siteplane 0.1.56 → 0.1.58

package/dist/bin/siteplane.js

@@ -5,16 +5,16 @@ import { randomUUID as randomUUID8 } from "crypto";
 import { access as access7, readFile as readFile13 } from "fs/promises";
 import { join as join13, resolve as resolve4 } from "path";
 
-// ../cli/dist/analytics/manifest.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/analytics/manifest.js
 import { mkdir, readFile, writeFile } from "fs/promises";
 import { dirname } from "path";
 
-// ../shared/dist/actors.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/actors.js
 import { z } from "zod";
 var ACTOR_TYPES = ["workspace_member", "site_member", "agent", "setup_guest", "system"];
 var actorTypeSchema = z.enum(ACTOR_TYPES);
 
-// ../shared/dist/analytics-defaults.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-defaults.js
 var ANALYTICS_BATCH_LIMITS = {
   maxEventsPerRequest: 50,
   maxJsonBodyBytes: 64 * 1024,
@@ -29,7 +29,7 @@ var ANALYTICS_RETENTION_DEFAULTS = {
   lateEventWindowHours: 72
 };
 
-// ../shared/dist/analytics-booking.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-booking.js
 import { z as z2 } from "zod";
 var bookingProviders = ["treatwell", "beautinda", "other"];
 var bookingAttributionModes = [
@@ -72,7 +72,7 @@ var bookingProviderHintSchema = z2.object({
   }
 });
 
-// ../shared/dist/analytics-contract.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-contract.js
 import { z as z3 } from "zod";
 var ANALYTICS_CONTRACT_VERSION = "analytics-contract.v1";
 var ANALYTICS_CONTRACT_HASH = "sha256:a91bddcc3c5e4196933b0335d03eaf41ff929cb736bdd694fe54d07ab52dada1";
@@ -100,7 +100,7 @@ var analyticsProviderImportSchema = z3.object({
   rows: z3.array(analyticsProviderImportRowSchema).min(1).max(1e3)
 }).strict();
 
-// ../shared/dist/analytics-config.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-config.js
 import { z as z4 } from "zod";
 var ANALYTICS_CONFIG_LEASE_MS = 6e4;
 var analyticsMeasurementConfigSchema = z4.object({
@@ -129,10 +129,9 @@ var analyticsMeasurementConfigSchema = z4.object({
   }
 });
 
-// ../shared/dist/analytics-events.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-events.js
 import { z as z5 } from "zod";
 var ANALYTICS_SCHEMA_VERSION = "analytics.v1";
-var ANALYTICS_KEY_PATTERN = /^(pk|sk)_siteplane_([A-Za-z0-9_-]{16})_[A-Za-z0-9_-]{43}$/;
 var analyticsSessionIdSchema = z5.string().regex(/^cpa_s_[a-f0-9]{32}$/u);
 var analyticsVisitorIdSchema = z5.string().regex(/^cpa_v_[a-f0-9]{32}$/u);
 var analyticsPersistedIdentityHashSchema = z5.string().regex(/^[a-f0-9]{64}$/u);
@@ -327,10 +326,6 @@ var analyticsNormalizedEventSchema = analyticsNormalizedEventBaseSchema.extend({
 function isServerOnlyAnalyticsEvent(eventName) {
   return serverOnlyAnalyticsEvents.includes(eventName);
 }
-function getAnalyticsKeyLookup(rawKey) {
-  const match = ANALYTICS_KEY_PATTERN.exec(rawKey);
-  return match ? `${match[1]}_siteplane_${match[2]}` : null;
-}
 function expandAnalyticsDataAttributeEvent(event) {
   if (event === "form") {
     return ["form_start", "form_submit", "form_error"];
@@ -338,7 +333,7 @@ function expandAnalyticsDataAttributeEvent(event) {
   return [event];
 }
 
-// ../shared/dist/analytics-manifest.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-manifest.js
 import { z as z6 } from "zod";
 var analyticsTargetIdSchema = z6.string().min(1).max(120).regex(/^[a-zA-Z][a-zA-Z0-9]*(?:[._-][a-zA-Z0-9]+)*$/u, {
   message: "Analytics target IDs must be stable identifiers without whitespace or visible copy."
@@ -491,7 +486,7 @@ function isPlainRecord(value) {
   return typeof value === "object" && value !== null;
 }
 
-// ../shared/dist/analytics-metrics.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-metrics.js
 import { z as z7 } from "zod";
 var analyticsVisitorQualities = ["exact", "estimated"];
 var analyticsVisitorQualitySchema = z7.enum(analyticsVisitorQualities);
@@ -508,7 +503,7 @@ var analyticsKpiKeys = [
 ];
 var analyticsKpiKeySchema = z7.enum(analyticsKpiKeys);
 
-// ../shared/dist/analytics-privacy.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/analytics-privacy.js
 var serverPropertySchemas = {
   lead_created: {
     conversionId: "identifier",
@@ -543,7 +538,7 @@ function revenuePropertySchema() {
   };
 }
 
-// ../shared/dist/assets.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/assets.js
 import { z as z8 } from "zod";
 var ASSET_STAGES = ["staging", "final", "deleted"];
 var ASSET_VISIBILITIES = ["private", "public", "deleted"];
@@ -558,7 +553,7 @@ var assetVisibilitySchema = z8.enum(ASSET_VISIBILITIES);
 var assetUsageEntityTypeSchema = z8.enum(ASSET_USAGE_ENTITY_TYPES);
 var brandingAccentColorSchema = z8.string().regex(/^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/);
 
-// ../shared/dist/booking-contracts.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/booking-contracts.js
 import { z as z9 } from "zod";
 var bookingStatuses = [
   "pending_payment",
@@ -919,13 +914,13 @@ function redactBookingManifest(value) {
   return value;
 }
 
-// ../shared/dist/booking-defaults.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/booking-defaults.js
 var BOOKING_CREATE_PAYLOAD_LIMIT_BYTES = 16 * 1024;
 
-// ../shared/dist/bridge-protocol.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/bridge-protocol.js
 import { z as z17 } from "zod";
 
-// ../shared/dist/field-id.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/field-id.js
 import { z as z10 } from "zod";
 var FIELD_ID_PATTERN = /^[a-z][a-z0-9_-]*(\.[a-z][a-z0-9_-]*)+$/;
 var fieldIdSchema = z10.string().regex(FIELD_ID_PATTERN, "Invalid field id");
@@ -933,12 +928,12 @@ function isFieldId(value) {
   return typeof value === "string" && fieldIdSchema.safeParse(value).success;
 }
 
-// ../shared/dist/field-types.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/field-types.js
 import { z as z11 } from "zod";
 var FIELD_TYPES = ["text", "longText", "image", "link"];
 var fieldTypeSchema = z11.enum(FIELD_TYPES);
 
-// ../shared/dist/image-value.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/image-value.js
 import { z as z12 } from "zod";
 var SUPPORTED_IMAGE_CONTENT_TYPES = [
   "image/jpeg",
@@ -970,7 +965,7 @@ var imageValueSchema = z12.object({
   ]).optional()
 });
 
-// ../shared/dist/setup-deployment.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/setup-deployment.js
 import { z as z13 } from "zod";
 var version = z13.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u);
 var siteSetupPackagesSchema = z13.object({
@@ -1024,13 +1019,13 @@ var setupDeploymentInputSchema = z13.discriminatedUnion("action", [
   }).strict()
 ]);
 
-// ../shared/dist/site-setup.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/site-setup.js
 import { z as z16 } from "zod";
 
-// ../shared/dist/site-field-contract.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/site-field-contract.js
 import { z as z15 } from "zod";
 
-// ../shared/dist/fallback-hash.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/fallback-hash.js
 import { z as z14 } from "zod";
 var SAFE_REPRESENTATION_REASONS = [
   "asset_import_rewritten",
@@ -1252,7 +1247,7 @@ var SHA256_CONSTANTS = [
   3329325298
 ];
 
-// ../shared/dist/site-field-contract.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/site-field-contract.js
 var fieldContractVersion = "1.0.0";
 var scannerContractVersion = "1.0.0";
 var siteFieldStatusSchema = z15.enum(["hidden", "active"]);
@@ -1341,7 +1336,7 @@ function createSiteFieldContractHash(input) {
   return `sha256:${sha256Hex(payload)}`;
 }
 
-// ../shared/dist/site-setup.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/site-setup.js
 var SITE_SETUP_RUN_STATUSES = [
   "waiting_for_agent",
   "working",
@@ -1884,7 +1879,7 @@ var activateSetupModulesInputSchema = activateSiteSetupInputSchema.extend({
   ])
 }).strict();
 
-// ../shared/dist/bridge-protocol.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/bridge-protocol.js
 var BRIDGE_PROTOCOL_VERSION = 2;
 var bridgeRectSchema = z17.object({
   x: z17.number(),
@@ -2122,10 +2117,10 @@ var fieldBridgeMessageSchema = z17.discriminatedUnion("type", [
   fieldBridgeAnalyticsProbeResultSchema
 ]);
 
-// ../shared/dist/commands.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/commands.js
 import { z as z19 } from "zod";
 
-// ../shared/dist/errors.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/errors.js
 import { z as z18 } from "zod";
 var UI_ERROR_CATEGORIES = [
   "site_member",
@@ -2140,7 +2135,7 @@ var commandErrorPayloadSchema = z18.object({
   details: z18.record(z18.string(), z18.unknown()).optional()
 });
 
-// ../shared/dist/commands.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/commands.js
 var commandSuccessSchema = z19.object({
   ok: z19.literal(true),
   data: z19.unknown()
@@ -2154,7 +2149,7 @@ var commandResultSchema = z19.discriminatedUnion("ok", [
   commandErrorSchema
 ]);
 
-// ../shared/dist/editor-settings.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/editor-settings.js
 import { z as z20 } from "zod";
 var editorColorSchemeSchema = z20.enum([
   "paper",
@@ -2166,7 +2161,7 @@ var editorColorSchemes = editorColorSchemeSchema.options;
 var editorColorModeSchema = z20.enum(["light", "dark"]);
 var editorColorModes = editorColorModeSchema.options;
 
-// ../shared/dist/site-slug.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/site-slug.js
 import { z as z21 } from "zod";
 var SITE_SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var RESERVED_SITE_SLUGS = /* @__PURE__ */ new Set([
@@ -2186,7 +2181,7 @@ var RESERVED_SITE_SLUGS = /* @__PURE__ */ new Set([
 ]);
 var siteSlugSchema = z21.string().regex(SITE_SLUG_PATTERN, "Invalid site slug").refine((value) => !RESERVED_SITE_SLUGS.has(value), "Reserved site slug");
 
-// ../shared/dist/entitlements.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/entitlements.js
 import { z as z22 } from "zod";
 var entitlementSnapshotSchema = z22.object({
   planKey: z22.string().trim().min(1),
@@ -2233,10 +2228,10 @@ var EARLY_ACCESS_PLAN = {
   bookingRemindersEnabled: true
 };
 
-// ../shared/dist/first-party-image-upload.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/first-party-image-upload.js
 var maxFirstPartyImageUploadBytes = 4 * 1024 * 1024;
 
-// ../shared/dist/readiness.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/readiness.js
 import { z as z23 } from "zod";
 var READINESS_CHECK_KEYS = [
   "agent_instructions_installed",
@@ -2255,7 +2250,7 @@ var READINESS_STATUSES = [
 var readinessCheckKeySchema = z23.enum(READINESS_CHECK_KEYS);
 var readinessStatusSchema = z23.enum(READINESS_STATUSES);
 
-// ../shared/dist/site.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/site.js
 import { z as z24 } from "zod";
 var SITE_STATUSES = [
   "setup",
@@ -2266,7 +2261,7 @@ var SITE_STATUSES = [
 var siteStatusSchema = z24.enum(SITE_STATUSES);
 var websiteUrlSchema = z24.string().trim().url().refine((value) => value.startsWith("https://") || value.startsWith("http://"), "Website URL must use http or https");
 
-// ../shared/dist/setup-assets.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/setup-assets.js
 import { z as z25 } from "zod";
 var configureSetupAssetTargetInputSchema = z25.object({
   siteId: z25.string().uuid(),
@@ -2327,7 +2322,7 @@ var checkSetupAssetTargetInputSchema = z25.object({
   intent: z25.enum(["start", "poll"])
 }).strict();
 
-// ../shared/dist/setup-installation.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/setup-installation.js
 import { z as z26 } from "zod";
 var setupInstallationRequestSchema = z26.object({
   modules: siteSetupModulesSchema,
@@ -2338,7 +2333,7 @@ var setupInstallationRequestSchema = z26.object({
   }).strict()
 }).strict();
 
-// ../shared/dist/setup-claim.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/shared/dist/setup-claim.js
 import { z as z27 } from "zod";
 var setupClaimCodeSchema = z27.string().regex(/^[0-9A-HJKMNP-TV-Z]{8}$/u);
 var setupClaimBindingSchema = z27.object({
@@ -2379,7 +2374,7 @@ var setupClaimDenialSchema = z27.object({
   ])
 }).strict();
 
-// ../cli/dist/analytics/manifest.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/analytics/manifest.js
 async function readAnalyticsManifestFile(manifestPath) {
   return validateAnalyticsManifestInput(JSON.parse(await readFile(manifestPath, "utf8")));
 }
@@ -2394,10 +2389,10 @@ function validateAnalyticsManifestInput(input) {
   return redactAnalyticsManifest(analyticsManifestSchema.parse(input));
 }
 
-// ../cli/dist/analytics/static-scan.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/analytics/static-scan.js
 import ts from "typescript";
 
-// ../cli/dist/analytics/booking-providers.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/analytics/booking-providers.js
 function buildBookingProviderHintFromHref(href, mode, options = {}) {
   const url = parseStaticHttpUrl(href);
   if (!url) {
@@ -2457,7 +2452,7 @@ function normalizeHost(host) {
   return host.toLowerCase().replace(/\.$/u, "");
 }
 
-// ../cli/dist/analytics/static-scan.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/analytics/static-scan.js
 function scanAnalyticsSourceFiles(files, input) {
   const targets = [];
   const hardErrors = [];
@@ -2744,7 +2739,7 @@ function inferRoute(filePath) {
   return route ? `/${route}` : "/";
 }
 
-// ../cli/dist/booking/manifest.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/booking/manifest.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
 import { dirname as dirname2 } from "path";
 async function readBookingManifestFile(manifestPath) {
@@ -2787,7 +2782,7 @@ function collectRedactedBookingKeys(input, prefix = "") {
   });
 }
 
-// ../cli/dist/booking/static-scan.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/booking/static-scan.js
 function scanBookingSourceFiles(files, input) {
   const embeds = files.flatMap(scanBookingEmbedFile);
   const findings = embeds.map(createEmbedFoundIssue);
@@ -2901,7 +2896,7 @@ function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
 
-// ../cli/dist/commands/analytics/check.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/check.js
 import { readFile as readFile3 } from "fs/promises";
 async function analyticsCheckCommand(input) {
   const validatedManifest = await readAnalyticsManifestFile(input.manifestPath);
@@ -3040,7 +3035,7 @@ async function readCspWarnings(filePaths) {
   return warnings;
 }
 
-// ../cli/dist/commands/analytics/init.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/init.js
 import { mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
 import { dirname as dirname3, join } from "path";
 async function analyticsInitCommand(input) {
@@ -3137,10 +3132,10 @@ alwaysApply: true
 
 ${analyticsRulesTemplate}`;
 
-// ../cli/dist/commands/analytics/import.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/import.js
 import { createHash } from "crypto";
 
-// ../cli/dist/commands/analytics/sync.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/sync.js
 async function analyticsSyncCommand(input) {
   const redacted = validateAnalyticsManifestInput(input.manifest);
   const fetcher = input.fetchImpl ?? fetch;
@@ -3166,7 +3161,7 @@ function createAnalyticsCliRequestHeaders(config) {
   return headers;
 }
 
-// ../cli/dist/commands/analytics/import.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/import.js
 async function analyticsImportCommand(input) {
   const payload = analyticsProviderImportSchema.parse(input.payload);
   const payloadHash = hashAnalyticsProviderImport(payload);
@@ -3192,7 +3187,7 @@ function hashAnalyticsProviderImport(payload) {
   return `sha256:${createHash("sha256").update(JSON.stringify(payload)).digest("hex")}`;
 }
 
-// ../cli/dist/commands/analytics/readiness.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/readiness.js
 async function analyticsReadinessCommand(input) {
   const fetcher = input.fetchImpl ?? fetch;
   return fetcher(`${input.config.apiBaseUrl.replace(/\/$/u, "")}/api/cli/analytics/readiness`, {
@@ -3202,7 +3197,7 @@ async function analyticsReadinessCommand(input) {
   });
 }
 
-// ../cli/dist/commands/analytics/public-key.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/public-key.js
 import { z as z28 } from "zod";
 var responseSchema = z28.object({
   ok: z28.literal(true),
@@ -3233,7 +3228,7 @@ async function analyticsPublicKeyCommand(input) {
   return parsed.data.data.rawPublicKey;
 }
 
-// ../cli/dist/commands/analytics/prepare.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/prepare.js
 import { z as z29 } from "zod";
 var resultSchema = z29.object({
   ok: z29.literal(true),
@@ -3270,7 +3265,7 @@ async function analyticsPrepareCommand(input) {
   return parsed.data.data;
 }
 
-// ../cli/dist/commands/analytics/test.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/analytics/test.js
 import { randomUUID } from "crypto";
 async function analyticsTestCommand(input) {
   const fetcher = input.fetchImpl ?? fetch;
@@ -3303,7 +3298,7 @@ async function analyticsTestCommand(input) {
   });
 }
 
-// ../cli/dist/commands/booking/check.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/booking/check.js
 import { readFile as readFile4 } from "fs/promises";
 async function bookingCheckCommand(input) {
   const validatedManifest = await readBookingManifestFile(input.manifestPath);
@@ -3346,7 +3341,7 @@ function createBoundaryErrors2(validation) {
   }));
 }
 
-// ../cli/dist/commands/booking/init.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/booking/init.js
 import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
 import { dirname as dirname4, join as join2 } from "path";
 async function bookingInitCommand(input) {
@@ -3425,7 +3420,7 @@ alwaysApply: true
 
 ${bookingRulesTemplate}`;
 
-// ../cli/dist/commands/booking/sync.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/booking/sync.js
 async function bookingSyncCommand(input) {
   const redacted = validateBookingManifestInput(input.manifest);
   const fetcher = input.fetchImpl ?? fetch;
@@ -3451,7 +3446,7 @@ function createBookingCliRequestHeaders(config) {
   return headers;
 }
 
-// ../cli/dist/commands/booking/test.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/booking/test.js
 async function bookingTestCommand(input) {
   const fetcher = input.fetchImpl ?? fetch;
   const booking = bookingCreateRequestSchema.parse(input.booking);
@@ -3467,7 +3462,7 @@ async function bookingTestCommand(input) {
   });
 }
 
-// ../cli/dist/config/project-config.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/config/project-config.js
 import { access, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
 import { randomUUID as randomUUID2 } from "crypto";
 import { join as join3 } from "path";
@@ -3537,7 +3532,7 @@ async function writeJsonAtomically(path, value, mode) {
   }
 }
 
-// ../cli/dist/config/credentials.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/config/credentials.js
 import { execFile } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 import { chmod as chmod2, lstat, mkdir as mkdir5, open as open2, readFile as readFile6, rename as rename2, rm as rm2 } from "fs/promises";
@@ -3658,18 +3653,18 @@ async function gitPathMatches(projectDir, path, command) {
   }
 }
 
-// ../cli/dist/commands/init.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/init.js
 import { access as access3 } from "fs/promises";
 import { join as join7, relative as relative3 } from "path";
 import { z as z34 } from "zod";
 
-// ../cli/dist/commands/setup-preflight.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-preflight.js
 import { createHash as createHash2 } from "crypto";
 import semver from "semver";
 import { minimatch } from "minimatch";
 import { parse as parseYaml } from "yaml";
 
-// ../cli/dist/config/installed-package.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/config/installed-package.js
 import { createRequire } from "module";
 import { readFile as readFile7 } from "fs/promises";
 import { join as join5 } from "path";
@@ -3696,24 +3691,24 @@ async function assertExactSetupPackages(projectDir, packages) {
     dependencies: z32.record(z32.string(), z32.string()).optional(),
     devDependencies: z32.record(z32.string(), z32.string()).optional()
   }).parse(JSON.parse(await readFile7(join5(projectDir, "package.json"), "utf8")));
-  for (const [name2, version2] of [
+  for (const [name2, version3] of [
     ["siteplane", packages.siteplane],
     ["@siteplane/runtime-next", packages.runtimeNext],
     ...packages.analytics ? [["@siteplane/analytics", packages.analytics]] : []
   ]) {
     const declared = manifest.dependencies?.[name2] ?? manifest.devDependencies?.[name2];
     const installed = await readInstalledPackage(projectDir, name2);
-    if (declared !== version2 || installed.version !== version2)
+    if (declared !== version3 || installed.version !== version3)
       throw new Error("The installed Siteplane packages must match the current task's exact pins.");
   }
 }
 
-// ../cli/dist/commands/setup-preflight.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-preflight.js
 import { access as access2, readFile as readFile8, realpath, readdir, readlink } from "fs/promises";
 import { dirname as dirname6, join as join6, relative as relative2, resolve, sep } from "path";
 import { z as z33 } from "zod";
 
-// ../cli/dist/commands/setup-process.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-process.js
 import { spawn } from "child_process";
 var SetupFailure = class extends Error {
   code;
@@ -3811,7 +3806,7 @@ async function setupVercelApi(cwd, endpoint, body, method, options) {
   }
 }
 
-// ../cli/dist/commands/setup-preflight.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-preflight.js
 var manifestSchema = z33.object({
   packageManager: z33.string().optional(),
   engines: z33.object({ node: z33.string().optional() }).optional(),
@@ -3841,7 +3836,7 @@ var exists = async (path) => access2(path).then(() => true, () => false);
 var fail = (code, message) => {
   throw new SetupFailure(code, message);
 };
-var stable = (version2, major) => new RegExp(`^${major}\\.\\d+\\.\\d+$`, "u").test(version2);
+var stable = (version3, major) => new RegExp(`^${major}\\.\\d+\\.\\d+$`, "u").test(version3);
 async function inspectSetupLocalProject(projectDir) {
   const projectDirectory = await realpath(resolve(projectDir));
   const manifest = manifestSchema.parse(JSON.parse(await readFile8(join6(projectDirectory, "package.json"), "utf8")));
@@ -3914,7 +3909,7 @@ async function inspectSetupLocalProject(projectDir) {
       peerDependencies: z33.record(z33.string(), z33.string()).optional()
     })).optional()
   }).parse(JSON.parse(lockText)) : null;
-  async function version2(name3) {
+  async function version3(name3) {
     try {
       return (await readInstalledPackage(projectDirectory, name3)).version;
     } catch {
@@ -3925,9 +3920,9 @@ async function inspectSetupLocalProject(projectDir) {
     }
   }
   const [nextVersion, reactVersion, reactDomVersion] = await Promise.all([
-    version2("next"),
-    version2("react"),
-    version2("react-dom")
+    version3("next"),
+    version3("react"),
+    version3("react-dom")
   ]);
   if (!stable(nextVersion, 16))
     fail("unsupported_next_version", "Setup supports stable Next.js 16 App Router projects. Framework migration requires a separate owner decision.");
@@ -4132,7 +4127,7 @@ function safeGitRemote(value) {
   }
 }
 
-// ../cli/dist/commands/init.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/init.js
 async function initCommand(input) {
   if (!input.setupToken.trim()) {
     throw new Error("A Siteplane setup token is required.");
@@ -4295,7 +4290,7 @@ function readErrorMessage(payload) {
   return null;
 }
 
-// ../cli/dist/commands/scan.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/scan.js
 import { readdir as readdir2 } from "fs/promises";
 import { extname, join as join8 } from "path";
 var defaultScanRoots = ["app", "src", "pages", "components", "lib"];
@@ -4336,13 +4331,13 @@ async function collectSourceFiles(directory) {
   return files;
 }
 
-// ../cli/dist/commands/site-setup.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/site-setup.js
 import { execFile as execFile2 } from "child_process";
 import { readFile as readFile9 } from "fs/promises";
 import { promisify as promisify2 } from "util";
 import { z as z35 } from "zod";
 
-// ../cli/dist/scan/next-source-scan.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/scan/next-source-scan.js
 import ts2 from "typescript";
 import { isAbsolute, relative as relative4 } from "path";
 var eventPreviewHandlerMissingMessage = "Event preview fields must consume preview values with useSiteplanePreviewText from @siteplane/runtime-next/client or a siteplane:preview-value-applied listener.";
@@ -5043,7 +5038,7 @@ function isPositionalFieldReference(value) {
   return value ? /\[\d+\]|\.\d+(?:\.|$)/.test(value) : false;
 }
 
-// ../cli/dist/commands/site-setup.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/site-setup.js
 var execFileAsync2 = promisify2(execFile2);
 var safeErrorSchema = z35.object({
   code: z35.string().trim().min(1),
@@ -5241,7 +5236,7 @@ async function siteSetupActivityCommand(input) {
   return response.ok && parsed.success ? parsed.data.data : actionRequired(response.payload, "Setup activity could not be recorded.");
 }
 
-// ../cli/dist/commands/setup-start.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-start.js
 import { randomBytes, randomUUID as randomUUID4 } from "crypto";
 import { access as access4 } from "fs/promises";
 import { join as join9, relative as relative5 } from "path";
@@ -5374,7 +5369,7 @@ async function exists2(path) {
   }
 }
 
-// ../cli/dist/commands/setup-review.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-review.js
 import { z as z37 } from "zod";
 var responseSchema2 = z37.object({
   ok: z37.literal(true),
@@ -5459,7 +5454,7 @@ async function setupReviewCommand(input) {
   }
 }
 
-// ../cli/dist/commands/setup-prepare.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-prepare.js
 import { access as access5, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
 import { randomUUID as randomUUID5 } from "crypto";
 import { dirname as dirname7, join as join10, relative as relative6, sep as sep2 } from "path";
@@ -5479,8 +5474,8 @@ async function setupPrepareCommand(input) {
     if (context.status !== "ok")
       return context;
     const task = context.task;
-    if (task.site?.siteId !== config.siteId || task.run?.runId !== config.runId || task.packages.siteplane !== config.packages.siteplane || task.packages.analytics !== config.packages.analytics || task.packages.runtimeNext !== config.packages.runtimeNext) {
-      throw new SetupFailure("setup_contract_conflict", "The local configuration does not match this server task and its exact package versions.");
+    if (task.site?.siteId !== config.siteId || task.run?.runId !== config.runId) {
+      throw new SetupFailure("setup_contract_conflict", "The local configuration does not match this server task's site and setup run.");
     }
     if (task.run.status === "completed" || task.run.status === "ready_for_review")
       return {
@@ -5597,7 +5592,8 @@ ${layoutSource.slice(0, point)}<SiteplaneBridge />${layoutSource.slice(point)}`)
       files.set(nextPath, `import { withSiteplane } from "siteplane/next";
 ${nextSource.slice(0, expression.getStart(ast))}withSiteplane(${expression.getText(ast)})${nextSource.slice(expression.end)}`);
     }
-    files.set(join10(directory, ".siteplane/setup-guide-v2.md"), `# Siteplane setup task v2
+    const guidePath = join10(directory, ".siteplane/setup-guide-v2.md");
+    files.set(guidePath, `# Siteplane setup task v2
 
 ${task.goal}
 
@@ -5608,11 +5604,13 @@ ${task.discovery.rules.map((rule) => `- ${rule}`).join("\n")}
 Run setup context for the current user instructions and authorized modules. Keep the user instructions distinct from your selection summary. Use setup deploy --wait for environment transfer and deployment; never read or print credential values. For image fields, withSiteplane prepares the exact Siteplane asset route and the website /siteplane-assets/ path in Next Image and existing img-src policies at build time. This grants no hosting permission. Preserve existing image sources; explicitly resolve custom loaders, redirect dependencies, or CSP written by middleware/proxy/meta tags before deployment. Use the provider-selected public SITEPLANE_SITE_ORIGIN for local builds.
 `);
     for (const [path, content] of files) {
-      if (path === layoutPath || path === nextPath)
+      if (path === layoutPath || path === nextPath || path === guidePath)
         continue;
       if (await exists3(path) && await readFile10(path, "utf8") !== content)
         throw new SetupFailure("owned_file_conflict", `Preserve the existing ${relative6(directory, path)} and reconcile its integration with the current Siteplane guide before retrying.`);
     }
+    files.set(configPath, `${JSON.stringify({ ...config, packages: task.packages }, null, 2)}
+`);
     for (const path of files.keys())
       await assertSourcePath(directory, path);
     const before = /* @__PURE__ */ new Map();
@@ -5729,7 +5727,7 @@ async function assertSourcePath(root, target) {
   }
 }
 
-// ../cli/dist/commands/setup-lock.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-lock.js
 import { randomUUID as randomUUID6 } from "crypto";
 import { lstat as lstat3, mkdir as mkdir7, open as open4, readFile as readFile11, rm as rm4, rmdir } from "fs/promises";
 import { resolve as resolve2 } from "path";
@@ -5792,7 +5790,7 @@ function locked() {
   return new SetupFailure("setup_process_active", "Another setup process owns this repository. Wait for it to finish; a live lock is never replaced.");
 }
 
-// ../cli/dist/config/build-provenance.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/config/build-provenance.js
 import { createHash as createHash3 } from "crypto";
 import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
@@ -5858,7 +5856,7 @@ async function writeBuildProvenance(checkout, revision) {
   await writeFile5(target, JSON.stringify(record), { flag: "wx", mode: 384 });
 }
 
-// ../cli/dist/commands/setup-deploy.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-deploy.js
 import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as randomUUID7 } from "crypto";
 import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
@@ -6329,7 +6327,7 @@ async function setupDeployCommand(input, deps = defaults) {
   }
 }
 
-// ../cli/dist/commands/setup-claim.js
+// ../../../../../../Web-Dev/Programme/Siteplane/packages/cli/dist/commands/setup-claim.js
 import { z as z41 } from "zod";
 async function setupClaimCommand(input) {
   const code = setupClaimCodeSchema.safeParse(input.code);
@@ -6411,6 +6409,2100 @@ function required(code, message) {
   return { status: "action_required", code, message };
 }
 
+// ../shared/dist/actors.js
+import { z as z42 } from "zod";
+var ACTOR_TYPES2 = ["workspace_member", "site_member", "agent", "setup_guest", "system"];
+var actorTypeSchema2 = z42.enum(ACTOR_TYPES2);
+
+// ../shared/dist/analytics-defaults.js
+var ANALYTICS_BATCH_LIMITS2 = {
+  maxEventsPerRequest: 50,
+  maxJsonBodyBytes: 64 * 1024,
+  maxPropertiesJsonBytes: 8 * 1024
+};
+var ANALYTICS_RETENTION_DEFAULTS2 = {
+  enabledRawEventRetentionDays: 30,
+  higherTierRawEventRetentionDays: 90,
+  maxRawEventRetentionDaysWithoutAdr: 180,
+  diagnosticsRetentionDays: 30,
+  rateLimitBucketRetentionDays: 2,
+  lateEventWindowHours: 72
+};
+
+// ../shared/dist/analytics-booking.js
+import { z as z43 } from "zod";
+var bookingProviders2 = ["treatwell", "beautinda", "other"];
+var bookingAttributionModes2 = [
+  "outbound_click_and_utm",
+  "provider_redirect",
+  "provider_reported",
+  "manual_import",
+  "verified_webhook"
+];
+var bookingSignalSources2 = [
+  "outbound_click",
+  "provider_redirect",
+  "provider_reported",
+  "manual_import",
+  "verified_webhook"
+];
+var bookingAttributionConfidences2 = [
+  "provider_redirect",
+  "provider_reported",
+  "manual_import",
+  "verified_webhook"
+];
+var bookingProviderSchema2 = z43.enum(bookingProviders2);
+var bookingAttributionModeSchema2 = z43.enum(bookingAttributionModes2);
+var bookingSignalSourceSchema2 = z43.enum(bookingSignalSources2);
+var bookingAttributionConfidenceSchema2 = z43.enum(bookingAttributionConfidences2);
+var bookingProviderHintSchema2 = z43.object({
+  bookingProvider: bookingProviderSchema2,
+  bookingUrlHost: z43.string().min(1).max(253),
+  bookingAttributionMode: bookingAttributionModeSchema2,
+  utmContent: z43.string().min(1).max(200).optional(),
+  successCondition: z43.literal("redirect_status=succeeded").optional()
+}).superRefine((hint, context) => {
+  if (hint.successCondition !== void 0 && hint.bookingAttributionMode !== "provider_redirect") {
+    context.addIssue({
+      code: "custom",
+      message: "successCondition is allowed only for provider_redirect booking hints.",
+      path: ["successCondition"]
+    });
+  }
+});
+
+// ../shared/dist/analytics-contract.js
+import { z as z44 } from "zod";
+var ANALYTICS_IMPORT_SCHEMA_VERSION2 = "analytics-provider-import.v1";
+var analyticsImportTargetIdSchema2 = z44.string().min(1).max(120).regex(/^[a-zA-Z][a-zA-Z0-9]*(?:[._-][a-zA-Z0-9]+)*$/u);
+var analyticsProviderImportRowSchema2 = z44.object({
+  targetId: analyticsImportTargetIdSchema2,
+  occurredAt: z44.string().datetime({ offset: true }),
+  attributionConfidence: z44.enum(["provider_reported", "manual_import"]),
+  providerEventId: z44.string().trim().min(1).max(160).optional(),
+  idempotencyKey: z44.string().trim().min(1).max(160).optional()
+}).strict().superRefine((row, context) => {
+  if (!row.providerEventId && !row.idempotencyKey) {
+    context.addIssue({
+      code: "custom",
+      message: "Each import row requires providerEventId or idempotencyKey.",
+      path: ["providerEventId"]
+    });
+  }
+});
+var analyticsProviderImportSchema2 = z44.object({
+  schemaVersion: z44.literal(ANALYTICS_IMPORT_SCHEMA_VERSION2),
+  provider: z44.enum(["treatwell", "beautinda", "other"]),
+  sourceName: z44.string().trim().min(1).max(160).optional(),
+  rows: z44.array(analyticsProviderImportRowSchema2).min(1).max(1e3)
+}).strict();
+
+// ../shared/dist/analytics-config.js
+import { z as z45 } from "zod";
+var ANALYTICS_CONFIG_LEASE_MS2 = 6e4;
+var analyticsMeasurementConfigSchema2 = z45.object({
+  version: z45.literal(1),
+  installationGeneration: z45.number().int().positive(),
+  configRevision: z45.number().int().positive(),
+  effectiveSiteMode: z45.enum(["disabled", "session_only", "full_analytics"]),
+  measurementEnabled: z45.boolean(),
+  issuedAt: z45.string().datetime({ offset: true }),
+  expiresAt: z45.string().datetime({ offset: true })
+}).strict().superRefine((config, context) => {
+  const lifetime = Date.parse(config.expiresAt) - Date.parse(config.issuedAt);
+  if (lifetime <= 0 || lifetime > ANALYTICS_CONFIG_LEASE_MS2) {
+    context.addIssue({
+      code: "custom",
+      path: ["expiresAt"],
+      message: "Measurement permission must expire within 60 seconds."
+    });
+  }
+  if (config.measurementEnabled !== (config.effectiveSiteMode !== "disabled")) {
+    context.addIssue({
+      code: "custom",
+      path: ["measurementEnabled"],
+      message: "Measurement permission must match the effective site mode."
+    });
+  }
+});
+
+// ../shared/dist/analytics-events.js
+import { z as z46 } from "zod";
+var ANALYTICS_SCHEMA_VERSION2 = "analytics.v1";
+var ANALYTICS_KEY_PATTERN = /^(pk|sk)_siteplane_([A-Za-z0-9_-]{16})_[A-Za-z0-9_-]{43}$/;
+var analyticsSessionIdSchema2 = z46.string().regex(/^cpa_s_[a-f0-9]{32}$/u);
+var analyticsVisitorIdSchema2 = z46.string().regex(/^cpa_v_[a-f0-9]{32}$/u);
+var analyticsPersistedIdentityHashSchema2 = z46.string().regex(/^[a-f0-9]{64}$/u);
+var analyticsEventNames2 = [
+  "page_view",
+  "section_view",
+  "cta_click",
+  "outbound_click",
+  "email_click",
+  "phone_click",
+  "file_download",
+  "form_start",
+  "form_submit",
+  "form_error",
+  "lead_created",
+  "checkout_started",
+  "conversion",
+  "checkout_completed",
+  "payment_succeeded",
+  "subscription_started",
+  "purchase_completed",
+  "trial_started"
+];
+var serverOnlyAnalyticsEvents2 = [
+  "checkout_completed",
+  "payment_succeeded",
+  "subscription_started",
+  "purchase_completed",
+  "trial_started"
+];
+var analyticsEventSources2 = [
+  "browser",
+  "server",
+  "test",
+  "editor_preview",
+  "system"
+];
+var analyticsIngestionChannels2 = [
+  "browser_collector",
+  "server_sdk",
+  "provider_endpoint",
+  "provider_import",
+  "test",
+  "editor_preview",
+  "system_job"
+];
+var analyticsTargetTypes2 = [
+  "cta",
+  "form",
+  "section",
+  "file",
+  "link",
+  "conversion",
+  "server_conversion"
+];
+var analyticsDataAttributeEvents2 = [
+  "cta_click",
+  "outbound_click",
+  "email_click",
+  "phone_click",
+  "file_download",
+  "section_view",
+  "checkout_started",
+  "form"
+];
+var analyticsDeviceTypes2 = [
+  "desktop",
+  "tablet",
+  "mobile",
+  "unknown"
+];
+var analyticsBotClassifications2 = [
+  "normal",
+  "known_bot",
+  "suspicious",
+  "invalid"
+];
+var analyticsValidityStatuses2 = [
+  "accepted",
+  "rejected",
+  "ignored"
+];
+var analyticsEventNameSchema2 = z46.enum(analyticsEventNames2);
+var serverOnlyAnalyticsEventSchema2 = z46.enum(serverOnlyAnalyticsEvents2);
+var analyticsEventSourceSchema2 = z46.enum(analyticsEventSources2);
+var analyticsIngestionChannelSchema2 = z46.enum(analyticsIngestionChannels2);
+var analyticsTargetTypeSchema2 = z46.enum(analyticsTargetTypes2);
+var analyticsDataAttributeEventSchema2 = z46.enum(analyticsDataAttributeEvents2);
+var analyticsDeviceTypeSchema2 = z46.enum(analyticsDeviceTypes2);
+var analyticsBotClassificationSchema2 = z46.enum(analyticsBotClassifications2);
+var analyticsValidityStatusSchema2 = z46.enum(analyticsValidityStatuses2);
+var analyticsPropertiesSchema2 = z46.record(z46.string(), z46.unknown());
+var analyticsTimestampSchema2 = z46.string().datetime({ offset: true });
+var analyticsBrowserEventSchema2 = z46.object({
+  eventId: z46.string().min(1).max(160),
+  installationGeneration: z46.number().int().positive().optional(),
+  measurementMode: z46.enum(["session_only", "full_analytics"]).optional(),
+  eventName: analyticsEventNameSchema2,
+  eventSource: analyticsEventSourceSchema2.optional().default("browser"),
+  targetId: z46.string().min(1).max(160).optional(),
+  targetType: analyticsTargetTypeSchema2.optional(),
+  visitorId: analyticsVisitorIdSchema2.optional(),
+  sessionId: analyticsSessionIdSchema2,
+  idempotencyKey: z46.string().min(1).max(240).optional(),
+  occurredAt: analyticsTimestampSchema2,
+  pageUrl: z46.string().url().max(2048).optional(),
+  pagePath: z46.string().min(1).max(1024).optional(),
+  routeTemplate: z46.string().min(1).max(1024).optional(),
+  referrer: z46.string().url().max(2048).optional(),
+  utmSource: z46.string().min(1).max(200).optional(),
+  utmMedium: z46.string().min(1).max(200).optional(),
+  utmCampaign: z46.string().min(1).max(200).optional(),
+  utmContent: z46.string().min(1).max(200).optional(),
+  utmTerm: z46.string().min(1).max(200).optional(),
+  deviceType: analyticsDeviceTypeSchema2.optional(),
+  browserName: z46.string().min(1).max(120).optional(),
+  osName: z46.string().min(1).max(120).optional(),
+  country: z46.string().min(1).max(80).optional(),
+  region: z46.string().min(1).max(120).optional(),
+  properties: analyticsPropertiesSchema2.optional().default({})
+}).superRefine((event, context) => {
+  if (isServerOnlyAnalyticsEvent2(event.eventName)) {
+    context.addIssue({
+      code: "custom",
+      message: "Browser analytics payloads cannot contain server-only events.",
+      path: ["eventName"]
+    });
+  }
+  if (event.eventSource === "server" || event.eventSource === "system") {
+    context.addIssue({
+      code: "custom",
+      message: "Browser analytics payloads cannot use server/system sources.",
+      path: ["eventSource"]
+    });
+  }
+  if (event.targetType === "server_conversion") {
+    context.addIssue({
+      code: "custom",
+      message: "Browser analytics payloads cannot use server conversion targets.",
+      path: ["targetType"]
+    });
+  }
+});
+var analyticsBrowserEventPayloadSchema2 = z46.object({
+  siteKey: z46.string().min(1),
+  schemaVersion: z46.literal(ANALYTICS_SCHEMA_VERSION2),
+  mode: z46.enum(["live", "test"]).optional().default("live"),
+  events: z46.array(analyticsBrowserEventSchema2).min(1).max(50)
+});
+var analyticsNormalizedEventBaseSchema2 = z46.object({
+  site_id: z46.string().uuid(),
+  event_id: z46.string().min(1).max(160),
+  schema_version: z46.literal(ANALYTICS_SCHEMA_VERSION2),
+  event_name: analyticsEventNameSchema2,
+  event_source: analyticsEventSourceSchema2,
+  ingestion_channel: analyticsIngestionChannelSchema2,
+  target_id: z46.string().min(1).max(160).nullable().optional(),
+  target_type: analyticsTargetTypeSchema2.nullable().optional(),
+  dedupe_key: z46.string().regex(/^analytics_dedupe_v1_[a-f0-9]{64}$/u).nullable().optional(),
+  idempotency_key: z46.string().min(1).max(240).nullable().optional(),
+  bot_classification: analyticsBotClassificationSchema2,
+  validity_status: analyticsValidityStatusSchema2,
+  rejection_reason: z46.string().min(1).max(240).nullable().optional(),
+  occurred_at: analyticsTimestampSchema2,
+  received_at: analyticsTimestampSchema2,
+  page_url: z46.string().url().max(2048).nullable().optional(),
+  page_path: z46.string().min(1).max(1024).nullable().optional(),
+  route_template: z46.string().min(1).max(1024).nullable().optional(),
+  referrer: z46.string().url().max(2048).nullable().optional(),
+  utm_source: z46.string().min(1).max(200).nullable().optional(),
+  utm_medium: z46.string().min(1).max(200).nullable().optional(),
+  utm_campaign: z46.string().min(1).max(200).nullable().optional(),
+  utm_content: z46.string().min(1).max(200).nullable().optional(),
+  utm_term: z46.string().min(1).max(200).nullable().optional(),
+  country: z46.string().min(1).max(80).nullable().optional(),
+  region: z46.string().min(1).max(120).nullable().optional(),
+  device_type: analyticsDeviceTypeSchema2,
+  browser_name: z46.string().min(1).max(120).nullable().optional(),
+  os_name: z46.string().min(1).max(120).nullable().optional(),
+  provider: z46.string().min(1).max(120).nullable().optional(),
+  provider_event_id: z46.string().min(1).max(240).nullable().optional(),
+  properties: analyticsPropertiesSchema2
+});
+var analyticsRawNormalizedEventSchema2 = analyticsNormalizedEventBaseSchema2.extend({
+  visitor_id: analyticsVisitorIdSchema2.nullable().optional(),
+  session_id: analyticsSessionIdSchema2.nullable().optional()
+});
+var analyticsNormalizedEventSchema2 = analyticsNormalizedEventBaseSchema2.extend({
+  visitor_id: analyticsPersistedIdentityHashSchema2.nullable().optional(),
+  session_id: analyticsPersistedIdentityHashSchema2.nullable().optional()
+});
+function isServerOnlyAnalyticsEvent2(eventName) {
+  return serverOnlyAnalyticsEvents2.includes(eventName);
+}
+function getAnalyticsKeyLookup(rawKey) {
+  const match = ANALYTICS_KEY_PATTERN.exec(rawKey);
+  return match ? `${match[1]}_siteplane_${match[2]}` : null;
+}
+
+// ../shared/dist/analytics-manifest.js
+import { z as z47 } from "zod";
+var analyticsTargetIdSchema2 = z47.string().min(1).max(120).regex(/^[a-zA-Z][a-zA-Z0-9]*(?:[._-][a-zA-Z0-9]+)*$/u, {
+  message: "Analytics target IDs must be stable identifiers without whitespace or visible copy."
+});
+var analyticsManifestRecordSchema2 = z47.record(z47.string(), z47.unknown());
+var analyticsFormPurposes2 = [
+  "contact",
+  "lead",
+  "newsletter",
+  "search",
+  "login",
+  "other"
+];
+var analyticsFormPurposeSchema2 = z47.enum(analyticsFormPurposes2);
+var analyticsManifestRouteSchema2 = z47.object({
+  path: z47.string().min(1).max(1024),
+  pageType: z47.string().min(1).max(120).optional(),
+  label: z47.string().min(1).max(200).optional()
+}).passthrough();
+var analyticsManifestTargetSchema2 = z47.object({
+  id: analyticsTargetIdSchema2,
+  type: analyticsTargetTypeSchema2,
+  event: analyticsEventNameSchema2.optional(),
+  events: z47.array(analyticsEventNameSchema2).min(1).max(20).optional(),
+  route: z47.string().min(1).max(1024).optional(),
+  label: z47.string().min(1).max(200).optional(),
+  description: z47.string().min(1).max(1e3).optional(),
+  autoActive: z47.boolean().optional(),
+  sourceHints: analyticsManifestRecordSchema2.optional()
+}).passthrough().superRefine((target, context) => {
+  if (target.event === void 0 && target.events === void 0) {
+    context.addIssue({
+      code: "custom",
+      message: "Analytics targets require event or events.",
+      path: ["event"]
+    });
+  }
+  if (target.event !== void 0 && target.events !== void 0) {
+    context.addIssue({
+      code: "custom",
+      message: "Analytics targets must use event or events, never both.",
+      path: ["events"]
+    });
+  }
+  if (target.type === "form" && !analyticsFormPurposeSchema2.safeParse(target.sourceHints?.formPurpose).success) {
+    context.addIssue({
+      code: "custom",
+      message: "Analytics form targets require a typed sourceHints.formPurpose.",
+      path: ["sourceHints", "formPurpose"]
+    });
+  }
+});
+var analyticsManifestSchema2 = z47.object({
+  schemaVersion: z47.literal(ANALYTICS_SCHEMA_VERSION2),
+  siteId: z47.string().min(1),
+  siteKeyRef: z47.string().regex(/^env:[A-Z][A-Z0-9_]*$/u, {
+    message: "siteKeyRef must be an environment-variable reference."
+  }),
+  siteKeyLookup: z47.string().regex(/^pk_siteplane_[A-Za-z0-9_-]{16}$/),
+  routes: z47.array(analyticsManifestRouteSchema2),
+  targets: z47.array(analyticsManifestTargetSchema2),
+  metadata: analyticsManifestRecordSchema2.optional(),
+  siteKey: z47.string().optional(),
+  secretKey: z47.string().optional(),
+  rawKey: z47.string().optional(),
+  token: z47.string().optional(),
+  accessToken: z47.string().optional()
+}).passthrough().superRefine((manifest, context) => {
+  const targetIds = /* @__PURE__ */ new Set();
+  for (const [index, target] of manifest.targets.entries()) {
+    if (targetIds.has(target.id)) {
+      context.addIssue({
+        code: "custom",
+        message: `Duplicate analytics target ID: ${target.id}`,
+        path: ["targets", index, "id"]
+      });
+    }
+    targetIds.add(target.id);
+  }
+  for (const issue of findUnsafeSecretReferences2(manifest)) {
+    context.addIssue({
+      code: "custom",
+      message: "Raw secret material is not allowed in analytics manifests.",
+      path: issue
+    });
+  }
+});
+var secretValuePattern2 = /(?:\bsk_(?:live|test)_|\bcpb_|\bpmt_(?:pc|setup|cli)_|\bservice_role\b|bearer\s+[a-z0-9._~-]+)/iu;
+function findUnsafeSecretReferences2(value, path = []) {
+  if (Array.isArray(value)) {
+    return value.flatMap((item, index) => findUnsafeSecretReferences2(item, [...path, index]));
+  }
+  if (!isPlainRecord2(value)) {
+    return [];
+  }
+  return Object.entries(value).flatMap(([key, childValue]) => {
+    const childPath = [...path, key];
+    const referenceLikeKey = /(?:ref|lookup|prefix)$/iu.test(key);
+    const unsafeHere = referenceLikeKey && typeof childValue === "string" && secretValuePattern2.test(childValue);
+    return [
+      ...unsafeHere ? [childPath] : [],
+      ...findUnsafeSecretReferences2(childValue, childPath)
+    ];
+  });
+}
+function isPlainRecord2(value) {
+  return typeof value === "object" && value !== null;
+}
+
+// ../shared/dist/analytics-metrics.js
+import { z as z48 } from "zod";
+var analyticsVisitorQualities2 = ["exact", "estimated"];
+var analyticsVisitorQualitySchema2 = z48.enum(analyticsVisitorQualities2);
+var analyticsKpiKeys2 = [
+  "pageViews",
+  "sessions",
+  "visitors",
+  "estimatedVisitors",
+  "inquiries",
+  "leads",
+  "conversions",
+  "conversionRate",
+  "inquiryRate"
+];
+var analyticsKpiKeySchema2 = z48.enum(analyticsKpiKeys2);
+
+// ../shared/dist/analytics-privacy.js
+var serverPropertySchemas2 = {
+  lead_created: {
+    conversionId: "identifier",
+    formId: "identifier",
+    formType: "enum",
+    customerRef: "identifier"
+  },
+  conversion: {
+    conversionId: "identifier",
+    conversionType: "enum",
+    attributionConfidence: "enum",
+    bookingSignalSource: "enum",
+    bookingProvider: "enum",
+    redirectStatus: "enum",
+    importId: "identifier"
+  },
+  checkout_completed: revenuePropertySchema2(),
+  payment_succeeded: revenuePropertySchema2(),
+  subscription_started: revenuePropertySchema2(),
+  purchase_completed: revenuePropertySchema2(),
+  trial_started: revenuePropertySchema2()
+};
+function revenuePropertySchema2() {
+  return {
+    conversionId: "identifier",
+    checkoutId: "identifier",
+    customerRef: "identifier",
+    amount: "amount",
+    currency: "enum",
+    planId: "identifier",
+    productId: "identifier"
+  };
+}
+
+// ../shared/dist/assets.js
+import { z as z49 } from "zod";
+var ASSET_STAGES2 = ["staging", "final", "deleted"];
+var ASSET_VISIBILITIES2 = ["private", "public", "deleted"];
+var ASSET_USAGE_ENTITY_TYPES2 = [
+  "branding",
+  "draft",
+  "change_set",
+  "published_value"
+];
+var assetStageSchema2 = z49.enum(ASSET_STAGES2);
+var assetVisibilitySchema2 = z49.enum(ASSET_VISIBILITIES2);
+var assetUsageEntityTypeSchema2 = z49.enum(ASSET_USAGE_ENTITY_TYPES2);
+var brandingAccentColorSchema2 = z49.string().regex(/^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/);
+
+// ../shared/dist/booking-contracts.js
+import { z as z50 } from "zod";
+var bookingStatuses2 = [
+  "pending_payment",
+  "confirmed",
+  "payment_expired",
+  "cancelled",
+  "no_show"
+];
+var bookingPaymentStatuses2 = [
+  "payment_not_required",
+  "checkout_open",
+  "processing",
+  "succeeded",
+  "failed",
+  "cancelled",
+  "expired"
+];
+var bookingAccountReadinessStatuses2 = [
+  "not_started",
+  "setup_required",
+  "under_review",
+  "payments_ready",
+  "payouts_restricted",
+  "payments_restricted",
+  "deactivated"
+];
+var bookingRefundStatuses2 = [
+  "none",
+  "pending",
+  "partially_refunded",
+  "refunded",
+  "failed"
+];
+var bookingDisputeStatuses2 = [
+  "none",
+  "needs_response",
+  "under_review",
+  "won",
+  "lost"
+];
+var bookingPaymentModes2 = [
+  "onsite_only",
+  "online_required",
+  "customer_choice"
+];
+var bookingPaymentCollectionTypes2 = [
+  "full_amount",
+  "deposit_percent"
+];
+var bookingResourceKinds2 = [
+  "person",
+  "room",
+  "equipment",
+  "other"
+];
+var bookingStatusSchema2 = z50.enum(bookingStatuses2);
+var bookingPaymentStatusSchema2 = z50.enum(bookingPaymentStatuses2);
+var bookingAccountReadinessStatusSchema2 = z50.enum(bookingAccountReadinessStatuses2);
+var bookingRefundStatusSchema2 = z50.enum(bookingRefundStatuses2);
+var bookingDisputeStatusSchema2 = z50.enum(bookingDisputeStatuses2);
+var bookingPaymentModeSchema2 = z50.enum(bookingPaymentModes2);
+var bookingPaymentCollectionTypeSchema2 = z50.enum(bookingPaymentCollectionTypes2);
+var bookingPaymentCollectionSchema2 = z50.discriminatedUnion("type", [
+  z50.object({ type: z50.literal("full_amount") }).strict(),
+  z50.object({
+    type: z50.literal("deposit_percent"),
+    depositPercent: z50.number().int().min(10).max(90)
+  }).strict()
+]);
+var bookingPaymentChoices2 = ["onsite", "online"];
+var bookingPaymentChoiceSchema2 = z50.enum(bookingPaymentChoices2);
+var bookingPaymentSnapshotSchema2 = z50.object({
+  snapshotId: z50.string().uuid(),
+  snapshotVersion: z50.number().int().positive(),
+  currency: z50.literal("EUR"),
+  totalAmountCents: z50.number().int().min(0),
+  onlineAmountCents: z50.number().int().min(0),
+  onsiteRemainderCents: z50.number().int().min(0),
+  maxStripeRefundAmountCents: z50.number().int().min(0)
+}).strict().superRefine((snapshot, context) => {
+  if (snapshot.onlineAmountCents + snapshot.onsiteRemainderCents !== snapshot.totalAmountCents) {
+    context.addIssue({
+      code: "custom",
+      message: "Payment snapshot amounts must add up to the total amount."
+    });
+  }
+  if (snapshot.maxStripeRefundAmountCents > snapshot.onlineAmountCents) {
+    context.addIssue({
+      code: "custom",
+      message: "Stripe refund basis cannot exceed the online amount."
+    });
+  }
+});
+var bookingServiceVariantSchema2 = z50.object({
+  id: z50.string().uuid(),
+  name: z50.string().trim().min(1).max(120),
+  durationMinutes: z50.number().int().min(1).max(1440),
+  priceCents: z50.number().int().min(0).nullable()
+}).strict();
+var bookingServiceVariantsSchema2 = z50.array(bookingServiceVariantSchema2).min(1).max(20);
+var isoDateSchema2 = z50.string().regex(/^\d{4}-\d{2}-\d{2}$/);
+var utcDateTimeSchema2 = z50.string().datetime();
+var bookingLocalTimeSchema2 = z50.string().regex(/^(?:[01]\d|2[0-3]):[0-5]\d$/);
+var bookingAvailabilityIntervalsSchema2 = z50.array(z50.object({
+  start: bookingLocalTimeSchema2,
+  end: bookingLocalTimeSchema2
+}).strict().refine((interval) => interval.end > interval.start)).superRefine((intervals, context) => {
+  const sorted = [...intervals].sort((left, right) => left.start.localeCompare(right.start));
+  for (let index = 1; index < sorted.length; index += 1) {
+    if (sorted[index].start < sorted[index - 1].end) {
+      context.addIssue({
+        code: "custom",
+        message: "Booking availability intervals must not overlap."
+      });
+      return;
+    }
+  }
+});
+var bookingPublicConfigSchema2 = z50.object({
+  site: z50.object({
+    displayName: z50.string().trim().min(1),
+    timezone: z50.string().trim().min(1),
+    locale: z50.string().trim().min(2),
+    bookingPageSlug: z50.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).min(2).max(64),
+    privacyUrl: z50.string().url().nullable()
+  }),
+  branding: z50.object({
+    logoUrl: z50.string().url().nullable(),
+    accentColor: z50.string().trim().min(1).nullable()
+  }),
+  settings: z50.object({
+    slotIntervalMinutes: z50.number().int().positive(),
+    minLeadMinutes: z50.number().int().min(0),
+    maxAdvanceDays: z50.number().int().min(1),
+    requirePhone: z50.boolean(),
+    collectNote: z50.boolean(),
+    confirmationMessage: z50.string().nullable()
+  }),
+  /** Freitexte des Salons, im Kassen-Schritt vor der Bestaetigung sichtbar. */
+  policies: z50.object({
+    cancellation: z50.string().nullable(),
+    lateArrival: z50.string().nullable()
+  }),
+  payment: z50.object({
+    mode: bookingPaymentModeSchema2,
+    collection: bookingPaymentCollectionSchema2,
+    onlinePaymentsReady: z50.boolean()
+  }).strict(),
+  serviceCategories: z50.array(z50.object({
+    id: z50.string().uuid(),
+    name: z50.string().trim().min(1),
+    sortOrder: z50.number().int()
+  })),
+  serviceSubcategories: z50.array(z50.object({
+    id: z50.string().uuid(),
+    categoryId: z50.string().uuid(),
+    name: z50.string().trim().min(1),
+    sortOrder: z50.number().int()
+  })),
+  services: z50.array(z50.object({
+    id: z50.string().trim().min(1),
+    name: z50.string().trim().min(1),
+    durationMinutes: z50.number().int().positive(),
+    priceCents: z50.number().int().min(0).nullable(),
+    currency: z50.string().regex(/^[A-Z]{3}$/),
+    description: z50.string().nullable(),
+    categoryId: z50.string().uuid(),
+    subcategoryId: z50.string().uuid().nullable(),
+    variants: bookingServiceVariantsSchema2,
+    allowsAnyResource: z50.boolean(),
+    sortOrder: z50.number().int()
+  })),
+  resources: z50.array(z50.object({
+    id: z50.string().trim().min(1),
+    name: z50.string().trim().min(1),
+    kind: z50.enum(bookingResourceKinds2)
+  })),
+  serviceResources: z50.array(z50.object({
+    serviceId: z50.string().trim().min(1),
+    resourceId: z50.string().trim().min(1)
+  }))
+});
+var bookingItemSchema2 = z50.object({
+  serviceId: z50.string().trim().min(1),
+  variantId: z50.string().trim().min(1)
+}).strict();
+var bookingItemsSchema2 = z50.array(bookingItemSchema2).min(1).max(10);
+function parseBookingItemsParam2(value) {
+  const items = value.split(",").map((entry) => entry.trim()).filter((entry) => entry !== "").map((entry) => {
+    const [serviceId, variantId, ...rest] = entry.split(":");
+    return serviceId && variantId && rest.length === 0 ? { serviceId, variantId } : null;
+  });
+  return items.every((item) => item !== null) ? items : null;
+}
+var bookingSlotsQuerySchema2 = z50.object({
+  items: z50.preprocess((value) => typeof value === "string" ? parseBookingItemsParam2(value) : value, bookingItemsSchema2),
+  resourceId: z50.string().trim().min(1).optional(),
+  fromDate: isoDateSchema2,
+  toDate: isoDateSchema2
+});
+var bookingSlotsResponseSchema2 = z50.object({
+  timezone: z50.string().trim().min(1),
+  items: bookingItemsSchema2,
+  // Reine Behandlungsdauer ohne Puffer: das UI zeigt damit die Terminspanne,
+  // ohne selbst rechnen zu muessen.
+  totalDurationMinutes: z50.number().int().min(1),
+  mode: z50.enum(["any", "resource"]),
+  slots: z50.array(z50.object({
+    startUtc: utcDateTimeSchema2,
+    resourceId: z50.string().trim().min(1).optional()
+  }))
+});
+var bookingAvailabilityQuerySchema2 = z50.object({
+  items: z50.preprocess((value) => typeof value === "string" ? parseBookingItemsParam2(value) : value, bookingItemsSchema2),
+  resourceId: z50.string().trim().min(1).optional(),
+  fromDate: isoDateSchema2,
+  toDate: isoDateSchema2
+});
+var bookingAvailabilityResponseSchema2 = z50.object({
+  timezone: z50.string().trim().min(1),
+  totalDurationMinutes: z50.number().int().min(1),
+  days: z50.array(z50.object({
+    date: isoDateSchema2,
+    hasSlots: z50.boolean()
+  })),
+  /** Erster Tag mit Slot ab `fromDate`, auch ausserhalb des Fensters. */
+  nextAvailableDate: isoDateSchema2.nullable()
+});
+var bookingPublicErrorCodes2 = [
+  "slot_unavailable",
+  "validation_error",
+  "origin_not_allowed",
+  "invalid_key",
+  "rate_limited",
+  "payment_required",
+  "payment_unavailable",
+  "payment_amount_too_small",
+  "already_cancelled",
+  "too_late",
+  "not_found"
+];
+var bookingPublicErrorSchema2 = z50.object({
+  error: z50.enum(bookingPublicErrorCodes2),
+  message: z50.string().optional(),
+  requestId: z50.string().optional()
+}).strict();
+var bookingCreateRequestSchema2 = z50.object({
+  items: bookingItemsSchema2,
+  resourceId: z50.string().min(1).nullable(),
+  startUtc: utcDateTimeSchema2,
+  customer: z50.object({
+    name: z50.string().min(1).max(120),
+    email: z50.string().email().max(254),
+    phone: z50.string().max(32).optional(),
+    note: z50.string().max(1e3).optional()
+  }).strict(),
+  hp: z50.string().optional(),
+  clientToken: z50.string().uuid(),
+  paymentChoice: bookingPaymentChoiceSchema2,
+  // Werbe-Einwilligung. Bestaetigung, Erinnerung und Storno-Link sind davon
+  // unabhaengig und werden immer versendet.
+  consent: z50.object({
+    marketingEmail: z50.boolean(),
+    marketingSms: z50.boolean()
+  }).strict().optional()
+}).strict();
+var bookingPublicPaymentResponseSchema2 = z50.object({
+  clientSecret: z50.string().min(1),
+  stripeAccountId: z50.string().startsWith("acct_")
+}).strict();
+var bookingCreateResponseSchema2 = z50.union([
+  z50.object({
+    status: z50.literal("confirmed"),
+    booking: z50.object({
+      id: z50.string().min(1),
+      startUtc: utcDateTimeSchema2,
+      endUtc: utcDateTimeSchema2,
+      timezone: z50.string().trim().min(1),
+      serviceName: z50.string().trim().min(1),
+      resourceName: z50.string().trim().min(1)
+    }).strict(),
+    manageUrl: z50.string().url(),
+    confirmationMessage: z50.string().nullable()
+  }).strict(),
+  z50.object({
+    status: z50.literal("pending_payment"),
+    bookingId: z50.string().min(1),
+    holdExpiresAt: utcDateTimeSchema2,
+    payment: bookingPublicPaymentResponseSchema2,
+    statusToken: z50.string().min(20),
+    manageUrl: z50.string().url().optional()
+  }).strict(),
+  bookingPublicErrorSchema2
+]);
+var bookingStatusResponseSchema2 = z50.object({
+  bookingStatus: bookingStatusSchema2,
+  paymentStatus: bookingPaymentStatusSchema2,
+  refundStatus: bookingRefundStatusSchema2,
+  disputeStatus: bookingDisputeStatusSchema2,
+  holdExpiresAt: utcDateTimeSchema2.nullable()
+}).strict();
+var bookingCancelRequestSchema2 = z50.object({
+  token: z50.string().min(20)
+});
+var bookingCancelResponseSchema2 = z50.union([
+  z50.object({
+    status: z50.enum(["cancelled", "already_cancelled", "too_late", "not_found"])
+  }),
+  bookingPublicErrorSchema2
+]);
+var bookingMoveErrorCodes2 = [
+  "slot_unavailable",
+  "booking_not_movable",
+  "not_found"
+];
+var bookingMoveRequestSchema2 = z50.object({
+  bookingId: z50.string().uuid(),
+  newStartUtc: utcDateTimeSchema2,
+  newResourceId: z50.string().uuid().optional(),
+  notifyCustomer: z50.boolean().default(false),
+  reason: z50.string().max(500).optional()
+});
+var bookingMoveResponseSchema2 = z50.union([
+  z50.object({
+    status: z50.literal("moved"),
+    bookingId: z50.string().uuid(),
+    startUtc: utcDateTimeSchema2,
+    endUtc: utcDateTimeSchema2,
+    resourceId: z50.string().uuid()
+  }),
+  z50.object({
+    error: z50.enum(bookingMoveErrorCodes2),
+    message: z50.string().optional(),
+    requestId: z50.string().optional()
+  })
+]);
+var bookingManifestSchema2 = z50.object({
+  schemaVersion: z50.number().int().positive(),
+  siteId: z50.string().trim().min(1),
+  siteKeyPrefix: z50.string().startsWith("bk_pub_"),
+  bookingPageSlug: z50.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).min(2).max(64),
+  embedMode: z50.enum(["script", "web_component", "iframe"]).optional(),
+  productionOrigin: z50.string().url().optional()
+}).passthrough();
+
+// ../shared/dist/booking-defaults.js
+var BOOKING_CREATE_PAYLOAD_LIMIT_BYTES2 = 16 * 1024;
+
+// ../shared/dist/bridge-protocol.js
+import { z as z58 } from "zod";
+
+// ../shared/dist/field-id.js
+import { z as z51 } from "zod";
+var FIELD_ID_PATTERN2 = /^[a-z][a-z0-9_-]*(\.[a-z][a-z0-9_-]*)+$/;
+var fieldIdSchema2 = z51.string().regex(FIELD_ID_PATTERN2, "Invalid field id");
+
+// ../shared/dist/field-types.js
+import { z as z52 } from "zod";
+var FIELD_TYPES2 = ["text", "longText", "image", "link"];
+var fieldTypeSchema2 = z52.enum(FIELD_TYPES2);
+
+// ../shared/dist/image-value.js
+import { z as z53 } from "zod";
+var SUPPORTED_IMAGE_CONTENT_TYPES2 = [
+  "image/jpeg",
+  "image/png",
+  "image/webp",
+  "image/avif"
+];
+var maxImageUploadBytes2 = 10 * 1024 * 1024;
+var largeImageWarningBytes2 = 2 * 1024 * 1024;
+var imageContentTypeSchema2 = z53.enum(SUPPORTED_IMAGE_CONTENT_TYPES2);
+var imageCropSchema2 = z53.object({
+  x: z53.number().min(0).max(100),
+  y: z53.number().min(0).max(100),
+  zoom: z53.number().min(1).max(4),
+  aspectRatio: z53.number().positive().max(10)
+});
+var imageValueSchema2 = z53.object({
+  src: z53.string().trim().min(1),
+  alt: z53.string().trim().min(1).max(300),
+  width: z53.number().int().positive().optional(),
+  height: z53.number().int().positive().optional(),
+  crop: imageCropSchema2.optional(),
+  assetId: z53.string().uuid().optional(),
+  finalStorageProvider: z53.enum([
+    "repo_static_assets",
+    "repo_handoff",
+    "site_owned_storage",
+    "siteplane_managed_fallback"
+  ]).optional()
+});
+
+// ../shared/dist/setup-deployment.js
+import { z as z54 } from "zod";
+var version2 = z54.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u);
+var siteSetupPackagesSchema2 = z54.object({
+  siteplane: version2,
+  runtimeNext: version2,
+  analytics: version2.optional()
+}).strict();
+var hash2 = z54.string().regex(/^sha256:[0-9a-f]{64}$/u);
+var setupDeploymentRecordSchema2 = z54.object({
+  version: z54.literal(1),
+  operationId: z54.string().uuid(),
+  provider: z54.literal("vercel"),
+  projectId: z54.string().regex(/^prj_[A-Za-z0-9]+$/u),
+  teamId: z54.string().regex(/^(?:team|user)_[A-Za-z0-9]+$/u),
+  origin: z54.string().url().refine((value) => {
+    const url = new URL(value);
+    return url.protocol === "https:" && url.origin === value && !url.username && !url.password;
+  }),
+  deploymentId: z54.string().regex(/^dpl_[A-Za-z0-9]+$/u).nullable(),
+  revision: z54.string().regex(/^[0-9a-f]{40}$/u),
+  fieldContractHash: hash2,
+  packages: siteSetupPackagesSchema2,
+  configurationFingerprint: hash2,
+  adminSecretGeneration: z54.string().uuid(),
+  revalidationGeneration: z54.number().int().positive(),
+  startedAt: z54.string().datetime(),
+  environmentWrittenAt: z54.string().datetime().nullable(),
+  deployRequestedAt: z54.string().datetime().nullable(),
+  deadline: z54.string().datetime(),
+  phase: z54.enum([
+    "planned",
+    "environment_written",
+    "deploy_requested",
+    "deployed",
+    "verified",
+    "failed"
+  ]),
+  build: z54.object({
+    node: version2,
+    packageManager: z54.enum(["npm", "pnpm"]),
+    packageManagerVersion: version2,
+    lockfileHash: hash2
+  }).strict().nullable()
+}).strict();
+var setupDeploymentInputSchema2 = z54.discriminatedUnion("action", [
+  z54.object({ action: z54.literal("read") }).strict(),
+  z54.object({
+    action: z54.literal("record"),
+    expectedOperationId: z54.string().uuid().nullable(),
+    record: setupDeploymentRecordSchema2
+  }).strict()
+]);
+
+// ../shared/dist/site-setup.js
+import { z as z57 } from "zod";
+
+// ../shared/dist/site-field-contract.js
+import { z as z56 } from "zod";
+
+// ../shared/dist/fallback-hash.js
+import { z as z55 } from "zod";
+var SAFE_REPRESENTATION_REASONS2 = [
+  "asset_import_rewritten",
+  "relative_url_normalized",
+  "line_endings_normalized",
+  "image_value_serialized"
+];
+var safeRepresentationReasonSchema2 = z55.enum(SAFE_REPRESENTATION_REASONS2);
+var linkFallbackSchema3 = z55.object({
+  href: z55.string().trim().min(1),
+  label: z55.string().trim().min(1).optional(),
+  target: z55.enum(["_self", "_blank"]).optional()
+}).passthrough();
+function stableJsonStringify2(value) {
+  return JSON.stringify(sortObjectKeys2(value));
+}
+function sortObjectKeys2(value) {
+  if (Array.isArray(value)) {
+    return value.map(sortObjectKeys2);
+  }
+  if (!value || typeof value !== "object") {
+    return value;
+  }
+  return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, entryValue]) => [key, sortObjectKeys2(entryValue)]));
+}
+
+// ../shared/dist/site-field-contract.js
+var siteFieldStatusSchema2 = z56.enum(["hidden", "active"]);
+var semanticVersionSchema2 = z56.string().regex(/^\d+\.\d+\.\d+$/u);
+var siteFieldRouteKeySchema2 = z56.string().trim().refine((value) => value === "$global" || value.startsWith("/") && !value.includes("?") && !value.includes("#") && (value === "/" || !value.endsWith("/")), "Route keys must be canonical paths or $global.");
+var repositoryRelativePosixPathSchema2 = z56.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.includes("\\") && !/^[a-z]:/iu.test(value) && !value.split("/").includes(".."), "Source paths must be repository-relative POSIX paths.");
+var sourceMappingSchema2 = z56.object({
+  kind: z56.literal("function"),
+  filePath: repositoryRelativePosixPathSchema2,
+  exportName: z56.string().trim().min(1).optional(),
+  sourcePath: z56.string().trim().min(1).optional(),
+  editTarget: fieldIdSchema2.optional()
+}).strict();
+var domMappingSchema2 = z56.object({
+  attribute: z56.literal("data-siteplane-field-id"),
+  previewStrategy: z56.enum(["dom", "event"])
+}).strict();
+var fieldBaseSchema2 = z56.object({
+  fieldId: fieldIdSchema2,
+  routeKey: siteFieldRouteKeySchema2,
+  source: sourceMappingSchema2,
+  dom: domMappingSchema2.optional()
+}).strict();
+var linkFallbackSchema4 = z56.object({
+  href: z56.string().trim().min(1),
+  label: z56.string().trim().min(1).optional(),
+  target: z56.enum(["_self", "_blank"]).optional()
+}).strict();
+var imageFallbackSchema2 = z56.object({
+  src: z56.string().trim().min(1),
+  alt: z56.string().trim().max(300),
+  width: z56.number().int().positive().optional(),
+  height: z56.number().int().positive().optional(),
+  crop: z56.object({
+    x: z56.number().min(0).max(100),
+    y: z56.number().min(0).max(100),
+    zoom: z56.number().min(1).max(4),
+    aspectRatio: z56.number().positive().max(10)
+  }).strict().optional()
+}).strict();
+var siteFieldContractFieldSchema2 = z56.discriminatedUnion("fieldType", [
+  fieldBaseSchema2.extend({
+    fieldType: z56.literal("text"),
+    fallback: z56.string()
+  }),
+  fieldBaseSchema2.extend({
+    fieldType: z56.literal("longText"),
+    fallback: z56.string()
+  }),
+  fieldBaseSchema2.extend({
+    fieldType: z56.literal("link"),
+    fallback: linkFallbackSchema4
+  }),
+  fieldBaseSchema2.extend({
+    fieldType: z56.literal("image"),
+    fallback: imageFallbackSchema2
+  })
+]);
+var siteFieldContractV1Schema2 = z56.object({
+  version: z56.literal(1),
+  fieldContractVersion: semanticVersionSchema2,
+  scannerContractVersion: semanticVersionSchema2,
+  fields: z56.array(siteFieldContractFieldSchema2)
+}).strict().superRefine((contract, context) => {
+  const seen = /* @__PURE__ */ new Set();
+  for (const [index, field] of contract.fields.entries()) {
+    if (seen.has(field.fieldId)) {
+      context.addIssue({
+        code: "custom",
+        message: `Duplicate field id: ${field.fieldId}`,
+        path: ["fields", index, "fieldId"]
+      });
+    }
+    seen.add(field.fieldId);
+  }
+});
+
+// ../shared/dist/site-setup.js
+var SITE_SETUP_RUN_STATUSES2 = [
+  "waiting_for_agent",
+  "working",
+  "action_required",
+  "ready_for_review",
+  "completed"
+];
+var SITE_SETUP_RUN_MODES2 = ["initial", "update"];
+var SITE_SETUP_ERROR_CODES2 = [
+  "action_required",
+  "deployment_evidence_required",
+  "field_contract_scan_failed",
+  "invalid_editor_definition",
+  "invalid_field_contract",
+  "missing_build_revision",
+  "missing_field_contract",
+  "review_locked",
+  "stale_deployment_contract",
+  "stale_field_contract",
+  "stale_setup_review",
+  "update_required"
+];
+var CONTINUE_SITE_SETUP_MAX_ITEMS2 = 50;
+var CONTINUE_SITE_SETUP_RENDERED_PATH_MAX_BYTES2 = 512;
+var CONTINUE_SITE_SETUP_VISIBLE_VALUE_MAX_BYTES2 = 256;
+var CONTINUE_SITE_SETUP_LOCATOR_HINT_MAX_BYTES2 = 512;
+var CONTINUE_SITE_SETUP_REQUESTED_LABEL_MAX_BYTES2 = 120;
+var CONTINUE_SITE_SETUP_REQUESTED_SECTION_MAX_BYTES2 = 120;
+var CONTINUE_SITE_SETUP_REQUESTED_SUBSECTION_MAX_BYTES2 = 120;
+var SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_LENGTH2 = 2e3;
+var SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_BYTES2 = 8e3;
+var CONTINUE_SITE_SETUP_ITEMS_MAX_BYTES2 = 32 * 1024;
+var CONTINUE_SITE_SETUP_HTTP_BODY_MAX_BYTES2 = 64 * 1024;
+var siteSetupRunStatusSchema2 = z57.enum(SITE_SETUP_RUN_STATUSES2);
+var siteSetupRunModeSchema2 = z57.enum(SITE_SETUP_RUN_MODES2);
+var siteSetupErrorCodeSchema2 = z57.enum(SITE_SETUP_ERROR_CODES2);
+var editorFieldSchema2 = z57.object({
+  fieldId: fieldIdSchema2,
+  label: z57.string().trim().min(1),
+  subsection: z57.string().trim().min(1).optional(),
+  description: z57.string().trim().min(1).optional(),
+  required: z57.boolean().optional(),
+  maxLength: z57.number().int().positive().optional()
+}).strict();
+var editorSectionSchema2 = z57.object({
+  label: z57.string().trim().min(1),
+  fields: z57.array(editorFieldSchema2).min(1)
+}).strict().superRefine((section, context) => {
+  const closedSubsections = /* @__PURE__ */ new Set();
+  let currentSubsection;
+  for (const [index, field] of section.fields.entries()) {
+    if (field.subsection === currentSubsection)
+      continue;
+    if (currentSubsection)
+      closedSubsections.add(currentSubsection);
+    currentSubsection = field.subsection;
+    if (currentSubsection && closedSubsections.has(currentSubsection)) {
+      context.addIssue({
+        code: "custom",
+        message: `Subgroup fields must stay contiguous: ${currentSubsection}`,
+        path: ["fields", index, "subsection"]
+      });
+    }
+  }
+});
+var editorRouteSchema2 = z57.object({
+  routeKey: siteFieldRouteKeySchema2,
+  previewPath: z57.string().trim().refine((path) => path.startsWith("/") && !path.startsWith("//") && !/[\\\[\]?#\s]/u.test(path) && (path === "/" || !path.endsWith("/")), "previewPath must be a concrete same-site path, for example /services/consultation.").optional(),
+  label: z57.string().trim().min(1),
+  sections: z57.array(editorSectionSchema2).min(1)
+}).strict().superRefine((route, context) => {
+  if (route.routeKey.includes("[") && !route.previewPath) {
+    context.addIssue({
+      code: "custom",
+      path: ["previewPath"],
+      message: "Dynamic editor routes need a previewPath for an existing page; keep the canonical routeKey unchanged."
+    });
+  }
+  const sections = /* @__PURE__ */ new Set();
+  for (const [index, section] of route.sections.entries()) {
+    if (sections.has(section.label)) {
+      context.addIssue({
+        code: "custom",
+        message: `Duplicate section label: ${section.label}`,
+        path: ["sections", index, "label"]
+      });
+    }
+    sections.add(section.label);
+  }
+});
+var editorDefinitionV1Schema2 = z57.object({
+  version: z57.literal(1),
+  routes: z57.array(editorRouteSchema2).min(1)
+}).strict().superRefine((definition, context) => {
+  const routes = /* @__PURE__ */ new Set();
+  const fields = /* @__PURE__ */ new Set();
+  for (const [routeIndex, route] of definition.routes.entries()) {
+    if (routes.has(route.routeKey)) {
+      context.addIssue({
+        code: "custom",
+        message: `Duplicate route key: ${route.routeKey}`,
+        path: ["routes", routeIndex, "routeKey"]
+      });
+    }
+    routes.add(route.routeKey);
+    for (const [sectionIndex, section] of route.sections.entries()) {
+      for (const [fieldIndex, field] of section.fields.entries()) {
+        if (fields.has(field.fieldId)) {
+          context.addIssue({
+            code: "custom",
+            message: `Duplicate editor field id: ${field.fieldId}`,
+            path: [
+              "routes",
+              routeIndex,
+              "sections",
+              sectionIndex,
+              "fields",
+              fieldIndex,
+              "fieldId"
+            ]
+          });
+        }
+        fields.add(field.fieldId);
+      }
+    }
+  }
+});
+var forbiddenControlOrBidi2 = /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/u;
+var forbiddenOwnerNoteControlOrBidi2 = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/u;
+var unsafeLocator2 = /<\/?[a-z][^>]*>|\b(?:javascript|data:text\/html)\s*:|\bon[a-z]+\s*=/iu;
+var renderedPathSchema2 = z57.string().trim().transform((value) => value !== "/" ? value.replace(/\/+$/u, "") : value).superRefine((value, context) => {
+  if (!value.startsWith("/") || value === "$global" || value.includes("?") || value.includes("#")) {
+    context.addIssue({
+      code: "custom",
+      message: "renderedPath must be a canonical real path."
+    });
+  }
+  addSafeByteIssues2(value, CONTINUE_SITE_SETUP_RENDERED_PATH_MAX_BYTES2, "renderedPath", context);
+});
+function normalizedSafeTextSchema2(maxBytes, label) {
+  return z57.string().transform((value) => value.trim().replace(new RegExp("\\p{White_Space}+", "gu"), " ")).pipe(z57.string().min(1)).superRefine((value, context) => {
+    addSafeByteIssues2(value, maxBytes, label, context);
+    if (label === "locatorHint" && unsafeLocator2.test(value)) {
+      context.addIssue({
+        code: "custom",
+        message: "locatorHint contains unsafe markup or executable content."
+      });
+    }
+  });
+}
+var correctionItemBase2 = {
+  renderedPath: renderedPathSchema2,
+  visibleValue: normalizedSafeTextSchema2(CONTINUE_SITE_SETUP_VISIBLE_VALUE_MAX_BYTES2, "visibleValue"),
+  locatorHint: normalizedSafeTextSchema2(CONTINUE_SITE_SETUP_LOCATOR_HINT_MAX_BYTES2, "locatorHint"),
+  requestedLabel: normalizedSafeTextSchema2(CONTINUE_SITE_SETUP_REQUESTED_LABEL_MAX_BYTES2, "requestedLabel").optional(),
+  requestedSection: normalizedSafeTextSchema2(CONTINUE_SITE_SETUP_REQUESTED_SECTION_MAX_BYTES2, "requestedSection").optional(),
+  requestedSubsection: normalizedSafeTextSchema2(CONTINUE_SITE_SETUP_REQUESTED_SUBSECTION_MAX_BYTES2, "requestedSubsection").optional(),
+  requestedSortOrder: z57.number().int().nonnegative().optional()
+};
+var setupCorrectionItemSchema2 = z57.discriminatedUnion("kind", [
+  z57.object({ kind: z57.literal("text"), ...correctionItemBase2 }).strict(),
+  z57.object({ kind: z57.literal("link"), ...correctionItemBase2 }).strict(),
+  z57.object({ kind: z57.literal("image"), ...correctionItemBase2 }).strict()
+]).superRefine((item, context) => {
+  if (item.requestedSubsection && !item.requestedSection) {
+    context.addIssue({
+      code: "custom",
+      message: "requestedSubsection requires requestedSection.",
+      path: ["requestedSubsection"]
+    });
+  }
+});
+var setupCorrectionItemsSchema2 = z57.array(setupCorrectionItemSchema2).max(CONTINUE_SITE_SETUP_MAX_ITEMS2).superRefine((items, context) => {
+  const bytes = utf8Bytes2(stableJsonStringify2(items));
+  if (bytes > CONTINUE_SITE_SETUP_ITEMS_MAX_BYTES2) {
+    context.addIssue({
+      code: "custom",
+      message: "Correction items exceed the 32 KiB canonical payload limit."
+    });
+  }
+});
+var siteSetupOwnerEditabilityNoteSchema2 = z57.string().max(SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_LENGTH2).superRefine((value, context) => {
+  if (utf8Bytes2(value) > SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_BYTES2) {
+    context.addIssue({
+      code: "custom",
+      message: `ownerEditabilityNote exceeds ${SITE_SETUP_OWNER_EDITABILITY_NOTE_MAX_BYTES2} UTF-8 bytes.`
+    });
+  }
+  if (forbiddenOwnerNoteControlOrBidi2.test(value)) {
+    context.addIssue({
+      code: "custom",
+      message: "ownerEditabilityNote contains a forbidden control or bidi character."
+    });
+  }
+});
+var SITE_SETUP_MODULE_SCOPES2 = {
+  editing: ["setup:read", "setup:write"],
+  analytics: [
+    "analytics:setup",
+    "analytics:sync",
+    "analytics:test",
+    "analytics:readiness",
+    "analytics:agent_instructions",
+    "analytics:public_key_read"
+  ]
+};
+var siteSetupModulesSchema2 = z57.array(z57.enum(["editing", "analytics"])).min(1).max(2).refine((modules) => modules[0] === "editing" && (modules.length === 1 || modules[1] === "analytics"), "Choose Editing with optional Analytics.");
+function siteSetupScopes2(modules) {
+  return modules.flatMap((module) => [...SITE_SETUP_MODULE_SCOPES2[module]]);
+}
+function hasExactSiteSetupScopes2(scopes, modules) {
+  const matches = (expected) => scopes.length === expected.length && expected.every((scope) => scopes.includes(scope));
+  return modules ? matches(siteSetupScopes2(modules)) : matches(siteSetupScopes2(["editing"])) || matches(siteSetupScopes2(["editing", "analytics"]));
+}
+var siteSetupActivityInputSchema2 = z57.object({
+  phase: z57.enum([
+    "inspecting",
+    "integrating",
+    "deploying",
+    "verifying",
+    "repairing"
+  ]),
+  textId: z57.enum([
+    "inspecting",
+    "integrating",
+    "deploying",
+    "verifying",
+    "repairing"
+  ])
+}).strict().refine((value) => value.phase === value.textId, "Activity text must describe its phase.");
+var nextActionFields2 = {
+  actor: z57.enum(["agent", "user", "siteplane"]),
+  boundary: z57.enum([
+    "source",
+    "environment",
+    "deployment",
+    "verification",
+    "authorization",
+    "review"
+  ]),
+  precondition: z57.string().min(1).max(1e3),
+  instruction: z57.string().min(1).max(2e3),
+  expectedEvidence: z57.string().min(1).max(1e3)
+};
+var siteSetupNextActionSchema2 = z57.discriminatedUnion("kind", [
+  z57.object({
+    ...nextActionFields2,
+    kind: z57.literal("run_command"),
+    command: z57.string().min(1).max(500)
+  }).strict(),
+  z57.object({ ...nextActionFields2, kind: z57.literal("agent_edit") }).strict(),
+  z57.object({ ...nextActionFields2, kind: z57.literal("needs_user_action") }).strict(),
+  z57.object({ ...nextActionFields2, kind: z57.literal("wait") }).strict(),
+  z57.object({ ...nextActionFields2, kind: z57.literal("done") }).strict()
+]);
+var siteSetupTaskRunSchema2 = z57.object({
+  runId: z57.string().uuid(),
+  mode: siteSetupRunModeSchema2,
+  status: siteSetupRunStatusSchema2,
+  fieldContractHash: z57.string().nullable(),
+  deploymentOrigin: z57.string().url().nullable(),
+  deploymentRevision: z57.string().nullable(),
+  publicRuntimeKeyId: z57.string().uuid().nullable(),
+  reviewVersion: z57.number().int().positive()
+}).strict();
+var siteSetupTaskProgressSchema2 = z57.object({
+  progressStage: z57.enum([
+    "waiting_for_connection",
+    "agent_connected",
+    "project_context_loaded",
+    "fields_prepared",
+    "deployment_verification",
+    "ready_for_review",
+    "action_required",
+    "completed"
+  ]),
+  lastVerifiedAt: z57.string().datetime().nullable(),
+  lastActivityAt: z57.string().datetime(),
+  activitySource: z57.enum(["user", "server", "agent"]),
+  activityPhase: siteSetupActivityInputSchema2.shape.phase.nullable(),
+  activityTextId: siteSetupActivityInputSchema2.shape.textId.nullable()
+}).strict();
+var siteSetupTaskSchema2 = z57.object({
+  contractVersion: z57.literal("siteplane.setup-task.v2"),
+  workflow: z57.enum(["initial_setup", "structure_update"]),
+  goal: z57.string().min(1),
+  modules: siteSetupModulesSchema2,
+  authorizationVersion: z57.number().int().positive(),
+  authorizedScopes: z57.array(z57.string()).min(2),
+  site: z57.object({
+    siteId: z57.string().uuid(),
+    portalPath: z57.string(),
+    adminOrigin: z57.string().url()
+  }).strict().nullable(),
+  run: siteSetupTaskRunSchema2.nullable(),
+  progress: siteSetupTaskProgressSchema2.nullable(),
+  deployment: setupDeploymentRecordSchema2.nullable(),
+  revalidationGeneration: z57.number().int().positive(),
+  assignment: z57.enum(["owned", "provisional", "claimed"]),
+  deadline: z57.string().datetime().nullable(),
+  userInstructions: z57.object({
+    text: siteSetupOwnerEditabilityNoteSchema2,
+    source: z57.literal("user"),
+    trust: z57.literal("untrusted")
+  }).strict(),
+  corrections: setupCorrectionItemsSchema2,
+  contentSelectionSummary: z57.object({
+    text: siteSetupOwnerEditabilityNoteSchema2,
+    source: z57.literal("agent"),
+    trust: z57.literal("untrusted")
+  }).strict().nullable(),
+  environmentBindings: z57.array(z57.object({
+    name: z57.string().regex(/^[A-Z][A-Z0-9_]+$/u),
+    source: z57.string().min(1),
+    sensitivity: z57.enum(["public", "secret"]),
+    usage: z57.enum(["build", "server", "build_and_server"]),
+    evidence: z57.string().min(1)
+  }).strict()),
+  nextAction: siteSetupNextActionSchema2,
+  error: z57.object({
+    code: z57.string().regex(/^[a-z0-9_.]+$/u).max(160),
+    boundary: nextActionFields2.boundary,
+    responsibleActor: nextActionFields2.actor,
+    retryable: z57.boolean(),
+    retryAfter: z57.number().int().nonnegative().nullable(),
+    requestId: z57.string().regex(/^[A-Za-z0-9_-]+$/u).max(128)
+  }).strict().nullable(),
+  packages: siteSetupPackagesSchema2,
+  communication: z57.object({
+    beforeSourceChanges: z57.string().min(1),
+    updates: z57.array(z57.string().min(1)).min(1),
+    blocker: z57.string().min(1)
+  }).strict(),
+  discovery: z57.object({
+    inspectPublicRoutes: z57.boolean(),
+    contentKinds: z57.array(z57.enum(["text", "longText", "link", "image"])).min(1),
+    rules: z57.array(z57.string().min(1)).min(1)
+  }).strict(),
+  steps: z57.array(z57.object({
+    id: z57.enum([
+      "inspect_repository",
+      "install_packages",
+      "instrument_fields",
+      "apply_contract",
+      "deploy_production",
+      "verify_deployment"
+    ]),
+    instruction: z57.string().min(1)
+  }).strict()).length(6),
+  completion: z57.object({
+    verifiedStatus: z57.literal("ready_for_review"),
+    instruction: z57.string().min(1)
+  }).strict()
+}).strict().refine((task) => hasExactSiteSetupScopes2(task.authorizedScopes, task.modules), "Task scopes must exactly match its modules.").refine((task) => task.modules.includes("analytics") === (task.packages.analytics !== void 0), "The Analytics package pin must be present exactly when Analytics is selected.");
+var canonicalHashSchema2 = z57.string().regex(/^sha256:[0-9a-f]{64}$/iu);
+var deploymentRevisionSchema2 = normalizedSafeTextSchema2(256, "deploymentRevision");
+var continueSiteSetupInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  runId: z57.string().uuid(),
+  expectedReviewVersion: z57.number().int().positive(),
+  mutationId: z57.string().uuid(),
+  intent: z57.enum(["continue_review", "correct_completed_review"]),
+  expectedFieldContractHash: canonicalHashSchema2,
+  expectedDeploymentRevision: deploymentRevisionSchema2,
+  correctionItems: setupCorrectionItemsSchema2,
+  ownerEditabilityNote: siteSetupOwnerEditabilityNoteSchema2.optional()
+}).strict();
+var saveSiteSetupOwnerNoteInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  runId: z57.string().uuid(),
+  expectedReviewVersion: z57.number().int().positive(),
+  expectedFieldContractHash: canonicalHashSchema2,
+  expectedDeploymentRevision: deploymentRevisionSchema2,
+  ownerEditabilityNote: siteSetupOwnerEditabilityNoteSchema2
+}).strict();
+var setupReviewPreferenceSelectionSchema2 = z57.object({
+  analyticsMode: z57.enum(["disabled", "session_only"]).nullable(),
+  assetTargetType: z57.enum(["repo_static_assets", "siteplane_managed_fallback"]).nullable(),
+  assetTargetId: z57.string().uuid().nullable()
+}).strict().refine((value) => value.assetTargetType !== null || value.assetTargetId === null, {
+  message: "An asset target requires its delivery type."
+});
+var setupReviewPreferencesSchema2 = setupReviewPreferenceSelectionSchema2.safeExtend({
+  managedHostingApproved: z57.boolean()
+});
+var saveSetupReviewPreferencesInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  runId: z57.string().uuid(),
+  expectedReviewVersion: z57.number().int().positive(),
+  preferences: setupReviewPreferenceSelectionSchema2
+}).strict();
+var siteSetupContextInputSchema2 = z57.object({}).strict();
+var siteSetupApplyInputSchema2 = z57.object({
+  fieldContract: siteFieldContractV1Schema2,
+  editorDefinition: editorDefinitionV1Schema2,
+  contentSelectionSummary: siteSetupOwnerEditabilityNoteSchema2.refine((text) => text.trim().length > 0, "Describe the selected content, important exclusions and any open gaps.")
+}).strict().superRefine((input, context) => {
+  const contractRoutesByFieldId = new Map(input.fieldContract.fields.map((field) => [
+    field.fieldId,
+    field.routeKey
+  ]));
+  const definitionFieldIds = /* @__PURE__ */ new Set();
+  for (const [routeIndex, route] of input.editorDefinition.routes.entries()) {
+    for (const [sectionIndex, section] of route.sections.entries()) {
+      for (const [fieldIndex, field] of section.fields.entries()) {
+        const fieldPath = [
+          "editorDefinition",
+          "routes",
+          routeIndex,
+          "sections",
+          sectionIndex,
+          "fields",
+          fieldIndex,
+          "fieldId"
+        ];
+        const contractRouteKey = contractRoutesByFieldId.get(field.fieldId);
+        const contractField = input.fieldContract.fields.find((candidate) => candidate.fieldId === field.fieldId);
+        definitionFieldIds.add(field.fieldId);
+        if (!contractRouteKey) {
+          context.addIssue({
+            code: "custom",
+            message: `Unknown editor field id: ${field.fieldId}`,
+            path: fieldPath
+          });
+        } else if (contractRouteKey !== route.routeKey) {
+          context.addIssue({
+            code: "custom",
+            message: `Editor field ${field.fieldId} must use route ${contractRouteKey}.`,
+            path: fieldPath
+          });
+        } else if (field.maxLength !== void 0 && contractField?.fieldType !== "text" && contractField?.fieldType !== "longText") {
+          context.addIssue({
+            code: "custom",
+            message: `maxLength is not supported for ${contractField?.fieldType ?? "unknown"} fields.`,
+            path: [
+              "editorDefinition",
+              "routes",
+              routeIndex,
+              "sections",
+              sectionIndex,
+              "fields",
+              fieldIndex,
+              "maxLength"
+            ]
+          });
+        }
+      }
+    }
+  }
+  for (const field of input.fieldContract.fields) {
+    if (!definitionFieldIds.has(field.fieldId)) {
+      context.addIssue({
+        code: "custom",
+        message: `Missing editor field id: ${field.fieldId}`,
+        path: ["editorDefinition", "routes"]
+      });
+    }
+  }
+});
+var siteSetupVerifyInputSchema2 = z57.object({
+  deploymentUrl: z57.string().url().refine((value) => value.startsWith("https://")),
+  deploymentRevision: deploymentRevisionSchema2,
+  wait: z57.boolean().optional()
+}).strict();
+var siteSetupEvidenceInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  runId: z57.string().uuid(),
+  expectedFieldContractHash: canonicalHashSchema2,
+  expectedDeploymentOrigin: z57.string().url().refine((value) => value.startsWith("https://")),
+  expectedDeploymentRevision: deploymentRevisionSchema2,
+  publicRuntimeKeyId: z57.string().uuid(),
+  bridgeSessionId: normalizedSafeTextSchema2(256, "bridgeSessionId"),
+  observations: z57.array(z57.object({
+    fieldId: fieldIdSchema2,
+    fieldType: fieldTypeSchema2,
+    routeKey: siteFieldRouteKeySchema2,
+    renderedPath: renderedPathSchema2,
+    targetResolved: z57.boolean(),
+    previewAck: z57.boolean()
+  }).strict().refine((value) => !value.previewAck || value.targetResolved, "Preview ACK requires a resolved target.")).min(1).max(200)
+}).strict();
+var completeSetupReviewInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  runId: z57.string().uuid(),
+  expectedReviewVersion: z57.number().int().positive(),
+  expectedFieldContractHash: canonicalHashSchema2,
+  expectedDeploymentRevision: deploymentRevisionSchema2,
+  expectedReadyFingerprint: canonicalHashSchema2
+}).strict();
+var activateSiteSetupInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  runId: z57.string().uuid(),
+  expectedReviewVersion: z57.number().int().positive(),
+  expectedSnapshotHash: canonicalHashSchema2
+}).strict();
+var refreshSiteSetupDeploymentInputSchema2 = z57.object({
+  siteId: z57.string().uuid(),
+  deploymentUrl: z57.string().url().refine((value) => value.startsWith("https://")),
+  deploymentRevision: deploymentRevisionSchema2
+}).strict();
+function addSafeByteIssues2(value, maxBytes, label, context) {
+  if (utf8Bytes2(value) > maxBytes) {
+    context.addIssue({
+      code: "custom",
+      message: `${label} exceeds ${maxBytes} UTF-8 bytes.`
+    });
+  }
+  if (forbiddenControlOrBidi2.test(value)) {
+    context.addIssue({
+      code: "custom",
+      message: `${label} contains a forbidden control or bidi character.`
+    });
+  }
+}
+function utf8Bytes2(value) {
+  return new TextEncoder().encode(value).byteLength;
+}
+var setupActivationApprovalSchema2 = z57.object({
+  reviewVersion: z57.number().int().positive(),
+  snapshotHash: canonicalHashSchema2,
+  analytics: z57.object({
+    status: z57.enum(["active", "skipped"]),
+    reviewVersion: z57.number().int().positive(),
+    generation: z57.number().int().nonnegative()
+  }).optional()
+});
+var activateSetupModulesInputSchema2 = activateSiteSetupInputSchema2.extend({
+  analytics: z57.discriminatedUnion("decision", [
+    z57.object({ decision: z57.literal("pending") }).strict(),
+    z57.object({
+      decision: z57.literal("enable"),
+      readinessTestRunId: z57.string().regex(/^analytics_owner_[0-9a-f-]{36}$/u),
+      expectedInstallationGeneration: z57.number().int().positive(),
+      measurementApproved: z57.literal(true)
+    }).strict(),
+    z57.object({
+      decision: z57.literal("skip"),
+      expectedInstallationGeneration: z57.number().int().nonnegative(),
+      continueWithoutAnalytics: z57.literal(true)
+    }).strict()
+  ])
+}).strict();
+
+// ../shared/dist/bridge-protocol.js
+var BRIDGE_PROTOCOL_VERSION2 = 2;
+var bridgeRectSchema2 = z58.object({
+  x: z58.number(),
+  y: z58.number(),
+  width: z58.number().nonnegative(),
+  height: z58.number().nonnegative()
+});
+var previewTextValueSchema2 = z58.object({
+  fieldType: z58.enum(["text", "longText"]),
+  value: z58.string()
+});
+var previewLinkValueSchema2 = z58.object({
+  fieldType: z58.literal("link"),
+  value: z58.object({
+    href: z58.string().trim().min(1),
+    label: z58.string().trim().min(1).optional()
+  })
+});
+var previewImageValueSchema2 = z58.object({
+  fieldType: z58.literal("image"),
+  value: imageValueSchema2
+});
+var bridgePreviewValueSchema2 = z58.discriminatedUnion("fieldType", [
+  previewTextValueSchema2,
+  previewLinkValueSchema2,
+  previewImageValueSchema2
+]);
+var fieldSelectionModeSchema2 = z58.enum(["replace", "range", "toggle"]);
+var fieldBridgeMissingContentActionSchema2 = z58.enum([
+  "add",
+  "select",
+  "remove"
+]);
+var FIELD_BRIDGE_MESSAGE_TYPES2 = [
+  "siteplane:field-bridge:init",
+  "siteplane:field-bridge:ready",
+  "siteplane:field-bridge:fields",
+  "siteplane:field-bridge:select-field",
+  "siteplane:field-bridge:set-selected-field",
+  "siteplane:field-bridge:apply-preview-values",
+  "siteplane:field-bridge:test-preview-values",
+  "siteplane:field-bridge:preview-ack",
+  "siteplane:field-bridge:set-visual-control-state",
+  "siteplane:field-bridge:missing-content",
+  "siteplane:field-bridge:preview-scrolled",
+  "siteplane:field-bridge:analytics-probe",
+  "siteplane:field-bridge:analytics-probe-result",
+  "siteplane:field-bridge:error"
+];
+var canonicalFieldContractHashSchema2 = z58.string().regex(/^sha256:[0-9a-f]{64}$/u);
+var bridgeSectionSchema2 = z58.string().trim().min(1).max(256);
+var realRenderedPathSchema2 = z58.string().trim().refine((value) => value.startsWith("/") && value !== "$global" && !value.includes("?") && !value.includes("#"), "A field bridge rendered path must be a real canonical path.");
+var fieldBridgeIdentitySchema2 = z58.object({
+  publicRuntimeKeyId: z58.string().uuid(),
+  fieldContractHash: canonicalFieldContractHashSchema2,
+  deploymentRevision: z58.string().trim().min(1).max(256)
+}).strict();
+var setupPreviewAccessSchema2 = z58.object({
+  capability: z58.string().regex(/^v1\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]{43}$/u).max(4096),
+  expiresAt: z58.string().datetime()
+}).strict();
+var setupPreviewReadSchema2 = fieldBridgeIdentitySchema2.extend({
+  scope: z58.literal("setup_preview"),
+  siteId: z58.string().uuid(),
+  runId: z58.string().uuid(),
+  bridgeSessionId: z58.string().min(1),
+  expiresAt: z58.string().datetime(),
+  contract: siteFieldContractV1Schema2
+}).strict();
+var fieldBridgeBaseSchema2 = z58.object({
+  version: z58.literal(BRIDGE_PROTOCOL_VERSION2),
+  type: z58.enum(FIELD_BRIDGE_MESSAGE_TYPES2),
+  siteId: z58.string().uuid(),
+  sessionId: z58.string().trim().min(1),
+  publicRuntimeKeyId: z58.string().uuid(),
+  fieldContractHash: canonicalFieldContractHashSchema2,
+  deploymentRevision: z58.string().trim().min(1).max(256),
+  requestId: z58.string().trim().min(1),
+  sentAt: z58.string().datetime()
+}).strict();
+var fieldBridgeFieldSchema2 = z58.object({
+  fieldId: fieldIdSchema2,
+  fieldType: fieldTypeSchema2,
+  routeKey: siteFieldRouteKeySchema2,
+  renderedPath: realRenderedPathSchema2,
+  sourcePath: z58.string().trim().min(1).optional(),
+  editTarget: fieldIdSchema2,
+  rect: bridgeRectSchema2,
+  targetResolved: z58.literal(true),
+  currentValue: bridgePreviewValueSchema2.optional()
+}).strict();
+var fieldBridgeInitMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:init"),
+  payload: z58.object({
+    adminOrigin: z58.string().url(),
+    customerOrigin: z58.string().url(),
+    renderedPath: realRenderedPathSchema2,
+    setupPreview: setupPreviewAccessSchema2.optional()
+  }).strict()
+});
+var fieldBridgeReadyMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:ready"),
+  payload: z58.object({
+    renderedPath: realRenderedPathSchema2,
+    fieldCount: z58.number().int().nonnegative(),
+    capabilities: z58.tuple([
+      z58.literal("field_selection"),
+      z58.literal("preview_values"),
+      z58.literal("field_evidence"),
+      z58.literal("visual_field_control")
+    ]).rest(z58.enum(["analytics_preview_readiness", "setup_preview"])).refine((capabilities) => capabilities.length <= 6)
+  }).strict()
+});
+var fieldBridgeFieldsMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:fields"),
+  payload: z58.object({
+    renderedPath: realRenderedPathSchema2,
+    fields: z58.array(fieldBridgeFieldSchema2)
+  }).strict()
+});
+var fieldBridgeSelectFieldMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:select-field"),
+  payload: z58.object({
+    fieldId: fieldIdSchema2,
+    selectionMode: fieldSelectionModeSchema2
+  }).strict()
+});
+var fieldBridgeSetSelectedFieldMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:set-selected-field"),
+  payload: z58.object({
+    fieldIds: z58.array(fieldIdSchema2).max(200),
+    primaryFieldId: fieldIdSchema2.nullable(),
+    scrollIntoView: z58.boolean().optional()
+  }).strict().superRefine((value, context) => {
+    if (value.fieldIds.length > 0 && value.primaryFieldId === null) {
+      context.addIssue({
+        code: "custom",
+        message: "A non-empty selection needs a primary field.",
+        path: ["primaryFieldId"]
+      });
+    }
+    if (value.primaryFieldId !== null && !value.fieldIds.includes(value.primaryFieldId)) {
+      context.addIssue({
+        code: "custom",
+        message: "The primary field must be part of the selection.",
+        path: ["primaryFieldId"]
+      });
+    }
+  })
+});
+var fieldBridgeApplyPreviewValuesMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:apply-preview-values"),
+  payload: z58.object({ values: z58.record(fieldIdSchema2, bridgePreviewValueSchema2) }).strict()
+});
+var fieldBridgeTestPreviewValuesMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:test-preview-values"),
+  payload: z58.object({ fieldIds: z58.array(fieldIdSchema2).min(1).max(200) }).strict()
+});
+var fieldBridgePreviewAckMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:preview-ack"),
+  payload: z58.object({
+    ackRequestId: z58.string().trim().min(1),
+    kind: z58.enum(["apply", "test"]),
+    renderedPath: realRenderedPathSchema2,
+    fieldIds: z58.array(fieldIdSchema2).max(200)
+  }).strict()
+});
+var fieldBridgeSetVisualControlStateMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:set-visual-control-state"),
+  payload: z58.object({
+    enabled: z58.boolean(),
+    fieldProximityEnabled: z58.boolean(),
+    pendingKeys: z58.array(z58.string().trim().min(1).max(2048)).max(50),
+    activeFieldIds: z58.array(fieldIdSchema2),
+    fieldSections: z58.record(fieldIdSchema2, bridgeSectionSchema2),
+    selectedPending: z58.array(z58.object({
+      key: z58.string().trim().min(1).max(2048),
+      locatorHint: z58.string().trim().min(1).max(2048)
+    }).strict()).max(50),
+    scrollPendingIntoView: z58.boolean().optional()
+  }).strict()
+});
+var fieldBridgeMissingContentMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:missing-content"),
+  payload: z58.object({
+    action: fieldBridgeMissingContentActionSchema2,
+    item: setupCorrectionItemSchema2,
+    suggestedSection: bridgeSectionSchema2.optional()
+  }).strict()
+});
+var fieldBridgePreviewScrolledMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:preview-scrolled"),
+  payload: z58.object({ renderedPath: realRenderedPathSchema2 }).strict()
+});
+var analyticsPreviewChallengeSchema2 = z58.object({
+  bridgeSessionId: z58.string().uuid(),
+  challenge: z58.string().min(32).max(512),
+  testRunId: z58.string().trim().min(1).max(160),
+  expiresAt: z58.string().datetime()
+}).strict();
+var fieldBridgeAnalyticsProbeSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:analytics-probe"),
+  requestId: z58.string().min(1).max(256),
+  payload: analyticsPreviewChallengeSchema2
+});
+var fieldBridgeAnalyticsProbeResultSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:analytics-probe-result"),
+  payload: z58.object({
+    ackRequestId: z58.string().min(1).max(256),
+    status: z58.enum(["recorded", "failed"])
+  }).strict()
+});
+var fieldBridgeErrorMessageSchema2 = fieldBridgeBaseSchema2.extend({
+  type: z58.literal("siteplane:field-bridge:error"),
+  payload: z58.object({
+    code: z58.string().trim().min(1),
+    message: z58.string().trim().min(1),
+    recoverable: z58.boolean().default(false)
+  }).strict()
+});
+var fieldBridgeMessageSchema2 = z58.discriminatedUnion("type", [
+  fieldBridgeInitMessageSchema2,
+  fieldBridgeReadyMessageSchema2,
+  fieldBridgeFieldsMessageSchema2,
+  fieldBridgeSelectFieldMessageSchema2,
+  fieldBridgeSetSelectedFieldMessageSchema2,
+  fieldBridgeApplyPreviewValuesMessageSchema2,
+  fieldBridgeTestPreviewValuesMessageSchema2,
+  fieldBridgePreviewAckMessageSchema2,
+  fieldBridgeSetVisualControlStateMessageSchema2,
+  fieldBridgeMissingContentMessageSchema2,
+  fieldBridgePreviewScrolledMessageSchema2,
+  fieldBridgeErrorMessageSchema2,
+  fieldBridgeAnalyticsProbeSchema2,
+  fieldBridgeAnalyticsProbeResultSchema2
+]);
+
+// ../shared/dist/commands.js
+import { z as z60 } from "zod";
+
+// ../shared/dist/errors.js
+import { z as z59 } from "zod";
+var UI_ERROR_CATEGORIES2 = [
+  "site_member",
+  "workspace_member",
+  "internal"
+];
+var uiErrorCategorySchema2 = z59.enum(UI_ERROR_CATEGORIES2);
+var commandErrorPayloadSchema2 = z59.object({
+  code: z59.string().min(1),
+  message: z59.string().min(1),
+  category: uiErrorCategorySchema2,
+  details: z59.record(z59.string(), z59.unknown()).optional()
+});
+
+// ../shared/dist/commands.js
+var commandSuccessSchema2 = z60.object({
+  ok: z60.literal(true),
+  data: z60.unknown()
+});
+var commandErrorSchema2 = z60.object({
+  ok: z60.literal(false),
+  error: commandErrorPayloadSchema2
+});
+var commandResultSchema2 = z60.discriminatedUnion("ok", [
+  commandSuccessSchema2,
+  commandErrorSchema2
+]);
+
+// ../shared/dist/editor-settings.js
+import { z as z61 } from "zod";
+var editorColorSchemeSchema2 = z61.enum([
+  "paper",
+  "slate",
+  "siteplane",
+  "bloom"
+]);
+var editorColorSchemes2 = editorColorSchemeSchema2.options;
+var editorColorModeSchema2 = z61.enum(["light", "dark"]);
+var editorColorModes2 = editorColorModeSchema2.options;
+
+// ../shared/dist/site-slug.js
+import { z as z62 } from "zod";
+var SITE_SLUG_PATTERN2 = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var RESERVED_SITE_SLUGS2 = /* @__PURE__ */ new Set([
+  "account",
+  "admin",
+  "api",
+  "app",
+  "auth",
+  "book",
+  "claim",
+  "dev",
+  "login",
+  "new",
+  "portal",
+  "support",
+  "workspace"
+]);
+var siteSlugSchema2 = z62.string().regex(SITE_SLUG_PATTERN2, "Invalid site slug").refine((value) => !RESERVED_SITE_SLUGS2.has(value), "Reserved site slug");
+
+// ../shared/dist/entitlements.js
+import { z as z63 } from "zod";
+var entitlementSnapshotSchema2 = z63.object({
+  planKey: z63.string().trim().min(1),
+  sitesLimit: z63.number().int().positive(),
+  siteMembersPerSiteLimit: z63.number().int().positive(),
+  customAdminDomainsEnabled: z63.boolean(),
+  agentMcpEnabled: z63.boolean(),
+  emailNotificationsEnabled: z63.boolean(),
+  analyticsEnabled: z63.boolean(),
+  analyticsSitesLimit: z63.number().int().min(0),
+  analyticsPortalPerformanceEnabled: z63.boolean(),
+  analyticsMonthlyReportsEnabled: z63.boolean(),
+  analyticsAiSummaryEnabled: z63.boolean(),
+  analyticsRawEventRetentionDays: z63.number().int().min(1).max(ANALYTICS_RETENTION_DEFAULTS2.maxRawEventRetentionDaysWithoutAdr),
+  analyticsMonthlyEventLimit: z63.number().int().min(0),
+  bookingEnabled: z63.boolean().default(false),
+  bookingSitesLimit: z63.number().int().min(0).default(0),
+  bookingPortalManagementEnabled: z63.boolean().default(false),
+  bookingResourcesPerSiteLimit: z63.number().int().min(0).default(0),
+  bookingServicesPerSiteLimit: z63.number().int().min(0).default(0),
+  bookingMonthlyBookingsLimit: z63.number().int().min(0).default(0),
+  bookingRemindersEnabled: z63.boolean().default(false)
+});
+var EARLY_ACCESS_PLAN2 = {
+  planKey: "early_access_2026",
+  sitesLimit: 3,
+  siteMembersPerSiteLimit: 5,
+  customAdminDomainsEnabled: true,
+  agentMcpEnabled: true,
+  emailNotificationsEnabled: true,
+  analyticsEnabled: true,
+  analyticsSitesLimit: 3,
+  analyticsPortalPerformanceEnabled: false,
+  analyticsMonthlyReportsEnabled: false,
+  analyticsAiSummaryEnabled: false,
+  analyticsRawEventRetentionDays: ANALYTICS_RETENTION_DEFAULTS2.enabledRawEventRetentionDays,
+  analyticsMonthlyEventLimit: 0,
+  bookingEnabled: true,
+  bookingSitesLimit: 3,
+  bookingPortalManagementEnabled: true,
+  bookingResourcesPerSiteLimit: 10,
+  bookingServicesPerSiteLimit: 50,
+  bookingMonthlyBookingsLimit: 0,
+  bookingRemindersEnabled: true
+};
+
+// ../shared/dist/first-party-image-upload.js
+var maxFirstPartyImageUploadBytes2 = 4 * 1024 * 1024;
+
+// ../shared/dist/readiness.js
+import { z as z64 } from "zod";
+var READINESS_CHECK_KEYS2 = [
+  "agent_instructions_installed",
+  "runtime_package_connected",
+  "secure_server_access_configured",
+  "preview_bridge_working",
+  "admin_access_url_selected",
+  "default_publishing_mode_selected"
+];
+var READINESS_STATUSES2 = [
+  "pending",
+  "passing",
+  "failing",
+  "warning"
+];
+var readinessCheckKeySchema2 = z64.enum(READINESS_CHECK_KEYS2);
+var readinessStatusSchema2 = z64.enum(READINESS_STATUSES2);
+
+// ../shared/dist/site.js
+import { z as z65 } from "zod";
+var SITE_STATUSES2 = [
+  "setup",
+  "active",
+  "disabled",
+  "archived"
+];
+var siteStatusSchema2 = z65.enum(SITE_STATUSES2);
+var websiteUrlSchema2 = z65.string().trim().url().refine((value) => value.startsWith("https://") || value.startsWith("http://"), "Website URL must use http or https");
+
+// ../shared/dist/setup-assets.js
+import { z as z66 } from "zod";
+var configureSetupAssetTargetInputSchema2 = z66.object({
+  siteId: z66.string().uuid(),
+  runId: z66.string().uuid(),
+  expectedReviewVersion: z66.number().int().positive(),
+  expectedSnapshotHash: z66.string().regex(/^sha256:[0-9a-f]{64}$/u),
+  mutationId: z66.string().uuid(),
+  expectedApprovalId: z66.string().uuid().nullable(),
+  targetId: z66.string().uuid().nullable(),
+  targetType: z66.enum(["repo_static_assets", "siteplane_managed_fallback"]),
+  approveManagedHosting: z66.boolean()
+}).strict().refine((value) => value.targetType === "siteplane_managed_fallback" || !value.approveManagedHosting);
+var setupAssetTargetApprovalSchema2 = z66.object({
+  id: z66.string().uuid(),
+  runId: z66.string().uuid(),
+  reviewVersion: z66.number().int().positive(),
+  snapshotHash: z66.string().regex(/^sha256:[0-9a-f]{64}$/u),
+  targetId: z66.string().uuid(),
+  targetType: z66.enum(["repo_static_assets", "siteplane_managed_fallback"]),
+  targetRevision: z66.number().int().positive(),
+  deploymentOrigin: z66.string().url(),
+  gitConnectionId: z66.string().uuid().nullable(),
+  gitRevision: z66.number().int().positive().nullable(),
+  managedHostingApproved: z66.boolean(),
+  actorUserId: z66.string().uuid(),
+  approvedAt: z66.string().datetime({ offset: true })
+}).strict();
+var setupAssetReadinessSchema2 = z66.union([
+  z66.object({
+    status: z66.enum([
+      "not_required",
+      "needs_choice",
+      "stale_setup_review",
+      "permission_denied"
+    ])
+  }).strict(),
+  z66.object({
+    status: z66.literal("stale_approval"),
+    approval: setupAssetTargetApprovalSchema2.optional()
+  }).strict(),
+  z66.object({
+    status: z66.literal("not_verified"),
+    approval: setupAssetTargetApprovalSchema2,
+    jobId: z66.string().uuid().optional(),
+    checkedAt: z66.string().datetime({ offset: true }).nullable().optional()
+  }).strict(),
+  z66.object({
+    status: z66.enum(["ready", "checking", "retrying"]),
+    approval: setupAssetTargetApprovalSchema2,
+    jobId: z66.string().uuid(),
+    checkedAt: z66.string().datetime({ offset: true }).nullable()
+  }).strict().refine((value) => value.status !== "ready" || value.checkedAt !== null)
+]);
+var checkSetupAssetTargetInputSchema2 = z66.object({
+  siteId: z66.string().uuid(),
+  runId: z66.string().uuid(),
+  approvalId: z66.string().uuid(),
+  intent: z66.enum(["start", "poll"])
+}).strict();
+
+// ../shared/dist/setup-installation.js
+import { z as z67 } from "zod";
+var setupInstallationRequestSchema2 = z67.object({
+  modules: siteSetupModulesSchema2,
+  ownerEditabilityNote: siteSetupOwnerEditabilityNoteSchema2,
+  provider: z67.object({
+    projectId: z67.string().min(1).max(200),
+    teamId: z67.string().min(1).max(200)
+  }).strict()
+}).strict();
+
+// ../shared/dist/setup-claim.js
+import { z as z68 } from "zod";
+var setupClaimCodeSchema2 = z68.string().regex(/^[0-9A-HJKMNP-TV-Z]{8}$/u);
+var setupClaimBindingSchema2 = z68.object({
+  siteId: z68.string().uuid(),
+  runId: z68.string().uuid()
+});
+var setupClaimReceiptSchema2 = setupClaimBindingSchema2.extend({
+  status: z68.literal("claimed"),
+  requestId: z68.string().uuid(),
+  workspaceId: z68.string().uuid(),
+  userId: z68.string().uuid(),
+  claimedAt: z68.string().datetime({ offset: true })
+}).strict();
+var setupClaimInspectionSchema2 = setupClaimBindingSchema2.extend({
+  status: z68.literal("pending"),
+  requestId: z68.string().uuid(),
+  siteName: z68.string(),
+  userId: z68.string().uuid(),
+  accountEmail: z68.string().email(),
+  workspaceId: z68.string().uuid(),
+  workspaceName: z68.string(),
+  expiresAt: z68.string().datetime({ offset: true })
+}).strict();
+var setupClaimDenialSchema2 = z68.object({
+  status: z68.enum([
+    "invalid_claim_request",
+    "invalid_installation",
+    "already_claimed",
+    "project_expired",
+    "invalid_guest_session",
+    "stale_setup_review",
+    "verified_account_required",
+    "workspace_access_denied",
+    "workspace_entitlement_required",
+    "site_limit_reached",
+    "provisional_relationship_conflict",
+    "rate_limited"
+  ])
+}).strict();
+
 // src/bin/run-siteplane.ts
 async function runSiteplaneCli(args, dependencies = createDefaultDependencies()) {
   const writes = args[0] === "init" || args[0] === "analytics" && args[1] === "init" || args[0] === "setup" && (["start", "apply", "prepare", "deploy"].includes(args[1] ?? "") || args[1] === "claim" && args[2] === "confirm");