siteplane 0.1.61 → 0.1.62

package/dist/bin/siteplane.js

@@ -2167,8 +2167,95 @@ var editorColorSchemes = editorColorSchemeSchema.options;
 var editorColorModeSchema = z20.enum(["light", "dark"]);
 var editorColorModes = editorColorModeSchema.options;
 
-// ../shared/dist/site-slug.js
+// ../shared/dist/editor-organization.js
 import { z as z21 } from "zod";
+var labelSchema = z21.string().trim().min(1).max(120);
+var updateFieldSchema = z21.object({
+  operation: z21.literal("update_field"),
+  siteId: z21.string().uuid(),
+  fieldId: fieldIdSchema,
+  label: labelSchema.optional(),
+  description: z21.string().trim().max(500).nullable().optional(),
+  section: labelSchema.nullable().optional(),
+  subsection: labelSchema.nullable().optional(),
+  sortOrder: z21.number().int().nonnegative().optional(),
+  status: z21.enum(["hidden", "active"]).optional()
+});
+var updateEditorOrganizationInputSchema = z21.discriminatedUnion("operation", [
+  updateFieldSchema,
+  z21.object({
+    operation: z21.literal("rename_section"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema,
+    currentSection: labelSchema,
+    nextSection: labelSchema
+  }),
+  z21.object({
+    operation: z21.literal("create_group"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema,
+    section: labelSchema,
+    fieldIds: z21.array(fieldIdSchema).max(200).default([])
+  }),
+  z21.object({
+    operation: z21.literal("delete_section"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema,
+    section: labelSchema
+  }),
+  z21.object({
+    operation: z21.literal("move_section"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema,
+    section: labelSchema,
+    direction: z21.enum(["up", "down"])
+  }),
+  z21.object({
+    operation: z21.literal("create_subgroup"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema,
+    section: labelSchema,
+    subsection: labelSchema,
+    fieldIds: z21.array(fieldIdSchema).min(1).max(200)
+  }),
+  z21.object({
+    operation: z21.literal("update_subgroup"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema,
+    currentSection: labelSchema,
+    currentSubsection: labelSchema,
+    section: labelSchema,
+    subsection: labelSchema.nullable()
+  }),
+  z21.object({
+    operation: z21.literal("rename_route"),
+    siteId: z21.string().uuid(),
+    routeKey: siteFieldRouteKeySchema.refine((value) => value !== "$global", "Global content has no page label."),
+    label: labelSchema
+  })
+]).and(z21.object({
+  review: z21.object({
+    runId: z21.string().uuid(),
+    expectedReviewVersion: z21.number().int().positive()
+  }).strict().optional()
+})).superRefine((input, context) => {
+  if (input.operation === "update_field" && input.label === void 0 && input.description === void 0 && input.section === void 0 && input.subsection === void 0 && input.sortOrder === void 0 && input.status === void 0) {
+    context.addIssue({
+      code: "custom",
+      message: "At least one field organization value is required."
+    });
+  }
+  if (input.operation === "update_field" && input.section === null && typeof input.subsection === "string") {
+    context.addIssue({
+      code: "custom",
+      message: "A subgroup requires a group.",
+      path: ["subsection"]
+    });
+  }
+});
+
+// ../shared/dist/site-slug.js
+import { z as z22 } from "zod";
 var SITE_SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 var RESERVED_SITE_SLUGS = /* @__PURE__ */ new Set([
   "account",
@@ -2185,31 +2272,31 @@ var RESERVED_SITE_SLUGS = /* @__PURE__ */ new Set([
   "support",
   "workspace"
 ]);
-var siteSlugSchema = z21.string().regex(SITE_SLUG_PATTERN, "Invalid site slug").refine((value) => !RESERVED_SITE_SLUGS.has(value), "Reserved site slug");
+var siteSlugSchema = z22.string().regex(SITE_SLUG_PATTERN, "Invalid site slug").refine((value) => !RESERVED_SITE_SLUGS.has(value), "Reserved site slug");
 
 // ../shared/dist/entitlements.js
-import { z as z22 } from "zod";
-var entitlementSnapshotSchema = z22.object({
-  planKey: z22.string().trim().min(1),
-  sitesLimit: z22.number().int().positive(),
-  siteMembersPerSiteLimit: z22.number().int().positive(),
-  customAdminDomainsEnabled: z22.boolean(),
-  agentMcpEnabled: z22.boolean(),
-  emailNotificationsEnabled: z22.boolean(),
-  analyticsEnabled: z22.boolean(),
-  analyticsSitesLimit: z22.number().int().min(0),
-  analyticsPortalPerformanceEnabled: z22.boolean(),
-  analyticsMonthlyReportsEnabled: z22.boolean(),
-  analyticsAiSummaryEnabled: z22.boolean(),
-  analyticsRawEventRetentionDays: z22.number().int().min(1).max(ANALYTICS_RETENTION_DEFAULTS.maxRawEventRetentionDaysWithoutAdr),
-  analyticsMonthlyEventLimit: z22.number().int().min(0),
-  bookingEnabled: z22.boolean().default(false),
-  bookingSitesLimit: z22.number().int().min(0).default(0),
-  bookingPortalManagementEnabled: z22.boolean().default(false),
-  bookingResourcesPerSiteLimit: z22.number().int().min(0).default(0),
-  bookingServicesPerSiteLimit: z22.number().int().min(0).default(0),
-  bookingMonthlyBookingsLimit: z22.number().int().min(0).default(0),
-  bookingRemindersEnabled: z22.boolean().default(false)
+import { z as z23 } from "zod";
+var entitlementSnapshotSchema = z23.object({
+  planKey: z23.string().trim().min(1),
+  sitesLimit: z23.number().int().positive(),
+  siteMembersPerSiteLimit: z23.number().int().positive(),
+  customAdminDomainsEnabled: z23.boolean(),
+  agentMcpEnabled: z23.boolean(),
+  emailNotificationsEnabled: z23.boolean(),
+  analyticsEnabled: z23.boolean(),
+  analyticsSitesLimit: z23.number().int().min(0),
+  analyticsPortalPerformanceEnabled: z23.boolean(),
+  analyticsMonthlyReportsEnabled: z23.boolean(),
+  analyticsAiSummaryEnabled: z23.boolean(),
+  analyticsRawEventRetentionDays: z23.number().int().min(1).max(ANALYTICS_RETENTION_DEFAULTS.maxRawEventRetentionDaysWithoutAdr),
+  analyticsMonthlyEventLimit: z23.number().int().min(0),
+  bookingEnabled: z23.boolean().default(false),
+  bookingSitesLimit: z23.number().int().min(0).default(0),
+  bookingPortalManagementEnabled: z23.boolean().default(false),
+  bookingResourcesPerSiteLimit: z23.number().int().min(0).default(0),
+  bookingServicesPerSiteLimit: z23.number().int().min(0).default(0),
+  bookingMonthlyBookingsLimit: z23.number().int().min(0).default(0),
+  bookingRemindersEnabled: z23.boolean().default(false)
 });
 var EARLY_ACCESS_PLAN = {
   planKey: "early_access_2026",
@@ -2238,7 +2325,7 @@ var EARLY_ACCESS_PLAN = {
 var maxFirstPartyImageUploadBytes = 4 * 1024 * 1024;
 
 // ../shared/dist/readiness.js
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 var READINESS_CHECK_KEYS = [
   "agent_instructions_installed",
   "runtime_package_connected",
@@ -2253,118 +2340,118 @@ var READINESS_STATUSES = [
   "failing",
   "warning"
 ];
-var readinessCheckKeySchema = z23.enum(READINESS_CHECK_KEYS);
-var readinessStatusSchema = z23.enum(READINESS_STATUSES);
+var readinessCheckKeySchema = z24.enum(READINESS_CHECK_KEYS);
+var readinessStatusSchema = z24.enum(READINESS_STATUSES);
 
 // ../shared/dist/site.js
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 var SITE_STATUSES = [
   "setup",
   "active",
   "disabled",
   "archived"
 ];
-var siteStatusSchema = z24.enum(SITE_STATUSES);
-var websiteUrlSchema = z24.string().trim().url().refine((value) => value.startsWith("https://") || value.startsWith("http://"), "Website URL must use http or https");
+var siteStatusSchema = z25.enum(SITE_STATUSES);
+var websiteUrlSchema = z25.string().trim().url().refine((value) => value.startsWith("https://") || value.startsWith("http://"), "Website URL must use http or https");
 
 // ../shared/dist/setup-assets.js
-import { z as z25 } from "zod";
-var configureSetupAssetTargetInputSchema = z25.object({
-  siteId: z25.string().uuid(),
-  runId: z25.string().uuid(),
-  expectedReviewVersion: z25.number().int().positive(),
-  expectedSnapshotHash: z25.string().regex(/^sha256:[0-9a-f]{64}$/u),
-  mutationId: z25.string().uuid(),
-  expectedApprovalId: z25.string().uuid().nullable(),
-  targetId: z25.string().uuid().nullable(),
-  targetType: z25.enum(["repo_static_assets", "siteplane_managed_fallback"]),
-  approveManagedHosting: z25.boolean()
+import { z as z26 } from "zod";
+var configureSetupAssetTargetInputSchema = z26.object({
+  siteId: z26.string().uuid(),
+  runId: z26.string().uuid(),
+  expectedReviewVersion: z26.number().int().positive(),
+  expectedSnapshotHash: z26.string().regex(/^sha256:[0-9a-f]{64}$/u),
+  mutationId: z26.string().uuid(),
+  expectedApprovalId: z26.string().uuid().nullable(),
+  targetId: z26.string().uuid().nullable(),
+  targetType: z26.enum(["repo_static_assets", "siteplane_managed_fallback"]),
+  approveManagedHosting: z26.boolean()
 }).strict().refine((value) => value.targetType === "siteplane_managed_fallback" || !value.approveManagedHosting);
-var setupAssetTargetApprovalSchema = z25.object({
-  id: z25.string().uuid(),
-  runId: z25.string().uuid(),
-  reviewVersion: z25.number().int().positive(),
-  snapshotHash: z25.string().regex(/^sha256:[0-9a-f]{64}$/u),
-  targetId: z25.string().uuid(),
-  targetType: z25.enum(["repo_static_assets", "siteplane_managed_fallback"]),
-  targetRevision: z25.number().int().positive(),
-  deploymentOrigin: z25.string().url(),
-  gitConnectionId: z25.string().uuid().nullable(),
-  gitRevision: z25.number().int().positive().nullable(),
-  managedHostingApproved: z25.boolean(),
-  actorUserId: z25.string().uuid(),
-  approvedAt: z25.string().datetime({ offset: true })
+var setupAssetTargetApprovalSchema = z26.object({
+  id: z26.string().uuid(),
+  runId: z26.string().uuid(),
+  reviewVersion: z26.number().int().positive(),
+  snapshotHash: z26.string().regex(/^sha256:[0-9a-f]{64}$/u),
+  targetId: z26.string().uuid(),
+  targetType: z26.enum(["repo_static_assets", "siteplane_managed_fallback"]),
+  targetRevision: z26.number().int().positive(),
+  deploymentOrigin: z26.string().url(),
+  gitConnectionId: z26.string().uuid().nullable(),
+  gitRevision: z26.number().int().positive().nullable(),
+  managedHostingApproved: z26.boolean(),
+  actorUserId: z26.string().uuid(),
+  approvedAt: z26.string().datetime({ offset: true })
 }).strict();
-var setupAssetReadinessSchema = z25.union([
-  z25.object({
-    status: z25.enum([
+var setupAssetReadinessSchema = z26.union([
+  z26.object({
+    status: z26.enum([
       "not_required",
       "needs_choice",
       "stale_setup_review",
       "permission_denied"
     ])
   }).strict(),
-  z25.object({
-    status: z25.literal("stale_approval"),
+  z26.object({
+    status: z26.literal("stale_approval"),
     approval: setupAssetTargetApprovalSchema.optional()
   }).strict(),
-  z25.object({
-    status: z25.literal("not_verified"),
+  z26.object({
+    status: z26.literal("not_verified"),
     approval: setupAssetTargetApprovalSchema,
-    jobId: z25.string().uuid().optional(),
-    checkedAt: z25.string().datetime({ offset: true }).nullable().optional()
+    jobId: z26.string().uuid().optional(),
+    checkedAt: z26.string().datetime({ offset: true }).nullable().optional()
   }).strict(),
-  z25.object({
-    status: z25.enum(["ready", "checking", "retrying"]),
+  z26.object({
+    status: z26.enum(["ready", "checking", "retrying"]),
     approval: setupAssetTargetApprovalSchema,
-    jobId: z25.string().uuid(),
-    checkedAt: z25.string().datetime({ offset: true }).nullable()
+    jobId: z26.string().uuid(),
+    checkedAt: z26.string().datetime({ offset: true }).nullable()
   }).strict().refine((value) => value.status !== "ready" || value.checkedAt !== null)
 ]);
-var checkSetupAssetTargetInputSchema = z25.object({
-  siteId: z25.string().uuid(),
-  runId: z25.string().uuid(),
-  approvalId: z25.string().uuid(),
-  intent: z25.enum(["start", "poll"])
+var checkSetupAssetTargetInputSchema = z26.object({
+  siteId: z26.string().uuid(),
+  runId: z26.string().uuid(),
+  approvalId: z26.string().uuid(),
+  intent: z26.enum(["start", "poll"])
 }).strict();
 
 // ../shared/dist/setup-installation.js
-import { z as z26 } from "zod";
-var setupInstallationRequestSchema = z26.object({
+import { z as z27 } from "zod";
+var setupInstallationRequestSchema = z27.object({
   modules: siteSetupModulesSchema,
   ownerEditabilityNote: siteSetupOwnerEditabilityNoteSchema,
-  provider: z26.object({
-    projectId: z26.string().min(1).max(200),
-    teamId: z26.string().min(1).max(200)
+  provider: z27.object({
+    projectId: z27.string().min(1).max(200),
+    teamId: z27.string().min(1).max(200)
   }).strict()
 }).strict();
 
 // ../shared/dist/setup-claim.js
-import { z as z27 } from "zod";
-var setupClaimCodeSchema = z27.string().regex(/^[0-9A-HJKMNP-TV-Z]{8}$/u);
-var setupClaimBindingSchema = z27.object({
-  siteId: z27.string().uuid(),
-  runId: z27.string().uuid()
+import { z as z28 } from "zod";
+var setupClaimCodeSchema = z28.string().regex(/^[0-9A-HJKMNP-TV-Z]{8}$/u);
+var setupClaimBindingSchema = z28.object({
+  siteId: z28.string().uuid(),
+  runId: z28.string().uuid()
 });
 var setupClaimReceiptSchema = setupClaimBindingSchema.extend({
-  status: z27.literal("claimed"),
-  requestId: z27.string().uuid(),
-  workspaceId: z27.string().uuid(),
-  userId: z27.string().uuid(),
-  claimedAt: z27.string().datetime({ offset: true })
+  status: z28.literal("claimed"),
+  requestId: z28.string().uuid(),
+  workspaceId: z28.string().uuid(),
+  userId: z28.string().uuid(),
+  claimedAt: z28.string().datetime({ offset: true })
 }).strict();
 var setupClaimInspectionSchema = setupClaimBindingSchema.extend({
-  status: z27.literal("pending"),
-  requestId: z27.string().uuid(),
-  siteName: z27.string(),
-  userId: z27.string().uuid(),
-  accountEmail: z27.string().email(),
-  workspaceId: z27.string().uuid(),
-  workspaceName: z27.string(),
-  expiresAt: z27.string().datetime({ offset: true })
+  status: z28.literal("pending"),
+  requestId: z28.string().uuid(),
+  siteName: z28.string(),
+  userId: z28.string().uuid(),
+  accountEmail: z28.string().email(),
+  workspaceId: z28.string().uuid(),
+  workspaceName: z28.string(),
+  expiresAt: z28.string().datetime({ offset: true })
 }).strict();
-var setupClaimDenialSchema = z27.object({
-  status: z27.enum([
+var setupClaimDenialSchema = z28.object({
+  status: z28.enum([
     "invalid_claim_request",
     "invalid_installation",
     "already_claimed",
@@ -3204,16 +3291,16 @@ async function analyticsReadinessCommand(input) {
 }
 
 // ../cli/dist/commands/analytics/public-key.js
-import { z as z28 } from "zod";
-var responseSchema = z28.object({
-  ok: z28.literal(true),
-  data: z28.object({
-    rawPublicKey: z28.string().regex(/^pk_siteplane_[A-Za-z0-9_-]{16}_[A-Za-z0-9_-]{43}$/)
+import { z as z29 } from "zod";
+var responseSchema = z29.object({
+  ok: z29.literal(true),
+  data: z29.object({
+    rawPublicKey: z29.string().regex(/^pk_siteplane_[A-Za-z0-9_-]{16}_[A-Za-z0-9_-]{43}$/)
   })
 });
-var errorResponseSchema = z28.object({
-  error: z28.object({
-    code: z28.string().regex(/^[a-z][a-z0-9_.-]+$/u)
+var errorResponseSchema = z29.object({
+  error: z29.object({
+    code: z29.string().regex(/^[a-z][a-z0-9_.-]+$/u)
   })
 });
 async function analyticsPublicKeyCommand(input) {
@@ -3235,13 +3322,13 @@ async function analyticsPublicKeyCommand(input) {
 }
 
 // ../cli/dist/commands/analytics/prepare.js
-import { z as z29 } from "zod";
-var resultSchema = z29.object({
-  ok: z29.literal(true),
-  data: z29.object({
-    rawPublicKey: z29.string().regex(/^pk_siteplane_[A-Za-z0-9_-]{16}_[A-Za-z0-9_-]{43}$/u),
-    generation: z29.number().int().positive(),
-    status: z29.enum([
+import { z as z30 } from "zod";
+var resultSchema = z30.object({
+  ok: z30.literal(true),
+  data: z30.object({
+    rawPublicKey: z30.string().regex(/^pk_siteplane_[A-Za-z0-9_-]{16}_[A-Za-z0-9_-]{43}$/u),
+    generation: z30.number().int().positive(),
+    status: z30.enum([
       "setup_started",
       "test_mode",
       "active",
@@ -3251,8 +3338,8 @@ var resultSchema = z29.object({
     ])
   }).strict()
 }).strict();
-var errorSchema = z29.object({
-  error: z29.object({ code: z29.string().regex(/^[a-z][a-z0-9_.-]+$/u) })
+var errorSchema = z30.object({
+  error: z30.object({ code: z30.string().regex(/^[a-z][a-z0-9_.-]+$/u) })
 });
 async function analyticsPrepareCommand(input) {
   const response = await (input.fetchImpl ?? fetch)(`${input.config.apiBaseUrl.replace(/\/$/u, "")}/api/cli/analytics/prepare`, {
@@ -3472,19 +3559,19 @@ async function bookingTestCommand(input) {
 import { access, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
 import { randomUUID as randomUUID2 } from "crypto";
 import { join as join3 } from "path";
-import { z as z30 } from "zod";
-var siteplaneProjectConfigSchema = z30.object({
-  version: z30.literal(2),
-  apiBaseUrl: z30.string().url(),
-  siteId: z30.string().uuid(),
-  publicSiteKeyId: z30.string().uuid(),
-  publicSiteKey: z30.string().trim().min(1),
-  runId: z30.string().uuid(),
-  appDirectory: z30.string().min(1),
-  taskContractVersion: z30.literal("siteplane.setup-task.v2"),
-  adminProtocolVersion: z30.literal(2),
+import { z as z31 } from "zod";
+var siteplaneProjectConfigSchema = z31.object({
+  version: z31.literal(2),
+  apiBaseUrl: z31.string().url(),
+  siteId: z31.string().uuid(),
+  publicSiteKeyId: z31.string().uuid(),
+  publicSiteKey: z31.string().trim().min(1),
+  runId: z31.string().uuid(),
+  appDirectory: z31.string().min(1),
+  taskContractVersion: z31.literal("siteplane.setup-task.v2"),
+  adminProtocolVersion: z31.literal(2),
   packages: siteSetupPackagesSchema,
-  fieldContractHash: z30.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
+  fieldContractHash: z31.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
 }).strict();
 async function readProjectPackageJson(projectDir) {
   return JSON.parse(await readFile5(join3(projectDir, "package.json"), "utf8"));
@@ -3544,27 +3631,27 @@ import { randomUUID as randomUUID3 } from "crypto";
 import { chmod as chmod2, lstat, mkdir as mkdir5, open as open2, readFile as readFile6, rename as rename2, rm as rm2 } from "fs/promises";
 import { dirname as dirname5, join as join4, relative } from "path";
 import { promisify } from "util";
-import { z as z31 } from "zod";
-var localSetupInstallationSchema = z31.object({
-  key: z31.string().regex(/^[A-Za-z0-9_-]{43}$/u),
-  idempotencyKey: z31.string().uuid(),
-  apiBaseUrl: z31.string().url(),
+import { z as z32 } from "zod";
+var localSetupInstallationSchema = z32.object({
+  key: z32.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+  idempotencyKey: z32.string().uuid(),
+  apiBaseUrl: z32.string().url(),
   request: setupInstallationRequestSchema,
-  bootstrapAcknowledged: z31.boolean()
+  bootstrapAcknowledged: z32.boolean()
 }).strict();
-var siteplaneCredentialsSchema = z31.object({
-  accessToken: z31.string().trim().min(1),
-  siteRevalidationSecret: z31.string().trim().min(1),
+var siteplaneCredentialsSchema = z32.object({
+  accessToken: z32.string().trim().min(1),
+  siteRevalidationSecret: z32.string().trim().min(1),
   installation: localSetupInstallationSchema.optional(),
   claimReceipt: setupClaimReceiptSchema.optional(),
-  adminSession: z31.object({
-    secret: z31.string().regex(/^[A-Za-z0-9_-]{43}$/u),
-    generation: z31.string().uuid()
+  adminSession: z32.object({
+    secret: z32.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+    generation: z32.string().uuid()
   }).strict().optional()
 }).strict();
-var localSetupCredentialsSchema = z31.union([
+var localSetupCredentialsSchema = z32.union([
   siteplaneCredentialsSchema,
-  z31.object({ installation: localSetupInstallationSchema }).strict()
+  z32.object({ installation: localSetupInstallationSchema }).strict()
 ]);
 async function assertLocalCredentialsPathSafe(projectDir, options = {}) {
   const path = join4(projectDir, ".siteplane/credentials.json");
@@ -3662,7 +3749,7 @@ async function gitPathMatches(projectDir, path, command) {
 // ../cli/dist/commands/init.js
 import { access as access3 } from "fs/promises";
 import { join as join7, relative as relative3 } from "path";
-import { z as z34 } from "zod";
+import { z as z35 } from "zod";
 
 // ../cli/dist/commands/setup-preflight.js
 import { createHash as createHash2 } from "crypto";
@@ -3674,11 +3761,11 @@ import { parse as parseYaml } from "yaml";
 import { createRequire } from "module";
 import { readFile as readFile7 } from "fs/promises";
 import { join as join5 } from "path";
-import { z as z32 } from "zod";
-var packageSchema = z32.object({
-  name: z32.string().optional(),
-  version: z32.string(),
-  peerDependencies: z32.record(z32.string(), z32.string()).optional()
+import { z as z33 } from "zod";
+var packageSchema = z33.object({
+  name: z33.string().optional(),
+  version: z33.string(),
+  peerDependencies: z33.record(z33.string(), z33.string()).optional()
 });
 async function readInstalledPackage(projectDir, name2) {
   const require2 = createRequire(join5(projectDir, "package.json"));
@@ -3693,9 +3780,9 @@ async function readInstalledPackage(projectDir, name2) {
   throw new Error(`Install ${name2} with the canonical package manager before setup.`);
 }
 async function assertExactSetupPackages(projectDir, packages) {
-  const manifest = z32.object({
-    dependencies: z32.record(z32.string(), z32.string()).optional(),
-    devDependencies: z32.record(z32.string(), z32.string()).optional()
+  const manifest = z33.object({
+    dependencies: z33.record(z33.string(), z33.string()).optional(),
+    devDependencies: z33.record(z33.string(), z33.string()).optional()
   }).parse(JSON.parse(await readFile7(join5(projectDir, "package.json"), "utf8")));
   for (const [name2, version2] of [
     ["siteplane", packages.siteplane],
@@ -3712,7 +3799,7 @@ async function assertExactSetupPackages(projectDir, packages) {
 // ../cli/dist/commands/setup-preflight.js
 import { access as access2, readFile as readFile8, realpath, readdir, readlink } from "fs/promises";
 import { dirname as dirname6, join as join6, relative as relative2, resolve, sep } from "path";
-import { z as z33 } from "zod";
+import { z as z34 } from "zod";
 
 // ../cli/dist/commands/setup-process.js
 import { spawn } from "child_process";
@@ -3813,29 +3900,29 @@ async function setupVercelApi(cwd, endpoint, body, method, options) {
 }
 
 // ../cli/dist/commands/setup-preflight.js
-var manifestSchema = z33.object({
-  packageManager: z33.string().optional(),
-  engines: z33.object({ node: z33.string().optional() }).optional(),
-  dependencies: z33.record(z33.string(), z33.string()).optional(),
-  devDependencies: z33.record(z33.string(), z33.string()).optional(),
-  scripts: z33.record(z33.string(), z33.string()).optional(),
-  workspaces: z33.unknown().optional()
+var manifestSchema = z34.object({
+  packageManager: z34.string().optional(),
+  engines: z34.object({ node: z34.string().optional() }).optional(),
+  dependencies: z34.record(z34.string(), z34.string()).optional(),
+  devDependencies: z34.record(z34.string(), z34.string()).optional(),
+  scripts: z34.record(z34.string(), z34.string()).optional(),
+  workspaces: z34.unknown().optional()
 });
-var vercelProjectSchema = z33.object({
-  id: z33.string(),
-  accountId: z33.string(),
-  name: z33.string(),
-  nodeVersion: z33.string().nullable().optional(),
-  rootDirectory: z33.string().nullable().optional(),
-  framework: z33.string().nullable().optional(),
-  installCommand: z33.string().nullable().optional(),
-  buildCommand: z33.string().nullable().optional(),
-  link: z33.object({
-    type: z33.string(),
-    repo: z33.string().optional(),
-    repoId: z33.union([z33.string(), z33.number()]).optional(),
-    org: z33.string().optional(),
-    productionBranch: z33.string().optional()
+var vercelProjectSchema = z34.object({
+  id: z34.string(),
+  accountId: z34.string(),
+  name: z34.string(),
+  nodeVersion: z34.string().nullable().optional(),
+  rootDirectory: z34.string().nullable().optional(),
+  framework: z34.string().nullable().optional(),
+  installCommand: z34.string().nullable().optional(),
+  buildCommand: z34.string().nullable().optional(),
+  link: z34.object({
+    type: z34.string(),
+    repo: z34.string().optional(),
+    repoId: z34.union([z34.string(), z34.number()]).optional(),
+    org: z34.string().optional(),
+    productionBranch: z34.string().optional()
   }).nullable().optional()
 });
 var exists = async (path) => access2(path).then(() => true, () => false);
@@ -3892,9 +3979,9 @@ async function inspectSetupLocalProject(projectDir) {
   const rootManifest = manifestSchema.parse(JSON.parse(await readFile8(join6(lockfileRoot, "package.json"), "utf8")));
   if (lockfileRoot !== projectDirectory) {
     const workspaceFile = join6(lockfileRoot, "pnpm-workspace.yaml");
-    const workspace = lockName === "pnpm-lock.yaml" && await exists(workspaceFile) ? z33.object({ packages: z33.array(z33.string()) }).parse(parseYaml(await readFile8(workspaceFile, "utf8"))).packages : z33.union([
-      z33.array(z33.string()),
-      z33.object({ packages: z33.array(z33.string()) }).transform((value) => value.packages)
+    const workspace = lockName === "pnpm-lock.yaml" && await exists(workspaceFile) ? z34.object({ packages: z34.array(z34.string()) }).parse(parseYaml(await readFile8(workspaceFile, "utf8"))).packages : z34.union([
+      z34.array(z34.string()),
+      z34.object({ packages: z34.array(z34.string()) }).transform((value) => value.packages)
     ]).parse(rootManifest.workspaces);
     const selected = relative2(lockfileRoot, projectDirectory).split(sep).join("/");
     if (!workspace.some((pattern) => !pattern.startsWith("!") && minimatch(selected, pattern)) || workspace.some((pattern) => pattern.startsWith("!") && minimatch(selected, pattern.slice(1))))
@@ -3908,11 +3995,11 @@ async function inspectSetupLocalProject(projectDir) {
       break;
   }
   const lockText = await readFile8(join6(lockfileRoot, lockName), "utf8");
-  const npmLock = lockName === "package-lock.json" ? z33.object({
-    lockfileVersion: z33.number(),
-    packages: z33.record(z33.string(), z33.object({
-      version: z33.string().optional(),
-      peerDependencies: z33.record(z33.string(), z33.string()).optional()
+  const npmLock = lockName === "package-lock.json" ? z34.object({
+    lockfileVersion: z34.number(),
+    packages: z34.record(z34.string(), z34.object({
+      version: z34.string().optional(),
+      peerDependencies: z34.record(z34.string(), z34.string()).optional()
     })).optional()
   }).parse(JSON.parse(lockText)) : null;
   async function version2(name3) {
@@ -4050,9 +4137,9 @@ async function setupPreflightCommand(input) {
       linkDirectory = dirname6(linkDirectory);
     if (!await exists(join6(linkDirectory, ".vercel/project.json")))
       fail("vercel_project_not_linked", "Link this application to its intended Vercel project before setup; Siteplane will not guess a target.");
-    const linked = z33.object({
-      projectId: z33.string().regex(/^prj_[A-Za-z0-9]+$/u),
-      orgId: z33.string().regex(/^(?:team|user)_[A-Za-z0-9]+$/u)
+    const linked = z34.object({
+      projectId: z34.string().regex(/^prj_[A-Za-z0-9]+$/u),
+      orgId: z34.string().regex(/^(?:team|user)_[A-Za-z0-9]+$/u)
     }).parse(JSON.parse(await readFile8(join6(linkDirectory, ".vercel/project.json"), "utf8")));
     const project = vercelProjectSchema.parse(await setupVercelApi(linkDirectory, `/v9/projects/${linked.projectId}?teamId=${linked.orgId}`));
     if (project.id !== linked.projectId || project.accountId !== linked.orgId)
@@ -4066,11 +4153,11 @@ async function setupPreflightCommand(input) {
       fail("vercel_production_branch_conflict", "The local branch differs from the bound Vercel Production branch.");
     if (project.link?.repo && project.link.org && !local.git.remote?.replace(/\.git$/u, "").endsWith(`${project.link.org}/${project.link.repo}`))
       fail("vercel_git_conflict", "The local origin repository differs from the Vercel Git connection.");
-    const env = z33.object({
-      envs: z33.array(z33.object({
-        key: z33.string(),
-        value: z33.string().optional(),
-        target: z33.array(z33.string()).optional()
+    const env = z34.object({
+      envs: z34.array(z34.object({
+        key: z34.string(),
+        value: z34.string().optional(),
+        target: z34.array(z34.string()).optional()
       }))
     }).parse(await setupVercelApi(linkDirectory, `/v10/projects/${linked.projectId}/env?teamId=${linked.orgId}`));
     const corepack = env.envs.some((item) => item.key === "ENABLE_EXPERIMENTAL_COREPACK" && item.value === "1" && item.target?.includes("production"));
@@ -4088,6 +4175,11 @@ async function setupPreflightCommand(input) {
       fail("vercel_package_manager_conflict", "The provider install command conflicts with the canonical lockfile.");
     if (overridePin && local.packageManager.declared && `${overridePin[1]}@${overridePin[2]}` !== local.packageManager.declared)
       fail("vercel_package_manager_conflict", "The Vercel install override conflicts with the exact packageManager declaration.");
+    const build = project.buildCommand;
+    const buildPin = build ? /\b(npm|pnpm|yarn|bun)@(\d+\.\d+\.\d+)\b/u.exec(build) : null;
+    const buildFamily = buildPin?.[1] ?? (build ? /(?:^|[;&|]\s*)(npm|pnpm|yarn|bun)\s+(?:run\s+)?build\b/u.exec(build)?.[1] : null);
+    if (buildFamily && (buildFamily !== local.packageManager.name || buildPin && local.packageManager.declared && `${buildPin[1]}@${buildPin[2]}` !== local.packageManager.declared))
+      fail("vercel_package_manager_conflict", "The explicit Vercel build command conflicts with the selected package manager or its declared version. Align the existing build override and rerun preflight; no setup writes were performed.");
     return {
       status: "ready",
       local,
@@ -4160,26 +4252,26 @@ async function initCommand(input) {
     ]
   };
 }
-var siteSetupBootstrapDataSchema = z34.object({
-  credentialPurpose: z34.literal("site_setup"),
-  apiBaseUrl: z34.string().url(),
-  siteId: z34.string().uuid(),
-  publicSiteKeyId: z34.string().uuid(),
-  publicSiteKey: z34.string().trim().min(1),
-  accessToken: z34.string().trim().min(1),
-  siteRevalidationSecret: z34.string().regex(/^[A-Za-z0-9_-]{43}$/u),
-  runId: z34.string().uuid(),
+var siteSetupBootstrapDataSchema = z35.object({
+  credentialPurpose: z35.literal("site_setup"),
+  apiBaseUrl: z35.string().url(),
+  siteId: z35.string().uuid(),
+  publicSiteKeyId: z35.string().uuid(),
+  publicSiteKey: z35.string().trim().min(1),
+  accessToken: z35.string().trim().min(1),
+  siteRevalidationSecret: z35.string().regex(/^[A-Za-z0-9_-]{43}$/u),
+  runId: z35.string().uuid(),
   packages: siteSetupPackagesSchema
 }).strict();
-var featureBootstrapDataSchema = z34.object({
-  credentialPurpose: z34.enum(["analytics", "booking"]),
-  apiBaseUrl: z34.string().url(),
-  siteId: z34.string().uuid(),
-  accessToken: z34.string().trim().min(1)
+var featureBootstrapDataSchema = z35.object({
+  credentialPurpose: z35.enum(["analytics", "booking"]),
+  apiBaseUrl: z35.string().url(),
+  siteId: z35.string().uuid(),
+  accessToken: z35.string().trim().min(1)
 }).strict();
-var bootstrapResponseSchema = z34.object({
-  ok: z34.literal(true),
-  data: z34.discriminatedUnion("credentialPurpose", [
+var bootstrapResponseSchema = z35.object({
+  ok: z35.literal(true),
+  data: z35.discriminatedUnion("credentialPurpose", [
     siteSetupBootstrapDataSchema,
     featureBootstrapDataSchema
   ])
@@ -4339,7 +4431,7 @@ async function collectSourceFiles(directory) {
 import { execFile as execFile2 } from "child_process";
 import { readFile as readFile9 } from "fs/promises";
 import { promisify as promisify2 } from "util";
-import { z as z35 } from "zod";
+import { z as z36 } from "zod";
 
 // ../cli/dist/scan/next-source-scan.js
 import ts2 from "typescript";
@@ -5044,32 +5136,32 @@ function isPositionalFieldReference(value) {
 
 // ../cli/dist/commands/site-setup.js
 var execFileAsync2 = promisify2(execFile2);
-var safeErrorSchema = z35.object({
-  code: z35.string().trim().min(1),
-  message: z35.string().trim().min(1)
+var safeErrorSchema = z36.object({
+  code: z36.string().trim().min(1),
+  message: z36.string().trim().min(1)
 }).passthrough();
-var errorResponseSchema2 = z35.object({ ok: z35.literal(false), error: safeErrorSchema }).passthrough();
-var contextDataSchema = z35.object({
+var errorResponseSchema2 = z36.object({ ok: z36.literal(false), error: safeErrorSchema }).passthrough();
+var contextDataSchema = z36.object({
   task: siteSetupTaskSchema.refine((task) => task.run !== null)
 }).strict();
-var contextResponseSchema = z35.object({ ok: z35.literal(true), data: contextDataSchema }).strict();
-var applyDataSchema = z35.object({
-  status: z35.enum(["applied", "ready_for_review"]),
-  runId: z35.string().uuid().optional(),
-  contractVersionId: z35.string().uuid().optional(),
-  fieldContractHash: z35.string().regex(/^sha256:[0-9a-f]{64}$/u),
-  editorDefinitionHash: z35.string().regex(/^sha256:[0-9a-f]{64}$/u).optional(),
-  fieldCount: z35.number().int().nonnegative().optional(),
-  routeCount: z35.number().int().nonnegative().optional()
+var contextResponseSchema = z36.object({ ok: z36.literal(true), data: contextDataSchema }).strict();
+var applyDataSchema = z36.object({
+  status: z36.enum(["applied", "ready_for_review"]),
+  runId: z36.string().uuid().optional(),
+  contractVersionId: z36.string().uuid().optional(),
+  fieldContractHash: z36.string().regex(/^sha256:[0-9a-f]{64}$/u),
+  editorDefinitionHash: z36.string().regex(/^sha256:[0-9a-f]{64}$/u).optional(),
+  fieldCount: z36.number().int().nonnegative().optional(),
+  routeCount: z36.number().int().nonnegative().optional()
 }).strict();
-var applyResponseSchema = z35.object({ ok: z35.literal(true), data: applyDataSchema }).strict();
-var verifyDataSchema = z35.object({
-  status: z35.literal("ready_for_review"),
-  runId: z35.string().uuid().optional(),
-  deploymentOrigin: z35.string().url().optional(),
-  deploymentRevision: z35.string().optional()
+var applyResponseSchema = z36.object({ ok: z36.literal(true), data: applyDataSchema }).strict();
+var verifyDataSchema = z36.object({
+  status: z36.literal("ready_for_review"),
+  runId: z36.string().uuid().optional(),
+  deploymentOrigin: z36.string().url().optional(),
+  deploymentRevision: z36.string().optional()
 }).strict();
-var verifyResponseSchema = z35.object({ ok: z35.literal(true), data: verifyDataSchema }).strict();
+var verifyResponseSchema = z36.object({ ok: z36.literal(true), data: verifyDataSchema }).strict();
 async function siteSetupContextCommand(input) {
   const response = await postSiteSetup(input, "context", {});
   const parsed = contextResponseSchema.safeParse(response.payload);
@@ -5233,9 +5325,9 @@ async function siteSetupActivityCommand(input) {
       message: "Choose inspecting, integrating, deploying, verifying or repairing."
     };
   const response = await postSiteSetup(input, "activity", activity.data);
-  const parsed = z35.object({
-    ok: z35.literal(true),
-    data: z35.object({ status: z35.enum(["recorded", "rate_limited"]) }).strict()
+  const parsed = z36.object({
+    ok: z36.literal(true),
+    data: z36.object({ status: z36.enum(["recorded", "rate_limited"]) }).strict()
   }).strict().safeParse(response.payload);
   return response.ok && parsed.success ? parsed.data.data : actionRequired(response.payload, "Setup activity could not be recorded.");
 }
@@ -5244,9 +5336,9 @@ async function siteSetupActivityCommand(input) {
 import { randomBytes, randomUUID as randomUUID4 } from "crypto";
 import { access as access4 } from "fs/promises";
 import { join as join9, relative as relative5 } from "path";
-import { z as z36 } from "zod";
-var bootstrapResponseSchema2 = z36.object({
-  ok: z36.literal(true),
+import { z as z37 } from "zod";
+var bootstrapResponseSchema2 = z37.object({
+  ok: z37.literal(true),
   data: siteSetupBootstrapDataSchema
 }).strict();
 async function setupStartCommand(input) {
@@ -5320,9 +5412,9 @@ async function acknowledge(input, credentials) {
   if (!installation || !("accessToken" in credentials))
     throw new Error("Incomplete installation exchange.");
   const payload = await installationRequest(input, installation, "acknowledge");
-  z36.object({
-    ok: z36.literal(true),
-    data: z36.object({ acknowledged: z36.literal(true) }).strict()
+  z37.object({
+    ok: z37.literal(true),
+    data: z37.object({ acknowledged: z37.literal(true) }).strict()
   }).strict().parse(payload);
   await writeLocalSetupCredentials(input.projectDir, {
     ...credentials,
@@ -5343,9 +5435,9 @@ async function installationRequest(input, installation, action) {
   });
   const payload = await response.json();
   if (!response.ok) {
-    const error = z36.object({
-      error: z36.object({
-        code: z36.string().regex(/^[a-z][a-z0-9_.]{0,100}$/u)
+    const error = z37.object({
+      error: z37.object({
+        code: z37.string().regex(/^[a-z][a-z0-9_.]{0,100}$/u)
       })
     }).safeParse(payload);
     throw new SetupFailure(error.success ? error.data.error.code : "setup_start_failed", "Siteplane could not complete this installation request. The saved local key and request are unchanged; retry after resolving the reported boundary.");
@@ -5374,12 +5466,12 @@ async function exists2(path) {
 }
 
 // ../cli/dist/commands/setup-review.js
-import { z as z37 } from "zod";
-var responseSchema2 = z37.object({
-  ok: z37.literal(true),
-  data: z37.object({
-    reviewUrl: z37.string().url(),
-    expiresAt: z37.string().datetime({ offset: true })
+import { z as z38 } from "zod";
+var responseSchema2 = z38.object({
+  ok: z38.literal(true),
+  data: z38.object({
+    reviewUrl: z38.string().url(),
+    expiresAt: z38.string().datetime({ offset: true })
   }).strict()
 }).strict();
 async function setupReviewCommand(input) {
@@ -5431,9 +5523,9 @@ async function setupReviewCommand(input) {
         throw new Error("Invalid review destination.");
       return { status: "ready", ...parsed.data.data };
     }
-    const denied = z37.object({
-      error: z37.object({
-        code: z37.enum([
+    const denied = z38.object({
+      error: z38.object({
+        code: z38.enum([
           "invalid_installation",
           "already_claimed",
           "project_expired",
@@ -5579,8 +5671,15 @@ export default function SiteplaneBridge() {
       if (closingBodies.length !== 1)
         throw new SetupFailure("layout_integration_conflict", "Mount SiteplaneBridge inside the existing root body. The layout shape requires a deliberate agent edit.");
       const point = closingBodies[0];
-      files.set(layoutPath, `import SiteplaneBridge from "./_siteplane/bridge";
-${layoutSource.slice(0, point)}<SiteplaneBridge />${layoutSource.slice(point)}`);
+      let importPoint = 0;
+      for (const statement of ast.statements) {
+        if (!ts3.isExpressionStatement(statement) || !ts3.isStringLiteral(statement.expression))
+          break;
+        importPoint = statement.end;
+      }
+      files.set(layoutPath, `${layoutSource.slice(0, importPoint)}
+import SiteplaneBridge from "./_siteplane/bridge";
+${layoutSource.slice(importPoint, point)}<SiteplaneBridge />${layoutSource.slice(point)}`);
     }
     const configs = (await Promise.all(["next.config.ts", "next.config.mjs", "next.config.js"].map(async (name2) => await exists3(join10(directory, name2)) ? join10(directory, name2) : null))).filter((path) => path !== null);
     if (configs.length > 1)
@@ -5605,7 +5704,7 @@ ${task.goal}
 
 ${task.discovery.rules.map((rule) => `- ${rule}`).join("\n")}
 
-Run setup context for the current user instructions and authorized modules. Keep the user instructions distinct from your selection summary. Use setup deploy --wait for environment transfer and deployment; never read or print credential values. If the linked provider project has multiple eligible Production domains, choose its canonical verified non-redirecting origin with --production-origin <https-origin>; before an origin-dependent local build use that exact value as SITEPLANE_SITE_ORIGIN, then pass the same origin to setup deploy. Resume reuses the stored choice. If a requested deploy passes its provider deadline, rerun the same command for a bounded readback of that operation; do not start a replacement while its outcome is unresolved. For image fields, withSiteplane adds only the exact Siteplane asset route and website /siteplane-assets/ pattern while preserving existing sources, loaders, and redirect policy. This grants no hosting permission. If the website uses a global or component image loader, keep it and verify Siteplane image delivery explicitly. Inspect CSP written by middleware/proxy/meta tags before deployment. Never use a wildcard, private host or different origin for local builds.
+Run setup context for the current user instructions and authorized modules. Keep the user instructions distinct from your selection summary. Use setup deploy --wait for environment transfer and deployment; never read or print credential values. If the linked provider project has multiple eligible Production domains, choose its canonical verified non-redirecting origin with --production-origin <https-origin>; before an origin-dependent local build use that exact value as SITEPLANE_SITE_ORIGIN, then pass the same origin to setup deploy. Resume reuses the stored choice. If a requested deploy passes its provider deadline, rerun the same command for a bounded readback of that operation; do not start a replacement while its outcome is unresolved. Local builds using code-fallback images need no SITEPLANE_SITE_ORIGIN or setup secrets. For image fields, withSiteplane adds only the exact Siteplane asset route and website /siteplane-assets/ pattern while preserving existing sources, loaders, and redirect policy. This grants no hosting permission. If the website uses a global or component image loader, keep it and verify Siteplane image delivery explicitly. Inspect CSP written by middleware/proxy/meta tags before deployment. Never use a wildcard, private host or different origin for local builds.
 `);
     for (const [path, content] of files) {
       if (path === layoutPath || path === nextPath || path === guidePath)
@@ -5735,8 +5834,8 @@ async function assertSourcePath(root, target) {
 import { randomUUID as randomUUID6 } from "crypto";
 import { lstat as lstat3, mkdir as mkdir7, open as open4, readFile as readFile11, rm as rm4, rmdir } from "fs/promises";
 import { resolve as resolve2 } from "path";
-import { z as z38 } from "zod";
-var ownerSchema = z38.object({ pid: z38.number().int().positive(), nonce: z38.string().uuid() }).strict();
+import { z as z39 } from "zod";
+var ownerSchema = z39.object({ pid: z39.number().int().positive(), nonce: z39.string().uuid() }).strict();
 async function withSetupLock(projectDir, work) {
   const gitPath = (await setupProcess("git", ["rev-parse", "--git-path", "siteplane-setup.lock"], { cwd: projectDir })).trim();
   const path = resolve2(projectDir, gitPath);
@@ -5800,23 +5899,23 @@ import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
 import { dirname as dirname8, isAbsolute as isAbsolute2, join as join11, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
 import { isDeepStrictEqual, promisify as promisify3 } from "util";
-import { z as z39 } from "zod";
+import { z as z40 } from "zod";
 var execute = promisify3(execFile3);
 var name = ".siteplane/build-source.json";
-var oid = z39.string().regex(/^[0-9a-f]{40}$/u);
-var entrySchema = z39.object({
-  path: z39.string().min(1).max(4096),
-  mode: z39.enum(["100644", "100755", "120000"]),
+var oid = z40.string().regex(/^[0-9a-f]{40}$/u);
+var entrySchema = z40.object({
+  path: z40.string().min(1).max(4096),
+  mode: z40.enum(["100644", "100755", "120000"]),
   oid
 }).strict();
-var schema = z39.object({
-  version: z39.literal(2),
+var schema = z40.object({
+  version: z40.literal(2),
   revision: oid,
-  commit: z39.string().min(1).max(1048576),
-  entries: z39.array(entrySchema).min(1).max(1e5),
-  providerConfigurations: z39.array(z39.object({
-    path: z39.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
-    source: z39.string().max(1048576)
+  commit: z40.string().min(1).max(1048576),
+  entries: z40.array(entrySchema).min(1).max(1e5),
+  providerConfigurations: z40.array(z40.object({
+    path: z40.string().max(4096).regex(/(?:^|\/)vercel\.json$/u),
+    source: z40.string().max(1048576)
   }).strict()).max(1e3)
 }).strict();
 async function writeBuildProvenance(checkout, revision) {
@@ -5865,38 +5964,38 @@ import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as r
 import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
 import { join as join12 } from "path";
-import { z as z40 } from "zod";
-var envSchema = z40.object({
-  id: z40.string(),
-  key: z40.string(),
-  target: z40.array(z40.string()),
-  type: z40.string(),
-  comment: z40.string().optional(),
-  updatedAt: z40.number().optional()
+import { z as z41 } from "zod";
+var envSchema = z41.object({
+  id: z41.string(),
+  key: z41.string(),
+  target: z41.array(z41.string()),
+  type: z41.string(),
+  comment: z41.string().optional(),
+  updatedAt: z41.number().optional()
 });
-var deploymentSchema = z40.object({
-  id: z40.string(),
-  projectId: z40.string(),
-  ownerId: z40.string().optional(),
-  target: z40.string().nullable(),
-  readyState: z40.string(),
-  createdAt: z40.number(),
-  url: z40.string(),
-  meta: z40.record(z40.string(), z40.unknown()).optional(),
-  gitSource: z40.object({ sha: z40.string().optional() }).nullable().optional()
+var deploymentSchema = z41.object({
+  id: z41.string(),
+  projectId: z41.string(),
+  ownerId: z41.string().optional(),
+  target: z41.string().nullable(),
+  readyState: z41.string(),
+  createdAt: z41.number(),
+  url: z41.string(),
+  meta: z41.record(z41.string(), z41.unknown()).optional(),
+  gitSource: z41.object({ sha: z41.string().optional() }).nullable().optional()
 });
-var buildProofSchema = z40.object({
-  node: z40.string(),
-  packageManager: z40.enum(["npm", "pnpm"]),
-  packageManagerVersion: z40.string(),
-  lockfileHash: z40.string(),
-  revision: z40.string(),
-  fieldContractHash: z40.string(),
-  siteplane: z40.string(),
-  runtimeNext: z40.string(),
-  analytics: z40.string().optional(),
-  next: z40.string(),
-  react: z40.string()
+var buildProofSchema = z41.object({
+  node: z41.string(),
+  packageManager: z41.enum(["npm", "pnpm"]),
+  packageManagerVersion: z41.string(),
+  lockfileHash: z41.string(),
+  revision: z41.string(),
+  fieldContractHash: z41.string(),
+  siteplane: z41.string(),
+  runtimeNext: z41.string(),
+  analytics: z41.string().optional(),
+  next: z41.string(),
+  react: z41.string()
 }).strict();
 var digest = (value) => `sha256:${createHash4("sha256").update(stableJsonStringify(value)).digest("hex")}`;
 function fail2(code, message) {
@@ -5984,12 +6083,12 @@ async function setupDeployCommand(input, deps = defaults) {
       remaining();
       return result2;
     };
-    const domains = z40.object({
-      domains: z40.array(z40.object({
-        name: z40.string(),
-        verified: z40.boolean(),
-        redirect: z40.string().nullable().optional(),
-        gitBranch: z40.string().nullable().optional()
+    const domains = z41.object({
+      domains: z41.array(z41.object({
+        name: z41.string(),
+        verified: z41.boolean(),
+        redirect: z41.string().nullable().optional(),
+        gitBranch: z41.string().nullable().optional()
       }))
     }).parse(await api(`/v9/projects/${provider.projectId}/domains?${scope}`)).domains.filter((domain) => domain.verified && !domain.redirect && !domain.gitBranch);
     const eligibleOrigins = domains.map((domain) => new URL(`https://${domain.name}`).origin);
@@ -6018,7 +6117,7 @@ async function setupDeployCommand(input, deps = defaults) {
       remaining();
       return output;
     };
-    const listEnv = async () => z40.object({ envs: z40.array(envSchema) }).parse(await api(`/v10/projects/${provider.projectId}/env?${scope}`)).envs;
+    const listEnv = async () => z41.object({ envs: z41.array(envSchema) }).parse(await api(`/v10/projects/${provider.projectId}/env?${scope}`)).envs;
     let env = await listEnv();
     const owned = (key) => {
       const matches2 = env.filter((item) => item.key === key && item.target.includes("production"));
@@ -6091,9 +6190,9 @@ async function setupDeployCommand(input, deps = defaults) {
         expectedOperationId: record?.operationId ?? null,
         record: next
       });
-      const parsed = z40.object({
-        ok: z40.literal(true),
-        data: z40.object({ record: setupDeploymentRecordSchema }).strict()
+      const parsed = z41.object({
+        ok: z41.literal(true),
+        data: z41.object({ record: setupDeploymentRecordSchema }).strict()
       }).strict().safeParse(result2.payload);
       if (!result2.ok || !parsed.success || stableJsonStringify(parsed.data.data.record) !== stableJsonStringify(next))
         fail2("deployment_record_unconfirmed", "The setup deployment record was not acknowledged. Reload context before continuing; no deployment is blindly repeated.");
@@ -6143,7 +6242,7 @@ async function setupDeployCommand(input, deps = defaults) {
       const item = owned(key);
       if (key === "SITEPLANE_ADMIN_SESSION_SECRET" && item && record.phase === "verified")
         continue;
-      const current = item ? z40.object({ key: z40.literal(key), value: z40.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`)).value : null;
+      const current = item ? z41.object({ key: z41.literal(key), value: z41.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`)).value : null;
       if (current !== value)
         pending.push({
           key,
@@ -6168,7 +6267,7 @@ async function setupDeployCommand(input, deps = defaults) {
         const item = owned(key);
         if (!item)
           fail2("environment_write_unconfirmed", "A Siteplane Production binding was not persisted; retry the same configuration.");
-        const observed = z40.object({ key: z40.literal(key), value: z40.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`));
+        const observed = z41.object({ key: z41.literal(key), value: z41.string() }).parse(await api(`/v1/projects/${provider.projectId}/env/${encodeURIComponent(item.id)}?${scope}`));
         if (observed.value !== value)
           fail2("environment_write_unconfirmed", "The provider readback does not match the authorized Siteplane value; no deployment was started.");
       }
@@ -6181,7 +6280,7 @@ async function setupDeployCommand(input, deps = defaults) {
     const detail = async (id) => deploymentSchema.parse(await api(`/v13/deployments/${encodeURIComponent(id)}?${scope}&withGitRepoInfo=true`));
     const matches = (deployment2) => deployment2.projectId === provider.projectId && deployment2.target === "production" && (!deployment2.ownerId || deployment2.ownerId === provider.teamId) && deployment2.createdAt >= Date.parse(record.environmentWrittenAt) && (deployment2.meta?.siteplaneOperationId === record.operationId || provider.git && (deployment2.gitSource?.sha ?? deployment2.meta?.githubCommitSha ?? deployment2.meta?.gitlabCommitSha ?? deployment2.meta?.bitbucketCommitSha ?? deployment2.meta?.gitCommitSha) === revision);
     const discover = async () => {
-      const result2 = z40.object({ deployments: z40.array(z40.object({ uid: z40.string() })) }).parse(await api(`/v6/deployments?${scope}&projectId=${provider.projectId}&target=production&since=${Date.parse(record.environmentWrittenAt)}&limit=100`));
+      const result2 = z41.object({ deployments: z41.array(z41.object({ uid: z41.string() })) }).parse(await api(`/v6/deployments?${scope}&projectId=${provider.projectId}&target=production&since=${Date.parse(record.environmentWrittenAt)}&limit=100`));
       const candidates = [];
       for (const item of result2.deployments) {
         const found = await detail(item.uid);
@@ -6356,10 +6455,10 @@ async function setupDeployCommand(input, deps = defaults) {
 }
 
 // ../cli/dist/commands/setup-claim.js
-import { z as z41 } from "zod";
+import { z as z42 } from "zod";
 async function setupClaimCommand(input) {
   const code = setupClaimCodeSchema.safeParse(input.code);
-  const requestId = z41.string().uuid().safeParse(input.claimRequestId);
+  const requestId = z42.string().uuid().safeParse(input.claimRequestId);
   if (!code.success || input.action === "confirm" && !requestId.success)
     return required("invalid_claim_request", "Inspect the code from your review, then confirm that concrete request with --code and --request after the user's explicit approval.");
   const [config, credentials] = await Promise.all([readProjectConfig(input.projectDir), readLocalCredentials(input.projectDir)]);
@@ -6398,11 +6497,11 @@ async function setupClaimCommand(input) {
         ...input.action === "confirm" ? { claimRequestId: input.claimRequestId } : {}
       });
       if (!response.ok) {
-        const denied = z41.object({ error: z41.object({ code: setupClaimDenialSchema.shape.status }) }).safeParse(payload);
+        const denied = z42.object({ error: z42.object({ code: setupClaimDenialSchema.shape.status }) }).safeParse(payload);
         return required(denied.success ? denied.data.error.code : "claim_unavailable", "Claim was not acknowledged. Check the review and retry the same request; do not create another project.");
       }
       if (input.action === "inspect") {
-        const inspected = z41.object({ ok: z41.literal(true), data: setupClaimInspectionSchema }).strict().parse(payload).data;
+        const inspected = z42.object({ ok: z42.literal(true), data: setupClaimInspectionSchema }).strict().parse(payload).data;
         if (inspected.siteId !== config.siteId || inspected.runId !== config.runId)
           throw new Error("Claim binding mismatch.");
         return {
@@ -6411,7 +6510,7 @@ async function setupClaimCommand(input) {
           nextAction: "Show this account, workspace and website to the user. Only after their explicit approval, run setup claim confirm with the same code and this requestId."
         };
       }
-      receipt = z41.object({ ok: z41.literal(true), data: setupClaimReceiptSchema }).strict().parse(payload).data;
+      receipt = z42.object({ ok: z42.literal(true), data: setupClaimReceiptSchema }).strict().parse(payload).data;
       if (receipt.siteId !== config.siteId || receipt.runId !== config.runId || receipt.requestId !== input.claimRequestId)
         throw new Error("Claim receipt binding mismatch.");
     } catch {
@@ -6422,7 +6521,7 @@ async function setupClaimCommand(input) {
   let acknowledgementSettled = false;
   try {
     const { response, payload } = await send({ action: "acknowledge", claimRequestId: receipt.requestId });
-    const result2 = z41.object({ ok: z41.literal(true), data: z41.object({ acknowledged: z41.boolean() }).strict() }).strict().safeParse(payload);
+    const result2 = z42.object({ ok: z42.literal(true), data: z42.object({ acknowledged: z42.boolean() }).strict() }).strict().safeParse(payload);
     acknowledgementSettled = response.ok && result2.success;
   } catch {
   }