uniweb 0.12.7 → 0.12.8

package/src/index.js

@@ -539,6 +539,13 @@ async function main() {
     return
   }
 
+  // Handle export command (dynamic import — depends on @uniweb/build)
+  if (command === 'export') {
+    const { exportSite } = await importProjectCommand('./commands/export.js')
+    await exportSite(args.slice(1))
+    return
+  }
+
   // Handle login command
   if (command === 'login') {
     await login(args.slice(1))
@@ -825,7 +832,8 @@ ${colors.bright}Commands:${colors.reset}
   rename <type>      Rename a workspace package (foundation today)
   build              Build the current project
   deploy             Deploy a site to Uniweb hosting
-  publish            Publish a foundation to the Uniweb Registry
+  export             Export a self-contained site for third-party hosting
+  publish            Publish a foundation to the Uniweb catalog (deliberate; for site-bound foundations, use deploy)
   invite <email>     Create a foundation invite for a client
   handoff <email>    Hand off a site to a client
   inspect <path>     Inspect parsed content shape of a markdown file or folder
@@ -855,10 +863,20 @@ ${colors.bright}Global Options:${colors.reset}
                        Auto-detected when CI=true or no TTY (pipes, agents)
 
 ${colors.bright}Publish Options:${colors.reset}
+  --catalog          Confirm publish to the public catalog (required in CI)
+  --propagate        Walk trusting sites' policy waves (default: silent)
+  --name <id>        Foundation id (overrides package.json::uniweb.id)
+  --namespace <ns>   Force org-scope namespace (overrides package.json)
   --local            Publish to the local registry (.unicloud/) instead of Uniweb Registry
+  --registry <url>   Use a specific registry URL
   --edit-access <p>  Set edit access policy: "open" or "restricted" (default: restricted)
   --dry-run          Show what would be published without uploading
 
+  uniweb publish is for cataloging a foundation as a product. For
+  site-bound foundations (one foundation, one site), use uniweb deploy
+  instead — it auto-publishes under a site-scoped slot, no naming
+  ceremony.
+
 ${colors.bright}Invite Options:${colors.reset}
   --uses <n>         Max sites per invite (default: 1)
   --expires <days>   Days until expiry (default: 30)
@@ -878,16 +896,16 @@ ${colors.bright}Template Options:${colors.reset}
   --registry <url>   Registry URL (default: http://localhost:4001)
 
 ${colors.bright}Deploy Options:${colors.reset}
-  --dry-run          Resolve site.yml + foundation/runtime but skip the Worker POST
-  --skip-build       Don't rebuild, use existing dist/ as-is
-  --skip-assets      Skip binary asset upload (content-only deploy)
+  --dry-run          Resolve site.yml + foundation/runtime; print summary; no writes
+  --no-auto-publish  Don't auto-publish workspace-local foundation as part of deploy
+
+${colors.bright}Export Options:${colors.reset}
+  --no-prerender     Skip per-page prerendered HTML
 
 ${colors.bright}Build Options:${colors.reset}
   --target <type>    Build target (foundation, site) - auto-detected if not specified
-  --link             Site: data-only pipeline (Uniweb-edge hosting)
-  --bundle           Site: vite-built static-host artifact (default)
-  --prerender        Force pre-rendering (bundle mode only; overrides site.yml)
-  --no-prerender     Skip pre-rendering (bundle mode only; overrides site.yml)
+  --prerender        Force pre-rendering (overrides site.yml)
+  --no-prerender     Skip pre-rendering (overrides site.yml)
   --foundation-dir   Path to foundation directory (for prerendering)
   --platform <name>  Deployment platform (e.g., vercel) for platform-specific output
 

package/src/utils/env.js

@@ -0,0 +1,22 @@
+/**
+ * Internal env-var helpers.
+ *
+ * UNIWEB_* env vars are escape hatches for developers, operators, and the
+ * platform test team — not user-facing settings. Documented in
+ * `framework/cli/docs/env-vars.md`. Anything truly user-facing should be a
+ * flag, not an env var.
+ */
+
+/**
+ * Parse a boolean-shaped env var. Returns true for "1", "true", "yes" (any
+ * case); false otherwise (including unset, empty, or any other string).
+ *
+ * @param {string} name - Env var name (e.g., "UNIWEB_SKIP_BUILD").
+ * @returns {boolean}
+ */
+export function parseBoolEnv(name) {
+  const raw = process.env[name]
+  if (!raw) return false
+  const v = String(raw).trim().toLowerCase()
+  return v === '1' || v === 'true' || v === 'yes'
+}

package/src/utils/registry.js

@@ -144,9 +144,8 @@ export class LocalRegistry {
 
   /**
    * Get the full version entry for `name@version`, or null if absent.
-   * Used by `publish` and `deploy` to refill `dist/publish.json` from
-   * server-of-record state when the local cache is missing — see
-   * `kb/framework/build/workspace-ergonomics.md` (receipt-as-cache).
+   * Used by `publish` (pre-flight duplicate check) and `deploy`
+   * (staleness check via git provenance comparison).
    *
    * @param {string} name
    * @param {string} version
@@ -270,8 +269,8 @@ export class RemoteRegistry {
 
   /**
    * Get the full version entry for `name@version`, or null if absent.
-   * Used by `publish` and `deploy` to refill `dist/publish.json` from
-   * server-of-record state when the local cache is missing.
+   * Used by `publish` (pre-flight duplicate check) and `deploy`
+   * (staleness check via git provenance comparison).
    *
    * @param {string} name
    * @param {string} version

package/src/utils/receipt.js

@@ -1,91 +0,0 @@
-/**
- * `dist/publish.json` receipt — shared shape used by `publish` and `deploy`.
- *
- * The receipt is a per-checkout cache of the last publish; it lets the
- * deploy verb decide whether a workspace-local foundation needs republishing
- * without a network round-trip on the happy path. It's gitignored, so it
- * never travels with the source — fresh clones, CI runs, and teammates all
- * start with no cache. Both verbs refill the cache lazily by reading the
- * registry's index when the local file is missing.
- *
- * See `kb/framework/build/workspace-ergonomics.md` for the full rationale.
- */
-
-/**
- * Compose the canonical six-field receipt body. All callers MUST go through
- * this helper so the runbook's pp-10 schema check stays meaningful.
- *
- * @param {Object} params
- * @param {string|null} params.gitSha
- * @param {boolean} params.gitDirty
- * @param {string} params.url
- * @param {string} params.publishedAt
- * @param {string} params.classification    'propagate' | 'silent'
- * @returns {Object}
- */
-export function composeReceipt({ gitSha, gitDirty, url, publishedAt, classification }) {
-  return {
-    schemaVersion: 1,
-    publishedFromGitSha: gitSha,
-    publishedFromGitDirty: gitDirty,
-    url,
-    publishedAt,
-    classification,
-  }
-}
-
-/**
- * Resolve the canonical receipt URL given (in priority order):
- *   1. A `publishResult.url` from a fresh upload — server-rendered, handles
- *      empty-scope rewrites the CLI can't synthesize.
- *   2. An `existingEntry.url` recorded by a previous publish (refill path).
- *   3. A synthesized canonical form — `file://` for local registries,
- *      `<apiUrl>/foundations/<name>@<version>/foundation.js` for remote.
- *      The remote form mirrors the path the worker returns in `publishResult.url`,
- *      which keeps the receipt's URL parseable by the regex in
- *      `deploy.js::deriveLocalFoundationRef` even when the registry's index
- *      entry doesn't carry an explicit `url` field. (Unicloud's index entries
- *      don't; uniweb-edge's index entries don't either — both rely on the
- *      response shape, not the index shape.)
- *
- * Path-shaped candidates (e.g. `/foundations/...`) are joined with the
- * registry's `apiUrl` so the receipt always carries an absolute URL.
- */
-export function deriveReceiptUrl({ publishResult, existingEntry, registry, name, version, isLocal }) {
-  const candidate = publishResult?.url || existingEntry?.url
-  if (candidate) {
-    if (candidate.startsWith('http') || candidate.startsWith('file://')) return candidate
-    if (registry?.apiUrl) return new URL(candidate, registry.apiUrl).toString()
-  }
-  if (isLocal) return `file://${registry.getPackagePath(name, version)}/`
-  return `${registry.apiUrl.replace(/\/$/, '')}/foundations/${name}@${version}/foundation.js`
-}
-
-/**
- * Build a receipt from an existing registry version entry, used to refill a
- * missing `dist/publish.json` from server-of-record state. Returns null if
- * the entry doesn't carry enough provenance to make the receipt useful for
- * staleness checks (the only field that strictly must be present is
- * `publishedFromGitSha` — without it, the deploy verb can't compare against
- * HEAD, and refilling would just re-trigger the auto-publish next run).
- */
-export function receiptFromRegistryEntry({ existingEntry, registry, name, version, isLocal, isPropagateDefault }) {
-  if (!existingEntry || !existingEntry.publishedFromGitSha) return null
-  return composeReceipt({
-    gitSha: existingEntry.publishedFromGitSha,
-    gitDirty: existingEntry.publishedFromGitDirty ?? false,
-    url: deriveReceiptUrl({ existingEntry, registry, name, version, isLocal }),
-    publishedAt: existingEntry.publishedAt || new Date().toISOString(),
-    classification: existingEntry.classification || (isPropagateDefault ? 'propagate' : 'silent'),
-  })
-}
-
-/**
- * Split `@ns/name@ver`, `~user/name@ver`, or `name@ver` into name + version.
- * Returns null on any shape we don't recognize.
- */
-export function splitRegistryRef(ref) {
-  if (typeof ref !== 'string') return null
-  const m = /^(@[^/]+\/[^@]+|~[^/]+\/[^@]+|[^@]+)@(.+)$/.exec(ref)
-  return m ? { name: m[1], version: m[2] } : null
-}