# DocLayer ACP quick start

This package installs the DocLayer connector into a fresh NetSuite account. Existing or partial
DocLayer installations stop the installer. This version does not upgrade, uninstall, activate record
types or create a Bundle. Customers use the same hosted DocLayer Setup Center after installation.

## Before running

Obtain the ZIP and independently trusted ZIP and `release.json` SHA-256 values from the approved
Sictec distribution channel. Compare the ZIP digest with that trusted value **before** extracting or
running this package; a checksum downloaded alongside an untrusted ZIP is insufficient.

Use macOS/Linux with Node.js 24, Oracle JDK 17/21 and your installed Oracle SuiteCloud CLI 4.1.1.
No repository checkout, pnpm or dependency installation is needed. Your account administrator must
enable the required SDF/OAuth features and provide suitable inventory/deployment permissions.
The installer does not install Oracle tools, accept their licenses or grant account permissions.
See [Oracle prerequisites](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1558708810.html)
and [CLI installation](https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_155929845760.html).

## Install

Run from the extracted `DocLayerPrivateBeta/` directory. Replace the two uppercase placeholders with
the trusted `release.json` digest and exact target account ID. SANDBOX below is an example;
PRODUCTION and RELEASE_PREVIEW are separate installations requiring their own checks and approval.

```bash
node installer/installer-cli.ts doctor
node installer/installer-cli.ts auth --manifest-sha256 TRUSTED_MANIFEST_SHA256 --account EXACT_ACCOUNT_ID --environment SANDBOX
node installer/installer-cli.ts plan --manifest-sha256 TRUSTED_MANIFEST_SHA256 --account EXACT_ACCOUNT_ID --environment SANDBOX
node installer/installer-cli.ts validate --manifest-sha256 TRUSTED_MANIFEST_SHA256 --account EXACT_ACCOUNT_ID --environment SANDBOX
```

`auth` opens Oracle's interactive authentication flow. Check the account and environment reported by
`plan`, then review its complete confirmation phrase. Validation must report zero errors/warnings.
After authorizing deployment to that exact target, pass the phrase as a quoted value:

```bash
node installer/installer-cli.ts install --manifest-sha256 TRUSTED_MANIFEST_SHA256 --account EXACT_ACCOUNT_ID --environment SANDBOX --confirm 'EXACT_PHRASE_FROM_PLAN'
```

The installer checks the artifact, authentication and inventory again before deploying. Installation
remains dormant. Use the approved hosted DocLayer entry supplied for your installation, open
Administration/Setup Center and complete login/OAuth, connection, storage, permissions, health and
test upload. Record activation requires a separately scoped step.

## If blocked

Do not bypass checks, overwrite existing objects, uninstall or automatically retry a failed deploy.
Contact your authorized DocLayer administrator for inventory verification or a recovery plan. An
ambiguous empty SuiteScripts inventory is also blocked because Oracle CLI can hide transport errors.
Windows and automatic upgrades are outside this version. Keep account IDs and raw diagnostics
private; never send credentials to support. Authentication remains with your official Oracle tools.

Real account acceptance is required before customer rollout; a successful local package build does
not establish NetSuite installation, commercial eligibility or production readiness.