@valbuild/shared 0.147.0 → 0.148.0

package/CHANGELOG.md

@@ -1,5 +1,85 @@
 # @valbuild/shared
 
+## 0.148.0
+
+### Patch Changes
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Remote files are now addressed on the host the project's settings name. For a
+  project hosted by Val, that is the project's own address, and its remote images
+  and files are served from there rather than from `remote.val.build`. Every other
+  project is unchanged.
+
+  - The Studio, `val validate --fix` and the MCP image tool all take the host from
+    the project's settings, falling back to `remote.val.build` as before.
+  - Re-reading a remote file whose recorded size or type is out of date keeps it
+    on the host it was on.
+  - When a remote file's host cannot be reached, tooling downloads it from the
+    project's permanent `<id>.valstart.dev` address instead, and keeps it only if
+    its bytes match the file the address names.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Remote files served from a project's own site (addresses like
+  `https://www.acme.no/_val/file/…`) are now checked for whether that address
+  still serves the project. When a custom domain has been removed or moved to
+  another project, the image or file is reported, and **Fix** on the Studio's
+  Validate page — or `val validate --fix` — points it at the project's permanent
+  `<id>.valstart.dev` address. Nothing is uploaded or downloaded: only the address
+  changes.
+
+  Remote file addresses with a `/_val` prefix after the host are now recognised.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Fix existing remote images in rich text being saved as `/publichttps://…`.
+
+  Editing a rich text field could rewrite every remote image already in it into a
+  broken path when the field was not set up to upload remote images itself — for
+  example before the project's remote file settings had loaded, or when the
+  field's image schema is not `.remote()`. A published remote image is now kept
+  as it is, whatever host it is on.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - **Check everything** on the Studio's Validate page now checks media directories
+  (`s.imagedir()`, `s.filedir()`, `s.fontdir()` and `s.videodir()`) by the files
+  they list:
+
+  - An entry whose file is gone has a **Fix** that removes it from the directory.
+  - An image or file entry whose recorded size or type does not match its file has
+    a **Fix** that corrects it from the file, keeping its alt text.
+  - A video entry whose file is gone is reported, and is removed by hand: its
+    posters and captions may still be in use.
+  - A remote entry is checked with its host, like any remote file.
+
+  `val validate --fix` fixes media directories exactly as before.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - **Check everything** on the Studio's Validate page now checks remote images and
+  files too.
+
+  - A remote image or file whose address no longer matches what is recorded about
+    it (its size, type or the schema's options changed since it was uploaded) has
+    a **Fix**, which re-reads the file and corrects it, as `val validate --fix`
+    does.
+  - A remote host that does not answer is shown once, at the top of the page, with
+    how many files it holds and a **Try again**, rather than as an error on every
+    image.
+  - A file its host no longer has is shown at the image or file that uses it.
+
+  Images and files in your unpublished changes are not asked about until they are
+  published; the check makes sure the change still has them.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Two new Studio API routes for the full content check, not yet used by the
+  Studio's UI:
+
+  - `POST /api/val/validate` checks one module — its content against its schema,
+    and its local images and files against their bytes — on the content the
+    Studio is showing.
+  - `POST /api/val/validate/fix` returns the patch that fixes one of those errors,
+    for the Studio to add as a pending change. It builds only the fixes that need
+    no disk or remote host: image, file and video metadata, and a view pointing at
+    the wrong module.
+
+  Also fixed: an API route whose name started with another route's name could be
+  answered by the other route.
+
+- Updated dependencies [[`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1)]:
+  - @valbuild/core@0.148.0
+
 ## 0.147.0
 
 ### Minor Changes

package/dist/declarations/src/internal/ApiRoutes.d.ts

@@ -328,6 +328,7 @@ export declare const Api: {
                     remoteFileBuckets: z.ZodArray<z.ZodObject<{
                         bucket: z.ZodString;
                     }, z.core.$strip>>;
+                    remoteHost: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>;
             }, z.core.$strip>, z.ZodObject<{
                 status: z.ZodLiteral<400>;
@@ -1024,6 +1025,153 @@ export declare const Api: {
             }, z.core.$strip>]>;
         };
     };
+    /**
+     * The Studio's full check, one module per request: its sources against its
+     * schema and its local files against their bytes, on the content the caller
+     * is looking at. See `docs/plans/studio-validate.md`.
+     */
+    "/validate": {
+        POST: {
+            req: {
+                body: z.ZodObject<{
+                    moduleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+                    patchIds: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<PatchIdT, string, z.core.$ZodTypeInternals<PatchIdT, string>>>>;
+                }, z.core.$strip>;
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+            };
+            res: z.ZodUnion<readonly [z.ZodObject<{
+                status: z.ZodLiteral<401>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<404>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<500>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<501>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<200>;
+                json: z.ZodObject<{
+                    moduleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+                    errors: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+                        message: z.ZodString;
+                        value: z.ZodOptional<z.ZodUnknown>;
+                        fatal: z.ZodOptional<z.ZodBoolean>;
+                        fixes: z.ZodOptional<z.ZodArray<z.ZodType<ValidationFix, unknown, z.core.$ZodTypeInternals<ValidationFix, unknown>>>>;
+                    }, z.core.$strip>>>;
+                    invalidSource: z.ZodOptional<z.ZodString>;
+                    remoteHosts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        host: z.ZodString;
+                        status: z.ZodUnion<readonly [z.ZodLiteral<"missing">, z.ZodLiteral<"unreachable">]>;
+                        details: z.ZodString;
+                        sourcePaths: z.ZodArray<z.ZodType<SourcePathT, unknown, z.core.$ZodTypeInternals<SourcePathT, unknown>>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>]>;
+        };
+    };
+    /**
+     * The patch that fixes one error the full check reported. The server finds
+     * the error again rather than trusting the caller's copy, and builds only the
+     * fixes `STUDIO_FIXES` lists. The patch is returned, not applied: the Studio
+     * adds it as a pending change like any edit.
+     */
+    "/validate/fix": {
+        POST: {
+            req: {
+                body: z.ZodObject<{
+                    moduleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+                    sourcePath: z.ZodType<SourcePathT, unknown, z.core.$ZodTypeInternals<SourcePathT, unknown>>;
+                    fix: z.ZodType<ValidationFix, unknown, z.core.$ZodTypeInternals<ValidationFix, unknown>>;
+                    patchIds: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<PatchIdT, string, z.core.$ZodTypeInternals<PatchIdT, string>>>>;
+                }, z.core.$strip>;
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+            };
+            res: z.ZodUnion<readonly [z.ZodObject<{
+                status: z.ZodLiteral<401>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<404>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<400>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<500>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<501>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<200>;
+                json: z.ZodObject<{
+                    patch: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        op: z.ZodLiteral<"add">;
+                        path: z.ZodArray<z.ZodString>;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"remove">;
+                        path: z.ZodTuple<[z.ZodString], z.ZodString>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"replace">;
+                        path: z.ZodArray<z.ZodString>;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"move">;
+                        from: z.ZodTuple<[z.ZodString], z.ZodString>;
+                        path: z.ZodArray<z.ZodString>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"copy">;
+                        from: z.ZodArray<z.ZodString>;
+                        path: z.ZodArray<z.ZodString>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"test">;
+                        path: z.ZodArray<z.ZodString>;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"file">;
+                        path: z.ZodArray<z.ZodString>;
+                        filePath: z.ZodString;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                        remote: z.ZodBoolean;
+                        nestedFilePath: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        metadata: z.ZodOptional<z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>>;
+                    }, z.core.$strict>], "op">>;
+                    remainingErrors: z.ZodArray<z.ZodObject<{
+                        message: z.ZodString;
+                        value: z.ZodOptional<z.ZodUnknown>;
+                        fatal: z.ZodOptional<z.ZodBoolean>;
+                        fixes: z.ZodOptional<z.ZodArray<z.ZodType<ValidationFix, unknown, z.core.$ZodTypeInternals<ValidationFix, unknown>>>>;
+                        sourcePath: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>]>;
+        };
+    };
     "/publish-job-prepare": {
         POST: {
             req: {

package/dist/declarations/src/internal/index.d.ts

@@ -30,6 +30,7 @@ export * from "./aiTools/aiImageToolPatches.js";
 export * from "./aiTools/aiSourceToolPatches.js";
 export * from "./validation/partitionValidationErrors.js";
 export * from "./validation/blockingValidationErrors.js";
+export * from "./validation/studioFixes.js";
 export * from "./media/encodeImageDecisions.js";
 export * from "./search/searchIndex.js";
 export * from "./search/traverseSchemaSource.js";

package/dist/declarations/src/internal/validation/partitionValidationErrors.d.ts

@@ -26,3 +26,10 @@ export declare function partitionValidationErrors(validationErrors: Record<Sourc
     surfaced: Record<SourcePath, ValidationError[]>;
     skipped: Record<SourcePath, ValidationError[]>;
 };
+/**
+ * Whether the Studio leaves this error to the server, which repairs it on
+ * save, rather than showing it and holding a publish back for it. One rule
+ * for every gate: `val publish` asks the same question, so the CLI does not
+ * refuse what the Studio would publish.
+ */
+export declare function isRepairedOnSave(error: ValidationError): boolean;

package/dist/declarations/src/internal/validation/studioFixes.d.ts

@@ -0,0 +1,14 @@
+import type { ValidationFix } from "@valbuild/core";
+/**
+ * The fixes the Studio's full check offers a **Fix** button for.
+ *
+ * Each is one `createFixPatch` can build without a disk: it reads a file's
+ * bytes through `FixFiles`, or needs no bytes at all. The server refuses any
+ * other code on `/validate/fix`, and the Studio shows those errors with the
+ * command to run instead of a button — so a code is added here when its fix
+ * can run in http mode and on the platform, not before. See
+ * `docs/plans/studio-validate.md`, "Order of work".
+ */
+export declare const STUDIO_FIXES: readonly ["image:add-metadata", "image:check-metadata", "file:add-metadata", "file:check-metadata", "video:add-metadata", "videos:add-metadata", "view:check-module", "image:check-remote", "file:check-remote", "images:check-all-files", "files:check-all-files", "remote:rewrite-host"];
+export type StudioFix = (typeof STUDIO_FIXES)[number];
+export declare function isStudioFix(fix: ValidationFix): fix is StudioFix;

package/internal/dist/valbuild-shared-internal.cjs.dev.js

@@ -273,7 +273,7 @@ function convertImageNode(path, node, files, configDirectory, remoteOptions) {
       } else {
         console.error("Patched image URL does not start with /api/val/files: " + url);
       }
-    } else if (remoteOptions && noParamsUrl.startsWith(remoteOptions.remoteHost)) ; else if (!noParamsUrl.startsWith("/public")) {
+    } else if (core.Internal.remote.splitRemoteRef(noParamsUrl).status === "success") ; else if (!noParamsUrl.startsWith("/public")) {
       noParamsUrl = "/public".concat(noParamsUrl);
     } else {
       console.error("Unpatched image URL starts with /public: " + url);
@@ -1054,6 +1054,10 @@ var PatchBlock = zod.z.object({
   parentRef: ParentRef$1
 });
 
+var SourcePath = zod.z.string().transform(function (path) {
+  return path;
+});
+
 function _objectWithoutPropertiesLoose(r, e) {
   if (null == r) return {};
   var t = {};
@@ -1076,10 +1080,6 @@ function _objectWithoutProperties(e, t) {
   return i;
 }
 
-var SourcePath = zod.z.string().transform(function (path) {
-  return path;
-});
-
 var ModuleFilePath$1 = zod.z.string().transform(function (path) {
   return path;
 });
@@ -1621,7 +1621,7 @@ var ValConfig = zod.z.object({
   gitCommit: zod.z.string().optional(),
   gitBranch: zod.z.string().optional()
 });
-var ValidationFixZ = zod.z.union([zod.z.literal("image:add-metadata"), zod.z.literal("image:check-metadata"), zod.z.literal("image:check-remote"), zod.z.literal("image:upload-remote"), zod.z.literal("image:download-remote"), zod.z.literal("images:check-remote"), zod.z.literal("images:upload-remote"), zod.z.literal("file:add-metadata"), zod.z.literal("video:add-metadata"), zod.z.literal("video:upload-remote"), zod.z.literal("video:download-remote"), zod.z.literal("videos:add-metadata"), zod.z.literal("videos:check-remote"), zod.z.literal("videos:upload-remote"), zod.z.literal("file:check-metadata"), zod.z.literal("file:check-remote"), zod.z.literal("file:upload-remote"), zod.z.literal("file:download-remote"), zod.z.literal("files:check-remote"), zod.z.literal("files:upload-remote"), zod.z.literal("keyof:check-keys"), zod.z.literal("image:check-gallery"), zod.z.literal("file:check-gallery"), zod.z.literal("video:check-gallery"), zod.z.literal("router:check-route"), zod.z.literal("locale:check-locale"), zod.z.literal("router:check-locale-param"), zod.z.literal("record:fill-keys"), zod.z.literal("images:check-unique-folder"), zod.z.literal("files:check-unique-folder"), zod.z.literal("images:check-all-files"), zod.z.literal("files:check-all-files"), zod.z.literal("videos:check-unique-folder"), zod.z.literal("videos:check-all-files"), zod.z.literal("jsonValues:extract-entry"), zod.z.literal("view:check-module")]);
+var ValidationFixZ = zod.z.union([zod.z.literal("image:add-metadata"), zod.z.literal("image:check-metadata"), zod.z.literal("image:check-remote"), zod.z.literal("image:upload-remote"), zod.z.literal("image:download-remote"), zod.z.literal("images:check-remote"), zod.z.literal("images:upload-remote"), zod.z.literal("file:add-metadata"), zod.z.literal("video:add-metadata"), zod.z.literal("video:upload-remote"), zod.z.literal("video:download-remote"), zod.z.literal("videos:add-metadata"), zod.z.literal("videos:check-remote"), zod.z.literal("videos:upload-remote"), zod.z.literal("file:check-metadata"), zod.z.literal("file:check-remote"), zod.z.literal("file:upload-remote"), zod.z.literal("file:download-remote"), zod.z.literal("files:check-remote"), zod.z.literal("files:upload-remote"), zod.z.literal("keyof:check-keys"), zod.z.literal("image:check-gallery"), zod.z.literal("file:check-gallery"), zod.z.literal("video:check-gallery"), zod.z.literal("router:check-route"), zod.z.literal("locale:check-locale"), zod.z.literal("router:check-locale-param"), zod.z.literal("record:fill-keys"), zod.z.literal("images:check-unique-folder"), zod.z.literal("files:check-unique-folder"), zod.z.literal("images:check-all-files"), zod.z.literal("files:check-all-files"), zod.z.literal("videos:check-unique-folder"), zod.z.literal("videos:check-all-files"), zod.z.literal("jsonValues:extract-entry"), zod.z.literal("view:check-module"), zod.z.literal("external:upload"), zod.z.literal("remote:rewrite-host")]);
 var ValidationError = zod.z.object({
   message: zod.z.string(),
   value: zod.z.unknown().optional(),
@@ -2023,7 +2023,13 @@ var Api = {
           coreVersion: zod.z.string(),
           remoteFileBuckets: zod.z.array(zod.z.object({
             bucket: zod.z.string()
-          }))
+          })),
+          /**
+           * The host new refs name, from the project's settings: its own
+           * address for a Hosted project whose files are in R2. Optional,
+           * for a content service that predates it.
+           */
+          remoteHost: zod.z.string().optional()
         })
       }), zod.z.object({
         status: zod.z.literal(400),
@@ -2769,6 +2775,105 @@ var Api = {
       })])
     }
   },
+  /**
+   * The Studio's full check, one module per request: its sources against its
+   * schema and its local files against their bytes, on the content the caller
+   * is looking at. See `docs/plans/studio-validate.md`.
+   */
+  "/validate": {
+    POST: {
+      req: {
+        body: zod.z.object({
+          moduleFilePath: ModuleFilePath,
+          /**
+           * The patches the caller is showing, applied over base. Omitted
+           * means every pending patch, as `/sources/~`; empty means base.
+           */
+          patchIds: zod.z.array(PatchId).optional()
+        }),
+        cookies: {
+          val_session: zod.z.string().optional()
+        }
+      },
+      res: zod.z.union([unauthorizedResponse, notFoundResponse, zod.z.object({
+        status: zod.z.literal(500),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), /** No full check on this server (one running in a browser tab). */
+      zod.z.object({
+        status: zod.z.literal(501),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          moduleFilePath: ModuleFilePath,
+          errors: zod.z.record(zod.z.string(), zod.z.array(ValidationError)),
+          /** Set when the module's source could not be read at all. */
+          invalidSource: zod.z.string().optional(),
+          /**
+           * Hosts that did not serve this module's remote files: one entry
+           * per host, however many files it holds. Optional so a server
+           * from before remote checks still parses.
+           */
+          remoteHosts: zod.z.array(zod.z.object({
+            host: zod.z.string(),
+            status: zod.z.union([zod.z.literal("missing"), zod.z.literal("unreachable")]),
+            details: zod.z.string(),
+            sourcePaths: zod.z.array(SourcePath)
+          })).optional()
+        })
+      })])
+    }
+  },
+  /**
+   * The patch that fixes one error the full check reported. The server finds
+   * the error again rather than trusting the caller's copy, and builds only the
+   * fixes `STUDIO_FIXES` lists. The patch is returned, not applied: the Studio
+   * adds it as a pending change like any edit.
+   */
+  "/validate/fix": {
+    POST: {
+      req: {
+        body: zod.z.object({
+          moduleFilePath: ModuleFilePath,
+          sourcePath: SourcePath,
+          fix: ValidationFixZ,
+          patchIds: zod.z.array(PatchId).optional()
+        }),
+        cookies: {
+          val_session: zod.z.string().optional()
+        }
+      },
+      res: zod.z.union([unauthorizedResponse, notFoundResponse, zod.z.object({
+        status: zod.z.literal(400),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), zod.z.object({
+        status: zod.z.literal(500),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), /** No full check on this server (one running in a browser tab). */
+      zod.z.object({
+        status: zod.z.literal(501),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          patch: Patch,
+          remainingErrors: zod.z.array(ValidationError.extend({
+            sourcePath: zod.z.string().optional()
+          }))
+        })
+      })])
+    }
+  },
   "/publish-job-prepare": {
     POST: {
       req: {
@@ -6312,6 +6417,16 @@ function partitionValidationErrors(validationErrors) {
     skipped: skipped
   };
 }
+
+/**
+ * Whether the Studio leaves this error to the server, which repairs it on
+ * save, rather than showing it and holding a publish back for it. One rule
+ * for every gate: `val publish` asks the same question, so the CLI does not
+ * refuse what the Studio would publish.
+ */
+function isRepairedOnSave(error) {
+  return isSkippedFix(error);
+}
 function isSkippedFix(error) {
   var _error$fixes;
   var fixes = (_error$fixes = error.fixes) !== null && _error$fixes !== void 0 ? _error$fixes : [];
@@ -6381,6 +6496,12 @@ function isSkippableFixCode(fix) {
       // under `val external upload` and never under a blanket `--fix`. Surfacing
       // it is the whole point: someone has to decide.
       return false;
+    case "remote:rewrite-host":
+      // Reported only by the server's full check (the Studio's Validate page,
+      // `val validate`), which asks the ref's host -- never by a schema, so
+      // the Studio's own validator never holds one. Were it to, a person has
+      // to see it: the host is gone, and nothing on save repoints the ref.
+      return false;
     default:
       {
         return false;
@@ -6420,6 +6541,33 @@ function filterBlockingValidationErrors(validationErrors, schemas, sources) {
   return partitionValidationErrors(resolved).surfaced;
 }
 
+/**
+ * The fixes the Studio's full check offers a **Fix** button for.
+ *
+ * Each is one `createFixPatch` can build without a disk: it reads a file's
+ * bytes through `FixFiles`, or needs no bytes at all. The server refuses any
+ * other code on `/validate/fix`, and the Studio shows those errors with the
+ * command to run instead of a button — so a code is added here when its fix
+ * can run in http mode and on the platform, not before. See
+ * `docs/plans/studio-validate.md`, "Order of work".
+ */
+var STUDIO_FIXES = ["image:add-metadata", "image:check-metadata", "file:add-metadata", "file:check-metadata", "video:add-metadata", "videos:add-metadata", "view:check-module",
+// A stale remote ref: re-read through `FixFiles.readRemoteFile`, rewritten
+// on the host it was already on.
+"image:check-remote", "file:check-remote",
+// One entry of an `s.imagedir()` / `s.filedir()`: removed when its file is
+// gone, rewritten from its bytes when they disagree. Built for that entry
+// alone, never the whole directory (`fixForStudio`).
+"images:check-all-files", "files:check-all-files",
+// A platform ref on a host that no longer serves its project, pointed at
+// the project's own `valstart.dev` address. Derived from the ref alone.
+"remote:rewrite-host"];
+function isStudioFix(fix) {
+  return STUDIO_FIXES.some(function (studioFix) {
+    return studioFix === fix;
+  });
+}
+
 /**
  * Every decision `encode` makes, with none of the pixels.
  *
@@ -8838,6 +8986,7 @@ exports.RemirrorTextMark = RemirrorTextMark;
 exports.RestoreVerdict = RestoreVerdict;
 exports.RichTextOptions = RichTextOptions;
 exports.SCHEMA_SOURCE_FIXES = SCHEMA_SOURCE_FIXES;
+exports.STUDIO_FIXES = STUDIO_FIXES;
 exports.SerializedArraySchema = SerializedArraySchema;
 exports.SerializedBooleanSchema = SerializedBooleanSchema;
 exports.SerializedCodeSchema = SerializedCodeSchema;
@@ -8913,8 +9062,10 @@ exports.isInsidePatchSetPath = isInsidePatchSetPath;
 exports.isLocaleSchema = isLocaleSchema;
 exports.isMimeTypeAccepted = isMimeTypeAccepted;
 exports.isRemoteSchema = isRemoteSchema;
+exports.isRepairedOnSave = isRepairedOnSave;
 exports.isSchemaSourceFixError = isSchemaSourceFixError;
 exports.isSkippedSource = isSkippedSource;
+exports.isStudioFix = isStudioFix;
 exports.joinSharedChanges = joinSharedChanges;
 exports.keyOfRecordPath = keyOfRecordPath;
 exports.levenshtein = levenshtein;

package/internal/dist/valbuild-shared-internal.cjs.prod.js

@@ -273,7 +273,7 @@ function convertImageNode(path, node, files, configDirectory, remoteOptions) {
       } else {
         console.error("Patched image URL does not start with /api/val/files: " + url);
       }
-    } else if (remoteOptions && noParamsUrl.startsWith(remoteOptions.remoteHost)) ; else if (!noParamsUrl.startsWith("/public")) {
+    } else if (core.Internal.remote.splitRemoteRef(noParamsUrl).status === "success") ; else if (!noParamsUrl.startsWith("/public")) {
       noParamsUrl = "/public".concat(noParamsUrl);
     } else {
       console.error("Unpatched image URL starts with /public: " + url);
@@ -1054,6 +1054,10 @@ var PatchBlock = zod.z.object({
   parentRef: ParentRef$1
 });
 
+var SourcePath = zod.z.string().transform(function (path) {
+  return path;
+});
+
 function _objectWithoutPropertiesLoose(r, e) {
   if (null == r) return {};
   var t = {};
@@ -1076,10 +1080,6 @@ function _objectWithoutProperties(e, t) {
   return i;
 }
 
-var SourcePath = zod.z.string().transform(function (path) {
-  return path;
-});
-
 var ModuleFilePath$1 = zod.z.string().transform(function (path) {
   return path;
 });
@@ -1621,7 +1621,7 @@ var ValConfig = zod.z.object({
   gitCommit: zod.z.string().optional(),
   gitBranch: zod.z.string().optional()
 });
-var ValidationFixZ = zod.z.union([zod.z.literal("image:add-metadata"), zod.z.literal("image:check-metadata"), zod.z.literal("image:check-remote"), zod.z.literal("image:upload-remote"), zod.z.literal("image:download-remote"), zod.z.literal("images:check-remote"), zod.z.literal("images:upload-remote"), zod.z.literal("file:add-metadata"), zod.z.literal("video:add-metadata"), zod.z.literal("video:upload-remote"), zod.z.literal("video:download-remote"), zod.z.literal("videos:add-metadata"), zod.z.literal("videos:check-remote"), zod.z.literal("videos:upload-remote"), zod.z.literal("file:check-metadata"), zod.z.literal("file:check-remote"), zod.z.literal("file:upload-remote"), zod.z.literal("file:download-remote"), zod.z.literal("files:check-remote"), zod.z.literal("files:upload-remote"), zod.z.literal("keyof:check-keys"), zod.z.literal("image:check-gallery"), zod.z.literal("file:check-gallery"), zod.z.literal("video:check-gallery"), zod.z.literal("router:check-route"), zod.z.literal("locale:check-locale"), zod.z.literal("router:check-locale-param"), zod.z.literal("record:fill-keys"), zod.z.literal("images:check-unique-folder"), zod.z.literal("files:check-unique-folder"), zod.z.literal("images:check-all-files"), zod.z.literal("files:check-all-files"), zod.z.literal("videos:check-unique-folder"), zod.z.literal("videos:check-all-files"), zod.z.literal("jsonValues:extract-entry"), zod.z.literal("view:check-module")]);
+var ValidationFixZ = zod.z.union([zod.z.literal("image:add-metadata"), zod.z.literal("image:check-metadata"), zod.z.literal("image:check-remote"), zod.z.literal("image:upload-remote"), zod.z.literal("image:download-remote"), zod.z.literal("images:check-remote"), zod.z.literal("images:upload-remote"), zod.z.literal("file:add-metadata"), zod.z.literal("video:add-metadata"), zod.z.literal("video:upload-remote"), zod.z.literal("video:download-remote"), zod.z.literal("videos:add-metadata"), zod.z.literal("videos:check-remote"), zod.z.literal("videos:upload-remote"), zod.z.literal("file:check-metadata"), zod.z.literal("file:check-remote"), zod.z.literal("file:upload-remote"), zod.z.literal("file:download-remote"), zod.z.literal("files:check-remote"), zod.z.literal("files:upload-remote"), zod.z.literal("keyof:check-keys"), zod.z.literal("image:check-gallery"), zod.z.literal("file:check-gallery"), zod.z.literal("video:check-gallery"), zod.z.literal("router:check-route"), zod.z.literal("locale:check-locale"), zod.z.literal("router:check-locale-param"), zod.z.literal("record:fill-keys"), zod.z.literal("images:check-unique-folder"), zod.z.literal("files:check-unique-folder"), zod.z.literal("images:check-all-files"), zod.z.literal("files:check-all-files"), zod.z.literal("videos:check-unique-folder"), zod.z.literal("videos:check-all-files"), zod.z.literal("jsonValues:extract-entry"), zod.z.literal("view:check-module"), zod.z.literal("external:upload"), zod.z.literal("remote:rewrite-host")]);
 var ValidationError = zod.z.object({
   message: zod.z.string(),
   value: zod.z.unknown().optional(),
@@ -2023,7 +2023,13 @@ var Api = {
           coreVersion: zod.z.string(),
           remoteFileBuckets: zod.z.array(zod.z.object({
             bucket: zod.z.string()
-          }))
+          })),
+          /**
+           * The host new refs name, from the project's settings: its own
+           * address for a Hosted project whose files are in R2. Optional,
+           * for a content service that predates it.
+           */
+          remoteHost: zod.z.string().optional()
         })
       }), zod.z.object({
         status: zod.z.literal(400),
@@ -2769,6 +2775,105 @@ var Api = {
       })])
     }
   },
+  /**
+   * The Studio's full check, one module per request: its sources against its
+   * schema and its local files against their bytes, on the content the caller
+   * is looking at. See `docs/plans/studio-validate.md`.
+   */
+  "/validate": {
+    POST: {
+      req: {
+        body: zod.z.object({
+          moduleFilePath: ModuleFilePath,
+          /**
+           * The patches the caller is showing, applied over base. Omitted
+           * means every pending patch, as `/sources/~`; empty means base.
+           */
+          patchIds: zod.z.array(PatchId).optional()
+        }),
+        cookies: {
+          val_session: zod.z.string().optional()
+        }
+      },
+      res: zod.z.union([unauthorizedResponse, notFoundResponse, zod.z.object({
+        status: zod.z.literal(500),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), /** No full check on this server (one running in a browser tab). */
+      zod.z.object({
+        status: zod.z.literal(501),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          moduleFilePath: ModuleFilePath,
+          errors: zod.z.record(zod.z.string(), zod.z.array(ValidationError)),
+          /** Set when the module's source could not be read at all. */
+          invalidSource: zod.z.string().optional(),
+          /**
+           * Hosts that did not serve this module's remote files: one entry
+           * per host, however many files it holds. Optional so a server
+           * from before remote checks still parses.
+           */
+          remoteHosts: zod.z.array(zod.z.object({
+            host: zod.z.string(),
+            status: zod.z.union([zod.z.literal("missing"), zod.z.literal("unreachable")]),
+            details: zod.z.string(),
+            sourcePaths: zod.z.array(SourcePath)
+          })).optional()
+        })
+      })])
+    }
+  },
+  /**
+   * The patch that fixes one error the full check reported. The server finds
+   * the error again rather than trusting the caller's copy, and builds only the
+   * fixes `STUDIO_FIXES` lists. The patch is returned, not applied: the Studio
+   * adds it as a pending change like any edit.
+   */
+  "/validate/fix": {
+    POST: {
+      req: {
+        body: zod.z.object({
+          moduleFilePath: ModuleFilePath,
+          sourcePath: SourcePath,
+          fix: ValidationFixZ,
+          patchIds: zod.z.array(PatchId).optional()
+        }),
+        cookies: {
+          val_session: zod.z.string().optional()
+        }
+      },
+      res: zod.z.union([unauthorizedResponse, notFoundResponse, zod.z.object({
+        status: zod.z.literal(400),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), zod.z.object({
+        status: zod.z.literal(500),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), /** No full check on this server (one running in a browser tab). */
+      zod.z.object({
+        status: zod.z.literal(501),
+        json: zod.z.object({
+          message: zod.z.string()
+        })
+      }), zod.z.object({
+        status: zod.z.literal(200),
+        json: zod.z.object({
+          patch: Patch,
+          remainingErrors: zod.z.array(ValidationError.extend({
+            sourcePath: zod.z.string().optional()
+          }))
+        })
+      })])
+    }
+  },
   "/publish-job-prepare": {
     POST: {
       req: {
@@ -6312,6 +6417,16 @@ function partitionValidationErrors(validationErrors) {
     skipped: skipped
   };
 }
+
+/**
+ * Whether the Studio leaves this error to the server, which repairs it on
+ * save, rather than showing it and holding a publish back for it. One rule
+ * for every gate: `val publish` asks the same question, so the CLI does not
+ * refuse what the Studio would publish.
+ */
+function isRepairedOnSave(error) {
+  return isSkippedFix(error);
+}
 function isSkippedFix(error) {
   var _error$fixes;
   var fixes = (_error$fixes = error.fixes) !== null && _error$fixes !== void 0 ? _error$fixes : [];
@@ -6381,6 +6496,12 @@ function isSkippableFixCode(fix) {
       // under `val external upload` and never under a blanket `--fix`. Surfacing
       // it is the whole point: someone has to decide.
       return false;
+    case "remote:rewrite-host":
+      // Reported only by the server's full check (the Studio's Validate page,
+      // `val validate`), which asks the ref's host -- never by a schema, so
+      // the Studio's own validator never holds one. Were it to, a person has
+      // to see it: the host is gone, and nothing on save repoints the ref.
+      return false;
     default:
       {
         return false;
@@ -6420,6 +6541,33 @@ function filterBlockingValidationErrors(validationErrors, schemas, sources) {
   return partitionValidationErrors(resolved).surfaced;
 }
 
+/**
+ * The fixes the Studio's full check offers a **Fix** button for.
+ *
+ * Each is one `createFixPatch` can build without a disk: it reads a file's
+ * bytes through `FixFiles`, or needs no bytes at all. The server refuses any
+ * other code on `/validate/fix`, and the Studio shows those errors with the
+ * command to run instead of a button — so a code is added here when its fix
+ * can run in http mode and on the platform, not before. See
+ * `docs/plans/studio-validate.md`, "Order of work".
+ */
+var STUDIO_FIXES = ["image:add-metadata", "image:check-metadata", "file:add-metadata", "file:check-metadata", "video:add-metadata", "videos:add-metadata", "view:check-module",
+// A stale remote ref: re-read through `FixFiles.readRemoteFile`, rewritten
+// on the host it was already on.
+"image:check-remote", "file:check-remote",
+// One entry of an `s.imagedir()` / `s.filedir()`: removed when its file is
+// gone, rewritten from its bytes when they disagree. Built for that entry
+// alone, never the whole directory (`fixForStudio`).
+"images:check-all-files", "files:check-all-files",
+// A platform ref on a host that no longer serves its project, pointed at
+// the project's own `valstart.dev` address. Derived from the ref alone.
+"remote:rewrite-host"];
+function isStudioFix(fix) {
+  return STUDIO_FIXES.some(function (studioFix) {
+    return studioFix === fix;
+  });
+}
+
 /**
  * Every decision `encode` makes, with none of the pixels.
  *
@@ -8838,6 +8986,7 @@ exports.RemirrorTextMark = RemirrorTextMark;
 exports.RestoreVerdict = RestoreVerdict;
 exports.RichTextOptions = RichTextOptions;
 exports.SCHEMA_SOURCE_FIXES = SCHEMA_SOURCE_FIXES;
+exports.STUDIO_FIXES = STUDIO_FIXES;
 exports.SerializedArraySchema = SerializedArraySchema;
 exports.SerializedBooleanSchema = SerializedBooleanSchema;
 exports.SerializedCodeSchema = SerializedCodeSchema;
@@ -8913,8 +9062,10 @@ exports.isInsidePatchSetPath = isInsidePatchSetPath;
 exports.isLocaleSchema = isLocaleSchema;
 exports.isMimeTypeAccepted = isMimeTypeAccepted;
 exports.isRemoteSchema = isRemoteSchema;
+exports.isRepairedOnSave = isRepairedOnSave;
 exports.isSchemaSourceFixError = isSchemaSourceFixError;
 exports.isSkippedSource = isSkippedSource;
+exports.isStudioFix = isStudioFix;
 exports.joinSharedChanges = joinSharedChanges;
 exports.keyOfRecordPath = keyOfRecordPath;
 exports.levenshtein = levenshtein;

package/internal/dist/valbuild-shared-internal.esm.js

@@ -266,7 +266,7 @@ function convertImageNode(path, node, files, configDirectory, remoteOptions) {
       } else {
         console.error("Patched image URL does not start with /api/val/files: " + url);
       }
-    } else if (remoteOptions && noParamsUrl.startsWith(remoteOptions.remoteHost)) ; else if (!noParamsUrl.startsWith("/public")) {
+    } else if (Internal.remote.splitRemoteRef(noParamsUrl).status === "success") ; else if (!noParamsUrl.startsWith("/public")) {
       noParamsUrl = "/public".concat(noParamsUrl);
     } else {
       console.error("Unpatched image URL starts with /public: " + url);
@@ -1047,6 +1047,10 @@ var PatchBlock = z.object({
   parentRef: ParentRef$1
 });
 
+var SourcePath = z.string().transform(function (path) {
+  return path;
+});
+
 function _objectWithoutPropertiesLoose(r, e) {
   if (null == r) return {};
   var t = {};
@@ -1069,10 +1073,6 @@ function _objectWithoutProperties(e, t) {
   return i;
 }
 
-var SourcePath = z.string().transform(function (path) {
-  return path;
-});
-
 var ModuleFilePath$1 = z.string().transform(function (path) {
   return path;
 });
@@ -1614,7 +1614,7 @@ var ValConfig = z.object({
   gitCommit: z.string().optional(),
   gitBranch: z.string().optional()
 });
-var ValidationFixZ = z.union([z.literal("image:add-metadata"), z.literal("image:check-metadata"), z.literal("image:check-remote"), z.literal("image:upload-remote"), z.literal("image:download-remote"), z.literal("images:check-remote"), z.literal("images:upload-remote"), z.literal("file:add-metadata"), z.literal("video:add-metadata"), z.literal("video:upload-remote"), z.literal("video:download-remote"), z.literal("videos:add-metadata"), z.literal("videos:check-remote"), z.literal("videos:upload-remote"), z.literal("file:check-metadata"), z.literal("file:check-remote"), z.literal("file:upload-remote"), z.literal("file:download-remote"), z.literal("files:check-remote"), z.literal("files:upload-remote"), z.literal("keyof:check-keys"), z.literal("image:check-gallery"), z.literal("file:check-gallery"), z.literal("video:check-gallery"), z.literal("router:check-route"), z.literal("locale:check-locale"), z.literal("router:check-locale-param"), z.literal("record:fill-keys"), z.literal("images:check-unique-folder"), z.literal("files:check-unique-folder"), z.literal("images:check-all-files"), z.literal("files:check-all-files"), z.literal("videos:check-unique-folder"), z.literal("videos:check-all-files"), z.literal("jsonValues:extract-entry"), z.literal("view:check-module")]);
+var ValidationFixZ = z.union([z.literal("image:add-metadata"), z.literal("image:check-metadata"), z.literal("image:check-remote"), z.literal("image:upload-remote"), z.literal("image:download-remote"), z.literal("images:check-remote"), z.literal("images:upload-remote"), z.literal("file:add-metadata"), z.literal("video:add-metadata"), z.literal("video:upload-remote"), z.literal("video:download-remote"), z.literal("videos:add-metadata"), z.literal("videos:check-remote"), z.literal("videos:upload-remote"), z.literal("file:check-metadata"), z.literal("file:check-remote"), z.literal("file:upload-remote"), z.literal("file:download-remote"), z.literal("files:check-remote"), z.literal("files:upload-remote"), z.literal("keyof:check-keys"), z.literal("image:check-gallery"), z.literal("file:check-gallery"), z.literal("video:check-gallery"), z.literal("router:check-route"), z.literal("locale:check-locale"), z.literal("router:check-locale-param"), z.literal("record:fill-keys"), z.literal("images:check-unique-folder"), z.literal("files:check-unique-folder"), z.literal("images:check-all-files"), z.literal("files:check-all-files"), z.literal("videos:check-unique-folder"), z.literal("videos:check-all-files"), z.literal("jsonValues:extract-entry"), z.literal("view:check-module"), z.literal("external:upload"), z.literal("remote:rewrite-host")]);
 var ValidationError = z.object({
   message: z.string(),
   value: z.unknown().optional(),
@@ -2016,7 +2016,13 @@ var Api = {
           coreVersion: z.string(),
           remoteFileBuckets: z.array(z.object({
             bucket: z.string()
-          }))
+          })),
+          /**
+           * The host new refs name, from the project's settings: its own
+           * address for a Hosted project whose files are in R2. Optional,
+           * for a content service that predates it.
+           */
+          remoteHost: z.string().optional()
         })
       }), z.object({
         status: z.literal(400),
@@ -2762,6 +2768,105 @@ var Api = {
       })])
     }
   },
+  /**
+   * The Studio's full check, one module per request: its sources against its
+   * schema and its local files against their bytes, on the content the caller
+   * is looking at. See `docs/plans/studio-validate.md`.
+   */
+  "/validate": {
+    POST: {
+      req: {
+        body: z.object({
+          moduleFilePath: ModuleFilePath,
+          /**
+           * The patches the caller is showing, applied over base. Omitted
+           * means every pending patch, as `/sources/~`; empty means base.
+           */
+          patchIds: z.array(PatchId).optional()
+        }),
+        cookies: {
+          val_session: z.string().optional()
+        }
+      },
+      res: z.union([unauthorizedResponse, notFoundResponse, z.object({
+        status: z.literal(500),
+        json: z.object({
+          message: z.string()
+        })
+      }), /** No full check on this server (one running in a browser tab). */
+      z.object({
+        status: z.literal(501),
+        json: z.object({
+          message: z.string()
+        })
+      }), z.object({
+        status: z.literal(200),
+        json: z.object({
+          moduleFilePath: ModuleFilePath,
+          errors: z.record(z.string(), z.array(ValidationError)),
+          /** Set when the module's source could not be read at all. */
+          invalidSource: z.string().optional(),
+          /**
+           * Hosts that did not serve this module's remote files: one entry
+           * per host, however many files it holds. Optional so a server
+           * from before remote checks still parses.
+           */
+          remoteHosts: z.array(z.object({
+            host: z.string(),
+            status: z.union([z.literal("missing"), z.literal("unreachable")]),
+            details: z.string(),
+            sourcePaths: z.array(SourcePath)
+          })).optional()
+        })
+      })])
+    }
+  },
+  /**
+   * The patch that fixes one error the full check reported. The server finds
+   * the error again rather than trusting the caller's copy, and builds only the
+   * fixes `STUDIO_FIXES` lists. The patch is returned, not applied: the Studio
+   * adds it as a pending change like any edit.
+   */
+  "/validate/fix": {
+    POST: {
+      req: {
+        body: z.object({
+          moduleFilePath: ModuleFilePath,
+          sourcePath: SourcePath,
+          fix: ValidationFixZ,
+          patchIds: z.array(PatchId).optional()
+        }),
+        cookies: {
+          val_session: z.string().optional()
+        }
+      },
+      res: z.union([unauthorizedResponse, notFoundResponse, z.object({
+        status: z.literal(400),
+        json: z.object({
+          message: z.string()
+        })
+      }), z.object({
+        status: z.literal(500),
+        json: z.object({
+          message: z.string()
+        })
+      }), /** No full check on this server (one running in a browser tab). */
+      z.object({
+        status: z.literal(501),
+        json: z.object({
+          message: z.string()
+        })
+      }), z.object({
+        status: z.literal(200),
+        json: z.object({
+          patch: Patch,
+          remainingErrors: z.array(ValidationError.extend({
+            sourcePath: z.string().optional()
+          }))
+        })
+      })])
+    }
+  },
   "/publish-job-prepare": {
     POST: {
       req: {
@@ -6305,6 +6410,16 @@ function partitionValidationErrors(validationErrors) {
     skipped: skipped
   };
 }
+
+/**
+ * Whether the Studio leaves this error to the server, which repairs it on
+ * save, rather than showing it and holding a publish back for it. One rule
+ * for every gate: `val publish` asks the same question, so the CLI does not
+ * refuse what the Studio would publish.
+ */
+function isRepairedOnSave(error) {
+  return isSkippedFix(error);
+}
 function isSkippedFix(error) {
   var _error$fixes;
   var fixes = (_error$fixes = error.fixes) !== null && _error$fixes !== void 0 ? _error$fixes : [];
@@ -6374,6 +6489,12 @@ function isSkippableFixCode(fix) {
       // under `val external upload` and never under a blanket `--fix`. Surfacing
       // it is the whole point: someone has to decide.
       return false;
+    case "remote:rewrite-host":
+      // Reported only by the server's full check (the Studio's Validate page,
+      // `val validate`), which asks the ref's host -- never by a schema, so
+      // the Studio's own validator never holds one. Were it to, a person has
+      // to see it: the host is gone, and nothing on save repoints the ref.
+      return false;
     default:
       {
         return false;
@@ -6413,6 +6534,33 @@ function filterBlockingValidationErrors(validationErrors, schemas, sources) {
   return partitionValidationErrors(resolved).surfaced;
 }
 
+/**
+ * The fixes the Studio's full check offers a **Fix** button for.
+ *
+ * Each is one `createFixPatch` can build without a disk: it reads a file's
+ * bytes through `FixFiles`, or needs no bytes at all. The server refuses any
+ * other code on `/validate/fix`, and the Studio shows those errors with the
+ * command to run instead of a button — so a code is added here when its fix
+ * can run in http mode and on the platform, not before. See
+ * `docs/plans/studio-validate.md`, "Order of work".
+ */
+var STUDIO_FIXES = ["image:add-metadata", "image:check-metadata", "file:add-metadata", "file:check-metadata", "video:add-metadata", "videos:add-metadata", "view:check-module",
+// A stale remote ref: re-read through `FixFiles.readRemoteFile`, rewritten
+// on the host it was already on.
+"image:check-remote", "file:check-remote",
+// One entry of an `s.imagedir()` / `s.filedir()`: removed when its file is
+// gone, rewritten from its bytes when they disagree. Built for that entry
+// alone, never the whole directory (`fixForStudio`).
+"images:check-all-files", "files:check-all-files",
+// A platform ref on a host that no longer serves its project, pointed at
+// the project's own `valstart.dev` address. Derived from the ref alone.
+"remote:rewrite-host"];
+function isStudioFix(fix) {
+  return STUDIO_FIXES.some(function (studioFix) {
+    return studioFix === fix;
+  });
+}
+
 /**
  * Every decision `encode` makes, with none of the pixels.
  *
@@ -8767,4 +8915,4 @@ function schemaErrorsOf(schema, moduleFilePath, source) {
   return errors;
 }
 
-export { AA_LARGE, AA_TEXT, Api, BRAND_CONTRAST_PAIRS, BinaryFileRef, CodeOptions, ColorOptions, DEFAULT_ERROR_MESSAGE, DateOptions, ENCODE_DEFAULTS, ENCODE_MIME_TYPE_OF, FileOptions, HistoricalCommit, HistoricalModule, HistoricalPatchSet, HistoryError, ImageEncodeOption, ImageOptions, JSONValue, JSON_ENTRIES_BATCH_MAX, ModuleComparison, NEVER_ENCODED, ParentRef$1 as ParentRef, Patch, PatchBlock, PatchId, PatchJSON, PatchSets, PlanRefusalError, PublishProtocolError, RAMP_STEPS, RemirrorBr, RemirrorBulletList, RemirrorHeading, RemirrorImage, RemirrorJSON, RemirrorLinkMark, RemirrorListItem, RemirrorOrderedList, RemirrorParagraph, RemirrorText, RemirrorTextMark, RestoreVerdict, RichTextOptions, SCHEMA_SOURCE_FIXES, SerializedArraySchema, SerializedBooleanSchema, SerializedCodeSchema, SerializedColorSchema, SerializedDateSchema, SerializedDateTimeSchema, SerializedDiscriminatedUnionSchema, SerializedEnumSchema, SerializedFileSchema, SerializedImageSchema, SerializedKeyOfSchema, SerializedLiteralSchema, SerializedLocaleSchema, SerializedNumberSchema, SerializedObjectSchema, SerializedRecordSchema, SerializedRichTextSchema, SerializedRouteSchema, SerializedSchema, SerializedSettingsSchema, SerializedStringSchema, SerializedValViewSchema, SerializedVideoSchema, SharedValConfig, VAL_ENABLE_COOKIE_NAME, VAL_GREEN_RAMP, VAL_SESSION_COOKIE, VAL_STATE_COOKIE, VAL_STUDIO_HEADER, ValCommit, ValDeployment, VideoOptions, VideoStreamOption, WASM_ENCODED_MIME_TYPES, accentRamp, buildDuplicatePatch, buildEmptyAtPathPatch, buildFileRefValue, buildImageGalleryPatch, buildRemoveImageGalleryEntryPatch, buildSearchIndex, chainHeadOf, checkCompatibility, chooseEncoded, concatModulePath, contrastRatio, createRegExpFromPattern, createSearchIndex, createValClient, declaredLocales, describeContainerAtPath, emptyOf, enumLocaleTag, explainIncompatible, fallbackMimeType, filterBlockingValidationErrors, filterRoutesByPatterns, findSimilar, fitWithin, flattenRichText, forEachRichTextImage, getErrorMessageFromUnknownJson, getFilenameFromRef, getInlineImgInfo, getKeyOfRecordAt, getRefParts, getRoutesOf, getRoutesWithModulePaths, getSourceAt, getValDemo, indexModule, isInsidePatchSetPath, isLocaleSchema, isMimeTypeAccepted, isRemoteSchema, isSchemaSourceFixError, isSkippedSource, joinSharedChanges, keyOfRecordPath, levenshtein, localeAt, localeMeantBy, memoizePerRequest, newestCommitSha, parseArtifacts, parseBuildTarget, parseCancel, parseDeclare, parseDiscard, parseJob, parseNewestCiRun, parsePress, parseProblems, parseProjectSource, parsePromote, parsePublishToken, parseRenew, parseRequestStatus, parseStatus, parseUpdateTarget, parseVerify, partitionValidationErrors, performSearch, relativeLuminance, remirrorToRichTextSource, removeModule, resolveEncodeSettings, resolvePairGround, resolveSchemaSourceFixForError, resolveSchemaSourceFixes, resolveSerializedSchemaAtPath, richTextImageSchema, richTextToRemirror, safeParsePatch, schemaErrorsOf, schemaTypesOfPath, selectionClosure, shouldEncodeWithWasm, sideFiles, sideSource, sourcePathOfChild, themeCustomProperties, toolNames, traverseSchemaSource, urlOf, validateRoutePatterns, withExtension };
+export { AA_LARGE, AA_TEXT, Api, BRAND_CONTRAST_PAIRS, BinaryFileRef, CodeOptions, ColorOptions, DEFAULT_ERROR_MESSAGE, DateOptions, ENCODE_DEFAULTS, ENCODE_MIME_TYPE_OF, FileOptions, HistoricalCommit, HistoricalModule, HistoricalPatchSet, HistoryError, ImageEncodeOption, ImageOptions, JSONValue, JSON_ENTRIES_BATCH_MAX, ModuleComparison, NEVER_ENCODED, ParentRef$1 as ParentRef, Patch, PatchBlock, PatchId, PatchJSON, PatchSets, PlanRefusalError, PublishProtocolError, RAMP_STEPS, RemirrorBr, RemirrorBulletList, RemirrorHeading, RemirrorImage, RemirrorJSON, RemirrorLinkMark, RemirrorListItem, RemirrorOrderedList, RemirrorParagraph, RemirrorText, RemirrorTextMark, RestoreVerdict, RichTextOptions, SCHEMA_SOURCE_FIXES, STUDIO_FIXES, SerializedArraySchema, SerializedBooleanSchema, SerializedCodeSchema, SerializedColorSchema, SerializedDateSchema, SerializedDateTimeSchema, SerializedDiscriminatedUnionSchema, SerializedEnumSchema, SerializedFileSchema, SerializedImageSchema, SerializedKeyOfSchema, SerializedLiteralSchema, SerializedLocaleSchema, SerializedNumberSchema, SerializedObjectSchema, SerializedRecordSchema, SerializedRichTextSchema, SerializedRouteSchema, SerializedSchema, SerializedSettingsSchema, SerializedStringSchema, SerializedValViewSchema, SerializedVideoSchema, SharedValConfig, VAL_ENABLE_COOKIE_NAME, VAL_GREEN_RAMP, VAL_SESSION_COOKIE, VAL_STATE_COOKIE, VAL_STUDIO_HEADER, ValCommit, ValDeployment, VideoOptions, VideoStreamOption, WASM_ENCODED_MIME_TYPES, accentRamp, buildDuplicatePatch, buildEmptyAtPathPatch, buildFileRefValue, buildImageGalleryPatch, buildRemoveImageGalleryEntryPatch, buildSearchIndex, chainHeadOf, checkCompatibility, chooseEncoded, concatModulePath, contrastRatio, createRegExpFromPattern, createSearchIndex, createValClient, declaredLocales, describeContainerAtPath, emptyOf, enumLocaleTag, explainIncompatible, fallbackMimeType, filterBlockingValidationErrors, filterRoutesByPatterns, findSimilar, fitWithin, flattenRichText, forEachRichTextImage, getErrorMessageFromUnknownJson, getFilenameFromRef, getInlineImgInfo, getKeyOfRecordAt, getRefParts, getRoutesOf, getRoutesWithModulePaths, getSourceAt, getValDemo, indexModule, isInsidePatchSetPath, isLocaleSchema, isMimeTypeAccepted, isRemoteSchema, isRepairedOnSave, isSchemaSourceFixError, isSkippedSource, isStudioFix, joinSharedChanges, keyOfRecordPath, levenshtein, localeAt, localeMeantBy, memoizePerRequest, newestCommitSha, parseArtifacts, parseBuildTarget, parseCancel, parseDeclare, parseDiscard, parseJob, parseNewestCiRun, parsePress, parseProblems, parseProjectSource, parsePromote, parsePublishToken, parseRenew, parseRequestStatus, parseStatus, parseUpdateTarget, parseVerify, partitionValidationErrors, performSearch, relativeLuminance, remirrorToRichTextSource, removeModule, resolveEncodeSettings, resolvePairGround, resolveSchemaSourceFixForError, resolveSchemaSourceFixes, resolveSerializedSchemaAtPath, richTextImageSchema, richTextToRemirror, safeParsePatch, schemaErrorsOf, schemaTypesOfPath, selectionClosure, shouldEncodeWithWasm, sideFiles, sideSource, sourcePathOfChild, themeCustomProperties, toolNames, traverseSchemaSource, urlOf, validateRoutePatterns, withExtension };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@valbuild/shared",
-  "version": "0.147.0",
+  "version": "0.148.0",
   "private": false,
   "description": "Val shared types and utilities",
   "repository": {
@@ -37,7 +37,7 @@
     "flexsearch": "^0.8.212",
     "zod": "^4.4.3",
     "zod-validation-error": "^5.0.0",
-    "@valbuild/core": "0.147.0"
+    "@valbuild/core": "0.148.0"
   },
   "files": [
     "CHANGELOG.md",