uniweb 0.12.17 → 0.12.18

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "0.12.17",
+  "version": "0.12.18",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,12 +41,12 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/core": "0.7.11",
+    "@uniweb/kit": "0.9.11",
     "@uniweb/runtime": "0.8.13",
-    "@uniweb/kit": "0.9.11"
+    "@uniweb/core": "0.7.11"
   },
   "peerDependencies": {
-    "@uniweb/build": "0.14.3",
+    "@uniweb/build": "0.14.4",
     "@uniweb/content-reader": "1.1.10",
     "@uniweb/semantic-parser": "1.1.17"
   },
@@ -60,5 +60,8 @@
     "@uniweb/semantic-parser": {
       "optional": true
     }
+  },
+  "scripts": {
+    "test": "node --test 'test/**/*.test.js'"
   }
 }

package/src/commands/add.js

@@ -21,10 +21,9 @@ import { scaffoldFoundation, scaffoldSite, applyContent, applyStarter, mergeTemp
 import {
   readWorkspaceConfig,
   addWorkspaceGlob,
-  discoverFoundations,
-  discoverSites,
   updateRootScripts,
 } from '../utils/config.js'
+import { discoverFoundations, discoverSites } from '../utils/discover.js'
 import { validatePackageName, getExistingPackageNames, resolveUniqueName } from '../utils/names.js'
 import { findWorkspaceRoot } from '../utils/workspace.js'
 import { detectPackageManager, filterCmd, installCmd } from '../utils/pm.js'

package/src/commands/dev.js

@@ -36,7 +36,8 @@ import { spawn } from 'node:child_process'
 import { join } from 'node:path'
 
 import { detectPackageManager, filterCmd } from '../utils/pm.js'
-import { discoverSites, readWorkspaceConfig } from '../utils/config.js'
+import { readWorkspaceConfig } from '../utils/config.js'
+import { discoverSites } from '../utils/discover.js'
 import { findWorkspaceRoot } from '../utils/workspace.js'
 import { readFlagValue } from '../utils/args.js'
 

package/src/commands/doctor.js

@@ -10,7 +10,7 @@ import { loadDeployYml } from '@uniweb/build/site'
 import { listAdapters } from '@uniweb/build/hosts'
 import { getCliVersion } from '../versions.js'
 import { readAgentsVersion } from '../utils/agents-stamp.js'
-import { discoverFoundations, discoverSites } from '../utils/config.js'
+import { discoverFoundations, discoverSites } from '../utils/discover.js'
 import { findWorkspaceRoot } from '../utils/workspace.js'
 
 /**

package/src/commands/rename.js

@@ -47,14 +47,13 @@ import yaml from 'js-yaml'
 import { isExtensionPackage } from '@uniweb/build'
 import { findWorkspaceRoot } from '../utils/workspace.js'
 import {
-  discoverFoundations,
-  discoverSites,
   readWorkspaceConfig,
   writeWorkspaceConfig,
   readRootPackageJson,
   writeRootPackageJson,
   updateRootScripts,
 } from '../utils/config.js'
+import { discoverFoundations, discoverSites } from '../utils/discover.js'
 import { getExistingPackageNames, validatePackageName } from '../utils/names.js'
 import { detectPackageManager, installCmd } from '../utils/pm.js'
 import { getCliPrefix } from '../utils/interactive.js'

package/src/framework-index.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-05-06T17:01:18.376Z",
+  "generatedAt": "2026-05-06T22:01:04.763Z",
   "packages": {
     "@uniweb/build": {
-      "version": "0.14.3",
+      "version": "0.14.4",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",

package/src/utils/config.js

@@ -1,8 +1,17 @@
 /**
  * Workspace Config Management
  *
- * Read/write pnpm-workspace.yaml and root package.json.
- * Used by both `create` and `add` commands.
+ * Read/write pnpm-workspace.yaml and root package.json, plus URL config
+ * for the platform backend / registry. Used by both `create` and `add`
+ * commands.
+ *
+ * This module is on the CLI's startup path (statically imported by
+ * `commands/login.js`, which is loaded by `src/index.js`). It MUST NOT
+ * import any optional peer dependency — most importantly `@uniweb/build`,
+ * which is absent in `npx uniweb create` scratch dirs and global
+ * installs. Workspace package discovery (which does need `@uniweb/build`)
+ * lives in `./discover.js` and is loaded only by commands that already
+ * require a project context.
  */
 
 import { existsSync, readFileSync } from 'node:fs'
@@ -10,7 +19,6 @@ import { readFile, writeFile } from 'node:fs/promises'
 import { join } from 'node:path'
 import { homedir } from 'node:os'
 import yaml from 'js-yaml'
-import { classifyPackage } from '@uniweb/build'
 import { filterCmd } from './pm.js'
 
 // ── Platform URLs ──────────────────────────────────────────────
@@ -223,63 +231,6 @@ export async function updateRootScripts(rootDir, sites, pm = 'pnpm') {
   await writeRootPackageJson(rootDir, pkg)
 }
 
-/**
- * Discover foundations in the workspace
- * @param {string} rootDir - Workspace root directory
- * @returns {Promise<Array<{name: string, path: string}>>}
- */
-export async function discoverFoundations(rootDir) {
-  return discoverByKind(rootDir, 'foundation')
-}
-
-/**
- * Discover sites in the workspace
- * @param {string} rootDir - Workspace root directory
- * @returns {Promise<Array<{name: string, path: string}>>}
- */
-export async function discoverSites(rootDir) {
-  return discoverByKind(rootDir, 'site')
-}
-
-/**
- * Walk the workspace globs and return packages of the requested kind.
- * Uses `classifyPackage` from @uniweb/build — the canonical classifier
- * shared with the build pipeline, which keys on real signals (site.yml
- * for sites, generated entry for foundations) rather than which
- * `@uniweb/*` packages happen to be in dependencies. Templates whose
- * sites pull runtime transitively through the foundation (e.g.,
- * marketing) used to be invisible to the older dependency-based check.
- */
-async function discoverByKind(rootDir, kind) {
-  const { packages } = await readWorkspaceConfig(rootDir)
-  const out = []
-
-  for (const pattern of packages) {
-    const dirs = await resolveGlob(rootDir, pattern)
-    for (const dir of dirs) {
-      const fullPath = join(rootDir, dir)
-      if (classifyPackage(fullPath) !== kind) continue
-
-      // Read package.json for the package name. Synthesize one from
-      // the directory if it's missing or malformed — we still want
-      // the package to surface in pickers.
-      const pkgPath = join(fullPath, 'package.json')
-      let name = dir.split('/').pop()
-      if (existsSync(pkgPath)) {
-        try {
-          const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'))
-          if (pkg.name) name = pkg.name
-        } catch {
-          // keep directory-derived name
-        }
-      }
-      out.push({ name, path: dir })
-    }
-  }
-
-  return out
-}
-
 // Resolve a workspace glob pattern to actual directories
 export async function resolveGlob(rootDir, pattern) {
   const clean = pattern.replace(/^["']|["']$/g, '')

package/src/utils/discover.js

@@ -0,0 +1,75 @@
+/**
+ * Workspace package discovery
+ *
+ * Walks the workspace globs and classifies each package as a site or
+ * foundation using `classifyPackage` from `@uniweb/build` — the canonical
+ * classifier shared with the build pipeline. It keys on real signals
+ * (site.yml for sites, generated entry for foundations) rather than which
+ * `@uniweb/*` packages happen to be in dependencies, so templates whose
+ * sites pull runtime transitively through the foundation (e.g., marketing)
+ * are classified correctly.
+ *
+ * Why this lives in its own file: `@uniweb/build` is an OPTIONAL peer
+ * dependency of the CLI. The CLI's startup path (`src/index.js` and
+ * everything it statically imports) MUST run in environments where
+ * `@uniweb/build` is not installed — `npx uniweb create` in a scratch
+ * dir, `npm i -g uniweb` before any project exists, etc. Anything that
+ * imports `@uniweb/build` therefore must NOT be reachable from the
+ * startup graph; it must be loaded dynamically by commands that already
+ * require a project context. Keeping discovery in this dedicated module
+ * makes that boundary structural rather than conventional.
+ */
+
+import { existsSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+import { classifyPackage } from '@uniweb/build'
+import { readWorkspaceConfig, resolveGlob } from './config.js'
+
+/**
+ * Discover foundations in the workspace.
+ * @param {string} rootDir - Workspace root directory
+ * @returns {Promise<Array<{name: string, path: string}>>}
+ */
+export async function discoverFoundations(rootDir) {
+  return discoverByKind(rootDir, 'foundation')
+}
+
+/**
+ * Discover sites in the workspace.
+ * @param {string} rootDir - Workspace root directory
+ * @returns {Promise<Array<{name: string, path: string}>>}
+ */
+export async function discoverSites(rootDir) {
+  return discoverByKind(rootDir, 'site')
+}
+
+async function discoverByKind(rootDir, kind) {
+  const { packages } = await readWorkspaceConfig(rootDir)
+  const out = []
+
+  for (const pattern of packages) {
+    const dirs = await resolveGlob(rootDir, pattern)
+    for (const dir of dirs) {
+      const fullPath = join(rootDir, dir)
+      if (classifyPackage(fullPath) !== kind) continue
+
+      // Read package.json for the package name. Synthesize one from
+      // the directory if it's missing or malformed — we still want
+      // the package to surface in pickers.
+      const pkgPath = join(fullPath, 'package.json')
+      let name = dir.split('/').pop()
+      if (existsSync(pkgPath)) {
+        try {
+          const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'))
+          if (pkg.name) name = pkg.name
+        } catch {
+          // keep directory-derived name
+        }
+      }
+      out.push({ name, path: dir })
+    }
+  }
+
+  return out
+}

package/src/utils/names.js

@@ -5,7 +5,8 @@
  * and detects collisions with existing workspace packages.
  */
 
-import { discoverFoundations, discoverSites, readWorkspaceConfig, resolveGlob } from './config.js'
+import { readWorkspaceConfig, resolveGlob } from './config.js'
+import { discoverFoundations, discoverSites } from './discover.js'
 import { existsSync } from 'node:fs'
 import { readFile } from 'node:fs/promises'
 import { join } from 'node:path'