@valbuild/server 0.136.1 → 0.136.3

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @valbuild/server
 
+## 0.136.3
+
+### Patch Changes
+
+- [#726](https://github.com/valbuild/val/pull/726) [`3b19534`](https://github.com/valbuild/val/commit/3b19534bb7aa16452a104906d9594083c3bc3e89) Thanks [@freekh](https://github.com/freekh)! - A Studio publish of a project with no repository now ships every edit that was saved, and keeps the site styled.
+
+  - A host that embeds the project's source can hand it to Val as `projectSource` (`initValServer(..., { http: { projectSource } })`). A publish then patches that text, not text fetched from the content service at a commit, which a project with no repository does not have. The build platform's wiring passes the build's own source, so `.val.ts` can be rendered for a project made on `/new`. Before, its first save produced no files, and the build that followed carried none of the save's edits.
+  - New route `GET /api/val/built-source`: the `.val.ts` text of every module changed since the running build, with every commit since it applied. The Studio builds from it, so an edit whose own publish failed, and a Finish publishing, are no longer left out of the next build.
+  - A Studio build that compiles no stylesheet (a browser cannot run Tailwind `@plugin`s) keeps the live site's. A Studio save never changes a stylesheet or a component, so the live CSS is still the right one.
+
+- Updated dependencies [[`38d24f7`](https://github.com/valbuild/val/commit/38d24f723639ee109d1007854507c4571bc82575), [`3b19534`](https://github.com/valbuild/val/commit/3b19534bb7aa16452a104906d9594083c3bc3e89), [`fa28164`](https://github.com/valbuild/val/commit/fa28164dfd1e05ff53eccf375334741d857fd2ef)]:
+  - @valbuild/ui@0.136.3
+  - @valbuild/shared@0.136.3
+
+## 0.136.2
+
+### Patch Changes
+
+- [#720](https://github.com/valbuild/val/pull/720) [`f76cd56`](https://github.com/valbuild/val/commit/f76cd56b9f1c1bcc0a608a7a4de24b1e776adccb) Thanks [@freekh](https://github.com/freekh)! - A managed project published from the Studio keeps its images, and a project created from a template can publish from the Studio at all.
+
+  - A publish from the Studio carries over every file under `public/` that the site already serves, so the favicon and images no longer disappear after the first Studio publish. When content published the live build, it already holds those files and nothing is uploaded again. When it didn't (a project cloned from a template), the Studio reads them from the site it runs on and builds with them.
+  - An image uploaded in the Studio is now part of the build that publishes it. For a managed project, `/save` returns the files the commit wrote (`binaryFiles`), the same way it already returns the `.val.ts` text.
+  - `/save` also returns the project's branch for a managed project, and the Studio's build uses it. A project cloned from a template was wired at no commit and no branch, so its first Studio publish went out branchless and the platform refused it.
+  - When neither content nor the platform can say which public files the live site serves, the Studio refuses to publish and says so, rather than publishing a site without them.
+
+- Updated dependencies [[`f76cd56`](https://github.com/valbuild/val/commit/f76cd56b9f1c1bcc0a608a7a4de24b1e776adccb)]:
+  - @valbuild/ui@0.136.2
+  - @valbuild/shared@0.136.2
+
 ## 0.136.1
 
 ### Patch Changes

package/dist/declarations/src/ValOps.d.ts

@@ -433,6 +433,18 @@ export declare abstract class ValOps {
      * an older service.
      */
     sourceMode(): "managed" | "connected" | null;
+    /**
+     * The branch the content service keeps this project's commits on, or `null`
+     * where there is no such service, or it has not said yet.
+     *
+     * For the Studio's in-tab build of a managed project, which has to name the
+     * branch its build was made at. Its other source is the `val.server.ts` the
+     * last build was wired with -- and a project cloned from a template seed has
+     * one wired at NO commit and no branch, so its first publish went out
+     * branchless and the loader refused it for a project whose pointer follows a
+     * branch. This is the project's own word for it.
+     */
+    projectBranch(): string | null;
     /**
      * Forward one call to the content service's publish API, as this project.
      *

package/dist/declarations/src/ValOpsHttp.d.ts

@@ -52,6 +52,19 @@ export declare class ValOpsHttp extends ValOps {
      * initialiser runs before the constructor body has assigned it.
      */
     protected readonly mirrorsSourceFiles: boolean;
+    /**
+     * The running build's own source, when the host embedded it.
+     *
+     * Preferred over the content service for the `.val.ts` text a publish
+     * patches, for two reasons. It is exactly the text this build was made from,
+     * which is what the patches in its chain were written against. And it is the
+     * only copy there is for a project with no repository: the content service
+     * keeps a managed project's content as Source, not as files, and answers a
+     * file read for one with "no GitHub repo".
+     */
+    private readonly projectSource;
+    /** Did the host hand over the running build's source? See `projectSource`. */
+    embedsSource(): boolean;
     /**
      * What the content service last said this project expects of its publisher.
      *
@@ -102,6 +115,8 @@ export declare class ValOpsHttp extends ValOps {
          * the root would be /apps/my-app
          */
         root?: string;
+        /** See `projectSource` on {@link ValApiOptions}. */
+        projectSource?: Record<string, string>;
     });
     /**
      * A deployment that cannot mirror a project which expects to be mirrored.
@@ -141,6 +156,8 @@ export declare class ValOpsHttp extends ValOps {
      * has just arrived.
      */
     sourceMode(): "managed" | "connected" | null;
+    /** Remembered with {@link sourceMode}, from the same response. */
+    projectBranch(): string | null;
     /**
      * The short-lived publish token, and when it stops being usable.
      *

package/dist/declarations/src/ValRouter.d.ts

@@ -128,6 +128,18 @@ type ValServerOverrides = Partial<{
      * @example "main"
      */
     gitBranch?: string;
+    /**
+     * The project's own source files, by path with no leading slash, as the
+     * RUNNING build was made from them.
+     *
+     * Where a publish reads the `.val.ts` text it patches. Without it that text
+     * is fetched from the content service at {@link gitCommit}, which only a
+     * project with a repository has -- so a project whose content service is the
+     * store of record could not produce `.val.ts` at all, and a build made after
+     * a save carried none of the save's edits. A host that builds the project
+     * itself embeds its source in the build and hands it over here.
+     */
+    projectSource?: Record<string, string>;
     /**
      * The base url of Val.
      *

package/dist/declarations/src/ValServer.d.ts

@@ -133,6 +133,8 @@ export type ValServerConfig = ValServerOptions & ({
         branch: string;
     };
     root?: string;
+    /** See `projectSource` on {@link ValApiOptions}. */
+    projectSource?: Record<string, string>;
     config: ValConfig;
 }
 /**

package/dist/valbuild-server.cjs.dev.js

@@ -4595,6 +4595,21 @@ class ValOps {
     return null;
   }
 
+  /**
+   * The branch the content service keeps this project's commits on, or `null`
+   * where there is no such service, or it has not said yet.
+   *
+   * For the Studio's in-tab build of a managed project, which has to name the
+   * branch its build was made at. Its other source is the `val.server.ts` the
+   * last build was wired with -- and a project cloned from a template seed has
+   * one wired at NO commit and no branch, so its first publish went out
+   * branchless and the loader refused it for a project whose pointer follows a
+   * branch. This is the project's own word for it.
+   */
+  projectBranch() {
+    return null;
+  }
+
   /**
    * Forward one call to the content service's publish API, as this project.
    *
@@ -7519,6 +7534,42 @@ class FSOpsHost {
   }
 }
 
+/**
+ * The bytes of the local binary files a commit is about to write, base64.
+ *
+ * For the Studio's in-tab build of a managed project, which publishes the site:
+ * an image uploaded in this save is in no earlier build, so unless the build
+ * is given it the published page links a file that 404s. Remote files are left
+ * out -- they are served from their own URL and never were part of a build.
+ *
+ * A file that cannot be read is NAMED rather than dropped, and does not stop
+ * the save: the commit is what makes an edit durable, and the build is the
+ * step that can refuse.
+ *
+ * Read BEFORE the commit, because after it the files are no longer the
+ * patch's to read. Generic over the patch id so it asks for exactly the one
+ * method it uses, and a test can hand it a plain object.
+ */
+async function readCommittedBinaryFiles(ops, descriptors) {
+  const files = {};
+  const unread = [];
+  await Promise.all(Object.entries(descriptors).map(async ([filePath, {
+    patchId,
+    remote
+  }]) => {
+    if (remote) return;
+    const bytes = await ops.getBase64EncodedBinaryFileFromPatch(filePath, patchId, remote).catch(error => {
+      console.error("Could not read a committed file", filePath, error);
+      return null;
+    });
+    if (bytes === null) unread.push(filePath);else files[filePath] = bytes.toString("base64");
+  }));
+  return {
+    files,
+    unread: unread.sort()
+  };
+}
+
 /**
  * Which unpublished changes a failed save has to throw away to make progress.
  *
@@ -7897,6 +7948,22 @@ class ValOpsHttp extends ValOps {
    * initialiser runs before the constructor body has assigned it.
    */
   mirrorsSourceFiles;
+  /**
+   * The running build's own source, when the host embedded it.
+   *
+   * Preferred over the content service for the `.val.ts` text a publish
+   * patches, for two reasons. It is exactly the text this build was made from,
+   * which is what the patches in its chain were written against. And it is the
+   * only copy there is for a project with no repository: the content service
+   * keeps a managed project's content as Source, not as files, and answers a
+   * file read for one with "no GitHub repo".
+   */
+  projectSource;
+
+  /** Did the host hand over the running build's source? See `projectSource`. */
+  embedsSource() {
+    return this.projectSource !== null;
+  }
   /**
    * What the content service last said this project expects of its publisher.
    *
@@ -7944,7 +8011,8 @@ class ValOpsHttp extends ValOps {
       Authorization: `Bearer ${auth.apiKey}`
     };
     this.root = (options === null || options === void 0 ? void 0 : options.root) ?? "";
-    this.mirrorsSourceFiles = git !== null;
+    this.projectSource = (options === null || options === void 0 ? void 0 : options.projectSource) ?? null;
+    this.mirrorsSourceFiles = git !== null || this.projectSource !== null;
   }
   /**
    * A deployment that cannot mirror a project which expects to be mirrored.
@@ -8001,6 +8069,12 @@ class ValOpsHttp extends ValOps {
     return ((_this$projectExpectat2 = this.projectExpectation) === null || _this$projectExpectat2 === void 0 ? void 0 : _this$projectExpectat2.sourceMode) ?? null;
   }
 
+  /** Remembered with {@link sourceMode}, from the same response. */
+  projectBranch() {
+    var _this$projectExpectat3;
+    return ((_this$projectExpectat3 = this.projectExpectation) === null || _this$projectExpectat3 === void 0 ? void 0 : _this$projectExpectat3.branch) ?? null;
+  }
+
   /**
    * The short-lived publish token, and when it stops being usable.
    *
@@ -9124,6 +9198,19 @@ class ValOpsHttp extends ValOps {
     });
   }
   async getSourceFile(path) {
+    if (this.projectSource !== null) {
+      const text = this.projectSource[path.replace(/^\/+/, "")];
+      if (text === undefined) {
+        return {
+          error: {
+            message: `Cannot read the source of ${path}: it is not in the source this build was made from.`
+          }
+        };
+      }
+      return {
+        data: text
+      };
+    }
     /*
      * There is no file to read without a repository to read it from.
      *
@@ -11253,6 +11340,9 @@ async function initHandlerOptions(route, opts, config) {
         }
       } : {}),
       root: opts.root,
+      ...(opts.projectSource !== undefined ? {
+        projectSource: opts.projectSource
+      } : {}),
       project: maybeValProject,
       valEnableRedirectUrl,
       valDisableRedirectUrl,
@@ -11319,7 +11409,10 @@ function createValOps(valModules, options) {
     }, valModules, {
       formatter: options.formatter,
       root: options.root,
-      config: options.config
+      config: options.config,
+      ...(options.projectSource !== undefined ? {
+        projectSource: options.projectSource
+      } : {})
     });
   }
   if (options.mode === "memory") {
@@ -13312,6 +13405,71 @@ const ValServer = (valModules, options, callbacks) => {
         return res;
       }
     },
+    "/built-source": {
+      GET: async req => {
+        const auth = getAuth(req.cookies);
+        if (auth.error) {
+          return {
+            status: 401,
+            json: {
+              message: auth.error
+            }
+          };
+        }
+        if (!(serverOps instanceof ValOpsHttp) || !serverOps.embedsSource()) {
+          return {
+            status: 409,
+            json: {
+              message: "This server has no source of its own to render commits into."
+            }
+          };
+        }
+        const chain = await serverOps.fetchPatches({
+          patchIds: undefined,
+          excludePatchOps: false
+        });
+        if (chain.error) {
+          return {
+            status: 500,
+            json: {
+              message: chain.error.message
+            }
+          };
+        }
+        /*
+         * The patches committed SINCE this build, as though pending.
+         *
+         * `applicable/patches` answers with the ones applied at a commit after
+         * the one this build was made from, which is exactly what the text
+         * embedded in it is missing. `analyzePatches` skips applied patches --
+         * for a save they are already in the file it reads -- so they are
+         * handed over unapplied: here the file predates them.
+         */
+        const committed = chain.patches.filter(patch => patch.appliedAt !== null).map(patch => ({
+          ...patch,
+          appliedAt: null
+        }));
+        const prepared = await serverOps.prepare({
+          ...serverOps.analyzePatches(committed, chain.commits, commit),
+          ...chain,
+          patches: committed
+        });
+        if (prepared.hasErrors) {
+          return {
+            status: 500,
+            json: {
+              message: "The commits since this build could not be rendered into source: " + JSON.stringify(prepared.sourceFilePatchErrors).slice(0, 500)
+            }
+          };
+        }
+        return {
+          status: 200,
+          json: {
+            files: prepared.patchedSourceFiles
+          }
+        };
+      }
+    },
     "/profiles": {
       GET: async req => {
         const cookies = req.cookies;
@@ -13757,6 +13915,12 @@ const ValServer = (valModules, options, callbacks) => {
               }
             }
             const message = body.message || "Val CMS update (" + Object.keys(analysis.patchesByModule).length + " files changed)";
+            /*
+             * Before the commit, because after it the files are no longer the
+             * patch's to read. See `binaryFiles` on the route.
+             */
+            const managedBranch = serverOps.sourceMode() === "managed" ? serverOps.projectBranch() : null;
+            const committedBinaries = serverOps.sourceMode() === "managed" ? await readCommittedBinaryFiles(serverOps, preparedCommit.patchedBinaryFilesDescriptors) : null;
             const commitToGit = () => {
               var _options$config$files;
               return serverOps.commit(preparedCommit, message, auth.id, ((_options$config$files = options.config.files) === null || _options$config$files === void 0 ? void 0 : _options$config$files.directory) || "/public/val", undefined,
@@ -13823,6 +13987,15 @@ const ValServer = (valModules, options, callbacks) => {
                  */
                 ...(serverOps.sourceMode() === "managed" ? {
                   sourceFiles: preparedCommit.patchedSourceFiles
+                } : {}),
+                ...(managedBranch !== null ? {
+                  branch: managedBranch
+                } : {}),
+                ...(committedBinaries !== null ? {
+                  binaryFiles: committedBinaries.files,
+                  ...(committedBinaries.unread.length > 0 ? {
+                    binaryFilesUnread: committedBinaries.unread
+                  } : {})
                 } : {})
               }
             };

package/dist/valbuild-server.cjs.prod.js

@@ -4595,6 +4595,21 @@ class ValOps {
     return null;
   }
 
+  /**
+   * The branch the content service keeps this project's commits on, or `null`
+   * where there is no such service, or it has not said yet.
+   *
+   * For the Studio's in-tab build of a managed project, which has to name the
+   * branch its build was made at. Its other source is the `val.server.ts` the
+   * last build was wired with -- and a project cloned from a template seed has
+   * one wired at NO commit and no branch, so its first publish went out
+   * branchless and the loader refused it for a project whose pointer follows a
+   * branch. This is the project's own word for it.
+   */
+  projectBranch() {
+    return null;
+  }
+
   /**
    * Forward one call to the content service's publish API, as this project.
    *
@@ -7519,6 +7534,42 @@ class FSOpsHost {
   }
 }
 
+/**
+ * The bytes of the local binary files a commit is about to write, base64.
+ *
+ * For the Studio's in-tab build of a managed project, which publishes the site:
+ * an image uploaded in this save is in no earlier build, so unless the build
+ * is given it the published page links a file that 404s. Remote files are left
+ * out -- they are served from their own URL and never were part of a build.
+ *
+ * A file that cannot be read is NAMED rather than dropped, and does not stop
+ * the save: the commit is what makes an edit durable, and the build is the
+ * step that can refuse.
+ *
+ * Read BEFORE the commit, because after it the files are no longer the
+ * patch's to read. Generic over the patch id so it asks for exactly the one
+ * method it uses, and a test can hand it a plain object.
+ */
+async function readCommittedBinaryFiles(ops, descriptors) {
+  const files = {};
+  const unread = [];
+  await Promise.all(Object.entries(descriptors).map(async ([filePath, {
+    patchId,
+    remote
+  }]) => {
+    if (remote) return;
+    const bytes = await ops.getBase64EncodedBinaryFileFromPatch(filePath, patchId, remote).catch(error => {
+      console.error("Could not read a committed file", filePath, error);
+      return null;
+    });
+    if (bytes === null) unread.push(filePath);else files[filePath] = bytes.toString("base64");
+  }));
+  return {
+    files,
+    unread: unread.sort()
+  };
+}
+
 /**
  * Which unpublished changes a failed save has to throw away to make progress.
  *
@@ -7897,6 +7948,22 @@ class ValOpsHttp extends ValOps {
    * initialiser runs before the constructor body has assigned it.
    */
   mirrorsSourceFiles;
+  /**
+   * The running build's own source, when the host embedded it.
+   *
+   * Preferred over the content service for the `.val.ts` text a publish
+   * patches, for two reasons. It is exactly the text this build was made from,
+   * which is what the patches in its chain were written against. And it is the
+   * only copy there is for a project with no repository: the content service
+   * keeps a managed project's content as Source, not as files, and answers a
+   * file read for one with "no GitHub repo".
+   */
+  projectSource;
+
+  /** Did the host hand over the running build's source? See `projectSource`. */
+  embedsSource() {
+    return this.projectSource !== null;
+  }
   /**
    * What the content service last said this project expects of its publisher.
    *
@@ -7944,7 +8011,8 @@ class ValOpsHttp extends ValOps {
       Authorization: `Bearer ${auth.apiKey}`
     };
     this.root = (options === null || options === void 0 ? void 0 : options.root) ?? "";
-    this.mirrorsSourceFiles = git !== null;
+    this.projectSource = (options === null || options === void 0 ? void 0 : options.projectSource) ?? null;
+    this.mirrorsSourceFiles = git !== null || this.projectSource !== null;
   }
   /**
    * A deployment that cannot mirror a project which expects to be mirrored.
@@ -8001,6 +8069,12 @@ class ValOpsHttp extends ValOps {
     return ((_this$projectExpectat2 = this.projectExpectation) === null || _this$projectExpectat2 === void 0 ? void 0 : _this$projectExpectat2.sourceMode) ?? null;
   }
 
+  /** Remembered with {@link sourceMode}, from the same response. */
+  projectBranch() {
+    var _this$projectExpectat3;
+    return ((_this$projectExpectat3 = this.projectExpectation) === null || _this$projectExpectat3 === void 0 ? void 0 : _this$projectExpectat3.branch) ?? null;
+  }
+
   /**
    * The short-lived publish token, and when it stops being usable.
    *
@@ -9124,6 +9198,19 @@ class ValOpsHttp extends ValOps {
     });
   }
   async getSourceFile(path) {
+    if (this.projectSource !== null) {
+      const text = this.projectSource[path.replace(/^\/+/, "")];
+      if (text === undefined) {
+        return {
+          error: {
+            message: `Cannot read the source of ${path}: it is not in the source this build was made from.`
+          }
+        };
+      }
+      return {
+        data: text
+      };
+    }
     /*
      * There is no file to read without a repository to read it from.
      *
@@ -11253,6 +11340,9 @@ async function initHandlerOptions(route, opts, config) {
         }
       } : {}),
       root: opts.root,
+      ...(opts.projectSource !== undefined ? {
+        projectSource: opts.projectSource
+      } : {}),
       project: maybeValProject,
       valEnableRedirectUrl,
       valDisableRedirectUrl,
@@ -11319,7 +11409,10 @@ function createValOps(valModules, options) {
     }, valModules, {
       formatter: options.formatter,
       root: options.root,
-      config: options.config
+      config: options.config,
+      ...(options.projectSource !== undefined ? {
+        projectSource: options.projectSource
+      } : {})
     });
   }
   if (options.mode === "memory") {
@@ -13312,6 +13405,71 @@ const ValServer = (valModules, options, callbacks) => {
         return res;
       }
     },
+    "/built-source": {
+      GET: async req => {
+        const auth = getAuth(req.cookies);
+        if (auth.error) {
+          return {
+            status: 401,
+            json: {
+              message: auth.error
+            }
+          };
+        }
+        if (!(serverOps instanceof ValOpsHttp) || !serverOps.embedsSource()) {
+          return {
+            status: 409,
+            json: {
+              message: "This server has no source of its own to render commits into."
+            }
+          };
+        }
+        const chain = await serverOps.fetchPatches({
+          patchIds: undefined,
+          excludePatchOps: false
+        });
+        if (chain.error) {
+          return {
+            status: 500,
+            json: {
+              message: chain.error.message
+            }
+          };
+        }
+        /*
+         * The patches committed SINCE this build, as though pending.
+         *
+         * `applicable/patches` answers with the ones applied at a commit after
+         * the one this build was made from, which is exactly what the text
+         * embedded in it is missing. `analyzePatches` skips applied patches --
+         * for a save they are already in the file it reads -- so they are
+         * handed over unapplied: here the file predates them.
+         */
+        const committed = chain.patches.filter(patch => patch.appliedAt !== null).map(patch => ({
+          ...patch,
+          appliedAt: null
+        }));
+        const prepared = await serverOps.prepare({
+          ...serverOps.analyzePatches(committed, chain.commits, commit),
+          ...chain,
+          patches: committed
+        });
+        if (prepared.hasErrors) {
+          return {
+            status: 500,
+            json: {
+              message: "The commits since this build could not be rendered into source: " + JSON.stringify(prepared.sourceFilePatchErrors).slice(0, 500)
+            }
+          };
+        }
+        return {
+          status: 200,
+          json: {
+            files: prepared.patchedSourceFiles
+          }
+        };
+      }
+    },
     "/profiles": {
       GET: async req => {
         const cookies = req.cookies;
@@ -13757,6 +13915,12 @@ const ValServer = (valModules, options, callbacks) => {
               }
             }
             const message = body.message || "Val CMS update (" + Object.keys(analysis.patchesByModule).length + " files changed)";
+            /*
+             * Before the commit, because after it the files are no longer the
+             * patch's to read. See `binaryFiles` on the route.
+             */
+            const managedBranch = serverOps.sourceMode() === "managed" ? serverOps.projectBranch() : null;
+            const committedBinaries = serverOps.sourceMode() === "managed" ? await readCommittedBinaryFiles(serverOps, preparedCommit.patchedBinaryFilesDescriptors) : null;
             const commitToGit = () => {
               var _options$config$files;
               return serverOps.commit(preparedCommit, message, auth.id, ((_options$config$files = options.config.files) === null || _options$config$files === void 0 ? void 0 : _options$config$files.directory) || "/public/val", undefined,
@@ -13823,6 +13987,15 @@ const ValServer = (valModules, options, callbacks) => {
                  */
                 ...(serverOps.sourceMode() === "managed" ? {
                   sourceFiles: preparedCommit.patchedSourceFiles
+                } : {}),
+                ...(managedBranch !== null ? {
+                  branch: managedBranch
+                } : {}),
+                ...(committedBinaries !== null ? {
+                  binaryFiles: committedBinaries.files,
+                  ...(committedBinaries.unread.length > 0 ? {
+                    binaryFilesUnread: committedBinaries.unread
+                  } : {})
                 } : {})
               }
             };

package/dist/valbuild-server.esm.js

@@ -4561,6 +4561,21 @@ class ValOps {
     return null;
   }
 
+  /**
+   * The branch the content service keeps this project's commits on, or `null`
+   * where there is no such service, or it has not said yet.
+   *
+   * For the Studio's in-tab build of a managed project, which has to name the
+   * branch its build was made at. Its other source is the `val.server.ts` the
+   * last build was wired with -- and a project cloned from a template seed has
+   * one wired at NO commit and no branch, so its first publish went out
+   * branchless and the loader refused it for a project whose pointer follows a
+   * branch. This is the project's own word for it.
+   */
+  projectBranch() {
+    return null;
+  }
+
   /**
    * Forward one call to the content service's publish API, as this project.
    *
@@ -7485,6 +7500,42 @@ class FSOpsHost {
   }
 }
 
+/**
+ * The bytes of the local binary files a commit is about to write, base64.
+ *
+ * For the Studio's in-tab build of a managed project, which publishes the site:
+ * an image uploaded in this save is in no earlier build, so unless the build
+ * is given it the published page links a file that 404s. Remote files are left
+ * out -- they are served from their own URL and never were part of a build.
+ *
+ * A file that cannot be read is NAMED rather than dropped, and does not stop
+ * the save: the commit is what makes an edit durable, and the build is the
+ * step that can refuse.
+ *
+ * Read BEFORE the commit, because after it the files are no longer the
+ * patch's to read. Generic over the patch id so it asks for exactly the one
+ * method it uses, and a test can hand it a plain object.
+ */
+async function readCommittedBinaryFiles(ops, descriptors) {
+  const files = {};
+  const unread = [];
+  await Promise.all(Object.entries(descriptors).map(async ([filePath, {
+    patchId,
+    remote
+  }]) => {
+    if (remote) return;
+    const bytes = await ops.getBase64EncodedBinaryFileFromPatch(filePath, patchId, remote).catch(error => {
+      console.error("Could not read a committed file", filePath, error);
+      return null;
+    });
+    if (bytes === null) unread.push(filePath);else files[filePath] = bytes.toString("base64");
+  }));
+  return {
+    files,
+    unread: unread.sort()
+  };
+}
+
 /**
  * Which unpublished changes a failed save has to throw away to make progress.
  *
@@ -7863,6 +7914,22 @@ class ValOpsHttp extends ValOps {
    * initialiser runs before the constructor body has assigned it.
    */
   mirrorsSourceFiles;
+  /**
+   * The running build's own source, when the host embedded it.
+   *
+   * Preferred over the content service for the `.val.ts` text a publish
+   * patches, for two reasons. It is exactly the text this build was made from,
+   * which is what the patches in its chain were written against. And it is the
+   * only copy there is for a project with no repository: the content service
+   * keeps a managed project's content as Source, not as files, and answers a
+   * file read for one with "no GitHub repo".
+   */
+  projectSource;
+
+  /** Did the host hand over the running build's source? See `projectSource`. */
+  embedsSource() {
+    return this.projectSource !== null;
+  }
   /**
    * What the content service last said this project expects of its publisher.
    *
@@ -7910,7 +7977,8 @@ class ValOpsHttp extends ValOps {
       Authorization: `Bearer ${auth.apiKey}`
     };
     this.root = (options === null || options === void 0 ? void 0 : options.root) ?? "";
-    this.mirrorsSourceFiles = git !== null;
+    this.projectSource = (options === null || options === void 0 ? void 0 : options.projectSource) ?? null;
+    this.mirrorsSourceFiles = git !== null || this.projectSource !== null;
   }
   /**
    * A deployment that cannot mirror a project which expects to be mirrored.
@@ -7967,6 +8035,12 @@ class ValOpsHttp extends ValOps {
     return ((_this$projectExpectat2 = this.projectExpectation) === null || _this$projectExpectat2 === void 0 ? void 0 : _this$projectExpectat2.sourceMode) ?? null;
   }
 
+  /** Remembered with {@link sourceMode}, from the same response. */
+  projectBranch() {
+    var _this$projectExpectat3;
+    return ((_this$projectExpectat3 = this.projectExpectation) === null || _this$projectExpectat3 === void 0 ? void 0 : _this$projectExpectat3.branch) ?? null;
+  }
+
   /**
    * The short-lived publish token, and when it stops being usable.
    *
@@ -9090,6 +9164,19 @@ class ValOpsHttp extends ValOps {
     });
   }
   async getSourceFile(path) {
+    if (this.projectSource !== null) {
+      const text = this.projectSource[path.replace(/^\/+/, "")];
+      if (text === undefined) {
+        return {
+          error: {
+            message: `Cannot read the source of ${path}: it is not in the source this build was made from.`
+          }
+        };
+      }
+      return {
+        data: text
+      };
+    }
     /*
      * There is no file to read without a repository to read it from.
      *
@@ -11219,6 +11306,9 @@ async function initHandlerOptions(route, opts, config) {
         }
       } : {}),
       root: opts.root,
+      ...(opts.projectSource !== undefined ? {
+        projectSource: opts.projectSource
+      } : {}),
       project: maybeValProject,
       valEnableRedirectUrl,
       valDisableRedirectUrl,
@@ -11285,7 +11375,10 @@ function createValOps(valModules, options) {
     }, valModules, {
       formatter: options.formatter,
       root: options.root,
-      config: options.config
+      config: options.config,
+      ...(options.projectSource !== undefined ? {
+        projectSource: options.projectSource
+      } : {})
     });
   }
   if (options.mode === "memory") {
@@ -13278,6 +13371,71 @@ const ValServer = (valModules, options, callbacks) => {
         return res;
       }
     },
+    "/built-source": {
+      GET: async req => {
+        const auth = getAuth(req.cookies);
+        if (auth.error) {
+          return {
+            status: 401,
+            json: {
+              message: auth.error
+            }
+          };
+        }
+        if (!(serverOps instanceof ValOpsHttp) || !serverOps.embedsSource()) {
+          return {
+            status: 409,
+            json: {
+              message: "This server has no source of its own to render commits into."
+            }
+          };
+        }
+        const chain = await serverOps.fetchPatches({
+          patchIds: undefined,
+          excludePatchOps: false
+        });
+        if (chain.error) {
+          return {
+            status: 500,
+            json: {
+              message: chain.error.message
+            }
+          };
+        }
+        /*
+         * The patches committed SINCE this build, as though pending.
+         *
+         * `applicable/patches` answers with the ones applied at a commit after
+         * the one this build was made from, which is exactly what the text
+         * embedded in it is missing. `analyzePatches` skips applied patches --
+         * for a save they are already in the file it reads -- so they are
+         * handed over unapplied: here the file predates them.
+         */
+        const committed = chain.patches.filter(patch => patch.appliedAt !== null).map(patch => ({
+          ...patch,
+          appliedAt: null
+        }));
+        const prepared = await serverOps.prepare({
+          ...serverOps.analyzePatches(committed, chain.commits, commit),
+          ...chain,
+          patches: committed
+        });
+        if (prepared.hasErrors) {
+          return {
+            status: 500,
+            json: {
+              message: "The commits since this build could not be rendered into source: " + JSON.stringify(prepared.sourceFilePatchErrors).slice(0, 500)
+            }
+          };
+        }
+        return {
+          status: 200,
+          json: {
+            files: prepared.patchedSourceFiles
+          }
+        };
+      }
+    },
     "/profiles": {
       GET: async req => {
         const cookies = req.cookies;
@@ -13723,6 +13881,12 @@ const ValServer = (valModules, options, callbacks) => {
               }
             }
             const message = body.message || "Val CMS update (" + Object.keys(analysis.patchesByModule).length + " files changed)";
+            /*
+             * Before the commit, because after it the files are no longer the
+             * patch's to read. See `binaryFiles` on the route.
+             */
+            const managedBranch = serverOps.sourceMode() === "managed" ? serverOps.projectBranch() : null;
+            const committedBinaries = serverOps.sourceMode() === "managed" ? await readCommittedBinaryFiles(serverOps, preparedCommit.patchedBinaryFilesDescriptors) : null;
             const commitToGit = () => {
               var _options$config$files;
               return serverOps.commit(preparedCommit, message, auth.id, ((_options$config$files = options.config.files) === null || _options$config$files === void 0 ? void 0 : _options$config$files.directory) || "/public/val", undefined,
@@ -13789,6 +13953,15 @@ const ValServer = (valModules, options, callbacks) => {
                  */
                 ...(serverOps.sourceMode() === "managed" ? {
                   sourceFiles: preparedCommit.patchedSourceFiles
+                } : {}),
+                ...(managedBranch !== null ? {
+                  branch: managedBranch
+                } : {}),
+                ...(committedBinaries !== null ? {
+                  binaryFiles: committedBinaries.files,
+                  ...(committedBinaries.unread.length > 0 ? {
+                    binaryFilesUnread: committedBinaries.unread
+                  } : {})
                 } : {})
               }
             };

package/package.json

@@ -16,7 +16,7 @@
     "./package.json": "./package.json"
   },
   "types": "dist/valbuild-server.cjs.d.ts",
-  "version": "0.136.1",
+  "version": "0.136.3",
   "devDependencies": {
     "@prettier/sync": "^0.6.1",
     "@types/jest": "^30.0.0",
@@ -30,9 +30,9 @@
     "typescript": "^6.0.3",
     "zod": "^4.4.3",
     "zod-validation-error": "^5.0.0",
-    "@valbuild/core": "0.136.1",
-    "@valbuild/shared": "0.136.1",
-    "@valbuild/ui": "0.136.1"
+    "@valbuild/shared": "0.136.3",
+    "@valbuild/ui": "0.136.3",
+    "@valbuild/core": "0.136.1"
   },
   "engines": {
     "node": "^20.19.0 || >=22"