siteplane 0.1.64 → 0.1.66

package/dist/next.js

@@ -1,8 +1,8 @@
 // src/next.ts
 import { execFile as execFile4 } from "child_process";
 import { createHash as createHash5 } from "crypto";
-import { readFile as readFile13 } from "fs/promises";
-import { dirname as dirname9, join as join13, resolve as resolve4 } from "path";
+import { access as access8, readFile as readFile13 } from "fs/promises";
+import { dirname as dirname10, join as join14, resolve as resolve4 } from "path";
 import { promisify as promisify4 } from "util";
 
 // ../cli/dist/analytics/manifest.js
@@ -638,6 +638,7 @@ var bookingPublicConfigSchema = z9.object({
   settings: z9.object({
     slotIntervalMinutes: z9.number().int().positive(),
     minLeadMinutes: z9.number().int().min(0),
+    minCancelLeadMinutes: z9.number().int().min(0),
     maxAdvanceDays: z9.number().int().min(1),
     requirePhone: z9.boolean(),
     collectNote: z9.boolean(),
@@ -846,7 +847,7 @@ var bookingManifestSchema = z9.object({
   siteId: z9.string().trim().min(1),
   siteKeyPrefix: z9.string().startsWith("bk_pub_"),
   bookingPageSlug: z9.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).min(2).max(64),
-  embedMode: z9.enum(["script", "web_component", "iframe"]).optional(),
+  integration: z9.literal("rewrite").optional(),
   productionOrigin: z9.string().url().optional()
 }).passthrough();
 
@@ -2405,6 +2406,9 @@ import ts from "typescript";
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
 import { dirname as dirname2 } from "path";
 
+// ../cli/dist/booking/static-scan.js
+import ts2 from "typescript";
+
 // ../cli/dist/commands/analytics/check.js
 import { readFile as readFile3 } from "fs/promises";
 
@@ -2505,17 +2509,20 @@ var errorSchema = z30.object({
 import { randomUUID } from "crypto";
 
 // ../cli/dist/commands/booking/check.js
-import { readFile as readFile4 } from "fs/promises";
+import { dirname as dirname4, join as join2 } from "path";
+import { access, readFile as readFile4 } from "fs/promises";
 
 // ../cli/dist/commands/booking/init.js
 import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
-import { dirname as dirname4, join as join2 } from "path";
+import { dirname as dirname5, join as join3 } from "path";
 var bookingRulesTemplate = `# Siteplane Booking Rules
 
 - Do not change layout, copy, styling, animation or business logic while adding Booking.
-- Add only the Siteplane Booking embed script and a booking iframe or web component.
-- Use the configured booking page slug from siteplane.booking.json.
-- Register the production website origin in Siteplane before testing cross-origin embeds.
+- Integrate /booking on the customer domain through withSiteplane(nextConfig, { booking: { site: "<site-id>" } }); use the immutable Site ID supplied by Siteplane.
+- Use a normal <a href="/booking"> link, not next/link, an iframe or an embed script.
+- Preserve existing rewrites. Booking-only must not require Editor setup or siteplane.config.json.
+- Configure the public booking address in Siteplane; register its origin and call https://siteplane.io/api/booking/* directly with CORS, without a raw public key.
+- Preserve customer CSP and middleware; explain required Siteplane/Stripe permissions and exclude /booking from customer middleware.
 - Do not write setup tokens, project CLI tokens or private keys into source files.
 - Run npx siteplane booking check, npx siteplane booking sync and npx siteplane booking test after setup.
 - booking test stays in test_mode; live booking only starts after explicit dashboard activation.
@@ -2528,9 +2535,9 @@ alwaysApply: true
 ${bookingRulesTemplate}`;
 
 // ../cli/dist/config/project-config.js
-import { access, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
+import { access as access2, chmod, open, readFile as readFile5, rename, rm } from "fs/promises";
 import { randomUUID as randomUUID2 } from "crypto";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 import { z as z31 } from "zod";
 var siteplaneProjectConfigSchema = z31.object({
   version: z31.literal(2),
@@ -2546,14 +2553,14 @@ var siteplaneProjectConfigSchema = z31.object({
   fieldContractHash: z31.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
 }).strict();
 async function readProjectConfig(projectDir) {
-  return siteplaneProjectConfigSchema.parse(JSON.parse(await readFile5(join3(projectDir, "siteplane.config.json"), "utf8")));
+  return siteplaneProjectConfigSchema.parse(JSON.parse(await readFile5(join4(projectDir, "siteplane.config.json"), "utf8")));
 }
 
 // ../cli/dist/config/credentials.js
 import { execFile } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 import { chmod as chmod2, lstat, mkdir as mkdir5, open as open2, readFile as readFile6, rename as rename2, rm as rm2 } from "fs/promises";
-import { dirname as dirname5, join as join4, relative } from "path";
+import { dirname as dirname6, join as join5, relative } from "path";
 import { promisify } from "util";
 import { z as z32 } from "zod";
 var localSetupInstallationSchema = z32.object({
@@ -2578,7 +2585,7 @@ var localSetupCredentialsSchema = z32.union([
   z32.object({ installation: localSetupInstallationSchema }).strict()
 ]);
 async function assertLocalCredentialsPathSafe(projectDir, options = {}) {
-  const path = join4(projectDir, ".siteplane/credentials.json");
+  const path = join5(projectDir, ".siteplane/credentials.json");
   await assertCredentialFilesystemSafe(projectDir);
   const isTrackedFile = options.isTrackedFile ?? ((targetPath) => gitPathMatches(projectDir, targetPath, "ls-files"));
   const isIgnoredFile = options.isIgnoredFile ?? ((targetPath) => gitPathMatches(projectDir, targetPath, "check-ignore"));
@@ -2593,8 +2600,8 @@ async function assertLocalCredentialsPathSafe(projectDir, options = {}) {
 async function assertCredentialFilesystemSafe(projectDir) {
   for (const [path, directory, mode] of [
     [projectDir, true, null],
-    [join4(projectDir, ".siteplane"), true, 448],
-    [join4(projectDir, ".siteplane/credentials.json"), false, 384]
+    [join5(projectDir, ".siteplane"), true, 448],
+    [join5(projectDir, ".siteplane/credentials.json"), false, 384]
   ]) {
     const stat = await lstat(path).catch((error) => {
       if (error.code === "ENOENT")
@@ -2620,7 +2627,7 @@ async function readLocalCredentials(projectDir) {
 }
 async function readLocalSetupCredentials(projectDir) {
   await assertCredentialFilesystemSafe(projectDir);
-  return localSetupCredentialsSchema.parse(JSON.parse(await readFile6(join4(projectDir, ".siteplane/credentials.json"), "utf8")));
+  return localSetupCredentialsSchema.parse(JSON.parse(await readFile6(join5(projectDir, ".siteplane/credentials.json"), "utf8")));
 }
 var execFileAsync = promisify(execFile);
 async function gitPathMatches(projectDir, path, command) {
@@ -2634,8 +2641,8 @@ async function gitPathMatches(projectDir, path, command) {
 }
 
 // ../cli/dist/commands/init.js
-import { access as access3 } from "fs/promises";
-import { join as join7, relative as relative3 } from "path";
+import { access as access4 } from "fs/promises";
+import { join as join8, relative as relative3 } from "path";
 import { z as z35 } from "zod";
 
 // ../cli/dist/commands/setup-preflight.js
@@ -2647,7 +2654,7 @@ import { parse as parseYaml } from "yaml";
 // ../cli/dist/config/installed-package.js
 import { createRequire } from "module";
 import { readFile as readFile7 } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import { z as z33 } from "zod";
 var packageSchema = z33.object({
   name: z33.string().optional(),
@@ -2655,10 +2662,10 @@ var packageSchema = z33.object({
   peerDependencies: z33.record(z33.string(), z33.string()).optional()
 });
 async function readInstalledPackage(projectDir, name2) {
-  const require2 = createRequire(join5(projectDir, "package.json"));
+  const require2 = createRequire(join6(projectDir, "package.json"));
   for (const directory of require2.resolve.paths(name2) ?? []) {
     try {
-      return packageSchema.parse(JSON.parse(await readFile7(join5(directory, name2, "package.json"), "utf8")));
+      return packageSchema.parse(JSON.parse(await readFile7(join6(directory, name2, "package.json"), "utf8")));
     } catch (error) {
       if (error.code !== "ENOENT")
         throw error;
@@ -2668,8 +2675,8 @@ async function readInstalledPackage(projectDir, name2) {
 }
 
 // ../cli/dist/commands/setup-preflight.js
-import { access as access2, readFile as readFile8, realpath, readdir, readlink } from "fs/promises";
-import { dirname as dirname6, join as join6, relative as relative2, resolve, sep } from "path";
+import { access as access3, readFile as readFile8, realpath, readdir, readlink } from "fs/promises";
+import { dirname as dirname7, join as join7, relative as relative2, resolve, sep } from "path";
 import { z as z34 } from "zod";
 
 // ../cli/dist/commands/setup-process.js
@@ -2796,15 +2803,15 @@ var vercelProjectSchema = z34.object({
     productionBranch: z34.string().optional()
   }).nullable().optional()
 });
-var exists = async (path) => access2(path).then(() => true, () => false);
+var exists = async (path) => access3(path).then(() => true, () => false);
 var fail = (code, message) => {
   throw new SetupFailure(code, message);
 };
 var stable = (version2, major) => new RegExp(`^${major}\\.\\d+\\.\\d+$`, "u").test(version2);
 async function inspectSetupLocalProject(projectDir) {
   const projectDirectory = await realpath(resolve(projectDir));
-  const manifest = manifestSchema.parse(JSON.parse(await readFile8(join6(projectDirectory, "package.json"), "utf8")));
-  const apps = (await Promise.all(["app", "src/app"].map(async (path) => await exists(join6(projectDirectory, path)) ? path : null))).filter((path) => path !== null);
+  const manifest = manifestSchema.parse(JSON.parse(await readFile8(join7(projectDirectory, "package.json"), "utf8")));
+  const apps = (await Promise.all(["app", "src/app"].map(async (path) => await exists(join7(projectDirectory, path)) ? path : null))).filter((path) => path !== null);
   if (apps.length !== 1)
     fail("ambiguous_app_directory", "Select one Next.js App Router application with exactly one app/ or src/app/ directory.");
   const repositoryRoot = (await setupProcess("git", ["rev-parse", "--show-toplevel"], {
@@ -2818,8 +2825,8 @@ async function inspectSetupLocalProject(projectDir) {
       fail("git_submodule_conflict", "The repository contains Git submodules. Resolve the explicit deployment source boundary before setup; the CLI will not copy external repositories.");
     if (!entry.startsWith("120000 "))
       continue;
-    const path = join6(repositoryRoot, entry.slice(entry.indexOf("	") + 1));
-    const target = resolve(dirname6(path), await readlink(path));
+    const path = join7(repositoryRoot, entry.slice(entry.indexOf("	") + 1));
+    const target = resolve(dirname7(path), await readlink(path));
     const bound = relative2(repositoryRoot, target);
     if (bound.startsWith("..") || bound.startsWith(sep))
       fail("external_symlink_conflict", "A tracked symbolic link points outside this repository. Resolve that source boundary before setup; local external files cannot enter a deployment.");
@@ -2835,10 +2842,10 @@ async function inspectSetupLocalProject(projectDir) {
   ];
   let locks = [];
   for (; ; ) {
-    locks = (await Promise.all(lockNames.map(async (name3) => await exists(join6(lockfileRoot, name3)) ? name3 : null))).filter((name3) => name3 !== null);
-    if (locks.length || lockfileRoot === repositoryRoot || dirname6(lockfileRoot) === lockfileRoot)
+    locks = (await Promise.all(lockNames.map(async (name3) => await exists(join7(lockfileRoot, name3)) ? name3 : null))).filter((name3) => name3 !== null);
+    if (locks.length || lockfileRoot === repositoryRoot || dirname7(lockfileRoot) === lockfileRoot)
       break;
-    lockfileRoot = dirname6(lockfileRoot);
+    lockfileRoot = dirname7(lockfileRoot);
   }
   if (locks.length > 1)
     fail("conflicting_lockfiles", "Resolve conflicting package-manager lockfiles before setup; Siteplane does not replace them.");
@@ -2847,9 +2854,9 @@ async function inspectSetupLocalProject(projectDir) {
   const lockName = locks[0];
   if (!["package-lock.json", "pnpm-lock.yaml"].includes(lockName))
     fail("unsupported_package_manager", "This setup supports npm 10 or pnpm 9/10 with their canonical lockfile.");
-  const rootManifest = manifestSchema.parse(JSON.parse(await readFile8(join6(lockfileRoot, "package.json"), "utf8")));
+  const rootManifest = manifestSchema.parse(JSON.parse(await readFile8(join7(lockfileRoot, "package.json"), "utf8")));
   if (lockfileRoot !== projectDirectory) {
-    const workspaceFile = join6(lockfileRoot, "pnpm-workspace.yaml");
+    const workspaceFile = join7(lockfileRoot, "pnpm-workspace.yaml");
     const workspace = lockName === "pnpm-lock.yaml" && await exists(workspaceFile) ? z34.object({ packages: z34.array(z34.string()) }).parse(parseYaml(await readFile8(workspaceFile, "utf8"))).packages : z34.union([
       z34.array(z34.string()),
       z34.object({ packages: z34.array(z34.string()) }).transform((value) => value.packages)
@@ -2858,14 +2865,14 @@ async function inspectSetupLocalProject(projectDir) {
     if (!workspace.some((pattern) => !pattern.startsWith("!") && minimatch(selected, pattern)) || workspace.some((pattern) => pattern.startsWith("!") && minimatch(selected, pattern.slice(1))))
       fail("unbound_workspace_app", "The selected application is excluded from the canonical lockfile's workspace packages. Select its actual application root.");
   }
-  for (let ancestor = dirname6(lockfileRoot); ancestor.startsWith(repositoryRoot + sep) || ancestor === repositoryRoot; ancestor = dirname6(ancestor)) {
-    const ancestorLocks = await Promise.all(lockNames.map((name3) => exists(join6(ancestor, name3))));
+  for (let ancestor = dirname7(lockfileRoot); ancestor.startsWith(repositoryRoot + sep) || ancestor === repositoryRoot; ancestor = dirname7(ancestor)) {
+    const ancestorLocks = await Promise.all(lockNames.map((name3) => exists(join7(ancestor, name3))));
     if (ancestorLocks.some(Boolean))
       fail("ambiguous_lockfile_root", "Both the selected package and its repository ancestors contain lockfiles. Select one canonical workspace resolution before setup.");
     if (ancestor === repositoryRoot)
       break;
   }
-  const lockText = await readFile8(join6(lockfileRoot, lockName), "utf8");
+  const lockText = await readFile8(join7(lockfileRoot, lockName), "utf8");
   const npmLock = lockName === "package-lock.json" ? z34.object({
     lockfileVersion: z34.number(),
     packages: z34.record(z34.string(), z34.object({
@@ -2918,9 +2925,9 @@ async function inspectSetupLocalProject(projectDir) {
     fail("lockfile_format_conflict", "The canonical lockfile format does not match npm 10 or pnpm 9/10.");
   const sourceConflicts = [];
   for (const file of ["next.config.js", "next.config.mjs", "next.config.ts"]) {
-    if (!await exists(join6(projectDirectory, file)))
+    if (!await exists(join7(projectDirectory, file)))
       continue;
-    const source = await readFile8(join6(projectDirectory, file), "utf8");
+    const source = await readFile8(join7(projectDirectory, file), "utf8");
     if (/output\s*:\s*['"]export['"]/u.test(source))
       sourceConflicts.push("static_export");
     if (/\bbasePath\s*:/u.test(source))
@@ -2940,11 +2947,11 @@ async function inspectSetupLocalProject(projectDir) {
     "src/proxy.ts",
     "src/proxy.js"
   ]) {
-    if (await exists(join6(projectDirectory, name3))) {
+    if (await exists(join7(projectDirectory, name3))) {
       sourceConflicts.push(`inspect_routing:${name3}`);
-      if (await readlink(join6(projectDirectory, name3)).catch(() => null))
+      if (await readlink(join7(projectDirectory, name3)).catch(() => null))
         continue;
-      const policySource = await readFile8(join6(projectDirectory, name3), "utf8");
+      const policySource = await readFile8(join7(projectDirectory, name3), "utf8");
       if (/Content-Security-Policy|img-src|default-src/iu.test(policySource))
         sourceConflicts.push(`inspect_image_csp:${name3}`);
     }
@@ -2953,7 +2960,7 @@ async function inspectSetupLocalProject(projectDir) {
     for (const entry of await readdir(directory, { withFileTypes: true })) {
       if (entry.isSymbolicLink() || ["node_modules", ".git", ".next", ".siteplane", ".vercel"].includes(entry.name))
         continue;
-      const path = join6(directory, entry.name);
+      const path = join7(directory, entry.name);
       if (entry.isDirectory()) {
         await inspectSource(path);
         continue;
@@ -2973,7 +2980,7 @@ async function inspectSetupLocalProject(projectDir) {
         fail("next_security_advisory", `Next.js ${nextVersion} contains Server Actions affected by the July 2026 advisory. Review https://nextjs.org/blog/july-2026-security-release and explicitly update the affected dependency before setup.`);
     }
   }
-  await inspectSource(join6(projectDirectory, apps[0]));
+  await inspectSource(join7(projectDirectory, apps[0]));
   const gitRead = async (args) => setupProcess("git", args, { cwd: projectDirectory }).then((value) => value.trim(), () => null);
   return {
     projectDirectory,
@@ -2985,7 +2992,7 @@ async function inspectSetupLocalProject(projectDir) {
     nodeVersion: process.versions.node,
     packageManager: { name: name2, version: localVersion, declared },
     lockfile: {
-      path: relative2(repositoryRoot, join6(lockfileRoot, lockName)),
+      path: relative2(repositoryRoot, join7(lockfileRoot, lockName)),
       format,
       sha256: createHash2("sha256").update(lockText).digest("hex")
     },
@@ -3004,14 +3011,14 @@ async function setupPreflightCommand(input) {
     local = await inspectSetupLocalProject(input.projectDir);
     await assertLocalCredentialsPathSafe(input.projectDir);
     let linkDirectory = local.projectDirectory;
-    while (!await exists(join6(linkDirectory, ".vercel/project.json")) && linkDirectory !== local.repositoryRoot && dirname6(linkDirectory) !== linkDirectory)
-      linkDirectory = dirname6(linkDirectory);
-    if (!await exists(join6(linkDirectory, ".vercel/project.json")))
+    while (!await exists(join7(linkDirectory, ".vercel/project.json")) && linkDirectory !== local.repositoryRoot && dirname7(linkDirectory) !== linkDirectory)
+      linkDirectory = dirname7(linkDirectory);
+    if (!await exists(join7(linkDirectory, ".vercel/project.json")))
       fail("vercel_project_not_linked", "Link this application to its intended Vercel project before setup; Siteplane will not guess a target.");
     const linked = z34.object({
       projectId: z34.string().regex(/^prj_[A-Za-z0-9]+$/u),
       orgId: z34.string().regex(/^(?:team|user)_[A-Za-z0-9]+$/u)
-    }).parse(JSON.parse(await readFile8(join6(linkDirectory, ".vercel/project.json"), "utf8")));
+    }).parse(JSON.parse(await readFile8(join7(linkDirectory, ".vercel/project.json"), "utf8")));
     const project = vercelProjectSchema.parse(await setupVercelApi(linkDirectory, `/v9/projects/${linked.projectId}?teamId=${linked.orgId}`));
     if (project.id !== linked.projectId || project.accountId !== linked.orgId)
       fail("vercel_identity_conflict", "The provider project does not match the locally linked project and team.");
@@ -3122,7 +3129,7 @@ var bootstrapResponseSchema = z35.object({
 
 // ../cli/dist/commands/scan.js
 import { readdir as readdir2 } from "fs/promises";
-import { extname, join as join8 } from "path";
+import { extname, join as join9 } from "path";
 var defaultScanRoots = ["app", "src", "pages", "components", "lib"];
 var excludedDirectories = /* @__PURE__ */ new Set([
   ".git",
@@ -3140,14 +3147,14 @@ async function resolveScanFilePaths(filePaths, options = {}) {
     return filePaths;
   }
   const projectDir = options.projectDir ?? process.cwd();
-  const discovered = await Promise.all(defaultScanRoots.map((root) => collectSourceFiles(join8(projectDir, root))));
+  const discovered = await Promise.all(defaultScanRoots.map((root) => collectSourceFiles(join9(projectDir, root))));
   return [...new Set(discovered.flat())].sort();
 }
 async function collectSourceFiles(directory) {
   const entries = await readdir2(directory, { withFileTypes: true }).catch(() => []);
   const files = [];
   for (const entry of entries) {
-    const entryPath = join8(directory, entry.name);
+    const entryPath = join9(directory, entry.name);
     if (entry.isDirectory()) {
       if (!excludedDirectories.has(entry.name)) {
         files.push(...await collectSourceFiles(entryPath));
@@ -3168,7 +3175,7 @@ import { promisify as promisify2 } from "util";
 import { z as z36 } from "zod";
 
 // ../cli/dist/scan/next-source-scan.js
-import ts2 from "typescript";
+import ts3 from "typescript";
 import { isAbsolute, relative as relative4 } from "path";
 var eventPreviewHandlerMissingMessage = "Event preview fields must consume preview values with useSiteplanePreviewText from @siteplane/runtime-next/client or a siteplane:preview-value-applied listener.";
 var valueCallUnusedMessage = "Siteplane value calls must feed rendered content. Assign or await the returned value and render that value instead of ignoring the call.";
@@ -3324,10 +3331,10 @@ function scanSourceFile(file, fields, hardErrors) {
   const eventPreviewComponentPropUsages = [];
   const eventPreviewConsumerFieldIds = /* @__PURE__ */ new Set();
   let hasGenericEventPreviewConsumer = false;
-  const sourceFile = ts2.createSourceFile(file.filePath, file.sourceText, ts2.ScriptTarget.Latest, true, ts2.ScriptKind.TSX);
+  const sourceFile = ts3.createSourceFile(file.filePath, file.sourceText, ts3.ScriptTarget.Latest, true, ts3.ScriptKind.TSX);
   function visit(node, currentComponentName) {
     const nextComponentName = getFunctionComponentName(node) ?? currentComponentName;
-    if (ts2.isJsxSelfClosingElement(node) || ts2.isJsxOpeningElement(node)) {
+    if (ts3.isJsxSelfClosingElement(node) || ts3.isJsxOpeningElement(node)) {
       const componentName = getJsxTagName(node.tagName);
       if (editableComponentNames.has(componentName)) {
         hardErrors.push({
@@ -3338,7 +3345,7 @@ function scanSourceFile(file, fields, hardErrors) {
       }
       collectEventPreviewComponentPropUsages(node, eventPreviewAttrVariables, eventPreviewComponentPropUsages, file);
     }
-    if (ts2.isCallExpression(node)) {
+    if (ts3.isCallExpression(node)) {
       collectAttrsCall(node, attrFieldIds, attrRouteRefs, eventPreviewAttrs, eventPreviewAttrVariables, directAttrs, file);
       collectUnusedValueCallError(node, hardErrors, file);
       const extractedFields = extractFunctionFields(node, file);
@@ -3362,7 +3369,7 @@ function scanSourceFile(file, fields, hardErrors) {
     if (isGenericEventPreviewConsumerReference(node)) {
       hasGenericEventPreviewConsumer = true;
     }
-    ts2.forEachChild(node, (child) => visit(child, nextComponentName));
+    ts3.forEachChild(node, (child) => visit(child, nextComponentName));
   }
   visit(sourceFile);
   markMissingAttrsWarnings(fieldsInFile, attrFieldIds, attrRouteRefs);
@@ -3389,7 +3396,7 @@ function collectUnusedValueCallError(node, hardErrors, file) {
   });
 }
 function getSiteplaneValueFunctionName(node) {
-  if (!ts2.isPropertyAccessExpression(node.expression)) {
+  if (!ts3.isPropertyAccessExpression(node.expression)) {
     return void 0;
   }
   if (node.expression.expression.getText() !== "siteplane") {
@@ -3402,16 +3409,16 @@ function getSiteplaneValueFunctionName(node) {
   return void 0;
 }
 function isIgnoredValueCall(node) {
-  if (ts2.isVoidExpression(node.parent)) {
+  if (ts3.isVoidExpression(node.parent)) {
     return true;
   }
-  if (ts2.isExpressionStatement(node.parent)) {
+  if (ts3.isExpressionStatement(node.parent)) {
     return true;
   }
-  return ts2.isAwaitExpression(node.parent) && ts2.isExpressionStatement(node.parent.parent);
+  return ts3.isAwaitExpression(node.parent) && ts3.isExpressionStatement(node.parent.parent);
 }
 function extractFunctionFields(node, file) {
-  if (!ts2.isPropertyAccessExpression(node.expression)) {
+  if (!ts3.isPropertyAccessExpression(node.expression)) {
     return [];
   }
   if (node.expression.expression.getText() !== "siteplane") {
@@ -3549,7 +3556,7 @@ function createFallbackHash(fieldType, fallback) {
   }
 }
 function collectAttrsCall(node, attrFieldIds, attrRouteRefs, eventPreviewAttrs, eventPreviewAttrVariables, directAttrs, file) {
-  if (!ts2.isPropertyAccessExpression(node.expression)) {
+  if (!ts3.isPropertyAccessExpression(node.expression)) {
     return;
   }
   if (node.expression.expression.getText() !== "siteplane" || node.expression.name.text !== "attrs") {
@@ -3578,7 +3585,7 @@ function collectAttrsCall(node, attrFieldIds, attrRouteRefs, eventPreviewAttrs,
     }
     return;
   }
-  if (firstArg && ts2.isIdentifier(firstArg) && typeof secondArg === "string") {
+  if (firstArg && ts3.isIdentifier(firstArg) && typeof secondArg === "string") {
     attrRouteRefs.add(`${firstArg.text}:${secondArg}`);
   }
 }
@@ -3615,7 +3622,7 @@ function hasEventPreviewStrategy(options) {
   return !!options && typeof options === "object" && !Array.isArray(options) && options.previewStrategy === "event";
 }
 function isGenericEventPreviewConsumerReference(node) {
-  return (ts2.isStringLiteral(node) || ts2.isNoSubstitutionTemplateLiteral(node)) && node.text === "siteplane:preview-value-applied";
+  return (ts3.isStringLiteral(node) || ts3.isNoSubstitutionTemplateLiteral(node)) && node.text === "siteplane:preview-value-applied";
 }
 function getPreviewHookFieldId(node, eventPreviewAttrVariables) {
   const firstArg = getUseSiteplanePreviewTextFirstArg(node);
@@ -3626,7 +3633,7 @@ function getPreviewHookFieldId(node, eventPreviewAttrVariables) {
   if (typeof directFieldId === "string") {
     return directFieldId;
   }
-  if (ts2.isIdentifier(firstArg)) {
+  if (ts3.isIdentifier(firstArg)) {
     return eventPreviewAttrVariables.get(firstArg.text);
   }
   return void 0;
@@ -3636,16 +3643,16 @@ function getPreviewHookPropName(node, eventPreviewAttrVariables) {
   if (!firstArg) {
     return void 0;
   }
-  if (ts2.isIdentifier(firstArg) && !eventPreviewAttrVariables.has(firstArg.text)) {
+  if (ts3.isIdentifier(firstArg) && !eventPreviewAttrVariables.has(firstArg.text)) {
     return firstArg.text;
   }
-  if (ts2.isPropertyAccessExpression(firstArg) && ts2.isIdentifier(firstArg.expression)) {
+  if (ts3.isPropertyAccessExpression(firstArg) && ts3.isIdentifier(firstArg.expression)) {
     return firstArg.name.text;
   }
   return void 0;
 }
 function getUseSiteplanePreviewTextFirstArg(node) {
-  if (ts2.isIdentifier(node.expression) && node.expression.text === "useSiteplanePreviewText") {
+  if (ts3.isIdentifier(node.expression) && node.expression.text === "useSiteplanePreviewText") {
     return node.arguments[0];
   }
   return void 0;
@@ -3726,19 +3733,19 @@ function staticExpressionValue(expression) {
   if (!expression) {
     return void 0;
   }
-  if (ts2.isStringLiteral(expression) || ts2.isNoSubstitutionTemplateLiteral(expression)) {
+  if (ts3.isStringLiteral(expression) || ts3.isNoSubstitutionTemplateLiteral(expression)) {
     return expression.text;
   }
-  if (ts2.isNumericLiteral(expression)) {
+  if (ts3.isNumericLiteral(expression)) {
     return Number(expression.text);
   }
-  if (expression.kind === ts2.SyntaxKind.TrueKeyword) {
+  if (expression.kind === ts3.SyntaxKind.TrueKeyword) {
     return true;
   }
-  if (expression.kind === ts2.SyntaxKind.FalseKeyword) {
+  if (expression.kind === ts3.SyntaxKind.FalseKeyword) {
     return false;
   }
-  if (ts2.isObjectLiteralExpression(expression)) {
+  if (ts3.isObjectLiteralExpression(expression)) {
     return readObjectLiteral(expression);
   }
   return void 0;
@@ -3746,7 +3753,7 @@ function staticExpressionValue(expression) {
 function readObjectLiteral(expression) {
   const value = {};
   for (const property of expression.properties) {
-    if (!ts2.isPropertyAssignment(property)) {
+    if (!ts3.isPropertyAssignment(property)) {
       continue;
     }
     const name2 = getPropertyName(property.name);
@@ -3758,7 +3765,7 @@ function readObjectLiteral(expression) {
   return value;
 }
 function getPropertyName(name2) {
-  if (ts2.isIdentifier(name2) || ts2.isStringLiteral(name2)) {
+  if (ts3.isIdentifier(name2) || ts3.isStringLiteral(name2)) {
     return name2.text;
   }
   return null;
@@ -3769,7 +3776,7 @@ function collectEventPreviewComponentPropUsages(node, eventPreviewAttrVariables,
     return;
   }
   for (const property of node.attributes.properties) {
-    if (!ts2.isJsxAttribute(property)) {
+    if (!ts3.isJsxAttribute(property)) {
       continue;
     }
     const propName = getJsxAttributeName(property.name);
@@ -3786,7 +3793,7 @@ function collectEventPreviewComponentPropUsages(node, eventPreviewAttrVariables,
   }
 }
 function getJsxAttributeName(name2) {
-  if (ts2.isIdentifier(name2)) {
+  if (ts3.isIdentifier(name2)) {
     return name2.text;
   }
   return void 0;
@@ -3795,19 +3802,19 @@ function getJsxFieldIdValue(initializer, eventPreviewAttrVariables) {
   if (!initializer) {
     return void 0;
   }
-  if (ts2.isStringLiteral(initializer)) {
+  if (ts3.isStringLiteral(initializer)) {
     return initializer.text;
   }
-  if (ts2.isJsxExpression(initializer) && initializer.expression && ts2.isIdentifier(initializer.expression)) {
+  if (ts3.isJsxExpression(initializer) && initializer.expression && ts3.isIdentifier(initializer.expression)) {
     return eventPreviewAttrVariables.get(initializer.expression.text);
   }
   return void 0;
 }
 function getFunctionComponentName(node) {
-  if (ts2.isFunctionDeclaration(node) && node.name && isComponentName(node.name.text)) {
+  if (ts3.isFunctionDeclaration(node) && node.name && isComponentName(node.name.text)) {
     return node.name.text;
   }
-  if (ts2.isVariableDeclaration(node) && ts2.isIdentifier(node.name) && isComponentName(node.name.text) && node.initializer && (ts2.isArrowFunction(node.initializer) || ts2.isFunctionExpression(node.initializer))) {
+  if (ts3.isVariableDeclaration(node) && ts3.isIdentifier(node.name) && isComponentName(node.name.text) && node.initializer && (ts3.isArrowFunction(node.initializer) || ts3.isFunctionExpression(node.initializer))) {
     return node.name.text;
   }
   return void 0;
@@ -3817,10 +3824,10 @@ function isComponentName(name2) {
 }
 function getAssignedVariableName(node) {
   let current = node;
-  while (ts2.isAwaitExpression(current.parent)) {
+  while (ts3.isAwaitExpression(current.parent)) {
     current = current.parent;
   }
-  if (ts2.isVariableDeclaration(current.parent) && ts2.isIdentifier(current.parent.name)) {
+  if (ts3.isVariableDeclaration(current.parent) && ts3.isIdentifier(current.parent.name)) {
     return current.parent.name.text;
   }
   return void 0;
@@ -3990,8 +3997,8 @@ async function readGitRevision(projectDir) {
 
 // ../cli/dist/commands/setup-start.js
 import { randomBytes, randomUUID as randomUUID4 } from "crypto";
-import { access as access4 } from "fs/promises";
-import { join as join9, relative as relative5 } from "path";
+import { access as access5 } from "fs/promises";
+import { join as join10, relative as relative5 } from "path";
 import { z as z37 } from "zod";
 var bootstrapResponseSchema2 = z37.object({
   ok: z37.literal(true),
@@ -4009,10 +4016,10 @@ var responseSchema2 = z38.object({
 }).strict();
 
 // ../cli/dist/commands/setup-prepare.js
-import { access as access5, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
+import { access as access6, lstat as lstat2, mkdir as mkdir6, open as open3, readFile as readFile10, rename as rename3, rm as rm3 } from "fs/promises";
 import { randomUUID as randomUUID5 } from "crypto";
-import { dirname as dirname7, join as join10, relative as relative6, sep as sep2 } from "path";
-import ts3 from "typescript";
+import { dirname as dirname8, join as join11, relative as relative6, sep as sep2 } from "path";
+import ts4 from "typescript";
 
 // ../cli/dist/commands/setup-lock.js
 import { randomUUID as randomUUID6 } from "crypto";
@@ -4025,7 +4032,7 @@ var ownerSchema = z39.object({ pid: z39.number().int().positive(), nonce: z39.st
 import { createHash as createHash3 } from "crypto";
 import { execFile as execFile3 } from "child_process";
 import { lstat as lstat4, readFile as readFile12, writeFile as writeFile5, mkdir as mkdir8 } from "fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute2, join as join11, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
+import { dirname as dirname9, isAbsolute as isAbsolute2, join as join12, relative as relative7, resolve as resolve3, sep as sep3 } from "path";
 import { isDeepStrictEqual, promisify as promisify3 } from "util";
 import { z as z40 } from "zod";
 var execute = promisify3(execFile3);
@@ -4066,15 +4073,15 @@ async function writeBuildProvenance(checkout, revision) {
     if (entry.mode !== "120000")
       continue;
     const { readlink: readlink2 } = await import("fs/promises");
-    const path = join11(checkout, entry.path);
-    const target2 = resolve3(dirname8(path), await readlink2(path));
+    const path = join12(checkout, entry.path);
+    const target2 = resolve3(dirname9(path), await readlink2(path));
     const bound = relative7(checkout, target2);
     if (bound.startsWith("..") || isAbsolute2(bound))
       throw new Error("A tracked symbolic link escapes the committed upload; resolve that source boundary before deployment.");
   }
   const providerConfigurations = await Promise.all(entries.filter((entry) => /(?:^|\/)vercel\.json$/u.test(entry.path)).map(async (entry) => ({
     path: entry.path,
-    source: await readFile12(join11(checkout, entry.path), "utf8")
+    source: await readFile12(join12(checkout, entry.path), "utf8")
   })));
   const record = schema.parse({
     version: 2,
@@ -4083,22 +4090,22 @@ async function writeBuildProvenance(checkout, revision) {
     entries,
     providerConfigurations
   });
-  const target = join11(checkout, name);
-  await mkdir8(dirname8(target), { recursive: true, mode: 448 });
+  const target = join12(checkout, name);
+  await mkdir8(dirname9(target), { recursive: true, mode: 448 });
   await writeFile5(target, JSON.stringify(record), { flag: "wx", mode: 384 });
 }
 async function readBuildProvenance(projectDirectory) {
   let root = resolve3(projectDirectory);
   let raw = null;
   for (; ; ) {
-    raw = await readFile12(join11(root, name), "utf8").catch((error) => {
+    raw = await readFile12(join12(root, name), "utf8").catch((error) => {
       if (error.code === "ENOENT")
         return null;
       throw error;
     });
-    if (raw !== null || dirname8(root) === root)
+    if (raw !== null || dirname9(root) === root)
       break;
-    root = dirname8(root);
+    root = dirname9(root);
   }
   if (raw === null)
     return null;
@@ -4124,7 +4131,7 @@ async function readBuildProvenance(projectDirectory) {
   if (!bound.has(appRelative ? `${appRelative}/package.json` : "package.json"))
     throw new Error("The selected app is not part of the committed upload.");
   for (const entry of record.entries) {
-    const path = join11(root, entry.path);
+    const path = join12(root, entry.path);
     const stat = await lstat4(path).catch((error) => {
       if (error.code === "ENOENT")
         return null;
@@ -4194,9 +4201,9 @@ function treeHash(entries) {
 
 // ../cli/dist/commands/setup-deploy.js
 import { createHash as createHash4, randomBytes as randomBytes2, randomUUID as randomUUID7 } from "crypto";
-import { access as access6, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
+import { access as access7, mkdir as mkdir9, mkdtemp, rm as rm5, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 import { z as z41 } from "zod";
 var envSchema = z41.object({
   id: z41.string(),
@@ -4282,6 +4289,54 @@ async function scanNextProjectFieldContract(projectDir) {
 }
 async function withSiteplane(nextConfig, options = {}) {
   const projectDir = options.projectDir ?? process.cwd();
+  const booking = options.booking;
+  let integrated = nextConfig;
+  if (booking) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(
+      booking.site
+    ))
+      throw new Error(
+        "Siteplane booking.site must be the Site ID from Booking settings."
+      );
+    for (const folder of ["app/booking", "src/app/booking"]) {
+      if (await access8(join14(projectDir, folder)).then(
+        () => true,
+        () => false
+      ))
+        console.warn(
+          "[Siteplane] An app/booking route exists. The Booking beforeFiles rewrite takes precedence; move that route or remove the Booking integration."
+        );
+    }
+    integrated = {
+      ...nextConfig,
+      rewrites: async () => {
+        const existing = await nextConfig.rewrites?.() ?? [];
+        const rules = Array.isArray(existing) ? { beforeFiles: [], afterFiles: existing, fallback: [] } : existing;
+        return {
+          beforeFiles: [
+            {
+              source: "/booking",
+              destination: `https://siteplane.io/booking?site=${booking.site}`
+            },
+            {
+              source: "/booking/:path*",
+              destination: `https://siteplane.io/booking/:path*?site=${booking.site}`
+            },
+            ...rules.beforeFiles ?? []
+          ],
+          afterFiles: rules.afterFiles ?? [],
+          fallback: rules.fallback ?? []
+        };
+      }
+    };
+    const hasEditor = await access8(
+      join14(projectDir, "siteplane.config.json")
+    ).then(
+      () => true,
+      () => false
+    );
+    if (!hasEditor) return { ...integrated, env: { ...nextConfig.env } };
+  }
   const config = await readProjectConfig(projectDir);
   const scan = await scanNextProjectFieldContract(projectDir);
   const requestedRevision = options.buildRevision?.trim() || process.env.SITEPLANE_BUILD_REVISION?.trim();
@@ -4307,7 +4362,7 @@ async function withSiteplane(nextConfig, options = {}) {
   );
   const imageOrigin = hasImages ? readImageWebsiteOrigin() : null;
   return {
-    ...nextConfig,
+    ...integrated,
     ...hasImages ? { images: prepareImagePatterns(nextConfig.images, imageOrigin) } : {},
     headers: async () => frameHeaders(
       await nextConfig.headers?.() ?? [],
@@ -4335,18 +4390,30 @@ async function readGitRevision2(projectDir) {
 }
 function frameHeaders(rules, adminOrigin, imageOrigin) {
   const policy = `frame-ancestors 'self' ${adminOrigin}`;
-  const hasFrameOptions = rules.some((rule) => rule.headers.some((header) => header.key.toLowerCase() === "x-frame-options"));
+  const hasFrameOptions = rules.some(
+    (rule) => rule.headers.some(
+      (header) => header.key.toLowerCase() === "x-frame-options"
+    )
+  );
   const prepared = rules.map((rule) => ({
     ...rule,
     headers: rule.headers.map((header) => {
       if (header.key.toLowerCase() !== "content-security-policy") return header;
-      const ancestors = /(?:^|;)\s*frame-ancestors\s+([^;]+)/iu.test(header.value);
+      const ancestors = /(?:^|;)\s*frame-ancestors\s+([^;]+)/iu.test(
+        header.value
+      );
       const value = ancestors || hasFrameOptions ? header.value : `${header.value.replace(/;\s*$/u, "")}; ${policy}`;
-      return { ...header, value: imageOrigin ? prepareImageCsp(value, imageOrigin) : value };
+      return {
+        ...header,
+        value: imageOrigin ? prepareImageCsp(value, imageOrigin) : value
+      };
     })
   }));
   return hasFrameOptions ? prepared : [
-    { source: "/:path*", headers: [{ key: "Content-Security-Policy", value: policy }] },
+    {
+      source: "/:path*",
+      headers: [{ key: "Content-Security-Policy", value: policy }]
+    },
     ...prepared
   ];
 }
@@ -4451,7 +4518,7 @@ async function emitBuildProof(projectDir, packages, revision, fieldContractHash)
   let lock = null;
   while (true) {
     lock = await readFile13(
-      join13(
+      join14(
         directory,
         packageManager === "npm" ? "package-lock.json" : "pnpm-lock.yaml"
       ),
@@ -4460,8 +4527,8 @@ async function emitBuildProof(projectDir, packages, revision, fieldContractHash)
       if (error.code === "ENOENT") return null;
       throw error;
     });
-    if (lock !== null || dirname9(directory) === directory) break;
-    directory = dirname9(directory);
+    if (lock !== null || dirname10(directory) === directory) break;
+    directory = dirname10(directory);
   }
   if (!lock)
     throw new SiteplaneNextContractError(