uniweb 0.12.28 → 0.12.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "0.12.28",
+  "version": "0.12.30",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,12 +41,12 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/core": "0.7.12",
-    "@uniweb/kit": "0.9.16",
-    "@uniweb/runtime": "0.8.17"
+    "@uniweb/kit": "0.9.17",
+    "@uniweb/runtime": "0.8.18",
+    "@uniweb/core": "0.7.13"
   },
   "peerDependencies": {
-    "@uniweb/build": "0.14.12",
+    "@uniweb/build": "0.14.13",
     "@uniweb/content-reader": "1.1.12",
     "@uniweb/semantic-parser": "1.1.17"
   },

package/src/commands/push.js

@@ -122,11 +122,17 @@ function changedSummary(finalized) {
 // (the `@uniweb/data-schema` form) from the backend via the client. Cached per run;
 // HTTP 404 → null (the emitter then says "register it first"). The bearer is acquired
 // lazily by the client, so a fully-local sync never authenticates.
-export function makeModelResolver({ client }) {
+//
+// `offline` (set for `-o` / `--dry-run`) forces every non-local Model to null WITHOUT
+// touching the backend — an offline emit must never authenticate. The collections
+// emitter then soft-skips a convention-defaulted schema with a warning ("not synced")
+// and still emits the site-content lane; an EXPLICIT non-local schema surfaces as a
+// clear "could not be resolved" error rather than an auth prompt.
+export function makeModelResolver({ client, offline = false }) {
   const cache = new Map()
   return async (modelName) => {
     if (cache.has(modelName)) return cache.get(modelName)
-    const decl = await client.readDataSchema(modelName)
+    const decl = offline ? null : await client.readDataSchema(modelName)
     cache.set(modelName, decl)
     return decl
   }
@@ -161,8 +167,10 @@ export async function push(args = []) {
   const foundationDir = flagValue(args, '--foundation')
   const sendAll = args.includes('--all') // bypass the send-only-changed cache
   // One front door. The bearer is resolved lazily on first need (a non-local Model
-  // read during the build, or the submit), so a fully-local sync — and --dry-run / -o
-  // — never authenticate when every Model is defined by the local foundation.
+  // read during the build, or the submit). Offline emit (--dry-run / -o) is fully
+  // offline: it never submits, and its Model resolver never reads from the backend
+  // (the `offline` flag below), so it never authenticates — even when a collection
+  // references a Model the local foundation doesn't define.
   const client = new BackendClient({
     originFlag: flagValue(args, '--registry'),
     token: tokenFlag,
@@ -181,7 +189,7 @@ export async function push(args = []) {
   try {
     pkg = await emitSyncPackages(siteDir, {
       ...(foundationDir ? { foundationDir } : {}),
-      resolveModel: makeModelResolver({ client }),
+      resolveModel: makeModelResolver({ client, offline: Boolean(output) || dryRun }),
       priorHashes,
       sendAll,
     })

package/src/commands/register.js

@@ -27,10 +27,13 @@
  *   uniweb register --schema-only        Skip the code delivery (schemas land, no dist upload)
  *   uniweb register --dry-run            Print the .uwx + the code file plan; submit nothing
  *   uniweb register -o foundation.uwx    Write the .uwx to a file; submit nothing
- *   uniweb register --registry <url>     Override the submit endpoint
+ *   uniweb register --json               Porcelain: ONE compact JSON line on stdout
+ *                                        ({ok,scope,origin,entities:[{name,uuid,version,unchanged}]}),
+ *                                        all human output to stderr — for scripted callers
+ *   uniweb register --registry <url>     Override the submit endpoint (alias: --backend)
  *   uniweb register --token <bearer>     Submit with this bearer; skips `uniweb login`
  *
- * Endpoint resolution: --registry <url>  >  UNIWEB_REGISTER_URL  >  the local default.
+ * Endpoint resolution: --backend / --registry <url>  >  UNIWEB_REGISTER_URL  >  the local default.
  * Auth (submit only):  --token <bearer>  >  UNIWEB_TOKEN  >  `uniweb login` session.
  */
 
@@ -70,10 +73,18 @@ const colors = {
   reset: '\x1b[0m', bright: '\x1b[1m', dim: '\x1b[2m',
   red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[36m',
 }
-const log = console.log
+// Porcelain (`--json`) mode: stdout carries ONLY the final compact JSON line, so
+// all human/colored output diverts to stderr. `emitJson` writes to the REAL
+// stdout (bypassing the redirect). `jsonMode`/`jsonEmitted`/`lastError` are reset
+// per run by the exported `register` wrapper.
+let jsonMode = false
+let jsonEmitted = false
+let lastError = null
+const log = (...a) => (jsonMode ? console.error(...a) : console.log(...a))
 const success = (m) => log(`${colors.green}✓${colors.reset} ${m}`)
-const error = (m) => console.error(`${colors.red}✗${colors.reset} ${m}`)
+const error = (m) => { lastError = String(m); console.error(`${colors.red}✗${colors.reset} ${m}`) }
 const info = (m) => log(`${colors.blue}→${colors.reset} ${m}`)
+const emitJson = (obj) => { jsonEmitted = true; process.stdout.write(JSON.stringify(obj) + '\n') }
 
 function flagValue(args, name) {
   const eq = args.find((a) => a.startsWith(`${name}=`))
@@ -195,11 +206,27 @@ export function foundationNeedsBuild(targetDir) {
 }
 
 export async function register(args = []) {
+  jsonMode = args.includes('--json')
+  jsonEmitted = false
+  lastError = null
+  const result = await runRegister(args)
+  // Guarantee a porcelain line on stdout for every --json exit: the success path
+  // emits its own; here we cover the error / early-return paths so a scripted
+  // caller can always JSON.parse(stdout).
+  if (jsonMode && !jsonEmitted) {
+    emitJson(result?.exitCode === 0 ? { ok: true, entities: [] } : { ok: false, error: lastError || `register failed (exit ${result?.exitCode ?? 1})` })
+  }
+  return result
+}
+
+async function runRegister(args = []) {
   const dryRun = args.includes('--dry-run')
   const output = flagValue(args, '-o') || flagValue(args, '--output')
   const scopeFlag = flagValue(args, '--scope')
   const tokenFlag = flagValue(args, '--token')
-  const client = new BackendClient({ originFlag: flagValue(args, '--registry'), token: tokenFlag, args, command: 'Registering' })
+  // Origin: --backend and --registry are aliases (matches deploy/publish + the
+  // origin-selection convention); either overrides UNIWEB_REGISTER_URL / default.
+  const client = new BackendClient({ originFlag: flagValue(args, '--backend') || flagValue(args, '--registry'), token: tokenFlag, args, command: 'Registering' })
 
   // Target: a schemas-only package (standalone data-schema register) or a
   // foundation (foundation + the schemas it renders). A schemas package is only
@@ -340,12 +367,16 @@ export async function register(args = []) {
     res = await client.register(json)
   } catch (err) {
     error(`Could not reach the registry at ${client.origin}: ${err.message}`)
-    log(`  ${colors.dim}Set the endpoint with --registry <url> or UNIWEB_REGISTER_URL.${colors.reset}`)
+    log(`  ${colors.dim}Set the endpoint with --backend/--registry <url> or UNIWEB_REGISTER_URL.${colors.reset}`)
     return { exitCode: 2 }
   }
+  // Read the response body once: the --json success path needs it for the minted
+  // entity ids; the error path shows it.
+  const rawBody = await res.text().catch(() => '')
+  let parsedBody = null
+  try { parsedBody = rawBody ? JSON.parse(rawBody) : null } catch { parsedBody = null }
   let alreadyRegistered = false
   if (!res.ok) {
-    const body = await res.text().catch(() => '')
     // Resume path: a registered version is immutable, so re-running after a
     // partial code delivery hits the duplicate rejection here — a STRUCTURED
     // 409 (problem+json, title "Conflict") — and proceeds to phase 2 (the
@@ -361,7 +392,7 @@ export async function register(args = []) {
         log(`  ${colors.dim}The registry didn't accept your credentials — it may use different ones than \`uniweb login\`.${colors.reset}`)
         log(`  ${colors.dim}Supply a registry bearer with --token <bearer> (or UNIWEB_TOKEN); an existing one may be wrong or expired.${colors.reset}`)
       }
-      if (body) log(`  ${colors.dim}${body.slice(0, 500)}${colors.reset}`)
+      if (rawBody) log(`  ${colors.dim}${rawBody.slice(0, 500)}${colors.reset}`)
       return { exitCode: 1 }
     }
   }
@@ -415,5 +446,30 @@ export async function register(args = []) {
       return { exitCode: 1 }
     }
   }
+  if (jsonMode) {
+    // Join my authoritative submitted names with the backend's minted ids. Each
+    // response entry is `{ registered: { name, version, payload_model_uuid, … },
+    // unchanged }` (symmetric on the new-version + unchanged branches); a flat
+    // shape is tolerated as a fallback. Names from doc.entities are the spine, so
+    // the porcelain always reports WHICH names landed even if a field is absent.
+    const minted = {}
+    const addMint = (e) => {
+      if (!e || typeof e !== 'object') return
+      const reg = e.registered ?? e
+      if (reg.name) minted[reg.name] = { uuid: reg.payload_model_uuid ?? null, version: reg.version ?? null, unchanged: e.unchanged === true }
+    }
+    if (parsedBody && typeof parsedBody === 'object') {
+      if (Array.isArray(parsedBody.data_schemas)) parsedBody.data_schemas.forEach(addMint)
+      if (parsedBody.foundation_schema) addMint(parsedBody.foundation_schema)
+    }
+    const names = [
+      ...doc.entities.filter((e) => e.model === '@uniweb/data-schema').map((e) => e.name),
+      // The foundation-schema entity carries its `@scope/name` under `info`, not a
+      // top-level `name` (that's the foundation-schema shape).
+      ...doc.entities.filter((e) => e.model === '@uniweb/foundation-schema').map((e) => e.info?.name ?? e.name),
+    ].filter(Boolean)
+    const entities = names.map((name) => ({ name, ...(minted[name] || { uuid: null, version: null, unchanged: false }) }))
+    emitJson({ ok: true, scope: scope || null, origin: client.origin, entities })
+  }
   return { exitCode: 0 }
 }

package/src/framework-index.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-06-15T14:11:09.239Z",
+  "generatedAt": "2026-06-16T23:17:46.927Z",
   "packages": {
     "@uniweb/build": {
-      "version": "0.14.12",
+      "version": "0.14.13",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",
@@ -25,7 +25,7 @@
       "deps": []
     },
     "@uniweb/core": {
-      "version": "0.7.12",
+      "version": "0.7.13",
       "path": "framework/core",
       "deps": [
         "@uniweb/semantic-parser",
@@ -43,7 +43,7 @@
       "deps": []
     },
     "@uniweb/kit": {
-      "version": "0.9.16",
+      "version": "0.9.17",
       "path": "framework/kit",
       "deps": [
         "@uniweb/core",
@@ -61,7 +61,7 @@
       "deps": []
     },
     "@uniweb/runtime": {
-      "version": "0.8.17",
+      "version": "0.8.18",
       "path": "framework/runtime",
       "deps": [
         "@uniweb/core",
@@ -89,17 +89,17 @@
       "deps": []
     },
     "@uniweb/templates": {
-      "version": "0.7.40",
+      "version": "0.7.41",
       "path": "framework/templates",
       "deps": []
     },
     "@uniweb/theming": {
-      "version": "0.1.3",
+      "version": "0.1.4",
       "path": "framework/theming",
       "deps": []
     },
     "@uniweb/unipress": {
-      "version": "0.4.16",
+      "version": "0.4.18",
       "path": "framework/unipress",
       "deps": [
         "@uniweb/build",

package/src/index.js

@@ -1105,7 +1105,7 @@ ${colors.bright}Options:${colors.reset}
   --dry-run           Resolve site.yml + foundation/runtime; print summary; no writes
   --no-auto-publish   Don't auto-publish workspace-local foundation as part of deploy
   --no-save           Skip the auto-save of lastDeploy in deploy.yml
-  --local             Internal: target the unicloud mock (see workspace root CLAUDE.md)
+  --backend <url>     Override the default backend origin (\$UNIWEB_REGISTER_URL or built-in)
   --non-interactive   Fail with usage info instead of prompting
 
 ${colors.bright}Auth:${colors.reset}

package/src/versions.js

@@ -40,6 +40,18 @@ const __dirname = dirname(fileURLToPath(import.meta.url))
 // Cache for resolved versions
 let resolvedVersions = null
 
+/**
+ * The React major the framework standardizes on.
+ *
+ * React 19 changed the element marker symbol, so mixing React 18 and 19
+ * across the foundation ↔ runtime SSR boundary breaks rendering. The whole
+ * toolchain therefore pins a single major. This is the one place that value
+ * lives: scaffolded `package.json` files reference it through the
+ * `{{version "react"}}` / `{{version "react-dom"}}` template helpers instead
+ * of hardcoding a range.
+ */
+export const REACT_VERSION = '^19.0.0'
+
 /**
  * Get the CLI's own package.json
  */
@@ -285,6 +297,10 @@ export function getVersionsForTemplates() {
     // Full package names
     ...versions,
 
+    // React pinned to the framework's official major (single source: REACT_VERSION above).
+    react: REACT_VERSION,
+    'react-dom': REACT_VERSION,
+
     // Simplified names for templates (e.g., {{versions.build}})
     build: versions['@uniweb/build'],
     runtime: versions['@uniweb/runtime'],

package/templates/foundation/package.json.hbs

@@ -22,8 +22,8 @@
     "preview": "vite preview"
   },
   "peerDependencies": {
-    "react": "^18.0.0 || ^19.0.0",
-    "react-dom": "^18.0.0 || ^19.0.0"
+    "react": "{{version "react"}}",
+    "react-dom": "{{version "react-dom"}}"
   },
   "dependencies": {
     "@uniweb/core": "{{version "@uniweb/core"}}",
@@ -33,8 +33,8 @@
     "@tailwindcss/vite": "^4.0.0",
     "@uniweb/build": "{{version "@uniweb/build"}}",
     "@vitejs/plugin-react": "^5.0.0",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0",
+    "react": "{{version "react"}}",
+    "react-dom": "{{version "react-dom"}}",
     "tailwindcss": "^4.0.0",
     "vite": "^7.0.0",
     "vite-plugin-svgr": "^4.2.0"

package/templates/site/package.json.hbs

@@ -17,8 +17,8 @@
     "@tailwindcss/vite": "^4.0.0",
     "@uniweb/build": "{{version "@uniweb/build"}}",
     "@vitejs/plugin-react": "^5.0.0",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0",
+    "react": "{{version "react"}}",
+    "react-dom": "{{version "react-dom"}}",
     "react-router-dom": "^7.0.0",
     "tailwindcss": "^4.0.0",
     "vite": "^7.0.0",

package/templates/workspace/package.json.hbs

@@ -16,8 +16,5 @@
   "devDependencies": {
     "@types/node": "^22.0.0",
     "uniweb": "{{version "uniweb"}}"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": ["esbuild", "sharp"]
   }
 }

package/templates/workspace/pnpm-workspace.yaml.hbs

@@ -2,3 +2,9 @@ packages:
 {{#each workspaceGlobs}}
   - "{{this}}"
 {{/each}}
+
+# Permit install scripts for these native deps. pnpm reads this from
+# pnpm-workspace.yaml; the package.json "pnpm" field is ignored by pnpm 11+.
+onlyBuiltDependencies:
+  - esbuild
+  - sharp