@valbuild/core 0.105.0 → 0.106.0

package/dist/declarations/src/extractValModules.d.ts

@@ -16,7 +16,61 @@ export type ExtractedValModules = {
     sourcesSha: string;
     configSha: string;
     moduleErrors: ExtractedModuleError[];
+    /**
+     * What the SHAs above are a fold over, in order.
+     *
+     * Kept so they can be recomputed from a source that did NOT come from
+     * evaluating the modules — see {@link computeValModuleShas}. A record keyed by
+     * path could not do this: the fold is order-dependent, and the order is
+     * `val.modules`, which a record does not promise to preserve.
+     */
+    shaEntries: ValModuleShaEntry[];
 };
+/**
+ * One module's contribution to the SHAs, in fold order.
+ *
+ * The SHAs are a FOLD, not a hash of a set: each module is mixed into the
+ * running value in `val.modules` order, so reproducing one means replaying the
+ * same modules with the same inputs in the same order. That is what this type
+ * is for — see {@link computeValModuleShas}.
+ */
+export type ValModuleShaEntry = {
+    path: ModuleFilePath;
+    source: Source;
+    serializedSchema: SerializedSchema;
+    /**
+     * How many module errors had been collected when this module was folded in.
+     *
+     * The base SHA mixes in the error array as it stood at each step, so a module
+     * that failed to load changes the hash of every module folded in AFTER it and
+     * of none before. Errors are only ever appended, so the state at step _i_ is
+     * the final array's first `moduleErrorsAt` entries — one number is enough to
+     * reproduce it exactly, and a per-step copy is not needed.
+     */
+    moduleErrorsAt: number;
+};
+export type ValModuleShas = {
+    baseSha: string;
+    schemaSha: string;
+    sourcesSha: string;
+    configSha: string;
+};
+/**
+ * The SHAs, from the entries they are a fold over.
+ *
+ * Split out from {@link extractValModules} because there are two ways to arrive
+ * at a set of sources. Extraction evaluates the modules; the server also
+ * PROMOTES the sources it has just written to disk, because re-evaluating gets
+ * it nothing — a module `def` is the app's own `import()`, which resolves from
+ * the module registry rather than from the file that was just rewritten. Both
+ * have to produce SHAs the other side can compare, so the fold has one
+ * implementation and both call it.
+ *
+ * Feeding back the entries a previous fold used, unchanged, reproduces its SHAs
+ * exactly. That is the property the promotion relies on: only the modules whose
+ * source actually moved change anything.
+ */
+export declare function computeValModuleShas(config: ValModules["config"], entries: readonly ValModuleShaEntry[], moduleErrors: readonly ExtractedModuleError[]): ValModuleShas;
 /**
  * Extracts schemas and sources from a ValModules registry and computes the
  * deterministic SHAs that the server and client both use to detect changes.

package/dist/declarations/src/index.d.ts

@@ -1,6 +1,6 @@
 export { initVal, type ConfigDirectory } from "./initVal.js";
 export { modules, type ValModules } from "./modules.js";
-export { extractValModules, type ExtractedValModules, type ExtractedModuleError, } from "./extractValModules.js";
+export { extractValModules, computeValModuleShas, type ExtractedValModules, type ValModuleShaEntry, type ValModuleShas, type ExtractedModuleError, } from "./extractValModules.js";
 export type { InitVal, ValConfig, ValConstructor, ContentConstructor, } from "./initVal.js";
 export { Schema, type SerializedSchema, type SelectorOfSchema } from "./schema/index.js";
 export { hasRemoteFileSchema } from "./schema/hasRemoteFileSchema.js";
@@ -23,7 +23,7 @@ export type { ValidationFix } from "./schema/validation/ValidationFix.js";
 export { VAL_EXTENSION, type SourceArray } from "./source/index.js";
 export { derefPatch } from "./patch/deref.js";
 export { type SelectorSource, type SelectorOf, GenericSelector, } from "./selector/index.js";
-import { getSource, splitModulePath, splitModuleFilePath, resolvePath, safeResolvePath, splitModuleFilePathAndModulePath, joinModuleFilePathAndModulePath, parentOfSourcePath, patchPathToModulePath, splitJoinedSourcePaths, type ValModule } from "./module.js";
+import { getSource, isValModule, splitModulePath, splitModuleFilePath, resolvePath, safeResolvePath, splitModuleFilePathAndModulePath, joinModuleFilePathAndModulePath, parentOfSourcePath, patchPathToModulePath, splitJoinedSourcePaths, type ValModule } from "./module.js";
 declare const ModuleFilePathSep = "?p=";
 export { ModuleFilePathSep };
 import { SelectorSource, getSchema } from "./selector/index.js";
@@ -80,6 +80,7 @@ declare const Internal: {
     getSchema: typeof getSchema;
     getValPath: typeof getValPath;
     getSource: typeof getSource;
+    isValModule: typeof isValModule;
     resolvePath: typeof resolvePath;
     safeResolvePath: typeof safeResolvePath;
     splitModuleFilePathAndModulePath: typeof splitModuleFilePathAndModulePath;

package/dist/declarations/src/module.d.ts

@@ -18,6 +18,16 @@ export type ReplaceRawStringWithString<T extends SelectorSource> = SelectorSourc
 export declare function define<T extends Schema<SelectorSource>>(id: string, // TODO: `/${string}`
 schema: T, source: ReplaceRawStringWithString<SelectorOfSchema<T>>): ValModule<SelectorOfSchema<T>>;
 export declare function getSource<T extends Source>(valModule: ValModule<T>): T;
+/**
+ * Whether `value` is a Val module, i.e. something {@link define} produced.
+ *
+ * Checks for the three symbols `define` writes, rather than a class identity:
+ * a module may have been created by a different copy of `@valbuild/core` (the
+ * editor SPA and the host bundle each ship their own, and the CLI evaluates
+ * user modules inside a `node:vm` context). The symbols are created with
+ * `Symbol.for`, so they are shared across all of those; a constructor is not.
+ */
+export declare function isValModule(value: unknown): value is ValModule<SelectorSource>;
 export declare function splitModuleFilePathAndModulePath(path: SourcePath | ModuleFilePath): [moduleId: ModuleFilePath, path: ModulePath];
 export declare function joinModuleFilePathAndModulePath(moduleFilePath: ModuleFilePath, modulePath: ModulePath): SourcePath;
 export declare function getSourceAtPath(modulePath: ModulePath, valModule: ValModule<SelectorSource> | Source): any;

package/dist/{index-d7cc2231.esm.js → index-193f19b4.esm.js}

@@ -3319,8 +3319,8 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
         if (_this2.keySchema) {
           var keyPath = createValPathOfItem(path, key);
           if (!keyPath) {
-            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for key validation")) // Should! never happen
-            ;
+            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for key validation") // Should! never happen
+            );
           }
           var keyError = _this2.keySchema["executeValidate"](keyPath, key);
           if (keyError) {
@@ -3681,8 +3681,8 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
           }
           var subPath = createValPathOfItem(path, validation.error.urlPath);
           if (!subPath) {
-            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for router validation")) // Should! never happen
-            ;
+            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for router validation") // Should! never happen
+            );
           }
           return [subPath, [{
             message: validation.error.message,
@@ -3858,6 +3858,19 @@ schema, source) {
 function getSource(valModule) {
   return valModule[GetSource];
 }
+
+/**
+ * Whether `value` is a Val module, i.e. something {@link define} produced.
+ *
+ * Checks for the three symbols `define` writes, rather than a class identity:
+ * a module may have been created by a different copy of `@valbuild/core` (the
+ * editor SPA and the host bundle each ship their own, and the CLI evaluates
+ * user modules inside a `node:vm` context). The symbols are created with
+ * `Symbol.for`, so they are shared across all of those; a constructor is not.
+ */
+function isValModule(value) {
+  return _typeof(value) === "object" && value !== null && GetSource in value && GetSchema in value && Path in value;
+}
 function splitModuleFilePathAndModulePath(path) {
   var pathOfSep = path.indexOf(ModuleFilePathSep);
   if (pathOfSep === -1) {
@@ -6808,6 +6821,84 @@ function collectObjectRecursive(item, collector) {
   }
 }
 
+/**
+ * One module's contribution to the SHAs, in fold order.
+ *
+ * The SHAs are a FOLD, not a hash of a set: each module is mixed into the
+ * running value in `val.modules` order, so reproducing one means replaying the
+ * same modules with the same inputs in the same order. That is what this type
+ * is for — see {@link computeValModuleShas}.
+ */
+
+/**
+ * The SHAs, from the entries they are a fold over.
+ *
+ * Split out from {@link extractValModules} because there are two ways to arrive
+ * at a set of sources. Extraction evaluates the modules; the server also
+ * PROMOTES the sources it has just written to disk, because re-evaluating gets
+ * it nothing — a module `def` is the app's own `import()`, which resolves from
+ * the module registry rather than from the file that was just rewritten. Both
+ * have to produce SHAs the other side can compare, so the fold has one
+ * implementation and both call it.
+ *
+ * Feeding back the entries a previous fold used, unchanged, reproduces its SHAs
+ * exactly. That is the property the promotion relies on: only the modules whose
+ * source actually moved change anything.
+ */
+function computeValModuleShas(config, entries, moduleErrors) {
+  var configSha = hash(JSON.stringify(config));
+  var sourcesSha = "";
+  var baseSha = configSha;
+  // NOTE: schemaSha is deliberately NOT seeded with configSha. It is compared
+  // across bundles (the server extracts from the Node bundle, the editor SPA
+  // from the browser bundle) to detect that a new version has been deployed.
+  // The config contains values that are not part of the schema and that differ
+  // between those two bundles - most notably the documented
+  // `gitCommit: process.env.VERCEL_GIT_COMMIT_SHA` / `gitBranch`, which are
+  // server-only env vars and therefore `undefined` in the browser. Seeding with
+  // them made the two sides disagree on every production load.
+  var schemaSha = "";
+  var _iterator = _createForOfIteratorHelper(entries),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var entry = _step.value;
+      var path = entry.path,
+        source = entry.source,
+        serializedSchema = entry.serializedSchema;
+      sourcesSha = hash(sourcesSha + JSON.stringify({
+        path: path,
+        source: source
+      }));
+      baseSha = hash(baseSha + JSON.stringify({
+        path: path,
+        schema: serializedSchema,
+        source: source,
+        modulesErrors: moduleErrors.slice(0, entry.moduleErrorsAt)
+      }));
+      // The PATH is part of the schema set, not just the schema: renaming a
+      // module while leaving its schema byte-identical still changes which paths
+      // exist, and an open client keyed its schema cache by the old path. Hashing
+      // the schema alone left this SHA unchanged, so with no commitSha to fall
+      // back on the client never refetched /schema.
+      schemaSha = hash(schemaSha + JSON.stringify({
+        path: path,
+        schema: serializedSchema
+      }));
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  return {
+    baseSha: baseSha,
+    schemaSha: schemaSha,
+    sourcesSha: sourcesSha,
+    configSha: configSha
+  };
+}
+
 /**
  * Extracts schemas and sources from a ValModules registry and computes the
  * deterministic SHAs that the server and client both use to detect changes.
@@ -6820,7 +6911,7 @@ function extractValModules(_x) {
 }
 function _extractValModules() {
   _extractValModules = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(valModules) {
-    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, configSha, sourcesSha, baseSha, schemaSha, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
+    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, shaEntries, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
     return _regenerator().w(function (_context) {
       while (1) switch (_context.p = _context.n) {
         case 0:
@@ -6835,17 +6926,15 @@ function _extractValModules() {
           sources = {};
           schemas = {};
           serializedSchemas = {};
-          configSha = hash(JSON.stringify(valModules.config));
-          sourcesSha = "";
-          baseSha = configSha; // NOTE: schemaSha is deliberately NOT seeded with configSha. It is compared
-          // across bundles (the server extracts from the Node bundle, the editor SPA
-          // from the browser bundle) to detect that a new version has been deployed.
-          // The config contains values that are not part of the schema and that differ
-          // between those two bundles - most notably the documented
-          // `gitCommit: process.env.VERCEL_GIT_COMMIT_SHA` / `gitBranch`, which are
-          // server-only env vars and therefore `undefined` in the browser. Seeding with
-          // them made the two sides disagree on every production load.
-          schemaSha = "";
+          /**
+           * What the fold below runs over, collected here rather than hashed inline.
+           *
+           * The hashing itself moved to `computeValModuleShas`, so the server can
+           * recompute these SHAs for sources it did not get by evaluating the modules.
+           * Collected in loop order, which is `val.modules` order, which is the order
+           * the fold is defined by.
+           */
+          shaEntries = [];
           moduleIdx = 0;
         case 1:
           if (!(moduleIdx < valModules.modules.length)) {
@@ -6948,40 +7037,27 @@ function _extractValModules() {
           sources[pathM] = source;
           schemas[pathM] = schema;
           serializedSchemas[pathM] = serializedSchema;
-          sourcesSha = hash(sourcesSha + JSON.stringify({
-            path: path,
-            source: source
-          }));
-          baseSha = hash(baseSha + JSON.stringify({
-            path: path,
-            schema: serializedSchema,
+          shaEntries.push({
+            path: pathM,
             source: source,
-            modulesErrors: moduleErrors
-          }));
-          // The PATH is part of the schema set, not just the schema: renaming a
-          // module while leaving its schema byte-identical still changes which paths
-          // exist, and an open client keyed its schema cache by the old path. Hashing
-          // the schema alone left this SHA unchanged, so with no commitSha to fall
-          // back on the client never refetched /schema.
-          schemaSha = hash(schemaSha + JSON.stringify({
-            path: path,
-            schema: serializedSchema
-          }));
+            serializedSchema: serializedSchema,
+            // The errors so far, which is what the base SHA used to mix in by hashing
+            // the live array at this point in the loop. See `moduleErrorsAt`.
+            moduleErrorsAt: moduleErrors.length
+          });
         case 17:
           moduleIdx++;
           _context.n = 1;
           break;
         case 18:
-          return _context.a(2, {
+          return _context.a(2, _objectSpread2(_objectSpread2({
             sources: sources,
             schemas: schemas,
-            serializedSchemas: serializedSchemas,
-            baseSha: baseSha,
-            schemaSha: schemaSha,
-            sourcesSha: sourcesSha,
-            configSha: configSha,
-            moduleErrors: moduleErrors
-          });
+            serializedSchemas: serializedSchemas
+          }, computeValModuleShas(valModules.config, shaEntries, moduleErrors)), {}, {
+            moduleErrors: moduleErrors,
+            shaEntries: shaEntries
+          }));
       }
     }, _callee, null, [[14, 15], [4, 6]]);
   }));
@@ -8498,6 +8574,7 @@ var Internal = {
   getSchema: getSchema,
   getValPath: getValPath,
   getSource: getSource,
+  isValModule: isValModule,
   resolvePath: resolvePath,
   safeResolvePath: safeResolvePath,
   splitModuleFilePathAndModulePath: splitModuleFilePathAndModulePath,
@@ -8590,4 +8667,4 @@ function tryJsonParse(str) {
   }
 }
 
-export { ArraySchema as A, BooleanSchema as B, ColorSchema as C, DEFAULT_CONTENT_HOST as D, FATAL_ERROR_TYPES as F, GenericSelector as G, Internal as I, KeyOfSchema as K, LiteralSchema as L, ModuleFilePathSep as M, NumberSchema as N, ObjectSchema as O, PatchError as P, RecordSchema as R, Schema as S, UnionSchema as U, VAL_EXTENSION as V, _typeof as _, _slicedToArray as a, _createClass as b, _classCallCheck as c, _toConsumableArray as d, DEFAULT_APP_HOST as e, extractValModules as f, DEFAULT_VAL_REMOTE_HOST as g, hasRemoteFileSchema as h, initVal as i, derefPatch as j, StringSchema as k, ImageSchema as l, modules as m, FileSchema as n, DateSchema as o, COLOR_FORMATS as p, DEFAULT_COLOR_FORMAT as q, DateTimeSchema as r, splitModuleFilePathAndModulePath as s, RouteSchema as t, RichTextSchema as u, deserializeSchema as v, previewScope as w, CODE_LANGUAGES as x, getSourcePathFromRoute as y };
+export { ArraySchema as A, BooleanSchema as B, ColorSchema as C, DEFAULT_CONTENT_HOST as D, FATAL_ERROR_TYPES as F, GenericSelector as G, Internal as I, KeyOfSchema as K, LiteralSchema as L, ModuleFilePathSep as M, NumberSchema as N, ObjectSchema as O, PatchError as P, RecordSchema as R, Schema as S, UnionSchema as U, VAL_EXTENSION as V, _typeof as _, _slicedToArray as a, _createClass as b, _classCallCheck as c, _toConsumableArray as d, DEFAULT_APP_HOST as e, extractValModules as f, computeValModuleShas as g, hasRemoteFileSchema as h, initVal as i, DEFAULT_VAL_REMOTE_HOST as j, derefPatch as k, StringSchema as l, modules as m, ImageSchema as n, FileSchema as o, DateSchema as p, COLOR_FORMATS as q, DEFAULT_COLOR_FORMAT as r, splitModuleFilePathAndModulePath as s, DateTimeSchema as t, RouteSchema as u, RichTextSchema as v, deserializeSchema as w, previewScope as x, CODE_LANGUAGES as y, getSourcePathFromRoute as z };

package/dist/{index-730a5254.cjs.dev.js → index-2cef45cc.cjs.dev.js}

@@ -3321,8 +3321,8 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
         if (_this2.keySchema) {
           var keyPath = createValPathOfItem(path, key);
           if (!keyPath) {
-            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for key validation")) // Should! never happen
-            ;
+            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for key validation") // Should! never happen
+            );
           }
           var keyError = _this2.keySchema["executeValidate"](keyPath, key);
           if (keyError) {
@@ -3683,8 +3683,8 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
           }
           var subPath = createValPathOfItem(path, validation.error.urlPath);
           if (!subPath) {
-            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for router validation")) // Should! never happen
-            ;
+            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for router validation") // Should! never happen
+            );
           }
           return [subPath, [{
             message: validation.error.message,
@@ -3860,6 +3860,19 @@ schema, source) {
 function getSource(valModule) {
   return valModule[GetSource];
 }
+
+/**
+ * Whether `value` is a Val module, i.e. something {@link define} produced.
+ *
+ * Checks for the three symbols `define` writes, rather than a class identity:
+ * a module may have been created by a different copy of `@valbuild/core` (the
+ * editor SPA and the host bundle each ship their own, and the CLI evaluates
+ * user modules inside a `node:vm` context). The symbols are created with
+ * `Symbol.for`, so they are shared across all of those; a constructor is not.
+ */
+function isValModule(value) {
+  return _typeof(value) === "object" && value !== null && GetSource in value && GetSchema in value && Path in value;
+}
 function splitModuleFilePathAndModulePath(path) {
   var pathOfSep = path.indexOf(ModuleFilePathSep);
   if (pathOfSep === -1) {
@@ -6810,6 +6823,84 @@ function collectObjectRecursive(item, collector) {
   }
 }
 
+/**
+ * One module's contribution to the SHAs, in fold order.
+ *
+ * The SHAs are a FOLD, not a hash of a set: each module is mixed into the
+ * running value in `val.modules` order, so reproducing one means replaying the
+ * same modules with the same inputs in the same order. That is what this type
+ * is for — see {@link computeValModuleShas}.
+ */
+
+/**
+ * The SHAs, from the entries they are a fold over.
+ *
+ * Split out from {@link extractValModules} because there are two ways to arrive
+ * at a set of sources. Extraction evaluates the modules; the server also
+ * PROMOTES the sources it has just written to disk, because re-evaluating gets
+ * it nothing — a module `def` is the app's own `import()`, which resolves from
+ * the module registry rather than from the file that was just rewritten. Both
+ * have to produce SHAs the other side can compare, so the fold has one
+ * implementation and both call it.
+ *
+ * Feeding back the entries a previous fold used, unchanged, reproduces its SHAs
+ * exactly. That is the property the promotion relies on: only the modules whose
+ * source actually moved change anything.
+ */
+function computeValModuleShas(config, entries, moduleErrors) {
+  var configSha = hash(JSON.stringify(config));
+  var sourcesSha = "";
+  var baseSha = configSha;
+  // NOTE: schemaSha is deliberately NOT seeded with configSha. It is compared
+  // across bundles (the server extracts from the Node bundle, the editor SPA
+  // from the browser bundle) to detect that a new version has been deployed.
+  // The config contains values that are not part of the schema and that differ
+  // between those two bundles - most notably the documented
+  // `gitCommit: process.env.VERCEL_GIT_COMMIT_SHA` / `gitBranch`, which are
+  // server-only env vars and therefore `undefined` in the browser. Seeding with
+  // them made the two sides disagree on every production load.
+  var schemaSha = "";
+  var _iterator = result._createForOfIteratorHelper(entries),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var entry = _step.value;
+      var path = entry.path,
+        source = entry.source,
+        serializedSchema = entry.serializedSchema;
+      sourcesSha = hash(sourcesSha + JSON.stringify({
+        path: path,
+        source: source
+      }));
+      baseSha = hash(baseSha + JSON.stringify({
+        path: path,
+        schema: serializedSchema,
+        source: source,
+        modulesErrors: moduleErrors.slice(0, entry.moduleErrorsAt)
+      }));
+      // The PATH is part of the schema set, not just the schema: renaming a
+      // module while leaving its schema byte-identical still changes which paths
+      // exist, and an open client keyed its schema cache by the old path. Hashing
+      // the schema alone left this SHA unchanged, so with no commitSha to fall
+      // back on the client never refetched /schema.
+      schemaSha = hash(schemaSha + JSON.stringify({
+        path: path,
+        schema: serializedSchema
+      }));
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  return {
+    baseSha: baseSha,
+    schemaSha: schemaSha,
+    sourcesSha: sourcesSha,
+    configSha: configSha
+  };
+}
+
 /**
  * Extracts schemas and sources from a ValModules registry and computes the
  * deterministic SHAs that the server and client both use to detect changes.
@@ -6822,7 +6913,7 @@ function extractValModules(_x) {
 }
 function _extractValModules() {
   _extractValModules = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(valModules) {
-    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, configSha, sourcesSha, baseSha, schemaSha, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
+    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, shaEntries, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
     return _regenerator().w(function (_context) {
       while (1) switch (_context.p = _context.n) {
         case 0:
@@ -6837,17 +6928,15 @@ function _extractValModules() {
           sources = {};
           schemas = {};
           serializedSchemas = {};
-          configSha = hash(JSON.stringify(valModules.config));
-          sourcesSha = "";
-          baseSha = configSha; // NOTE: schemaSha is deliberately NOT seeded with configSha. It is compared
-          // across bundles (the server extracts from the Node bundle, the editor SPA
-          // from the browser bundle) to detect that a new version has been deployed.
-          // The config contains values that are not part of the schema and that differ
-          // between those two bundles - most notably the documented
-          // `gitCommit: process.env.VERCEL_GIT_COMMIT_SHA` / `gitBranch`, which are
-          // server-only env vars and therefore `undefined` in the browser. Seeding with
-          // them made the two sides disagree on every production load.
-          schemaSha = "";
+          /**
+           * What the fold below runs over, collected here rather than hashed inline.
+           *
+           * The hashing itself moved to `computeValModuleShas`, so the server can
+           * recompute these SHAs for sources it did not get by evaluating the modules.
+           * Collected in loop order, which is `val.modules` order, which is the order
+           * the fold is defined by.
+           */
+          shaEntries = [];
           moduleIdx = 0;
         case 1:
           if (!(moduleIdx < valModules.modules.length)) {
@@ -6950,40 +7039,27 @@ function _extractValModules() {
           sources[pathM] = source;
           schemas[pathM] = schema;
           serializedSchemas[pathM] = serializedSchema;
-          sourcesSha = hash(sourcesSha + JSON.stringify({
-            path: path,
-            source: source
-          }));
-          baseSha = hash(baseSha + JSON.stringify({
-            path: path,
-            schema: serializedSchema,
+          shaEntries.push({
+            path: pathM,
             source: source,
-            modulesErrors: moduleErrors
-          }));
-          // The PATH is part of the schema set, not just the schema: renaming a
-          // module while leaving its schema byte-identical still changes which paths
-          // exist, and an open client keyed its schema cache by the old path. Hashing
-          // the schema alone left this SHA unchanged, so with no commitSha to fall
-          // back on the client never refetched /schema.
-          schemaSha = hash(schemaSha + JSON.stringify({
-            path: path,
-            schema: serializedSchema
-          }));
+            serializedSchema: serializedSchema,
+            // The errors so far, which is what the base SHA used to mix in by hashing
+            // the live array at this point in the loop. See `moduleErrorsAt`.
+            moduleErrorsAt: moduleErrors.length
+          });
         case 17:
           moduleIdx++;
           _context.n = 1;
           break;
         case 18:
-          return _context.a(2, {
+          return _context.a(2, _objectSpread2(_objectSpread2({
             sources: sources,
             schemas: schemas,
-            serializedSchemas: serializedSchemas,
-            baseSha: baseSha,
-            schemaSha: schemaSha,
-            sourcesSha: sourcesSha,
-            configSha: configSha,
-            moduleErrors: moduleErrors
-          });
+            serializedSchemas: serializedSchemas
+          }, computeValModuleShas(valModules.config, shaEntries, moduleErrors)), {}, {
+            moduleErrors: moduleErrors,
+            shaEntries: shaEntries
+          }));
       }
     }, _callee, null, [[14, 15], [4, 6]]);
   }));
@@ -8500,6 +8576,7 @@ var Internal = {
   getSchema: getSchema,
   getValPath: getValPath,
   getSource: getSource,
+  isValModule: isValModule,
   resolvePath: resolvePath,
   safeResolvePath: safeResolvePath,
   splitModuleFilePathAndModulePath: splitModuleFilePathAndModulePath,
@@ -8626,6 +8703,7 @@ exports._createClass = _createClass;
 exports._slicedToArray = _slicedToArray;
 exports._toConsumableArray = _toConsumableArray;
 exports._typeof = _typeof;
+exports.computeValModuleShas = computeValModuleShas;
 exports.derefPatch = derefPatch;
 exports.deserializeSchema = deserializeSchema;
 exports.extractValModules = extractValModules;

package/dist/{index-e990b6ad.cjs.prod.js → index-eaee0a0b.cjs.prod.js}

@@ -3321,8 +3321,8 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
         if (_this2.keySchema) {
           var keyPath = createValPathOfItem(path, key);
           if (!keyPath) {
-            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for key validation")) // Should! never happen
-            ;
+            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for key validation") // Should! never happen
+            );
           }
           var keyError = _this2.keySchema["executeValidate"](keyPath, key);
           if (keyError) {
@@ -3683,8 +3683,8 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
           }
           var subPath = createValPathOfItem(path, validation.error.urlPath);
           if (!subPath) {
-            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for router validation")) // Should! never happen
-            ;
+            throw new Error("Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " for router validation") // Should! never happen
+            );
           }
           return [subPath, [{
             message: validation.error.message,
@@ -3860,6 +3860,19 @@ schema, source) {
 function getSource(valModule) {
   return valModule[GetSource];
 }
+
+/**
+ * Whether `value` is a Val module, i.e. something {@link define} produced.
+ *
+ * Checks for the three symbols `define` writes, rather than a class identity:
+ * a module may have been created by a different copy of `@valbuild/core` (the
+ * editor SPA and the host bundle each ship their own, and the CLI evaluates
+ * user modules inside a `node:vm` context). The symbols are created with
+ * `Symbol.for`, so they are shared across all of those; a constructor is not.
+ */
+function isValModule(value) {
+  return _typeof(value) === "object" && value !== null && GetSource in value && GetSchema in value && Path in value;
+}
 function splitModuleFilePathAndModulePath(path) {
   var pathOfSep = path.indexOf(ModuleFilePathSep);
   if (pathOfSep === -1) {
@@ -6810,6 +6823,84 @@ function collectObjectRecursive(item, collector) {
   }
 }
 
+/**
+ * One module's contribution to the SHAs, in fold order.
+ *
+ * The SHAs are a FOLD, not a hash of a set: each module is mixed into the
+ * running value in `val.modules` order, so reproducing one means replaying the
+ * same modules with the same inputs in the same order. That is what this type
+ * is for — see {@link computeValModuleShas}.
+ */
+
+/**
+ * The SHAs, from the entries they are a fold over.
+ *
+ * Split out from {@link extractValModules} because there are two ways to arrive
+ * at a set of sources. Extraction evaluates the modules; the server also
+ * PROMOTES the sources it has just written to disk, because re-evaluating gets
+ * it nothing — a module `def` is the app's own `import()`, which resolves from
+ * the module registry rather than from the file that was just rewritten. Both
+ * have to produce SHAs the other side can compare, so the fold has one
+ * implementation and both call it.
+ *
+ * Feeding back the entries a previous fold used, unchanged, reproduces its SHAs
+ * exactly. That is the property the promotion relies on: only the modules whose
+ * source actually moved change anything.
+ */
+function computeValModuleShas(config, entries, moduleErrors) {
+  var configSha = hash(JSON.stringify(config));
+  var sourcesSha = "";
+  var baseSha = configSha;
+  // NOTE: schemaSha is deliberately NOT seeded with configSha. It is compared
+  // across bundles (the server extracts from the Node bundle, the editor SPA
+  // from the browser bundle) to detect that a new version has been deployed.
+  // The config contains values that are not part of the schema and that differ
+  // between those two bundles - most notably the documented
+  // `gitCommit: process.env.VERCEL_GIT_COMMIT_SHA` / `gitBranch`, which are
+  // server-only env vars and therefore `undefined` in the browser. Seeding with
+  // them made the two sides disagree on every production load.
+  var schemaSha = "";
+  var _iterator = result._createForOfIteratorHelper(entries),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var entry = _step.value;
+      var path = entry.path,
+        source = entry.source,
+        serializedSchema = entry.serializedSchema;
+      sourcesSha = hash(sourcesSha + JSON.stringify({
+        path: path,
+        source: source
+      }));
+      baseSha = hash(baseSha + JSON.stringify({
+        path: path,
+        schema: serializedSchema,
+        source: source,
+        modulesErrors: moduleErrors.slice(0, entry.moduleErrorsAt)
+      }));
+      // The PATH is part of the schema set, not just the schema: renaming a
+      // module while leaving its schema byte-identical still changes which paths
+      // exist, and an open client keyed its schema cache by the old path. Hashing
+      // the schema alone left this SHA unchanged, so with no commitSha to fall
+      // back on the client never refetched /schema.
+      schemaSha = hash(schemaSha + JSON.stringify({
+        path: path,
+        schema: serializedSchema
+      }));
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  return {
+    baseSha: baseSha,
+    schemaSha: schemaSha,
+    sourcesSha: sourcesSha,
+    configSha: configSha
+  };
+}
+
 /**
  * Extracts schemas and sources from a ValModules registry and computes the
  * deterministic SHAs that the server and client both use to detect changes.
@@ -6822,7 +6913,7 @@ function extractValModules(_x) {
 }
 function _extractValModules() {
   _extractValModules = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(valModules) {
-    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, configSha, sourcesSha, baseSha, schemaSha, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
+    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, shaEntries, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
     return _regenerator().w(function (_context) {
       while (1) switch (_context.p = _context.n) {
         case 0:
@@ -6837,17 +6928,15 @@ function _extractValModules() {
           sources = {};
           schemas = {};
           serializedSchemas = {};
-          configSha = hash(JSON.stringify(valModules.config));
-          sourcesSha = "";
-          baseSha = configSha; // NOTE: schemaSha is deliberately NOT seeded with configSha. It is compared
-          // across bundles (the server extracts from the Node bundle, the editor SPA
-          // from the browser bundle) to detect that a new version has been deployed.
-          // The config contains values that are not part of the schema and that differ
-          // between those two bundles - most notably the documented
-          // `gitCommit: process.env.VERCEL_GIT_COMMIT_SHA` / `gitBranch`, which are
-          // server-only env vars and therefore `undefined` in the browser. Seeding with
-          // them made the two sides disagree on every production load.
-          schemaSha = "";
+          /**
+           * What the fold below runs over, collected here rather than hashed inline.
+           *
+           * The hashing itself moved to `computeValModuleShas`, so the server can
+           * recompute these SHAs for sources it did not get by evaluating the modules.
+           * Collected in loop order, which is `val.modules` order, which is the order
+           * the fold is defined by.
+           */
+          shaEntries = [];
           moduleIdx = 0;
         case 1:
           if (!(moduleIdx < valModules.modules.length)) {
@@ -6950,40 +7039,27 @@ function _extractValModules() {
           sources[pathM] = source;
           schemas[pathM] = schema;
           serializedSchemas[pathM] = serializedSchema;
-          sourcesSha = hash(sourcesSha + JSON.stringify({
-            path: path,
-            source: source
-          }));
-          baseSha = hash(baseSha + JSON.stringify({
-            path: path,
-            schema: serializedSchema,
+          shaEntries.push({
+            path: pathM,
             source: source,
-            modulesErrors: moduleErrors
-          }));
-          // The PATH is part of the schema set, not just the schema: renaming a
-          // module while leaving its schema byte-identical still changes which paths
-          // exist, and an open client keyed its schema cache by the old path. Hashing
-          // the schema alone left this SHA unchanged, so with no commitSha to fall
-          // back on the client never refetched /schema.
-          schemaSha = hash(schemaSha + JSON.stringify({
-            path: path,
-            schema: serializedSchema
-          }));
+            serializedSchema: serializedSchema,
+            // The errors so far, which is what the base SHA used to mix in by hashing
+            // the live array at this point in the loop. See `moduleErrorsAt`.
+            moduleErrorsAt: moduleErrors.length
+          });
         case 17:
           moduleIdx++;
           _context.n = 1;
           break;
         case 18:
-          return _context.a(2, {
+          return _context.a(2, _objectSpread2(_objectSpread2({
             sources: sources,
             schemas: schemas,
-            serializedSchemas: serializedSchemas,
-            baseSha: baseSha,
-            schemaSha: schemaSha,
-            sourcesSha: sourcesSha,
-            configSha: configSha,
-            moduleErrors: moduleErrors
-          });
+            serializedSchemas: serializedSchemas
+          }, computeValModuleShas(valModules.config, shaEntries, moduleErrors)), {}, {
+            moduleErrors: moduleErrors,
+            shaEntries: shaEntries
+          }));
       }
     }, _callee, null, [[14, 15], [4, 6]]);
   }));
@@ -8500,6 +8576,7 @@ var Internal = {
   getSchema: getSchema,
   getValPath: getValPath,
   getSource: getSource,
+  isValModule: isValModule,
   resolvePath: resolvePath,
   safeResolvePath: safeResolvePath,
   splitModuleFilePathAndModulePath: splitModuleFilePathAndModulePath,
@@ -8626,6 +8703,7 @@ exports._createClass = _createClass;
 exports._slicedToArray = _slicedToArray;
 exports._toConsumableArray = _toConsumableArray;
 exports._typeof = _typeof;
+exports.computeValModuleShas = computeValModuleShas;
 exports.derefPatch = derefPatch;
 exports.deserializeSchema = deserializeSchema;
 exports.extractValModules = extractValModules;

package/dist/valbuild-core.cjs.dev.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var dist_valbuildCore = require('./index-730a5254.cjs.dev.js');
+var dist_valbuildCore = require('./index-2cef45cc.cjs.dev.js');
 require('./result-bb1f436e.cjs.dev.js');
 
 
@@ -35,6 +35,7 @@ exports.Schema = dist_valbuildCore.Schema;
 exports.StringSchema = dist_valbuildCore.StringSchema;
 exports.UnionSchema = dist_valbuildCore.UnionSchema;
 exports.VAL_EXTENSION = dist_valbuildCore.VAL_EXTENSION;
+exports.computeValModuleShas = dist_valbuildCore.computeValModuleShas;
 exports.derefPatch = dist_valbuildCore.derefPatch;
 exports.deserializeSchema = dist_valbuildCore.deserializeSchema;
 exports.extractValModules = dist_valbuildCore.extractValModules;

package/dist/valbuild-core.cjs.prod.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var dist_valbuildCore = require('./index-e990b6ad.cjs.prod.js');
+var dist_valbuildCore = require('./index-eaee0a0b.cjs.prod.js');
 require('./result-787e35f6.cjs.prod.js');
 
 
@@ -35,6 +35,7 @@ exports.Schema = dist_valbuildCore.Schema;
 exports.StringSchema = dist_valbuildCore.StringSchema;
 exports.UnionSchema = dist_valbuildCore.UnionSchema;
 exports.VAL_EXTENSION = dist_valbuildCore.VAL_EXTENSION;
+exports.computeValModuleShas = dist_valbuildCore.computeValModuleShas;
 exports.derefPatch = dist_valbuildCore.derefPatch;
 exports.deserializeSchema = dist_valbuildCore.deserializeSchema;
 exports.extractValModules = dist_valbuildCore.extractValModules;

package/dist/valbuild-core.esm.js

@@ -1,2 +1,2 @@
-export { A as ArraySchema, B as BooleanSchema, x as CODE_LANGUAGES, p as COLOR_FORMATS, C as ColorSchema, e as DEFAULT_APP_HOST, q as DEFAULT_COLOR_FORMAT, D as DEFAULT_CONTENT_HOST, g as DEFAULT_VAL_REMOTE_HOST, o as DateSchema, r as DateTimeSchema, F as FATAL_ERROR_TYPES, n as FileSchema, G as GenericSelector, l as ImageSchema, I as Internal, K as KeyOfSchema, L as LiteralSchema, M as ModuleFilePathSep, N as NumberSchema, O as ObjectSchema, R as RecordSchema, u as RichTextSchema, t as RouteSchema, S as Schema, k as StringSchema, U as UnionSchema, V as VAL_EXTENSION, j as derefPatch, v as deserializeSchema, f as extractValModules, y as getSourcePathFromRoute, h as hasRemoteFileSchema, i as initVal, m as modules, w as previewScope } from './index-d7cc2231.esm.js';
+export { A as ArraySchema, B as BooleanSchema, y as CODE_LANGUAGES, q as COLOR_FORMATS, C as ColorSchema, e as DEFAULT_APP_HOST, r as DEFAULT_COLOR_FORMAT, D as DEFAULT_CONTENT_HOST, j as DEFAULT_VAL_REMOTE_HOST, p as DateSchema, t as DateTimeSchema, F as FATAL_ERROR_TYPES, o as FileSchema, G as GenericSelector, n as ImageSchema, I as Internal, K as KeyOfSchema, L as LiteralSchema, M as ModuleFilePathSep, N as NumberSchema, O as ObjectSchema, R as RecordSchema, v as RichTextSchema, u as RouteSchema, S as Schema, l as StringSchema, U as UnionSchema, V as VAL_EXTENSION, g as computeValModuleShas, k as derefPatch, w as deserializeSchema, f as extractValModules, z as getSourcePathFromRoute, h as hasRemoteFileSchema, i as initVal, m as modules, x as previewScope } from './index-193f19b4.esm.js';
 import './result-daff1cae.esm.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valbuild/core",
-  "version": "0.105.0",
+  "version": "0.106.0",
   "private": false,
   "description": "Val - supercharged hard-coded content",
   "repository": {

package/patch/dist/valbuild-core-patch.cjs.dev.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var dist_valbuildCore = require('../../dist/index-730a5254.cjs.dev.js');
+var dist_valbuildCore = require('../../dist/index-2cef45cc.cjs.dev.js');
 var result = require('../../dist/result-bb1f436e.cjs.dev.js');
 var util = require('../../dist/util-b213092b.cjs.dev.js');
 

package/patch/dist/valbuild-core-patch.cjs.prod.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var dist_valbuildCore = require('../../dist/index-e990b6ad.cjs.prod.js');
+var dist_valbuildCore = require('../../dist/index-eaee0a0b.cjs.prod.js');
 var result = require('../../dist/result-787e35f6.cjs.prod.js');
 var util = require('../../dist/util-030d8a1f.cjs.prod.js');
 

package/patch/dist/valbuild-core-patch.esm.js

@@ -1,5 +1,5 @@
-import { _ as _typeof, a as _slicedToArray, P as PatchError, s as splitModuleFilePathAndModulePath, b as _createClass, c as _classCallCheck, d as _toConsumableArray } from '../../dist/index-d7cc2231.esm.js';
-export { P as PatchError } from '../../dist/index-d7cc2231.esm.js';
+import { _ as _typeof, a as _slicedToArray, P as PatchError, s as splitModuleFilePathAndModulePath, b as _createClass, c as _classCallCheck, d as _toConsumableArray } from '../../dist/index-193f19b4.esm.js';
+export { P as PatchError } from '../../dist/index-193f19b4.esm.js';
 import { f as isNonEmpty, e as err, o as ok, m as map, g as flatMap, i as isErr, h as flatMapReduce, j as filterOrElse, k as mapErr, l as map$1, n as all, p as flatten, q as allT } from '../../dist/result-daff1cae.esm.js';
 import { p as pipe } from '../../dist/util-18613e99.esm.js';