@uniweb/build 1.1.1 → 1.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniweb/build",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "description": "Build tooling for the Uniweb Component Web Platform",
   "type": "module",
   "exports": {
@@ -56,15 +56,15 @@
     "js-yaml": "^4.1.0",
     "sharp": "^0.35.3",
     "yaml": "^2.5.0",
-    "@uniweb/projections": "~1.1.0",
-    "@uniweb/content-writer": "~1.0.1",
-    "@uniweb/semantic-parser": "~1.5.1",
-    "@uniweb/schemas": "~1.0.1",
-    "@uniweb/content-reader": "~1.2.8",
-    "@uniweb/theming": "~1.1.0"
+    "@uniweb/semantic-parser": "~1.6.0",
+    "@uniweb/theming": "~1.2.0",
+    "@uniweb/schemas": "~1.1.0",
+    "@uniweb/projections": "~1.1.1",
+    "@uniweb/content-reader": "~1.3.0",
+    "@uniweb/content-writer": "~1.1.0"
   },
   "optionalDependencies": {
-    "@uniweb/runtime": "~1.1.0"
+    "@uniweb/runtime": "~1.1.1"
   },
   "peerDependencies": {
     "vite": "^5.0.0 || ^6.0.0 || ^7.0.0",
@@ -73,8 +73,8 @@
     "@tailwindcss/vite": "^4.0.0",
     "@vitejs/plugin-react": "^4.0.0 || ^5.0.0",
     "vite-plugin-svgr": "^4.0.0",
-    "@uniweb/core": "~1.1.0",
-    "@uniweb/runtime": "~1.1.0"
+    "@uniweb/core": "~1.2.0",
+    "@uniweb/runtime": "~1.1.1"
   },
   "peerDependenciesMeta": {
     "vite": {

package/src/i18n/freeform.js

@@ -26,6 +26,7 @@ import { poolDirsForSchema, schemaForPoolDirs, RECORDS_DIR } from '../site/entit
 import { parseFrontmatter } from '../utils/frontmatter.js'
 import { computeSourceHash } from './freeform-manifest.js'
 import { layoutAreaRoute } from '../site/layout-folder.js'
+import { warnOutsideVocabulary } from '../site/vocabulary-warnings.js'
 
 // Try to import content-reader for markdown → ProseMirror conversion
 let markdownToProseMirror
@@ -46,6 +47,11 @@ try {
 }
 
 
+/** Report what a translation's markdown could not honour, naming the file. */
+function warnFor(filePath) {
+  return (message) => console.warn(`[i18n] ${relative(process.cwd(), filePath)}: ${message}`)
+}
+
 /**
  * Normalize route for filesystem path
  * Removes leading slash, replaces remaining slashes with path separators
@@ -83,8 +89,10 @@ export async function loadFreeformTranslation(section, page, locale, localesDir)
       const content = await readFile(filePath, 'utf-8')
       const { frontmatter, body } = parseFrontmatter(content, filePath)
 
-      // Convert markdown body to ProseMirror
-      const proseMirrorContent = markdownToProseMirror(body)
+      // Convert markdown body to ProseMirror — HTML in it shows as written,
+      // except `<br>`, and the translator is told which file.
+      const proseMirrorContent = markdownToProseMirror(body, { onWarning: warnFor(filePath) })
+      warnOutsideVocabulary(proseMirrorContent, warnFor(filePath))
 
       return {
         content: proseMirrorContent,
@@ -138,7 +146,8 @@ export async function loadFreeformRecord(item, schema, locale, localesDir) {
     const { frontmatter, body } = parseFrontmatter(content, filePath)
 
     // Convert markdown body to ProseMirror (if body exists)
-    const proseMirrorContent = body.trim() ? markdownToProseMirror(body) : null
+    const proseMirrorContent = body.trim() ? markdownToProseMirror(body, { onWarning: warnFor(filePath) }) : null
+    if (proseMirrorContent) warnOutsideVocabulary(proseMirrorContent, warnFor(filePath))
 
     return {
       frontmatter: Object.keys(frontmatter).length > 0 ? frontmatter : null,

package/src/site/content-collector.js

@@ -42,6 +42,7 @@ import { authoredRedirectTarget } from '@uniweb/core/resolve-route'
 import { parseFrontmatter } from '../utils/frontmatter.js'
 import { parseGrid } from '@uniweb/schemas/grid'
 import { runtimeServicesConfig, refuseRetiredServiceKeys, refuseUnreadableServices } from '../uwx/services-request.js'
+import { warnOutsideVocabulary } from './vocabulary-warnings.js'
 
 // Try to import content-reader, fall back to simplified parser
 let markdownToProseMirror
@@ -1068,7 +1069,12 @@ async function processMarkdownFile(filePath, id, siteRoot, defaultStableId = nul
   // come through here (a free-form translation, a record body) kept raw references
   // nothing resolved, and the same section's content differed between a build and a
   // document stored as written.
-  const proseMirrorContent = markdownToProseMirror(markdown)
+  //
+  // HTML in the markdown is not content: it shows as written, except `<br>`
+  // (content-reader, since 2026-10-14). Say so with the file in hand.
+  const warnHere = (message) => console.warn(`[content-collector] ${relative(siteRoot, filePath)}: ${message}`)
+  const proseMirrorContent = markdownToProseMirror(markdown, { onWarning: warnHere })
+  warnOutsideVocabulary(proseMirrorContent, warnHere)
 
   // `query: team` → `fetch: { query: team }`; a list, one config per name, each under
   // its own `as` — the one helper every level uses. Unrelated to a section type's

package/src/site/query-processor.js

@@ -72,6 +72,7 @@ import { toDeliveredRecord, toStoredRecord, storedPath, briefFieldMap, contentBo
 import { collectNestedRefs } from '@uniweb/schemas/format'
 import { labelIn } from './entry-label.js'
 import { fileRecordValue, makeFilePreview } from './file-records.js'
+import { warnOutsideVocabulary } from './vocabulary-warnings.js'
 
 // Try to import content-reader for markdown parsing
 let markdownToProseMirror
@@ -563,8 +564,11 @@ async function processContentItem(dir, filename, config, siteRoot, basePath, rec
   // record was published.
   await processDataItemAssets(frontmatter, filepath, siteRoot, recordsRoot, basePath)
 
-  // Parse markdown body to ProseMirror
-  const content = markdownToProseMirror(body)
+  // Parse markdown body to ProseMirror — HTML in it shows as written, except
+  // `<br>`, and the author is told which file.
+  const warnHere = (message) => console.warn(`[records] ${relative(siteRoot, filepath)}: ${message}`)
+  const content = markdownToProseMirror(body, { onWarning: warnHere })
+  warnOutsideVocabulary(content, warnHere)
 
   // Process assets (resolve paths, copy co-located files)
   // This modifies content in place, updating paths to site-root-relative

package/src/site/vocabulary-warnings.js

@@ -0,0 +1,33 @@
+/**
+ * Say, with the file in hand, what in a document a page leaves out.
+ *
+ * A document holds the rich-text vocabulary (`@uniweb/content-reader/vocabulary`):
+ * its types and attributes, and the values that reach a page's markup. What is
+ * outside it — a link to `javascript:`, an inert `{.name}`, MathML outside the
+ * allowlist — the renderer leaves out of the page, and a backend that cleans the
+ * content it stores removes, so the next pull would write the file without it.
+ * The author hears it here first, once per thing, naming the file.
+ */
+import { outsideVocabulary } from '@uniweb/content-reader/vocabulary'
+
+const SAYS = {
+  url: (f) => `a link to \`${f.found}\` is never followed`,
+  target: (f) => `\`target=${f.found}\` is not a link target`,
+  'style-name': (f) => `\`{${f.found}}\` is not a style name`,
+  color: (f) => `\`${f.found}\` is not a colour`,
+  mathml: (f) => `a formula's MathML holds what a page cannot show (${f.found})`,
+  'ref-id': (f) => `\`${f.found}\` is not an inset reference`,
+}
+
+/**
+ * Warn, for each thing in `doc` outside the vocabulary, with the file it came from.
+ *
+ * @param {Object} doc - a ProseMirror document
+ * @param {(message: string) => void} warn - prints one message, prefixed with the file
+ */
+export function warnOutsideVocabulary(doc, warn) {
+  for (const finding of outsideVocabulary(doc)) {
+    const says = SAYS[finding.rule]?.(finding) ?? `\`${finding.found}\` is not part of a document (${finding.rule})`
+    warn(`${says} — a page leaves it out, and a backend that cleans what it stores removes it`)
+  }
+}

package/src/uwx/data-schema.js

@@ -27,7 +27,8 @@ const TEXT_KINDS = new Set(['string', 'text'])
 // Rich-content `format` markers on a `text` field — the file-based body shape that
 // replaced the retired `richtext` kind (2026-06-02 / uwx-format.md). A `text` field
 // carrying one round-trips as the RAW source string (no ProseMirror conversion).
-const CONTENT_TEXT_FORMATS = new Set(['markdown', 'html'])
+// ⛔ `html` was one until 2026-10-14; `@uniweb/schemas` refuses it by name since.
+const CONTENT_TEXT_FORMATS = new Set(['markdown'])
 
 // The field an open map's key lowers into. `name` matches the idiom already in use
 // for this shape (the backend's site-content `collections` section), so an open map
@@ -113,7 +114,7 @@ export function isContentBodyField(field) {
  *   (item_ref) ref to its full `@org/model/<section>` path. Falls back to
  *   `resolveName` (model only) when not supplied.
  * @returns {Object} the declaration (`{ name, label?, plural?, icon?, description?,
- *          source_locale?, linkable?, sections }`).
+ *          source_locale?, linkable?, grantable?, sections }`).
  */
 export function toDataSchemaDeclaration(normalized, { name, resolveName, resolveOptions } = {}) {
   if (!name) throw new Error('toDataSchemaDeclaration: a registry name is required')
@@ -158,6 +159,10 @@ export function toDataSchemaDeclaration(normalized, { name, resolveName, resolve
   // reference, which read as a promise that one is accepted. A backend refuses it.
   if (normalized.linkable === false) decl.linkable = false
 
+  // `grantable` — AUTHORED ONLY, like `linkable`: a model's entries may be shared one at a
+  // time unless it says `grantable: false` (omitted ⇒ true) [Diego, 2026-10-14].
+  if (normalized.grantable === false) decl.grantable = false
+
   decl.sections = sections
   return decl
 }
@@ -424,6 +429,9 @@ function lowerLeaf(field, resolve, optResolve, { multiple = false } = {}) {
   if (leafType === 'ref') {
     out.type = 'entity_ref'
     if (field.ref) out.model = resolve(field.ref)
+    // The level on the entry it points to that opens this entry, for `read` — by link
+    // [Diego, 2026-10-14]. `@uniweb/schemas` admits it only here, as read, edit or admin.
+    if (field.readable_with) out.readable_with = field.readable_with
     return out
   }
 

package/src/uwx/site-project.js

@@ -47,7 +47,8 @@ import { declarationsToQueriesYml } from './records-project.js'
 import { FILLED_SECTION_TYPE, buildRouteOf } from './site.js'
 import { translationContext, SITE_META_CONTEXT } from '../i18n/extract.js'
 import { authorableDeclaration, DECLARATION_KEYS } from '../site/fetch-shapes.js'
-import { createTranslationCollector, writeLocaleTranslations, writeFreeformTranslations, unwrapLocalizedContent } from './locale-sync.js'
+import { createTranslationCollector, writeLocaleTranslations, writeFreeformTranslations, unwrapLocalizedContent, isProseMirrorDoc } from './locale-sync.js'
+import { unwritableNodes } from '@uniweb/content-writer'
 import { buildFreeformPath, freeformPathsFor } from '../i18n/freeform.js'
 import { unwrapLocalized, unwrapLocalizedList } from './backfill.js'
 import { LOCALIZED_FIELD_ASSUMPTION } from './localize.js'
@@ -1201,6 +1202,59 @@ function projectLayout(layoutSections, layoutBaseDir, report, prune, ctx) {
   if (prune && written.length > 0) pruneOrphanLayout(layoutBaseDir, new Set(written), report)
 }
 
+/**
+ * ⛔ A PULL THAT WOULD DROP CONTENT WRITES NOTHING.
+ *
+ * A node a markdown file cannot hold is left out of the file it is written to,
+ * and the push after the pull then deletes it from the site — with nobody told
+ * but a log line. So every section document the projection would write is asked
+ * first (`unwritableNodes`, `@uniweb/content-writer`), every locale's included,
+ * and the pull stops, naming each section and what it holds.
+ * ⛔ Until 2026-10-14 the writer logged one line per type and the pull went on:
+ * measured with a button an editor saved as a node, which a pull and a push then
+ * deleted.
+ *
+ * @param {object} document - the `@uniweb/site-content` document
+ * @param {string} sourceLocale
+ */
+function refuseContentFilesCannotHold(document, sourceLocale) {
+  const found = []
+  const name = (record, where) => {
+    const own = record?.slug !== undefined ? pageDirName(record, sourceLocale) : record?.stable_id || record?.$uuid
+    return own ? (where ? `${where}/${own}` : String(own)) : where
+  }
+  const visit = (value, where) => {
+    if (Array.isArray(value)) {
+      for (const item of value) visit(item, where)
+      return
+    }
+    if (!value || typeof value !== 'object') return
+    const here = name(value, where)
+    for (const [key, field] of Object.entries(value)) {
+      if (key === 'content') {
+        const docs = isProseMirrorDoc(field)
+          ? [field]
+          : isPlainRecord(field)
+            ? Object.values(field).filter(isProseMirrorDoc)
+            : []
+        const types = [...new Set(docs.flatMap((doc) => unwritableNodes(doc)))]
+        if (types.length) found.push(`${here || 'a section'}: ${types.join(', ')}`)
+        if (docs.length) continue
+      }
+      visit(field, here)
+    }
+  }
+  visit(document?.pages, '')
+  visit(document?.layout_sections, 'layout')
+  if (found.length === 0) return
+  throw new Error(
+    'This pull would leave content out of your files — a file cannot hold it, so your next push would ' +
+      'delete it from the site. Nothing was written.\n' +
+      found.map((entry) => `  ${entry}`).join('\n') +
+      '\nChange or remove it where it was made, then pull again.'
+  )
+}
+
 /**
  * Project a whole `@uniweb/site-content` document to a site's files: `info` →
  * config (siteInfoToConfig), `collections[]` declarations →
@@ -1226,6 +1280,9 @@ function projectLayout(layoutSections, layoutBaseDir, report, prune, ctx) {
  * @returns {{ config: object, collections: object, locales: object, pages: string[], sections: string[], layout: string[], deleted: string[], renamed: object[] }}
  */
 export function siteContentDocumentToProject({ document, siteRoot, backend = null, sourceLocale = LOCALIZED_FIELD_ASSUMPTION.defaultSourceLocale, prune = false, keepAuthoredFoundation = false, scope, dataModel = null }) {
+  // Before anything is written: a pull that would leave content out of the files stops here.
+  refuseContentFilesCannotHold(document, sourceLocale)
+
   const report = { config: null, collections: null, locales: null, assets: null, pages: [], sections: [], layout: [], deleted: [], renamed: [] }
 
   // Collects target-locale translations of localized scalars as they're projected;