uniweb 0.12.18 → 0.12.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "0.12.18",
+  "version": "0.12.20",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,13 +41,13 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/kit": "0.9.11",
-    "@uniweb/runtime": "0.8.13",
-    "@uniweb/core": "0.7.11"
+    "@uniweb/core": "0.7.11",
+    "@uniweb/runtime": "0.8.14",
+    "@uniweb/kit": "0.9.13"
   },
   "peerDependencies": {
-    "@uniweb/build": "0.14.4",
-    "@uniweb/content-reader": "1.1.10",
+    "@uniweb/build": "0.14.5",
+    "@uniweb/content-reader": "1.1.11",
     "@uniweb/semantic-parser": "1.1.17"
   },
   "peerDependenciesMeta": {

package/src/commands/build.js

@@ -45,8 +45,8 @@
  *   --bundle            # Full vite pipeline (third-party hosts)
  */
 
-import { existsSync, readFileSync } from 'node:fs'
-import { resolve, join, dirname } from 'node:path'
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'
+import { resolve, join, dirname, basename } from 'node:path'
 import { spawn } from 'node:child_process'
 import { writeFile, mkdir } from 'node:fs/promises'
 import { createRequire } from 'node:module'
@@ -243,6 +243,118 @@ async function buildFoundation(projectDir, options = {}) {
   log(`  ${colors.bright}uniweb handoff <email>${colors.reset}      Hand off a site to a client`)
 }
 
+/**
+ * Ensure a local foundation's `dist/entry.js` is current.
+ *
+ * Whenever a build or deploy reads a local foundation from disk — bundle
+ * mode (vite imports it, prerender loads it for SSG), or link mode where
+ * the foundation is uploaded alongside the site — the foundation must be
+ * built and current. Otherwise the verb fails with "Foundation not found
+ * at .../dist/entry.js" or silently ships stale artifacts.
+ *
+ * `buildWorkspace()` already cascades when invoked from a workspace root,
+ * but verbs invoked from a site directory (`uniweb build` in `sites/x/`,
+ * `uniweb deploy`, `uniweb export`) used to skip the cascade and rely on
+ * the user having pre-built the foundation. That broke fresh checkouts
+ * where the foundation has never been built locally.
+ *
+ * This helper is idempotent: when the workspace-root cascade has already
+ * run, the freshness check sees a current `dist/entry.js` and returns
+ * without rebuilding. So adding the call inside `buildSite()` /
+ * `buildSiteLink()` does not double-build under `buildWorkspace()`.
+ *
+ * Freshness rule: a built artifact (`dist/entry.js` or the legacy
+ * `dist/foundation.js`) exists AND its mtime is >= the newest mtime of
+ * any tracked source file. Tracked sources: every file under
+ * `<foundation>/src/`, plus root-level `package.json`, `foundation.js`,
+ * `meta.js` (the structural files that drive entry generation and
+ * schema). Build outputs and node_modules are skipped.
+ *
+ * Both artifact names are accepted because the foundation build emitter
+ * was renamed `dist/foundation.js → dist/entry.js` in `@uniweb/build`
+ * v0.14.3. A foundation built with an older @uniweb/build still produces
+ * the legacy name; we don't want the cascade to keep rebuilding such a
+ * foundation forever just because the new name is missing.
+ */
+async function ensureFoundationFresh(foundationDir, label = 'foundation') {
+  const distArtifact = findFoundationDistArtifact(foundationDir)
+
+  if (!distArtifact) {
+    info(`Local ${label} not built yet — building ${basename(foundationDir)} first`)
+    log('')
+    await buildFoundation(foundationDir)
+    log('')
+    return { built: true, reason: 'missing' }
+  }
+
+  const distMtime = statSync(distArtifact).mtimeMs
+  const stale = isFoundationSourceNewerThan(foundationDir, distMtime)
+
+  if (stale) {
+    info(`Local ${label} sources changed — rebuilding ${basename(foundationDir)}`)
+    log('')
+    await buildFoundation(foundationDir)
+    log('')
+    return { built: true, reason: 'stale' }
+  }
+
+  return { built: false, reason: 'fresh' }
+}
+
+/**
+ * Locate the foundation's built entry artifact. Returns the path of the
+ * first match, or null when neither file exists. Prefers the current
+ * name (`dist/entry.js`) over the legacy one (`dist/foundation.js`).
+ */
+function findFoundationDistArtifact(foundationDir) {
+  for (const name of ['entry.js', 'foundation.js']) {
+    const p = join(foundationDir, 'dist', name)
+    if (existsSync(p)) return p
+  }
+  return null
+}
+
+/**
+ * Returns true if any tracked foundation source file has an mtime newer
+ * than `referenceMtime`. Walks `<foundationDir>/src/` recursively (skipping
+ * dotfiles, node_modules, and dist). Also stats the root structural files.
+ */
+function isFoundationSourceNewerThan(foundationDir, referenceMtime) {
+  const rootFiles = ['package.json', 'foundation.js', 'meta.js']
+  for (const f of rootFiles) {
+    const p = join(foundationDir, f)
+    if (existsSync(p) && statSync(p).mtimeMs > referenceMtime) return true
+  }
+
+  const srcDir = join(foundationDir, 'src')
+  if (!existsSync(srcDir)) return false
+
+  const stack = [srcDir]
+  while (stack.length) {
+    const dir = stack.pop()
+    let entries
+    try {
+      entries = readdirSync(dir, { withFileTypes: true })
+    } catch {
+      continue
+    }
+    for (const e of entries) {
+      if (e.name === 'node_modules' || e.name === 'dist' || e.name.startsWith('.')) continue
+      const full = join(dir, e.name)
+      if (e.isDirectory()) {
+        stack.push(full)
+        continue
+      }
+      if (!e.isFile()) continue
+      try {
+        if (statSync(full).mtimeMs > referenceMtime) return true
+      } catch { /* ignore */ }
+    }
+  }
+
+  return false
+}
+
 /**
  * Load site i18n configuration
  *
@@ -452,6 +564,11 @@ async function buildSiteLink(projectDir, options = {}) {
   // null and theme defaults come from theme.yml only.
   const foundationDir = await resolveFoundationDirForSite(projectDir, siteConfig).catch(() => null)
 
+  // Cascade: a local foundation in link mode is uploaded alongside the
+  // site (site-bound mode), so its dist must be current. Idempotent under
+  // buildWorkspace() — the freshness check no-ops when already built.
+  if (foundationDir) await ensureFoundationFresh(foundationDir)
+
   await buildSiteData({
     siteRoot: projectDir,
     distDir,
@@ -548,6 +665,12 @@ async function buildSite(projectDir, options = {}) {
 
   info('Building site...')
 
+  // Cascade: bundle mode imports the foundation through vite, and (when
+  // prerender is on) loads dist/entry.js for SSG. A local foundation must
+  // therefore be current. Idempotent under buildWorkspace() — when the
+  // workspace cascade has already built it, the freshness check no-ops.
+  if (foundationDir) await ensureFoundationFresh(foundationDir)
+
   // Run vite build for sites
   await runLocalVite(projectDir, ['build'])
 
@@ -924,7 +1047,20 @@ export async function build(args = []) {
       if (prerenderFlag) prerender = true
       if (noPrerenderFlag) prerender = false
 
-      await buildSite(projectDir, { prerender, foundationDir, siteConfig, host })
+      // If `--foundation-dir` wasn't passed, resolve the local foundation
+      // from site.yml + package.json. Required so buildSite() can cascade
+      // to the local foundation when the user runs `uniweb build` from a
+      // site dir on a fresh checkout where dist/ doesn't exist yet.
+      const resolvedFoundationDir =
+        foundationDir
+        || (await resolveFoundationDirForSite(projectDir, siteConfig).catch(() => null))
+
+      await buildSite(projectDir, {
+        prerender,
+        foundationDir: resolvedFoundationDir,
+        siteConfig,
+        host,
+      })
     }
   } catch (err) {
     error(err.message)

package/src/commands/publish.js

@@ -225,7 +225,12 @@ export async function publish(args = []) {
   //    intends the NEW one. Without rebuilding we'd ship inconsistent
   //    bytes (schema says one version, registry record says another).
   const distDir = join(foundationDir, 'dist')
+  // @uniweb/build@0.14.0+ emits dist/entry.js (Phase 5 of CDN migration);
+  // older builds emitted dist/foundation.js. Accept either so a single CLI
+  // works against both old and new foundations during the rollout window.
+  const entryJs = join(distDir, 'entry.js')
   const foundationJs = join(distDir, 'foundation.js')
+  const hasMainArtifact = () => existsSync(entryJs) || existsSync(foundationJs)
   const schemaJson = join(distDir, 'meta', 'schema.json')
 
   // Pre-read package.json so we can compare its version against the
@@ -335,7 +340,7 @@ export async function publish(args = []) {
     }
   }
 
-  let needsBuild = !existsSync(foundationJs) || !existsSync(schemaJson)
+  let needsBuild = !hasMainArtifact() || !existsSync(schemaJson)
   let buildReason = needsBuild ? 'no dist/ found' : null
 
   if (!needsBuild) {
@@ -446,8 +451,8 @@ export async function publish(args = []) {
     })
     console.log('')
 
-    if (!existsSync(foundationJs) || !existsSync(schemaJson)) {
-      error('Build did not produce dist/foundation.js and dist/meta/schema.json')
+    if (!hasMainArtifact() || !existsSync(schemaJson)) {
+      error('Build did not produce dist/entry.js (or legacy dist/foundation.js) and dist/meta/schema.json')
       process.exit(1)
     }
   }

package/src/framework-index.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-05-06T22:01:04.763Z",
+  "generatedAt": "2026-05-12T15:22:16.890Z",
   "packages": {
     "@uniweb/build": {
-      "version": "0.14.4",
+      "version": "0.14.5",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",
@@ -14,7 +14,7 @@
       ]
     },
     "@uniweb/content-reader": {
-      "version": "1.1.10",
+      "version": "1.1.11",
       "path": "framework/content-reader",
       "deps": []
     },
@@ -42,7 +42,7 @@
       "deps": []
     },
     "@uniweb/kit": {
-      "version": "0.9.11",
+      "version": "0.9.13",
       "path": "framework/kit",
       "deps": [
         "@uniweb/core"
@@ -54,12 +54,12 @@
       "deps": []
     },
     "@uniweb/press": {
-      "version": "0.4.5",
+      "version": "0.4.6",
       "path": "framework/press",
       "deps": []
     },
     "@uniweb/runtime": {
-      "version": "0.8.13",
+      "version": "0.8.14",
       "path": "framework/runtime",
       "deps": [
         "@uniweb/core",
@@ -92,7 +92,7 @@
       "deps": []
     },
     "@uniweb/unipress": {
-      "version": "0.4.8",
+      "version": "0.4.9",
       "path": "framework/unipress",
       "deps": [
         "@uniweb/build",

package/src/index.js

@@ -1205,12 +1205,12 @@ ${colors.cyan}${colors.bright}uniweb login${colors.reset} ${colors.dim}— Log i
 ${colors.bright}Usage:${colors.reset}
   uniweb login [options]
 
-Opens a browser to hub.uniweb.app for OAuth-style login, then captures
+Opens a browser to www.uniweb.app for OAuth-style login, then captures
 the token via a loopback callback. Falls back to a paste-token prompt
 if the browser flow fails.
 
 ${colors.bright}Options:${colors.reset}
-  --backend <url>    Override the auth backend (default: https://hub.uniweb.app)
+  --backend <url>    Override the auth backend (default: https://www.uniweb.app)
 
 In non-interactive mode (CI / no TTY / --non-interactive), this command
 errors out — set the \`UNIWEB_TOKEN\` env var instead, or run \`login\`

package/src/utils/config.js

@@ -27,10 +27,8 @@ import { filterCmd } from './pm.js'
 // REGISTRY hosts platform operations (publish, foundations, runtime, admin):
 //   moved to hosting.uniweb.app in the CDN migration (Phase 4c, 2026-05-04).
 // BACKEND hosts the PHP user-facing surface (login, account, orgs, billing,
-//   publish-authorize): owned by the v4 single-domain plan
-//   (kb/platform/plans/uniweb-domain-plan-v4.md), which will move it to
-//   uniweb.app/api/* when v4 ships. Until then, it stays at hub.uniweb.app.
-const PRODUCTION_BACKEND_URL = 'https://hub.uniweb.app'
+//   publish-authorize).
+const PRODUCTION_BACKEND_URL = 'https://www.uniweb.app'
 const PRODUCTION_REGISTRY_URL = 'https://hosting.uniweb.app'
 
 /**