@valbuild/shared 0.147.0 → 0.148.2

package/CHANGELOG.md

@@ -1,5 +1,106 @@
 # @valbuild/shared
 
+## 0.148.2
+
+### Patch Changes
+
+- [#889](https://github.com/valbuild/val/pull/889) [`dc7c8cc`](https://github.com/valbuild/val/commit/dc7c8ccd82f643e662d00225fabec411b5d39e3a) Thanks [@freekh](https://github.com/freekh)! - Val is quieter in your app's console. Errors and warnings you can act on still
+  print, now prefixed with `[val]` so you can filter them. Val's own debug
+  output, which used to reach your terminal and browser console, is now off by
+  default. That includes the `Invalid JWT` line that printed on every request
+  with an expired session cookie, the "verifying draft mode" and polling notices,
+  and the Studio's sync and WebSocket chatter.
+
+  To turn the debug output back on, for example when reporting a bug:
+
+  - on the server, set `VAL_DEBUG=1`
+  - in the browser, run `localStorage.setItem("val:debug", "1")` in the console.
+    It takes effect immediately, with no reload. Remove the key to turn it off
+    again.
+
+- Updated dependencies [[`dc7c8cc`](https://github.com/valbuild/val/commit/dc7c8ccd82f643e662d00225fabec411b5d39e3a)]:
+  - @valbuild/core@0.148.2
+
+## 0.148.0
+
+### Patch Changes
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Remote files are now addressed on the host the project's settings name. For a
+  project hosted by Val, that is the project's own address, and its remote images
+  and files are served from there rather than from `remote.val.build`. Every other
+  project is unchanged.
+
+  - The Studio, `val validate --fix` and the MCP image tool all take the host from
+    the project's settings, falling back to `remote.val.build` as before.
+  - Re-reading a remote file whose recorded size or type is out of date keeps it
+    on the host it was on.
+  - When a remote file's host cannot be reached, tooling downloads it from the
+    project's permanent `<id>.valstart.dev` address instead, and keeps it only if
+    its bytes match the file the address names.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Remote files served from a project's own site (addresses like
+  `https://www.acme.no/_val/file/…`) are now checked for whether that address
+  still serves the project. When a custom domain has been removed or moved to
+  another project, the image or file is reported, and **Fix** on the Studio's
+  Validate page — or `val validate --fix` — points it at the project's permanent
+  `<id>.valstart.dev` address. Nothing is uploaded or downloaded: only the address
+  changes.
+
+  Remote file addresses with a `/_val` prefix after the host are now recognised.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Fix existing remote images in rich text being saved as `/publichttps://…`.
+
+  Editing a rich text field could rewrite every remote image already in it into a
+  broken path when the field was not set up to upload remote images itself — for
+  example before the project's remote file settings had loaded, or when the
+  field's image schema is not `.remote()`. A published remote image is now kept
+  as it is, whatever host it is on.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - **Check everything** on the Studio's Validate page now checks media directories
+  (`s.imagedir()`, `s.filedir()`, `s.fontdir()` and `s.videodir()`) by the files
+  they list:
+
+  - An entry whose file is gone has a **Fix** that removes it from the directory.
+  - An image or file entry whose recorded size or type does not match its file has
+    a **Fix** that corrects it from the file, keeping its alt text.
+  - A video entry whose file is gone is reported, and is removed by hand: its
+    posters and captions may still be in use.
+  - A remote entry is checked with its host, like any remote file.
+
+  `val validate --fix` fixes media directories exactly as before.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - **Check everything** on the Studio's Validate page now checks remote images and
+  files too.
+
+  - A remote image or file whose address no longer matches what is recorded about
+    it (its size, type or the schema's options changed since it was uploaded) has
+    a **Fix**, which re-reads the file and corrects it, as `val validate --fix`
+    does.
+  - A remote host that does not answer is shown once, at the top of the page, with
+    how many files it holds and a **Try again**, rather than as an error on every
+    image.
+  - A file its host no longer has is shown at the image or file that uses it.
+
+  Images and files in your unpublished changes are not asked about until they are
+  published; the check makes sure the change still has them.
+
+- [#818](https://github.com/valbuild/val/pull/818) [`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1) Thanks [@freekh](https://github.com/freekh)! - Two new Studio API routes for the full content check, not yet used by the
+  Studio's UI:
+
+  - `POST /api/val/validate` checks one module — its content against its schema,
+    and its local images and files against their bytes — on the content the
+    Studio is showing.
+  - `POST /api/val/validate/fix` returns the patch that fixes one of those errors,
+    for the Studio to add as a pending change. It builds only the fixes that need
+    no disk or remote host: image, file and video metadata, and a view pointing at
+    the wrong module.
+
+  Also fixed: an API route whose name started with another route's name could be
+  answered by the other route.
+
+- Updated dependencies [[`562d032`](https://github.com/valbuild/val/commit/562d03280c3fcf97a80562e8b017dd2125ac4ad1)]:
+  - @valbuild/core@0.148.0
+
 ## 0.147.0
 
 ### Minor Changes

package/client/dist/valbuild-shared-client.cjs.dev.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var getSitemapTree = require('../../dist/getSitemapTree-f6254b32.cjs.dev.js');
+var getSitemapTree = require('../../dist/getSitemapTree-a7f2cc6d.cjs.dev.js');
 require('@valbuild/core');
 
 

package/client/dist/valbuild-shared-client.cjs.prod.js

@@ -2,7 +2,7 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var getSitemapTree = require('../../dist/getSitemapTree-109be3b8.cjs.prod.js');
+var getSitemapTree = require('../../dist/getSitemapTree-40d76bf8.cjs.prod.js');
 require('@valbuild/core');
 
 

package/client/dist/valbuild-shared-client.esm.js

@@ -1,2 +1,2 @@
-export { D as DEFAULT_CANVAS_SELECTION, e as DEFAULT_CANVAS_SELECTION_SOFT, b as VAL_AI_SESSION_STORAGE_KEY, d as VAL_CANVAS_MESSAGE, c as VAL_CANVAS_PARAM, V as VAL_CONFIG_SESSION_STORAGE_KEY, a as VAL_THEME_SESSION_STORAGE_KEY, h as formatRoutePattern, j as getNextAppRouterSourceFolder, n as getPageRouterSitemapTree, l as getPageRouterSourceFolder, o as getPatternFromModuleFilePath, k as getTanStackRouterSourceFolder, m as isTanStackRoutesFolder, g as isValCanvasFrame, i as isValCanvasPageMessage, f as isValCanvasStudioMessage, p as parseRoutePattern, w as withValCanvasParam } from '../../dist/getSitemapTree-c70ea145.esm.js';
+export { D as DEFAULT_CANVAS_SELECTION, e as DEFAULT_CANVAS_SELECTION_SOFT, b as VAL_AI_SESSION_STORAGE_KEY, d as VAL_CANVAS_MESSAGE, c as VAL_CANVAS_PARAM, V as VAL_CONFIG_SESSION_STORAGE_KEY, a as VAL_THEME_SESSION_STORAGE_KEY, h as formatRoutePattern, j as getNextAppRouterSourceFolder, n as getPageRouterSitemapTree, l as getPageRouterSourceFolder, o as getPatternFromModuleFilePath, k as getTanStackRouterSourceFolder, m as isTanStackRoutesFolder, g as isValCanvasFrame, i as isValCanvasPageMessage, f as isValCanvasStudioMessage, p as parseRoutePattern, w as withValCanvasParam } from '../../dist/getSitemapTree-cd006a36.esm.js';
 import '@valbuild/core';

package/dist/declarations/src/internal/ApiRoutes.d.ts

@@ -328,6 +328,7 @@ export declare const Api: {
                     remoteFileBuckets: z.ZodArray<z.ZodObject<{
                         bucket: z.ZodString;
                     }, z.core.$strip>>;
+                    remoteHost: z.ZodOptional<z.ZodString>;
                 }, z.core.$strip>;
             }, z.core.$strip>, z.ZodObject<{
                 status: z.ZodLiteral<400>;
@@ -1024,6 +1025,153 @@ export declare const Api: {
             }, z.core.$strip>]>;
         };
     };
+    /**
+     * The Studio's full check, one module per request: its sources against its
+     * schema and its local files against their bytes, on the content the caller
+     * is looking at. See `docs/plans/studio-validate.md`.
+     */
+    "/validate": {
+        POST: {
+            req: {
+                body: z.ZodObject<{
+                    moduleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+                    patchIds: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<PatchIdT, string, z.core.$ZodTypeInternals<PatchIdT, string>>>>;
+                }, z.core.$strip>;
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+            };
+            res: z.ZodUnion<readonly [z.ZodObject<{
+                status: z.ZodLiteral<401>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<404>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<500>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<501>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<200>;
+                json: z.ZodObject<{
+                    moduleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+                    errors: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+                        message: z.ZodString;
+                        value: z.ZodOptional<z.ZodUnknown>;
+                        fatal: z.ZodOptional<z.ZodBoolean>;
+                        fixes: z.ZodOptional<z.ZodArray<z.ZodType<ValidationFix, unknown, z.core.$ZodTypeInternals<ValidationFix, unknown>>>>;
+                    }, z.core.$strip>>>;
+                    invalidSource: z.ZodOptional<z.ZodString>;
+                    remoteHosts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        host: z.ZodString;
+                        status: z.ZodUnion<readonly [z.ZodLiteral<"missing">, z.ZodLiteral<"unreachable">]>;
+                        details: z.ZodString;
+                        sourcePaths: z.ZodArray<z.ZodType<SourcePathT, unknown, z.core.$ZodTypeInternals<SourcePathT, unknown>>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>]>;
+        };
+    };
+    /**
+     * The patch that fixes one error the full check reported. The server finds
+     * the error again rather than trusting the caller's copy, and builds only the
+     * fixes `STUDIO_FIXES` lists. The patch is returned, not applied: the Studio
+     * adds it as a pending change like any edit.
+     */
+    "/validate/fix": {
+        POST: {
+            req: {
+                body: z.ZodObject<{
+                    moduleFilePath: z.ZodString & z.ZodType<ModuleFilePath, string, z.core.$ZodTypeInternals<ModuleFilePath, string>>;
+                    sourcePath: z.ZodType<SourcePathT, unknown, z.core.$ZodTypeInternals<SourcePathT, unknown>>;
+                    fix: z.ZodType<ValidationFix, unknown, z.core.$ZodTypeInternals<ValidationFix, unknown>>;
+                    patchIds: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<PatchIdT, string, z.core.$ZodTypeInternals<PatchIdT, string>>>>;
+                }, z.core.$strip>;
+                cookies: {
+                    val_session: z.ZodOptional<z.ZodString>;
+                };
+            };
+            res: z.ZodUnion<readonly [z.ZodObject<{
+                status: z.ZodLiteral<401>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<404>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<400>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<500>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<501>;
+                json: z.ZodObject<{
+                    message: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>, z.ZodObject<{
+                status: z.ZodLiteral<200>;
+                json: z.ZodObject<{
+                    patch: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        op: z.ZodLiteral<"add">;
+                        path: z.ZodArray<z.ZodString>;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"remove">;
+                        path: z.ZodTuple<[z.ZodString], z.ZodString>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"replace">;
+                        path: z.ZodArray<z.ZodString>;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"move">;
+                        from: z.ZodTuple<[z.ZodString], z.ZodString>;
+                        path: z.ZodArray<z.ZodString>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"copy">;
+                        from: z.ZodArray<z.ZodString>;
+                        path: z.ZodArray<z.ZodString>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"test">;
+                        path: z.ZodArray<z.ZodString>;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        op: z.ZodLiteral<"file">;
+                        path: z.ZodArray<z.ZodString>;
+                        filePath: z.ZodString;
+                        value: z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>;
+                        remote: z.ZodBoolean;
+                        nestedFilePath: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        metadata: z.ZodOptional<z.ZodType<JSONValueT, unknown, z.core.$ZodTypeInternals<JSONValueT, unknown>>>;
+                    }, z.core.$strict>], "op">>;
+                    remainingErrors: z.ZodArray<z.ZodObject<{
+                        message: z.ZodString;
+                        value: z.ZodOptional<z.ZodUnknown>;
+                        fatal: z.ZodOptional<z.ZodBoolean>;
+                        fixes: z.ZodOptional<z.ZodArray<z.ZodType<ValidationFix, unknown, z.core.$ZodTypeInternals<ValidationFix, unknown>>>>;
+                        sourcePath: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>;
+            }, z.core.$strip>]>;
+        };
+    };
     "/publish-job-prepare": {
         POST: {
             req: {

package/dist/declarations/src/internal/index.d.ts

@@ -30,6 +30,7 @@ export * from "./aiTools/aiImageToolPatches.js";
 export * from "./aiTools/aiSourceToolPatches.js";
 export * from "./validation/partitionValidationErrors.js";
 export * from "./validation/blockingValidationErrors.js";
+export * from "./validation/studioFixes.js";
 export * from "./media/encodeImageDecisions.js";
 export * from "./search/searchIndex.js";
 export * from "./search/traverseSchemaSource.js";

package/dist/declarations/src/internal/validation/partitionValidationErrors.d.ts

@@ -26,3 +26,10 @@ export declare function partitionValidationErrors(validationErrors: Record<Sourc
     surfaced: Record<SourcePath, ValidationError[]>;
     skipped: Record<SourcePath, ValidationError[]>;
 };
+/**
+ * Whether the Studio leaves this error to the server, which repairs it on
+ * save, rather than showing it and holding a publish back for it. One rule
+ * for every gate: `val publish` asks the same question, so the CLI does not
+ * refuse what the Studio would publish.
+ */
+export declare function isRepairedOnSave(error: ValidationError): boolean;

package/dist/declarations/src/internal/validation/studioFixes.d.ts

@@ -0,0 +1,14 @@
+import type { ValidationFix } from "@valbuild/core";
+/**
+ * The fixes the Studio's full check offers a **Fix** button for.
+ *
+ * Each is one `createFixPatch` can build without a disk: it reads a file's
+ * bytes through `FixFiles`, or needs no bytes at all. The server refuses any
+ * other code on `/validate/fix`, and the Studio shows those errors with the
+ * command to run instead of a button — so a code is added here when its fix
+ * can run in http mode and on the platform, not before. See
+ * `docs/plans/studio-validate.md`, "Order of work".
+ */
+export declare const STUDIO_FIXES: readonly ["image:add-metadata", "image:check-metadata", "file:add-metadata", "file:check-metadata", "video:add-metadata", "videos:add-metadata", "view:check-module", "image:check-remote", "file:check-remote", "images:check-all-files", "files:check-all-files", "remote:rewrite-host"];
+export type StudioFix = (typeof STUDIO_FIXES)[number];
+export declare function isStudioFix(fix: ValidationFix): fix is StudioFix;

package/dist/{getSitemapTree-109be3b8.cjs.prod.js → getSitemapTree-40d76bf8.cjs.prod.js}

@@ -388,7 +388,7 @@ function getPageRouterSitemapTree(srcFolder, paths) {
           moduleFilePathS = path.moduleFilePath;
         var moduleFilePath = moduleFilePathS;
         if (!urlPath.startsWith("/")) {
-          console.error("urlPath must start with /: ".concat(urlPath));
+          core.Internal.log.error("urlPath must start with /: ".concat(urlPath));
           return 0; // continue
         }
         var pattern = getPatternFromModuleFilePath(moduleFilePath, srcFolder);

package/dist/{getSitemapTree-f6254b32.cjs.dev.js → getSitemapTree-a7f2cc6d.cjs.dev.js}

@@ -388,7 +388,7 @@ function getPageRouterSitemapTree(srcFolder, paths) {
           moduleFilePathS = path.moduleFilePath;
         var moduleFilePath = moduleFilePathS;
         if (!urlPath.startsWith("/")) {
-          console.error("urlPath must start with /: ".concat(urlPath));
+          core.Internal.log.error("urlPath must start with /: ".concat(urlPath));
           return 0; // continue
         }
         var pattern = getPatternFromModuleFilePath(moduleFilePath, srcFolder);

package/dist/{getSitemapTree-c70ea145.esm.js → getSitemapTree-cd006a36.esm.js}

@@ -386,7 +386,7 @@ function getPageRouterSitemapTree(srcFolder, paths) {
           moduleFilePathS = path.moduleFilePath;
         var moduleFilePath = moduleFilePathS;
         if (!urlPath.startsWith("/")) {
-          console.error("urlPath must start with /: ".concat(urlPath));
+          Internal.log.error("urlPath must start with /: ".concat(urlPath));
           return 0; // continue
         }
         var pattern = getPatternFromModuleFilePath(moduleFilePath, srcFolder);