@uniweb/build 0.55.1 → 0.57.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniweb/build",
-  "version": "0.55.1",
+  "version": "0.57.0",
   "description": "Build tooling for the Uniweb Component Web Platform",
   "type": "module",
   "exports": {
@@ -57,15 +57,15 @@
     "js-yaml": "^4.1.0",
     "sharp": "^0.35.3",
     "yaml": "^2.5.0",
-    "@uniweb/schemas": "^0.3.3",
     "@uniweb/content-reader": "^1.2.5",
+    "@uniweb/schemas": "^0.3.3",
     "@uniweb/content-writer": "^0.3.4",
-    "@uniweb/projections": "^0.7.3",
     "@uniweb/semantic-parser": "^1.4.1",
-    "@uniweb/theming": "^0.1.15"
+    "@uniweb/theming": "^0.1.15",
+    "@uniweb/projections": "^0.7.3"
   },
   "optionalDependencies": {
-    "@uniweb/runtime": "^0.27.2"
+    "@uniweb/runtime": "^0.27.3"
   },
   "peerDependencies": {
     "vite": "^5.0.0 || ^6.0.0 || ^7.0.0",
@@ -74,8 +74,8 @@
     "@tailwindcss/vite": "^4.0.0",
     "@vitejs/plugin-react": "^4.0.0 || ^5.0.0",
     "vite-plugin-svgr": "^4.0.0",
-    "@uniweb/runtime": "^0.27.2",
-    "@uniweb/core": "^0.29.6"
+    "@uniweb/core": "^0.29.7",
+    "@uniweb/runtime": "^0.27.3"
   },
   "peerDependenciesMeta": {
     "vite": {

package/src/content/index.js

@@ -21,6 +21,9 @@ export {
   writeQueryFiles,
   getQueryLastModified,
 } from '../site/query-processor.js'
+// Where a site's records live — `paths.records`, else `records/` — so a caller
+// holding its own config (a document's, not a `site.yml`) asks the one resolver.
+export { resolveRecordsDir } from '../site/entity-pool.js'
 export {
   parseFetchConfig,
   executeFetch,

package/src/i18n/data-strings.js

@@ -31,7 +31,7 @@ export const HEURISTIC_SKIP_FIELDS = new Set([
   'pmid', 'bibtex', 'pdf', 'code', 'data', 'slides', 'video',
   'repository', 'caseStudy', 'website', 'avatar', 'image',
   'thumbnail', 'currency', 'order', 'hidden', 'current',
-  'featured', 'published', 'allDay', 'remote', 'hybrid',
+  'featured', 'published', 'draft', 'allDay', 'remote', 'hybrid',
   'noindex', 'corresponding', 'required', 'virtual',
   'lastModified', 'date', 'updated', 'posted', 'submitted',
   'accepted', 'startDate', 'endDate', 'deadline',

package/src/i18n/freeform.js

@@ -10,7 +10,7 @@
  *   locales/freeform/{locale}/
  *     pages/{pageRoute}/{stableId}.md      - By route
  *     page-ids/{pageId}/{stableId}.md      - By page ID (stable)
- *     entities/{schema dirs}/{slug}.md     - Records
+ *     records/{schema dirs}/{slug}.md      - Records
  *
  * Resolution order for sections:
  *   1. page-ids/{pageId}/{stableId}.md (if page has id:)
@@ -22,7 +22,7 @@ import { readFile, readdir, stat } from 'fs/promises'
 import { existsSync } from 'node:fs'
 import { join, relative, dirname, sep } from 'node:path'
 import yaml from 'js-yaml'
-import { poolDirsForSchema, ENTITIES_DIR } from '../site/entity-pool.js'
+import { poolDirsForSchema, schemaForPoolDirs, RECORDS_DIR } from '../site/entity-pool.js'
 import { parseFrontmatter } from '../utils/frontmatter.js'
 import { computeSourceHash } from './freeform-manifest.js'
 
@@ -101,13 +101,13 @@ export async function loadFreeformTranslation(section, page, locale, localesDir)
 }
 
 /**
- * Load a free-form translation for one ENTITY.
+ * Load a free-form translation for one RECORD.
  *
- * Path: entities/{schema dirs}/{slug}.md — mirroring the pool exactly.
+ * Path: records/{schema dirs}/{slug}.md — mirroring the records directory exactly.
  *
- * ⛔ KEYED BY THE ENTITY, NOT BY A QUERY. It used to be
+ * ⛔ KEYED BY THE RECORD, NOT BY A QUERY. It used to be
  * `collections/{queryName}/{slug}.md`, which was fine only while a
- * collection was also a directory of files. With `entities/{schema}/` as the pool,
+ * collection was also a directory of files. With `records/{schema}/` holding records,
  * TWO queries can cover one schema — so a query-keyed path would make an author
  * write the same translation once per query, and finding neither from the other.
  * ⚠️ And a query is renameable where a record's model is not: keying on the query
@@ -185,7 +185,7 @@ async function discoverMarkdownFiles(dir, baseDir) {
  * register a translation that has no manifest entry yet.
  *
  * ⭐ Each path is relative to the locale's free-form directory — `pages/about/story.md`,
- * `page-ids/<id>/intro.md`, `entities/article/hello.md` — the form the manifest keys a
+ * `page-ids/<id>/intro.md`, `records/article/hello.md` — the form the manifest keys a
  * translation by and `freeformPathsFor` derives. ⛔ Until 2026-09-14 each was relative
  * to its own subdirectory (`about/story.md`), so none matched a manifest key: the build
  * registered no new file, and a status counted every stale or orphaned file as up to date.
@@ -217,10 +217,10 @@ export async function discoverFreeformTranslations(locale, localesDir) {
     result.pageIds = (await discoverMarkdownFiles(pageIdsDir, freeformDir)).sort()
   }
 
-  // Discover entity translations
-  const entitiesDir = join(freeformDir, ENTITIES_DIR)
-  if (existsSync(entitiesDir)) {
-    result.records = (await discoverMarkdownFiles(entitiesDir, freeformDir)).sort()
+  // Discover record translations
+  const recordsDir = join(freeformDir, RECORDS_DIR)
+  if (existsSync(recordsDir)) {
+    result.records = (await discoverMarkdownFiles(recordsDir, freeformDir)).sort()
   }
 
   return result
@@ -246,7 +246,7 @@ export async function getFreeformFileMeta(filePath) {
  * Parse a free-form translation file path to extract metadata
  *
  * @param {string} relativePath - Path relative to locale's freeform dir
- * @returns {Object} { type, pageRoute?, pageId?, queryName?, stableId, slug? }
+ * @returns {Object} { type, pageRoute?, pageId?, schema?, stableId, slug? }
  */
 export function parseFreeformPath(relativePath) {
   const parts = relativePath.split('/')
@@ -266,11 +266,12 @@ export function parseFreeformPath(relativePath) {
     return { type: 'pageId', pageId, stableId }
   }
 
-  if (parts[0] === ENTITIES_DIR) {
-    // collections/articles/getting-started.md → { type: 'collection', queryName: 'articles', slug: 'getting-started' }
+  if (parts[0] === RECORDS_DIR) {
+    // records/std/person/ada.md → { type: 'record', schema: '@std/person', slug: 'ada' }
+    // ⛔ This returned `queryName: parts[1]` until 2026-09-21 — the first schema
+    // segment (`std` above), and never a query's name. Nothing read it.
     const slug = parts[parts.length - 1].replace('.md', '')
-    const queryName = parts[1]
-    return { type: 'record', queryName, slug }
+    return { type: 'record', schema: schemaForPoolDirs(parts.slice(1, -1)), slug }
   }
 
   return { type: 'unknown', relativePath }
@@ -343,7 +344,7 @@ function freeformSections(siteContent) {
  *   - `canJudge(path)` — whether this content can say a translation at `path` is
  *     orphaned. ⛔ Only a page section's (`pages/…`, `page-ids/…`), and not one for a page
  *     whose sections the content does not carry — a prerendered site with split content
- *     rewrites `site-content.json` without them. A record's (`entities/…`) is read from
+ *     rewrites `site-content.json` without them. A record's (`records/…`) is read from
  *     records this content does not hold. A check that cannot see the source must never
  *     call its translation orphaned: `prune --freeform` deletes what it is told is.
  *
@@ -413,10 +414,10 @@ export function buildFreeformPath(section, page, preferPageId = true) {
  *
  * @param {string} schema - the entity's model ref (`@/name` or `@org/name`)
  * @param {string} slug - the entity's slug
- * @returns {string|null} e.g. `entities/article/getting-started.md`, or null for a
+ * @returns {string|null} e.g. `records/article/getting-started.md`, or null for a
  *   ref this layout cannot express
  */
 export function buildFreeformRecordPath(schema, slug) {
   const dirs = poolDirsForSchema(schema)
-  return dirs ? `${ENTITIES_DIR}/${dirs.join('/')}/${slug}.md` : null
+  return dirs ? `${RECORDS_DIR}/${dirs.join('/')}/${slug}.md` : null
 }

package/src/i18n/index.js

@@ -21,7 +21,7 @@ import {
   buildLocalizedRecords,
   getRecordLocales,
   translateRecordData,
-  RECORDS_DIR
+  RECORD_LOCALES_DIR
 } from './records.js'
 import { resolveDefaultLocale } from '@uniweb/core'
 import { generateSearchIndex } from '@uniweb/projections'
@@ -75,7 +75,7 @@ export {
   buildLocalizedRecords,
   getRecordLocales,
   translateRecordData,
-  RECORDS_DIR,
+  RECORD_LOCALES_DIR,
 
   // Locale resolution
   getAvailableLocales,
@@ -234,7 +234,7 @@ export async function extractRecordManifest(siteRoot, options = {}) {
   const manifest = await extractRecordContent(siteRoot)
 
   // Ensure collections locales directory exists
-  const recordLocalesDir = join(siteRoot, localesDir, RECORDS_DIR)
+  const recordLocalesDir = join(siteRoot, localesDir, RECORD_LOCALES_DIR)
   if (!existsSync(recordLocalesDir)) {
     await mkdir(recordLocalesDir, { recursive: true })
   }
@@ -517,7 +517,7 @@ async function warnAboutFreeformIssues(locale, freeformDir, siteContent) {
     }
 
     // Check for orphaned translations — only those this content can judge: never a
-    // record's (`entities/…`), which is read from records the site content does not hold.
+    // record's (`records/…`), which is read from records the site content does not hold.
     const orphaned = await getOrphanedTranslations(freeformDir, validPaths)
     for (const item of orphaned) {
       if (!canJudge(item.path)) continue

package/src/i18n/records.js

@@ -23,7 +23,7 @@ import { loadFreeformRecord } from './freeform.js'
 // is not, wherever the value came from. Moved rather than copied: two tuned
 // denylists would drift, and drift here is silent.
 import { resolveQueriesConfig } from '../site/queries-config.js'
-import { poolDirsForSchema, schemaForPoolDirs, ENTITIES_DIR } from '../site/entity-pool.js'
+import { poolDirsForSchema, schemaForPoolDirs, resolveRecordsDir } from '../site/entity-pool.js'
 import {
   NON_TRANSLATABLE_TYPES,
   HEURISTIC_SKIP_FIELDS,
@@ -37,7 +37,11 @@ import {
 // contexts were keyed by the QUERY, so two queries over one schema produced two
 // entries for one record, each invisible from the other, and a renamed query
 // orphaned every translation under it.
-export const RECORDS_DIR = 'records'
+//
+// ⚠️ `RECORD_LOCALES_DIR`, and not `RECORDS_DIR`, since 2026-09-21: that name is the
+// site's own `records/` directory now (`site/entity-pool.js`), and this one is
+// `locales/records/` — two directories, one word, so the constant says which.
+export const RECORD_LOCALES_DIR = 'records'
 
 // ---------------------------------------------------------------------------
 // Schema resolution
@@ -72,7 +76,7 @@ async function resolveSchema(queryName, siteRoot) {
   // an author to write into it was the one remaining place the framework
   // contradicted its own rule that `collections/` is the only way to provide
   // structured data. The schema describes the source, so it lives with it.
-  const companionPath = join(siteRoot, ENTITIES_DIR, `${queryName}.schema.js`)
+  const companionPath = join(resolveRecordsDir(siteRoot).abs, `${queryName}.schema.js`)
   if (existsSync(companionPath)) {
     try {
       const mod = await import(pathToFileURL(companionPath).href)
@@ -657,7 +661,7 @@ export async function buildLocalizedRecords(siteRoot, options = {}) {
   const {
     locales = [],
     outputDir = join(siteRoot, 'dist'),
-    recordLocalesDir = join(siteRoot, 'locales', RECORDS_DIR),
+    recordLocalesDir = join(siteRoot, 'locales', RECORD_LOCALES_DIR),
     localesDir = join(siteRoot, 'locales'),
     freeformEnabled = true
   } = options
@@ -987,7 +991,7 @@ export async function translateRecordData(items, queryName, siteRoot, options =
  * @returns {Promise<string[]>} Array of locale codes
  */
 export async function getRecordLocales(localesPath) {
-  const recordLocalesDir = join(localesPath, RECORDS_DIR)
+  const recordLocalesDir = join(localesPath, RECORD_LOCALES_DIR)
   if (!existsSync(recordLocalesDir)) return []
 
   try {

package/src/site/build-site-data.js

@@ -24,6 +24,7 @@ import { join, resolve, dirname } from 'node:path'
 import { resolveDefaultLocale, DATA_DIR } from '@uniweb/core'
 import { collectSiteContent } from './content-collector.js'
 import { processQueries, writeQueryFiles } from './query-processor.js'
+import { resolveRecordsDir } from './entity-pool.js'
 import { processAssets, rewriteSiteContentPaths } from './asset-processor.js'
 import { processAdvancedAssets } from './advanced-processors.js'
 import {
@@ -61,7 +62,7 @@ import {
  *     re-derive, so we always ship enough for the ones that do.
  *   - `data/<collection>.json` (+ per-record files for `deferred:`
  *     collections) — same shape `processQueries` produces today.
- *   - `records/<path under entities/>` — the records' co-located assets, where
+ *   - `records/<path under the records directory>` — the records' co-located assets, where
  *     the compiled records point.
  *   - `assets/<media>` — processed images / video posters / PDF
  *     thumbnails. Filtered by the deploy CLI to MEDIA only at upload time.
@@ -143,7 +144,7 @@ export async function buildSiteData({
     const byQuery = await processQueries(
       resolvedSiteRoot,
       siteContent.config.queries,
-      siteContent.config?.paths?.entities,
+      resolveRecordsDir(resolvedSiteRoot, siteContent.config?.paths).rel,
       basePath,
       { locale: resolveDefaultLocale(siteContent.config) ?? null }
     )
@@ -155,7 +156,7 @@ export async function buildSiteData({
       await cp(publicDataDir, distDataDir, { recursive: true })
     }
 
-    // ⭐ AND THE RECORDS' CO-LOCATED ASSETS — `public/records/<path under entities/>`,
+    // ⭐ AND THE RECORDS' CO-LOCATED ASSETS — `public/records/<path under records/>`,
     // where the compiled records point (`/records/…`), mirrored the way vite mirrors
     // all of `public/` on the bundle lane. ⛔ Until 2026-09-14 only `public/data` was
     // copied, so a record's image URL named a file this lane's `dist/` did not have.

package/src/site/config.js

@@ -484,7 +484,7 @@ export async function defineSiteConfig(options = {}) {
           const allowed = ['..']
           const parentDir = resolve(siteRoot, '..')
           const paths = siteConfig.paths || {}
-          for (const key of ['pages', 'layout', 'entities']) {
+          for (const key of ['pages', 'layout', 'records']) {
             if (paths[key]) {
               const resolved = resolve(siteRoot, paths[key])
               if (!resolved.startsWith(parentDir)) {

package/src/site/content-collector.js

@@ -2727,9 +2727,10 @@ export async function collectSiteContent(sitePath, options = {}) {
   // The `query:` shorthand ships as `config.fetch`, desugared below; carried raw
   // it would sit beside `config.queries`, the declarations, and read as one.
   const { publishLanguages: _publishLanguages, query: _query, ...runtimeSiteConfig } = siteConfig
-  // ⛔ `$`-prefixed keys are the project's BACKEND-SCOPED state — `$uuid`, `$org`,
-  // `$backend`, `$services`, `$secrets` — and this payload is a PUBLISHED artifact
-  // that a visitor can fetch. They have no runtime reader (nothing in core, runtime
+  // ⛔ `$`-prefixed keys were the project's BACKEND-SCOPED state — `$uuid`, `$org`,
+  // `$backend`, `$services`, `$secrets` — until they moved to `sync.json`
+  // (2026-09-20), and a `site.yml` written before then can still carry them. This
+  // payload is a PUBLISHED artifact that a visitor can fetch. They have no runtime reader (nothing in core, runtime
   // or kit reads a `config.$*` key), so this removes noise for four of them and a
   // real disclosure for the fifth: `$secrets` carries no values, but its entries
   // name every secret the site has, and an inventory of credential names is not

package/src/site/deploy-config-writer.js

@@ -1,30 +1,36 @@
 /**
  * deploy.yml writer
  *
- * Updates the lastDeploy.<target> block of a site's deploy.yml without
+ * Updates the deploys.<target> block of a site's deploy.yml without
  * reformatting the rest of the file. Uses the eemeli/yaml Document API
  * because js-yaml does not preserve comments on round-trip — the writer
- * must not destroy a developer's comments on the targets:/autoSave:
+ * must not destroy a developer's comments on the targets:/saveDeploys:
  * regions of the file.
  *
  * This is the only place in @uniweb/build that depends on `yaml`. The
  * loader (deploy-config.js) stays on js-yaml for read-only ingestion.
  *
- * Auto-save semantics:
- *   - 'off'        : no-op (CI / `--no-save`)
- *   - 'lastDeploy' : touch ONLY lastDeploy.<targetName>
- *   - 'full'       : reserved; behaves as 'lastDeploy' for now
+ * `saveDeploys: false` (or `--no-save`) makes this a no-op; otherwise it
+ * touches ONLY deploys.<targetName> — plus targets.<targetName> when the file has no
+ * such target yet (a publish to a backend no target names). ⚠️ It was `autoSave: off|lastDeploy|full`
+ * until 2026-09-20, and `full` was reserved and behaved as `lastDeploy` — a
+ * boolean wearing a tri-state.
  *
  * First-deploy path: when deploy.yml does not exist, writes a fresh
  * file scaffolded with `default:`, a single entry under `targets:`, and
- * `autoSave: lastDeploy`. This is the only code path that writes the
+ * `saveDeploys: true`. This is the only code path that writes the
  * config region.
+ *
+ * And two removals, for `uniweb forget`: `forgetDeploys` drops the records one
+ * backend wrote and keeps every target; `forgetDeployYml` deletes the file, for a
+ * copy that is to become a new project.
  */
 
-import { readFile, writeFile } from 'node:fs/promises'
+import { readFile, writeFile, unlink } from 'node:fs/promises'
 import { existsSync } from 'node:fs'
 import { join } from 'node:path'
 import { Document, parseDocument, isMap } from 'yaml'
+import { normalizeOrigin } from '../uwx/sync-store.js'
 
 // The header every generated deploy.yml carries. It has to answer the question
 // a reader has while looking AT the file — who wrote this, and may I edit it —
@@ -39,7 +45,7 @@ const SCAFFOLD_HEADER = [
   ' deploy.yml — written by `uniweb deploy` / `uniweb publish`.',
   '',
   ' You do not create this file. The first successful deploy does, recording the',
-  ' target you picked and what happened. Later deploys rewrite only `lastDeploy:`',
+  ' target you picked and what happened. Later deploys rewrite only `deploys:`',
   ' and leave the rest — including your comments — alone.',
   '',
   ' Safe to commit; no credentials live here. Host credentials come from the',
@@ -48,29 +54,34 @@ const SCAFFOLD_HEADER = [
   '   default:     which target is used when none is named',
   '   targets:     where this site ships. Edit to change the destination, or add',
   '                a target and pick it with `--target <name>`',
-  '   autoSave:    `lastDeploy` to keep the record below, `off` to stop writing it',
-  '   lastDeploy:  what the last deploy did. A record, not a setting — nothing',
-  '                reads it back, so a stale one is safe to delete',
+  '   deploys:     what each target\'s last deploy did. A record, not a setting.',
+  '                `publish` reads one field back — a fingerprint of the service',
+  '                request it last sent — so deleting it only means the next',
+  '                publish re-sends that request',
+  '   saveDeploys: false to stop recording deploys',
+  '',
+  ' Which site this is on each backend lives in sync.json, not here.',
 ].join('\n')
 
 /**
- * Update or create deploy.yml with a fresh lastDeploy.<target> entry.
+ * Update or create deploy.yml with a fresh deploys.<target> entry.
  *
  * @param {string} siteDir
  * @param {object} opts
  * @param {string} opts.targetName       e.g. 'production'
- * @param {object} [opts.targetConfig]   { host, ...host-specific }; only
- *                                       used on first-deploy scaffold.
+ * @param {object} [opts.targetConfig]   { host, ...host-specific }; the
+ *                                       first-deploy scaffold's target, and a
+ *                                       target to ADD when the file lacks it
  * @param {object} opts.lastDeploy       { at, url, foundation, runtime,
  *                                          artifactSha, ... }
- * @param {'off'|'lastDeploy'|'full'} opts.autoSave
+ * @param {boolean} opts.saveDeploys - false makes this a no-op
  * @returns {Promise<{ created: boolean, path: string } | null>}
- *          null when autoSave is 'off' (no-op).
+ *          null when saveDeploys is false (no-op).
  */
 export async function recordLastDeploy(siteDir, opts) {
-  const { targetName, targetConfig, lastDeploy, autoSave } = opts
+  const { targetName, targetConfig, lastDeploy, saveDeploys } = opts
 
-  if (autoSave === 'off') return null
+  if (saveDeploys === false) return null
 
   const path = join(siteDir, 'deploy.yml')
 
@@ -89,13 +100,29 @@ export async function recordLastDeploy(siteDir, opts) {
 
   const text = await readFile(path, 'utf8')
   const doc = parseDocument(text)
+  // Never rewrite a file we could not read — the caller reports it instead.
+  if (doc.errors.length) {
+    throw new Error(`deploy.yml did not parse: ${doc.errors[0].message.split('\n')[0]}`)
+  }
+
+  // A target the file does not have yet — a publish to a backend no target names
+  // (resolvePublishTarget) — is added beside the others. An existing target is never
+  // modified, and `default` / `saveDeploys` are never touched.
+  if (targetConfig?.host) {
+    const targetsNode = doc.get('targets', true)
+    if (!isMap(targetsNode)) {
+      if (targetsNode === undefined) doc.set('targets', { [targetName]: targetConfig })
+    } else if (!targetsNode.has(targetName)) {
+      targetsNode.set(targetName, targetConfig)
+    }
+  }
 
-  // Touch ONLY lastDeploy.<targetName>. Never reach into targets/default/autoSave.
-  let lastDeployNode = doc.get('lastDeploy', true)
-  if (!isMap(lastDeployNode)) {
-    doc.set('lastDeploy', { [targetName]: lastDeploy })
+  // Otherwise touch ONLY deploys.<targetName>.
+  let deploysNode = doc.get('deploys', true)
+  if (!isMap(deploysNode)) {
+    doc.set('deploys', { [targetName]: lastDeploy })
   } else {
-    lastDeployNode.set(targetName, lastDeploy)
+    deploysNode.set(targetName, lastDeploy)
   }
 
   await writeFile(path, doc.toString(), 'utf8')
@@ -106,8 +133,8 @@ function scaffold({ targetName, targetConfig, lastDeploy }) {
   const doc = new Document({
     default: targetName,
     targets: { [targetName]: targetConfig },
-    autoSave: 'lastDeploy',
-    lastDeploy: { [targetName]: lastDeploy },
+    deploys: { [targetName]: lastDeploy },
+    saveDeploys: true,
   })
   doc.commentBefore = SCAFFOLD_HEADER
   return doc
@@ -131,11 +158,11 @@ function scaffold({ targetName, targetConfig, lastDeploy }) {
  *
  * Behavior:
  *   - File missing: scaffold a fresh file with this target, set as
- *     default, autoSave: lastDeploy. No lastDeploy block (no deploy
+ *     default, saveDeploys: true. No deploys block (no deploy
  *     has happened yet).
  *   - File exists: merge targetConfig into targets.<targetName>
  *     (overlapping keys overwritten, other keys preserved). Never
- *     touches `default`, `autoSave`, `lastDeploy`, or other targets,
+ *     touches `default`, `saveDeploys`, `deploys`, or other targets,
  *     so adding a CI workflow to a project that already deploys
  *     elsewhere doesn't change its deploy semantics.
  */
@@ -155,7 +182,7 @@ export async function recordTarget(siteDir, opts) {
     const doc = new Document({
       default: targetName,
       targets: { [targetName]: targetConfig },
-      autoSave: 'lastDeploy',
+      saveDeploys: true,
     })
     doc.commentBefore = SCAFFOLD_HEADER
     await writeFile(path, doc.toString(), 'utf8')
@@ -187,3 +214,84 @@ export async function recordTarget(siteDir, opts) {
   await writeFile(path, doc.toString(), 'utf8')
   return { created: false, path, action: 'merge' }
 }
+
+/**
+ * Remove the deploy records one backend wrote — `uniweb forget --backend <url>`.
+ *
+ * A record belongs to the backend it names: every publish writes
+ * `deploys.<target>.backend`. A record naming none falls back to its target's
+ * `backend:`, which only a `host: uniweb` target has — so no other host's history
+ * can match, and a record that names no backend anywhere is left alone rather than
+ * guessed at.
+ *
+ * ⛔ **`targets:` stays.** A target is a CHOICE of where to ship, not something a
+ * backend told us — the spec's own line between this file and `sync.json`. After
+ * the forget, the next publish there simply creates a new site.
+ *
+ * Why the records go at all: each names the forgotten site (`siteUuid`, `url`), and
+ * its request fingerprint describes what was sent to THAT site. Kept, they would
+ * sit beside a target that now publishes somewhere else entirely.
+ *
+ * @param {string} siteDir
+ * @param {string} origin
+ * @returns {Promise<string[]>} the target names whose record was removed, sorted
+ * @throws when deploy.yml exists and does not parse — the caller decides whether
+ *   that blocks anything; this does not rewrite a file it could not read
+ */
+export async function forgetDeploys(siteDir, origin) {
+  const key = normalizeOrigin(origin)
+  const path = join(siteDir, 'deploy.yml')
+  if (!key || !existsSync(path)) return []
+
+  const doc = parseDocument(await readFile(path, 'utf8'))
+  if (doc.errors.length) {
+    throw new Error(`deploy.yml did not parse: ${doc.errors[0].message.split('\n')[0]}`)
+  }
+  const deploysNode = doc.get('deploys', true)
+  if (!isMap(deploysNode)) return []
+
+  const js = doc.toJS() || {}
+  const removed = []
+  for (const [name, record] of Object.entries(js.deploys || {})) {
+    const target = js.targets?.[name]
+    const named =
+      record?.backend ?? (target?.host === 'uniweb' ? target?.backend : undefined)
+    if (normalizeOrigin(named) === key) removed.push(name)
+  }
+  if (!removed.length) return []
+
+  for (const name of removed) deploysNode.delete(name)
+  // An empty `deploys: {}` says nothing and would be the only thing left of the
+  // backend in this file.
+  if (!deploysNode.items.length) doc.delete('deploys')
+  await writeFile(path, doc.toString(), 'utf8')
+  return removed.sort()
+}
+
+/**
+ * Delete deploy.yml outright — `uniweb forget --all`, for a copy that is to become a
+ * new project.
+ *
+ * ⭐ **The targets go too, not just the records** *[Diego, 2026-09-21: "if it's for
+ * duplicating a site project and making a new site from it, … the whole deploy.yml
+ * file has to be deleted"]*. They name the ORIGINAL's destinations — its Pages
+ * project, its bucket, its domain — so a deploy from the copy would overwrite the
+ * original there. The copy's first deploy writes a fresh file.
+ *
+ * @param {string} siteDir
+ * @returns {Promise<string[]|null>} the target names it held, or null when there
+ *   was no file. A file that does not parse is removed all the same and reports `[]`.
+ */
+export async function forgetDeployYml(siteDir) {
+  const path = join(siteDir, 'deploy.yml')
+  if (!existsSync(path)) return null
+  let names = []
+  try {
+    const doc = parseDocument(await readFile(path, 'utf8'))
+    if (!doc.errors.length) names = Object.keys(doc.toJS()?.targets || {}).sort()
+  } catch {
+    /* unreadable — still the original's, still removed */
+  }
+  await unlink(path)
+  return names
+}