@valbuild/core 0.120.0 → 0.124.0

package/dist/{index-2f65e194.esm.js → index-9c14df37.esm.js}

@@ -589,12 +589,14 @@ var StringSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new StringSchema(this.options, this.opt, this.isRaw, this.customValidateFunctions, this.renderInput, true, this.isHidden, this.description, this.previewInput, this.isMultiline);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new StringSchema(this.options, this.opt, this.isRaw, this.customValidateFunctions, this.renderInput, isReadonly, this.isHidden, this.description, this.previewInput, this.isMultiline);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new StringSchema(this.options, this.opt, this.isRaw, this.customValidateFunctions, this.renderInput, this.isReadonly, true, this.description, this.previewInput, this.isMultiline);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new StringSchema(this.options, this.opt, this.isRaw, this.customValidateFunctions, this.renderInput, this.isReadonly, isHidden, this.description, this.previewInput, this.isMultiline);
     }
   }, {
     key: "raw",
@@ -867,12 +869,14 @@ var ObjectSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new ObjectSchema(this.items, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ObjectSchema(this.items, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new ObjectSchema(this.items, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ObjectSchema(this.items, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -1083,12 +1087,14 @@ var ArraySchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new ArraySchema(this.item, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.previewInput, this.renderInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ArraySchema(this.item, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.previewInput, this.renderInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new ArraySchema(this.item, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.previewInput, this.renderInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ArraySchema(this.item, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.previewInput, this.renderInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -1336,12 +1342,14 @@ var LiteralSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new LiteralSchema(this.value, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new LiteralSchema(this.value, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new LiteralSchema(this.value, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new LiteralSchema(this.value, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -1747,12 +1755,14 @@ var UnionSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new UnionSchema(this.key, this.items, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new UnionSchema(this.key, this.items, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new UnionSchema(this.key, this.items, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new UnionSchema(this.key, this.items, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -1952,7 +1962,7 @@ var union = function union(key) {
   return new UnionSchema(key, objects);
 };
 
-var RegEx = /^(https?:\/\/[^/]+)\/file\/p\/([^/]+)\/b\/([^/]+)\/v\/([^/]+)\/h\/([^/]+)\/f\/([^/]+)\/p\/(.+)$/;
+var RegEx$1 = /^(https?:\/\/[^/]+)\/file\/p\/([^/]+)\/b\/([^/]+)\/v\/([^/]+)\/h\/([^/]+)\/f\/([^/]+)\/p\/(.+)$/;
 function splitRemoteRef(ref) {
   if (ref[0] === "/") {
     return {
@@ -1960,7 +1970,7 @@ function splitRemoteRef(ref) {
       error: "Not a remote ref: " + ref
     };
   }
-  var match = ref.match(RegEx);
+  var match = ref.match(RegEx$1);
   if (!match) {
     return {
       status: "error",
@@ -3125,12 +3135,14 @@ var ImageSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new ImageSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ImageSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new ImageSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ImageSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -3362,12 +3374,14 @@ var RouteSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new RouteSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new RouteSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new RouteSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new RouteSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -3946,12 +3960,14 @@ var RichTextSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new RichTextSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new RichTextSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new RichTextSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new RichTextSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -4352,6 +4368,94 @@ function _resolveJsonValues() {
   return _resolveJsonValues.apply(this, arguments);
 }
 
+/**
+ * The string used as the `_type` discriminator of an {@link ExternalRecordSrc}.
+ */
+var EXTERNAL_VAL_EXTENSION_TAG = "external";
+
+/**
+ * Type-level-only slots. Declared here rather than reusing `PhantomType`
+ * (`source/index.ts`) because three separate facts have to ride along, and that
+ * helper carries one.
+ *
+ * None of them exist at runtime: `c.external()` produces `{ _type: "external" }`
+ * and nothing else.
+ */
+
+/**
+ * The source of a record whose entries live behind an adapter — a database, an
+ * HTTP API, a bucket — instead of in the module.
+ *
+ * This is what `c.external()` returns, and it is the counterpart of the
+ * `c.json(() => import(...))` marker a `.jsonValues()` entry carries: a value
+ * that says "the content is not here" without saying anything about what is.
+ * The schema says *which* adapter (`.external("posts")`); this says *that* the
+ * entries are elsewhere, which is what every source-walking consumer needs to
+ * know without holding a schema.
+ *
+ * Three phantom parameters, each earning its place:
+ *
+ * - `T` — the item type. Without it `c.define` would return a module whose type
+ *   is "a marker", the item type would be gone, and an adapter could not be
+ *   typed from the schema at all.
+ * - `L` — the label from `.external(label)`, so a binding can be checked against
+ *   the schema that declared it.
+ * - `RO` — whether the schema said `.readonly()`, which decides whether the
+ *   adapter must implement writes or is forbidden from doing so.
+ *
+ * The defaults are the WIDEST instantiation on purpose: the bare name appears in
+ * the `Source` and `SelectorSource` unions, and every narrower instantiation has
+ * to be assignable to it. The `external()` factory below defaults the other way,
+ * exactly as `JsonSource<T = unknown>` and `json<T = Json>()` do.
+ */
+
+/**
+ * The marker written as a module's source when its record is `.external()`.
+ *
+ * Takes no arguments: everything it carries is inferred from the schema it is
+ * checked against in `c.define`. The assertion mirrors `json()` — the phantom
+ * slots are symbol-keyed and have no runtime representation, so there is nothing
+ * to construct for them.
+ */
+function external() {
+  return _defineProperty({}, VAL_EXTENSION, EXTERNAL_VAL_EXTENSION_TAG);
+}
+function isExternal(obj) {
+  return _typeof(obj) === "object" && obj !== null && VAL_EXTENSION in obj && obj[VAL_EXTENSION] === EXTERNAL_VAL_EXTENSION_TAG;
+}
+
+/**
+ * The item type an external record holds, read back off a module.
+ *
+ * `GenericSelector` is not imported here — that would be a cycle through
+ * `../selector` — so this is written against the phantom slot directly and the
+ * selector-shaped overloads live where the selector types do.
+ */
+
+/** The label an external record was declared with. */
+
+/** Whether the schema behind an external record said `.readonly()`. */
+
+/**
+ * The source of an external record as it may be WRITTEN.
+ *
+ * Either the marker, or entries inline in the `.val.ts`. Inline entries are
+ * accepted by the type on purpose, for the same reason `.jsonValues()` accepts
+ * them (see `JsonValuesRecordSrc`): pasting content straight into the module is
+ * the natural first thing to write, and a type error there is a dead end — the
+ * author cannot see what to write instead. Validation reports the inline entries
+ * as an `external:upload` fix instead, so the mistake is repaired rather than
+ * blocking authoring, and they are readable at runtime meanwhile.
+ */
+
+/**
+ * Is this module source an external record that still has entries written
+ * inline? Used by validation to raise `external:upload`.
+ */
+function hasInlineExternalEntries(source) {
+  return _typeof(source) === "object" && source !== null && !Array.isArray(source) && !isExternal(source) && Object.keys(source).length > 0;
+}
+
 /**
  * The source type of a `.jsonValues()` record: every entry value is EITHER a
  * lazily loaded {@link JsonSource} whose resolved content is the (loosened, see
@@ -4380,6 +4484,7 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
     var isJsonValues = arguments.length > 9 && arguments[9] !== undefined ? arguments[9] : false;
     var previewInput = arguments.length > 10 && arguments[10] !== undefined ? arguments[10] : null;
     var renderInput = arguments.length > 11 && arguments[11] !== undefined ? arguments[11] : null;
+    var externalLabel = arguments.length > 12 && arguments[12] !== undefined ? arguments[12] : null;
     _classCallCheck(this, RecordSchema);
     _this = _callSuper(this, RecordSchema);
     _this.item = item;
@@ -4394,24 +4499,28 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
     _this.isJsonValues = isJsonValues;
     _this.previewInput = previewInput;
     _this.renderInput = renderInput;
+    _this.externalLabel = externalLabel;
     return _this;
   }
   _inherits(RecordSchema, _Schema);
   return _createClass(RecordSchema, [{
     key: "describe",
     value: function describe(description) {
-      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, description !== null && description !== void 0 ? description : undefined, this.isJsonValues, this.previewInput, this.renderInput);
+      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, description !== null && description !== void 0 ? description : undefined, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
   }, {
     key: "validate",
     value: function validate(validationFunction) {
-      return new RecordSchema(this.item, this.opt, [].concat(_toConsumableArray(this.customValidateFunctions), [validationFunction]), this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput);
+      return new RecordSchema(this.item, this.opt, [].concat(_toConsumableArray(this.customValidateFunctions), [validationFunction]), this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
   }, {
     key: "executeValidate",
     value: function executeValidate(path, src) {
       var _this2 = this;
       var error = false;
+      if (this.externalLabel !== null) {
+        return this.validateExternal(path, src);
+      }
       var customValidationErrors = this.executeCustomValidateFunctions(src, this.customValidateFunctions, {
         path: path
       });
@@ -4748,29 +4857,42 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "nullable",
     value: function nullable() {
-      return new RecordSchema(this.item, true, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput);
+      return new RecordSchema(this.item, true, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
+
+    /**
+     * A record you can look at but not change.
+     *
+     * The flag rides in the TYPE as well as in the instance, so `.external()` can
+     * freeze it into the source marker and the adapter's write methods become
+     * required or forbidden on the strength of it. That is also why `.readonly()`
+     * must come BEFORE `.external()`: afterwards the value is a `Schema`, and
+     * there is no `.readonly()` left to call — which is the error the compiler
+     * gives, and a clearer one than a runtime throw.
+     */
   }, {
     key: "readonly",
     value: function readonly() {
-      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, true, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, true, this.description, this.isJsonValues, this.previewInput, this.renderInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
   }, {
     key: "router",
     value: function router(_router) {
-      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, _router, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput);
+      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, _router, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
   }, {
     key: "remote",
     value: function remote() {
       return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions ? _objectSpread2(_objectSpread2({}, this.mediaOptions), {}, {
         remote: true
-      }) : undefined, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput);
+      }) : undefined, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, this.renderInput, this.externalLabel);
     }
 
     /**
@@ -4812,7 +4934,84 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
       // Empty by construction: the guard above rejects any that were registered.
       [], this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, true,
       // Null by construction: the guard above rejects any that was declared.
-      null, this.renderInput);
+      null, this.renderInput, this.externalLabel);
+    }
+
+    /**
+     * Store this record's entries behind an adapter — a database, an HTTP API, a
+     * bucket — instead of in the module.
+     *
+     * Available on every record-derived schema, which is `s.record()`,
+     * `s.router()`, `s.images()` and `s.files()` alike: a router is a
+     * `RecordSchema` with a `ValRouter`, a gallery one with media options, so all
+     * four get external storage from this one method.
+     *
+     * `label` does not address the binding — the registry is keyed by module, and
+     * so is the wire protocol. It exists so a reader of the schema can see what
+     * backs it, and it is checked against the binding that claims it, so the two
+     * cannot drift.
+     *
+     * Only supported on a module's ROOT record, exactly as `.jsonValues()` is: a
+     * nested external record would leave a hole in the middle of a module's
+     * source, and the Studio, patching and validation all assume a module's
+     * source is complete apart from its entries.
+     */
+  }, {
+    key: "external",
+    value: function external(label) {
+      if (this.isJsonValues) {
+        throw new Error(".external() cannot be combined with .jsonValues(): entries live in one place or the other, not both.");
+      }
+      if (!label) {
+        throw new Error('.external() requires a label, e.g. .external("posts")');
+      }
+      return new RecordSchema(this.item, this.opt,
+      // Empty by construction: a validator declared before `.external()` is
+      // typed against the un-external source shape and cannot be carried over.
+      [], this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, null, this.renderInput, label);
+    }
+
+    /**
+     * An external record's source is either the `c.external()` marker or entries
+     * still written inline in the `.val.ts`.
+     *
+     * Inline entries are NOT a type error (see `ExternalRecordWritableSrc`), so
+     * this is where they surface: as an `external:upload` fix, per key, the way
+     * `.jsonValues()` reports an un-extracted entry. Reporting per key rather than
+     * once for the record is what lets the fix be applied to one entry, and what
+     * puts the error at a path the editor can navigate to.
+     */
+  }, {
+    key: "validateExternal",
+    value: function validateExternal(path, src) {
+      if (this.opt && (src === null || src === undefined)) {
+        return false;
+      }
+      if (src === null || _typeof(src) !== "object" || Array.isArray(src)) {
+        return _defineProperty({}, path, [{
+          message: "Expected the c.external() marker or inline entries, got '".concat(src === null ? "null" : Array.isArray(src) ? "array" : _typeof(src), "'"),
+          value: src,
+          schemaError: true
+        }]);
+      }
+      if (isExternal(src)) {
+        // The marker: the entries are the adapter's, and there is nothing here to
+        // check. Their content is validated as it is read.
+        return false;
+      }
+      var error = false;
+      for (var _i = 0, _Object$keys = Object.keys(src); _i < _Object$keys.length; _i++) {
+        var _key = _Object$keys[_i];
+        var subPath = createValPathOfItem(path, _key);
+        if (!subPath) {
+          continue;
+        }
+        error = this.appendValidationError(error, subPath, "Entry is written inline, but this record is .external(\"".concat(this.externalLabel, "\"). Run 'val external upload' to move it into the store."), src[_key]);
+        var errors = error;
+        var last = errors[subPath][errors[subPath].length - 1];
+        last.fixes = ["external:upload"];
+      }
+      return error;
     }
   }, {
     key: "getRouterValidations",
@@ -4866,7 +5065,7 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "executeSerialize",
     value: function executeSerialize() {
-      var _this$renderInput, _this$keySchema, _this$currentRouter, _this$customValidateF;
+      var _this$renderInput, _this$keySchema, _this$currentRouter, _this$customValidateF, _this$externalLabel;
       var result = {
         type: "record",
         render: (_this$renderInput = this.renderInput) !== null && _this$renderInput !== void 0 ? _this$renderInput : undefined,
@@ -4877,6 +5076,7 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
         router: (_this$currentRouter = this.currentRouter) === null || _this$currentRouter === void 0 ? void 0 : _this$currentRouter.getRouterId(),
         customValidate: this.customValidateFunctions && ((_this$customValidateF = this.customValidateFunctions) === null || _this$customValidateF === void 0 ? void 0 : _this$customValidateF.length) > 0,
         jsonValues: this.isJsonValues ? true : undefined,
+        external: (_this$externalLabel = this.externalLabel) !== null && _this$externalLabel !== void 0 ? _this$externalLabel : undefined,
         readonly: this.isReadonly,
         hidden: this.isHidden,
         description: this.description
@@ -4914,8 +5114,12 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
       if (src === null) {
         return res;
       }
-      for (var _key in src) {
-        var itemSrc = src[_key];
+      if (isExternal(src)) {
+        // The entries are the adapter's; there is nothing here to preview.
+        return res;
+      }
+      for (var _key2 in src) {
+        var itemSrc = src[_key2];
         if (itemSrc === null || itemSrc === undefined) {
           continue;
         }
@@ -4926,14 +5130,14 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
           // keys, and the caller shows a placeholder for the rest.
           continue;
         }
-        var subPath = unsafeCreateSourcePath(sourcePath, _key);
+        var subPath = unsafeCreateSourcePath(sourcePath, _key2);
         if (scope !== undefined && !scope.wantsUnder(subPath)) {
           continue;
         }
         var itemResult = this.item["executePreview"](subPath, itemSrc, scope);
         for (var keyS in itemResult) {
-          var _key2 = keyS;
-          res[_key2] = itemResult[_key2];
+          var _key3 = keyS;
+          res[_key3] = itemResult[_key3];
         }
       }
       // The entries preview comes from the ITEM schema's own `preview` — the
@@ -4944,9 +5148,9 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
         // is being shown, only the wanted entries when it is not.
         var window = scope !== undefined && !scope.wants(sourcePath) ? scope : null;
         var items = [];
-        for (var _i = 0, _Object$entries = Object.entries(src); _i < _Object$entries.length; _i++) {
-          var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
-            _key3 = _Object$entries$_i[0],
+        for (var _i2 = 0, _Object$entries = Object.entries(src); _i2 < _Object$entries.length; _i2++) {
+          var _Object$entries$_i = _slicedToArray(_Object$entries[_i2], 2),
+            _key4 = _Object$entries$_i[0],
             val = _Object$entries$_i[1];
           if (isJson(val)) {
             continue; // as above: nothing to select from an un-loaded entry
@@ -4954,7 +5158,7 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
           if (val === null || val === undefined) {
             continue;
           }
-          if (window !== null && !window.wantsUnder(unsafeCreateSourcePath(sourcePath, _key3))) {
+          if (window !== null && !window.wantsUnder(unsafeCreateSourcePath(sourcePath, _key4))) {
             continue;
           }
           // Per KEY, not per record: the closure is user code, and one entry whose
@@ -4966,14 +5170,14 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
               var title = _item.title,
                 subtitle = _item.subtitle,
                 image = _item.image;
-              items.push([_key3, {
+              items.push([_key4, {
                 title: title,
                 subtitle: subtitle,
                 image: image
               }]);
             }
           } catch (e) {
-            res[unsafeCreateSourcePath(sourcePath, _key3)] = {
+            res[unsafeCreateSourcePath(sourcePath, _key4)] = {
               status: "error",
               message: e instanceof Error ? e.message : "Unknown error"
             };
@@ -5014,7 +5218,7 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "preview",
     value: function preview(select) {
-      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, select, this.renderInput);
+      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, select, this.renderInput, this.externalLabel);
     }
 
     /**
@@ -5027,7 +5231,7 @@ var RecordSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "render",
     value: function render(input) {
-      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, input);
+      return new RecordSchema(this.item, this.opt, this.customValidateFunctions, this.currentRouter, this.keySchema, this.mediaOptions, this.isReadonly, this.isHidden, this.description, this.isJsonValues, this.previewInput, input, this.externalLabel);
     }
   }]);
 }(Schema);
@@ -5047,135 +5251,653 @@ function record(keyOrSchema, schema) {
   }
 }
 
-function define(id,
-// TODO: `/${string}`
-schema, source) {
-  return _defineProperty(_defineProperty(_defineProperty({}, GetSource, source), GetSchema, schema), Path, id);
-}
-function getSource(valModule) {
-  return valModule[GetSource];
-}
+/**
+ * The source of the project's settings module — `s.settings()`.
+ *
+ * **Every key is optional, at every level, and that is the whole point.** A
+ * settings module is written as
+ *
+ * ```typescript
+ * export default c.define("/settings.val.ts", s.settings(), {});
+ * ```
+ *
+ * and `{}` has to keep validating as sections are added to it. A project that
+ * never touched the assistant's settings should not have to edit its settings
+ * file the day `locales` or `permissions` land.
+ *
+ * That is why settings is not sugar over `s.object()`: an object schema errors
+ * with `Expected key 'assistant' not found in object` for any absent key (see
+ * `ObjectSchema.executeAssert`), and `.nullable()` permits `null`, not absence.
+ * `SettingsSchema` gives absent keys the meaning "unset" instead.
+ *
+ * `null` means unset too, so the editor can clear a field it has already
+ * written without removing the key.
+ */
 
 /**
- * Whether `value` is a Val module, i.e. something {@link define} produced.
+ * The assistant: whether editors have one, and what it is told about the
+ * project on every message.
  *
- * Checks for the three symbols `define` writes, rather than a class identity:
- * a module may have been created by a different copy of `@valbuild/core` (the
- * editor SPA and the host bundle each ship their own, and the CLI evaluates
- * user modules inside a `node:vm` context). The symbols are created with
- * `Symbol.for`, so they are shared across all of those; a constructor is not.
+ * `context` and `tone` are prose the model reads, not instructions Val
+ * interprets, and both are capped (see {@link ASSISTANT_SETTINGS_MAX_LENGTH}):
+ * they are prepended to every request the chat makes, so an unbounded field
+ * here is an unbounded cost on every turn.
  */
-function isValModule(value) {
-  return _typeof(value) === "object" && value !== null && GetSource in value && GetSchema in value && Path in value;
-}
-function splitModuleFilePathAndModulePath(path) {
-  var pathOfSep = path.indexOf(ModuleFilePathSep);
-  if (pathOfSep === -1) {
-    return [path, ""];
-  }
-  return [path.slice(0, pathOfSep), path.slice(pathOfSep + ModuleFilePathSep.length)];
-}
-function joinModuleFilePathAndModulePath(moduleFilePath, modulePath) {
-  if (modulePath === "") {
-    return moduleFilePath;
-  }
-  return "".concat(moduleFilePath).concat(ModuleFilePathSep).concat(modulePath);
-}
-function isObjectSchema(schema) {
-  return schema instanceof ObjectSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "object";
-}
-function isRecordSchema(schema) {
-  return schema instanceof RecordSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "record";
-}
-function isArraySchema(schema) {
-  return schema instanceof ArraySchema || _typeof(schema) === "object" && "type" in schema && schema.type === "array";
-}
 
-// function isI18nSchema(
-//   schema: Schema<SelectorSource> | SerializedSchema
-// ): schema is I18nSchema<readonly string[]> | SerializedI18nSchema {
-//   return (
-//     schema instanceof I18nSchema ||
-//     (typeof schema === "object" && "type" in schema && schema.type === "i18n")
-//   );
-// }
+/**
+ * The cap on each of the assistant's prose fields, in characters.
+ *
+ * Roughly a thousand tokens each. Generous enough for a paragraph of
+ * background and a house style, small enough that the two of them together do
+ * not dominate the system prompt they are appended to.
+ */
+var ASSISTANT_SETTINGS_MAX_LENGTH = 4000;
 
-function isUnionSchema(schema
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
-) {
-  return schema instanceof UnionSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "union";
-}
-function isRichTextSchema(schema) {
-  return schema instanceof RichTextSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "richtext";
-}
-function isImageSchema(schema) {
-  return schema instanceof ImageSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "image";
-}
+/**
+ * Whether a project has an assistant — and the answer is not a boolean.
+ *
+ * - `"on"`: use it.
+ * - `"off"`: every trace of it goes. No button in the top bar, no row in the
+ *   quick actions, no panel, nothing sent. A project that says `false` has
+ *   decided, and the Studio does not keep offering.
+ * - `"unconfigured"`: nobody has said. The affordances are SHOWN, and asking to
+ *   use the assistant asks to turn it on first. That is the difference between
+ *   this and `"off"`, and the reason `enabled` is a tri-state: hiding an
+ *   unconfigured assistant means nobody discovers it, and quietly enabling one
+ *   means a project starts sending its content to a model because it did not
+ *   know to say no.
+ *
+ * A project with NO settings module is `"on"`. There is nowhere to record a
+ * decision, so there is nothing to prompt for and nothing to prompt INTO — the
+ * prompt writes to a settings module, and that project has none.
+ *
+ * This is the only answer to "does this project have an assistant":
+ * `config.ai.chat` is gone, and with it the chat's title, description and
+ * suggestions, which nothing replaces. The AI commit-message summariser is
+ * deliberately not part of this — `config.ai.commitMessages` stays where it is,
+ * and gets settings of its own later.
+ */
 
-// function isOneOfSchema(
-//   schema: Schema<SelectorSource> | SerializedSchema
-// ): schema is OneOfSchema<GenericSelector<SourceArray>> | SerializedOneOfSchema {
-//   return (
-//     schema instanceof OneOfSchema ||
-//     (typeof schema === "object" && "type" in schema && schema.type === "oneOf")
-//   );
-// }
+function assistantAvailability(/** The settings module's source, or `undefined` where the project has none. */
+settings) {
+  var _settings$assistant;
+  if (settings === undefined) {
+    return "on";
+  }
+  var enabled = (_settings$assistant = settings.assistant) === null || _settings$assistant === void 0 ? void 0 : _settings$assistant.enabled;
+  if (enabled === true) {
+    return "on";
+  }
+  if (enabled === false) {
+    return "off";
+  }
+  return "unconfigured";
+}
 
-function resolvePath(path, valModule, schema) {
-  var parts = splitModulePath(path);
-  var origParts = _toConsumableArray(parts);
-  var resolvedSchema = schema;
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  var resolvedSource = valModule;
-  var _loop = function _loop() {
-      var part = parts.shift();
-      if (part === undefined) {
-        throw Error("Unexpected undefined part");
+var BooleanSchema = /*#__PURE__*/function (_Schema) {
+  function BooleanSchema() {
+    var _this;
+    var opt = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : false;
+    var customValidateFunctions = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : [];
+    var isReadonly = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
+    var isHidden = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+    var description = arguments.length > 4 ? arguments[4] : undefined;
+    var renderInput = arguments.length > 5 && arguments[5] !== undefined ? arguments[5] : null;
+    var previewInput = arguments.length > 6 && arguments[6] !== undefined ? arguments[6] : null;
+    _classCallCheck(this, BooleanSchema);
+    _this = _callSuper(this, BooleanSchema);
+    _this.opt = opt;
+    _this.customValidateFunctions = customValidateFunctions;
+    _this.isReadonly = isReadonly;
+    _this.isHidden = isHidden;
+    _this.description = description;
+    _this.renderInput = renderInput;
+    _this.previewInput = previewInput;
+    return _this;
+  }
+  _inherits(BooleanSchema, _Schema);
+  return _createClass(BooleanSchema, [{
+    key: "describe",
+    value: function describe(description) {
+      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, description !== null && description !== void 0 ? description : undefined, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "validate",
+    value: function validate(validationFunction) {
+      return new BooleanSchema(this.opt, [].concat(_toConsumableArray(this.customValidateFunctions), [validationFunction]), this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "executeValidate",
+    value: function executeValidate(path, src) {
+      if (this.opt && (src === null || src === undefined)) {
+        return false;
       }
-      if (isArraySchema(resolvedSchema)) {
-        var _resolvedSchema;
-        if (Number.isNaN(Number(part))) {
-          throw Error("Invalid path: array schema ".concat(JSON.stringify(resolvedSchema), " must have a number as path, but got ").concat(part, ". Path: ").concat(path));
-        }
-        if (_typeof(resolvedSource) !== "object" && !Array.isArray(resolvedSource)) {
-          throw Error("Schema type error: expected source to be type of array, but got ".concat(_typeof(resolvedSource)));
-        }
-        resolvedSource = resolvedSource[part];
-        resolvedSchema = resolvedSchema instanceof ArraySchema ? (_resolvedSchema = resolvedSchema) === null || _resolvedSchema === void 0 ? void 0 : _resolvedSchema["item"] : resolvedSchema.item;
-      } else if (isRecordSchema(resolvedSchema)) {
-        var _resolvedSchema2;
-        if (typeof part !== "string") {
-          throw Error("Invalid path: record schema ".concat(resolvedSchema, " must have path: ").concat(part, " as string"));
-        }
-        if (_typeof(resolvedSource) !== "object" && !Array.isArray(resolvedSource)) {
-          throw Error("Schema type error: expected source to be type of record, but got ".concat(_typeof(resolvedSource)));
-        }
-        if (!resolvedSource[part]) {
-          throw Error("Invalid path: record source did not have key ".concat(part, " from path: ").concat(path));
-        }
-        resolvedSource = resolvedSource[part];
-        resolvedSchema = resolvedSchema instanceof RecordSchema ? (_resolvedSchema2 = resolvedSchema) === null || _resolvedSchema2 === void 0 ? void 0 : _resolvedSchema2["item"] : resolvedSchema.item;
-        // A `.jsonValues()` entry value is a lazily-loaded JsonSource marker. We
-        // can resolve the entry itself (schema is now `item`), but we cannot
-        // descend deeper until the backing `*.val.json` content has been loaded
-        // and substituted into the source tree (done by the UI/server layer).
-        if (isJson(resolvedSource) && parts.length > 0) {
-          throw Error("Cannot resolve path into a jsonValues entry until its content is loaded. Path: ".concat(path));
-        }
-      } else if (isObjectSchema(resolvedSchema)) {
-        if (_typeof(resolvedSource) !== "object") {
-          throw Error("Schema type error: expected source to be type of object, but got ".concat(_typeof(resolvedSource)));
-        }
-        if (resolvedSource !== null && resolvedSource[part] === undefined) {
-          throw Error("Invalid path: object source did not have key ".concat(part, " from path: ").concat(path));
-        }
-        resolvedSource = resolvedSource === null ? resolvedSource : resolvedSource[part];
-        resolvedSchema = resolvedSchema instanceof ObjectSchema ? resolvedSchema["items"][part] : resolvedSchema.items[part];
-        // } else if (isI18nSchema(resolvedSchema)) {
-        //   if (!resolvedSchema.locales.includes(part)) {
-        //     throw Error(
-        //       `Invalid path: i18n schema ${resolvedSchema} supports locales ${resolvedSchema.locales.join(
-        //         ", "
+      if (typeof src !== "boolean") {
+        return _defineProperty({}, path, [{
+          message: "Expected 'boolean', got '".concat(_typeof(src), "'"),
+          value: src
+        }]);
+      }
+      return false;
+    }
+  }, {
+    key: "executeAssert",
+    value: function executeAssert(path, src) {
+      if (this.opt && src === null) {
+        return {
+          success: true,
+          data: src
+        };
+      }
+      if (src === null) {
+        return {
+          success: false,
+          errors: _defineProperty({}, path, [{
+            message: "Expected 'boolean', got 'null'",
+            typeError: true
+          }])
+        };
+      }
+      if (typeof src !== "boolean") {
+        return {
+          success: false,
+          errors: _defineProperty({}, path, [{
+            message: "Expected 'boolean', got '".concat(_typeof(src), "'"),
+            typeError: true
+          }])
+        };
+      }
+      return {
+        success: true,
+        data: src
+      };
+    }
+  }, {
+    key: "nullable",
+    value: function nullable() {
+      return new BooleanSchema(true, [], this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "readonly",
+    value: function readonly() {
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new BooleanSchema(this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "hidden",
+    value: function hidden() {
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "executeCustomValidateAt",
+    value: function executeCustomValidateAt(path, src) {
+      return this.executeCustomValidateFunctions(src, this.customValidateFunctions, {
+        path: path
+      });
+    }
+
+    /**
+     * How this field is laid out in the editor when it is the item of an array
+     * or record: `{ as: "inline" }` renders the field itself inside each row,
+     * instead of a preview row that navigates to it.
+     *
+     * Static configuration, not a callback — see `render.ts`.
+     */
+  }, {
+    key: "render",
+    value: function render(input) {
+      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, input, this.previewInput);
+    }
+
+    /**
+     * How this VALUE is shown where a preview of it is needed — a row in a
+     * sortable list, a reference dropdown, a search hit. Never how the field
+     * itself is edited (that is `render`). See `preview.ts`.
+     */
+  }, {
+    key: "preview",
+    value: function preview(select) {
+      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, select);
+    }
+  }, {
+    key: "executePreviewItem",
+    value: function executePreviewItem(src) {
+      if (this.previewInput === null) {
+        return null;
+      }
+      return this.previewInput({
+        val: src
+      });
+    }
+  }, {
+    key: "declaresItemPreview",
+    value: function declaresItemPreview() {
+      return this.previewInput !== null;
+    }
+  }, {
+    key: "executeSerialize",
+    value: function executeSerialize() {
+      var _this$renderInput, _this$customValidateF;
+      return {
+        type: "boolean",
+        render: (_this$renderInput = this.renderInput) !== null && _this$renderInput !== void 0 ? _this$renderInput : undefined,
+        preview: this.previewInput ? true : undefined,
+        opt: this.opt,
+        customValidate: this.customValidateFunctions && ((_this$customValidateF = this.customValidateFunctions) === null || _this$customValidateF === void 0 ? void 0 : _this$customValidateF.length) > 0,
+        readonly: this.isReadonly,
+        hidden: this.isHidden,
+        description: this.description
+      };
+    }
+  }, {
+    key: "executePreview",
+    value: function executePreview() {
+      return {};
+    }
+  }]);
+}(Schema);
+var _boolean = function _boolean() {
+  return new BooleanSchema();
+};
+
+/**
+ * An object whose keys are all optional: absent means unset.
+ *
+ * Both the settings module itself and each of its sections are this. See
+ * {@link SettingsSource} for why settings cannot be an object schema, and
+ * {@link settings} for what a settings module holds.
+ *
+ * There is no `describe`, `validate`, `render` or `preview` on purpose: the
+ * shape is Val's, not the schema author's — `s.settings()` takes no arguments —
+ * and the Studio renders each section with a UI built for it.
+ */
+var SettingsSchema = /*#__PURE__*/function (_Schema) {
+  function SettingsSchema(items) {
+    var _this;
+    var opt = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : false;
+    var isReadonly = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
+    var isHidden = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+    var description = arguments.length > 4 ? arguments[4] : undefined;
+    _classCallCheck(this, SettingsSchema);
+    _this = _callSuper(this, SettingsSchema);
+    _this.items = items;
+    _this.opt = opt;
+    _this.isReadonly = isReadonly;
+    _this.isHidden = isHidden;
+    _this.description = description;
+    return _this;
+  }
+  _inherits(SettingsSchema, _Schema);
+  return _createClass(SettingsSchema, [{
+    key: "executeValidate",
+    value: function executeValidate(path, src) {
+      var error = false;
+      if (src === null || src === undefined) {
+        if (this.opt) {
+          return false;
+        }
+        return _defineProperty({}, path, [{
+          message: "Expected 'object', got '".concat(src, "'")
+        }]);
+      }
+      if (_typeof(src) !== "object") {
+        return _defineProperty({}, path, [{
+          message: "Expected 'object', got '".concat(_typeof(src), "'")
+        }]);
+      }
+      if (Array.isArray(src)) {
+        return _defineProperty({}, path, [{
+          message: "Expected 'object', got 'array'"
+        }]);
+      }
+      for (var _i = 0, _Object$entries = Object.entries(this.items); _i < _Object$entries.length; _i++) {
+        var _Object$entries$_i = _slicedToArray(_Object$entries[_i], 2),
+          _key = _Object$entries$_i[0],
+          schema = _Object$entries$_i[1];
+        // Absent is the unset value, so there is nothing to validate. A key that
+        // is present as `undefined` is the same statement written differently.
+        if (src[_key] === undefined) {
+          continue;
+        }
+        var subPath = createValPathOfItem(path, _key);
+        if (!subPath) {
+          error = this.appendValidationError(error, path, "Internal error: could not create path at ".concat(!path && typeof path === "string" ? "<empty string>" : path, " at key ").concat(_key),
+          // Should! never happen
+          src);
+        } else {
+          var subError = schema["executeValidate"](subPath, src[_key]);
+          error = this.mergeValidationErrors(error, subError);
+        }
+      }
+      // An unknown key is reported rather than ignored (which is what an object
+      // schema does with extra keys): the shape is closed and Val-defined, so the
+      // realistic cause is a typo — `toneOfVoice` for `tone` — and silence there
+      // means a setting that never takes effect and never says why.
+      for (var _i2 = 0, _Object$keys = Object.keys(src); _i2 < _Object$keys.length; _i2++) {
+        var _key2 = _Object$keys[_i2];
+        if (!(_key2 in this.items)) {
+          error = this.appendValidationError(error, path, "Unknown settings key: '".concat(_key2, "'. Expected one of: ").concat(Object.keys(this.items).map(function (key) {
+            return "'".concat(key, "'");
+          }).join(", ")), src, true);
+        }
+      }
+      return error;
+    }
+  }, {
+    key: "executeAssert",
+    value: function executeAssert(path, src) {
+      if (this.opt && src === null) {
+        return {
+          success: true,
+          data: src
+        };
+      }
+      var typeError = function typeError(got) {
+        return {
+          message: "Expected 'object', got '".concat(got, "'"),
+          typeError: true
+        };
+      };
+      if (src === null) {
+        return {
+          success: false,
+          errors: _defineProperty({}, path, [typeError("null")])
+        };
+      }
+      if (_typeof(src) !== "object") {
+        return {
+          success: false,
+          errors: _defineProperty({}, path, [typeError(_typeof(src))])
+        };
+      }
+      if (Array.isArray(src)) {
+        return {
+          success: false,
+          errors: _defineProperty({}, path, [typeError("array")])
+        };
+      }
+      // No per-key check, unlike an object schema: every key is optional, so an
+      // object is all this can assert.
+      return {
+        success: true,
+        data: src
+      };
+    }
+  }, {
+    key: "nullable",
+    value: function nullable() {
+      return new SettingsSchema(this.items, true, this.isReadonly, this.isHidden, this.description);
+    }
+  }, {
+    key: "readonly",
+    value: function readonly() {
+      return new SettingsSchema(this.items, this.opt, true, this.isHidden, this.description);
+    }
+  }, {
+    key: "hidden",
+    value: function hidden() {
+      return new SettingsSchema(this.items, this.opt, this.isReadonly, true, this.description);
+    }
+  }, {
+    key: "executeCustomValidateAt",
+    value: function executeCustomValidateAt() {
+      // Settings declares no `validate`, so there are no custom validators to
+      // run. Implemented rather than inherited because the base class makes this
+      // abstract on purpose — see `Schema.executeCustomValidateAt`.
+      return [];
+    }
+  }, {
+    key: "executeSerialize",
+    value: function executeSerialize() {
+      return {
+        type: "settings",
+        items: Object.fromEntries(Object.entries(this.items).map(function (_ref4) {
+          var _ref5 = _slicedToArray(_ref4, 2),
+            key = _ref5[0],
+            schema = _ref5[1];
+          return [key, schema["executeSerialize"]()];
+        })),
+        opt: this.opt,
+        readonly: this.isReadonly,
+        hidden: this.isHidden,
+        description: this.description
+      };
+    }
+  }, {
+    key: "executePreview",
+    value: function executePreview(sourcePath, src, scope) {
+      var res = {};
+      if (src === null) {
+        return res;
+      }
+      for (var _key3 in this.items) {
+        var itemSrc = src[_key3];
+        if (itemSrc === null || itemSrc === undefined) {
+          continue;
+        }
+        var subPath = unsafeCreateSourcePath(sourcePath, _key3);
+        if (scope !== undefined && !scope.wantsUnder(subPath)) {
+          continue;
+        }
+        var itemResult = this.items[_key3]["executePreview"](subPath, itemSrc, scope);
+        for (var keyS in itemResult) {
+          var _key4 = keyS;
+          res[_key4] = itemResult[_key4];
+        }
+      }
+      return res;
+    }
+  }]);
+}(Schema);
+
+/**
+ * Define the project's settings.
+ *
+ * One settings module per project, at the root of the content tree — a module
+ * file path with no directory segment, `/settings.val.ts` by convention:
+ *
+ * ```typescript
+ * export default c.define("/settings.val.ts", s.settings(), {});
+ * ```
+ *
+ * Every section is optional, so `{}` is a complete settings module and stays
+ * one as sections are added. Fill in what the project needs:
+ *
+ * ```typescript
+ * export default c.define("/settings.val.ts", s.settings(), {
+ *   assistant: {
+ *     enabled: true,
+ *     context: "Val is a CMS for developers. British English, and 'Val' is never 'VAL'.",
+ *     tone: "Plain and direct. No exclamation marks, sentence case in headings.",
+ *   },
+ * });
+ * ```
+ *
+ * The Studio edits it under the cog at the foot of the left rail, and the
+ * assistant is told `assistant.context` and `assistant.tone` on every message.
+ *
+ * `s.settings()` takes no arguments: the shape is Val's, which is what lets the
+ * Studio render a UI built for each field rather than a generic form. A
+ * project's own global content — a site name, social links — belongs in a
+ * module of its own.
+ */
+function settings() {
+  return new SettingsSchema({
+    assistant: new SettingsSchema({
+      enabled: _boolean().nullable().describe("Whether editors have an assistant in this project. Unset means nobody has decided: it is offered, and turned on when someone accepts."),
+      context: string().multiline().maxLength(ASSISTANT_SETTINGS_MAX_LENGTH).nullable().describe("Background the assistant would otherwise have to guess: what this site is, who runs it, names and spellings that matter."),
+      tone: string().multiline().maxLength(ASSISTANT_SETTINGS_MAX_LENGTH).nullable().describe("How the assistant should write when it writes content: formal or playful, British or American, how headings are cased.")
+    })
+  });
+}
+
+/**
+ * What may be WRITTEN as an external record's source, on top of the marker.
+ *
+ * Entries inline in the `.val.ts` are accepted on purpose — the same call
+ * `.jsonValues()` makes for the same reason: pasting content straight into the
+ * module is the natural first thing to write, and a type error there is a dead
+ * end, because the author cannot see what to write instead. Validation reports
+ * them as an `external:upload` fix, and they are readable at runtime meanwhile.
+ *
+ * Widened HERE rather than in the schema's own source type so that the MODULE
+ * stays typed on the marker alone. An adapter is bound to a module, and a module
+ * whose type were "marker or plain record" would be indistinguishable from an
+ * ordinary record — which would let `entry()` accept a module that is not
+ * external at all.
+ */
+
+function define(id,
+// TODO: `/${string}`
+schema, source) {
+  return _defineProperty(_defineProperty(_defineProperty({}, GetSource, source), GetSchema, schema), Path, id);
+}
+function getSource(valModule) {
+  return valModule[GetSource];
+}
+
+/**
+ * Whether `value` is a Val module, i.e. something {@link define} produced.
+ *
+ * Checks for the three symbols `define` writes, rather than a class identity:
+ * a module may have been created by a different copy of `@valbuild/core` (the
+ * editor SPA and the host bundle each ship their own, and the CLI evaluates
+ * user modules inside a `node:vm` context). The symbols are created with
+ * `Symbol.for`, so they are shared across all of those; a constructor is not.
+ */
+function isValModule(value) {
+  return _typeof(value) === "object" && value !== null && GetSource in value && GetSchema in value && Path in value;
+}
+function splitModuleFilePathAndModulePath(path) {
+  var pathOfSep = path.indexOf(ModuleFilePathSep);
+  if (pathOfSep === -1) {
+    return [path, ""];
+  }
+  return [path.slice(0, pathOfSep), path.slice(pathOfSep + ModuleFilePathSep.length)];
+}
+function joinModuleFilePathAndModulePath(moduleFilePath, modulePath) {
+  if (modulePath === "") {
+    return moduleFilePath;
+  }
+  return "".concat(moduleFilePath).concat(ModuleFilePathSep).concat(modulePath);
+}
+function isObjectSchema(schema) {
+  return schema instanceof ObjectSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "object";
+}
+
+/**
+ * Settings, which walks like an object but whose keys are all OPTIONAL.
+ *
+ * That difference is the whole reason it is not an object schema: descending
+ * into an unset section must resolve to `undefined`, not fail — see
+ * `SettingsSource`.
+ */
+function isSettingsSchema(schema) {
+  return schema instanceof SettingsSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "settings";
+}
+function isRecordSchema(schema) {
+  return schema instanceof RecordSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "record";
+}
+function isArraySchema(schema) {
+  return schema instanceof ArraySchema || _typeof(schema) === "object" && "type" in schema && schema.type === "array";
+}
+
+// function isI18nSchema(
+//   schema: Schema<SelectorSource> | SerializedSchema
+// ): schema is I18nSchema<readonly string[]> | SerializedI18nSchema {
+//   return (
+//     schema instanceof I18nSchema ||
+//     (typeof schema === "object" && "type" in schema && schema.type === "i18n")
+//   );
+// }
+
+function isUnionSchema(schema
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+) {
+  return schema instanceof UnionSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "union";
+}
+function isRichTextSchema(schema) {
+  return schema instanceof RichTextSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "richtext";
+}
+function isImageSchema(schema) {
+  return schema instanceof ImageSchema || _typeof(schema) === "object" && "type" in schema && schema.type === "image";
+}
+
+// function isOneOfSchema(
+//   schema: Schema<SelectorSource> | SerializedSchema
+// ): schema is OneOfSchema<GenericSelector<SourceArray>> | SerializedOneOfSchema {
+//   return (
+//     schema instanceof OneOfSchema ||
+//     (typeof schema === "object" && "type" in schema && schema.type === "oneOf")
+//   );
+// }
+
+function resolvePath(path, valModule, schema) {
+  var parts = splitModulePath(path);
+  var origParts = _toConsumableArray(parts);
+  var resolvedSchema = schema;
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  var resolvedSource = valModule;
+  var _loop = function _loop() {
+      var part = parts.shift();
+      if (part === undefined) {
+        throw Error("Unexpected undefined part");
+      }
+      if (isArraySchema(resolvedSchema)) {
+        var _resolvedSchema;
+        if (Number.isNaN(Number(part))) {
+          throw Error("Invalid path: array schema ".concat(JSON.stringify(resolvedSchema), " must have a number as path, but got ").concat(part, ". Path: ").concat(path));
+        }
+        if (_typeof(resolvedSource) !== "object" && !Array.isArray(resolvedSource)) {
+          throw Error("Schema type error: expected source to be type of array, but got ".concat(_typeof(resolvedSource)));
+        }
+        resolvedSource = resolvedSource[part];
+        resolvedSchema = resolvedSchema instanceof ArraySchema ? (_resolvedSchema = resolvedSchema) === null || _resolvedSchema === void 0 ? void 0 : _resolvedSchema["item"] : resolvedSchema.item;
+      } else if (isRecordSchema(resolvedSchema)) {
+        var _resolvedSchema2;
+        if (typeof part !== "string") {
+          throw Error("Invalid path: record schema ".concat(resolvedSchema, " must have path: ").concat(part, " as string"));
+        }
+        if (_typeof(resolvedSource) !== "object" && !Array.isArray(resolvedSource)) {
+          throw Error("Schema type error: expected source to be type of record, but got ".concat(_typeof(resolvedSource)));
+        }
+        if (!resolvedSource[part]) {
+          throw Error("Invalid path: record source did not have key ".concat(part, " from path: ").concat(path));
+        }
+        resolvedSource = resolvedSource[part];
+        resolvedSchema = resolvedSchema instanceof RecordSchema ? (_resolvedSchema2 = resolvedSchema) === null || _resolvedSchema2 === void 0 ? void 0 : _resolvedSchema2["item"] : resolvedSchema.item;
+        // A `.jsonValues()` entry value is a lazily-loaded JsonSource marker. We
+        // can resolve the entry itself (schema is now `item`), but we cannot
+        // descend deeper until the backing `*.val.json` content has been loaded
+        // and substituted into the source tree (done by the UI/server layer).
+        if (isJson(resolvedSource) && parts.length > 0) {
+          throw Error("Cannot resolve path into a jsonValues entry until its content is loaded. Path: ".concat(path));
+        }
+      } else if (isSettingsSchema(resolvedSchema)) {
+        if (resolvedSource !== null && resolvedSource !== undefined && _typeof(resolvedSource) !== "object") {
+          throw Error("Schema type error: expected source to be type of object, but got ".concat(_typeof(resolvedSource)));
+        }
+        // An absent key is NOT an error here, unlike an object's: every settings
+        // key is optional, so a path into a section the project has not set
+        // resolves to `undefined` — and keeps resolving, one level per part, so a
+        // path two deep into an unset section still lands on the right schema.
+        resolvedSource = resolvedSource === null || resolvedSource === undefined ? resolvedSource : resolvedSource[part];
+        resolvedSchema = resolvedSchema instanceof SettingsSchema ? resolvedSchema["items"][part] : resolvedSchema.items[part];
+      } else if (isObjectSchema(resolvedSchema)) {
+        if (_typeof(resolvedSource) !== "object") {
+          throw Error("Schema type error: expected source to be type of object, but got ".concat(_typeof(resolvedSource)));
+        }
+        if (resolvedSource !== null && resolvedSource[part] === undefined) {
+          throw Error("Invalid path: object source did not have key ".concat(part, " from path: ").concat(path));
+        }
+        resolvedSource = resolvedSource === null ? resolvedSource : resolvedSource[part];
+        resolvedSchema = resolvedSchema instanceof ObjectSchema ? resolvedSchema["items"][part] : resolvedSchema.items[part];
+        // } else if (isI18nSchema(resolvedSchema)) {
+        //   if (!resolvedSchema.locales.includes(part)) {
+        //     throw Error(
+        //       `Invalid path: i18n schema ${resolvedSchema} supports locales ${resolvedSchema.locales.join(
+        //         ", "
         //       )}, but found: ${part}`
         //     );
         //   }
@@ -5376,6 +6098,21 @@ function safeResolvePath(path, valModule, schema) {
             }
           };
         }
+      } else if (isSettingsSchema(resolvedSchema)) {
+        if (resolvedSource !== null && resolvedSource !== undefined && _typeof(resolvedSource) !== "object") {
+          return {
+            v: {
+              status: "error",
+              message: "Schema type error: expected source to be type of object, but got ".concat(_typeof(resolvedSource))
+            }
+          };
+        }
+        // Absent is a value here — see the note in `resolvePath`. `undefined` has
+        // to be let through as well as `null`: descending into a section the
+        // project has not set produces one, and the NEXT part then arrives with
+        // an undefined source that is not an error either.
+        resolvedSource = resolvedSource === null || resolvedSource === undefined ? resolvedSource : resolvedSource[part];
+        resolvedSchema = resolvedSchema instanceof SettingsSchema ? resolvedSchema["items"][part] : resolvedSchema.items[part];
       } else if (isObjectSchema(resolvedSchema)) {
         if (resolvedSource === undefined) {
           return {
@@ -5563,243 +6300,44 @@ function splitModulePath(input) {
   }
   return result;
 }
-function splitJoinedSourcePaths(input) {
-  // TODO: This is a very simple implementation that does not handle escaped commas
-  return input.split(",");
-}
-function parentOfSourcePath(sourcePath) {
-  var _splitModuleFilePathA = splitModuleFilePathAndModulePath(sourcePath),
-    _splitModuleFilePathA2 = _slicedToArray(_splitModuleFilePathA, 2),
-    moduleFilePath = _splitModuleFilePathA2[0],
-    modulePath = _splitModuleFilePathA2[1];
-  var modulePathParts = splitModulePath(modulePath).slice(0, -1);
-  if (modulePathParts.length > 0) {
-    return joinModuleFilePathAndModulePath(moduleFilePath, patchPathToModulePath(modulePathParts));
-  }
-  return moduleFilePath;
-}
-function patchPathToModulePath(patchPath) {
-  return patchPath.map(function (segment) {
-    // TODO: I am worried that something is lost here: what if the segment is a string that happens to be a parsable as a number? We could make those keys illegal?
-    if (Number.isInteger(Number(segment))) {
-      return segment;
-    }
-    return JSON.stringify(segment);
-  }).join(".");
-}
-
-var NumberSchema = /*#__PURE__*/function (_Schema) {
-  function NumberSchema(options) {
-    var _this;
-    var opt = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : false;
-    var customValidateFunctions = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : [];
-    var isReadonly = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-    var isHidden = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : false;
-    var description = arguments.length > 5 ? arguments[5] : undefined;
-    var renderInput = arguments.length > 6 && arguments[6] !== undefined ? arguments[6] : null;
-    var previewInput = arguments.length > 7 && arguments[7] !== undefined ? arguments[7] : null;
-    _classCallCheck(this, NumberSchema);
-    _this = _callSuper(this, NumberSchema);
-    _this.options = options;
-    _this.opt = opt;
-    _this.customValidateFunctions = customValidateFunctions;
-    _this.isReadonly = isReadonly;
-    _this.isHidden = isHidden;
-    _this.description = description;
-    _this.renderInput = renderInput;
-    _this.previewInput = previewInput;
-    return _this;
-  }
-  _inherits(NumberSchema, _Schema);
-  return _createClass(NumberSchema, [{
-    key: "describe",
-    value: function describe(description) {
-      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, description !== null && description !== void 0 ? description : undefined, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "validate",
-    value: function validate(validationFunction) {
-      return new NumberSchema(this.options, this.opt, [].concat(_toConsumableArray(this.customValidateFunctions), [validationFunction]), this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "executeValidate",
-    value: function executeValidate(path, src) {
-      var _this$options, _this$options2;
-      var customValidationErrors = this.executeCustomValidateFunctions(src, this.customValidateFunctions, {
-        path: path
-      });
-      if (this.opt && (src === null || src === undefined)) {
-        return customValidationErrors.length > 0 ? _defineProperty({}, path, customValidationErrors) : false;
-      }
-      if (typeof src !== "number") {
-        return _defineProperty({}, path, [].concat(_toConsumableArray(customValidationErrors), [{
-          message: "Expected 'number', got '".concat(_typeof(src), "'"),
-          value: src
-        }]));
-      }
-      if ((_this$options = this.options) !== null && _this$options !== void 0 && _this$options.max && src > this.options.max) {
-        return _defineProperty({}, path, [].concat(_toConsumableArray(customValidationErrors), [{
-          message: "Expected 'number' less than ".concat(this.options.max),
-          value: src
-        }]));
-      }
-      if ((_this$options2 = this.options) !== null && _this$options2 !== void 0 && _this$options2.min && src < this.options.min) {
-        return _defineProperty({}, path, [].concat(_toConsumableArray(customValidationErrors), [{
-          message: "Expected 'number' greater than ".concat(this.options.min),
-          value: src
-        }]));
-      }
-      if (customValidationErrors.length > 0) {
-        return _defineProperty({}, path, customValidationErrors);
-      }
-      return false;
-    }
-  }, {
-    key: "executeAssert",
-    value: function executeAssert(path, src) {
-      if (this.opt && src === null) {
-        return {
-          success: true,
-          data: src
-        };
-      }
-      if (src === null) {
-        return {
-          success: false,
-          errors: _defineProperty({}, path, [{
-            message: "Expected 'number', got 'null'",
-            typeError: true
-          }])
-        };
-      }
-      if (typeof src === "number") {
-        return {
-          success: true,
-          data: src
-        };
-      }
-      return {
-        success: false,
-        errors: _defineProperty({}, path, [{
-          message: "Expected 'number', got '".concat(_typeof(src), "'"),
-          typeError: true
-        }])
-      };
-    }
-  }, {
-    key: "nullable",
-    value: function nullable() {
-      return new NumberSchema(this.options, true, [], this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "readonly",
-    value: function readonly() {
-      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "hidden",
-    value: function hidden() {
-      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "max",
-    value: function max(_max) {
-      return new NumberSchema(_objectSpread2(_objectSpread2({}, this.options), {}, {
-        max: _max
-      }), this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "min",
-    value: function min(_min) {
-      return new NumberSchema(_objectSpread2(_objectSpread2({}, this.options), {}, {
-        min: _min
-      }), this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
-    }
-  }, {
-    key: "executeCustomValidateAt",
-    value: function executeCustomValidateAt(path, src) {
-      return this.executeCustomValidateFunctions(src, this.customValidateFunctions, {
-        path: path
-      });
-    }
-
-    /**
-     * How this field is laid out in the editor when it is the item of an array
-     * or record: `{ as: "inline" }` renders the field itself inside each row,
-     * instead of a preview row that navigates to it.
-     *
-     * Static configuration, not a callback — see `render.ts`.
-     */
-  }, {
-    key: "render",
-    value: function render(input) {
-      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, input, this.previewInput);
-    }
-
-    /**
-     * How this VALUE is shown where a preview of it is needed — a row in a
-     * sortable list, a reference dropdown, a search hit. Never how the field
-     * itself is edited (that is `render`). See `preview.ts`.
-     */
-  }, {
-    key: "preview",
-    value: function preview(select) {
-      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, select);
-    }
-  }, {
-    key: "executePreviewItem",
-    value: function executePreviewItem(src) {
-      if (this.previewInput === null) {
-        return null;
-      }
-      return this.previewInput({
-        val: src
-      });
-    }
-  }, {
-    key: "declaresItemPreview",
-    value: function declaresItemPreview() {
-      return this.previewInput !== null;
-    }
-  }, {
-    key: "executeSerialize",
-    value: function executeSerialize() {
-      var _this$renderInput, _this$customValidateF;
-      return {
-        type: "number",
-        render: (_this$renderInput = this.renderInput) !== null && _this$renderInput !== void 0 ? _this$renderInput : undefined,
-        preview: this.previewInput ? true : undefined,
-        options: this.options,
-        opt: this.opt,
-        customValidate: this.customValidateFunctions && ((_this$customValidateF = this.customValidateFunctions) === null || _this$customValidateF === void 0 ? void 0 : _this$customValidateF.length) > 0,
-        readonly: this.isReadonly,
-        hidden: this.isHidden,
-        description: this.description
-      };
-    }
-  }, {
-    key: "executePreview",
-    value: function executePreview() {
-      return {};
+function splitJoinedSourcePaths(input) {
+  // TODO: This is a very simple implementation that does not handle escaped commas
+  return input.split(",");
+}
+function parentOfSourcePath(sourcePath) {
+  var _splitModuleFilePathA = splitModuleFilePathAndModulePath(sourcePath),
+    _splitModuleFilePathA2 = _slicedToArray(_splitModuleFilePathA, 2),
+    moduleFilePath = _splitModuleFilePathA2[0],
+    modulePath = _splitModuleFilePathA2[1];
+  var modulePathParts = splitModulePath(modulePath).slice(0, -1);
+  if (modulePathParts.length > 0) {
+    return joinModuleFilePathAndModulePath(moduleFilePath, patchPathToModulePath(modulePathParts));
+  }
+  return moduleFilePath;
+}
+function patchPathToModulePath(patchPath) {
+  return patchPath.map(function (segment) {
+    // TODO: I am worried that something is lost here: what if the segment is a string that happens to be a parsable as a number? We could make those keys illegal?
+    if (Number.isInteger(Number(segment))) {
+      return segment;
     }
-  }]);
-}(Schema);
-var number = function number(options) {
-  return new NumberSchema(options);
-};
+    return JSON.stringify(segment);
+  }).join(".");
+}
 
-var BooleanSchema = /*#__PURE__*/function (_Schema) {
-  function BooleanSchema() {
+var NumberSchema = /*#__PURE__*/function (_Schema) {
+  function NumberSchema(options) {
     var _this;
-    var opt = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : false;
-    var customValidateFunctions = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : [];
-    var isReadonly = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : false;
-    var isHidden = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
-    var description = arguments.length > 4 ? arguments[4] : undefined;
-    var renderInput = arguments.length > 5 && arguments[5] !== undefined ? arguments[5] : null;
-    var previewInput = arguments.length > 6 && arguments[6] !== undefined ? arguments[6] : null;
-    _classCallCheck(this, BooleanSchema);
-    _this = _callSuper(this, BooleanSchema);
+    var opt = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : false;
+    var customValidateFunctions = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : [];
+    var isReadonly = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : false;
+    var isHidden = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : false;
+    var description = arguments.length > 5 ? arguments[5] : undefined;
+    var renderInput = arguments.length > 6 && arguments[6] !== undefined ? arguments[6] : null;
+    var previewInput = arguments.length > 7 && arguments[7] !== undefined ? arguments[7] : null;
+    _classCallCheck(this, NumberSchema);
+    _this = _callSuper(this, NumberSchema);
+    _this.options = options;
     _this.opt = opt;
     _this.customValidateFunctions = customValidateFunctions;
     _this.isReadonly = isReadonly;
@@ -5809,28 +6347,47 @@ var BooleanSchema = /*#__PURE__*/function (_Schema) {
     _this.previewInput = previewInput;
     return _this;
   }
-  _inherits(BooleanSchema, _Schema);
-  return _createClass(BooleanSchema, [{
+  _inherits(NumberSchema, _Schema);
+  return _createClass(NumberSchema, [{
     key: "describe",
     value: function describe(description) {
-      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, description !== null && description !== void 0 ? description : undefined, this.renderInput, this.previewInput);
+      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, description !== null && description !== void 0 ? description : undefined, this.renderInput, this.previewInput);
     }
   }, {
     key: "validate",
     value: function validate(validationFunction) {
-      return new BooleanSchema(this.opt, [].concat(_toConsumableArray(this.customValidateFunctions), [validationFunction]), this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
+      return new NumberSchema(this.options, this.opt, [].concat(_toConsumableArray(this.customValidateFunctions), [validationFunction]), this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeValidate",
     value: function executeValidate(path, src) {
+      var _this$options, _this$options2;
+      var customValidationErrors = this.executeCustomValidateFunctions(src, this.customValidateFunctions, {
+        path: path
+      });
       if (this.opt && (src === null || src === undefined)) {
-        return false;
+        return customValidationErrors.length > 0 ? _defineProperty({}, path, customValidationErrors) : false;
       }
-      if (typeof src !== "boolean") {
-        return _defineProperty({}, path, [{
-          message: "Expected 'boolean', got '".concat(_typeof(src), "'"),
+      if (typeof src !== "number") {
+        return _defineProperty({}, path, [].concat(_toConsumableArray(customValidationErrors), [{
+          message: "Expected 'number', got '".concat(_typeof(src), "'"),
           value: src
-        }]);
+        }]));
+      }
+      if ((_this$options = this.options) !== null && _this$options !== void 0 && _this$options.max && src > this.options.max) {
+        return _defineProperty({}, path, [].concat(_toConsumableArray(customValidationErrors), [{
+          message: "Expected 'number' less than ".concat(this.options.max),
+          value: src
+        }]));
+      }
+      if ((_this$options2 = this.options) !== null && _this$options2 !== void 0 && _this$options2.min && src < this.options.min) {
+        return _defineProperty({}, path, [].concat(_toConsumableArray(customValidationErrors), [{
+          message: "Expected 'number' greater than ".concat(this.options.min),
+          value: src
+        }]));
+      }
+      if (customValidationErrors.length > 0) {
+        return _defineProperty({}, path, customValidationErrors);
       }
       return false;
     }
@@ -5847,39 +6404,55 @@ var BooleanSchema = /*#__PURE__*/function (_Schema) {
         return {
           success: false,
           errors: _defineProperty({}, path, [{
-            message: "Expected 'boolean', got 'null'",
+            message: "Expected 'number', got 'null'",
             typeError: true
           }])
         };
       }
-      if (typeof src !== "boolean") {
+      if (typeof src === "number") {
         return {
-          success: false,
-          errors: _defineProperty({}, path, [{
-            message: "Expected 'boolean', got '".concat(_typeof(src), "'"),
-            typeError: true
-          }])
+          success: true,
+          data: src
         };
       }
       return {
-        success: true,
-        data: src
+        success: false,
+        errors: _defineProperty({}, path, [{
+          message: "Expected 'number', got '".concat(_typeof(src), "'"),
+          typeError: true
+        }])
       };
     }
   }, {
     key: "nullable",
     value: function nullable() {
-      return new BooleanSchema(true, [], this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
+      return new NumberSchema(this.options, true, [], this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "readonly",
     value: function readonly() {
-      return new BooleanSchema(this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "max",
+    value: function max(_max) {
+      return new NumberSchema(_objectSpread2(_objectSpread2({}, this.options), {}, {
+        max: _max
+      }), this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
+    }
+  }, {
+    key: "min",
+    value: function min(_min) {
+      return new NumberSchema(_objectSpread2(_objectSpread2({}, this.options), {}, {
+        min: _min
+      }), this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -5899,7 +6472,7 @@ var BooleanSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "render",
     value: function render(input) {
-      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, input, this.previewInput);
+      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, input, this.previewInput);
     }
 
     /**
@@ -5910,7 +6483,7 @@ var BooleanSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "preview",
     value: function preview(select) {
-      return new BooleanSchema(this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, select);
+      return new NumberSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, this.isHidden, this.description, this.renderInput, select);
     }
   }, {
     key: "executePreviewItem",
@@ -5932,9 +6505,10 @@ var BooleanSchema = /*#__PURE__*/function (_Schema) {
     value: function executeSerialize() {
       var _this$renderInput, _this$customValidateF;
       return {
-        type: "boolean",
+        type: "number",
         render: (_this$renderInput = this.renderInput) !== null && _this$renderInput !== void 0 ? _this$renderInput : undefined,
         preview: this.previewInput ? true : undefined,
+        options: this.options,
         opt: this.opt,
         customValidate: this.customValidateFunctions && ((_this$customValidateF = this.customValidateFunctions) === null || _this$customValidateF === void 0 ? void 0 : _this$customValidateF.length) > 0,
         readonly: this.isReadonly,
@@ -5949,8 +6523,8 @@ var BooleanSchema = /*#__PURE__*/function (_Schema) {
     }
   }]);
 }(Schema);
-var _boolean = function _boolean() {
-  return new BooleanSchema();
+var number = function number(options) {
+  return new NumberSchema(options);
 };
 
 var KeyOfSchema = /*#__PURE__*/function (_Schema) {
@@ -6120,12 +6694,14 @@ var KeyOfSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new KeyOfSchema(this.schema, this.sourcePath, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new KeyOfSchema(this.schema, this.sourcePath, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new KeyOfSchema(this.schema, this.sourcePath, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new KeyOfSchema(this.schema, this.sourcePath, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -6462,12 +7038,14 @@ var FileSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new FileSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new FileSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new FileSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new FileSchema(this.options, this.opt, this.isRemote, this.customValidateFunctions, this.moduleMetadata, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -6577,6 +7155,8 @@ function file(options) {
 /**
  * Define a collection of files.
  *
+ * Remote is off by default: call `.remote()` on the result to allow remote files.
+ *
  * @example
  * ```typescript
  * const schema = s.files({
@@ -6591,7 +7171,6 @@ function file(options) {
  * ```
  */
 var files = function files(options) {
-  var _options$remote;
   var directory = options.directory;
   var itemSchema = new ObjectSchema({
     mimeType: new StringSchema({}, false)
@@ -6600,7 +7179,7 @@ var files = function files(options) {
     type: "files",
     accept: options.accept,
     directory: directory,
-    remote: (_options$remote = options.remote) !== null && _options$remote !== void 0 ? _options$remote : false
+    remote: false
   });
 };
 
@@ -6741,12 +7320,14 @@ var DateSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new DateSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new DateSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new DateSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new DateSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -6990,12 +7571,14 @@ var DateTimeSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new DateTimeSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new DateTimeSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new DateTimeSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new DateTimeSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "executeCustomValidateAt",
@@ -7175,12 +7758,14 @@ var CodeSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new CodeSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new CodeSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new CodeSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new CodeSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
 
     /**
@@ -7861,12 +8446,14 @@ var ColorSchema = /*#__PURE__*/function (_Schema) {
   }, {
     key: "readonly",
     value: function readonly() {
-      return new ColorSchema(this.options, this.opt, this.customValidateFunctions, true, this.isHidden, this.description, this.renderInput, this.previewInput);
+      var isReadonly = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ColorSchema(this.options, this.opt, this.customValidateFunctions, isReadonly, this.isHidden, this.description, this.renderInput, this.previewInput);
     }
   }, {
     key: "hidden",
     value: function hidden() {
-      return new ColorSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, true, this.description, this.renderInput, this.previewInput);
+      var isHidden = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : true;
+      return new ColorSchema(this.options, this.opt, this.customValidateFunctions, this.isReadonly, isHidden, this.description, this.renderInput, this.previewInput);
     }
 
     /**
@@ -7960,7 +8547,7 @@ function router(router, keyOrItem, maybeItem) {
  *
  * `directory` is required — it decides where uploads land, so it is not something
  * to be inferred. The rest defaults: any image type (`"image/*"`), nullable alt
- * text, remote disabled.
+ * text, remote disabled. Call `.remote()` on the result to allow remote images.
  *
  * @example
  * ```typescript
@@ -7980,7 +8567,7 @@ function router(router, keyOrItem, maybeItem) {
  * ```
  */
 var images = function images(options) {
-  var _options$alt, _options$accept, _options$remote;
+  var _options$alt, _options$accept;
   var directory = options.directory;
   var altSchema = (_options$alt = options.alt) !== null && _options$alt !== void 0 ? _options$alt : string().nullable();
   var itemSchema = new ObjectSchema({
@@ -7993,7 +8580,7 @@ var images = function images(options) {
     type: "images",
     accept: (_options$accept = options.accept) !== null && _options$accept !== void 0 ? _options$accept : "image/*",
     directory: directory,
-    remote: (_options$remote = options.remote) !== null && _options$remote !== void 0 ? _options$remote : false,
+    remote: false,
     altSchema: altSchema,
     encode: options.encode
   });
@@ -8029,7 +8616,8 @@ function initSchema() {
     code: code,
     route: route,
     router: router,
-    images: images
+    images: images,
+    settings: settings
     // i18n: i18n(locales),
   };
 }
@@ -8070,7 +8658,8 @@ var initVal = function initVal(config) {
     },
     c: {
       define: define,
-      json: json
+      json: json,
+      external: external
     },
     s: s,
     config: config
@@ -8430,6 +9019,98 @@ var getSHA256Hash = function getSHA256Hash(bits) {
   return createHash().update(bits).digest("hex");
 };
 
+/**
+ * Where a settings module goes unless a project has a reason not to.
+ *
+ * A convention, not a rule: any module file path at the root of the content
+ * tree may hold `s.settings()` — see {@link resolveSettingsModule}.
+ */
+var SETTINGS_MODULE_CONVENTION = "/settings.val.ts";
+
+/**
+ * Whether a module file path is at the root of the content tree.
+ *
+ * `/settings.val.ts` is; `/content/settings.val.ts` is not. The settings module
+ * is the project's, not a folder's, and a project-wide setting found three
+ * directories down reads as one section's — so the position is part of what it
+ * means.
+ */
+function isRootModuleFilePath(moduleFilePath) {
+  return moduleFilePath.startsWith("/") && !moduleFilePath.slice(1).includes("/");
+}
+
+/**
+ * Structurally an `ExtractedModuleError`, declared here rather than imported to
+ * keep `extractValModules` -> `settingsModule` a one-way dependency.
+ */
+
+/**
+ * Find the project's settings module among all its schemas.
+ *
+ * One per project, at the root: a settings module in a subdirectory is an
+ * error, and so is a second one. Both are reported rather than resolved by
+ * picking a winner — a project with two settings modules has a question to
+ * answer, and answering it by sort order means the answer changes when a file
+ * is renamed.
+ */
+function resolveSettingsModule(schemas) {
+  var rootModules = [];
+  var nestedModules = [];
+  var _iterator = _createForOfIteratorHelper(Object.keys(schemas).sort()),
+    _step;
+  try {
+    for (_iterator.s(); !(_step = _iterator.n()).done;) {
+      var _schemas$_moduleFileP;
+      var moduleFilePathS = _step.value;
+      var _moduleFilePath2 = moduleFilePathS;
+      if (((_schemas$_moduleFileP = schemas[_moduleFilePath2]) === null || _schemas$_moduleFileP === void 0 ? void 0 : _schemas$_moduleFileP.type) !== "settings") {
+        continue;
+      }
+      if (isRootModuleFilePath(_moduleFilePath2)) {
+        rootModules.push(_moduleFilePath2);
+      } else {
+        nestedModules.push(_moduleFilePath2);
+      }
+    }
+  } catch (err) {
+    _iterator.e(err);
+  } finally {
+    _iterator.f();
+  }
+  var errors = [];
+  for (var _i = 0, _nestedModules = nestedModules; _i < _nestedModules.length; _i++) {
+    var moduleFilePath = _nestedModules[_i];
+    errors.push({
+      path: moduleFilePath,
+      message: "Settings must be defined at the root of the content tree, but s.settings() was found in '".concat(moduleFilePath, "'. Move it to a module file path with no directory in it, e.g. '").concat(SETTINGS_MODULE_CONVENTION, "'.")
+    });
+  }
+  if (rootModules.length > 1) {
+    var listed = rootModules.map(function (moduleFilePath) {
+      return "'".concat(moduleFilePath, "'");
+    }).join(" and ");
+    var _iterator2 = _createForOfIteratorHelper(rootModules),
+      _step2;
+    try {
+      for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+        var _moduleFilePath = _step2.value;
+        errors.push({
+          path: _moduleFilePath,
+          message: "A project can only define settings once, but s.settings() was found in ".concat(listed, ". Keep one of them.")
+        });
+      }
+    } catch (err) {
+      _iterator2.e(err);
+    } finally {
+      _iterator2.f();
+    }
+  }
+  return {
+    moduleFilePath: errors.length === 0 && rootModules.length === 1 ? rootModules[0] : null,
+    errors: errors
+  };
+}
+
 // Lazily constructed: this module is also evaluated inside the `vm` sandbox
 // used by loadValModules (when user val modules import @valbuild/core), and
 // that sandbox has no `TextEncoder` global. `hash()` is never called from
@@ -8597,7 +9278,7 @@ function extractValModules(_x) {
 }
 function _extractValModules() {
   _extractValModules = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(valModules) {
-    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, shaEntries, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _t, _t2;
+    var moduleErrors, addModuleError, sources, schemas, serializedSchemas, shaEntries, moduleIdx, module, at, value, path, schema, source, serializedSchema, pathM, _iterator2, _step2, error, _t, _t2;
     return _regenerator().w(function (_context) {
       while (1) switch (_context.p = _context.n) {
         case 0:
@@ -8736,6 +9417,25 @@ function _extractValModules() {
           _context.n = 1;
           break;
         case 18:
+          // Settings is the one rule that cannot be checked while looking at a single
+          // module: "one per project, at the root" is a statement about the whole set.
+          // Reported here so that every consumer of extraction gets it — the dev
+          // server, `val validate` and the Studio all read `moduleErrors`.
+          //
+          // Appended AFTER the loop on purpose: each entry's `moduleErrorsAt` is the
+          // error count at the time it was folded in, so the SHAs stay a function of
+          // the modules themselves.
+          _iterator2 = _createForOfIteratorHelper(resolveSettingsModule(serializedSchemas).errors);
+          try {
+            for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+              error = _step2.value;
+              moduleErrors.push(error);
+            }
+          } catch (err) {
+            _iterator2.e(err);
+          } finally {
+            _iterator2.f();
+          }
           return _context.a(2, _objectSpread2(_objectSpread2({
             sources: sources,
             schemas: schemas,
@@ -8756,9 +9456,10 @@ function _extractValModules() {
  * The one answer to that question. There used to be two — `hasRemoteFileSchema`
  * in the server, gating whether `/save` demands remote credentials, and
  * `findRequiredRemoteFiles` in the Studio, gating the `/remote/settings` fetch —
- * and they disagreed about `s.images({ remote: true })`: the Studio's counted a
- * remote media record, the server's did not, because a media collection
- * serializes as a `record` of metadata rather than as an image schema.
+ * and they disagreed about `s.images({ ... }).remote()`: the Studio's version
+ * counted a remote media record, the server's did not, because a media
+ * collection serializes as a `record` of metadata rather than as an image
+ * schema.
  *
  * The server's answer was the wrong one, and silently so. With it false,
  * `/save` runs `saveOrUploadFiles` in `skip-remote` mode, and that mode does not
@@ -8807,7 +9508,10 @@ function hasRemoteFileSchema(schema) {
       return true;
     }
     return hasRemoteFileSchema(schema.item);
-  } else if (schema.type === "object") {
+  } else if (schema.type === "object" || schema.type === "settings") {
+    // Settings holds its sections the way an object holds its keys, so looking
+    // inside is the same walk. Nothing in settings takes a file today, but the
+    // answer should stay right when something does.
     for (var key in schema.items) {
       var hasRemoteFile = hasRemoteFileSchema(schema.items[key]);
       if (hasRemoteFile) {
@@ -8848,6 +9552,85 @@ function hasRemoteFileSchema(schema) {
   }
 }
 
+/**
+ * Does this schema hold any media at all — remote or not?
+ *
+ * The sibling of {@link hasRemoteFileSchema}, and the same walk minus the
+ * `remote` predicate. It answers the question an external record has to ask
+ * before it will accept a binding: an item schema containing media needs a
+ * `putFile`/`getFile` pair, and without one that is a schema error.
+ *
+ * It is a walk over the SERIALIZED schema for the reasons given above, and for
+ * one more that is specific to this question: the two cases most likely to be
+ * missed are invisible to a value type. A media collection (`s.images()` /
+ * `s.files()`) serializes as a record of metadata with no image schema inside
+ * it, and a richtext inline image lives in a constructor argument. A check
+ * written against the item TYPE would silently pass both — and the gallery case
+ * already has a data-loss incident attached to it (see above).
+ */
+function hasMediaSchema(schema) {
+  if (schema.type === "file" || schema.type === "image") {
+    return true;
+  } else if (schema.type === "richtext") {
+    var _schema$options2;
+    // `img` is `boolean | SerializedImageSchema`: `true` means inline images are
+    // allowed with the DEFAULT image schema, and is just as much media as a
+    // spelled-out one. `hasRemoteFileSchema` tests only for an object because a
+    // default image is not remote — a different question with a different
+    // answer, which is why these two walks are separate functions.
+    if ((_schema$options2 = schema.options) !== null && _schema$options2 !== void 0 && _schema$options2.img) {
+      return true;
+    }
+    return false;
+  } else if (schema.type === "array") {
+    return hasMediaSchema(schema.item);
+  } else if (schema.type === "record") {
+    // A media collection names its file by the record's KEY, so there is no
+    // image schema inside to find: `mediaType` is where the answer is written.
+    if (schema.mediaType) {
+      return true;
+    }
+    return hasMediaSchema(schema.item);
+  } else if (schema.type === "object") {
+    for (var key in schema.items) {
+      if (hasMediaSchema(schema.items[key])) {
+        return true;
+      }
+    }
+    return false;
+  } else if (schema.type === "union") {
+    var unionObjectSchema = typeof schema.key === "string" ? schema : undefined;
+    if (unionObjectSchema) {
+      var _iterator2 = _createForOfIteratorHelper(unionObjectSchema.items),
+        _step2;
+      try {
+        for (_iterator2.s(); !(_step2 = _iterator2.n()).done;) {
+          var item = _step2.value;
+          if (hasMediaSchema(item)) {
+            return true;
+          }
+        }
+      } catch (err) {
+        _iterator2.e(err);
+      } finally {
+        _iterator2.f();
+      }
+    }
+    // A string union's items are literals, so there is nothing to look inside.
+    return false;
+  } else if (schema.type === "boolean" || schema.type === "number" || schema.type === "string" || schema.type === "literal" || schema.type === "date" || schema.type === "dateTime" || schema.type === "color" || schema.type === "code" || schema.type === "keyOf" || schema.type === "route" ||
+  // A settings module holds the assistant's configuration, not content, and
+  // nothing in it is media.
+  schema.type === "settings") {
+    return false;
+  } else {
+    // Same contract as above: adding a schema type without teaching this
+    // function about it must not compile.
+    var exhaustiveCheck = schema;
+    throw new Error("Unexpected schema: ".concat(JSON.stringify(exhaustiveCheck)));
+  }
+}
+
 var DEFAULT_VAL_REMOTE_HOST = "https://remote.val.build";
 
 var PatchError = /*#__PURE__*/_createClass(function PatchError(message) {
@@ -8992,6 +9775,79 @@ function mediaPathOf(value) {
   return typeof path === "string" ? path : null;
 }
 
+/**
+ * The reference stored for a file whose bytes live behind an external adapter.
+ *
+ * Deliberately the same shape of idea as a remote ref (`remote/splitRemoteRef`):
+ * a URL-ish string that **ends with the file's virtual path**, so the file's
+ * logical identity survives wherever its bytes happen to be.
+ *
+ *     /api/val/external/documents/f/{fileHash}/p/public/val/documents/report_a1b2c.pdf
+ *      \__________________________/ \________/   \_______________________________/
+ *              route + label          content        the path a LOCAL file
+ *                                     address        would have had
+ *
+ * Three things follow from that shape, and each is load-bearing:
+ *
+ * - **`media.ts` needs no change.** `isRemote` is `!path.startsWith("/public")`,
+ *   and this does not, so `Internal.mediaUrl` returns the ref as-is and Val's
+ *   route serves it. The media rule that has been got wrong repeatedly is left
+ *   exactly alone.
+ * - **Moving between storage modes is mechanical.** External → local reads the
+ *   `public/…` suffix back out, fetches the bytes and writes them there; local →
+ *   external uploads the file already at that path. Nothing is renamed.
+ * - **The filename is Val's, not the adapter's**, produced by the same
+ *   `createFilename` a local or remote file uses — so the same bytes get the
+ *   same name under all three storage modes.
+ */
+
+var RegEx = /^\/api\/val\/external\/([^/]+)\/f\/([^/]+)\/p\/(.+)$/;
+function createExternalFileRef(_ref) {
+  var label = _ref.label,
+    fileHash = _ref.fileHash,
+    filePath = _ref.filePath;
+  var withoutLeadingSlash = filePath.startsWith("/") ? filePath.slice(1) : filePath;
+  if (!withoutLeadingSlash.startsWith("public/")) {
+    throw new Error("External file paths must be under '/public', got: '".concat(filePath, "'"));
+  }
+  return "/api/val/external/".concat(label, "/f/").concat(fileHash, "/p/").concat(withoutLeadingSlash);
+}
+function splitExternalFileRef(ref) {
+  var match = ref.match(RegEx);
+  if (!match) {
+    return {
+      status: "error",
+      error: "Not an external file ref: " + ref
+    };
+  }
+  var filePath = match[3];
+  if (!filePath.startsWith("public/")) {
+    return {
+      status: "error",
+      error: "Invalid external file ref: " + ref
+    };
+  }
+  // Traversal check, for the same reason `splitRemoteRef` has one: this path is
+  // used to read and write files.
+  if (filePath.split("/").some(function (segment) {
+    return segment === "." || segment === "..";
+  })) {
+    return {
+      status: "error",
+      error: "Invalid external file ref: " + ref
+    };
+  }
+  return {
+    status: "success",
+    label: match[1],
+    fileHash: match[2],
+    filePath: filePath
+  };
+}
+function isExternalFileRef(ref) {
+  return RegEx.test(ref);
+}
+
 // NOTE: the segments must match the ref built by createRemoteRef below and the RegEx in splitRemoteRef.
 
 function createRemoteRef(remoteHost, _ref) {
@@ -9052,7 +9908,7 @@ function deserializeSchema(serialized) {
   return schema;
 }
 function deserializeSchemaImpl(serialized) {
-  var _serialized$options, _serialized$options2, _serialized$render, _serialized$multiline, _serialized$render2, _serialized$render3, _serialized$render4, _serialized$render5, _serialized$render6, _serialized$render7, _serialized$accept, _serialized$directory, _serialized$remote, _serialized$jsonValue, _serialized$render9, _serialized$render0, _serialized$render10, _serialized$render11, _serialized$render12, _serialized$render13, _serialized$render14, _serialized$render15;
+  var _serialized$options, _serialized$options2, _serialized$render, _serialized$multiline, _serialized$render2, _serialized$render3, _serialized$render4, _serialized$render5, _serialized$render6, _serialized$render7, _serialized$accept, _serialized$directory, _serialized$remote, _serialized$jsonValue, _serialized$render9, _serialized$external, _serialized$render0, _serialized$render10, _serialized$render11, _serialized$render12, _serialized$render13, _serialized$render14, _serialized$render15;
   switch (serialized.type) {
     case "string":
       return new StringSchema(_objectSpread2(_objectSpread2({}, serialized.options), {}, {
@@ -9075,6 +9931,13 @@ function deserializeSchemaImpl(serialized) {
           item = _ref2[1];
         return [key, deserializeSchema(item)];
       })), serialized.opt, [], false, false, serialized.description, (_serialized$render5 = serialized.render) !== null && _serialized$render5 !== void 0 ? _serialized$render5 : null);
+    case "settings":
+      return new SettingsSchema(Object.fromEntries(Object.entries(serialized.items).map(function (_ref3) {
+        var _ref4 = _slicedToArray(_ref3, 2),
+          key = _ref4[0],
+          item = _ref4[1];
+        return [key, deserializeSchema(item)];
+      })), serialized.opt, false, false, serialized.description);
     case "array":
       return new ArraySchema(deserializeSchema(serialized.item), serialized.opt, [], false, false, serialized.description,
       // The preview closure cannot survive serialization; the render can.
@@ -9106,7 +9969,10 @@ function deserializeSchemaImpl(serialized) {
         altSchema: serialized.alt ? deserializeSchema(serialized.alt) : undefined
       } : undefined, false, false, serialized.description, (_serialized$jsonValue = serialized.jsonValues) !== null && _serialized$jsonValue !== void 0 ? _serialized$jsonValue : false,
       // The preview closure cannot survive serialization; the render can.
-      null, (_serialized$render9 = serialized.render) !== null && _serialized$render9 !== void 0 ? _serialized$render9 : null);
+      null, (_serialized$render9 = serialized.render) !== null && _serialized$render9 !== void 0 ? _serialized$render9 : null, // The external label is static data, so it survives serialization and
+      // must be carried back: a deserialized schema that forgot it would walk
+      // an external record as if its entries were local.
+      (_serialized$external = serialized.external) !== null && _serialized$external !== void 0 ? _serialized$external : null);
     case "keyOf":
       return new KeyOfSchema(serialized.schema, serialized.path, serialized.opt, [], false, false, serialized.description, (_serialized$render0 = serialized.render) !== null && _serialized$render0 !== void 0 ? _serialized$render0 : null);
     case "route":
@@ -9668,6 +10534,11 @@ var Internal = {
   isJson: isJson,
   getJsonImport: getJsonImport,
   resolveJsonValues: resolveJsonValues,
+  isExternal: isExternal,
+  hasInlineExternalEntries: hasInlineExternalEntries,
+  createExternalFileRef: createExternalFileRef,
+  splitExternalFileRef: splitExternalFileRef,
+  isExternalFileRef: isExternalFileRef,
   createValPathOfItem: createValPathOfItem,
   getSHA256Hash: getSHA256Hash,
   initSchema: initSchema,
@@ -9732,4 +10603,4 @@ function tryJsonParse(str) {
   }
 }
 
-export { ArraySchema as A, BooleanSchema as B, ColorSchema as C, DEFAULT_CONTENT_HOST as D, isInlineRender as E, FATAL_ERROR_TYPES as F, GenericSelector as G, getSourcePathFromRoute as H, Internal as I, KeyOfSchema as K, LiteralSchema as L, ModuleFilePathSep as M, NumberSchema as N, ObjectSchema as O, PatchError as P, RecordSchema as R, Schema as S, UnionSchema as U, VAL_EXTENSION as V, _typeof as _, _slicedToArray as a, _createClass as b, _classCallCheck as c, _toConsumableArray as d, DEFAULT_APP_HOST as e, extractValModules as f, computeValModuleShas as g, hasRemoteFileSchema as h, initVal as i, DEFAULT_VAL_REMOTE_HOST as j, derefPatch as k, StringSchema as l, modules as m, ImageSchema as n, FileSchema as o, DateSchema as p, CodeSchema as q, CODE_LANGUAGES as r, splitModuleFilePathAndModulePath as s, COLOR_FORMATS as t, DEFAULT_COLOR_FORMAT as u, DateTimeSchema as v, RouteSchema as w, RichTextSchema as x, deserializeSchema as y, previewScope as z };
+export { ArraySchema as A, BooleanSchema as B, ColorSchema as C, DEFAULT_CONTENT_HOST as D, COLOR_FORMATS as E, FATAL_ERROR_TYPES as F, GenericSelector as G, DEFAULT_COLOR_FORMAT as H, Internal as I, DateTimeSchema as J, KeyOfSchema as K, RouteSchema as L, ModuleFilePathSep as M, NumberSchema as N, ObjectSchema as O, PatchError as P, RichTextSchema as Q, RecordSchema as R, Schema as S, LiteralSchema as T, UnionSchema as U, VAL_EXTENSION as V, deserializeSchema as W, previewScope as X, isInlineRender as Y, getSourcePathFromRoute as Z, _typeof as _, _slicedToArray as a, _createClass as b, _classCallCheck as c, _toConsumableArray as d, DEFAULT_APP_HOST as e, extractValModules as f, computeValModuleShas as g, hasRemoteFileSchema as h, initVal as i, hasMediaSchema as j, DEFAULT_VAL_REMOTE_HOST as k, derefPatch as l, modules as m, StringSchema as n, ImageSchema as o, FileSchema as p, DateSchema as q, SettingsSchema as r, splitModuleFilePathAndModulePath as s, ASSISTANT_SETTINGS_MAX_LENGTH as t, assistantAvailability as u, SETTINGS_MODULE_CONVENTION as v, isRootModuleFilePath as w, resolveSettingsModule as x, CodeSchema as y, CODE_LANGUAGES as z };