siteplane 0.1.68 → 0.2.0-next.1

package/dist/index.js

@@ -1,1926 +1,138 @@
-// ../cli/dist/booking/manifest.js
-import { mkdir, readFile, writeFile } from "fs/promises";
-import { dirname } from "path";
-
-// ../shared/dist/actors.js
-import { z } from "zod";
-var ACTOR_TYPES = ["workspace_member", "site_member", "agent", "system"];
-var actorTypeSchema = z.enum(ACTOR_TYPES);
-
-// ../shared/dist/agent-connection.js
-import { z as z2 } from "zod";
-var AGENT_CONNECTION_TOKEN_PREFIX = "sp_agent_";
-var deviceAuthorizationResponseSchema = z2.object({
-  device_code: z2.string().min(43),
-  user_code: z2.string().min(8),
-  verification_uri: z2.string().url(),
-  verification_uri_complete: z2.string().url(),
-  expires_in: z2.number().int().positive(),
-  interval: z2.number().int().positive()
-});
-var deviceTokenResponseSchema = z2.object({
-  access_token: z2.string().startsWith(AGENT_CONNECTION_TOKEN_PREFIX).min(40),
-  token_type: z2.literal("Bearer"),
-  scope: z2.string(),
-  expires_in: z2.number().int().positive()
-});
-var deviceTokenErrorSchema = z2.object({
-  error: z2.string(),
-  error_description: z2.string().optional(),
-  interval: z2.number().int().positive().optional()
-});
-
-// ../shared/dist/analytics-defaults.js
-var ANALYTICS_BATCH_LIMITS = {
-  maxEventsPerRequest: 50,
-  maxJsonBodyBytes: 64 * 1024,
-  maxPropertiesJsonBytes: 8 * 1024
-};
-var ANALYTICS_RETENTION_DEFAULTS = {
-  enabledRawEventRetentionDays: 30,
-  higherTierRawEventRetentionDays: 90,
-  maxRawEventRetentionDaysWithoutAdr: 180,
-  diagnosticsRetentionDays: 30,
-  rateLimitBucketRetentionDays: 2,
-  lateEventWindowHours: 72
-};
-
-// ../shared/dist/analytics-booking.js
-import { z as z3 } from "zod";
-var bookingProviders = ["treatwell", "beautinda", "other"];
-var bookingAttributionModes = [
-  "outbound_click_and_utm",
-  "provider_redirect",
-  "provider_reported",
-  "manual_import",
-  "verified_webhook"
-];
-var bookingSignalSources = [
-  "outbound_click",
-  "provider_redirect",
-  "provider_reported",
-  "manual_import",
-  "verified_webhook"
-];
-var bookingAttributionConfidences = [
-  "provider_redirect",
-  "provider_reported",
-  "manual_import",
-  "verified_webhook"
-];
-var bookingProviderSchema = z3.enum(bookingProviders);
-var bookingAttributionModeSchema = z3.enum(bookingAttributionModes);
-var bookingSignalSourceSchema = z3.enum(bookingSignalSources);
-var bookingAttributionConfidenceSchema = z3.enum(bookingAttributionConfidences);
-var bookingProviderHintSchema = z3.object({
-  bookingProvider: bookingProviderSchema,
-  bookingUrlHost: z3.string().min(1).max(253),
-  bookingAttributionMode: bookingAttributionModeSchema,
-  utmContent: z3.string().min(1).max(200).optional(),
-  successCondition: z3.literal("redirect_status=succeeded").optional()
-}).superRefine((hint, context) => {
-  if (hint.successCondition !== void 0 && hint.bookingAttributionMode !== "provider_redirect") {
-    context.addIssue({
-      code: "custom",
-      message: "successCondition is allowed only for provider_redirect booking hints.",
-      path: ["successCondition"]
-    });
-  }
-});
-
-// ../shared/dist/analytics-contract.js
-import { z as z4 } from "zod";
-var ANALYTICS_IMPORT_SCHEMA_VERSION = "analytics-provider-import.v1";
-var analyticsImportTargetIdSchema = z4.string().min(1).max(120).regex(/^[a-zA-Z][a-zA-Z0-9]*(?:[._-][a-zA-Z0-9]+)*$/u);
-var analyticsProviderImportRowSchema = z4.object({
-  targetId: analyticsImportTargetIdSchema,
-  occurredAt: z4.string().datetime({ offset: true }),
-  attributionConfidence: z4.enum(["provider_reported", "manual_import"]),
-  providerEventId: z4.string().trim().min(1).max(160).optional(),
-  idempotencyKey: z4.string().trim().min(1).max(160).optional()
-}).strict().superRefine((row, context) => {
-  if (!row.providerEventId && !row.idempotencyKey) {
-    context.addIssue({
-      code: "custom",
-      message: "Each import row requires providerEventId or idempotencyKey.",
-      path: ["providerEventId"]
-    });
-  }
-});
-var analyticsProviderImportSchema = z4.object({
-  schemaVersion: z4.literal(ANALYTICS_IMPORT_SCHEMA_VERSION),
-  provider: z4.enum(["treatwell", "beautinda", "other"]),
-  sourceName: z4.string().trim().min(1).max(160).optional(),
-  rows: z4.array(analyticsProviderImportRowSchema).min(1).max(1e3)
-}).strict();
-
-// ../shared/dist/analytics-config.js
-import { z as z5 } from "zod";
-var ANALYTICS_CONFIG_LEASE_MS = 6e4;
-var analyticsMeasurementConfigSchema = z5.object({
-  version: z5.literal(1),
-  installationGeneration: z5.number().int().positive(),
-  configRevision: z5.number().int().positive(),
-  effectiveSiteMode: z5.enum(["disabled", "session_only", "full_analytics"]),
-  measurementEnabled: z5.boolean(),
-  issuedAt: z5.string().datetime({ offset: true }),
-  expiresAt: z5.string().datetime({ offset: true })
-}).strict().superRefine((config, context) => {
-  const lifetime = Date.parse(config.expiresAt) - Date.parse(config.issuedAt);
-  if (lifetime <= 0 || lifetime > ANALYTICS_CONFIG_LEASE_MS) {
-    context.addIssue({
-      code: "custom",
-      path: ["expiresAt"],
-      message: "Measurement permission must expire within 60 seconds."
-    });
-  }
-  if (config.measurementEnabled !== (config.effectiveSiteMode !== "disabled")) {
-    context.addIssue({
-      code: "custom",
-      path: ["measurementEnabled"],
-      message: "Measurement permission must match the effective site mode."
-    });
-  }
-});
-
-// ../shared/dist/analytics-events.js
-import { z as z6 } from "zod";
-var ANALYTICS_SCHEMA_VERSION = "analytics.v1";
-var analyticsSessionIdSchema = z6.string().regex(/^cpa_s_[a-f0-9]{32}$/u);
-var analyticsVisitorIdSchema = z6.string().regex(/^cpa_v_[a-f0-9]{32}$/u);
-var analyticsPersistedIdentityHashSchema = z6.string().regex(/^[a-f0-9]{64}$/u);
-var analyticsEventNames = [
-  "page_view",
-  "section_view",
-  "cta_click",
-  "outbound_click",
-  "email_click",
-  "phone_click",
-  "file_download",
-  "form_start",
-  "form_submit",
-  "form_error",
-  "lead_created",
-  "checkout_started",
-  "conversion",
-  "checkout_completed",
-  "payment_succeeded",
-  "subscription_started",
-  "purchase_completed",
-  "trial_started"
-];
-var serverOnlyAnalyticsEvents = [
-  "checkout_completed",
-  "payment_succeeded",
-  "subscription_started",
-  "purchase_completed",
-  "trial_started"
-];
-var analyticsEventSources = [
-  "browser",
-  "server",
-  "test",
-  "editor_preview",
-  "system"
-];
-var analyticsIngestionChannels = [
-  "browser_collector",
-  "server_sdk",
-  "provider_endpoint",
-  "provider_import",
-  "test",
-  "editor_preview",
-  "system_job"
-];
-var analyticsTargetTypes = [
-  "cta",
-  "form",
-  "section",
-  "file",
-  "link",
-  "conversion",
-  "server_conversion"
-];
-var analyticsDataAttributeEvents = [
-  "cta_click",
-  "outbound_click",
-  "email_click",
-  "phone_click",
-  "file_download",
-  "section_view",
-  "checkout_started",
-  "form"
-];
-var analyticsDeviceTypes = [
-  "desktop",
-  "tablet",
-  "mobile",
-  "unknown"
-];
-var analyticsBotClassifications = [
-  "normal",
-  "known_bot",
-  "suspicious",
-  "invalid"
-];
-var analyticsValidityStatuses = [
-  "accepted",
-  "rejected",
-  "ignored"
-];
-var analyticsEventNameSchema = z6.enum(analyticsEventNames);
-var serverOnlyAnalyticsEventSchema = z6.enum(serverOnlyAnalyticsEvents);
-var analyticsEventSourceSchema = z6.enum(analyticsEventSources);
-var analyticsIngestionChannelSchema = z6.enum(analyticsIngestionChannels);
-var analyticsTargetTypeSchema = z6.enum(analyticsTargetTypes);
-var analyticsDataAttributeEventSchema = z6.enum(analyticsDataAttributeEvents);
-var analyticsDeviceTypeSchema = z6.enum(analyticsDeviceTypes);
-var analyticsBotClassificationSchema = z6.enum(analyticsBotClassifications);
-var analyticsValidityStatusSchema = z6.enum(analyticsValidityStatuses);
-var analyticsPropertiesSchema = z6.record(z6.string(), z6.unknown());
-var analyticsTimestampSchema = z6.string().datetime({ offset: true });
-var analyticsBrowserEventSchema = z6.object({
-  eventId: z6.string().min(1).max(160),
-  installationGeneration: z6.number().int().positive().optional(),
-  measurementMode: z6.enum(["session_only", "full_analytics"]).optional(),
-  eventName: analyticsEventNameSchema,
-  eventSource: analyticsEventSourceSchema.optional().default("browser"),
-  targetId: z6.string().min(1).max(160).optional(),
-  targetType: analyticsTargetTypeSchema.optional(),
-  visitorId: analyticsVisitorIdSchema.optional(),
-  sessionId: analyticsSessionIdSchema,
-  idempotencyKey: z6.string().min(1).max(240).optional(),
-  occurredAt: analyticsTimestampSchema,
-  pageUrl: z6.string().url().max(2048).optional(),
-  pagePath: z6.string().min(1).max(1024).optional(),
-  routeTemplate: z6.string().min(1).max(1024).optional(),
-  referrer: z6.string().url().max(2048).optional(),
-  utmSource: z6.string().min(1).max(200).optional(),
-  utmMedium: z6.string().min(1).max(200).optional(),
-  utmCampaign: z6.string().min(1).max(200).optional(),
-  utmContent: z6.string().min(1).max(200).optional(),
-  utmTerm: z6.string().min(1).max(200).optional(),
-  deviceType: analyticsDeviceTypeSchema.optional(),
-  browserName: z6.string().min(1).max(120).optional(),
-  osName: z6.string().min(1).max(120).optional(),
-  country: z6.string().min(1).max(80).optional(),
-  region: z6.string().min(1).max(120).optional(),
-  properties: analyticsPropertiesSchema.optional().default({})
-}).superRefine((event, context) => {
-  if (isServerOnlyAnalyticsEvent(event.eventName)) {
-    context.addIssue({
-      code: "custom",
-      message: "Browser analytics payloads cannot contain server-only events.",
-      path: ["eventName"]
-    });
-  }
-  if (event.eventSource === "server" || event.eventSource === "system") {
-    context.addIssue({
-      code: "custom",
-      message: "Browser analytics payloads cannot use server/system sources.",
-      path: ["eventSource"]
-    });
-  }
-  if (event.targetType === "server_conversion") {
-    context.addIssue({
-      code: "custom",
-      message: "Browser analytics payloads cannot use server conversion targets.",
-      path: ["targetType"]
-    });
-  }
-});
-var analyticsBrowserEventPayloadSchema = z6.object({
-  siteKey: z6.string().min(1),
-  schemaVersion: z6.literal(ANALYTICS_SCHEMA_VERSION),
-  mode: z6.enum(["live", "test"]).optional().default("live"),
-  events: z6.array(analyticsBrowserEventSchema).min(1).max(50)
-});
-var analyticsNormalizedEventBaseSchema = z6.object({
-  site_id: z6.string().uuid(),
-  event_id: z6.string().min(1).max(160),
-  schema_version: z6.literal(ANALYTICS_SCHEMA_VERSION),
-  event_name: analyticsEventNameSchema,
-  event_source: analyticsEventSourceSchema,
-  ingestion_channel: analyticsIngestionChannelSchema,
-  target_id: z6.string().min(1).max(160).nullable().optional(),
-  target_type: analyticsTargetTypeSchema.nullable().optional(),
-  dedupe_key: z6.string().regex(/^analytics_dedupe_v1_[a-f0-9]{64}$/u).nullable().optional(),
-  idempotency_key: z6.string().min(1).max(240).nullable().optional(),
-  bot_classification: analyticsBotClassificationSchema,
-  validity_status: analyticsValidityStatusSchema,
-  rejection_reason: z6.string().min(1).max(240).nullable().optional(),
-  occurred_at: analyticsTimestampSchema,
-  received_at: analyticsTimestampSchema,
-  page_url: z6.string().url().max(2048).nullable().optional(),
-  page_path: z6.string().min(1).max(1024).nullable().optional(),
-  route_template: z6.string().min(1).max(1024).nullable().optional(),
-  referrer: z6.string().url().max(2048).nullable().optional(),
-  utm_source: z6.string().min(1).max(200).nullable().optional(),
-  utm_medium: z6.string().min(1).max(200).nullable().optional(),
-  utm_campaign: z6.string().min(1).max(200).nullable().optional(),
-  utm_content: z6.string().min(1).max(200).nullable().optional(),
-  utm_term: z6.string().min(1).max(200).nullable().optional(),
-  country: z6.string().min(1).max(80).nullable().optional(),
-  region: z6.string().min(1).max(120).nullable().optional(),
-  device_type: analyticsDeviceTypeSchema,
-  browser_name: z6.string().min(1).max(120).nullable().optional(),
-  os_name: z6.string().min(1).max(120).nullable().optional(),
-  provider: z6.string().min(1).max(120).nullable().optional(),
-  provider_event_id: z6.string().min(1).max(240).nullable().optional(),
-  properties: analyticsPropertiesSchema
-});
-var analyticsRawNormalizedEventSchema = analyticsNormalizedEventBaseSchema.extend({
-  visitor_id: analyticsVisitorIdSchema.nullable().optional(),
-  session_id: analyticsSessionIdSchema.nullable().optional()
-});
-var analyticsNormalizedEventSchema = analyticsNormalizedEventBaseSchema.extend({
-  visitor_id: analyticsPersistedIdentityHashSchema.nullable().optional(),
-  session_id: analyticsPersistedIdentityHashSchema.nullable().optional()
-});
-function isServerOnlyAnalyticsEvent(eventName) {
-  return serverOnlyAnalyticsEvents.includes(eventName);
-}
-
-// ../shared/dist/analytics-manifest.js
-import { z as z7 } from "zod";
-var analyticsTargetIdSchema = z7.string().min(1).max(120).regex(/^[a-zA-Z][a-zA-Z0-9]*(?:[._-][a-zA-Z0-9]+)*$/u, {
-  message: "Analytics target IDs must be stable identifiers without whitespace or visible copy."
-});
-var analyticsManifestRecordSchema = z7.record(z7.string(), z7.unknown());
-var analyticsFormPurposes = [
-  "contact",
-  "lead",
-  "newsletter",
-  "search",
-  "login",
-  "other"
-];
-var analyticsFormPurposeSchema = z7.enum(analyticsFormPurposes);
-var analyticsManifestRouteSchema = z7.object({
-  path: z7.string().min(1).max(1024),
-  pageType: z7.string().min(1).max(120).optional(),
-  label: z7.string().min(1).max(200).optional()
-}).passthrough();
-var analyticsManifestTargetSchema = z7.object({
-  id: analyticsTargetIdSchema,
-  type: analyticsTargetTypeSchema,
-  event: analyticsEventNameSchema.optional(),
-  events: z7.array(analyticsEventNameSchema).min(1).max(20).optional(),
-  route: z7.string().min(1).max(1024).optional(),
-  label: z7.string().min(1).max(200).optional(),
-  description: z7.string().min(1).max(1e3).optional(),
-  autoActive: z7.boolean().optional(),
-  sourceHints: analyticsManifestRecordSchema.optional()
-}).passthrough().superRefine((target, context) => {
-  if (target.event === void 0 && target.events === void 0) {
-    context.addIssue({
-      code: "custom",
-      message: "Analytics targets require event or events.",
-      path: ["event"]
-    });
-  }
-  if (target.event !== void 0 && target.events !== void 0) {
-    context.addIssue({
-      code: "custom",
-      message: "Analytics targets must use event or events, never both.",
-      path: ["events"]
-    });
-  }
-  if (target.type === "form" && !analyticsFormPurposeSchema.safeParse(target.sourceHints?.formPurpose).success) {
-    context.addIssue({
-      code: "custom",
-      message: "Analytics form targets require a typed sourceHints.formPurpose.",
-      path: ["sourceHints", "formPurpose"]
-    });
-  }
-});
-var analyticsManifestSchema = z7.object({
-  schemaVersion: z7.literal(ANALYTICS_SCHEMA_VERSION),
-  siteId: z7.string().min(1),
-  siteKeyRef: z7.string().regex(/^env:[A-Z][A-Z0-9_]*$/u, {
-    message: "siteKeyRef must be an environment-variable reference."
-  }),
-  siteKeyLookup: z7.string().regex(/^pk_siteplane_[A-Za-z0-9_-]{16}$/),
-  routes: z7.array(analyticsManifestRouteSchema),
-  targets: z7.array(analyticsManifestTargetSchema),
-  metadata: analyticsManifestRecordSchema.optional(),
-  siteKey: z7.string().optional(),
-  secretKey: z7.string().optional(),
-  rawKey: z7.string().optional(),
-  token: z7.string().optional(),
-  accessToken: z7.string().optional()
-}).passthrough().superRefine((manifest, context) => {
-  const targetIds = /* @__PURE__ */ new Set();
-  for (const [index, target] of manifest.targets.entries()) {
-    if (targetIds.has(target.id)) {
-      context.addIssue({
-        code: "custom",
-        message: `Duplicate analytics target ID: ${target.id}`,
-        path: ["targets", index, "id"]
-      });
-    }
-    targetIds.add(target.id);
-  }
-  for (const issue of findUnsafeSecretReferences(manifest)) {
-    context.addIssue({
-      code: "custom",
-      message: "Raw secret material is not allowed in analytics manifests.",
-      path: issue
-    });
-  }
-});
-var secretValuePattern = /(?:\bsk_(?:live|test)_|\bcpb_|\bpmt_(?:pc|setup|cli)_|\bservice_role\b|bearer\s+[a-z0-9._~-]+)/iu;
-function findUnsafeSecretReferences(value, path = []) {
-  if (Array.isArray(value)) {
-    return value.flatMap((item, index) => findUnsafeSecretReferences(item, [...path, index]));
-  }
-  if (!isPlainRecord(value)) {
-    return [];
-  }
-  return Object.entries(value).flatMap(([key, childValue]) => {
-    const childPath = [...path, key];
-    const referenceLikeKey = /(?:ref|lookup|prefix)$/iu.test(key);
-    const unsafeHere = referenceLikeKey && typeof childValue === "string" && secretValuePattern.test(childValue);
-    return [
-      ...unsafeHere ? [childPath] : [],
-      ...findUnsafeSecretReferences(childValue, childPath)
-    ];
-  });
-}
-function isPlainRecord(value) {
-  return typeof value === "object" && value !== null;
-}
-
-// ../shared/dist/analytics-metrics.js
-import { z as z8 } from "zod";
-var analyticsVisitorQualities = ["exact", "estimated"];
-var analyticsVisitorQualitySchema = z8.enum(analyticsVisitorQualities);
-var analyticsKpiKeys = [
-  "pageViews",
-  "sessions",
-  "visitors",
-  "estimatedVisitors",
-  "inquiries",
-  "leads",
-  "conversions",
-  "conversionRate",
-  "inquiryRate"
-];
-var analyticsKpiKeySchema = z8.enum(analyticsKpiKeys);
-
-// ../shared/dist/analytics-privacy.js
-var serverPropertySchemas = {
-  lead_created: {
-    conversionId: "identifier",
-    formId: "identifier",
-    formType: "enum",
-    customerRef: "identifier"
-  },
-  conversion: {
-    conversionId: "identifier",
-    conversionType: "enum",
-    attributionConfidence: "enum",
-    bookingSignalSource: "enum",
-    bookingProvider: "enum",
-    redirectStatus: "enum",
-    importId: "identifier"
-  },
-  checkout_completed: revenuePropertySchema(),
-  payment_succeeded: revenuePropertySchema(),
-  subscription_started: revenuePropertySchema(),
-  purchase_completed: revenuePropertySchema(),
-  trial_started: revenuePropertySchema()
-};
-function revenuePropertySchema() {
-  return {
-    conversionId: "identifier",
-    checkoutId: "identifier",
-    customerRef: "identifier",
-    amount: "amount",
-    currency: "enum",
-    planId: "identifier",
-    productId: "identifier"
-  };
-}
-
-// ../shared/dist/assets.js
-import { z as z9 } from "zod";
-var ASSET_STAGES = ["staging", "final", "deleted"];
-var ASSET_VISIBILITIES = ["private", "public", "deleted"];
-var ASSET_USAGE_ENTITY_TYPES = [
-  "branding",
-  "draft",
-  "change_set",
-  "published_value"
-];
-var assetStageSchema = z9.enum(ASSET_STAGES);
-var assetVisibilitySchema = z9.enum(ASSET_VISIBILITIES);
-var assetUsageEntityTypeSchema = z9.enum(ASSET_USAGE_ENTITY_TYPES);
-var brandingAccentColorSchema = z9.string().regex(/^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/);
-
-// ../shared/dist/booking-contracts.js
-import { z as z10 } from "zod";
-var bookingStatuses = [
-  "pending_payment",
-  "confirmed",
-  "payment_expired",
-  "cancelled",
-  "no_show"
-];
-var bookingPaymentStatuses = [
-  "payment_not_required",
-  "checkout_open",
-  "processing",
-  "succeeded",
-  "failed",
-  "cancelled",
-  "expired"
-];
-var bookingAccountReadinessStatuses = [
-  "not_started",
-  "setup_required",
-  "under_review",
-  "payments_ready",
-  "payouts_restricted",
-  "payments_restricted",
-  "deactivated"
-];
-var bookingRefundStatuses = [
-  "none",
-  "pending",
-  "partially_refunded",
-  "refunded",
-  "failed"
-];
-var bookingDisputeStatuses = [
-  "none",
-  "needs_response",
-  "under_review",
-  "won",
-  "lost"
-];
-var bookingPaymentModes = [
-  "onsite_only",
-  "online_required",
-  "customer_choice"
-];
-var bookingPaymentCollectionTypes = [
-  "full_amount",
-  "deposit_percent"
-];
-var bookingResourceKinds = [
-  "person",
-  "room",
-  "equipment",
-  "other"
-];
-var bookingStatusSchema = z10.enum(bookingStatuses);
-var bookingPaymentStatusSchema = z10.enum(bookingPaymentStatuses);
-var bookingAccountReadinessStatusSchema = z10.enum(bookingAccountReadinessStatuses);
-var bookingRefundStatusSchema = z10.enum(bookingRefundStatuses);
-var bookingDisputeStatusSchema = z10.enum(bookingDisputeStatuses);
-var bookingPaymentModeSchema = z10.enum(bookingPaymentModes);
-var bookingPaymentCollectionTypeSchema = z10.enum(bookingPaymentCollectionTypes);
-var bookingPaymentCollectionSchema = z10.discriminatedUnion("type", [
-  z10.object({ type: z10.literal("full_amount") }).strict(),
-  z10.object({
-    type: z10.literal("deposit_percent"),
-    depositPercent: z10.number().int().min(10).max(90)
-  }).strict()
-]);
-var bookingPaymentChoices = ["onsite", "online"];
-var bookingPaymentChoiceSchema = z10.enum(bookingPaymentChoices);
-var bookingPaymentSnapshotSchema = z10.object({
-  snapshotId: z10.string().uuid(),
-  snapshotVersion: z10.number().int().positive(),
-  currency: z10.literal("EUR"),
-  totalAmountCents: z10.number().int().min(0),
-  onlineAmountCents: z10.number().int().min(0),
-  onsiteRemainderCents: z10.number().int().min(0),
-  maxStripeRefundAmountCents: z10.number().int().min(0)
-}).strict().superRefine((snapshot, context) => {
-  if (snapshot.onlineAmountCents + snapshot.onsiteRemainderCents !== snapshot.totalAmountCents) {
-    context.addIssue({
-      code: "custom",
-      message: "Payment snapshot amounts must add up to the total amount."
-    });
-  }
-  if (snapshot.maxStripeRefundAmountCents > snapshot.onlineAmountCents) {
-    context.addIssue({
-      code: "custom",
-      message: "Stripe refund basis cannot exceed the online amount."
-    });
-  }
-});
-var bookingServiceVariantSchema = z10.object({
-  id: z10.string().uuid(),
-  name: z10.string().trim().min(1).max(120),
-  durationMinutes: z10.number().int().min(1).max(1440),
-  priceCents: z10.number().int().min(0).nullable()
-}).strict();
-var bookingServiceVariantsSchema = z10.array(bookingServiceVariantSchema).min(1).max(20);
-var isoDateSchema = z10.string().regex(/^\d{4}-\d{2}-\d{2}$/);
-var utcDateTimeSchema = z10.string().datetime();
-var bookingLocalTimeSchema = z10.string().regex(/^(?:[01]\d|2[0-3]):[0-5]\d$/);
-var bookingAvailabilityIntervalsSchema = z10.array(z10.object({
-  start: bookingLocalTimeSchema,
-  end: bookingLocalTimeSchema
-}).strict().refine((interval) => interval.end > interval.start)).superRefine((intervals, context) => {
-  const sorted = [...intervals].sort((left, right) => left.start.localeCompare(right.start));
-  for (let index = 1; index < sorted.length; index += 1) {
-    if (sorted[index].start < sorted[index - 1].end) {
-      context.addIssue({
-        code: "custom",
-        message: "Booking availability intervals must not overlap."
-      });
-      return;
-    }
-  }
-});
-var bookingPublicConfigSchema = z10.object({
-  site: z10.object({
-    displayName: z10.string().trim().min(1),
-    timezone: z10.string().trim().min(1),
-    locale: z10.string().trim().min(2),
-    bookingPageSlug: z10.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).min(2).max(64),
-    privacyUrl: z10.string().url().nullable()
-  }),
-  branding: z10.object({
-    logoUrl: z10.string().url().nullable(),
-    accentColor: z10.string().trim().min(1).nullable()
-  }),
-  settings: z10.object({
-    slotIntervalMinutes: z10.number().int().positive(),
-    minLeadMinutes: z10.number().int().min(0),
-    minCancelLeadMinutes: z10.number().int().min(0),
-    maxAdvanceDays: z10.number().int().min(1),
-    requirePhone: z10.boolean(),
-    collectNote: z10.boolean(),
-    confirmationMessage: z10.string().nullable()
-  }),
-  /** Freitexte des Salons, im Kassen-Schritt vor der Bestaetigung sichtbar. */
-  policies: z10.object({
-    cancellation: z10.string().nullable(),
-    lateArrival: z10.string().nullable()
-  }),
-  payment: z10.object({
-    mode: bookingPaymentModeSchema,
-    collection: bookingPaymentCollectionSchema,
-    onlinePaymentsReady: z10.boolean()
-  }).strict(),
-  serviceCategories: z10.array(z10.object({
-    id: z10.string().uuid(),
-    name: z10.string().trim().min(1),
-    sortOrder: z10.number().int()
-  })),
-  serviceSubcategories: z10.array(z10.object({
-    id: z10.string().uuid(),
-    categoryId: z10.string().uuid(),
-    name: z10.string().trim().min(1),
-    sortOrder: z10.number().int()
-  })),
-  services: z10.array(z10.object({
-    id: z10.string().trim().min(1),
-    name: z10.string().trim().min(1),
-    durationMinutes: z10.number().int().positive(),
-    priceCents: z10.number().int().min(0).nullable(),
-    currency: z10.string().regex(/^[A-Z]{3}$/),
-    description: z10.string().nullable(),
-    categoryId: z10.string().uuid(),
-    subcategoryId: z10.string().uuid().nullable(),
-    variants: bookingServiceVariantsSchema,
-    allowsAnyResource: z10.boolean(),
-    sortOrder: z10.number().int()
-  })),
-  resources: z10.array(z10.object({
-    id: z10.string().trim().min(1),
-    name: z10.string().trim().min(1),
-    kind: z10.enum(bookingResourceKinds),
-    /** Profilfoto für „Bei wem?“; `null` ohne Foto. */
-    photoUrl: z10.string().url().nullable()
-  })),
-  serviceResources: z10.array(z10.object({
-    serviceId: z10.string().trim().min(1),
-    resourceId: z10.string().trim().min(1)
-  }))
-});
-var bookingItemSchema = z10.object({
-  serviceId: z10.string().trim().min(1),
-  variantId: z10.string().trim().min(1)
-}).strict();
-var bookingItemsSchema = z10.array(bookingItemSchema).min(1).max(10);
-function parseBookingItemsParam(value) {
-  const items = value.split(",").map((entry) => entry.trim()).filter((entry) => entry !== "").map((entry) => {
-    const [serviceId, variantId, ...rest] = entry.split(":");
-    return serviceId && variantId && rest.length === 0 ? { serviceId, variantId } : null;
-  });
-  return items.every((item) => item !== null) ? items : null;
-}
-var bookingSlotsQuerySchema = z10.object({
-  items: z10.preprocess((value) => typeof value === "string" ? parseBookingItemsParam(value) : value, bookingItemsSchema),
-  resourceId: z10.string().trim().min(1).optional(),
-  fromDate: isoDateSchema,
-  toDate: isoDateSchema
-});
-var bookingSlotsResponseSchema = z10.object({
-  timezone: z10.string().trim().min(1),
-  items: bookingItemsSchema,
-  // Reine Behandlungsdauer ohne Puffer: das UI zeigt damit die Terminspanne,
-  // ohne selbst rechnen zu muessen.
-  totalDurationMinutes: z10.number().int().min(1),
-  mode: z10.enum(["any", "resource"]),
-  slots: z10.array(z10.object({
-    startUtc: utcDateTimeSchema,
-    resourceId: z10.string().trim().min(1).optional()
-  }))
-});
-var bookingAvailabilityQuerySchema = z10.object({
-  items: z10.preprocess((value) => typeof value === "string" ? parseBookingItemsParam(value) : value, bookingItemsSchema),
-  resourceId: z10.string().trim().min(1).optional(),
-  fromDate: isoDateSchema,
-  toDate: isoDateSchema
-});
-var bookingAvailabilityResponseSchema = z10.object({
-  timezone: z10.string().trim().min(1),
-  totalDurationMinutes: z10.number().int().min(1),
-  days: z10.array(z10.object({
-    date: isoDateSchema,
-    hasSlots: z10.boolean()
-  })),
-  /** Erster Tag mit Slot ab `fromDate`, auch ausserhalb des Fensters. */
-  nextAvailableDate: isoDateSchema.nullable()
-});
-var bookingPublicErrorCodes = [
-  "slot_unavailable",
-  "validation_error",
-  "origin_not_allowed",
-  "invalid_key",
-  "rate_limited",
-  "payment_required",
-  "payment_unavailable",
-  "payment_amount_too_small",
-  "already_cancelled",
-  "too_late",
-  "not_found"
-];
-var bookingPublicErrorSchema = z10.object({
-  error: z10.enum(bookingPublicErrorCodes),
-  message: z10.string().optional(),
-  requestId: z10.string().optional()
-}).strict();
-var bookingCreateRequestSchema = z10.object({
-  items: bookingItemsSchema,
-  resourceId: z10.string().min(1).nullable(),
-  startUtc: utcDateTimeSchema,
-  customer: z10.object({
-    name: z10.string().min(1).max(120),
-    email: z10.string().email().max(254),
-    phone: z10.string().max(32).optional(),
-    note: z10.string().max(1e3).optional()
-  }).strict(),
-  hp: z10.string().optional(),
-  clientToken: z10.string().uuid(),
-  paymentChoice: bookingPaymentChoiceSchema,
-  // Werbe-Einwilligung. Bestaetigung, Erinnerung und Storno-Link sind davon
-  // unabhaengig und werden immer versendet.
-  consent: z10.object({
-    marketingEmail: z10.boolean(),
-    marketingSms: z10.boolean()
-  }).strict().optional()
-}).strict();
-var bookingPublicPaymentResponseSchema = z10.object({
-  clientSecret: z10.string().min(1),
-  stripeAccountId: z10.string().startsWith("acct_")
-}).strict();
-var bookingCreateResponseSchema = z10.union([
-  z10.object({
-    status: z10.literal("confirmed"),
-    booking: z10.object({
-      id: z10.string().min(1),
-      startUtc: utcDateTimeSchema,
-      endUtc: utcDateTimeSchema,
-      timezone: z10.string().trim().min(1),
-      serviceName: z10.string().trim().min(1),
-      resourceName: z10.string().trim().min(1)
-    }).strict(),
-    manageUrl: z10.string().url(),
-    confirmationMessage: z10.string().nullable()
-  }).strict(),
-  z10.object({
-    status: z10.literal("pending_payment"),
-    bookingId: z10.string().min(1),
-    holdExpiresAt: utcDateTimeSchema,
-    payment: bookingPublicPaymentResponseSchema,
-    statusToken: z10.string().min(20),
-    manageUrl: z10.string().url().optional()
-  }).strict(),
-  bookingPublicErrorSchema
-]);
-var bookingStatusResponseSchema = z10.object({
-  bookingStatus: bookingStatusSchema,
-  paymentStatus: bookingPaymentStatusSchema,
-  refundStatus: bookingRefundStatusSchema,
-  disputeStatus: bookingDisputeStatusSchema,
-  holdExpiresAt: utcDateTimeSchema.nullable()
-}).strict();
-var bookingCancelRequestSchema = z10.object({
-  token: z10.string().min(20)
-});
-var bookingCancelResponseSchema = z10.union([
-  z10.object({
-    status: z10.enum(["cancelled", "already_cancelled", "too_late", "not_found"])
-  }),
-  bookingPublicErrorSchema
-]);
-var bookingMoveErrorCodes = [
-  "slot_unavailable",
-  "booking_not_movable",
-  "not_found"
-];
-var bookingMoveRequestSchema = z10.object({
-  bookingId: z10.string().uuid(),
-  newStartUtc: utcDateTimeSchema,
-  newResourceId: z10.string().uuid().optional(),
-  notifyCustomer: z10.boolean().default(false),
-  reason: z10.string().max(500).optional()
-});
-var bookingMoveResponseSchema = z10.union([
-  z10.object({
-    status: z10.literal("moved"),
-    bookingId: z10.string().uuid(),
-    startUtc: utcDateTimeSchema,
-    endUtc: utcDateTimeSchema,
-    resourceId: z10.string().uuid()
-  }),
-  z10.object({
-    error: z10.enum(bookingMoveErrorCodes),
-    message: z10.string().optional(),
-    requestId: z10.string().optional()
-  })
-]);
-var bookingManifestSchema = z10.object({
-  schemaVersion: z10.number().int().positive(),
-  siteId: z10.string().trim().min(1),
-  bookingPageSlug: z10.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/).min(2).max(64),
-  integration: z10.literal("rewrite").optional(),
-  productionOrigin: z10.string().url().optional()
-}).passthrough();
-var secretManifestKeys = /* @__PURE__ */ new Set([
-  "siteKey",
-  "rawKey",
-  "token",
-  "accessToken"
-]);
-function redactBookingManifest(value) {
-  if (Array.isArray(value)) {
-    return value.map((item) => redactBookingManifest(item));
-  }
-  if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).filter(([key]) => !secretManifestKeys.has(key)).map(([key, item]) => [key, redactBookingManifest(item)]));
-  }
-  return value;
-}
-
-// ../shared/dist/booking-defaults.js
-var BOOKING_CREATE_PAYLOAD_LIMIT_BYTES = 16 * 1024;
-
-// ../shared/dist/bridge-protocol.js
-import { z as z17 } from "zod";
-
-// ../shared/dist/field-id.js
-import { z as z11 } from "zod";
-var FIELD_ID_PATTERN = /^[a-z][a-z0-9_-]*(\.[a-z][a-z0-9_-]*)+$/;
-var fieldIdSchema = z11.string().regex(FIELD_ID_PATTERN, "Invalid field id");
-
-// ../shared/dist/field-types.js
-import { z as z12 } from "zod";
-var FIELD_TYPES = ["text", "longText", "image", "link"];
-var fieldTypeSchema = z12.enum(FIELD_TYPES);
-
-// ../shared/dist/image-value.js
-import { z as z13 } from "zod";
-var SUPPORTED_IMAGE_CONTENT_TYPES = [
-  "image/jpeg",
-  "image/png",
-  "image/webp",
-  "image/avif"
-];
-var maxImageUploadBytes = 10 * 1024 * 1024;
-var largeImageWarningBytes = 2 * 1024 * 1024;
-var imageContentTypeSchema = z13.enum(SUPPORTED_IMAGE_CONTENT_TYPES);
-var imageCropSchema = z13.object({
-  x: z13.number().min(0).max(100),
-  y: z13.number().min(0).max(100),
-  zoom: z13.number().min(1).max(4),
-  aspectRatio: z13.number().positive().max(10)
-});
-var imageValueSchema = z13.object({
-  src: z13.string().trim().min(1),
-  alt: z13.string().trim().min(1).max(300),
-  width: z13.number().int().positive().optional(),
-  height: z13.number().int().positive().optional(),
-  crop: imageCropSchema.optional(),
-  assetId: z13.string().uuid().optional(),
-  finalStorageProvider: z13.enum([
-    "repo_static_assets",
-    "repo_handoff",
-    "site_owned_storage",
-    "siteplane_managed_fallback"
-  ]).optional()
-});
-
-// ../shared/dist/missing-content.js
-import { z as z14 } from "zod";
-var MISSING_CONTENT_RENDERED_PATH_MAX_BYTES = 512;
-var MISSING_CONTENT_VISIBLE_VALUE_MAX_BYTES = 256;
-var MISSING_CONTENT_LOCATOR_HINT_MAX_BYTES = 512;
-var MISSING_CONTENT_LABEL_MAX_BYTES = 120;
-var forbiddenControlOrBidi = /[\u0000-\u001f\u007f-\u009f‪-‮⁦-⁩]/u;
-var unsafeLocator = /<\/?[a-z][^>]*>|\b(?:javascript|data:text\/html)\s*:|\bon[a-z]+\s*=/iu;
-var renderedPathSchema = z14.string().trim().transform((value) => value !== "/" ? value.replace(/\/+$/u, "") : value).superRefine((value, context) => {
-  if (!value.startsWith("/") || value === "$global" || value.includes("?") || value.includes("#")) {
-    context.addIssue({
-      code: "custom",
-      message: "renderedPath must be a canonical real path."
-    });
-  }
-  addSafeByteIssues(value, MISSING_CONTENT_RENDERED_PATH_MAX_BYTES, "renderedPath", context);
-});
-function normalizedSafeTextSchema(maxBytes, label) {
-  return z14.string().transform((value) => value.trim().replace(new RegExp("\\p{White_Space}+", "gu"), " ")).pipe(z14.string().min(1)).superRefine((value, context) => {
-    addSafeByteIssues(value, maxBytes, label, context);
-    if (label === "locatorHint" && unsafeLocator.test(value)) {
-      context.addIssue({
-        code: "custom",
-        message: "locatorHint contains unsafe markup or executable content."
-      });
-    }
-  });
-}
-var missingContentItemBase = {
-  renderedPath: renderedPathSchema,
-  visibleValue: normalizedSafeTextSchema(MISSING_CONTENT_VISIBLE_VALUE_MAX_BYTES, "visibleValue"),
-  locatorHint: normalizedSafeTextSchema(MISSING_CONTENT_LOCATOR_HINT_MAX_BYTES, "locatorHint"),
-  requestedLabel: normalizedSafeTextSchema(MISSING_CONTENT_LABEL_MAX_BYTES, "requestedLabel").optional(),
-  requestedSection: normalizedSafeTextSchema(MISSING_CONTENT_LABEL_MAX_BYTES, "requestedSection").optional(),
-  requestedSubsection: normalizedSafeTextSchema(MISSING_CONTENT_LABEL_MAX_BYTES, "requestedSubsection").optional(),
-  requestedSortOrder: z14.number().int().nonnegative().optional()
-};
-var missingContentItemSchema = z14.discriminatedUnion("kind", [
-  z14.object({ kind: z14.literal("text"), ...missingContentItemBase }).strict(),
-  z14.object({ kind: z14.literal("link"), ...missingContentItemBase }).strict(),
-  z14.object({ kind: z14.literal("image"), ...missingContentItemBase }).strict()
-]).superRefine((item, context) => {
-  if (item.requestedSubsection && !item.requestedSection) {
-    context.addIssue({
-      code: "custom",
-      message: "requestedSubsection requires requestedSection.",
-      path: ["requestedSubsection"]
-    });
-  }
-});
-function addSafeByteIssues(value, maxBytes, label, context) {
-  if (new TextEncoder().encode(value).byteLength > maxBytes) {
-    context.addIssue({
-      code: "custom",
-      message: `${label} exceeds ${maxBytes} UTF-8 bytes.`
-    });
-  }
-  if (forbiddenControlOrBidi.test(value)) {
-    context.addIssue({
-      code: "custom",
-      message: `${label} contains a forbidden control or bidi character.`
-    });
-  }
-}
-
-// ../shared/dist/site-field-contract.js
-import { z as z16 } from "zod";
-
-// ../shared/dist/fallback-hash.js
-import { z as z15 } from "zod";
-var SAFE_REPRESENTATION_REASONS = [
-  "asset_import_rewritten",
-  "relative_url_normalized",
-  "line_endings_normalized",
-  "image_value_serialized"
-];
-var safeRepresentationReasonSchema = z15.enum(SAFE_REPRESENTATION_REASONS);
-var linkFallbackSchema = z15.object({
-  href: z15.string().trim().min(1),
-  label: z15.string().trim().min(1).optional(),
-  target: z15.enum(["_self", "_blank"]).optional()
-}).passthrough();
-
-// ../shared/dist/site-field-contract.js
-var siteFieldStatusSchema = z16.enum(["hidden", "active"]);
-var semanticVersionSchema = z16.string().regex(/^\d+\.\d+\.\d+$/u);
-var siteFieldRouteKeySchema = z16.string().trim().refine((value) => value === "$global" || value.startsWith("/") && !value.includes("?") && !value.includes("#") && (value === "/" || !value.endsWith("/")), "Route keys must be canonical paths or $global.");
-var repositoryRelativePosixPathSchema = z16.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.includes("\\") && !/^[a-z]:/iu.test(value) && !value.split("/").includes(".."), "Source paths must be repository-relative POSIX paths.");
-var sourceMappingSchema = z16.object({
-  kind: z16.literal("function"),
-  filePath: repositoryRelativePosixPathSchema,
-  exportName: z16.string().trim().min(1).optional(),
-  sourcePath: z16.string().trim().min(1).optional(),
-  editTarget: fieldIdSchema.optional()
-}).strict();
-var domMappingSchema = z16.object({
-  attribute: z16.literal("data-siteplane-field-id"),
-  previewStrategy: z16.enum(["dom", "event"])
-}).strict();
-var fieldBaseSchema = z16.object({
-  fieldId: fieldIdSchema,
-  routeKey: siteFieldRouteKeySchema,
-  source: sourceMappingSchema,
-  dom: domMappingSchema.optional()
-}).strict();
-var linkFallbackSchema2 = z16.object({
-  href: z16.string().trim().min(1),
-  label: z16.string().trim().min(1).optional(),
-  target: z16.enum(["_self", "_blank"]).optional()
-}).strict();
-var imageFallbackSchema = z16.object({
-  src: z16.string().trim().min(1),
-  alt: z16.string().trim().max(300),
-  width: z16.number().int().positive().optional(),
-  height: z16.number().int().positive().optional(),
-  crop: z16.object({
-    x: z16.number().min(0).max(100),
-    y: z16.number().min(0).max(100),
-    zoom: z16.number().min(1).max(4),
-    aspectRatio: z16.number().positive().max(10)
-  }).strict().optional()
-}).strict();
-var siteFieldContractFieldSchema = z16.discriminatedUnion("fieldType", [
-  fieldBaseSchema.extend({
-    fieldType: z16.literal("text"),
-    fallback: z16.string()
-  }),
-  fieldBaseSchema.extend({
-    fieldType: z16.literal("longText"),
-    fallback: z16.string()
-  }),
-  fieldBaseSchema.extend({
-    fieldType: z16.literal("link"),
-    fallback: linkFallbackSchema2
-  }),
-  fieldBaseSchema.extend({
-    fieldType: z16.literal("image"),
-    fallback: imageFallbackSchema
-  })
-]);
-var siteFieldContractV1Schema = z16.object({
-  version: z16.literal(1),
-  fieldContractVersion: semanticVersionSchema,
-  scannerContractVersion: semanticVersionSchema,
-  fields: z16.array(siteFieldContractFieldSchema)
-}).strict().superRefine((contract, context) => {
-  const seen = /* @__PURE__ */ new Set();
-  for (const [index, field] of contract.fields.entries()) {
-    if (seen.has(field.fieldId)) {
-      context.addIssue({
-        code: "custom",
-        message: `Duplicate field id: ${field.fieldId}`,
-        path: ["fields", index, "fieldId"]
-      });
-    }
-    seen.add(field.fieldId);
-  }
-});
-
-// ../shared/dist/bridge-protocol.js
-var BRIDGE_PROTOCOL_VERSION = 2;
-var bridgeRectSchema = z17.object({
-  x: z17.number(),
-  y: z17.number(),
-  width: z17.number().nonnegative(),
-  height: z17.number().nonnegative()
-});
-var previewTextValueSchema = z17.object({
-  fieldType: z17.enum(["text", "longText"]),
-  value: z17.string()
-});
-var previewLinkValueSchema = z17.object({
-  fieldType: z17.literal("link"),
-  value: z17.object({
-    href: z17.string().trim().min(1),
-    label: z17.string().trim().min(1).optional()
-  })
-});
-var previewImageValueSchema = z17.object({
-  fieldType: z17.literal("image"),
-  value: imageValueSchema
-});
-var bridgePreviewValueSchema = z17.discriminatedUnion("fieldType", [
-  previewTextValueSchema,
-  previewLinkValueSchema,
-  previewImageValueSchema
-]);
-var fieldSelectionModeSchema = z17.enum(["replace", "range", "toggle"]);
-var fieldBridgeMissingContentActionSchema = z17.enum([
-  "add",
-  "select",
-  "remove"
-]);
-var FIELD_BRIDGE_MESSAGE_TYPES = [
-  "siteplane:field-bridge:init",
-  "siteplane:field-bridge:ready",
-  "siteplane:field-bridge:fields",
-  "siteplane:field-bridge:select-field",
-  "siteplane:field-bridge:set-selected-field",
-  "siteplane:field-bridge:apply-preview-values",
-  "siteplane:field-bridge:test-preview-values",
-  "siteplane:field-bridge:preview-ack",
-  "siteplane:field-bridge:set-visual-control-state",
-  "siteplane:field-bridge:missing-content",
-  "siteplane:field-bridge:preview-scrolled",
-  "siteplane:field-bridge:analytics-probe",
-  "siteplane:field-bridge:analytics-probe-result",
-  "siteplane:field-bridge:error"
-];
-var canonicalFieldContractHashSchema = z17.string().regex(/^sha256:[0-9a-f]{64}$/u);
-var bridgeSectionSchema = z17.string().trim().min(1).max(256);
-var realRenderedPathSchema = z17.string().trim().refine((value) => value.startsWith("/") && value !== "$global" && !value.includes("?") && !value.includes("#"), "A field bridge rendered path must be a real canonical path.");
-var fieldBridgeIdentitySchema = z17.object({
-  publicRuntimeKeyId: z17.string().uuid(),
-  fieldContractHash: canonicalFieldContractHashSchema,
-  deploymentRevision: z17.string().trim().min(1).max(256)
-}).strict();
-var fieldBridgeBaseSchema = z17.object({
-  version: z17.literal(BRIDGE_PROTOCOL_VERSION),
-  type: z17.enum(FIELD_BRIDGE_MESSAGE_TYPES),
-  siteId: z17.string().uuid(),
-  sessionId: z17.string().trim().min(1),
-  publicRuntimeKeyId: z17.string().uuid(),
-  fieldContractHash: canonicalFieldContractHashSchema,
-  deploymentRevision: z17.string().trim().min(1).max(256),
-  requestId: z17.string().trim().min(1),
-  sentAt: z17.string().datetime()
-}).strict();
-var fieldBridgeFieldSchema = z17.object({
-  fieldId: fieldIdSchema,
-  fieldType: fieldTypeSchema,
-  routeKey: siteFieldRouteKeySchema,
-  renderedPath: realRenderedPathSchema,
-  sourcePath: z17.string().trim().min(1).optional(),
-  editTarget: fieldIdSchema,
-  rect: bridgeRectSchema,
-  targetResolved: z17.literal(true),
-  currentValue: bridgePreviewValueSchema.optional()
-}).strict();
-var fieldBridgeInitMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:init"),
-  payload: z17.object({
-    adminOrigin: z17.string().url(),
-    customerOrigin: z17.string().url(),
-    renderedPath: realRenderedPathSchema
-  }).strict()
-});
-var fieldBridgeReadyMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:ready"),
-  payload: z17.object({
-    renderedPath: realRenderedPathSchema,
-    fieldCount: z17.number().int().nonnegative(),
-    capabilities: z17.tuple([
-      z17.literal("field_selection"),
-      z17.literal("preview_values"),
-      z17.literal("field_evidence"),
-      z17.literal("visual_field_control")
-    ]).rest(z17.enum(["analytics_preview_readiness"])).refine((capabilities) => capabilities.length <= 5)
-  }).strict()
-});
-var fieldBridgeFieldsMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:fields"),
-  payload: z17.object({
-    renderedPath: realRenderedPathSchema,
-    fields: z17.array(fieldBridgeFieldSchema)
-  }).strict()
-});
-var fieldBridgeSelectFieldMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:select-field"),
-  payload: z17.object({
-    fieldId: fieldIdSchema,
-    selectionMode: fieldSelectionModeSchema
-  }).strict()
-});
-var fieldBridgeSetSelectedFieldMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:set-selected-field"),
-  payload: z17.object({
-    fieldIds: z17.array(fieldIdSchema).max(200),
-    primaryFieldId: fieldIdSchema.nullable(),
-    scrollIntoView: z17.boolean().optional()
-  }).strict().superRefine((value, context) => {
-    if (value.fieldIds.length > 0 && value.primaryFieldId === null) {
-      context.addIssue({
-        code: "custom",
-        message: "A non-empty selection needs a primary field.",
-        path: ["primaryFieldId"]
-      });
-    }
-    if (value.primaryFieldId !== null && !value.fieldIds.includes(value.primaryFieldId)) {
-      context.addIssue({
-        code: "custom",
-        message: "The primary field must be part of the selection.",
-        path: ["primaryFieldId"]
-      });
-    }
-  })
-});
-var fieldBridgeApplyPreviewValuesMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:apply-preview-values"),
-  payload: z17.object({ values: z17.record(fieldIdSchema, bridgePreviewValueSchema) }).strict()
-});
-var fieldBridgeTestPreviewValuesMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:test-preview-values"),
-  payload: z17.object({ fieldIds: z17.array(fieldIdSchema).min(1).max(200) }).strict()
-});
-var fieldBridgePreviewAckMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:preview-ack"),
-  payload: z17.object({
-    ackRequestId: z17.string().trim().min(1),
-    kind: z17.enum(["apply", "test"]),
-    renderedPath: realRenderedPathSchema,
-    fieldIds: z17.array(fieldIdSchema).max(200)
-  }).strict()
-});
-var fieldBridgeSetVisualControlStateMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:set-visual-control-state"),
-  payload: z17.object({
-    enabled: z17.boolean(),
-    fieldProximityEnabled: z17.boolean(),
-    pendingKeys: z17.array(z17.string().trim().min(1).max(2048)).max(50),
-    activeFieldIds: z17.array(fieldIdSchema),
-    fieldSections: z17.record(fieldIdSchema, bridgeSectionSchema),
-    selectedPending: z17.array(z17.object({
-      key: z17.string().trim().min(1).max(2048),
-      locatorHint: z17.string().trim().min(1).max(2048)
-    }).strict()).max(50),
-    scrollPendingIntoView: z17.boolean().optional()
-  }).strict()
-});
-var fieldBridgeMissingContentMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:missing-content"),
-  payload: z17.object({
-    action: fieldBridgeMissingContentActionSchema,
-    item: missingContentItemSchema,
-    suggestedSection: bridgeSectionSchema.optional()
-  }).strict()
-});
-var fieldBridgePreviewScrolledMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:preview-scrolled"),
-  payload: z17.object({ renderedPath: realRenderedPathSchema }).strict()
-});
-var analyticsPreviewChallengeSchema = z17.object({
-  bridgeSessionId: z17.string().uuid(),
-  challenge: z17.string().min(32).max(512),
-  testRunId: z17.string().trim().min(1).max(160),
-  expiresAt: z17.string().datetime()
-}).strict();
-var fieldBridgeAnalyticsProbeSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:analytics-probe"),
-  requestId: z17.string().min(1).max(256),
-  payload: analyticsPreviewChallengeSchema
-});
-var fieldBridgeAnalyticsProbeResultSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:analytics-probe-result"),
-  payload: z17.object({
-    ackRequestId: z17.string().min(1).max(256),
-    status: z17.enum(["recorded", "failed"])
-  }).strict()
-});
-var fieldBridgeErrorMessageSchema = fieldBridgeBaseSchema.extend({
-  type: z17.literal("siteplane:field-bridge:error"),
-  payload: z17.object({
-    code: z17.string().trim().min(1),
-    message: z17.string().trim().min(1),
-    recoverable: z17.boolean().default(false)
-  }).strict()
-});
-var fieldBridgeMessageSchema = z17.discriminatedUnion("type", [
-  fieldBridgeInitMessageSchema,
-  fieldBridgeReadyMessageSchema,
-  fieldBridgeFieldsMessageSchema,
-  fieldBridgeSelectFieldMessageSchema,
-  fieldBridgeSetSelectedFieldMessageSchema,
-  fieldBridgeApplyPreviewValuesMessageSchema,
-  fieldBridgeTestPreviewValuesMessageSchema,
-  fieldBridgePreviewAckMessageSchema,
-  fieldBridgeSetVisualControlStateMessageSchema,
-  fieldBridgeMissingContentMessageSchema,
-  fieldBridgePreviewScrolledMessageSchema,
-  fieldBridgeErrorMessageSchema,
-  fieldBridgeAnalyticsProbeSchema,
-  fieldBridgeAnalyticsProbeResultSchema
-]);
-
-// ../shared/dist/commands.js
-import { z as z19 } from "zod";
-
-// ../shared/dist/errors.js
-import { z as z18 } from "zod";
-var UI_ERROR_CATEGORIES = [
-  "site_member",
-  "workspace_member",
-  "internal"
-];
-var uiErrorCategorySchema = z18.enum(UI_ERROR_CATEGORIES);
-var commandErrorPayloadSchema = z18.object({
-  code: z18.string().min(1),
-  message: z18.string().min(1),
-  category: uiErrorCategorySchema,
-  details: z18.record(z18.string(), z18.unknown()).optional()
-});
-
-// ../shared/dist/commands.js
-var commandSuccessSchema = z19.object({
-  ok: z19.literal(true),
-  data: z19.unknown()
-});
-var commandErrorSchema = z19.object({
-  ok: z19.literal(false),
-  error: commandErrorPayloadSchema
-});
-var commandResultSchema = z19.discriminatedUnion("ok", [
-  commandSuccessSchema,
-  commandErrorSchema
-]);
-
-// ../shared/dist/editor-settings.js
-import { z as z20 } from "zod";
-var editorColorSchemeSchema = z20.enum([
-  "paper",
-  "slate",
-  "siteplane",
-  "bloom"
-]);
-var editorColorSchemes = editorColorSchemeSchema.options;
-var editorColorModeSchema = z20.enum(["light", "dark"]);
-var editorColorModes = editorColorModeSchema.options;
-
-// ../shared/dist/editor-organization.js
-import { z as z21 } from "zod";
-var labelSchema = z21.string().trim().min(1).max(120);
-var updateFieldSchema = z21.object({
-  operation: z21.literal("update_field"),
-  siteId: z21.string().uuid(),
-  fieldId: fieldIdSchema,
-  label: labelSchema.optional(),
-  description: z21.string().trim().max(500).nullable().optional(),
-  section: labelSchema.nullable().optional(),
-  subsection: labelSchema.nullable().optional(),
-  sortOrder: z21.number().int().nonnegative().optional(),
-  status: z21.enum(["hidden", "active"]).optional()
-});
-var updateEditorOrganizationInputSchema = z21.discriminatedUnion("operation", [
-  updateFieldSchema,
-  z21.object({
-    operation: z21.literal("rename_section"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema,
-    currentSection: labelSchema,
-    nextSection: labelSchema
-  }),
-  z21.object({
-    operation: z21.literal("create_group"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema,
-    section: labelSchema,
-    fieldIds: z21.array(fieldIdSchema).max(200).default([])
-  }),
-  z21.object({
-    operation: z21.literal("delete_section"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema,
-    section: labelSchema
-  }),
-  z21.object({
-    operation: z21.literal("move_section"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema,
-    section: labelSchema,
-    direction: z21.enum(["up", "down"])
-  }),
-  z21.object({
-    operation: z21.literal("create_subgroup"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema,
-    section: labelSchema,
-    subsection: labelSchema,
-    fieldIds: z21.array(fieldIdSchema).min(1).max(200)
-  }),
-  z21.object({
-    operation: z21.literal("update_subgroup"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema,
-    currentSection: labelSchema,
-    currentSubsection: labelSchema,
-    section: labelSchema,
-    subsection: labelSchema.nullable()
-  }),
-  z21.object({
-    operation: z21.literal("rename_route"),
-    siteId: z21.string().uuid(),
-    routeKey: siteFieldRouteKeySchema.refine((value) => value !== "$global", "Global content has no page label."),
-    label: labelSchema
-  })
-]).superRefine((input, context) => {
-  if (input.operation === "update_field" && input.label === void 0 && input.description === void 0 && input.section === void 0 && input.subsection === void 0 && input.sortOrder === void 0 && input.status === void 0) {
-    context.addIssue({
-      code: "custom",
-      message: "At least one field organization value is required."
-    });
-  }
-  if (input.operation === "update_field" && input.section === null && typeof input.subsection === "string") {
-    context.addIssue({
-      code: "custom",
-      message: "A subgroup requires a group.",
-      path: ["subsection"]
-    });
-  }
-});
-
-// ../shared/dist/site-slug.js
-import { z as z22 } from "zod";
-var SITE_SLUG_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-var RESERVED_SITE_SLUGS = /* @__PURE__ */ new Set([
-  "account",
-  "admin",
-  "api",
-  "app",
-  "auth",
-  "book",
-  "claim",
-  "dev",
-  "login",
-  "new",
-  "portal",
-  "support",
-  "workspace"
-]);
-var siteSlugSchema = z22.string().regex(SITE_SLUG_PATTERN, "Invalid site slug").refine((value) => !RESERVED_SITE_SLUGS.has(value), "Reserved site slug");
-
-// ../shared/dist/entitlements.js
-import { z as z23 } from "zod";
-var entitlementSnapshotSchema = z23.object({
-  planKey: z23.string().trim().min(1),
-  sitesLimit: z23.number().int().positive(),
-  siteMembersPerSiteLimit: z23.number().int().positive(),
-  customAdminDomainsEnabled: z23.boolean(),
-  agentMcpEnabled: z23.boolean(),
-  emailNotificationsEnabled: z23.boolean(),
-  analyticsEnabled: z23.boolean(),
-  analyticsSitesLimit: z23.number().int().min(0),
-  analyticsPortalPerformanceEnabled: z23.boolean(),
-  analyticsMonthlyReportsEnabled: z23.boolean(),
-  analyticsAiSummaryEnabled: z23.boolean(),
-  analyticsRawEventRetentionDays: z23.number().int().min(1).max(ANALYTICS_RETENTION_DEFAULTS.maxRawEventRetentionDaysWithoutAdr),
-  analyticsMonthlyEventLimit: z23.number().int().min(0),
-  bookingEnabled: z23.boolean().default(false),
-  bookingSitesLimit: z23.number().int().min(0).default(0),
-  bookingPortalManagementEnabled: z23.boolean().default(false),
-  bookingResourcesPerSiteLimit: z23.number().int().min(0).default(0),
-  bookingServicesPerSiteLimit: z23.number().int().min(0).default(0),
-  bookingMonthlyBookingsLimit: z23.number().int().min(0).default(0),
-  bookingRemindersEnabled: z23.boolean().default(false)
-});
-var EARLY_ACCESS_PLAN = {
-  planKey: "early_access_2026",
-  sitesLimit: 3,
-  siteMembersPerSiteLimit: 5,
-  customAdminDomainsEnabled: true,
-  agentMcpEnabled: true,
-  emailNotificationsEnabled: true,
-  analyticsEnabled: true,
-  analyticsSitesLimit: 3,
-  analyticsPortalPerformanceEnabled: false,
-  analyticsMonthlyReportsEnabled: false,
-  analyticsAiSummaryEnabled: false,
-  analyticsRawEventRetentionDays: ANALYTICS_RETENTION_DEFAULTS.enabledRawEventRetentionDays,
-  analyticsMonthlyEventLimit: 0,
-  bookingEnabled: true,
-  bookingSitesLimit: 3,
-  bookingPortalManagementEnabled: true,
-  bookingResourcesPerSiteLimit: 10,
-  bookingServicesPerSiteLimit: 50,
-  bookingMonthlyBookingsLimit: 0,
-  bookingRemindersEnabled: true
-};
-
-// ../shared/dist/readiness.js
-import { z as z24 } from "zod";
-var READINESS_CHECK_KEYS = [
-  "agent_instructions_installed",
-  "runtime_package_connected",
-  "secure_server_access_configured",
-  "preview_bridge_working",
-  "admin_access_url_selected",
-  "default_publishing_mode_selected"
-];
-var READINESS_STATUSES = [
-  "pending",
-  "passing",
-  "failing",
-  "warning"
-];
-var readinessCheckKeySchema = z24.enum(READINESS_CHECK_KEYS);
-var readinessStatusSchema = z24.enum(READINESS_STATUSES);
-
-// ../shared/dist/site.js
-import { z as z25 } from "zod";
-var SITE_STATUSES = ["active", "disabled", "archived"];
-var siteStatusSchema = z25.enum(SITE_STATUSES);
-var websiteUrlSchema = z25.string().trim().url().refine((value) => value.startsWith("https://") || value.startsWith("http://"), "Website URL must use http or https");
-
-// ../shared/dist/field-sync.js
-import { z as z26 } from "zod";
-var FIELD_SYNC_MAX_FIELDS = 2e3;
-var filePathSchema = z26.string().trim().min(1).max(500).refine((value) => !value.startsWith("/") && !value.includes("\\") && !/^[a-z]:/iu.test(value) && !value.split("/").includes(".."), "Use the file path relative to the project root.");
-var fieldBase = {
-  id: fieldIdSchema.max(160),
-  file: filePathSchema,
-  label: z26.string().trim().min(1).max(120).optional()
+import {
+  loadSiteValues
+} from "./chunk-BLJCWIYD.js";
+import "./chunk-KZ3AQ6OA.js";
+
+// src/index.ts
+import { cache } from "react";
+
+// ../shared/dist/field-values.js
+var FIELD_VALUE_LIMITS = {
+  text: 256,
+  longText: 5e4,
+  linkLabel: 256,
+  linkHref: 2048,
+  imageSrc: 2048,
+  imageAlt: 300,
+  imageSize: 1e5
 };
-var fieldSyncFieldSchema = z26.discriminatedUnion("type", [
-  z26.object({ ...fieldBase, type: z26.literal("text"), fallback: z26.string().max(256) }).strict(),
-  z26.object({ ...fieldBase, type: z26.literal("longText"), fallback: z26.string().max(5e4) }).strict(),
-  z26.object({
-    ...fieldBase,
-    type: z26.literal("link"),
-    fallback: z26.object({ href: z26.string().min(1).max(2048), label: z26.string().max(256) }).strict()
-  }).strict(),
-  z26.object({
-    ...fieldBase,
-    type: z26.literal("image"),
-    fallback: z26.object({ src: z26.string().min(1).max(2048), alt: z26.string().max(300) }).strict()
-  }).strict()
-]);
-var fieldSyncRequestSchema = z26.object({ fields: z26.array(fieldSyncFieldSchema).max(FIELD_SYNC_MAX_FIELDS) }).strict();
-
-// ../shared/dist/signing-keys.js
-var pkcs8Ed25519Prefix = Uint8Array.from([
-  48,
-  46,
-  2,
-  1,
-  0,
-  48,
-  5,
-  6,
-  3,
-  43,
-  101,
-  112,
-  4,
-  34,
-  4,
-  32
-]);
-
-// ../shared/dist/preview-token.js
-var PREVIEW_TOKEN_MAX_SECONDS = 60 * 60;
-var header = encodeJson({ alg: "EdDSA", typ: "JWT" });
-function encodeJson(value) {
-  return toBase64Url(new TextEncoder().encode(JSON.stringify(value)));
-}
-function toBase64Url(bytes) {
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
-}
-
-// ../shared/dist/webhook-signature.js
-var WEBHOOK_TOLERANCE_SECONDS = 5 * 60;
-var encoder = new TextEncoder();
-
-// ../cli/dist/booking/manifest.js
-async function readBookingManifestFile(manifestPath) {
-  return validateBookingManifestInput(JSON.parse(await readFile(manifestPath, "utf8")));
-}
-async function writeBookingManifestFile(manifestPath, manifest) {
-  await mkdir(dirname(manifestPath), {
-    recursive: true
-  });
-  await writeFile(manifestPath, `${JSON.stringify(bookingManifestSchema.parse(manifest), null, 2)}
-`, "utf8");
-}
-function validateBookingManifestInput(input) {
-  const redactedKeys = collectRedactedBookingKeys(input);
-  const redacted = redactBookingManifest(input);
-  return {
-    manifest: bookingManifestSchema.parse(redacted),
-    redactedKeys: [...redactedKeys].sort()
-  };
-}
-var secretManifestKeys2 = /* @__PURE__ */ new Set([
-  "siteKey",
-  "rawKey",
-  "token",
-  "accessToken"
-]);
-function collectRedactedBookingKeys(input, prefix = "") {
-  if (Array.isArray(input)) {
-    return input.flatMap((item, index) => collectRedactedBookingKeys(item, `${prefix}[${index}]`));
-  }
-  if (!input || typeof input !== "object") {
-    return [];
-  }
-  return Object.entries(input).flatMap(([key, value]) => {
-    const path = prefix ? `${prefix}.${key}` : key;
-    if (secretManifestKeys2.has(key)) {
-      return [path];
+var linkKeys = ["href", "label"];
+var fallbackImageKeys = ["src", "alt", "width", "height"];
+var contentImageKeys = ["assetId", "src", "alt", "width", "height"];
+var asciiBlank = /^[ \t\n\v\f\r]*$/u;
+var uuidPattern = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu;
+var webAddress = /^https?:\/\/[^/?#@]+(?:[/?#].*)?$/isu;
+function fieldValueProblem(type, value, origin) {
+  switch (type) {
+    case "text":
+    case "longText":
+      if (typeof value !== "string")
+        return "not_text";
+      return codePoints(value) > FIELD_VALUE_LIMITS[type] ? "too_long" : null;
+    case "link":
+      return linkProblem(value);
+    case "image":
+      return imageProblem(value, origin);
+  }
+}
+function readFieldValue(type, value) {
+  const rendered = type === "link" ? pick(value, linkKeys) : type === "image" ? pick(value, fallbackImageKeys) : value;
+  return fieldValueProblem(type, rendered, "fallback") === null ? rendered : null;
+}
+function linkProblem(value) {
+  if (!isRecord(value))
+    return "not_object";
+  if (hasUnknownKey(value, linkKeys))
+    return "unknown_key";
+  if (!isHref(value.href))
+    return "href_invalid";
+  if (typeof value.label !== "string" || asciiBlank.test(value.label))
+    return "label_missing";
+  return codePoints(value.label) > FIELD_VALUE_LIMITS.linkLabel ? "label_too_long" : null;
+}
+function imageProblem(value, origin) {
+  if (!isRecord(value))
+    return "not_object";
+  if (hasUnknownKey(value, origin === "content" ? contentImageKeys : fallbackImageKeys))
+    return "unknown_key";
+  if (origin === "content" && (typeof value.assetId !== "string" || !uuidPattern.test(value.assetId))) {
+    return "asset_missing";
+  }
+  if (!isImageSource(value.src))
+    return "src_invalid";
+  if (typeof value.alt !== "string" || codePoints(value.alt) > FIELD_VALUE_LIMITS.imageAlt)
+    return "alt_invalid";
+  const sizeRequired = origin === "content";
+  for (const size of [value.width, value.height]) {
+    if (size === void 0 ? sizeRequired : !isImageSize(size))
+      return "size_invalid";
+  }
+  return null;
+}
+function isHref(value) {
+  if (!isAddressText(value, FIELD_VALUE_LIMITS.linkHref))
+    return false;
+  return isSitePath(value) || value.startsWith("#") || webAddress.test(value) || /^mailto:.+$/isu.test(value) || /^tel:\+?[0-9][0-9().-]*$/iu.test(value);
+}
+function isImageSource(value) {
+  return isAddressText(value, FIELD_VALUE_LIMITS.imageSrc) && (isSitePath(value) || webAddress.test(value));
+}
+function isSitePath(value) {
+  return value.startsWith("/") && !value.startsWith("//");
+}
+function isAddressText(value, maxLength) {
+  if (typeof value !== "string" || value.length === 0 || codePoints(value) > maxLength)
+    return false;
+  for (const character of value) {
+    const code = character.codePointAt(0);
+    if (code <= 32 || code === 127 || character === "\\")
+      return false;
+  }
+  return true;
+}
+function isImageSize(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= FIELD_VALUE_LIMITS.imageSize;
+}
+function hasUnknownKey(value, keys) {
+  return Object.keys(value).some((key) => !keys.includes(key));
+}
+function pick(value, keys) {
+  if (!isRecord(value))
+    return value;
+  return Object.fromEntries(keys.filter((key) => key in value).map((key) => [key, value[key]]));
+}
+function codePoints(value) {
+  return Array.from(value).length;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/runtime/fields.ts
+function createFieldReaders(loadValues) {
+  async function read(type, fieldId, fallback) {
+    try {
+      const values = await loadValues();
+      if (!Object.prototype.hasOwnProperty.call(values, fieldId)) return fallback;
+      return readFieldValue(type, values[fieldId]) ?? fallback;
+    } catch {
+      return fallback;
     }
-    return collectRedactedBookingKeys(value, path);
-  });
-}
-
-// ../cli/dist/booking/static-scan.js
-import ts from "typescript";
-function scanBookingSourceFiles(files, input) {
-  const findings = [];
-  const hardErrors = [];
-  const warnings = [];
-  for (const file of files) {
-    let visit2 = function(node) {
-      if (ts.isCallExpression(node) && ts.isIdentifier(node.expression) && node.expression.text === "withSiteplane") {
-        const options = node.arguments[1];
-        const booking = options && property(options, "booking");
-        const site = booking && property(booking, "site");
-        if (site && ts.isStringLiteralLike(site)) {
-          const issue = {
-            code: site.text === input.siteId ? "booking_scan.integration_found" : "booking_scan.site_mismatch",
-            message: site.text === input.siteId ? "Booking /booking rewrite configured for this Site ID." : "The Booking wrapper uses a different Site ID; use the Site ID supplied by Siteplane.",
-            filePath: file.filePath
-          };
-          (site.text === input.siteId ? findings : hardErrors).push(issue);
-        }
-      }
-      ts.forEachChild(node, visit2);
-    };
-    var visit = visit2;
-    const source = ts.createSourceFile(file.filePath, file.sourceText, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX);
-    visit2(source);
   }
-  if (!findings.length && !hardErrors.length)
-    hardErrors.push({
-      code: "booking_scan.integration_missing",
-      message: "Could not verify withSiteplane(nextConfig, { booking: { site: <site-id> } }). Include next.config.ts in the scan and use a literal Site ID.",
-      filePath: "next.config.ts"
-    });
-  if (input.productionOrigin && !files.some((file) => file.sourceText.includes(input.productionOrigin)))
-    warnings.push({
-      code: "booking_scan.origin_not_detected",
-      message: "Verify the public booking address and its allowed origins in Siteplane settings.",
-      filePath: "siteplane.booking.json"
-    });
   return {
-    manifest: bookingManifestSchema.parse({
-      schemaVersion: 1,
-      ...input,
-      integration: "rewrite"
-    }),
-    findings,
-    hardErrors,
-    warnings,
-    suggestions: []
+    text: (fieldId, fallback) => read("text", fieldId, fallback),
+    longText: (fieldId, fallback) => read("longText", fieldId, fallback),
+    link: (fieldId, fallback) => read("link", fieldId, fallback),
+    image: (fieldId, fallback) => read("image", fieldId, fallback),
+    attrs
   };
 }
-function property(node, name) {
-  if (!ts.isObjectLiteralExpression(node))
-    return;
-  for (const item of node.properties) {
-    if (ts.isPropertyAssignment(item) && (ts.isIdentifier(item.name) || ts.isStringLiteral(item.name)) && item.name.text === name)
-      return item.initializer;
-  }
+function attrs(fieldId) {
+  return typeof fieldId === "string" ? { "data-siteplane-field": fieldId } : {};
 }
 
-// ../cli/dist/commands/booking/check.js
-import { dirname as dirname2, join } from "path";
-import { access, readFile as readFile2 } from "fs/promises";
-async function bookingCheckCommand(input) {
-  const validatedManifest = await readBookingManifestFile(input.manifestPath);
-  const configs = (await Promise.all(["next.config.ts", "next.config.js", "next.config.mjs"].map(async (name) => {
-    const path = join(dirname2(input.manifestPath), name);
-    return await access(path).then(() => path, () => null);
-  }))).filter((path) => path !== null);
-  const sourceFiles = await readSourceFiles([
-    .../* @__PURE__ */ new Set([...input.sourceFilePaths, ...configs])
-  ]);
-  const scanInput = {
-    siteId: validatedManifest.manifest.siteId,
-    bookingPageSlug: validatedManifest.manifest.bookingPageSlug,
-    ...validatedManifest.manifest.productionOrigin ? { productionOrigin: validatedManifest.manifest.productionOrigin } : {}
-  };
-  const scanResult = scanBookingSourceFiles(sourceFiles, {
-    ...scanInput
-  });
-  const hardErrors = [
-    ...createBoundaryErrors(validatedManifest),
-    ...scanResult.hardErrors
-  ];
-  return {
-    ok: hardErrors.length === 0,
-    manifest: validatedManifest.manifest,
-    scannedManifest: scanResult.manifest,
-    redactedKeys: validatedManifest.redactedKeys,
-    hardErrors,
-    warnings: scanResult.warnings,
-    suggestions: scanResult.suggestions,
-    findings: scanResult.findings
-  };
-}
-async function readSourceFiles(filePaths) {
-  return Promise.all(filePaths.map(async (filePath) => ({
-    filePath,
-    sourceText: await readFile2(filePath, "utf8")
-  })));
-}
-function createBoundaryErrors(validation) {
-  return validation.redactedKeys.map((key) => ({
-    code: "booking_check.raw_key_in_manifest",
-    message: `Booking manifest contains a raw key-like field: ${key}`,
-    filePath: "siteplane.booking.json"
-  }));
-}
-
-// ../cli/dist/commands/booking/init.js
-import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
-import { dirname as dirname3, join as join2 } from "path";
-async function bookingInitCommand(input) {
-  const manifest = {
-    schemaVersion: 1,
-    siteId: input.siteId,
-    bookingPageSlug: input.bookingPageSlug,
-    ...input.productionOrigin ? { productionOrigin: input.productionOrigin } : {}
-  };
-  const manifestPath = join2(input.projectDir, "siteplane.booking.json");
-  const artifacts = createBookingArtifacts(input.agentClient);
-  await writeBookingManifestFile(manifestPath, manifest);
-  for (const artifact of artifacts) {
-    await writeProjectFile(input.projectDir, artifact.path, artifact.template);
-  }
-  return {
-    manifestPath,
-    manifest,
-    artifactPaths: artifacts.map((artifact) => artifact.path)
-  };
-}
-function createBookingArtifacts(agentClient) {
-  const artifacts = [
-    {
-      path: ".siteplane/booking.md",
-      template: bookingRulesTemplate
-    }
-  ];
-  if (agentClient === "codex") {
-    artifacts.push({
-      path: ".agents/skills/siteplane-booking/SKILL.md",
-      template: bookingSkillTemplate("Codex")
-    });
-  }
-  if (agentClient === "claude") {
-    artifacts.push({
-      path: ".claude/skills/siteplane-booking/SKILL.md",
-      template: bookingSkillTemplate("Claude Code")
-    });
-  }
-  if (agentClient === "cursor") {
-    artifacts.push({
-      path: ".cursor/rules/siteplane-booking.mdc",
-      template: bookingCursorRulesTemplate
-    });
-  }
-  return artifacts;
-}
-async function writeProjectFile(projectDir, relativePath, contents) {
-  const path = join2(projectDir, relativePath);
-  await mkdir2(dirname3(path), { recursive: true });
-  await writeFile2(path, contents, "utf8");
-}
-var bookingRulesTemplate = `# Siteplane Booking Rules
-
-- Do not change layout, copy, styling, animation or business logic while adding Booking.
-- Integrate /booking on the customer domain through withSiteplane(nextConfig, { booking: { site: "<site-id>" } }); use the immutable Site ID supplied by Siteplane.
-- Use a normal <a href="/booking"> link, not next/link, an iframe or an embed script.
-- Preserve existing rewrites. Booking-only must not require Editor setup or siteplane.config.json.
-- Configure the public booking address in Siteplane; register its origin and call https://siteplane.io/api/booking/* directly with CORS, without a raw public key.
-- Preserve customer CSP and middleware; explain required Siteplane/Stripe permissions and exclude /booking from customer middleware.
-- Do not write setup tokens, project CLI tokens or private keys into source files.
-- Run npx siteplane booking check, npx siteplane booking sync and npx siteplane booking test after setup.
-- The first booking sync prints a link and code for the Siteplane approval; give both to the user and wait until they click Connect. The connection stays outside the project.
-- booking test stays in test_mode; live booking only starts after explicit dashboard activation.
-`;
-function bookingSkillTemplate(agentName) {
-  return `# Siteplane Booking Skill
-
-Use this skill in ${agentName} before integrating Siteplane Booking at /booking.
-
-${bookingRulesTemplate}`;
-}
-var bookingCursorRulesTemplate = `---
-description: Siteplane Booking rules
-alwaysApply: true
----
-
-${bookingRulesTemplate}`;
-
-// ../cli/dist/commands/booking/sync.js
-async function bookingSyncCommand(input) {
-  const redacted = validateBookingManifestInput(input.manifest);
-  const fetcher = input.fetchImpl ?? fetch;
-  return fetcher(`${input.config.apiBaseUrl}/api/cli/booking/sync`, {
-    method: "POST",
-    headers: createBookingCliRequestHeaders(input.config),
-    body: JSON.stringify({
-      siteId: input.config.siteId,
-      source: "cli",
-      manifest: redacted.manifest
-    })
-  });
-}
-function createBookingCliRequestHeaders(config) {
-  const headers = {
-    authorization: `Bearer ${config.accessToken}`,
-    "content-type": "application/json"
-  };
-  const bypassSecret = config.vercelAutomationBypassSecret?.trim();
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
-  return headers;
-}
-
-// ../cli/dist/commands/booking/test.js
-async function bookingTestCommand(input) {
-  const fetcher = input.fetchImpl ?? fetch;
-  const booking = bookingCreateRequestSchema.parse(input.booking);
-  return fetcher(`${input.config.apiBaseUrl}/api/cli/booking/test`, {
-    method: "POST",
-    headers: createBookingCliRequestHeaders(input.config),
-    body: JSON.stringify({
-      siteId: input.config.siteId,
-      mode: "test",
-      ...input.manifest ? { manifest: input.manifest } : {},
-      booking
-    })
-  });
-}
-
-// ../cli/dist/commands/scan.js
-import { readdir } from "fs/promises";
-import { extname, join as join3 } from "path";
-
-// ../cli/dist/auth/device-login.js
-import { spawn } from "child_process";
-import { hostname } from "os";
-
-// ../cli/dist/config/agent-connections.js
-import { randomUUID } from "crypto";
-import { chmod, mkdir as mkdir3, open, readFile as readFile3, rename, rm } from "fs/promises";
-import { join as join4 } from "path";
-import { z as z27 } from "zod";
-var storeSchema = z27.object({
-  connections: z27.array(z27.object({
-    apiOrigin: z27.string().url(),
-    siteId: z27.string().min(1),
-    accessToken: z27.string().min(1),
-    scopes: z27.array(z27.string()),
-    expiresAt: z27.string()
-  }))
-});
-
-// ../cli/dist/config/project-config.js
-import { readFile as readFile4 } from "fs/promises";
-import { join as join5 } from "path";
-import { z as z28 } from "zod";
-var packageVersionSchema = z28.string().regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u);
-var projectPackagesSchema = z28.object({
-  siteplane: packageVersionSchema,
-  runtimeNext: packageVersionSchema,
-  analytics: packageVersionSchema.optional()
-}).strict();
-var siteplaneProjectConfigSchema = z28.object({
-  version: z28.literal(2),
-  apiBaseUrl: z28.string().url(),
-  siteId: z28.string().uuid(),
-  publicSiteKeyId: z28.string().uuid(),
-  publicSiteKey: z28.string().trim().min(1),
-  runId: z28.string().uuid(),
-  appDirectory: z28.string().min(1),
-  taskContractVersion: z28.literal("siteplane.setup-task.v2"),
-  adminProtocolVersion: z28.literal(2),
-  packages: projectPackagesSchema,
-  fieldContractHash: z28.string().regex(/^sha256:[0-9a-f]{64}$/iu).optional()
-}).strict();
-
-// ../cli/dist/scan/next-source-scan.js
-import ts2 from "typescript";
-import { isAbsolute, relative } from "path";
-var legacyEditableComponentPrefix = "Editable";
-var editableComponentNames = new Set(["Image", "Text", "LongText", "Link"].map((name) => `${legacyEditableComponentPrefix}${name}`));
+// src/index.ts
+var siteplane = createFieldReaders(cache(loadSiteValues));
 export {
-  bookingCheckCommand,
-  bookingInitCommand,
-  bookingSyncCommand,
-  bookingTestCommand
+  siteplane
 };