@valbuild/cli 0.97.7 → 0.99.0

package/cli/dist/valbuild-cli-cli.esm.js

@@ -2,16 +2,13 @@ import meow from 'meow';
 import chalk from 'chalk';
 import path from 'path';
 import pc from 'picocolors';
-import fs from 'fs/promises';
+import fs$1 from 'fs/promises';
 import { glob } from 'fast-glob';
 import { Internal, FILE_REF_PROP, DEFAULT_VAL_REMOTE_HOST, DEFAULT_CONTENT_HOST, VAL_EXTENSION } from '@valbuild/core';
-import { createService, createFixPatch, getPersonalAccessTokenPath, parsePersonalAccessTokenFile, getModulePathRange, createModulePathMap, getSettings, uploadRemoteFile, loadValModules, safeReadGit, ValOpsHttp, ValOpsFS, formatPatchSourceError } from '@valbuild/server';
-import vm from 'node:vm';
-import ts from 'typescript';
-import z from 'zod';
-import { createRequire } from 'node:module';
+import { createService, createFixPatch, getPersonalAccessTokenPath, parsePersonalAccessTokenFile, getModulePathRange, createModulePathMap, findAndEvalValConfigFile, getSettings, uploadRemoteFile, startValLogin, awaitValLoginConfirmation, persistPersonalAccessToken, ValLoginError, loadValModules, safeReadGit, ValOpsHttp, ValOpsFS, formatPatchSourceError } from '@valbuild/server';
 import { resolveSchemaSourceFixes } from '@valbuild/shared/internal';
-import fs$1 from 'fs';
+import ts from 'typescript';
+import fs from 'fs';
 import JSZip from 'jszip';
 import readline from 'readline';
 
@@ -30,76 +27,6 @@ function info(message, opts = {}) {
   console.log(chalk.blue("️ℹ️ : ") + message);
 }
 
-const ValConfigSchema = z.object({
-  project: z.string().optional(),
-  root: z.string().optional(),
-  files: z.object({
-    directory: z.string().refine(val => (val === "/public" || val.startsWith("/public/") && !val.endsWith("/")) &&
-    // Reject path traversal so the directory cannot escape /public
-    !val.split("/").some(segment => segment === "." || segment === ".."), {
-      message: "files.directory must start with '/public', must not end with '/' and must not contain '.' or '..' segments"
-    })
-  }).optional(),
-  gitCommit: z.string().optional(),
-  gitBranch: z.string().optional(),
-  defaultTheme: z.union([z.literal("light"), z.literal("dark")]).optional(),
-  ai: z.object({
-    commitMessages: z.object({
-      disabled: z.boolean().optional()
-    }).optional()
-  }).optional()
-});
-async function evalValConfigFile(projectRoot, configFileName) {
-  const valConfigPath = path.join(projectRoot, configFileName);
-  let code = null;
-  try {
-    code = await fs.readFile(valConfigPath, "utf-8");
-  } catch {
-    //
-  }
-  if (!code) {
-    return null;
-  }
-  const transpiled = ts.transpileModule(code, {
-    compilerOptions: {
-      target: ts.ScriptTarget.ES2020,
-      module: ts.ModuleKind.CommonJS,
-      esModuleInterop: true
-    },
-    fileName: valConfigPath
-  });
-  const projectRootRequire = createRequire(valConfigPath);
-  const exportsObj = {};
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const sandbox = {
-    exports: exportsObj,
-    module: {
-      exports: exportsObj
-    },
-    require: projectRootRequire,
-    // NOTE: this is a security risk, but this code is running in the users own environment at the CLI level
-    __filename: valConfigPath,
-    __dirname: projectRoot,
-    console,
-    process
-  };
-  sandbox.global = sandbox;
-  const context = vm.createContext(sandbox);
-  const script = new vm.Script(transpiled.outputText, {
-    filename: valConfigPath
-  });
-  script.runInContext(context);
-  const valConfig = sandbox.module.exports.config;
-  if (!valConfig) {
-    throw Error(`Val config file at path: '${valConfigPath}' must export a config object. Got: ${valConfig}`);
-  }
-  const result = ValConfigSchema.safeParse(valConfig);
-  if (!result.success) {
-    throw Error(`Val config file at path: '${valConfigPath}' has invalid schema: ${result.error.message}`);
-  }
-  return result.data;
-}
-
 function getFileExt(filePath) {
   // NOTE: We do not import the path module. This code is copied in different projects. We want the same implementation and which means that this might running in browser where path is not available).
   return filePath.split(".").pop() || "";
@@ -141,32 +68,13 @@ async function handleFileMetadata(ctx) {
     shouldApplyPatch: true
   };
 }
-async function handleRemoteFileUpload(ctx) {
-  var _resolvedRemoteFileAt;
-  if (!ctx.fix) {
-    return {
-      success: false,
-      errorMessage: `Remote file ${ctx.sourcePath} needs to be uploaded (use --fix to upload)`
-    };
-  }
-  const [, modulePath] = Internal.splitModuleFilePathAndModulePath(ctx.sourcePath);
-  if (!ctx.valModule.source || !ctx.valModule.schema) {
-    return {
-      success: false,
-      errorMessage: `Could not resolve source or schema for ${ctx.sourcePath}`
-    };
-  }
-  const resolvedRemoteFileAtSourcePath = Internal.resolvePath(modulePath, ctx.valModule.source, ctx.valModule.schema);
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  const fileRefProp = (_resolvedRemoteFileAt = resolvedRemoteFileAtSourcePath.source) === null || _resolvedRemoteFileAt === void 0 ? void 0 : _resolvedRemoteFileAt[FILE_REF_PROP];
-  if (!fileRefProp) {
-    return {
-      success: false,
-      errorMessage: `Expected file to be defined at: ${ctx.sourcePath} but no file was found`
-    };
-  }
-  const filePath = path.join(ctx.projectRoot, fileRefProp);
+// Shared upload core used by both the single-field (handleRemoteFileUpload)
+// and gallery (handleRemoteGalleryFileUpload) handlers. The two differ only in
+// how they derive the local file ref, metadata and serialized image/file
+// schema; everything from auth through upload is identical.
+async function uploadRemoteFileCore(ctx, fileRef, metadata, schema) {
+  const filePath = path.join(ctx.projectRoot, fileRef);
   if (!ctx.fs.fileExists(filePath)) {
     return {
       success: false,
@@ -206,21 +114,6 @@ async function handleRemoteFileUpload(ctx) {
       }]
     };
   }
-  if (!resolvedRemoteFileAtSourcePath.schema) {
-    return {
-      success: false,
-      errorMessage: `Cannot upload remote file: schema not found for ${ctx.sourcePath}`
-    };
-  }
-  const actualRemoteFileSource = resolvedRemoteFileAtSourcePath.source;
-  const fileSourceMetadata = Internal.isFile(actualRemoteFileSource) ? actualRemoteFileSource.metadata : undefined;
-  const resolveRemoteFileSchema = resolvedRemoteFileAtSourcePath.schema;
-  if (!resolveRemoteFileSchema) {
-    return {
-      success: false,
-      errorMessage: `Could not resolve schema for remote file: ${ctx.sourcePath}`
-    };
-  }
   const projectName = ctx.project;
   let publicProjectId = ctx.publicProjectId;
   let remoteFileBuckets = ctx.remoteFileBuckets;
@@ -256,12 +149,6 @@ async function handleRemoteFileUpload(ctx) {
       errorMessage: `Could not get project. Check that your val.config has the 'project' field set, or set it using the VAL_PROJECT environment variable`
     };
   }
-  if (resolveRemoteFileSchema.type !== "image" && resolveRemoteFileSchema.type !== "file") {
-    return {
-      success: false,
-      errorMessage: `The schema is the remote is neither image nor file: ${ctx.sourcePath}`
-    };
-  }
   remoteFilesCounter += 1;
   const bucket = remoteFileBuckets[remoteFilesCounter % remoteFileBuckets.length];
   if (!bucket) {
@@ -287,8 +174,6 @@ async function handleRemoteFileUpload(ctx) {
   const fileHash = Internal.remote.getFileHash(fileBuffer);
   const coreVersion = Internal.VERSION.core || "unknown";
   const fileExt = getFileExt(filePath);
-  const schema = resolveRemoteFileSchema;
-  const metadata = fileSourceMetadata;
   const ref = Internal.remote.createRemoteRef(ctx.remote.remoteHost, {
     publicProjectId,
     coreVersion,
@@ -308,7 +193,7 @@ async function handleRemoteFileUpload(ctx) {
   }
   ctx.remoteFiles[ctx.sourcePath] = {
     ref,
-    metadata: fileSourceMetadata
+    metadata
   };
   return {
     success: true,
@@ -325,6 +210,131 @@ async function handleRemoteFileUpload(ctx) {
     }]
   };
 }
+async function handleRemoteFileUpload(ctx) {
+  var _resolvedRemoteFileAt;
+  if (!ctx.fix) {
+    return {
+      success: false,
+      // No sourcePath in the message: the reported location already points at it.
+      errorMessage: `Remote file needs to be uploaded (use --fix to upload)`
+    };
+  }
+  const [, modulePath] = Internal.splitModuleFilePathAndModulePath(ctx.sourcePath);
+  if (!ctx.valModule.source || !ctx.valModule.schema) {
+    return {
+      success: false,
+      errorMessage: `Could not resolve source or schema for ${ctx.sourcePath}`
+    };
+  }
+  const resolvedRemoteFileAtSourcePath = Internal.resolvePath(modulePath, ctx.valModule.source, ctx.valModule.schema);
+
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const fileRefProp = (_resolvedRemoteFileAt = resolvedRemoteFileAtSourcePath.source) === null || _resolvedRemoteFileAt === void 0 ? void 0 : _resolvedRemoteFileAt[FILE_REF_PROP];
+  if (!fileRefProp) {
+    return {
+      success: false,
+      errorMessage: `Expected file to be defined at: ${ctx.sourcePath} but no file was found`
+    };
+  }
+  const resolveRemoteFileSchema = resolvedRemoteFileAtSourcePath.schema;
+  if (!resolveRemoteFileSchema) {
+    return {
+      success: false,
+      errorMessage: `Cannot upload remote file: schema not found for ${ctx.sourcePath}`
+    };
+  }
+  if (resolveRemoteFileSchema.type !== "image" && resolveRemoteFileSchema.type !== "file") {
+    return {
+      success: false,
+      errorMessage: `The schema is the remote is neither image nor file: ${ctx.sourcePath}`
+    };
+  }
+  const actualRemoteFileSource = resolvedRemoteFileAtSourcePath.source;
+  const fileSourceMetadata = Internal.isFile(actualRemoteFileSource) ? actualRemoteFileSource.metadata : undefined;
+  return uploadRemoteFileCore(ctx, fileRefProp, fileSourceMetadata, resolveRemoteFileSchema);
+}
+
+// Gallery (s.images({ remote: true }) / s.files({ remote: true })) upload.
+// Unlike a single image/file field, a gallery entry is keyed by its local file
+// path and the value is bare metadata (no FileSource), so we derive the file
+// ref from the key and synthesize the image/file schema from the record's
+// media options.
+async function handleRemoteGalleryFileUpload(ctx) {
+  var _ctx$validationError$;
+  if (!ctx.fix) {
+    return {
+      success: false,
+      // No sourcePath in the message: the reported location already points at it.
+      errorMessage: `Remote file needs to be uploaded (use --fix to upload)`
+    };
+  }
+  const fix = (_ctx$validationError$ = ctx.validationError.fixes) === null || _ctx$validationError$ === void 0 ? void 0 : _ctx$validationError$[0];
+  const mediaType = fix === "files:upload-remote" ? "file" : "image";
+
+  // The gallery entry is keyed by its local file path; validateMediaKey carries
+  // that key as the error value.
+  const fileRef = ctx.validationError.value;
+  if (typeof fileRef !== "string") {
+    return {
+      success: false,
+      errorMessage: `Expected a local file path for gallery entry at ${ctx.sourcePath}`
+    };
+  }
+  const [, modulePath] = Internal.splitModuleFilePathAndModulePath(ctx.sourcePath);
+  if (!ctx.valModule.source || !ctx.valModule.schema) {
+    return {
+      success: false,
+      errorMessage: `Could not resolve source or schema for ${ctx.sourcePath}`
+    };
+  }
+  const resolved = Internal.resolvePath(modulePath, ctx.valModule.source, ctx.valModule.schema);
+  const entrySource = resolved.source;
+  const metadata = entrySource && typeof entrySource === "object" && !Array.isArray(entrySource) ? entrySource : undefined;
+
+  // The gallery item schema is an ObjectSchema, not an image/file schema, so
+  // synthesize the serialized image/file schema (matching how single fields
+  // serialize) for the remote ref's validation hash.
+  //
+  // `accept`/`directory` come from the RECORD that holds the entry, resolved
+  // from the entry's PARENT path - not from the module root, which is only the
+  // record when the gallery is the whole module. A nested gallery
+  // (s.object({ gallery: s.images(...) })) would otherwise synthesize a schema
+  // with no options and bake a validation hash into the remote ref that can
+  // never validate, so a mismatch fails fast instead of uploading.
+  const [, parentModulePath] = Internal.splitModuleFilePathAndModulePath(Internal.parentOfSourcePath(ctx.sourcePath));
+  const recordSchema = Internal.resolvePath(parentModulePath, ctx.valModule.source, ctx.valModule.schema).schema;
+  if ((recordSchema === null || recordSchema === void 0 ? void 0 : recordSchema.type) !== "record") {
+    return {
+      success: false,
+      errorMessage: `Expected a gallery record at the parent of ${ctx.sourcePath}, got ${(recordSchema === null || recordSchema === void 0 ? void 0 : recordSchema.type) ?? "nothing"}`
+    };
+  }
+  const {
+    accept,
+    directory
+  } = recordSchema;
+  const schema = mediaType === "image" ? {
+    type: "image",
+    opt: false,
+    options: {
+      ...(accept ? {
+        accept
+      } : {}),
+      ...(directory ? {
+        directory
+      } : {})
+    }
+  } : {
+    type: "file",
+    opt: false,
+    options: {
+      ...(accept ? {
+        accept
+      } : {})
+    }
+  };
+  return uploadRemoteFileCore(ctx, fileRef, metadata, schema);
+}
 async function handleRemoteFileDownload(ctx) {
   if (ctx.fix) {
     return {
@@ -382,6 +392,17 @@ async function handleUniqueFolderCheck(ctx) {
     success: true
   };
 }
+
+// Maps a gallery key to its on-disk local path. Remote galleries key uploaded
+// entries by a remote URL while keeping the file on disk; everything else is
+// already a local path and is returned unchanged.
+function remoteKeyToLocalPath(key) {
+  const remoteRefRes = Internal.remote.splitRemoteRef(key);
+  if (remoteRefRes.status === "success") {
+    return `/${remoteRefRes.filePath}`;
+  }
+  return key;
+}
 async function handleCheckAllFiles(ctx) {
   const value = ctx.validationError.value;
   if (!value || typeof value.directory !== "string") {
@@ -400,7 +421,10 @@ async function handleCheckAllFiles(ctx) {
       errorMessage: `Could not get source for ${ctx.sourcePath}`
     };
   }
-  const trackedFiles = new Set(Object.keys(source));
+  // Gallery entries are keyed by their file path. Remote galleries key uploaded
+  // entries by a remote URL, but the file is kept on disk at its local path, so
+  // normalize remote-URL keys back to that local path for the on-disk checks.
+  const trackedFiles = new Set(Object.keys(source).map(remoteKeyToLocalPath));
 
   // Check that all tracked files exist on disk
   const missingTrackedFiles = [...trackedFiles].filter(f => {
@@ -455,6 +479,8 @@ const currentFixHandlers = {
   "file:add-metadata": handleFileMetadata,
   "image:upload-remote": handleRemoteFileUpload,
   "file:upload-remote": handleRemoteFileUpload,
+  "images:upload-remote": handleRemoteGalleryFileUpload,
+  "files:upload-remote": handleRemoteGalleryFileUpload,
   "image:download-remote": handleRemoteFileDownload,
   "file:download-remote": handleRemoteFileDownload,
   "image:check-remote": handleRemoteFileCheck,
@@ -477,15 +503,15 @@ function createDefaultValFSHost() {
   return {
     ...ts.sys,
     writeFile: (fileName, data, encoding) => {
-      fs$1.mkdirSync(path.dirname(fileName), {
+      fs.mkdirSync(path.dirname(fileName), {
         recursive: true
       });
-      fs$1.writeFileSync(fileName, typeof data === "string" ? data : new Uint8Array(data), encoding);
+      fs.writeFileSync(fileName, typeof data === "string" ? data : new Uint8Array(data), encoding);
     },
-    rmFile: fs$1.rmSync,
+    rmFile: fs.rmSync,
     readBuffer: fileName => {
       try {
-        return fs$1.readFileSync(fileName);
+        return fs.readFileSync(fileName);
       } catch {
         return undefined;
       }
@@ -826,7 +852,7 @@ function getCachedFile(moduleFilePath, projectRoot, cache) {
   const filePath = path.join(projectRoot, moduleFilePath);
   let fileContent;
   try {
-    fileContent = fs$1.readFileSync(filePath, "utf-8");
+    fileContent = fs.readFileSync(filePath, "utf-8");
   } catch {
     cache.set(moduleFilePath, null);
     return null;
@@ -857,7 +883,7 @@ async function validate({
   // errors found. Re-reads config and val files each call so it always reflects
   // the latest state on disk (used both for one-shot and watch mode).
   async function runOnce() {
-    const valConfigFile = (await evalValConfigFile(projectRoot, "val.config.ts")) || (await evalValConfigFile(projectRoot, "val.config.js"));
+    const valConfigFile = await findAndEvalValConfigFile(projectRoot);
     const resolvedValConfigFile = valConfigFile ? {
       ...valConfigFile,
       project: process.env.VAL_PROJECT || valConfigFile.project
@@ -1037,11 +1063,11 @@ async function validate({
     if (prettier) {
       for (const file of fixedFiles) {
         const filePath = path.join(projectRoot, file);
-        const fileContent = await fs.readFile(filePath, "utf-8");
+        const fileContent = await fs$1.readFile(filePath, "utf-8");
         const formattedContent = await prettier.format(fileContent, {
           filepath: filePath
         });
-        await fs.writeFile(filePath, formattedContent);
+        await fs$1.writeFile(filePath, formattedContent);
       }
     }
 
@@ -1162,7 +1188,7 @@ async function listUnusedFiles({
 }) {
   var _valConfigFile$files;
   const projectRoot = root ? path.resolve(root) : process.cwd();
-  const valConfigFile = (await evalValConfigFile(projectRoot, "val.config.ts")) || (await evalValConfigFile(projectRoot, "val.config.js"));
+  const valConfigFile = await findAndEvalValConfigFile(projectRoot);
   // Strip the leading "/" so it is relative to the project root (e.g. "public/val").
   const managedDir = ((valConfigFile === null || valConfigFile === void 0 || (_valConfigFile$files = valConfigFile.files) === null || _valConfigFile$files === void 0 ? void 0 : _valConfigFile$files.directory) ?? "/public/val").replace(/^\//, "");
   const service = await createService(projectRoot);
@@ -1251,7 +1277,7 @@ const getVersions = () => {
   };
 };
 
-const host$1 = process.env.VAL_BUILD_URL || "https://admin.val.build";
+const host = process.env.VAL_BUILD_URL || "https://admin.val.build";
 async function connect(options) {
   const {
     root
@@ -1269,11 +1295,11 @@ async function connect(options) {
   if (maybeGitOwnerAndRepo) {
     params.set("github_repo", [maybeGitOwnerAndRepo.owner, maybeGitOwnerAndRepo.repo].join("/"));
   }
-  const url = `${host$1}/connect?${params.toString()}`;
+  const url = `${host}/connect?${params.toString()}`;
   console.log(pc.dim(`\nFollow the instructions in your browser to complete the setup:\n${pc.cyan(url)}\n`));
 }
 async function tryGetProject(projectRoot) {
-  const valConfigFile = (await evalValConfigFile(projectRoot, "val.config.ts")) || (await evalValConfigFile(projectRoot, "val.config.js"));
+  const valConfigFile = await findAndEvalValConfigFile(projectRoot);
   if (valConfigFile && valConfigFile.project) {
     const parts = valConfigFile.project.split("/");
     if (parts.length === 2) {
@@ -1326,8 +1352,8 @@ function tryGetGitConfig(root) {
   let lastDir = null;
   while (currentDir !== lastDir) {
     const gitConfigPath = path.join(currentDir, ".git", "config");
-    if (fs$1.existsSync(gitConfigPath)) {
-      return fs$1.readFileSync(gitConfigPath, "utf-8");
+    if (fs.existsSync(gitConfigPath)) {
+      return fs.readFileSync(gitConfigPath, "utf-8");
     }
     lastDir = currentDir;
     currentDir = path.dirname(currentDir);
@@ -1338,83 +1364,54 @@ function tryGetGitConfig(root) {
   return null;
 }
 
-const host = process.env.VAL_BUILD_URL || "https://admin.val.build";
+/**
+ * Terminal wrapper around the login device flow in `@valbuild/server`.
+ * The flow itself (polling, token persistence) is shared with
+ * `@valbuild/language-server`.
+ */
 async function login(options) {
   try {
-    var _response$headers$get;
     console.log(pc.cyan("\nStarting login process...\n"));
-
-    // Step 1: Initiate login and get token and URL
-    const response = await fetch(`${host}/api/login`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      }
-    });
-    let token;
-    let url;
-    if (!((_response$headers$get = response.headers.get("content-type")) !== null && _response$headers$get !== void 0 && _response$headers$get.includes("application/json"))) {
-      const text = await response.text();
-      console.error(pc.red("Unexpected failure while trying to login (content type was not JSON). "), text ? `Server response: ${text} (status: ${response.status})` : `Status: ${response.status}`);
-      process.exit(1);
-    }
-    const json = await response.json();
-    if (json) {
-      token = json.nonce;
-      url = json.url;
-    }
-    if (!token || !url) {
-      console.error(pc.red("Unexpected response from the server."), json);
-      process.exit(1);
-    }
+    const {
+      nonce,
+      url
+    } = await startValLogin();
     console.log(pc.green("Open the following URL in your browser to log in:"));
     console.log(pc.underline(pc.blue(url)));
     console.log(pc.dim("\nWaiting for login confirmation...\n"));
-
-    // Step 2: Poll for login confirmation
-    const result = await pollForConfirmation(token);
-
-    // Step 3: Save the token
-    const filePath = getPersonalAccessTokenPath(options.root || process.cwd());
-    saveToken(result, filePath);
+    const result = await awaitValLoginConfirmation(nonce);
+    const filePath = persistPersonalAccessToken(options.root || process.cwd(), result);
+    console.log(pc.green(`Token for ${pc.cyan(result.profile.email)} saved to ${pc.cyan(filePath)}`));
   } catch (error) {
-    console.error(pc.red("An error occurred during the login process. Check your internet connection. Details:"), error instanceof Error ? error.message : JSON.stringify(error, null, 2));
-    process.exit(1);
-  }
-}
-const MAX_DURATION = 5 * 60 * 1000; // 5 minutes
-async function pollForConfirmation(token) {
-  const start = Date.now();
-  while (Date.now() - start < MAX_DURATION) {
-    await new Promise(resolve => setTimeout(resolve, 1000));
-    const response = await fetch(`${host}/api/login?token=${token}&consume=true`, {
-      method: "POST"
-    });
-    if (response.status === 500) {
-      console.error(pc.red("An error occurred on the server."));
+    if (error instanceof ValLoginError) {
+      console.error(pc.red(error.message), error.details ?? "");
       process.exit(1);
     }
-    if (response.status === 200) {
-      const json = await response.json();
-      if (json) {
-        if (typeof json.profile.email === "string" && typeof json.pat === "string") {
-          return json;
-        } else {
-          console.error(pc.red("Unexpected response from the server."));
-          process.exit(1);
-        }
-      }
-    }
+    console.error(pc.red("An error occurred during the login process. Check your internet connection. Details:"), error instanceof Error ? error.message : JSON.stringify(error, null, 2));
+    process.exit(1);
   }
-  console.error(pc.red("Login confirmation timed out."));
-  process.exit(1);
 }
-function saveToken(result, filePath) {
-  fs$1.mkdirSync(path.dirname(filePath), {
-    recursive: true
-  });
-  fs$1.writeFileSync(filePath, JSON.stringify(result, null, 2));
-  console.log(pc.green(`Token for ${pc.cyan(result.profile.email)} saved to ${pc.cyan(filePath)}`));
+
+/**
+ * Start the Val language server.
+ *
+ * Editors normally resolve `@valbuild/language-server` from the project's
+ * `node_modules` and launch its `val-language-server` binary directly. This
+ * subcommand exists so the server is discoverable from the CLI and easy to
+ * start by hand when debugging an editor integration:
+ *
+ *     npx val lsp --stdio
+ *
+ * The import is dynamic so that `vscode-languageserver` is not loaded on every
+ * `val` invocation.
+ */
+async function lsp() {
+  const {
+    main
+  } = await import('@valbuild/language-server');
+  // Transport (`--stdio`, `--node-ipc`, `--socket=`) is read from argv by the
+  // server itself, so the flags pass straight through.
+  main();
 }
 
 /**
@@ -1431,10 +1428,10 @@ class DebugContextError extends Error {}
 async function createDebugContext(options) {
   var _config$files;
   const projectRoot = options.root ? path.resolve(options.root) : process.cwd();
-  if (!fs$1.existsSync(projectRoot)) {
+  if (!fs.existsSync(projectRoot)) {
     throw new DebugContextError(`Project root does not exist: ${projectRoot}`);
   }
-  const config = (await evalValConfigFile(projectRoot, "val.config.ts")) || (await evalValConfigFile(projectRoot, "val.config.js"));
+  const config = await findAndEvalValConfigFile(projectRoot);
   if (!config) {
     throw new DebugContextError(`Could not find val.config.ts nor val.config.js in: ${projectRoot}`);
   }
@@ -1501,8 +1498,8 @@ async function createDebugContext(options) {
  */
 function readAuth(projectRoot) {
   const patFile = getPersonalAccessTokenPath(projectRoot);
-  if (fs$1.existsSync(patFile)) {
-    const contents = fs$1.readFileSync(patFile, "utf-8");
+  if (fs.existsSync(patFile)) {
+    const contents = fs.readFileSync(patFile, "utf-8");
     const parsed = parsePersonalAccessTokenFile(contents);
     if (parsed.success) {
       return {
@@ -2049,7 +2046,7 @@ function readProjectValVersions(projectRoot) {
 function readLocalFile(projectRoot, projectRelativePath) {
   const absPath = path.join(projectRoot, projectRelativePath);
   try {
-    return fs$1.readFileSync(absPath, "utf-8");
+    return fs.readFileSync(absPath, "utf-8");
   } catch {
     return null;
   }
@@ -2191,10 +2188,10 @@ async function writeZip(outPath, entries) {
     type: "nodebuffer",
     compression: "DEFLATE"
   });
-  fs$1.mkdirSync(path.dirname(outPath), {
+  fs.mkdirSync(path.dirname(outPath), {
     recursive: true
   });
-  fs$1.writeFileSync(outPath, buffer);
+  fs.writeFileSync(outPath, buffer);
 }
 function timestamp() {
   return new Date().toISOString().replace(/[:.]/g, "-").replace(/Z$/, "");
@@ -2331,6 +2328,7 @@ async function main() {
         files
         connect
         versions
+        lsp
         debug
         delete-unappliable-patches
 
@@ -2360,6 +2358,13 @@ async function main() {
       Options:
         --root [root], -r [root] Set project root directory (default process.cwd())
 
+      Command: lsp
+      Description: start the Val language server (used by editor integrations)
+      Options:
+        --stdio                  Communicate over stdin/stdout
+        --node-ipc               Communicate over Node IPC
+        --socket=[port]          Communicate over a socket
+
       Command: debug
       Description: Create a self-contained snapshot (the pending patches plus the modules they
         touch or reference) that Val developers can replay to reproduce validation and save
@@ -2389,11 +2394,6 @@ async function main() {
         --verbose                List every pending patch, not just the failing ones
     `, {
     flags: {
-      port: {
-        type: "number",
-        alias: "p",
-        default: 4123
-      },
       root: {
         type: "string",
         alias: "r"
@@ -2455,6 +2455,8 @@ async function main() {
       });
     case "versions":
       return versions();
+    case "lsp":
+      return lsp();
     case "debug":
       return debug({
         root: flags.root,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@valbuild/cli",
   "private": false,
-  "version": "0.97.7",
+  "version": "0.99.0",
   "description": "Val CLI tools",
   "repository": {
     "type": "git",
@@ -27,10 +27,11 @@
     "open": "^9.1.0",
     "picocolors": "^1.1.1",
     "zod": "^4.3.5",
-    "@valbuild/core": "0.97.7",
+    "@valbuild/core": "0.99.0",
     "@valbuild/eslint-plugin": "0.93.0",
-    "@valbuild/server": "0.97.7",
-    "@valbuild/shared": "0.97.7"
+    "@valbuild/language-server": "0.99.0",
+    "@valbuild/server": "0.99.0",
+    "@valbuild/shared": "0.99.0"
   },
   "peerDependencies": {
     "prettier": "*",