@valbuild/shared 0.139.1 → 0.140.2

package/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @valbuild/shared
 
+## 0.140.2
+
+### Patch Changes
+
+- [#792](https://github.com/valbuild/val/pull/792) [`df1e5f5`](https://github.com/valbuild/val/commit/df1e5f5f94391f25c71839cc476a51198b90db4d) Thanks [@freekh](https://github.com/freekh)! - The Publish button no longer turns green while a publish is still running, in any tab or on any device. Before, the changes being published still counted as unpublished until the publish went live. So from about 64% on the progress, Publish lit up over them again: in the tab that pressed it, in every other open Studio, and on another device.
+
+  The button now reads "Publishing" for those changes until the publish is live, and you can press it again only for changes made since. If a publish fails, its changes become publishable again straight away.
+
+  Val Build's content service now reports which changes a running publish holds, and the Studio reads that from `/stat` and the live connection. A content service that doesn't report it keeps the previous behaviour, except in the tab that pressed Publish.
+
+## 0.140.0
+
+### Minor Changes
+
+- [#769](https://github.com/valbuild/val/pull/769) [`cb93874`](https://github.com/valbuild/val/commit/cb938748aec15fd0ac3814c1696a2dd78ad63c27) Thanks [@freekh](https://github.com/freekh)! - The project name in the Studio's top bar is now a project switcher, for projects connected to Val Build. It shows the project you are in, the projects you pinned and the five you opened most recently, and searches every project in your organisations. Choosing one opens its Studio.
+
+  The top bar also gets a **Share** button (an icon on a phone). It shows who is in the project's organisation. Owners can create invite links for a role (each works once and expires after 7 days), see and revoke pending links, and change members' roles. Everyone else can see the members and which owners to ask.
+
+  The assistant can be set up from the Studio too. Settings › Assistant shows the AI key this project runs on and whether it works. From there you can add a key, update it, remove it, or choose one that already exists: the organisation's, your own, or another project's. The assistant's empty state offers the same when no key is set up. Every key is checked with the provider before it is saved, and once a key is saved the assistant turns on without a reload.
+
+  The panels are served by Val's content server (`content.val.build/wc/v1/project-switcher.js`, `members.js` and `ai-setup.js`), beside the API they read and write, so they can improve without a Val release. The Studio draws the project name and the Share button itself, and loads the switcher and Share panels only when the button is first hovered or clicked, so opening the Studio fetches nothing extra. If a panel cannot load, for example offline or under a strict Content Security Policy, the click opens the same page in Val Build instead, and the AI setup is a link to the project's AI keys there. If your app sets a CSP, allow `script-src https://content.val.build` to get them.
+
+  They reach Val Build through a new route on your app's Val server, `/api/val/admin/proxy/*`, which adds the editor's existing Val Build session. That route forwards only to the Studio API on Val's content server (`/v1/studio/*` on `VAL_CONTENT_URL`, `https://content.val.build` by default), and only with the `x-val-studio` header that a cross-site request cannot send.
+
+  In local development they appear once you have run `val login`, and use that login. Without one the Studio keeps the plain project name, as before; it does not load them just to say you are not logged in.
+
 ## 0.139.1
 
 ### Patch Changes

package/dist/declarations/src/internal/ApiRoutes.d.ts

@@ -1,6 +1,12 @@
 import { z } from "zod";
 import { type ModuleFilePath } from "@valbuild/core";
 declare const ModuleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+/**
+ * The header a request to `/admin/proxy` must carry. A cross-site form or
+ * `<img>` cannot set a custom header, so without it the proxy cannot be driven
+ * with the editor's cookie from another site.
+ */
+export declare const VAL_STUDIO_HEADER = "x-val-studio";
 /**
  * A patch group: the set of patches one user has chosen to publish.
  *
@@ -406,6 +412,7 @@ export declare const Api: {
                     sourcesSha: z.ZodString;
                     patches: z.ZodArray<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>;
                     appliedPatches: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>>;
+                    publishingPatches: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>>;
                     headCommitSha: z.ZodOptional<z.ZodString>;
                     removed: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         patchId: z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>;
@@ -439,6 +446,7 @@ export declare const Api: {
                     commitSha: z.ZodOptional<z.ZodString>;
                     patches: z.ZodArray<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>;
                     appliedPatches: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>>;
+                    publishingPatches: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>>;
                     headCommitSha: z.ZodOptional<z.ZodString>;
                     headPatchId: z.ZodOptional<z.ZodNullable<z.ZodString & z.ZodType<import("@valbuild/core").PatchId, string, z.core.$ZodTypeInternals<import("@valbuild/core").PatchId, string>>>>;
                     headVersion: z.ZodOptional<z.ZodNumber>;
@@ -1975,6 +1983,95 @@ export declare const Api: {
             }, z.core.$strip>]>;
         };
     };
+    "/admin/status": {
+        GET: {
+            req: {
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+            };
+            res: z.ZodObject<{
+                status: z.ZodLiteral<200>;
+                json: z.ZodObject<{
+                    connected: z.ZodBoolean;
+                    signIn: z.ZodOptional<z.ZodEnum<{
+                        "val-login": "val-login";
+                        studio: "studio";
+                    }>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+        };
+    };
+    "/admin/proxy": {
+        GET: {
+            req: {
+                path: z.ZodString;
+                rawQuery: z.ZodString;
+                headers: {
+                    "x-val-studio": z.ZodOptional<z.ZodString>;
+                };
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+                body: z.ZodUnknown;
+            };
+            res: z.ZodObject<{
+                status: z.ZodUnion<readonly [z.ZodLiteral<200>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<500>]>;
+                json: z.ZodUnknown;
+            }, z.core.$strip>;
+        };
+        POST: {
+            req: {
+                path: z.ZodString;
+                rawQuery: z.ZodString;
+                headers: {
+                    "x-val-studio": z.ZodOptional<z.ZodString>;
+                };
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+                body: z.ZodUnknown;
+            };
+            res: z.ZodObject<{
+                status: z.ZodUnion<readonly [z.ZodLiteral<200>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<500>]>;
+                json: z.ZodUnknown;
+            }, z.core.$strip>;
+        };
+        PUT: {
+            req: {
+                path: z.ZodString;
+                rawQuery: z.ZodString;
+                headers: {
+                    "x-val-studio": z.ZodOptional<z.ZodString>;
+                };
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+                body: z.ZodUnknown;
+            };
+            res: z.ZodObject<{
+                status: z.ZodUnion<readonly [z.ZodLiteral<200>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<500>]>;
+                json: z.ZodUnknown;
+            }, z.core.$strip>;
+        };
+        DELETE: {
+            req: {
+                path: z.ZodString;
+                rawQuery: z.ZodString;
+                headers: {
+                    "x-val-studio": z.ZodOptional<z.ZodString>;
+                };
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+                body: z.ZodUnknown;
+            };
+            res: z.ZodObject<{
+                status: z.ZodUnion<readonly [z.ZodLiteral<200>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<500>]>;
+                json: z.ZodUnknown;
+            }, z.core.$strip>;
+        };
+    };
 };
 /**
  * Extracts the keys of an object where the value is not undefined.
@@ -2008,6 +2105,16 @@ export type ApiEndpoint = {
         body?: z.ZodTypeAny;
         query?: Record<string, z.ZodSchema<ValidQueryParamTypes, string[] | undefined>>;
         cookies?: Record<string, z.ZodSchema<string | undefined>>;
+        /**
+         * Request headers, by lower-case name, parsed the way `cookies` are.
+         * Absent ones are `undefined`.
+         */
+        headers?: Record<string, z.ZodSchema<string | undefined>>;
+        /**
+         * The query string exactly as sent (`?a=1&b=2`, or `""`), for a route that
+         * forwards it rather than reading it. `query` is for routes that read it.
+         */
+        rawQuery?: z.ZodString;
     };
     res: z.ZodSchema<{
         status: number;
@@ -2036,6 +2143,10 @@ export type ServerOf<Api extends ApiGuard> = {
             cookies: Api[Route][Method]["req"]["cookies"] extends Record<string, z.ZodSchema<string | undefined>> ? {
                 [key in keyof Api[Route][Method]["req"]["cookies"]]: z.infer<Api[Route][Method]["req"]["cookies"][key]>;
             } : undefined;
+            headers: Api[Route][Method]["req"]["headers"] extends Record<string, z.ZodSchema<string | undefined>> ? {
+                [key in keyof Api[Route][Method]["req"]["headers"]]: z.infer<Api[Route][Method]["req"]["headers"][key]>;
+            } : undefined;
+            rawQuery: Api[Route][Method]["req"]["rawQuery"] extends z.ZodString ? string : undefined;
         }>) => Promise<z.infer<Api[Route][Method]["res"]>> : never;
     };
 };

package/internal/dist/valbuild-shared-internal.cjs.dev.js

@@ -1504,6 +1504,35 @@ var GenericError = zod.z.object({
   message: zod.z.string()
 });
 
+/**
+ * The header a request to `/admin/proxy` must carry. A cross-site form or
+ * `<img>` cannot set a custom header, so without it the proxy cannot be driven
+ * with the editor's cookie from another site.
+ */
+var VAL_STUDIO_HEADER = "x-val-studio";
+
+/**
+ * What Val Build answered, mapped onto the statuses this server speaks: a
+ * `code` in the JSON is what the web components act on, so it is passed
+ * through untouched.
+ */
+var AdminProxyResponse = zod.z.object({
+  status: zod.z.union([zod.z.literal(200), zod.z.literal(400), zod.z.literal(401), zod.z.literal(403), zod.z.literal(404), zod.z.literal(500)]),
+  json: zod.z.unknown()
+});
+function adminProxyEndpoint() {
+  return {
+    req: {
+      path: zod.z.string(),
+      rawQuery: zod.z.string(),
+      headers: getSitemapTree._defineProperty({}, VAL_STUDIO_HEADER, zod.z.string().optional()),
+      cookies: getSitemapTree._defineProperty({}, VAL_SESSION_COOKIE, zod.z.string().optional()),
+      body: zod.z.unknown()
+    },
+    res: AdminProxyResponse
+  };
+}
+
 /**
  * What answered when one URL was opened.
  *
@@ -1915,6 +1944,12 @@ var Api = {
            * client that ignores this behaves exactly as it did before.
            */
           appliedPatches: zod.z.array(PatchId).optional(),
+          /*
+           * Of `patches`, the ones a publish that is still running holds.
+           * The Studio does not offer Publish over these. Whole on every
+           * answer: a job that ends without sealing gives them back.
+           */
+          publishingPatches: zod.z.array(PatchId).optional(),
           /**
            * The newest commit, which is the PUBLISH head.
            *
@@ -2005,6 +2040,12 @@ var Api = {
            * client that ignores this behaves exactly as it did before.
            */
           appliedPatches: zod.z.array(PatchId).optional(),
+          /*
+           * Of `patches`, the ones a publish that is still running holds.
+           * The Studio does not offer Publish over these. Whole on every
+           * answer: a job that ends without sealing gives them back.
+           */
+          publishingPatches: zod.z.array(PatchId).optional(),
           /**
            * The newest commit, which is the PUBLISH head.
            *
@@ -3446,6 +3487,50 @@ var Api = {
         json: GenericError
       })])
     }
+  },
+  /*
+   * Val Build, on the editor's behalf, for the web components the Studio
+   * mounts from admin.val.build (`<val-project-switcher>` and the ones after
+   * it). `/admin/proxy/projects/overview?current=…` is
+   * `{valBuildUrl}/api/studio/v1/projects/overview?current=…`, with the
+   * editor's token from the session cookie: the component cannot send that
+   * token itself, because it is in an httpOnly cookie only this server reads.
+   *
+   * A pipe, deliberately: the path, the query and the JSON body go through as
+   * they are, so a new component or endpoint on Val Build needs no Val
+   * release. What it does NOT pass through is anything that would let it be
+   * aimed elsewhere — see `adminProxy.ts`.
+   */
+  /*
+   * Whether this Studio has a Val Build credential for the editor: a session,
+   * or in local development a `val login`. The Studio asks before it loads a
+   * web component, so a developer who never logged in sees the plain project
+   * name rather than a component explaining that they are not logged in.
+   */
+  "/admin/status": {
+    GET: {
+      req: {
+        cookies: getSitemapTree._defineProperty({}, VAL_SESSION_COOKIE, zod.z.string().optional())
+      },
+      res: zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          connected: zod.z["boolean"](),
+          /**
+           * `val-login` on a developer's own checkout, `studio` anywhere the
+           * Studio's sign-in is the way in. Optional: an older server does
+           * not send it.
+           */
+          signIn: zod.z["enum"](["val-login", "studio"]).optional()
+        })
+      })
+    }
+  },
+  "/admin/proxy": {
+    GET: adminProxyEndpoint(),
+    POST: adminProxyEndpoint(),
+    PUT: adminProxyEndpoint(),
+    DELETE: adminProxyEndpoint()
   }
 };
 
@@ -7772,6 +7857,7 @@ exports.VAL_ENABLE_COOKIE_NAME = VAL_ENABLE_COOKIE_NAME;
 exports.VAL_GREEN_RAMP = VAL_GREEN_RAMP;
 exports.VAL_SESSION_COOKIE = VAL_SESSION_COOKIE;
 exports.VAL_STATE_COOKIE = VAL_STATE_COOKIE;
+exports.VAL_STUDIO_HEADER = VAL_STUDIO_HEADER;
 exports.ValCommit = ValCommit;
 exports.ValDeployment = ValDeployment;
 exports.accentRamp = accentRamp;

package/internal/dist/valbuild-shared-internal.cjs.prod.js

@@ -1504,6 +1504,35 @@ var GenericError = zod.z.object({
   message: zod.z.string()
 });
 
+/**
+ * The header a request to `/admin/proxy` must carry. A cross-site form or
+ * `<img>` cannot set a custom header, so without it the proxy cannot be driven
+ * with the editor's cookie from another site.
+ */
+var VAL_STUDIO_HEADER = "x-val-studio";
+
+/**
+ * What Val Build answered, mapped onto the statuses this server speaks: a
+ * `code` in the JSON is what the web components act on, so it is passed
+ * through untouched.
+ */
+var AdminProxyResponse = zod.z.object({
+  status: zod.z.union([zod.z.literal(200), zod.z.literal(400), zod.z.literal(401), zod.z.literal(403), zod.z.literal(404), zod.z.literal(500)]),
+  json: zod.z.unknown()
+});
+function adminProxyEndpoint() {
+  return {
+    req: {
+      path: zod.z.string(),
+      rawQuery: zod.z.string(),
+      headers: getSitemapTree._defineProperty({}, VAL_STUDIO_HEADER, zod.z.string().optional()),
+      cookies: getSitemapTree._defineProperty({}, VAL_SESSION_COOKIE, zod.z.string().optional()),
+      body: zod.z.unknown()
+    },
+    res: AdminProxyResponse
+  };
+}
+
 /**
  * What answered when one URL was opened.
  *
@@ -1915,6 +1944,12 @@ var Api = {
            * client that ignores this behaves exactly as it did before.
            */
           appliedPatches: zod.z.array(PatchId).optional(),
+          /*
+           * Of `patches`, the ones a publish that is still running holds.
+           * The Studio does not offer Publish over these. Whole on every
+           * answer: a job that ends without sealing gives them back.
+           */
+          publishingPatches: zod.z.array(PatchId).optional(),
           /**
            * The newest commit, which is the PUBLISH head.
            *
@@ -2005,6 +2040,12 @@ var Api = {
            * client that ignores this behaves exactly as it did before.
            */
           appliedPatches: zod.z.array(PatchId).optional(),
+          /*
+           * Of `patches`, the ones a publish that is still running holds.
+           * The Studio does not offer Publish over these. Whole on every
+           * answer: a job that ends without sealing gives them back.
+           */
+          publishingPatches: zod.z.array(PatchId).optional(),
           /**
            * The newest commit, which is the PUBLISH head.
            *
@@ -3446,6 +3487,50 @@ var Api = {
         json: GenericError
       })])
     }
+  },
+  /*
+   * Val Build, on the editor's behalf, for the web components the Studio
+   * mounts from admin.val.build (`<val-project-switcher>` and the ones after
+   * it). `/admin/proxy/projects/overview?current=…` is
+   * `{valBuildUrl}/api/studio/v1/projects/overview?current=…`, with the
+   * editor's token from the session cookie: the component cannot send that
+   * token itself, because it is in an httpOnly cookie only this server reads.
+   *
+   * A pipe, deliberately: the path, the query and the JSON body go through as
+   * they are, so a new component or endpoint on Val Build needs no Val
+   * release. What it does NOT pass through is anything that would let it be
+   * aimed elsewhere — see `adminProxy.ts`.
+   */
+  /*
+   * Whether this Studio has a Val Build credential for the editor: a session,
+   * or in local development a `val login`. The Studio asks before it loads a
+   * web component, so a developer who never logged in sees the plain project
+   * name rather than a component explaining that they are not logged in.
+   */
+  "/admin/status": {
+    GET: {
+      req: {
+        cookies: getSitemapTree._defineProperty({}, VAL_SESSION_COOKIE, zod.z.string().optional())
+      },
+      res: zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          connected: zod.z["boolean"](),
+          /**
+           * `val-login` on a developer's own checkout, `studio` anywhere the
+           * Studio's sign-in is the way in. Optional: an older server does
+           * not send it.
+           */
+          signIn: zod.z["enum"](["val-login", "studio"]).optional()
+        })
+      })
+    }
+  },
+  "/admin/proxy": {
+    GET: adminProxyEndpoint(),
+    POST: adminProxyEndpoint(),
+    PUT: adminProxyEndpoint(),
+    DELETE: adminProxyEndpoint()
   }
 };
 
@@ -7772,6 +7857,7 @@ exports.VAL_ENABLE_COOKIE_NAME = VAL_ENABLE_COOKIE_NAME;
 exports.VAL_GREEN_RAMP = VAL_GREEN_RAMP;
 exports.VAL_SESSION_COOKIE = VAL_SESSION_COOKIE;
 exports.VAL_STATE_COOKIE = VAL_STATE_COOKIE;
+exports.VAL_STUDIO_HEADER = VAL_STUDIO_HEADER;
 exports.ValCommit = ValCommit;
 exports.ValDeployment = ValDeployment;
 exports.accentRamp = accentRamp;

package/internal/dist/valbuild-shared-internal.esm.js

@@ -1497,6 +1497,35 @@ var GenericError = z.object({
   message: z.string()
 });
 
+/**
+ * The header a request to `/admin/proxy` must carry. A cross-site form or
+ * `<img>` cannot set a custom header, so without it the proxy cannot be driven
+ * with the editor's cookie from another site.
+ */
+var VAL_STUDIO_HEADER = "x-val-studio";
+
+/**
+ * What Val Build answered, mapped onto the statuses this server speaks: a
+ * `code` in the JSON is what the web components act on, so it is passed
+ * through untouched.
+ */
+var AdminProxyResponse = z.object({
+  status: z.union([z.literal(200), z.literal(400), z.literal(401), z.literal(403), z.literal(404), z.literal(500)]),
+  json: z.unknown()
+});
+function adminProxyEndpoint() {
+  return {
+    req: {
+      path: z.string(),
+      rawQuery: z.string(),
+      headers: _defineProperty({}, VAL_STUDIO_HEADER, z.string().optional()),
+      cookies: _defineProperty({}, VAL_SESSION_COOKIE, z.string().optional()),
+      body: z.unknown()
+    },
+    res: AdminProxyResponse
+  };
+}
+
 /**
  * What answered when one URL was opened.
  *
@@ -1908,6 +1937,12 @@ var Api = {
            * client that ignores this behaves exactly as it did before.
            */
           appliedPatches: z.array(PatchId).optional(),
+          /*
+           * Of `patches`, the ones a publish that is still running holds.
+           * The Studio does not offer Publish over these. Whole on every
+           * answer: a job that ends without sealing gives them back.
+           */
+          publishingPatches: z.array(PatchId).optional(),
           /**
            * The newest commit, which is the PUBLISH head.
            *
@@ -1998,6 +2033,12 @@ var Api = {
            * client that ignores this behaves exactly as it did before.
            */
           appliedPatches: z.array(PatchId).optional(),
+          /*
+           * Of `patches`, the ones a publish that is still running holds.
+           * The Studio does not offer Publish over these. Whole on every
+           * answer: a job that ends without sealing gives them back.
+           */
+          publishingPatches: z.array(PatchId).optional(),
           /**
            * The newest commit, which is the PUBLISH head.
            *
@@ -3439,6 +3480,50 @@ var Api = {
         json: GenericError
       })])
     }
+  },
+  /*
+   * Val Build, on the editor's behalf, for the web components the Studio
+   * mounts from admin.val.build (`<val-project-switcher>` and the ones after
+   * it). `/admin/proxy/projects/overview?current=…` is
+   * `{valBuildUrl}/api/studio/v1/projects/overview?current=…`, with the
+   * editor's token from the session cookie: the component cannot send that
+   * token itself, because it is in an httpOnly cookie only this server reads.
+   *
+   * A pipe, deliberately: the path, the query and the JSON body go through as
+   * they are, so a new component or endpoint on Val Build needs no Val
+   * release. What it does NOT pass through is anything that would let it be
+   * aimed elsewhere — see `adminProxy.ts`.
+   */
+  /*
+   * Whether this Studio has a Val Build credential for the editor: a session,
+   * or in local development a `val login`. The Studio asks before it loads a
+   * web component, so a developer who never logged in sees the plain project
+   * name rather than a component explaining that they are not logged in.
+   */
+  "/admin/status": {
+    GET: {
+      req: {
+        cookies: _defineProperty({}, VAL_SESSION_COOKIE, z.string().optional())
+      },
+      res: z.object({
+        status: z.literal(200),
+        json: z.object({
+          connected: z["boolean"](),
+          /**
+           * `val-login` on a developer's own checkout, `studio` anywhere the
+           * Studio's sign-in is the way in. Optional: an older server does
+           * not send it.
+           */
+          signIn: z["enum"](["val-login", "studio"]).optional()
+        })
+      })
+    }
+  },
+  "/admin/proxy": {
+    GET: adminProxyEndpoint(),
+    POST: adminProxyEndpoint(),
+    PUT: adminProxyEndpoint(),
+    DELETE: adminProxyEndpoint()
   }
 };
 
@@ -7676,4 +7761,4 @@ function parse(schema, body, call) {
   return parsed.data;
 }
 
-export { AA_LARGE, AA_TEXT, Api, BRAND_CONTRAST_PAIRS, BinaryFileRef, CodeOptions, ColorOptions, DEFAULT_ERROR_MESSAGE, DateOptions, ENCODE_DEFAULTS, ENCODE_MIME_TYPE_OF, FileOptions, HistoricalCommit, HistoricalModule, HistoricalPatchSet, HistoryError, ImageEncodeOption, ImageOptions, JSONValue, JSON_ENTRIES_BATCH_MAX, ModuleComparison, NEVER_ENCODED, ParentRef$1 as ParentRef, Patch, PatchBlock, PatchGroup, PatchId, PatchJSON, PublishProtocolError, RAMP_STEPS, RemirrorBr, RemirrorBulletList, RemirrorHeading, RemirrorImage, RemirrorJSON, RemirrorLinkMark, RemirrorListItem, RemirrorOrderedList, RemirrorParagraph, RemirrorText, RemirrorTextMark, RestoreVerdict, RichTextOptions, SCHEMA_SOURCE_FIXES, SerializedArraySchema, SerializedBooleanSchema, SerializedCodeSchema, SerializedColorSchema, SerializedDateSchema, SerializedDateTimeSchema, SerializedDiscriminatedUnionSchema, SerializedEnumSchema, SerializedFileSchema, SerializedImageSchema, SerializedKeyOfSchema, SerializedLiteralSchema, SerializedLocaleSchema, SerializedNumberSchema, SerializedObjectSchema, SerializedRecordSchema, SerializedRichTextSchema, SerializedRouteSchema, SerializedSchema, SerializedSettingsSchema, SerializedStringSchema, SerializedValViewSchema, SharedValConfig, VAL_ENABLE_COOKIE_NAME, VAL_GREEN_RAMP, VAL_SESSION_COOKIE, VAL_STATE_COOKIE, ValCommit, ValDeployment, accentRamp, buildDuplicatePatch, buildEmptyAtPathPatch, buildFileRefValue, buildImageGalleryPatch, buildRemoveImageGalleryEntryPatch, buildSearchIndex, chainHeadOf, checkCompatibility, chooseEncoded, concatModulePath, contrastRatio, createRegExpFromPattern, createSearchIndex, createValClient, declaredLocales, describeContainerAtPath, emptyOf, explainIncompatible, filterBlockingValidationErrors, filterRoutesByPatterns, findSimilar, fitWithin, flattenRichText, getErrorMessageFromUnknownJson, getFilenameFromRef, getInlineImgInfo, getKeyOfRecordAt, getRefParts, getRoutesOf, getRoutesWithModulePaths, getSourceAt, indexModule, isMimeTypeAccepted, isRemoteSchema, isSchemaSourceFixError, isSkippedSource, keyOfRecordPath, levenshtein, localeAt, memoizePerRequest, newestCommitSha, parseArtifacts, parseBuildTarget, parseCancel, parseDeclare, parseDiscard, parseJob, parseNewestCiRun, parsePress, parseProblems, parseProjectSource, parsePromote, parsePublishToken, parseRenew, parseRequestStatus, parseStatus, parseUpdateTarget, parseVerify, partitionValidationErrors, performSearch, relativeLuminance, remirrorToRichTextSource, removeModule, resolveEncodeSettings, resolvePairGround, resolveSchemaSourceFixForError, resolveSchemaSourceFixes, resolveSerializedSchemaAtPath, richTextToRemirror, safeParsePatch, sourcePathOfChild, themeCustomProperties, toolNames, traverseSchemaSource, urlOf, validateRoutePatterns, withExtension };
+export { AA_LARGE, AA_TEXT, Api, BRAND_CONTRAST_PAIRS, BinaryFileRef, CodeOptions, ColorOptions, DEFAULT_ERROR_MESSAGE, DateOptions, ENCODE_DEFAULTS, ENCODE_MIME_TYPE_OF, FileOptions, HistoricalCommit, HistoricalModule, HistoricalPatchSet, HistoryError, ImageEncodeOption, ImageOptions, JSONValue, JSON_ENTRIES_BATCH_MAX, ModuleComparison, NEVER_ENCODED, ParentRef$1 as ParentRef, Patch, PatchBlock, PatchGroup, PatchId, PatchJSON, PublishProtocolError, RAMP_STEPS, RemirrorBr, RemirrorBulletList, RemirrorHeading, RemirrorImage, RemirrorJSON, RemirrorLinkMark, RemirrorListItem, RemirrorOrderedList, RemirrorParagraph, RemirrorText, RemirrorTextMark, RestoreVerdict, RichTextOptions, SCHEMA_SOURCE_FIXES, SerializedArraySchema, SerializedBooleanSchema, SerializedCodeSchema, SerializedColorSchema, SerializedDateSchema, SerializedDateTimeSchema, SerializedDiscriminatedUnionSchema, SerializedEnumSchema, SerializedFileSchema, SerializedImageSchema, SerializedKeyOfSchema, SerializedLiteralSchema, SerializedLocaleSchema, SerializedNumberSchema, SerializedObjectSchema, SerializedRecordSchema, SerializedRichTextSchema, SerializedRouteSchema, SerializedSchema, SerializedSettingsSchema, SerializedStringSchema, SerializedValViewSchema, SharedValConfig, VAL_ENABLE_COOKIE_NAME, VAL_GREEN_RAMP, VAL_SESSION_COOKIE, VAL_STATE_COOKIE, VAL_STUDIO_HEADER, ValCommit, ValDeployment, accentRamp, buildDuplicatePatch, buildEmptyAtPathPatch, buildFileRefValue, buildImageGalleryPatch, buildRemoveImageGalleryEntryPatch, buildSearchIndex, chainHeadOf, checkCompatibility, chooseEncoded, concatModulePath, contrastRatio, createRegExpFromPattern, createSearchIndex, createValClient, declaredLocales, describeContainerAtPath, emptyOf, explainIncompatible, filterBlockingValidationErrors, filterRoutesByPatterns, findSimilar, fitWithin, flattenRichText, getErrorMessageFromUnknownJson, getFilenameFromRef, getInlineImgInfo, getKeyOfRecordAt, getRefParts, getRoutesOf, getRoutesWithModulePaths, getSourceAt, indexModule, isMimeTypeAccepted, isRemoteSchema, isSchemaSourceFixError, isSkippedSource, keyOfRecordPath, levenshtein, localeAt, memoizePerRequest, newestCommitSha, parseArtifacts, parseBuildTarget, parseCancel, parseDeclare, parseDiscard, parseJob, parseNewestCiRun, parsePress, parseProblems, parseProjectSource, parsePromote, parsePublishToken, parseRenew, parseRequestStatus, parseStatus, parseUpdateTarget, parseVerify, partitionValidationErrors, performSearch, relativeLuminance, remirrorToRichTextSource, removeModule, resolveEncodeSettings, resolvePairGround, resolveSchemaSourceFixForError, resolveSchemaSourceFixes, resolveSerializedSchemaAtPath, richTextToRemirror, safeParsePatch, sourcePathOfChild, themeCustomProperties, toolNames, traverseSchemaSource, urlOf, validateRoutePatterns, withExtension };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valbuild/shared",
-  "version": "0.139.1",
+  "version": "0.140.2",
   "private": false,
   "description": "Val shared types and utilities",
   "repository": {