@uniweb/build 0.28.1 → 0.29.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniweb/build",
-  "version": "0.28.1",
+  "version": "0.29.0",
   "description": "Build tooling for the Uniweb Component Web Platform",
   "type": "module",
   "exports": {
@@ -59,17 +59,15 @@
     "js-yaml": "^4.1.0",
     "sharp": "^0.35.3",
     "yaml": "^2.5.0",
-    "@uniweb/projections": "^0.5.0",
+    "@uniweb/content-reader": "^1.2.4",
     "@uniweb/semantic-parser": "^1.3.1",
+    "@uniweb/projections": "^0.5.1",
+    "@uniweb/content-writer": "^0.3.4",
     "@uniweb/schemas": "^0.2.11",
-    "@uniweb/theming": "^0.1.15",
-    "@uniweb/content-writer": "^0.3.4"
+    "@uniweb/theming": "^0.1.15"
   },
   "optionalDependencies": {
-    "@uniweb/content-reader": "^1.2.4",
-    "@uniweb/schemas": "^0.2.11",
-    "@uniweb/semantic-parser": "^1.3.1",
-    "@uniweb/runtime": "^0.13.0"
+    "@uniweb/runtime": "^0.13.1"
   },
   "peerDependencies": {
     "vite": "^5.0.0 || ^6.0.0 || ^7.0.0",
@@ -78,7 +76,7 @@
     "@tailwindcss/vite": "^4.0.0",
     "@vitejs/plugin-react": "^4.0.0 || ^5.0.0",
     "vite-plugin-svgr": "^4.0.0",
-    "@uniweb/core": "^0.13.0"
+    "@uniweb/core": "^0.13.1"
   },
   "peerDependenciesMeta": {
     "vite": {

package/src/i18n/audit.js

@@ -8,8 +8,8 @@
  */
 
 import { readFile, writeFile } from 'fs/promises'
-import { existsSync } from 'fs'
-import { join } from 'path'
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
 
 /**
  * Audit a locale file against the manifest

package/src/i18n/collections.js

@@ -11,9 +11,9 @@
  */
 
 import { readFile, writeFile, readdir, mkdir } from 'fs/promises'
-import { existsSync } from 'fs'
-import { join } from 'path'
-import { pathToFileURL } from 'url'
+import { existsSync } from 'node:fs'
+import { join } from 'node:path'
+import { pathToFileURL } from 'node:url'
 import { DATA_DIR } from '@uniweb/core'
 import { computeHash } from './hash.js'
 import { loadFreeformCollectionItem } from './freeform.js'

package/src/i18n/freeform-manifest.js

@@ -14,9 +14,9 @@
  */
 
 import { readFile, writeFile, mkdir } from 'fs/promises'
-import { existsSync } from 'fs'
-import { join, dirname } from 'path'
-import { createHash } from 'crypto'
+import { existsSync } from 'node:fs'
+import { join, dirname } from 'node:path'
+import { createHash } from 'node:crypto'
 
 const MANIFEST_FILENAME = '.manifest.json'
 

package/src/i18n/freeform.js

@@ -19,8 +19,8 @@
  */
 
 import { readFile, readdir, stat } from 'fs/promises'
-import { existsSync } from 'fs'
-import { join, relative, dirname } from 'path'
+import { existsSync } from 'node:fs'
+import { join, relative, dirname } from 'node:path'
 import yaml from 'js-yaml'
 
 // Try to import content-reader for markdown → ProseMirror conversion

package/src/i18n/hash.js

@@ -2,7 +2,7 @@
  * Hash utilities for i18n translation units
  */
 
-import { createHash } from 'crypto'
+import { createHash } from 'node:crypto'
 
 /**
  * Compute an 8-character hash for translation unit identification

package/src/i18n/index.js

@@ -8,8 +8,8 @@
  */
 
 import { readFile, writeFile, mkdir, readdir } from 'fs/promises'
-import { existsSync } from 'fs'
-import { join, dirname } from 'path'
+import { existsSync } from 'node:fs'
+import { join, dirname } from 'node:path'
 
 import { computeHash, normalizeText } from './hash.js'
 import { extractTranslatableContent } from './extract.js'

package/src/resolve-data-schema.js

@@ -426,12 +426,29 @@ async function loadSchemaFile(filePath) {
 }
 
 /**
- * Load an org's schema package from the FOUNDATION's context and pull the named
- * schema. Resolving from the foundation (not the build) lets each foundation pin
- * its own version of a shared schema package. The standard schemas ship in
- * `@uniweb/schemas` (referenced as `@std`); an org's own schemas ship in its
- * `@org/schemas` package — commonly a workspace package shared across the team's
- * foundations during local development.
+ * Load a scope's schema package and pull the named schema.
+ *
+ * The FOUNDATION's context is the primary resolution and stays that way: it is
+ * what lets each foundation pin its own version of a shared schema package. An
+ * `@org/schemas` is genuinely third-party — we cannot know it exists — so a
+ * foundation that references one must declare it.
+ *
+ * ⭐ `@std` IS THE ONE EXCEPTION, BECAUSE IT IS OURS. It ships in
+ * `@uniweb/schemas`, a framework package `@uniweb/build` already depends on and
+ * imports directly (the `@uniweb/schemas/format` import at the top of this
+ * file). Requiring a foundation author to install a package the tool doing the
+ * resolution is already carrying is a requirement with nothing behind it, so
+ * when the foundation has no copy we fall back to ours.
+ *
+ * ⚠️ A FALLBACK, NOT A REDIRECT. A foundation that installs `@uniweb/schemas`
+ * still gets its own — pinning and vendoring keep working — and `@org`
+ * behaviour does not change at all.
+ *
+ * ⛔ AND IT THROWS RATHER THAN DEGRADING. Neighbouring code soft-skips a schema
+ * it cannot resolve (a collection falls back to delivery-only), which is right
+ * for "the author never asked for one" and wrong here: a `@std/` ref IS the
+ * asking. Answering it with silence would turn a missing package into a schema
+ * that merely appears not to exist.
  */
 async function resolveScopedSchema(pkg, name, srcDir) {
   const req = createRequire(join(srcDir, 'package.json'))
@@ -439,12 +456,40 @@ async function resolveScopedSchema(pkg, name, srcDir) {
   try {
     entry = req.resolve(pkg)
   } catch {
+    if (pkg === SCOPE_PACKAGE.std) return readNamedSchema(await loadOwnStandardSchemas(pkg), name)
     throw new Error(
       `'${pkg}' is not installed in this foundation, but a schema ref needs it. ` +
-        `Add '${pkg}' to the foundation's dependencies to resolve those refs.`
+        `Add '${pkg}' to the foundation's devDependencies to resolve those refs ` +
+        `(it is needed to BUILD the foundation; nothing it provides reaches the bundle).`
     )
   }
-  const mod = await import(pathToFileURL(entry).href)
+  return readNamedSchema(await import(pathToFileURL(entry).href), name)
+}
+
+/** Pull one named schema out of a loaded schemas package. */
+function readNamedSchema(mod, name) {
   if (typeof mod.getSchema === 'function') return mod.getSchema(name)
   return mod.schemas?.[name] ?? mod.default?.[name]
 }
+
+/**
+ * The build's own copy of the standard schemas — the `@std` fallback above.
+ *
+ * Imported by bare specifier so it resolves from THIS module's context, i.e.
+ * `@uniweb/build`'s own dependency rather than the foundation's. It cannot
+ * realistically be missing: this file statically imports `@uniweb/schemas/format`,
+ * so the module would not have loaded. Throwing anyway, with the reason, beats
+ * returning undefined and having the caller report it as "exports no schema
+ * named X" — which would name the wrong problem.
+ */
+async function loadOwnStandardSchemas(pkg) {
+  try {
+    return await import('@uniweb/schemas')
+  } catch (err) {
+    throw new Error(
+      `'${pkg}' is not installed in this foundation, and @uniweb/build's own copy could not ` +
+        `be loaded either (${err.message}). Reinstall @uniweb/build; if the install omitted ` +
+        `optional or otherwise-skippable packages, run it again without that flag.`
+    )
+  }
+}

package/src/uwx/collections.js

@@ -81,12 +81,36 @@ const SKIP_KEYS = new Set([
 function stripSigils(value) {
   if (Array.isArray(value)) return value.map(stripSigils)
   if (value && typeof value === 'object') {
+    // ⛔ A `@uniweb/folder` REF LEAF ENCODES ONE REFERENCE TWO WAYS, and hashing the
+    // encoding rather than the reference made the folder's hash unreproducible.
+    //
+    // `refLeaf` (uwx/folder.js) emits `$ref: "<collection>/<slug>"` while the record
+    // is brand-new and `entry: { model, entity: <uuid> }` once it has been minted.
+    // Both denote the same record. A push hashes the folder BEFORE submitting, then
+    // back-fills the minted `$uuid` into every record's source file — so the very
+    // next emit builds the OTHER encoding, and the hash the push just banked can
+    // never be recomputed. Measured on the matinee manor 2026-08-29: `uniweb status`
+    // reported the folder changed immediately after a successful push, permanently.
+    // Stripping the back-filled uuids from the sources reproduced the banked hash
+    // exactly, which is what identified the encoding as the variable.
+    //
+    // ⭐ Neither encoding is content. What the folder SAYS is "this branch contains
+    // this record, here, in this order" — and that is already hashed: a leaf carries
+    // `path_segment` (the record's slug) inside a branch carrying the collection's.
+    // A `folders:` branch's entries are COLLECTION names, so every leaf under one
+    // comes from a single collection, where a slug is unique. Position plus segment
+    // therefore identify the record on their own; `$ref` adds a payload-local handle
+    // and `entry` adds identity, and both are exactly what `$uuid` is stripped for.
+    //
+    // ⚖️ The previous rule kept `$ref` "so a reference change is visible". It still
+    // is: point a leaf at a different record and its `path_segment` moves with it.
+    const isFolderRefLeaf = value.kind === 'ref'
     const out = {}
     for (const [k, v] of Object.entries(value)) {
-      // `$children` (a self-nesting subtree) and `$ref` (the @uniweb/folder leaf's
-      // reference target) are structural CONTENT, not identity sigils — keep them so
-      // a nesting or reference change is visible to "send only changed".
-      if (k === '$children' || k === '$ref') {
+      if (isFolderRefLeaf && (k === '$ref' || k === 'entry')) continue
+      // `$children` (a self-nesting subtree) is structural CONTENT, not an identity
+      // sigil — kept and recursed into, so a nesting change stays visible.
+      if (k === '$children') {
         out[k] = stripSigils(v)
         continue
       }