgeSessionId: z17.string().min(1),
+  expiresAt: z17.string().datetime(),
+  contract: siteFieldContractV1Schema
+}).strict();
 var fieldBridgeBaseSchema = z17.object({
   version: z17.literal(BRIDGE_PROTOCOL_VERSION),
   type: z17.enum(FIELD_BRIDGE_MESSAGE_TYPES),
@@ -1961,7 +1973,8 @@ var fieldBridgeInitMessageSchema = fieldBridgeBaseSchema.extend({
   payload: z17.object({
     adminOrigin: z17.string().url(),
     customerOrigin: z17.string().url(),
-    renderedPath: realRenderedPathSchema
+    renderedPath: realRenderedPathSchema,
+    setupPreview: setupPreviewAccessSchema.optional()
   }).strict()
 });
 var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
@@ -1974,7 +1987,7 @@ var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
       z17.literal("preview_values"),
       z17.literal("field_evidence"),
       z17.literal("visual_field_control")
-    ]).rest(z17.literal("analytics_preview_readiness")).refine((capabilities) => capabilities.length <= 5)
+    ]).rest(z17.enum(["analytics_preview_readiness", "setup_preview"])).refine((capabilities) => capabilities.length <= 6)
   }).strict()
 });
 var fieldBridgeFieldsMessageSchema = fieldBridgeBaseSchema.extend({
@@ -3880,7 +3893,7 @@ async function inspectSetupLocalProject(projectDir) {
     fail("package_manager_conflict", "Application and workspace packageManager declarations disagree.");
   if (declared && !new RegExp(`^${name2}@\\d+\\.\\d+\\.\\d+$`, "u").test(declared))
     fail("package_manager_conflict", "Declare an exact supported npm/pnpm packageManager version matching the canonical lockfile.");
-  const localVersion = (await setupProcess(declared ? "npx" : name2, declared ? ["--yes", declared, "--version"] : ["--version"], { cwd: lockfileRoot })).trim();
+  const localVersion = (await setupProcess(declared ? "npx" : name2, declared ? ["--yes", "--package", declared, name2, "--version"] : ["--version"], { cwd: lockfileRoot })).trim();
   if (!(name2 === "npm" ? stable(localVersion, 10) : stable(localVersion, 9) || stable(localVersion, 10)))
     fail("unsupported_package_manager_version", "Use npm 10 or pnpm 9/10; other versions are outside the initial setup support range.");
   if (declared && declared !== `${name2}@${localVersion}`)
@@ -5296,6 +5309,79 @@ async function exists2(path) {
   }
 }
 
+// ../cli/dist/commands/setup-review.js
+import { z as z36 } from "zod";
+var responseSchema2 = z36.object({
+  ok: z36.literal(true),
+  data: z36.object({
+    reviewUrl: z36.string().url(),
+    expiresAt: z36.string().datetime({ offset: true })
+  }).strict()
+}).strict();
+async function setupReviewCommand(input) {
+  const [config, credentials] = await Promise.all([
+    readProjectConfig(input.projectDir),
+    readLocalCredentials(input.projectDir)
+  ]);
+  if (!credentials.installation)
+    return {
+      status: "action_required",
+      code: "local_installation_missing",
+      message: "Open this project's review from your Siteplane workspace. Guest review requires the original local installation credentials."
+    };
+  if (new URL(config.apiBaseUrl).origin !== new URL(credentials.installation.apiBaseUrl).origin)
+    return {
+      status: "action_required",
+      code: "installation_origin_mismatch",
+      message: "The project and its local installation refer to different Siteplane origins. Restore the matching local configuration."
+    };
+  try {
+    const response = await (input.fetcher ?? fetch)(new URL("/api/cli/setup/review", config.apiBaseUrl), {
+      method: "POST",
+      signal: AbortSignal.timeout(2e4),
+      headers: {
+        authorization: `Bearer ${credentials.installation.key}`,
+        "content-type": "application/json",
+        ...input.vercelAutomationBypassSecret ? {
+          "x-vercel-protection-bypass": input.vercelAutomationBypassSecret
+        } : {}
+      },
+      body: JSON.stringify({ siteId: config.siteId, runId: config.runId })
+    });
+    const payload = await response.json();
+    const parsed = responseSchema2.safeParse(payload);
+    if (response.ok && parsed.success) {
+      const url = new URL(parsed.data.data.reviewUrl);
+      if (url.origin !== new URL(config.apiBaseUrl).origin || url.pathname !== "/setup/review" || url.search || !/^#token=[A-Za-z0-9_-]{43}$/u.test(url.hash))
+        throw new Error("Invalid review destination.");
+      return { status: "ready", ...parsed.data.data };
+    }
+    const denied = z36.object({
+      error: z36.object({
+        code: z36.enum([
+          "invalid_installation",
+          "already_claimed",
+          "project_expired",
+          "review_not_ready",
+          "rate_limited",
+          "review_access_unavailable"
+        ])
+      })
+    }).safeParse(payload);
+    return {
+      status: "action_required",
+      code: denied.success ? denied.data.error.code : "review_access_unavailable",
+      message: "The review link is unavailable. Check the existing setup status; do not create another project."
+    };
+  } catch {
+    return {
+      status: "action_required",
+      code: "review_access_unavailable",
+      message: "The review link request was not acknowledged. Run setup review again when the connection is available."
+    };
+  }
+}
+
 // ../cli/dist/commands/setup-prepare.js
 import { access as access5, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
 import { randomUUID as randomUUID5 } from "crypto";
@@ -5461,7 +5547,7 @@ Run setup context for the current user instructions and authorized modules. Keep
       }));
     const packageManifest = JSON.parse(await readFile10(join10(directory, "package.json"), "utf8"));
     const pm = preflight.local.packageManager;
-    const command = (args) => setupProcess("npx", ["--yes", `${pm.name}@${pm.version}`, ...args], {
+    const command = (args) => setupProcess("npx", ["--yes", "--package", `${pm.name}@${pm.version}`, pm.name, ...args], {
       cwd: directory,
       timeoutMs: 3e5
     });
@@ -5570,8 +5656,8 @@ async function assertSourcePath(root, target) {
 import { randomUUID as randomUUID6 } from "crypto";
 import { lstat as lstat3, mkdir as mkdir7, open as open4, readFile as readFile11, rm as rm4, rmdir } from "fs/promises";
 import { resolve as resolve2 } from "path";
-import { z as z36 } from "zod";
-var ownerSchema = z36.object({ pid: z36.number().int().positive(), nonce: z36.string().uuid() }).strict();
+import { z as z37 } from "zod";
+var ownerSchema = z37.object({ pid: z37.number().int().positive(), nonce: z37.string().uuid() }).strict();
 async function withSetupLock(projectDir, work) {
   const gitPath = (await setupProcess("git", ["rev-parse", "--git-path", "siteplane-setup.lock"], { cwd: projectDir })).trim();
   const path = resolve2(projectDir, gitPath);
@@ -5635,23 +5721,23 @@ import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
 import { dirname as dirname8, isAbsolute as isAbsolute2, join as join11, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
 import { isDeepStrictEqual, promisify as promisify3 } from "util";
-import { z as z37 } from "zod";
+import { z as z38 } from "zod";
 var execute = promisify3(execFile3);
 var name = ".siteplane/build-source.json";
-var oid = z37.string().regex(/^[0-9a-f]{40}$/u);
-var entrySchema = z37.object({
-  path: z37.string().min(1).max(4096),
-  mode: z37.enum(["100644", "100755", "120000"]),
+var oid = z38.string().regex(/^[0-9a-f]{40}$/u);
+var entrySchema = z38.object({
+  path: z38.string().min(1).max(4096),
+  mode: z38.enum(["100644", "100755", "120000"]),
   oid
 }).strict();
-var schema = z37.object({
-  version: z37.literal(2),
+var schema = z38.object({
+  version: z38.literal(2),
   revision: oid,
-  commit: z37.string().min(1).max(1048576),
-  entries: z37.array(entrySchema).min(1).max(1e5),
-  providerConfigurations: z37.array(z37.object({
-    path: z37.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
-    source: z37.string().max(1048576)
+  commit: z38.string().min(1).max(1048576),
+  entries: z38.array(entrySchema).min(1).max(1e5),
+  providerConfigurations: z38.array(z38.object({
+    path: z38.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
+    source: z38.string().max(1048576)
   }).strict()).max(1e3)
 }).strict();
 async function writeBuildProvenance(checkout, revision) {
@@ -5700,38 +5786,38 @@ import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as r
 import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
 import { join as join12 } from "path";
-import { z as z38 } from "zod";
-var envSchema = z38.object({
-  id: z38.string(),
-  key: z38.string(),
-  target: z38.array(z38.string()),
-  type: z38.string(),
-  comment: z38.string().optional(),
-  updatedAt: z38.number().optional()
+import { z as z39 } from "zod";
+var envSchema = z39.object({
+  id: z39.string(),
+  key: z39.string(),
+  target: z39.array(z39.string()),
+  type: z39.string(),
+  comment: z39.string().optional(),
+  updatedAt: z39.number().optional()
 });
-var deploymentSchema = z38.object({
-  id: z38.string(),
-  projectId: z38.string(),
-  ownerId: z38.string().optional(),
-  target: z38.string().nullable(),
-  readyState: z38.string(),
-  createdAt: z38.number(),
-  url: z38.string(),
-  meta: z38.record(z38.string(), z38.unknown()).optional(),
-  gitSource: z38.object({ sha: z38.string().optional() }).nullable().optional()
+var deploymentSchema = z39.object({
+  id: z39.string(),
+  projectId: z39.string(),
+  ownerId: z39.string().optional(),
+  target: z39.string().nullable(),
+  readyState: z39.string(),
+  createdAt: z39.number(),
+  url: z39.string(),
+  meta: z39.record(z39.string(), z39.unknown()).optional(),
+  gitSource: z39.object({ sha: z39.string().optional() }).nullable().optional()
 });
-var buildProofSchema = z38.object({
-  node: z38.string(),
-  packageManager: z38.enum(["npm", "pnpm"]),
-  packageManagerVersion: z38.string(),
-  lockfileHash: z38.string(),
-  revision: z38.string(),
-  fieldContractHash: z38.string(),
-  siteplane: z38.string(),
-  runtimeNext: z38.string(),
-  analytics: z38.string().optional(),
-  next: z38.string(),
-  react: z38.string()
+var buildProofSchema = z39.object({
+  node: z39.string(),
+  packageManager: z39.enum(["npm", "pnpm"]),
+  packageManagerVersion: z39.string(),
+  lockfileHash: z39.string(),
+  revision: z39.string(),
+  fieldContractHash: z39.string(),
+  siteplane: z39.string(),
+  runtimeNext: z39.string(),
+  analytics: z39.string().optional(),
+  next: z39.string(),
+  react: z39.string()
 }).strict();
 var digest = (value) => `sha256:${createHash4("sha256").update(stableJsonStringify(value)).digest("hex")}`;
 function fail2(code, message) {
@@ -5816,12 +5902,12 @@ async function setupDeployCommand(input, deps = defaults) {
       remaining();
       return result2;
     };
-    const domains = z38.object({
-      domains: z38.array(z38.object({
-        name: z38.string(),
-        verified: z38.boolean(),
-        redirect: z38.string().nullable().optional(),
-        gitBranch: z38.string().nullable().optional()
+    const domains = z39.object({
+      domains: z39.array(z39.object({
+        name: z39.string(),
+        verified: z39.boolean(),
+        redirect: z39.string().nullable().optional(),
+        gitBranch: z39.string().nullable().optional()
       }))
     }).parse(await api(`/v9/projects/${provider.projectId}/domains?${scope}`)).domains.filter((domain) => domain.verified && !domain.redirect && !domain.gitBranch);
     const origin = record?.origin ?? (domains.length === 1 ? `https://${domains[0].name}` : null);
@@ -5829,7 +5915,7 @@ async function setupDeployCommand(input, deps = defaults) {
       fail2("production_origin_ambiguous", "The linked project needs one verified canonical Production domain, or the existing setup domain must still belong to it.");
     if (record && (record.projectId !== provider.projectId || record.teamId !== provider.teamId))
       fail2("deployment_target_conflict", "This setup already belongs to a different provider project/team. Restore its original local link.");
-    const listEnv = async () => z38.object({ envs: z38.array(envSchema) }).parse(await api(`/v10/projects/${provider.projectId}/env?${scope}`)).envs;
+    const listEnv = async () => z39.object({ envs: z39.array(envSchema) }).parse(await api(`/v10/projects/${provider.projectId}/env?${scope}`)).envs;
     let env = await listEnv();
     const owned = (key) => {
       const matches2 = env.filter((item) => item.key === key && item.target.includes("production"));
@@ -5902,9 +5988,9 @@ async function setupDeployCommand(input, deps = defaults) {
         expectedOperationId: record?.operationId ?? null,
         record: next
       });
-      const parsed = z38.object({
-        ok: z38.literal(true),
-        data: z38.object({ record: setupDeploymentRecordSchema }).strict()
+      const parsed = z39.object({
+        ok: z39.literal(true),
+        data: z39.object({ record: setupDeploymentRecordSchema }).strict()
       }).strict().safeParse(result2.payload);
       if (!result2.ok || !parsed.success || stableJsonStringify(parsed.data.data.record) !== stableJsonStringify(next))
         fail2("deployment_record_unconfirmed", "The setup deployment record was not acknowledged. Reload context before continuing; no deployment is blindly repeated.");
@@ -5954,7 +6040,7 @@ async function setupDeployCommand(input, deps = defaults) {
       const item = owned(key);
       if (key === "SITEPLANE_ADMIN_SESSION_SECRET" && item && record.phase === "verified")
         continue;
-      const current = item ? z38.object({ key: z38.literal(key), value: z38.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`)).value : null;
+      const current = item ? z39.object({ key: z39.literal(key), value: z39.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`)).value : null;
       if (current !== value)
         pending.push({
           key,
@@ -5979,7 +6065,7 @@ async function setupDeployCommand(input, deps = defaults) {
         const item = owned(key);
         if (!item)
           fail2("environment_write_unconfirmed", "A Siteplane Production binding was not persisted; retry the same configuration.");
-        const observed = z38.object({ key: z38.literal(key), value: z38.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`));
+        const observed = z39.object({ key: z39.literal(key), value: z39.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`));
         if (observed.value !== value)
           fail2("environment_write_unconfirmed", "The provider readback does not match the authorized Siteplane value; no deployment was started.");
       }
@@ -5992,7 +6078,7 @@ async function setupDeployCommand(input, deps = defaults) {
     const detail = async (id) => deploymentSchema.parse(await api(`/v13/deployments/${encodeURIComponent(id)}?${scope}&withGitRepoInfo=true`));
     const matches = (deployment2) => deployment2.projectId === provider.projectId && deployment2.target === "production" && (!deployment2.ownerId || deployment2.ownerId === provider.teamId) && deployment2.createdAt >= Date.parse(record.environmentWrittenAt) && (deployment2.meta?.siteplaneOperationId === record.operationId || provider.git && (deployment2.gitSource?.sha ?? deployment2.meta?.githubCommitSha ?? deployment2.meta?.gitlabCommitSha ?? deployment2.meta?.bitbucketCommitSha ?? deployment2.meta?.gitCommitSha) === revision);
     const discover = async () => {
-      const result2 = z38.object({ deployments: z38.array(z38.object({ uid: z38.string() })) }).parse(await api(`/v6/deployments?${scope}&projectId=${provider.projectId}&target=production&since=${Date.parse(record.environmentWrittenAt)}&limit=100`));
+      const result2 = z39.object({ deployments: z39.array(z39.object({ uid: z39.string() })) }).parse(await api(`/v6/deployments?${scope}&projectId=${provider.projectId}&target=production&since=${Date.parse(record.environmentWrittenAt)}&limit=100`));
       const candidates = [];
       for (const item of result2.deployments) {
         const found = await detail(item.uid);
@@ -6149,6 +6235,7 @@ async function setupDeployCommand(input, deps = defaults) {
     });
     return {
       status: "ready_for_review",
+      ...task.assignment === "provisional" ? { reviewCommand: `npx -y siteplane@${task.packages.siteplane} setup review` } : {},
       deploymentId: deployment.id,
       origin,
       configurationFingerprint: fingerprint,
@@ -6399,6 +6486,11 @@ async function runSetupCommand(args, dependencies) {
     dependencies.stdout(JSON.stringify(result2, null, 2));
     return { exitCode: result2.status === "action_required" ? 1 : 0 };
   }
+  if (area === "review") {
+    const result2 = await dependencies.commands.setupReviewCommand({ projectDir, ...connectionOptions });
+    dependencies.stdout(JSON.stringify(result2, null, 2));
+    return { exitCode: result2.status === "ready" ? 0 : 1 };
+  }
   if (area === "context") {
     const result2 = await dependencies.commands.siteSetupContextCommand({
       projectDir,
@@ -6445,7 +6537,7 @@ async function runSetupCommand(args, dependencies) {
     return { exitCode: result2.status === "ready_for_review" ? 0 : 1 };
   }
   dependencies.stdout(
-    "Usage: siteplane setup <start|preflight|prepare|context|activity|apply|deploy|verify>"
+    "Usage: siteplane setup <start|preflight|prepare|context|activity|apply|deploy|verify|review>"
   );
   return { exitCode: 1 };
 }
@@ -6585,6 +6677,7 @@ function createDefaultDependencies() {
       siteSetupVerifyCommand,
       setupPreflightCommand,
       setupStartCommand,
+      setupReviewCommand,
       setupPrepareCommand,
       setupDeployCommand,
       initCommand,

package/dist/index.js

@@ -1662,6 +1662,18 @@ var fieldBridgeIdentitySchema = z17.object({
   fieldContractHash: canonicalFieldContractHashSchema,
   deploymentRevision: z17.string().trim().min(1).max(256)
 }).strict();
+var setupPreviewAccessSchema = z17.object({
+  capability: z17.string().regex(/^v1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{43}$/u).max(4096),
+  expiresAt: z17.string().datetime()
+}).strict();
+var setupPreviewReadSchema = fieldBridgeIdentitySchema.extend({
+  scope: z17.literal("setup_preview"),
+  siteId: z17.string().uuid(),
+  runId: z17.string().uuid(),
+  bridgeSessionId: z17.string().min(1),
+  expiresAt: z17.string().datetime(),
+  contract: siteFieldContractV1Schema
+}).strict();
 var fieldBridgeBaseSchema = z17.object({
   version: z17.literal(BRIDGE_PROTOCOL_VERSION),
   type: z17.enum(FIELD_BRIDGE_MESSAGE_TYPES),
@@ -1689,7 +1701,8 @@ var fieldBridgeInitMessageSchema = fieldBridgeBaseSchema.extend({
   payload: z17.object({
     adminOrigin: z17.string().url(),
     customerOrigin: z17.string().url(),
-    renderedPath: realRenderedPathSchema
+    renderedPath: realRenderedPathSchema,
+    setupPreview: setupPreviewAccessSchema.optional()
   }).strict()
 });
 var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
@@ -1702,7 +1715,7 @@ var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
       z17.literal("preview_values"),
       z17.literal("field_evidence"),
       z17.literal("visual_field_control")
-    ]).rest(z17.literal("analytics_preview_readiness")).refine((capabilities) => capabilities.length <= 5)
+    ]).rest(z17.enum(["analytics_preview_readiness", "setup_preview"])).refine((capabilities) => capabilities.length <= 6)
   }).strict()
 });
 var fieldBridgeFieldsMessageSchema = fieldBridgeBaseSchema.extend({
@@ -2948,7 +2961,7 @@ async function inspectSetupLocalProject(projectDir) {
     fail("package_manager_conflict", "Application and workspace packageManager declarations disagree.");
   if (declared && !new RegExp(`^${name2}@\\d+\\.\\d+\\.\\d+$`, "u").test(declared))
     fail("package_manager_conflict", "Declare an exact supported npm/pnpm packageManager version matching the canonical lockfile.");
-  const localVersion = (await setupProcess(declared ? "npx" : name2, declared ? ["--yes", declared, "--version"] : ["--version"], { cwd: lockfileRoot })).trim();
+  const localVersion = (await setupProcess(declared ? "npx" : name2, declared ? ["--yes", "--package", declared, name2, "--version"] : ["--version"], { cwd: lockfileRoot })).trim();
   if (!(name2 === "npm" ? stable(localVersion, 10) : stable(localVersion, 9) || stable(localVersion, 10)))
     fail("unsupported_package_manager_version", "Use npm 10 or pnpm 9/10; other versions are outside the initial setup support range.");
   if (declared && declared !== `${name2}@${localVersion}`)
@@ -3476,6 +3489,16 @@ var bootstrapResponseSchema2 = z35.object({
   data: siteSetupBootstrapDataSchema
 }).strict();
 
+// ../cli/dist/commands/setup-review.js
+import { z as z36 } from "zod";
+var responseSchema2 = z36.object({
+  ok: z36.literal(true),
+  data: z36.object({
+    reviewUrl: z36.string().url(),
+    expiresAt: z36.string().datetime({ offset: true })
+  }).strict()
+}).strict();
+
 // ../cli/dist/commands/setup-prepare.js
 import { access as access5, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
 import { randomUUID as randomUUID5 } from "crypto";
@@ -3486,8 +3509,8 @@ import ts3 from "typescript";
 import { randomUUID as randomUUID6 } from "crypto";
 import { lstat as lstat3, mkdir as mkdir7, open as open4, readFile as readFile11, rm as rm4, rmdir } from "fs/promises";
 import { resolve as resolve2 } from "path";
-import { z as z36 } from "zod";
-var ownerSchema = z36.object({ pid: z36.number().int().positive(), nonce: z36.string().uuid() }).strict();
+import { z as z37 } from "zod";
+var ownerSchema = z37.object({ pid: z37.number().int().positive(), nonce: z37.string().uuid() }).strict();
 
 // ../cli/dist/config/build-provenance.js
 import { createHash as createHash3 } from "crypto";
@@ -3495,23 +3518,23 @@ import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
 import { dirname as dirname8, isAbsolute as isAbsolute2, join as join11, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
 import { isDeepStrictEqual, promisify as promisify3 } from "util";
-import { z as z37 } from "zod";
+import { z as z38 } from "zod";
 var execute = promisify3(execFile3);
 var name = ".siteplane/build-source.json";
-var oid = z37.string().regex(/^[0-9a-f]{40}$/u);
-var entrySchema = z37.object({
-  path: z37.string().min(1).max(4096),
-  mode: z37.enum(["100644", "100755", "120000"]),
+var oid = z38.string().regex(/^[0-9a-f]{40}$/u);
+var entrySchema = z38.object({
+  path: z38.string().min(1).max(4096),
+  mode: z38.enum(["100644", "100755", "120000"]),
   oid
 }).strict();
-var schema = z37.object({
-  version: z37.literal(2),
+var schema = z38.object({
+  version: z38.literal(2),
   revision: oid,
-  commit: z37.string().min(1).max(1048576),
-  entries: z37.array(entrySchema).min(1).max(1e5),
-  providerConfigurations: z37.array(z37.object({
-    path: z37.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
-    source: z37.string().max(1048576)
+  commit: z38.string().min(1).max(1048576),
+  entries: z38.array(entrySchema).min(1).max(1e5),
+  providerConfigurations: z38.array(z38.object({
+    path: z38.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
+    source: z38.string().max(1048576)
   }).strict()).max(1e3)
 }).strict();
 async function writeBuildProvenance(checkout, revision) {
@@ -3560,38 +3583,38 @@ import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as r
 import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
 import { join as join12 } from "path";
-import { z as z38 } from "zod";
-var envSchema = z38.object({
-  id: z38.string(),
-  key: z38.string(),
-  target: z38.array(z38.string()),
-  type: z38.string(),
-  comment: z38.string().optional(),
-  updatedAt: z38.number().optional()
-});
-var deploymentSchema = z38.object({
-  id: z38.string(),
-  projectId: z38.string(),
-  ownerId: z38.string().optional(),
-  target: z38.string().nullable(),
-  readyState: z38.string(),
-  createdAt: z38.number(),
-  url: z38.string(),
-  meta: z38.record(z38.string(), z38.unknown()).optional(),
-  gitSource: z38.object({ sha: z38.string().optional() }).nullable().optional()
-});
-var buildProofSchema = z38.object({
-  node: z38.string(),
-  packageManager: z38.enum(["npm", "pnpm"]),
-  packageManagerVersion: z38.string(),
-  lockfileHash: z38.string(),
-  revision: z38.string(),
-  fieldContractHash: z38.string(),
-  siteplane: z38.string(),
-  runtimeNext: z38.string(),
-  analytics: z38.string().optional(),
-  next: z38.string(),
-  react: z38.string()
+import { z as z39 } from "zod";
+var envSchema = z39.object({
+  id: z39.string(),
+  key: z39.string(),
+  target: z39.array(z39.string()),
+  type: z39.string(),
+  comment: z39.string().optional(),
+  updatedAt: z39.number().optional()
+});
+var deploymentSchema = z39.object({
+  id: z39.string(),
+  projectId: z39.string(),
+  ownerId: z39.string().optional(),
+  target: z39.string().nullable(),
+  readyState: z39.string(),
+  createdAt: z39.number(),
+  url: z39.string(),
+  meta: z39.record(z39.string(), z39.unknown()).optional(),
+  gitSource: z39.object({ sha: z39.string().optional() }).nullable().optional()
+});
+var buildProofSchema = z39.object({
+  node: z39.string(),
+  packageManager: z39.enum(["npm", "pnpm"]),
+  packageManagerVersion: z39.string(),
+  lockfileHash: z39.string(),
+  revision: z39.string(),
+  fieldContractHash: z39.string(),
+  siteplane: z39.string(),
+  runtimeNext: z39.string(),
+  analytics: z39.string().optional(),
+  next: z39.string(),
+  react: z39.string()
 }).strict();
 var defaults = {
   preflight: setupPreflightCommand,

package/dist/next.js

@@ -1865,6 +1865,18 @@ var fieldBridgeIdentitySchema = z17.object({
   fieldContractHash: canonicalFieldContractHashSchema,
   deploymentRevision: z17.string().trim().min(1).max(256)
 }).strict();
+var setupPreviewAccessSchema = z17.object({
+  capability: z17.string().regex(/^v1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{43}$/u).max(4096),
+  expiresAt: z17.string().datetime()
+}).strict();
+var setupPreviewReadSchema = fieldBridgeIdentitySchema.extend({
+  scope: z17.literal("setup_preview"),
+  siteId: z17.string().uuid(),
+  runId: z17.string().uuid(),
+  bridgeSessionId: z17.string().min(1),
+  expiresAt: z17.string().datetime(),
+  contract: siteFieldContractV1Schema
+}).strict();
 var fieldBridgeBaseSchema = z17.object({
   version: z17.literal(BRIDGE_PROTOCOL_VERSION),
   type: z17.enum(FIELD_BRIDGE_MESSAGE_TYPES),
@@ -1892,7 +1904,8 @@ var fieldBridgeInitMessageSchema = fieldBridgeBaseSchema.extend({
   payload: z17.object({
     adminOrigin: z17.string().url(),
     customerOrigin: z17.string().url(),
-    renderedPath: realRenderedPathSchema
+    renderedPath: realRenderedPathSchema,
+    setupPreview: setupPreviewAccessSchema.optional()
   }).strict()
 });
 var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
@@ -1905,7 +1918,7 @@ var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
       z17.literal("preview_values"),
       z17.literal("field_evidence"),
       z17.literal("visual_field_control")
-    ]).rest(z17.literal("analytics_preview_readiness")).refine((capabilities) => capabilities.length <= 5)
+    ]).rest(z17.enum(["analytics_preview_readiness", "setup_preview"])).refine((capabilities) => capabilities.length <= 6)
   }).strict()
 });
 var fieldBridgeFieldsMessageSchema = fieldBridgeBaseSchema.extend({
@@ -2757,7 +2770,7 @@ async function inspectSetupLocalProject(projectDir) {
     fail("package_manager_conflict", "Application and workspace packageManager declarations disagree.");
   if (declared && !new RegExp(`^${name2}@\\d+\\.\\d+\\.\\d+$`, "u").test(declared))
     fail("package_manager_conflict", "Declare an exact supported npm/pnpm packageManager version matching the canonical lockfile.");
-  const localVersion = (await setupProcess(declared ? "npx" : name2, declared ? ["--yes", declared, "--version"] : ["--version"], { cwd: lockfileRoot })).trim();
+  const localVersion = (await setupProcess(declared ? "npx" : name2, declared ? ["--yes", "--package", declared, name2, "--version"] : ["--version"], { cwd: lockfileRoot })).trim();
   if (!(name2 === "npm" ? stable(localVersion, 10) : stable(localVersion, 9) || stable(localVersion, 10)))
     fail("unsupported_package_manager_version", "Use npm 10 or pnpm 9/10; other versions are outside the initial setup support range.");
   if (declared && declared !== `${name2}@${localVersion}`)
@@ -3836,6 +3849,16 @@ var bootstrapResponseSchema2 = z35.object({
   data: siteSetupBootstrapDataSchema
 }).strict();
 
+// ../cli/dist/commands/setup-review.js
+import { z as z36 } from "zod";
+var responseSchema2 = z36.object({
+  ok: z36.literal(true),
+  data: z36.object({
+    reviewUrl: z36.string().url(),
+    expiresAt: z36.string().datetime({ offset: true })
+  }).strict()
+}).strict();
+
 // ../cli/dist/commands/setup-prepare.js
 import { access as access5, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
 import { randomUUID as randomUUID5 } from "crypto";
@@ -3846,8 +3869,8 @@ import ts3 from "typescript";
 import { randomUUID as randomUUID6 } from "crypto";
 import { lstat as lstat3, mkdir as mkdir7, open as open4, readFile as readFile11, rm as rm4, rmdir } from "fs/promises";
 import { resolve as resolve2 } from "path";
-import { z as z36 } from "zod";
-var ownerSchema = z36.object({ pid: z36.number().int().positive(), nonce: z36.string().uuid() }).strict();
+import { z as z37 } from "zod";
+var ownerSchema = z37.object({ pid: z37.number().int().positive(), nonce: z37.string().uuid() }).strict();
 
 // ../cli/dist/config/build-provenance.js
 import { createHash as createHash3 } from "crypto";
@@ -3855,23 +3878,23 @@ import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
 import { dirname as dirname8, isAbsolute as isAbsolute2, join as join11, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
 import { isDeepStrictEqual, promisify as promisify3 } from "util";
-import { z as z37 } from "zod";
+import { z as z38 } from "zod";
 var execute = promisify3(execFile3);
 var name = ".siteplane/build-source.json";
-var oid = z37.string().regex(/^[0-9a-f]{40}$/u);
-var entrySchema = z37.object({
-  path: z37.string().min(1).max(4096),
-  mode: z37.enum(["100644", "100755", "120000"]),
+var oid = z38.string().regex(/^[0-9a-f]{40}$/u);
+var entrySchema = z38.object({
+  path: z38.string().min(1).max(4096),
+  mode: z38.enum(["100644", "100755", "120000"]),
   oid
 }).strict();
-var schema = z37.object({
-  version: z37.literal(2),
+var schema = z38.object({
+  version: z38.literal(2),
   revision: oid,
-  commit: z37.string().min(1).max(1048576),
-  entries: z37.array(entrySchema).min(1).max(1e5),
-  providerConfigurations: z37.array(z37.object({
-    path: z37.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
-    source: z37.string().max(1048576)
+  commit: z38.string().min(1).max(1048576),
+  entries: z38.array(entrySchema).min(1).max(1e5),
+  providerConfigurations: z38.array(z38.object({
+    path: z38.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
+    source: z38.string().max(1048576)
   }).strict()).max(1e3)
 }).strict();
 var gitHash = (type, content) => createHash3("sha1").update(`${type} ${content.length}\0`).update(content).digest("hex");
@@ -3971,7 +3994,7 @@ async function readBuildProvenance(projectDirectory) {
       const original = configurations.get(entry.path);
       if (contents && original && entry.mode !== "120000") {
         try {
-          const object = z37.record(z37.string(), z37.unknown());
+          const object = z38.record(z38.string(), z38.unknown());
           const actual = object.parse(JSON.parse(contents.toString("utf8")));
           const expected = object.parse(JSON.parse(original));
           if (!Object.hasOwn(expected, "version") && actual.version === 2)
@@ -4025,38 +4048,38 @@ import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as r
 import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
 import { join as join12 } from "path";
-import { z as z38 } from "zod";
-var envSchema = z38.object({
-  id: z38.string(),
-  key: z38.string(),
-  target: z38.array(z38.string()),
-  type: z38.string(),
-  comment: z38.string().optional(),
-  updatedAt: z38.number().optional()
+import { z as z39 } from "zod";
+var envSchema = z39.object({
+  id: z39.string(),
+  key: z39.string(),
+  target: z39.array(z39.string()),
+  type: z39.string(),
+  comment: z39.string().optional(),
+  updatedAt: z39.number().optional()
 });
-var deploymentSchema = z38.object({
-  id: z38.string(),
-  projectId: z38.string(),
-  ownerId: z38.string().optional(),
-  target: z38.string().nullable(),
-  readyState: z38.string(),
-  createdAt: z38.number(),
-  url: z38.string(),
-  meta: z38.record(z38.string(), z38.unknown()).optional(),
-  gitSource: z38.object({ sha: z38.string().optional() }).nullable().optional()
+var deploymentSchema = z39.object({
+  id: z39.string(),
+  projectId: z39.string(),
+  ownerId: z39.string().optional(),
+  target: z39.string().nullable(),
+  readyState: z39.string(),
+  createdAt: z39.number(),
+  url: z39.string(),
+  meta: z39.record(z39.string(), z39.unknown()).optional(),
+  gitSource: z39.object({ sha: z39.string().optional() }).nullable().optional()
 });
-var buildProofSchema = z38.object({
-  node: z38.string(),
-  packageManager: z38.enum(["npm", "pnpm"]),
-  packageManagerVersion: z38.string(),
-  lockfileHash: z38.string(),
-  revision: z38.string(),
-  fieldContractHash: z38.string(),
-  siteplane: z38.string(),
-  runtimeNext: z38.string(),
-  analytics: z38.string().optional(),
-  next: z38.string(),
-  react: z38.string()
+var buildProofSchema = z39.object({
+  node: z39.string(),
+  packageManager: z39.enum(["npm", "pnpm"]),
+  packageManagerVersion: z39.string(),
+  lockfileHash: z39.string(),
+  revision: z39.string(),
+  fieldContractHash: z39.string(),
+  siteplane: z39.string(),
+  runtimeNext: z39.string(),
+  analytics: z39.string().optional(),
+  next: z39.string(),
+  react: z39.string()
 }).strict();
 var defaults = {
   preflight: setupPreflightCommand,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "siteplane",
   "private": false,
-  "version": "0.1.50",
+  "version": "0.1.52",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
   "publishConfig": {