@valbuild/shared 0.123.2 → 0.124.0

package/internal/dist/valbuild-shared-internal.cjs.dev.js

@@ -911,97 +911,96 @@ var InlineRender = zod.z.object({
   as: zod.z.literal("inline")
 });
 var FieldRender = InlineRender.optional();
-var SerializedStringSchema = zod.z.object({
-  type: zod.z.literal("string"),
+
+/**
+ * The fields EVERY serialized schema carries, in one place.
+ *
+ * Spread into each schema below rather than retyped, because retyping them is
+ * exactly how they went missing: `customValidate` and `description` were
+ * declared on six of the eighteen schemas and silently dropped by the other
+ * twelve. A field added to the base of `SerializedSchema` needs adding here and
+ * nowhere else.
+ *
+ * `type`, `opt` and whatever is particular to the schema stay at the call site
+ * - those differ per schema, so there is nothing to share.
+ */
+var commonSchemaFields = {
   render: FieldRender,
+  preview: zod.z.literal(true).optional(),
+  // Whether the schema declares a `.validate()`. The function cannot serialize,
+  // so this flag is what tells the Studio to run the custom validators on the
+  // main thread against the real instance - dropped, and they never run at all.
+  // See `hasCustomValidate` in `ui/spa/validation/customValidate.ts`.
+  customValidate: zod.z["boolean"]().optional(),
+  readonly: zod.z["boolean"]().optional(),
+  hidden: zod.z["boolean"]().optional(),
+  description: zod.z.string().optional()
+};
+var SerializedStringSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
+  type: zod.z.literal("string"),
   // `.multiline()`. Stripped like any undeclared key if it goes missing here,
   // which is a single-line input where the author asked for a text box.
   multiline: zod.z["boolean"]().optional(),
-  preview: zod.z.literal(true).optional(),
   options: zod.z.object({
     maxLength: zod.z.number().optional(),
     minLength: zod.z.number().optional(),
     regexp: zod.z.object({
+      // `.regexp(re, message)`'s message. Written by
+      // `StringSchema.executeSerialize`, so omitting it here strips the
+      // author's own wording and leaves the generic "Expected string to
+      // match reg exp: …" in its place.
+      message: zod.z.string().optional(),
       source: zod.z.string(),
       flags: zod.z.string()
-    }).optional()
+    }).optional(),
+    customValidate: zod.z["boolean"]().optional()
   }).optional(),
   opt: zod.z["boolean"](),
-  raw: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
-var SerializedLiteralSchema = zod.z.object({
+  raw: zod.z["boolean"]()
+}));
+var SerializedLiteralSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("literal"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   value: zod.z.string(),
-  opt: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
-var SerializedBooleanSchema = zod.z.object({
+  opt: zod.z["boolean"]()
+}));
+var SerializedBooleanSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("boolean"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
-  opt: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
-var SerializedNumberSchema = zod.z.object({
+  opt: zod.z["boolean"]()
+}));
+var SerializedNumberSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("number"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: zod.z.object({
     max: zod.z.number().optional(),
     min: zod.z.number().optional()
   }).optional(),
-  opt: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
+  opt: zod.z["boolean"]()
+}));
 var SerializedObjectSchema = zod.z.lazy(function () {
-  return zod.z.object({
+  return zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("object"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     items: zod.z.record(zod.z.string(), SerializedSchema),
-    opt: zod.z["boolean"](),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional()
-  });
+    opt: zod.z["boolean"]()
+  }));
 });
 var SerializedArraySchema = zod.z.lazy(function () {
-  return zod.z.object({
+  return zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("array"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     item: SerializedSchema,
-    opt: zod.z["boolean"](),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional()
-  });
+    opt: zod.z["boolean"]()
+  }));
 });
 var SerializedUnionSchema = zod.z.lazy(function () {
-  return zod.z.union([zod.z.object({
+  return zod.z.union([zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("union"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     key: SerializedLiteralSchema,
     items: zod.z.array(SerializedLiteralSchema),
-    opt: zod.z["boolean"](),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional()
-  }), zod.z.object({
+    opt: zod.z["boolean"]()
+  })), zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("union"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     key: zod.z.string(),
     items: zod.z.array(SerializedObjectSchema),
-    opt: zod.z["boolean"](),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional()
-  })]);
+    opt: zod.z["boolean"]()
+  }))]);
 });
 var ImageEncodeOption = zod.z.union([zod.z.literal(false), zod.z.object({
   type: zod.z.literal("webp"),
@@ -1014,15 +1013,16 @@ var ImageOptions = zod.z.object({
   accept: zod.z.string().optional(),
   encode: ImageEncodeOption.optional()
 });
-var SerializedImageSchema = zod.z.object({
+var SerializedImageSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("image"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: ImageOptions.optional(),
   opt: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
+  // `.remote()`, and the gallery a gallery-backed field reads its metadata
+  // from. Neither is cosmetic: dropped, a remote field looks local and a
+  // gallery-backed one looks like it holds its own dimensions.
+  remote: zod.z["boolean"]().optional(),
+  referencedModule: zod.z.string().optional()
+}));
 var RichTextOptions = zod.z.lazy(function () {
   return zod.z.object({
     // Set by `.maxLength()` / `.minLength()`, not by the options argument.
@@ -1045,20 +1045,14 @@ var RichTextOptions = zod.z.lazy(function () {
     img: zod.z.union([zod.z["boolean"](), SerializedImageSchema]).optional()
   });
 });
-var SerializedRichTextSchema = zod.z.object({
+var SerializedRichTextSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("richtext"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: RichTextOptions.optional(),
-  opt: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
+  opt: zod.z["boolean"]()
+}));
 var SerializedRecordSchema = zod.z.lazy(function () {
-  return zod.z.object({
+  return zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("record"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     item: SerializedSchema,
     opt: zod.z["boolean"](),
     // Optional gallery marker for files/images
@@ -1069,16 +1063,12 @@ var SerializedRecordSchema = zod.z.lazy(function () {
     remote: zod.z["boolean"]().optional(),
     encode: ImageEncodeOption.optional(),
     alt: SerializedSchema.optional(),
-    moduleMetadata: zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), zod.z.any())).optional(),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional()
-  }).passthrough();
+    moduleMetadata: zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), zod.z.any())).optional()
+  })).passthrough();
 });
 var SerializedKeyOfSchema = zod.z.lazy(function () {
-  return zod.z.object({
+  return zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("keyOf"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     path: SourcePath,
     schema: zod.z.union([zod.z.object({
       type: zod.z.literal("object"),
@@ -1089,82 +1079,54 @@ var SerializedKeyOfSchema = zod.z.lazy(function () {
       opt: zod.z["boolean"]().optional()
     })]).optional(),
     values: zod.z.union([zod.z.literal("string"), zod.z.array(zod.z.string())]),
-    opt: zod.z["boolean"](),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional()
-  });
+    opt: zod.z["boolean"]()
+  }));
 });
 var FileOptions = zod.z.object({
   accept: zod.z.string().optional()
 });
-var SerializedFileSchema = zod.z.object({
+var SerializedFileSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("file"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: FileOptions.optional(),
   opt: zod.z["boolean"](),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
+  // See `SerializedImageSchema` above: `.remote()` and the gallery a
+  // gallery-backed field reads from.
+  remote: zod.z["boolean"]().optional(),
+  referencedModule: zod.z.string().optional()
+}));
 var DateOptions = zod.z.object({
   from: zod.z.string().optional(),
   to: zod.z.string().optional()
 });
-var SerializedDateSchema = zod.z.object({
+var SerializedDateSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("date"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: DateOptions.optional(),
-  opt: zod.z["boolean"](),
-  customValidate: zod.z["boolean"]().optional(),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional(),
-  description: zod.z.string().optional()
-});
-var SerializedDateTimeSchema = zod.z.object({
+  opt: zod.z["boolean"]()
+}));
+var SerializedDateTimeSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("dateTime"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: DateOptions.optional(),
-  opt: zod.z["boolean"](),
-  customValidate: zod.z["boolean"]().optional(),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional(),
-  description: zod.z.string().optional()
-});
+  opt: zod.z["boolean"]()
+}));
 var ColorOptions = zod.z.object({
   format: zod.z["enum"](["hex", "rgb", "hsl", "oklch"]).optional(),
   alpha: zod.z["boolean"]().optional()
 });
-var SerializedColorSchema = zod.z.object({
+var SerializedColorSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("color"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: ColorOptions.optional(),
-  opt: zod.z["boolean"](),
-  customValidate: zod.z["boolean"]().optional(),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional(),
-  description: zod.z.string().optional()
-});
+  opt: zod.z["boolean"]()
+}));
 var CodeOptions = zod.z.object({
   language: zod.z["enum"](core.CODE_LANGUAGES).optional()
 });
-var SerializedCodeSchema = zod.z.object({
+var SerializedCodeSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("code"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: CodeOptions.optional(),
-  opt: zod.z["boolean"](),
-  customValidate: zod.z["boolean"]().optional(),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional(),
-  description: zod.z.string().optional()
-});
-var SerializedRouteSchema = zod.z.object({
+  opt: zod.z["boolean"]()
+}));
+var SerializedRouteSchema = zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
   type: zod.z.literal("route"),
-  render: FieldRender,
-  preview: zod.z.literal(true).optional(),
   options: zod.z.object({
     include: zod.z.object({
       source: zod.z.string(),
@@ -1176,11 +1138,8 @@ var SerializedRouteSchema = zod.z.object({
     }).optional(),
     customValidate: zod.z["boolean"]().optional()
   }).optional(),
-  opt: zod.z["boolean"](),
-  customValidate: zod.z["boolean"]().optional(),
-  readonly: zod.z["boolean"]().optional(),
-  hidden: zod.z["boolean"]().optional()
-});
+  opt: zod.z["boolean"]()
+}));
 
 // A settings module, and each section inside one, serialize as this - the
 // shape is recursive because `items` holds sections which are themselves
@@ -1188,17 +1147,11 @@ var SerializedRouteSchema = zod.z.object({
 // (see core/src/schema/settings.ts), but they are accepted here because they
 // are part of the declared type.
 var SerializedSettingsSchema = zod.z.lazy(function () {
-  return zod.z.object({
+  return zod.z.object(getSitemapTree._objectSpread2(getSitemapTree._objectSpread2({}, commonSchemaFields), {}, {
     type: zod.z.literal("settings"),
-    render: FieldRender,
-    preview: zod.z.literal(true).optional(),
     items: zod.z.record(zod.z.string(), SerializedSchema),
-    opt: zod.z["boolean"](),
-    customValidate: zod.z["boolean"]().optional(),
-    readonly: zod.z["boolean"]().optional(),
-    hidden: zod.z["boolean"]().optional(),
-    description: zod.z.string().optional()
-  });
+    opt: zod.z["boolean"]()
+  }));
 });
 var SerializedSchema = zod.z.union([SerializedStringSchema, SerializedLiteralSchema, SerializedBooleanSchema, SerializedNumberSchema, SerializedObjectSchema, SerializedArraySchema, SerializedUnionSchema, SerializedRichTextSchema, SerializedRecordSchema, SerializedKeyOfSchema, SerializedRouteSchema, SerializedFileSchema, SerializedDateSchema, SerializedDateTimeSchema, SerializedColorSchema, SerializedCodeSchema, SerializedSettingsSchema, SerializedImageSchema]);
 
@@ -2510,6 +2463,66 @@ var Api = {
    * actually mounts. A file at a fixed commit cannot change, so the response is
    * immutable and the browser's own cache handles flipping between commits.
    */
+  /**
+   * One `.jsonValues()` entry's content, as it was at a commit.
+   *
+   * The history pane's counterpart to `/json`. A `.jsonValues()` record's
+   * source is only `{_type:"json"}` markers - the content is per entry, fetched
+   * on demand - so without this the commit pane rendered every entry as an
+   * empty field, which is a claim that the author left it blank.
+   *
+   * One entry per request, deliberately: the store fetches an entry when
+   * something reads inside it, so a batch would mean guessing which entries the
+   * pane is about to show. Authenticated for the same reasons as
+   * `/history/files` below.
+   */
+  "/history/json": {
+    GET: {
+      req: {
+        query: {
+          commit_sha: onlyOneStringQueryParam,
+          path: onlyOneStringQueryParam,
+          key: onlyOneStringQueryParam
+        },
+        cookies: {
+          val_session: zod.z.string().optional()
+        }
+      },
+      res: zod.z.union([unauthorizedResponse, notFoundResponse, zod.z.object({
+        status: zod.z.literal(400),
+        json: GenericError.and(zod.z.object({
+          kind: zod.z.string().optional()
+        }))
+      }), zod.z.object({
+        status: zod.z.literal(500),
+        json: GenericError.and(zod.z.object({
+          kind: zod.z.string().optional()
+        }))
+      }), zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          path: ModuleFilePath,
+          key: zod.z.string(),
+          content: zod.z.unknown()
+        })
+      })])
+    }
+  },
+  /**
+   * A binary file as it was at a commit.
+   *
+   * AUTHENTICATED, unlike `/files` below - and the difference is not an
+   * oversight in either direction. See the comment on `/files`: what makes it
+   * safe to leave open is that a `patch_id` is an unguessable UUID, and what
+   * makes leaving it open NECESSARY is that a draft image is fetched by the
+   * app's own backend during Next image optimisation, with no cookies.
+   *
+   * Neither holds here. A commit sha is published - `git log`, the GitHub UI,
+   * every PR - so it is not a secret to stand in for a credential. And nothing
+   * fetches these server-side: they are read by the Studio, in a browser that
+   * has the session cookie, for the history pane and for staging a restore.
+   * So this one asks.
+   */
   "/history/files": {
     GET: {
       req: {
@@ -2517,6 +2530,9 @@ var Api = {
           commit_sha: onlyOneStringQueryParam,
           path: onlyOneStringQueryParam,
           remote: onlyOneStringQueryParam.optional()
+        },
+        cookies: {
+          val_session: zod.z.string().optional()
         }
       },
       res: zod.z.union([unauthorizedResponse, notFoundResponse, zod.z.object({
@@ -5329,6 +5345,28 @@ function getRefParts(ref) {
  * them — an agent and an editor searching the same project should find the same
  * things.
  */
+/**
+ * The parts of FlexSearch's `Index` this module uses.
+ *
+ * Structural, rather than importing flexsearch's own `Index`, because
+ * {@link SearchIndex} is EXPORTED — and a `.d.ts` that names `flexsearch` pulls
+ * that package's `declare module "flexsearch"` into every consumer's TypeScript
+ * program. Ambient module declarations are global to a program, so a consumer
+ * with its own flexsearch at another version then checks its OWN calls against
+ * the copy we dragged in, whichever of the two wins.
+ *
+ * That is not hypothetical: `@valbuild/shared` gained a flexsearch dependency
+ * in 0.123.0 for `search_content`, and valbuild/web — which pins flexsearch
+ * 0.7 and calls `new flexsearch.Document({ language: "en", … })` — stopped
+ * building on 0.123.2, because 0.8's `DocumentOptions` has no `language`. Its
+ * own resolved copy was still 0.7; only the types had been replaced.
+ *
+ * Three methods is all this module calls, and none of their signatures here is
+ * a guess: `add` and `remove` are used in `indexModule`/`removeModule`, and
+ * `search`'s result is only ever `.length`-ed, `.slice`-d and mapped over as
+ * ids. `FlexSearch.Index` is still constructed with the real library in
+ * {@link createSearchIndex} — a value import, which does not reach the `.d.ts`.
+ */
 
 /** An index with nothing in it. Fill it with {@link indexModule}. */
 function createSearchIndex() {
@@ -5430,9 +5468,9 @@ function removeModule(searchIndex, moduleFilePath) {
     _step;
   try {
     for (_iterator.s(); !(_step = _iterator.n()).done;) {
-      var id = _step.value;
-      index.remove(id);
-      pathToLabel["delete"](id);
+      var _id = _step.value;
+      index.remove(_id);
+      pathToLabel["delete"](_id);
     }
   } catch (err) {
     _iterator.e(err);