siteplane 0.1.64 → 0.1.65

package/dist/bin/siteplane.js

@@ -2,8 +2,8 @@
 
 // src/bin/run-siteplane.ts
 import { randomUUID as randomUUID8 } from "crypto";
-import { access as access7, readFile as readFile13 } from "fs/promises";
-import { join as join13, resolve as resolve4 } from "path";
+import { access as access8, readFile as readFile13 } from "fs/promises";
+import { join as join14, resolve as resolve4 } from "path";
 
 // ../cli/dist/analytics/manifest.js
 import { mkdir, readFile, writeFile } from "fs/promises";
@@ -692,6 +692,7 @@ var bookingPublicConfigSchema = z9.object({
   settings: z9.object({
     slotIntervalMinutes: z9.number().int().positive(),
     minLeadMinutes: z9.number().int().min(0),
+    minCancelLeadMinutes: z9.number().int().min(0),
     maxAdvanceDays: z9.number().int().min(1),
     requirePhone: z9.boolean(),
     collectNote: z9.boolean(),
@@ -900,7 +901,7 @@ var bookingManifestSchema = z9.object({
   siteId: z9.string().trim().min(1),
   siteKeyPrefix: z9.string().startsWith("bk_pub_"),
   bookingPageSlug: z9.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).min(2).max(64),
-  embedMode: z9.enum(["script", "web_component", "iframe"]).optional(),
+  integration: z9.literal("rewrite").optional(),
   productionOrigin: z9.string().url().optional()
 }).passthrough();
 var secretManifestKeys = /* @__PURE__ */ new Set([
@@ -2876,117 +2877,63 @@ function collectRedactedBookingKeys(input, prefix = "") {
 }
 
 // ../cli/dist/booking/static-scan.js
+import ts2 from "typescript";
 function scanBookingSourceFiles(files, input) {
-  const embeds = files.flatMap(scanBookingEmbedFile);
-  const findings = embeds.map(createEmbedFoundIssue);
-  const hardErrors = embeds.length === 0 ? [
-    {
-      code: "booking_scan.embed_missing",
-      message: "No Siteplane Booking embed script, web component or iframe was found.",
+  const findings = [];
+  const hardErrors = [];
+  const warnings = [];
+  for (const file of files) {
+    let visit2 = function(node) {
+      if (ts2.isCallExpression(node) && ts2.isIdentifier(node.expression) && node.expression.text === "withSiteplane") {
+        const options = node.arguments[1];
+        const booking = options && property(options, "booking");
+        const site = booking && property(booking, "site");
+        if (site && ts2.isStringLiteralLike(site)) {
+          const issue = {
+            code: site.text === input.siteId ? "booking_scan.integration_found" : "booking_scan.site_mismatch",
+            message: site.text === input.siteId ? "Booking /booking rewrite configured for this Site ID." : "The Booking wrapper uses a different Site ID; use the Site ID supplied by Siteplane.",
+            filePath: file.filePath
+          };
+          (site.text === input.siteId ? findings : hardErrors).push(issue);
+        }
+      }
+      ts2.forEachChild(node, visit2);
+    };
+    var visit = visit2;
+    const source = ts2.createSourceFile(file.filePath, file.sourceText, ts2.ScriptTarget.Latest, true, ts2.ScriptKind.TSX);
+    visit2(source);
+  }
+  if (!findings.length && !hardErrors.length)
+    hardErrors.push({
+      code: "booking_scan.integration_missing",
+      message: "Could not verify withSiteplane(nextConfig, { booking: { site: <site-id> } }). Include next.config.ts in the scan and use a literal Site ID.",
+      filePath: "next.config.ts"
+    });
+  if (input.productionOrigin && !files.some((file) => file.sourceText.includes(input.productionOrigin)))
+    warnings.push({
+      code: "booking_scan.origin_not_detected",
+      message: "Verify the public booking address and its allowed origins in Siteplane settings.",
       filePath: "siteplane.booking.json"
-    }
-  ] : [];
-  const warnings = [
-    ...createPageSlugWarnings(embeds, input.bookingPageSlug),
-    ...createOriginWarnings(files, input.productionOrigin)
-  ];
-  const selectedEmbed = selectManifestEmbed(embeds);
-  const manifest = bookingManifestSchema.parse({
-    schemaVersion: 1,
-    siteId: input.siteId,
-    siteKeyPrefix: input.siteKeyPrefix,
-    bookingPageSlug: selectedEmbed?.pageSlug ?? input.bookingPageSlug,
-    ...selectedEmbed ? { embedMode: selectedEmbed.embedMode } : {},
-    ...input.productionOrigin ? { productionOrigin: input.productionOrigin } : {}
-  });
+    });
   return {
-    manifest,
+    manifest: bookingManifestSchema.parse({
+      schemaVersion: 1,
+      ...input,
+      integration: "rewrite"
+    }),
     findings,
     hardErrors,
     warnings,
     suggestions: []
   };
 }
-function scanBookingEmbedFile(file) {
-  const embeds = [];
-  const source = file.sourceText;
-  if (/\/embed\/booking\.js/u.test(source)) {
-    embeds.push({
-      filePath: file.filePath,
-      embedMode: "script"
-    });
-  }
-  if (/<siteplane-booking\b/u.test(source)) {
-    const pageSlug = readAttributeValue(source, "booking-page-slug");
-    embeds.push({
-      filePath: file.filePath,
-      embedMode: "web_component",
-      ...pageSlug ? { pageSlug } : {}
-    });
-  }
-  for (const match of source.matchAll(/<iframe\b[^>]*>/giu)) {
-    const tag = match[0];
-    const src = readAttributeValue(tag, "src");
-    const pageSlug = src ? readBookingPageSlug(src) : void 0;
-    if (/data-siteplane-booking/u.test(tag) || pageSlug !== void 0) {
-      embeds.push({
-        filePath: file.filePath,
-        embedMode: "iframe",
-        ...pageSlug ? { pageSlug } : {}
-      });
-    }
-  }
-  return embeds;
-}
-function createEmbedFoundIssue(embed) {
-  return {
-    code: "booking_scan.embed_found",
-    message: "Siteplane Booking embed was found.",
-    filePath: embed.filePath,
-    embedMode: embed.embedMode,
-    ...embed.pageSlug ? { pageSlug: embed.pageSlug } : {}
-  };
-}
-function createPageSlugWarnings(embeds, expectedSlug) {
-  return embeds.filter((embed) => embed.pageSlug && embed.pageSlug !== expectedSlug).map((embed) => {
-    const pageSlug = embed.pageSlug;
-    return {
-      code: "booking_scan.page_slug_mismatch",
-      message: `Booking embed references page slug ${pageSlug}, but the manifest is configured for ${expectedSlug}.`,
-      filePath: embed.filePath,
-      embedMode: embed.embedMode,
-      ...pageSlug ? { pageSlug } : {}
-    };
-  });
-}
-function createOriginWarnings(files, productionOrigin) {
-  if (!productionOrigin) {
-    return [];
-  }
-  if (files.some((file) => file.sourceText.includes(productionOrigin))) {
-    return [];
+function property(node, name2) {
+  if (!ts2.isObjectLiteralExpression(node))
+    return;
+  for (const item of node.properties) {
+    if (ts2.isPropertyAssignment(item) && (ts2.isIdentifier(item.name) || ts2.isStringLiteral(item.name)) && item.name.text === name2)
+      return item.initializer;
   }
-  return [
-    {
-      code: "booking_scan.origin_not_detected",
-      message: "The configured production origin was not found statically; verify it is registered as an allowed Booking origin in Siteplane.",
-      filePath: "siteplane.booking.json"
-    }
-  ];
-}
-function selectManifestEmbed(embeds) {
-  return embeds.find((embed) => embed.embedMode === "web_component") ?? embeds.find((embed) => embed.embedMode === "iframe") ?? embeds[0];
-}
-function readAttributeValue(source, attributeName) {
-  const escapedName = escapeRegExp(attributeName);
-  const match = new RegExp(`${escapedName}\\s*=\\s*["']([^"']+)["']`, "iu").exec(source);
-  return match?.[1];
-}
-function readBookingPageSlug(value) {
-  return /\/book\/([a-z0-9]+(?:-[a-z0-9]+)*)(?:[/?#]|$)/u.exec(value)?.[1];
-}
-function escapeRegExp(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
 
 // ../cli/dist/commands/analytics/check.js
@@ -3392,10 +3339,17 @@ async function analyticsTestCommand(input) {
 }
 
 // ../cli/dist/commands/booking/check.js
-import { readFile as readFile4 } from "fs/promises";
+import { dirname as dirname4, join as join2 } from "path";
+import { access, readFile as readFile4 } from "fs/promises";
 async function bookingCheckCommand(input) {
   const validatedManifest = await readBookingManifestFile(input.manifestPath);
-  const sourceFiles = await readSourceFiles2(input.sourceFilePaths);
+  const configs = (await Promise.all(["next.config.ts", "next.config.js", "next.config.mjs"].map(async (name2) => {
+    const path = join2(dirname4(input.manifestPath), name2);
+    return await access(path).then(() => path, () => null);
+  }))).filter((path) => path !== null);
+  const sourceFiles = await readSourceFiles2([
+    .../* @__PURE__ */ new Set([...input.sourceFilePaths, ...configs])
+  ]);
   const scanInput = {
     siteId: validatedManifest.manifest.siteId,
     siteKeyPrefix: validatedManifest.manifest.siteKeyPrefix,
@@ -3436,7 +3390,7 @@ function createBoundaryErrors2(validation) {
 
 // ../cli/dist/commands/booking/init.js
 import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
-import { dirname as dirname4, join as join2 } from "path";
+import { dirname as dirname5, join as join3 } from "path";
 async function bookingInitCommand(input) {
   const manifest = {
     schemaVersion: 1,
@@ -3445,7 +3399,7 @@ async function bookingInitCommand(input) {
     bookingPageSlug: input.bookingPageSlug,
     ...input.productionOrigin ? { productionOrigin: input.productionOrigin } : {}
   };
-  const manifestPath = join2(input.projectDir, "siteplane.booking.json");
+  const manifestPath = join3(input.projectDir, "siteplane.booking.json");
   const artifacts = createBookingArtifacts(input.agentClient);
   await writeBookingManifestFile(manifestPath, manifest);
   for (const artifact of artifacts) {
@@ -3485,16 +3439,18 @@ function createBookingArtifacts(agentClient) {
   return artifacts;
 }
 async function writeProjectFile2(projectDir, relativePath, contents) {
-  const path = join2(projectDir, relativePath);
-  await mkdir4(dirname4(path), { recursive: true });
+  const path = join3(projectDir, relativePath);
+  await mkdir4(dirname5(path), { recursive: true });
   await writeFile4(path, contents, "utf8");
 }
 var bookingRulesTemplate = `# Siteplane Booking Rules
 
 - Do not change layout, copy, styling, animation or business logic while adding Booking.
-- Add only the Siteplane Booking embed script and a booking iframe or web component.
-- Use the configured booking page slug from siteplane.booking.json.
-- Register the production website origin in Siteplane before testing cross-origin embeds.
+- Integrate /booking on the customer domain through withSiteplane(nextConfig, { booking: { site: "<site-id>" } }); use the immutable Site ID supplied by Siteplane.
+- Use a normal <a href="/booking"> link, not next/link, an iframe or an embed script.
+- Preserve existing rewrites. Booking-only must not require Editor setup or siteplane.config.json.
+- Configure the public booking address in Siteplane; register its origin and call https://siteplane.io/api/booking/* directly with CORS, without a raw public key.
+- Preserve customer CSP and middleware; explain required Siteplane/Stripe permissions and exclude /booking from customer middleware.
 - Do not write setup tokens, project CLI tokens or private keys into source files.
 - Run npx siteplane booking check, npx siteplane booking sync and npx siteplane booking test after setup.
 - booking test stays in test_mode; live booking only starts after explicit dashboard activation.
@@ -3502,7 +3458,7 @@ var bookingRulesTemplate = `# Siteplane Booking Rules
 function bookingSkillTemplate(agentName) {
   return `# Siteplane Booking Skill
 
-Use this skill in ${agentName} before adding Siteplane Booking embeds.
+Use this skill in ${agentName} before integrating Siteplane Booking at /booking.
 
 ${bookingRulesTemplate}`;
 }
@@ -3556,9 +3512,9 @@ async function bookingTestCommand(input) {
 }
 
 // ../cli/dist/config/project-config.js
-import { access, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
+import { access as access2, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
 import { randomUUID as randomUUID2 } from "crypto";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 import { z as z31 } from "zod";
 var siteplaneProjectConfigSchema = z31.object({
   version: z31.literal(2),
@@ -3574,7 +3530,7 @@ var siteplaneProjectConfigSchema = z31.object({
   fieldContractHash: z31.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
 }).strict();
 async function readProjectPackageJson(projectDir) {
-  return JSON.parse(await readFile5(join3(projectDir, "package.json"), "utf8"));
+  return JSON.parse(await readFile5(join4(projectDir, "package.json"), "utf8"));
 }
 async function detectNextProject(projectDir) {
   const packageJson = await readProjectPackageJson(projectDir).catch(() => null);
@@ -3587,7 +3543,7 @@ async function detectNextProject(projectDir) {
     "next.config.ts"
   ]) {
     try {
-      await access(join3(projectDir, fileName));
+      await access2(join4(projectDir, fileName));
       return true;
     } catch {
     }
@@ -3595,13 +3551,13 @@ async function detectNextProject(projectDir) {
   return false;
 }
 async function writeProjectConfig(projectDir, config) {
-  const path = join3(projectDir, "siteplane.config.json");
+  const path = join4(projectDir, "siteplane.config.json");
   const parsed = siteplaneProjectConfigSchema.parse(config);
   await writeJsonAtomically(path, parsed, 420);
   return path;
 }
 async function readProjectConfig(projectDir) {
-  return siteplaneProjectConfigSchema.parse(JSON.parse(await readFile5(join3(projectDir, "siteplane.config.json"), "utf8")));
+  return siteplaneProjectConfigSchema.parse(JSON.parse(await readFile5(join4(projectDir, "siteplane.config.json"), "utf8")));
 }
 async function writeJsonAtomically(path, value, mode) {
   const temporaryPath = `${path}.${randomUUID2()}.tmp`;
@@ -3629,7 +3585,7 @@ async function writeJsonAtomically(path, value, mode) {
 import { execFile } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 import { chmod as chmod2, lstat, mkdir as mkdir5, open as open2, readFile as readFile6, rename as rename2, rm as rm2 } from "fs/promises";
-import { dirname as dirname5, join as join4, relative } from "path";
+import { dirname as dirname6, join as join5, relative } from "path";
 import { promisify } from "util";
 import { z as z32 } from "zod";
 var localSetupInstallationSchema = z32.object({
@@ -3654,7 +3610,7 @@ var localSetupCredentialsSchema = z32.union([
   z32.object({ installation: localSetupInstallationSchema }).strict()
 ]);
 async function assertLocalCredentialsPathSafe(projectDir, options = {}) {
-  const path = join4(projectDir, ".siteplane/credentials.json");
+  const path = join5(projectDir, ".siteplane/credentials.json");
   await assertCredentialFilesystemSafe(projectDir);
   const isTrackedFile = options.isTrackedFile ?? ((targetPath) => gitPathMatches(projectDir, targetPath, "ls-files"));
   const isIgnoredFile = options.isIgnoredFile ?? ((targetPath) => gitPathMatches(projectDir, targetPath, "check-ignore"));
@@ -3669,8 +3625,8 @@ async function assertLocalCredentialsPathSafe(projectDir, options = {}) {
 async function assertCredentialFilesystemSafe(projectDir) {
   for (const [path, directory, mode] of [
     [projectDir, true, null],
-    [join4(projectDir, ".siteplane"), true, 448],
-    [join4(projectDir, ".siteplane/credentials.json"), false, 384]
+    [join5(projectDir, ".siteplane"), true, 448],
+    [join5(projectDir, ".siteplane/credentials.json"), false, 384]
   ]) {
     const stat = await lstat(path).catch((error) => {
       if (error.code === "ENOENT")
@@ -3693,7 +3649,7 @@ async function writeLocalCredentials(projectDir, credentials, options = {}) {
 async function writeLocalSetupCredentials(projectDir, credentials, options = {}) {
   const path = await assertLocalCredentialsPathSafe(projectDir, options);
   const parsed = localSetupCredentialsSchema.parse(credentials);
-  await mkdir5(dirname5(path), { recursive: true, mode: 448 });
+  await mkdir5(dirname6(path), { recursive: true, mode: 448 });
   await writeCredentialsAtomically(path, parsed);
   return path;
 }
@@ -3706,7 +3662,7 @@ async function readLocalCredentials(projectDir) {
 }
 async function readLocalSetupCredentials(projectDir) {
   await assertCredentialFilesystemSafe(projectDir);
-  return localSetupCredentialsSchema.parse(JSON.parse(await readFile6(join4(projectDir, ".siteplane/credentials.json"), "utf8")));
+  return localSetupCredentialsSchema.parse(JSON.parse(await readFile6(join5(projectDir, ".siteplane/credentials.json"), "utf8")));
 }
 async function writeCredentialsAtomically(path, credentials) {
   const temporaryPath = `${path}.${randomUUID3()}.tmp`;
@@ -3724,7 +3680,7 @@ async function writeCredentialsAtomically(path, credentials) {
   try {
     await rename2(temporaryPath, path);
     await chmod2(path, 384);
-    const directory = await open2(dirname5(path), "r");
+    const directory = await open2(dirname6(path), "r");
     try {
       await directory.sync();
     } finally {
@@ -3747,8 +3703,8 @@ async function gitPathMatches(projectDir, path, command) {
 }
 
 // ../cli/dist/commands/init.js
-import { access as access3 } from "fs/promises";
-import { join as join7, relative as relative3 } from "path";
+import { access as access4 } from "fs/promises";
+import { join as join8, relative as relative3 } from "path";
 import { z as z35 } from "zod";
 
 // ../cli/dist/commands/setup-preflight.js
@@ -3760,7 +3716,7 @@ import { parse as parseYaml } from "yaml";
 // ../cli/dist/config/installed-package.js
 import { createRequire } from "module";
 import { readFile as readFile7 } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import { z as z33 } from "zod";
 var packageSchema = z33.object({
   name: z33.string().optional(),
@@ -3768,10 +3724,10 @@ var packageSchema = z33.object({
   peerDependencies: z33.record(z33.string(), z33.string()).optional()
 });
 async function readInstalledPackage(projectDir, name2) {
-  const require2 = createRequire(join5(projectDir, "package.json"));
+  const require2 = createRequire(join6(projectDir, "package.json"));
   for (const directory of require2.resolve.paths(name2) ?? []) {
     try {
-      return packageSchema.parse(JSON.parse(await readFile7(join5(directory, name2, "package.json"), "utf8")));
+      return packageSchema.parse(JSON.parse(await readFile7(join6(directory, name2, "package.json"), "utf8")));
     } catch (error) {
       if (error.code !== "ENOENT")
         throw error;
@@ -3783,7 +3739,7 @@ async function assertExactSetupPackages(projectDir, packages) {
   const manifest = z33.object({
     dependencies: z33.record(z33.string(), z33.string()).optional(),
     devDependencies: z33.record(z33.string(), z33.string()).optional()
-  }).parse(JSON.parse(await readFile7(join5(projectDir, "package.json"), "utf8")));
+  }).parse(JSON.parse(await readFile7(join6(projectDir, "package.json"), "utf8")));
   for (const [name2, version2] of [
     ["siteplane", packages.siteplane],
     ["@siteplane/runtime-next", packages.runtimeNext],
@@ -3797,8 +3753,8 @@ async function assertExactSetupPackages(projectDir, packages) {
 }
 
 // ../cli/dist/commands/setup-preflight.js
-import { access as access2, readFile as readFile8, realpath, readdir, readlink } from "fs/promises";
-import { dirname as dirname6, join as join6, relative as relative2, resolve, sep } from "path";
+import { access as access3, readFile as readFile8, realpath, readdir, readlink } from "fs/promises";
+import { dirname as dirname7, join as join7, relative as relative2, resolve, sep } from "path";
 import { z as z34 } from "zod";
 
 // ../cli/dist/commands/setup-process.js
@@ -3925,15 +3881,15 @@ var vercelProjectSchema = z34.object({
     productionBranch: z34.string().optional()
   }).nullable().optional()
 });
-var exists = async (path) => access2(path).then(() => true, () => false);
+var exists = async (path) => access3(path).then(() => true, () => false);
 var fail = (code, message) => {
   throw new SetupFailure(code, message);
 };
 var stable = (version2, major) => new RegExp(`^${major}\\.\\d+\\.\\d+$`, "u").test(version2);
 async function inspectSetupLocalProject(projectDir) {
   const projectDirectory = await realpath(resolve(projectDir));
-  const manifest = manifestSchema.parse(JSON.parse(await readFile8(join6(projectDirectory, "package.json"), "utf8")));
-  const apps = (await Promise.all(["app", "src/app"].map(async (path) => await exists(join6(projectDirectory, path)) ? path : null))).filter((path) => path !== null);
+  const manifest = manifestSchema.parse(JSON.parse(await readFile8(join7(projectDirectory, "package.json"), "utf8")));
+  const apps = (await Promise.all(["app", "src/app"].map(async (path) => await exists(join7(projectDirectory, path)) ? path : null))).filter((path) => path !== null);
   if (apps.length !== 1)
     fail("ambiguous_app_directory", "Select one Next.js App Router application with exactly one app/ or src/app/ directory.");
   const repositoryRoot = (await setupProcess("git", ["rev-parse", "--show-toplevel"], {
@@ -3947,8 +3903,8 @@ async function inspectSetupLocalProject(projectDir) {
       fail("git_submodule_conflict", "The repository contains Git submodules. Resolve the explicit deployment source boundary before setup; the CLI will not copy external repositories.");
     if (!entry.startsWith("120000 "))
       continue;
-    const path = join6(repositoryRoot, entry.slice(entry.indexOf("	") + 1));
-    const target = resolve(dirname6(path), await readlink(path));
+    const path = join7(repositoryRoot, entry.slice(entry.indexOf("	") + 1));
+    const target = resolve(dirname7(path), await readlink(path));
     const bound = relative2(repositoryRoot, target);
     if (bound.startsWith("..") || bound.startsWith(sep))
       fail("external_symlink_conflict", "A tracked symbolic link points outside this repository. Resolve that source boundary before setup; local external files cannot enter a deployment.");
@@ -3964,10 +3920,10 @@ async function inspectSetupLocalProject(projectDir) {
   ];
   let locks = [];
   for (; ; ) {
-    locks = (await Promise.all(lockNames.map(async (name3) => await exists(join6(lockfileRoot, name3)) ? name3 : null))).filter((name3) => name3 !== null);
-    if (locks.length || lockfileRoot === repositoryRoot || dirname6(lockfileRoot) === lockfileRoot)
+    locks = (await Promise.all(lockNames.map(async (name3) => await exists(join7(lockfileRoot, name3)) ? name3 : null))).filter((name3) => name3 !== null);
+    if (locks.length || lockfileRoot === repositoryRoot || dirname7(lockfileRoot) === lockfileRoot)
       break;
-    lockfileRoot = dirname6(lockfileRoot);
+    lockfileRoot = dirname7(lockfileRoot);
   }
   if (locks.length > 1)
     fail("conflicting_lockfiles", "Resolve conflicting package-manager lockfiles before setup; Siteplane does not replace them.");
@@ -3976,9 +3932,9 @@ async function inspectSetupLocalProject(projectDir) {
   const lockName = locks[0];
   if (!["package-lock.json", "pnpm-lock.yaml"].includes(lockName))
     fail("unsupported_package_manager", "This setup supports npm 10 or pnpm 9/10 with their canonical lockfile.");
-  const rootManifest = manifestSchema.parse(JSON.parse(await readFile8(join6(lockfileRoot, "package.json"), "utf8")));
+  const rootManifest = manifestSchema.parse(JSON.parse(await readFile8(join7(lockfileRoot, "package.json"), "utf8")));
   if (lockfileRoot !== projectDirectory) {
-    const workspaceFile = join6(lockfileRoot, "pnpm-workspace.yaml");
+    const workspaceFile = join7(lockfileRoot, "pnpm-workspace.yaml");
     const workspace = lockName === "pnpm-lock.yaml" && await exists(workspaceFile) ? z34.object({ packages: z34.array(z34.string()) }).parse(parseYaml(await readFile8(workspaceFile, "utf8"))).packages : z34.union([
       z34.array(z34.string()),
       z34.object({ packages: z34.array(z34.string()) }).transform((value) => value.packages)
@@ -3987,14 +3943,14 @@ async function inspectSetupLocalProject(projectDir) {
     if (!workspace.some((pattern) => !pattern.startsWith("!") && minimatch(selected, pattern)) || workspace.some((pattern) => pattern.startsWith("!") && minimatch(selected, pattern.slice(1))))
       fail("unbound_workspace_app", "The selected application is excluded from the canonical lockfile's workspace packages. Select its actual application root.");
   }
-  for (let ancestor = dirname6(lockfileRoot); ancestor.startsWith(repositoryRoot + sep) || ancestor === repositoryRoot; ancestor = dirname6(ancestor)) {
-    const ancestorLocks = await Promise.all(lockNames.map((name3) => exists(join6(ancestor, name3))));
+  for (let ancestor = dirname7(lockfileRoot); ancestor.startsWith(repositoryRoot + sep) || ancestor === repositoryRoot; ancestor = dirname7(ancestor)) {
+    const ancestorLocks = await Promise.all(lockNames.map((name3) => exists(join7(ancestor, name3))));
     if (ancestorLocks.some(Boolean))
       fail("ambiguous_lockfile_root", "Both the selected package and its repository ancestors contain lockfiles. Select one canonical workspace resolution before setup.");
     if (ancestor === repositoryRoot)
       break;
   }
-  const lockText = await readFile8(join6(lockfileRoot, lockName), "utf8");
+  const lockText = await readFile8(join7(lockfileRoot, lockName), "utf8");
   const npmLock = lockName === "package-lock.json" ? z34.object({
     lockfileVersion: z34.number(),
     packages: z34.record(z34.string(), z34.object({
@@ -4047,9 +4003,9 @@ async function inspectSetupLocalProject(projectDir) {
     fail("lockfile_format_conflict", "The canonical lockfile format does not match npm 10 or pnpm 9/10.");
   const sourceConflicts = [];
   for (const file of ["next.config.js", "next.config.mjs", "next.config.ts"]) {
-    if (!await exists(join6(projectDirectory, file)))
+    if (!await exists(join7(projectDirectory, file)))
       continue;
-    const source = await readFile8(join6(projectDirectory, file), "utf8");
+    const source = await readFile8(join7(projectDirectory, file), "utf8");
     if (/output\s*:\s*['"]export['"]/u.test(source))
       sourceConflicts.push("static_export");
     if (/\bbasePath\s*:/u.test(source))
@@ -4069,11 +4025,11 @@ async function inspectSetupLocalProject(projectDir) {
     "src/proxy.ts",
     "src/proxy.js"
   ]) {
-    if (await exists(join6(projectDirectory, name3))) {
+    if (await exists(join7(projectDirectory, name3))) {
       sourceConflicts.push(`inspect_routing:${name3}`);
-      if (await readlink(join6(projectDirectory, name3)).catch(() => null))
+      if (await readlink(join7(projectDirectory, name3)).catch(() => null))
         continue;
-      const policySource = await readFile8(join6(projectDirectory, name3), "utf8");
+      const policySource = await readFile8(join7(projectDirectory, name3), "utf8");
       if (/Content-Security-Policy|img-src|default-src/iu.test(policySource))
         sourceConflicts.push(`inspect_image_csp:${name3}`);
     }
@@ -4082,7 +4038,7 @@ async function inspectSetupLocalProject(projectDir) {
     for (const entry of await readdir(directory, { withFileTypes: true })) {
       if (entry.isSymbolicLink() || ["node_modules", ".git", ".next", ".siteplane", ".vercel"].includes(entry.name))
         continue;
-      const path = join6(directory, entry.name);
+      const path = join7(directory, entry.name);
       if (entry.isDirectory()) {
         await inspectSource(path);
         continue;
@@ -4102,7 +4058,7 @@ async function inspectSetupLocalProject(projectDir) {
         fail("next_security_advisory", `Next.js ${nextVersion} contains Server Actions affected by the July 2026 advisory. Review https://nextjs.org/blog/july-2026-security-release and explicitly update the affected dependency before setup.`);
     }
   }
-  await inspectSource(join6(projectDirectory, apps[0]));
+  await inspectSource(join7(projectDirectory, apps[0]));
   const gitRead = async (args) => setupProcess("git", args, { cwd: projectDirectory }).then((value) => value.trim(), () => null);
   return {
     projectDirectory,
@@ -4114,7 +4070,7 @@ async function inspectSetupLocalProject(projectDir) {
     nodeVersion: process.versions.node,
     packageManager: { name: name2, version: localVersion, declared },
     lockfile: {
-      path: relative2(repositoryRoot, join6(lockfileRoot, lockName)),
+      path: relative2(repositoryRoot, join7(lockfileRoot, lockName)),
       format,
       sha256: createHash2("sha256").update(lockText).digest("hex")
     },
@@ -4133,14 +4089,14 @@ async function setupPreflightCommand(input) {
     local = await inspectSetupLocalProject(input.projectDir);
     await assertLocalCredentialsPathSafe(input.projectDir);
     let linkDirectory = local.projectDirectory;
-    while (!await exists(join6(linkDirectory, ".vercel/project.json")) && linkDirectory !== local.repositoryRoot && dirname6(linkDirectory) !== linkDirectory)
-      linkDirectory = dirname6(linkDirectory);
-    if (!await exists(join6(linkDirectory, ".vercel/project.json")))
+    while (!await exists(join7(linkDirectory, ".vercel/project.json")) && linkDirectory !== local.repositoryRoot && dirname7(linkDirectory) !== linkDirectory)
+      linkDirectory = dirname7(linkDirectory);
+    if (!await exists(join7(linkDirectory, ".vercel/project.json")))
       fail("vercel_project_not_linked", "Link this application to its intended Vercel project before setup; Siteplane will not guess a target.");
     const linked = z34.object({
       projectId: z34.string().regex(/^prj_[A-Za-z0-9]+$/u),
       orgId: z34.string().regex(/^(?:team|user)_[A-Za-z0-9]+$/u)
-    }).parse(JSON.parse(await readFile8(join6(linkDirectory, ".vercel/project.json"), "utf8")));
+    }).parse(JSON.parse(await readFile8(join7(linkDirectory, ".vercel/project.json"), "utf8")));
     const project = vercelProjectSchema.parse(await setupVercelApi(linkDirectory, `/v9/projects/${linked.projectId}?teamId=${linked.orgId}`));
     if (project.id !== linked.projectId || project.accountId !== linked.orgId)
       fail("vercel_identity_conflict", "The provider project does not match the locally linked project and team.");
@@ -4278,7 +4234,7 @@ var bootstrapResponseSchema = z35.object({
 }).strict();
 async function bootstrapProjectConnection(input) {
   const fetcher = input.fetcher ?? fetch;
-  const existing = await access3(join7(input.projectDir, "siteplane.config.json")).then(() => readProjectConfig(input.projectDir), () => null);
+  const existing = await access4(join8(input.projectDir, "siteplane.config.json")).then(() => readProjectConfig(input.projectDir), () => null);
   const response = await fetcher(`${input.apiBaseUrl.replace(/\/$/, "")}/api/cli/setup/bootstrap`, {
     method: "POST",
     signal: AbortSignal.timeout(2e4),
@@ -4309,10 +4265,10 @@ async function acknowledgeBootstrapResponse(input) {
   }
 }
 async function persistSiteSetupBootstrap(input, bootstrap, appDirectory, installation) {
-  const previous = await access3(join7(input.projectDir, "siteplane.config.json")).then(() => readProjectConfig(input.projectDir), () => null);
+  const previous = await access4(join8(input.projectDir, "siteplane.config.json")).then(() => readProjectConfig(input.projectDir), () => null);
   if (previous && (previous.siteId !== bootstrap.siteId || previous.runId !== bootstrap.runId || previous.publicSiteKeyId !== bootstrap.publicSiteKeyId || previous.publicSiteKey !== bootstrap.publicSiteKey))
     throw new Error("The grant does not match this local Siteplane run. Preserve this directory and choose the correct owner connection.");
-  const previousCredentials = previous ? await access3(join7(input.projectDir, ".siteplane/credentials.json")).then(() => readLocalSetupCredentials(input.projectDir), () => null) : null;
+  const previousCredentials = previous ? await access4(join8(input.projectDir, ".siteplane/credentials.json")).then(() => readLocalSetupCredentials(input.projectDir), () => null) : null;
   const credentialsPath = await writeLocalCredentials(input.projectDir, {
     ...previousCredentials && "adminSession" in previousCredentials && previousCredentials.adminSession ? { adminSession: previousCredentials.adminSession } : {},
     ...previousCredentials && "claimReceipt" in previousCredentials && previousCredentials.claimReceipt ? { claimReceipt: previousCredentials.claimReceipt } : {},
@@ -4365,7 +4321,7 @@ async function persistFeatureBootstrap(input, bootstrap) {
     throw new Error("Siteplane credentials could not be verified.");
   }
   return {
-    configPath: join7(input.projectDir, "siteplane.config.json"),
+    configPath: join8(input.projectDir, "siteplane.config.json"),
     credentialsPath
   };
 }
@@ -4388,7 +4344,7 @@ function readErrorMessage(payload) {
 
 // ../cli/dist/commands/scan.js
 import { readdir as readdir2 } from "fs/promises";
-import { extname, join as join8 } from "path";
+import { extname, join as join9 } from "path";
 var defaultScanRoots = ["app", "src", "pages", "components", "lib"];
 var excludedDirectories = /* @__PURE__ */ new Set([
   ".git",
@@ -4406,14 +4362,14 @@ async function resolveScanFilePaths(filePaths, options = {}) {
     return filePaths;
   }
   const projectDir = options.projectDir ?? process.cwd();
-  const discovered = await Promise.all(defaultScanRoots.map((root) => collectSourceFiles(join8(projectDir, root))));
+  const discovered = await Promise.all(defaultScanRoots.map((root) => collectSourceFiles(join9(projectDir, root))));
   return [...new Set(discovered.flat())].sort();
 }
 async function collectSourceFiles(directory) {
   const entries = await readdir2(directory, { withFileTypes: true }).catch(() => []);
   const files = [];
   for (const entry of entries) {
-    const entryPath = join8(directory, entry.name);
+    const entryPath = join9(directory, entry.name);
     if (entry.isDirectory()) {
       if (!excludedDirectories.has(entry.name)) {
         files.push(...await collectSourceFiles(entryPath));
@@ -4434,7 +4390,7 @@ import { promisify as promisify2 } from "util";
 import { z as z36 } from "zod";
 
 // ../cli/dist/scan/next-source-scan.js
-import ts2 from "typescript";
+import ts3 from "typescript";
 import { isAbsolute, relative as relative4 } from "path";
 var eventPreviewHandlerMissingMessage = "Event preview fields must consume preview values with useSiteplanePreviewText from @siteplane/runtime-next/client or a siteplane:preview-value-applied listener.";
 var valueCallUnusedMessage = "Siteplane value calls must feed rendered content. Assign or await the returned value and render that value instead of ignoring the call.";
@@ -4590,10 +4546,10 @@ function scanSourceFile2(file, fields, hardErrors) {
   const eventPreviewComponentPropUsages = [];
   const eventPreviewConsumerFieldIds = /* @__PURE__ */ new Set();
   let hasGenericEventPreviewConsumer = false;
-  const sourceFile = ts2.createSourceFile(file.filePath, file.sourceText, ts2.ScriptTarget.Latest, true, ts2.ScriptKind.TSX);
+  const sourceFile = ts3.createSourceFile(file.filePath, file.sourceText, ts3.ScriptTarget.Latest, true, ts3.ScriptKind.TSX);
   function visit(node, currentComponentName) {
     const nextComponentName = getFunctionComponentName(node) ?? currentComponentName;
-    if (ts2.isJsxSelfClosingElement(node) || ts2.isJsxOpeningElement(node)) {
+    if (ts3.isJsxSelfClosingElement(node) || ts3.isJsxOpeningElement(node)) {
       const componentName = getJsxTagName2(node.tagName);
       if (editableComponentNames.has(componentName)) {
         hardErrors.push({
@@ -4604,7 +4560,7 @@ function scanSourceFile2(file, fields, hardErrors) {
       }
       collectEventPreviewComponentPropUsages(node, eventPreviewAttrVariables, eventPreviewComponentPropUsages, file);
     }
-    if (ts2.isCallExpression(node)) {
+    if (ts3.isCallExpression(node)) {
       collectAttrsCall(node, attrFieldIds, attrRouteRefs, eventPreviewAttrs, eventPreviewAttrVariables, directAttrs, file);
       collectUnusedValueCallError(node, hardErrors, file);
       const extractedFields = extractFunctionFields(node, file);
@@ -4628,7 +4584,7 @@ function scanSourceFile2(file, fields, hardErrors) {
     if (isGenericEventPreviewConsumerReference(node)) {
       hasGenericEventPreviewConsumer = true;
     }
-    ts2.forEachChild(node, (child) => visit(child, nextComponentName));
+    ts3.forEachChild(node, (child) => visit(child, nextComponentName));
   }
   visit(sourceFile);
   markMissingAttrsWarnings(fieldsInFile, attrFieldIds, attrRouteRefs);
@@ -4655,7 +4611,7 @@ function collectUnusedValueCallError(node, hardErrors, file) {
   });
 }
 function getSiteplaneValueFunctionName(node) {
-  if (!ts2.isPropertyAccessExpression(node.expression)) {
+  if (!ts3.isPropertyAccessExpression(node.expression)) {
     return void 0;
   }
   if (node.expression.expression.getText() !== "siteplane") {
@@ -4668,16 +4624,16 @@ function getSiteplaneValueFunctionName(node) {
   return void 0;
 }
 function isIgnoredValueCall(node) {
-  if (ts2.isVoidExpression(node.parent)) {
+  if (ts3.isVoidExpression(node.parent)) {
     return true;
   }
-  if (ts2.isExpressionStatement(node.parent)) {
+  if (ts3.isExpressionStatement(node.parent)) {
     return true;
   }
-  return ts2.isAwaitExpression(node.parent) && ts2.isExpressionStatement(node.parent.parent);
+  return ts3.isAwaitExpression(node.parent) && ts3.isExpressionStatement(node.parent.parent);
 }
 function extractFunctionFields(node, file) {
-  if (!ts2.isPropertyAccessExpression(node.expression)) {
+  if (!ts3.isPropertyAccessExpression(node.expression)) {
     return [];
   }
   if (node.expression.expression.getText() !== "siteplane") {
@@ -4815,7 +4771,7 @@ function createFallbackHash(fieldType, fallback) {
   }
 }
 function collectAttrsCall(node, attrFieldIds, attrRouteRefs, eventPreviewAttrs, eventPreviewAttrVariables, directAttrs, file) {
-  if (!ts2.isPropertyAccessExpression(node.expression)) {
+  if (!ts3.isPropertyAccessExpression(node.expression)) {
     return;
   }
   if (node.expression.expression.getText() !== "siteplane" || node.expression.name.text !== "attrs") {
@@ -4844,7 +4800,7 @@ function collectAttrsCall(node, attrFieldIds, attrRouteRefs, eventPreviewAttrs,
     }
     return;
   }
-  if (firstArg && ts2.isIdentifier(firstArg) && typeof secondArg === "string") {
+  if (firstArg && ts3.isIdentifier(firstArg) && typeof secondArg === "string") {
     attrRouteRefs.add(`${firstArg.text}:${secondArg}`);
   }
 }
@@ -4881,7 +4837,7 @@ function hasEventPreviewStrategy(options) {
   return !!options && typeof options === "object" && !Array.isArray(options) && options.previewStrategy === "event";
 }
 function isGenericEventPreviewConsumerReference(node) {
-  return (ts2.isStringLiteral(node) || ts2.isNoSubstitutionTemplateLiteral(node)) && node.text === "siteplane:preview-value-applied";
+  return (ts3.isStringLiteral(node) || ts3.isNoSubstitutionTemplateLiteral(node)) && node.text === "siteplane:preview-value-applied";
 }
 function getPreviewHookFieldId(node, eventPreviewAttrVariables) {
   const firstArg = getUseSiteplanePreviewTextFirstArg(node);
@@ -4892,7 +4848,7 @@ function getPreviewHookFieldId(node, eventPreviewAttrVariables) {
   if (typeof directFieldId === "string") {
     return directFieldId;
   }
-  if (ts2.isIdentifier(firstArg)) {
+  if (ts3.isIdentifier(firstArg)) {
     return eventPreviewAttrVariables.get(firstArg.text);
   }
   return void 0;
@@ -4902,16 +4858,16 @@ function getPreviewHookPropName(node, eventPreviewAttrVariables) {
   if (!firstArg) {
     return void 0;
   }
-  if (ts2.isIdentifier(firstArg) && !eventPreviewAttrVariables.has(firstArg.text)) {
+  if (ts3.isIdentifier(firstArg) && !eventPreviewAttrVariables.has(firstArg.text)) {
     return firstArg.text;
   }
-  if (ts2.isPropertyAccessExpression(firstArg) && ts2.isIdentifier(firstArg.expression)) {
+  if (ts3.isPropertyAccessExpression(firstArg) && ts3.isIdentifier(firstArg.expression)) {
     return firstArg.name.text;
   }
   return void 0;
 }
 function getUseSiteplanePreviewTextFirstArg(node) {
-  if (ts2.isIdentifier(node.expression) && node.expression.text === "useSiteplanePreviewText") {
+  if (ts3.isIdentifier(node.expression) && node.expression.text === "useSiteplanePreviewText") {
     return node.arguments[0];
   }
   return void 0;
@@ -4992,39 +4948,39 @@ function staticExpressionValue2(expression) {
   if (!expression) {
     return void 0;
   }
-  if (ts2.isStringLiteral(expression) || ts2.isNoSubstitutionTemplateLiteral(expression)) {
+  if (ts3.isStringLiteral(expression) || ts3.isNoSubstitutionTemplateLiteral(expression)) {
     return expression.text;
   }
-  if (ts2.isNumericLiteral(expression)) {
+  if (ts3.isNumericLiteral(expression)) {
     return Number(expression.text);
   }
-  if (expression.kind === ts2.SyntaxKind.TrueKeyword) {
+  if (expression.kind === ts3.SyntaxKind.TrueKeyword) {
     return true;
   }
-  if (expression.kind === ts2.SyntaxKind.FalseKeyword) {
+  if (expression.kind === ts3.SyntaxKind.FalseKeyword) {
     return false;
   }
-  if (ts2.isObjectLiteralExpression(expression)) {
+  if (ts3.isObjectLiteralExpression(expression)) {
     return readObjectLiteral(expression);
   }
   return void 0;
 }
 function readObjectLiteral(expression) {
   const value = {};
-  for (const property of expression.properties) {
-    if (!ts2.isPropertyAssignment(property)) {
+  for (const property2 of expression.properties) {
+    if (!ts3.isPropertyAssignment(property2)) {
       continue;
     }
-    const name2 = getPropertyName(property.name);
+    const name2 = getPropertyName(property2.name);
     if (!name2) {
       continue;
     }
-    value[name2] = staticExpressionValue2(property.initializer);
+    value[name2] = staticExpressionValue2(property2.initializer);
   }
   return value;
 }
 function getPropertyName(name2) {
-  if (ts2.isIdentifier(name2) || ts2.isStringLiteral(name2)) {
+  if (ts3.isIdentifier(name2) || ts3.isStringLiteral(name2)) {
     return name2.text;
   }
   return null;
@@ -5034,12 +4990,12 @@ function collectEventPreviewComponentPropUsages(node, eventPreviewAttrVariables,
   if (!isComponentName(componentName)) {
     return;
   }
-  for (const property of node.attributes.properties) {
-    if (!ts2.isJsxAttribute(property)) {
+  for (const property2 of node.attributes.properties) {
+    if (!ts3.isJsxAttribute(property2)) {
       continue;
     }
-    const propName = getJsxAttributeName(property.name);
-    const fieldId = getJsxFieldIdValue(property.initializer, eventPreviewAttrVariables);
+    const propName = getJsxAttributeName(property2.name);
+    const fieldId = getJsxFieldIdValue(property2.initializer, eventPreviewAttrVariables);
     if (!propName || !fieldId || !isFieldId(fieldId)) {
       continue;
     }
@@ -5052,7 +5008,7 @@ function collectEventPreviewComponentPropUsages(node, eventPreviewAttrVariables,
   }
 }
 function getJsxAttributeName(name2) {
-  if (ts2.isIdentifier(name2)) {
+  if (ts3.isIdentifier(name2)) {
     return name2.text;
   }
   return void 0;
@@ -5061,19 +5017,19 @@ function getJsxFieldIdValue(initializer, eventPreviewAttrVariables) {
   if (!initializer) {
     return void 0;
   }
-  if (ts2.isStringLiteral(initializer)) {
+  if (ts3.isStringLiteral(initializer)) {
     return initializer.text;
   }
-  if (ts2.isJsxExpression(initializer) && initializer.expression && ts2.isIdentifier(initializer.expression)) {
+  if (ts3.isJsxExpression(initializer) && initializer.expression && ts3.isIdentifier(initializer.expression)) {
     return eventPreviewAttrVariables.get(initializer.expression.text);
   }
   return void 0;
 }
 function getFunctionComponentName(node) {
-  if (ts2.isFunctionDeclaration(node) && node.name && isComponentName(node.name.text)) {
+  if (ts3.isFunctionDeclaration(node) && node.name && isComponentName(node.name.text)) {
     return node.name.text;
   }
-  if (ts2.isVariableDeclaration(node) && ts2.isIdentifier(node.name) && isComponentName(node.name.text) && node.initializer && (ts2.isArrowFunction(node.initializer) || ts2.isFunctionExpression(node.initializer))) {
+  if (ts3.isVariableDeclaration(node) && ts3.isIdentifier(node.name) && isComponentName(node.name.text) && node.initializer && (ts3.isArrowFunction(node.initializer) || ts3.isFunctionExpression(node.initializer))) {
     return node.name.text;
   }
   return void 0;
@@ -5083,10 +5039,10 @@ function isComponentName(name2) {
 }
 function getAssignedVariableName(node) {
   let current = node;
-  while (ts2.isAwaitExpression(current.parent)) {
+  while (ts3.isAwaitExpression(current.parent)) {
     current = current.parent;
   }
-  if (ts2.isVariableDeclaration(current.parent) && ts2.isIdentifier(current.parent.name)) {
+  if (ts3.isVariableDeclaration(current.parent) && ts3.isIdentifier(current.parent.name)) {
     return current.parent.name.text;
   }
   return void 0;
@@ -5334,8 +5290,8 @@ async function siteSetupActivityCommand(input) {
 
 // ../cli/dist/commands/setup-start.js
 import { randomBytes, randomUUID as randomUUID4 } from "crypto";
-import { access as access4 } from "fs/promises";
-import { join as join9, relative as relative5 } from "path";
+import { access as access5 } from "fs/promises";
+import { join as join10, relative as relative5 } from "path";
 import { z as z37 } from "zod";
 var bootstrapResponseSchema2 = z37.object({
   ok: z37.literal(true),
@@ -5344,8 +5300,8 @@ var bootstrapResponseSchema2 = z37.object({
 async function setupStartCommand(input) {
   await assertLocalCredentialsPathSafe(input.projectDir, input);
   const [hasConfig, hasCredentials] = await Promise.all([
-    exists2(join9(input.projectDir, "siteplane.config.json")),
-    exists2(join9(input.projectDir, ".siteplane/credentials.json"))
+    exists2(join10(input.projectDir, "siteplane.config.json")),
+    exists2(join10(input.projectDir, ".siteplane/credentials.json"))
   ]);
   if (hasConfig && !hasCredentials) {
     throw new SetupFailure("local_credentials_missing", "This project has Siteplane configuration but no local credentials. Restore its credentials or explicitly start a new installation; public site identifiers cannot recover access.");
@@ -5456,7 +5412,7 @@ function result(status, siteId, runId) {
 }
 async function exists2(path) {
   try {
-    await access4(path);
+    await access5(path);
     return true;
   } catch (error) {
     if (error.code === "ENOENT")
@@ -5551,13 +5507,13 @@ async function setupReviewCommand(input) {
 }
 
 // ../cli/dist/commands/setup-prepare.js
-import { access as access5, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
+import { access as access6, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
 import { randomUUID as randomUUID5 } from "crypto";
-import { dirname as dirname7, join as join10, relative as relative6, sep as sep2 } from "path";
-import ts3 from "typescript";
-var exists3 = async (path) => access5(path).then(() => true, () => false);
+import { dirname as dirname8, join as join11, relative as relative6, sep as sep2 } from "path";
+import ts4 from "typescript";
+var exists3 = async (path) => access6(path).then(() => true, () => false);
 var importPath = (from, target) => {
-  const path = relative6(dirname7(from), target).split(sep2).join("/");
+  const path = relative6(dirname8(from), target).split(sep2).join("/");
   return path.startsWith(".") ? path : `./${path}`;
 };
 async function setupPrepareCommand(input) {
@@ -5579,18 +5535,18 @@ async function setupPrepareCommand(input) {
         message: "The verified setup is available for owner review; no preparation writes are needed."
       };
     const directory = preflight.local.projectDirectory;
-    const app = join10(directory, preflight.local.appDirectory);
-    const layouts = (await Promise.all(["layout.tsx", "layout.jsx", "layout.js"].map(async (name2) => await exists3(join10(app, name2)) ? join10(app, name2) : null))).filter((path) => path !== null);
+    const app = join11(directory, preflight.local.appDirectory);
+    const layouts = (await Promise.all(["layout.tsx", "layout.jsx", "layout.js"].map(async (name2) => await exists3(join11(app, name2)) ? join11(app, name2) : null))).filter((path) => path !== null);
     if (layouts.length !== 1)
       throw new SetupFailure("layout_integration_conflict", "Select one root layout and mount the Siteplane preview bridge there; preserve existing providers and rendering.");
     const layoutPath = layouts[0];
     const typed = layoutPath.endsWith(".tsx");
     const routeExtension = typed ? "ts" : "js";
-    const bridgePath = join10(app, "_siteplane", `bridge.${typed ? "tsx" : "jsx"}`);
+    const bridgePath = join11(app, "_siteplane", `bridge.${typed ? "tsx" : "jsx"}`);
     const portal = task.site.portalPath;
     if (!/^\/[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/u.test(portal))
       throw new SetupFailure("portal_route_conflict", "The selected portal path is not a supported single route segment.");
-    const adminRoot = join10(app, portal.slice(1));
+    const adminRoot = join11(app, portal.slice(1));
     for (const name2 of [
       "page.tsx",
       "page.jsx",
@@ -5598,12 +5554,12 @@ async function setupPrepareCommand(input) {
       "route.ts",
       "route.js"
     ]) {
-      if (await exists3(join10(adminRoot, name2)))
+      if (await exists3(join11(adminRoot, name2)))
         throw new SetupFailure("portal_route_conflict", "The selected admin path already belongs to the website. Choose an unused editor path in Siteplane.");
     }
-    const configPath = join10(directory, "siteplane.config.json");
-    const adminPath = join10(adminRoot, "[[...siteplane]]", `route.${routeExtension}`);
-    const revalidationPath = join10(app, "api/siteplane/revalidate", `route.${routeExtension}`);
+    const configPath = join11(directory, "siteplane.config.json");
+    const adminPath = join11(adminRoot, "[[...siteplane]]", `route.${routeExtension}`);
+    const revalidationPath = join11(app, "api/siteplane/revalidate", `route.${routeExtension}`);
     const commonOptions = `siteId: config.siteId,
     publicRuntimeKeyId: config.publicSiteKeyId,
     fieldContractHash: process.env.SITEPLANE_BUILD_FIELD_CONTRACT_HASH${typed ? "!" : ""},
@@ -5660,12 +5616,12 @@ export default function SiteplaneBridge() {
     ]);
     const layoutSource = await readFile10(layoutPath, "utf8");
     if (!/import\s+SiteplaneBridge\s+from\s+["']\.\/_siteplane\/bridge["']/u.test(layoutSource)) {
-      const ast = ts3.createSourceFile(layoutPath, layoutSource, ts3.ScriptTarget.Latest, true, ts3.ScriptKind.TSX);
+      const ast = ts4.createSourceFile(layoutPath, layoutSource, ts4.ScriptTarget.Latest, true, ts4.ScriptKind.TSX);
       const closingBodies = [];
       const visit = (node) => {
-        if (ts3.isJsxClosingElement(node) && node.tagName.getText(ast) === "body")
+        if (ts4.isJsxClosingElement(node) && node.tagName.getText(ast) === "body")
           closingBodies.push(node.getStart(ast));
-        ts3.forEachChild(node, visit);
+        ts4.forEachChild(node, visit);
       };
       visit(ast);
       if (closingBodies.length !== 1)
@@ -5673,7 +5629,7 @@ export default function SiteplaneBridge() {
       const point = closingBodies[0];
       let importPoint = 0;
       for (const statement of ast.statements) {
-        if (!ts3.isExpressionStatement(statement) || !ts3.isStringLiteral(statement.expression))
+        if (!ts4.isExpressionStatement(statement) || !ts4.isStringLiteral(statement.expression))
           break;
         importPoint = statement.end;
       }
@@ -5681,21 +5637,21 @@ export default function SiteplaneBridge() {
 import SiteplaneBridge from "./_siteplane/bridge";
 ${layoutSource.slice(importPoint, point)}<SiteplaneBridge />${layoutSource.slice(point)}`);
     }
-    const configs = (await Promise.all(["next.config.ts", "next.config.mjs", "next.config.js"].map(async (name2) => await exists3(join10(directory, name2)) ? join10(directory, name2) : null))).filter((path) => path !== null);
+    const configs = (await Promise.all(["next.config.ts", "next.config.mjs", "next.config.js"].map(async (name2) => await exists3(join11(directory, name2)) ? join11(directory, name2) : null))).filter((path) => path !== null);
     if (configs.length > 1)
       throw new SetupFailure("next_config_conflict", "Choose one existing Next.js configuration before setup.");
-    const nextPath = configs[0] ?? join10(directory, "next.config.mjs");
+    const nextPath = configs[0] ?? join11(directory, "next.config.mjs");
     const nextSource = configs.length ? await readFile10(nextPath, "utf8") : "export default {};\n";
     if (!/\bwithSiteplane\s*\(/u.test(nextSource)) {
-      const ast = ts3.createSourceFile(nextPath, nextSource, ts3.ScriptTarget.Latest, true);
-      const exported = ast.statements.filter(ts3.isExportAssignment);
+      const ast = ts4.createSourceFile(nextPath, nextSource, ts4.ScriptTarget.Latest, true);
+      const exported = ast.statements.filter(ts4.isExportAssignment);
       if (exported.length !== 1 || exported[0].isExportEquals)
         throw new SetupFailure("next_config_conflict", "Wrap the existing default Next.js configuration with withSiteplane from siteplane/next, preserving its existing options.");
       const expression = exported[0].expression;
       files.set(nextPath, `import { withSiteplane } from "siteplane/next";
 ${nextSource.slice(0, expression.getStart(ast))}withSiteplane(${expression.getText(ast)})${nextSource.slice(expression.end)}`);
     }
-    const guidePath = join10(directory, ".siteplane/setup-guide-v2.md");
+    const guidePath = join11(directory, ".siteplane/setup-guide-v2.md");
     files.set(guidePath, `# Siteplane setup task v2
 
 ${task.goal}
@@ -5723,7 +5679,7 @@ Run setup context for the current user instructions and authorized modules. Keep
           return null;
         throw error;
       }));
-    const packageManifest = JSON.parse(await readFile10(join10(directory, "package.json"), "utf8"));
+    const packageManifest = JSON.parse(await readFile10(join11(directory, "package.json"), "utf8"));
     const pm = preflight.local.packageManager;
     const command = (args) => setupProcess("npx", ["--yes", "--package", `${pm.name}@${pm.version}`, pm.name, ...args], {
       cwd: directory,
@@ -5774,7 +5730,7 @@ Run setup context for the current user instructions and authorized modules. Keep
         throw new SetupFailure("source_changed_during_prepare", "The source changed while dependencies were installing. Preserve the concurrent edit and reconcile it before retrying preparation.");
       if (current === content)
         continue;
-      await mkdir6(dirname7(path), {
+      await mkdir6(dirname8(path), {
         recursive: true,
         mode: path.includes(`${sep2}.siteplane${sep2}`) ? 448 : 493
       });
@@ -5819,7 +5775,7 @@ async function assertSourcePath(root, target) {
   for (const part of relative6(root, target).split(sep2)) {
     if (part === "..")
       throw new SetupFailure("unsafe_source_path", "The prepared file is outside the selected application.");
-    current = join10(current, part);
+    current = join11(current, part);
     const stat = await lstat2(current).catch((error) => {
       if (error.code === "ENOENT")
         return null;
@@ -5897,7 +5853,7 @@ function locked() {
 import { createHash as createHash3 } from "crypto";
 import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute2, join as join11, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
+import { dirname as dirname9, isAbsolute as isAbsolute2, join as join12, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
 import { isDeepStrictEqual, promisify as promisify3 } from "util";
 import { z as z40 } from "zod";
 var execute = promisify3(execFile3);
@@ -5937,15 +5893,15 @@ async function writeBuildProvenance(checkout, revision) {
     if (entry.mode !== "120000")
       continue;
     const { readlink: readlink2 } = await import("fs/promises");
-    const path = join11(checkout, entry.path);
-    const target2 = resolve3(dirname8(path), await readlink2(path));
+    const path = join12(checkout, entry.path);
+    const target2 = resolve3(dirname9(path), await readlink2(path));
     const bound = relative7(checkout, target2);
     if (bound.startsWith("..") || isAbsolute2(bound))
       throw new Error("A tracked symbolic link escapes the committed upload; resolve that source boundary before deployment.");
   }
   const providerConfigurations = await Promise.all(entries.filter((entry) => /(?:^|\/)vercel\.json$/u.test(entry.path)).map(async (entry) => ({
     path: entry.path,
-    source: await readFile12(join11(checkout, entry.path), "utf8")
+    source: await readFile12(join12(checkout, entry.path), "utf8")
   })));
   const record = schema.parse({
     version: 2,
@@ -5954,16 +5910,16 @@ async function writeBuildProvenance(checkout, revision) {
     entries,
     providerConfigurations
   });
-  const target = join11(checkout, name);
-  await mkdir8(dirname8(target), { recursive: true, mode: 448 });
+  const target = join12(checkout, name);
+  await mkdir8(dirname9(target), { recursive: true, mode: 448 });
   await writeFile5(target, JSON.stringify(record), { flag: "wx", mode: 384 });
 }
 
 // ../cli/dist/commands/setup-deploy.js
 import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as randomUUID7 } from "crypto";
-import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
+import { access as access7, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { z as z41 } from "zod";
 var envSchema = z41.object({
   id: z41.string(),
@@ -6029,7 +5985,7 @@ var PROVIDER_RESUME_READBACK_TIMEOUT_MS = 12e4;
 async function setupDeployCommand(input, deps = defaults) {
   let record = null;
   try {
-    if (!await access6(join12(input.projectDir, "siteplane.config.json")).then(() => true, () => false) || !await access6(join12(input.projectDir, ".siteplane/credentials.json")).then(() => true, () => false))
+    if (!await access7(join13(input.projectDir, "siteplane.config.json")).then(() => true, () => false) || !await access7(join13(input.projectDir, ".siteplane/credentials.json")).then(() => true, () => false))
       fail2("local_connection_missing", "Open this site's setup and choose Replace local connection, then initialize this folder with its new one-time grant.");
     await assertLocalCredentialsPathSafe(input.projectDir);
     const config = await readProjectConfig(input.projectDir);
@@ -6335,7 +6291,7 @@ async function setupDeployCommand(input, deps = defaults) {
             ], { cwd: local.projectDirectory, input: body, timeoutMs: 3e4 });
           }
         } else {
-          const upload = await mkdtemp(join12(tmpdir(), "siteplane-setup-upload-"));
+          const upload = await mkdtemp(join13(tmpdir(), "siteplane-setup-upload-"));
           try {
             await processCommand("git", [
               "clone",
@@ -6349,11 +6305,11 @@ async function setupDeployCommand(input, deps = defaults) {
               cwd: upload
             });
             await deps.writeBuildProvenance(upload, revision);
-            await mkdir9(join12(upload, ".vercel"), {
+            await mkdir9(join13(upload, ".vercel"), {
               recursive: true,
               mode: 448
             });
-            await writeFile6(join12(upload, ".vercel/project.json"), JSON.stringify({
+            await writeFile6(join13(upload, ".vercel/project.json"), JSON.stringify({
               projectId: provider.projectId,
               orgId: provider.teamId
             }), { mode: 384 });
@@ -6539,7 +6495,7 @@ function required(code, message) {
 // src/bin/run-siteplane.ts
 async function runSiteplaneCli(args, dependencies = createDefaultDependencies()) {
   const writes = args[0] === "init" || args[0] === "analytics" && args[1] === "init" || args[0] === "setup" && (["start", "apply", "prepare", "deploy"].includes(args[1] ?? "") || args[1] === "claim" && args[2] === "confirm");
-  const missingDeploy = args[0] === "setup" && args[1] === "deploy" && !await access7(join13(dependencies.cwd(), "siteplane.config.json")).then(
+  const missingDeploy = args[0] === "setup" && args[1] === "deploy" && !await access8(join14(dependencies.cwd(), "siteplane.config.json")).then(
     () => true,
     () => false
   );
@@ -6621,7 +6577,7 @@ async function runAnalyticsCommand(args, dependencies) {
     siteId: projectConfig.siteId,
     ...readOptionalVercelAutomationBypassSecret(dependencies.env)
   };
-  const manifestPath = join13(projectDir, "siteplane.analytics.json");
+  const manifestPath = join14(projectDir, "siteplane.analytics.json");
   if (subcommand === "init") {
     const { rawPublicKey } = await dependencies.commands.analyticsPrepareCommand({
       config
@@ -6653,18 +6609,18 @@ async function runAnalyticsCommand(args, dependencies) {
         projectDir
       }
     );
-    const artifactFilePaths = [join13(projectDir, ".siteplane/analytics.md")];
+    const artifactFilePaths = [join14(projectDir, ".siteplane/analytics.md")];
     const cspFilePaths = await existingPaths([
-      join13(projectDir, "next.config.js"),
-      join13(projectDir, "next.config.mjs"),
-      join13(projectDir, "next.config.ts"),
-      join13(projectDir, "middleware.ts"),
-      join13(projectDir, "src/middleware.ts")
+      join14(projectDir, "next.config.js"),
+      join14(projectDir, "next.config.mjs"),
+      join14(projectDir, "next.config.ts"),
+      join14(projectDir, "middleware.ts"),
+      join14(projectDir, "src/middleware.ts")
     ]);
     const check = await dependencies.commands.analyticsCheckCommand({
       manifestPath,
       sourceFilePaths,
-      packageJsonPath: join13(projectDir, "package.json"),
+      packageJsonPath: join14(projectDir, "package.json"),
       cspFilePaths,
       artifactFilePaths
     });
@@ -6855,7 +6811,7 @@ async function runSetupCommand(args, dependencies) {
 async function runBookingCommand(args, dependencies) {
   const [subcommand, ...subcommandArgs] = args;
   const projectDir = dependencies.cwd();
-  const manifestPath = join13(projectDir, "siteplane.booking.json");
+  const manifestPath = join14(projectDir, "siteplane.booking.json");
   if (subcommand === "init") {
     const siteId = readRequiredOption(subcommandArgs, "--site-id");
     const siteKeyPrefix = readRequiredOption(
@@ -7053,7 +7009,7 @@ async function existingPaths(paths) {
   const existing = [];
   for (const path of paths) {
     try {
-      await access7(path);
+      await access8(path);
       existing.push(path);
     } catch {
     }