uniweb 0.14.14 → 0.14.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "0.14.14",
+  "version": "0.14.15",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,12 +41,12 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/kit": "0.10.12",
-    "@uniweb/core": "0.8.1",
-    "@uniweb/runtime": "0.9.3"
+    "@uniweb/kit": "0.10.13",
+    "@uniweb/runtime": "0.9.3",
+    "@uniweb/core": "0.8.1"
   },
   "peerDependencies": {
-    "@uniweb/build": "0.16.8",
+    "@uniweb/build": "0.16.9",
     "@uniweb/content-reader": "1.2.2",
     "@uniweb/semantic-parser": "1.2.1"
   },

package/partials/agents.md

@@ -883,6 +883,7 @@ Nothing to install — the import brings the plugin with it. **Skip the import a
 **Layout helpers:** `useGridLayout(columns, { gap })`, `useAccordion({ multiple, defaultOpen })`
 **Theming data:** `useThemeData()`, `useColorContext(block)`
 **Data fetching:** `useFetched`, `useCacheEntry`, `useEntityDetail`
+**Forms:** `useFormSubmit`, `submitForm`, `resolveSubmitTarget` — see *Forms* below
 **Utilities:** `cn()`, `SafeHtml`, `SocialIcon`, `filterSocialLinks(links)`, `getSocialPlatform(url)`, `getLocaleLabel(locale)`
 **Other styled:** `Code`, `Alert`, `Table`, `Details`, `Divider`, `Disclaimer`
 
@@ -1741,6 +1742,60 @@ const { results, isLoading, query } = useSearch(website)   // `query` is a funct
 
 Full reference: `authoring/search.md`.
 
+### Forms (`submit:`)
+
+Drawing a form is a foundation's job; delivering what a visitor typed needs a
+server. Where that server is comes from the **site or its host** — never from a
+section type, same arrangement as `fetcher:` and `search:`.
+
+A form gets its destination from the first of these that applies:
+
+1. **`submit:` in `site.yml`** — an endpoint you name yourself.
+2. **One the host supplies.** A site published to Uniweb Cloud gets submission
+   handling from the platform, so it normally needs **no `submit:` at all**.
+3. **Neither** — there is no destination, and the form says so instead of
+   guessing at one.
+
+```yaml
+# site.yml — only when YOU are providing the endpoint. Publishing to Uniweb
+# Cloud needs nothing here; `uniweb export` and most `deploy --host` targets do.
+submit: /forms                              # base-relative, resolved like search.endpoint
+submit: https://forms.example.com/intake    # or another origin
+```
+
+```jsx
+import { useFormSubmit } from '@uniweb/kit'
+
+const { submit, status, error, canSubmit, unavailableReason } = useFormSubmit({
+  block,                                    // supplies section + page context
+  context: { formId: 'contact' },
+  summary: (v) => ({ title: v.name, subtitle: v.email }),
+})
+
+<button type="submit" disabled={!canSubmit || status === 'submitting'}>Send</button>
+{!canSubmit && <p role="status">{unavailableReason}</p>}
+```
+
+> **The framework never invents an endpoint — but a host may supply one.** Don't
+> reach for `submit:` reflexively: on Uniweb Cloud it is redundant, and setting
+> it there overrides what the platform provides. Reach for it when you are the
+> one hosting.
+>
+> `canSubmit` is false only when neither a declaration nor a host supplies a
+> destination. **Check it when you render, not only on the button press**, so the
+> control is visibly disabled before anyone fills the form in, and show
+> `unavailableReason` — it explains which case you are in. A read that 404s
+> degrades to `[]` and the page still renders; a write that 404s loses what a
+> person typed, so it gets no silent fallback.
+
+`status` runs `idle → submitting → success | error`; a non-2xx becomes a thrown
+`Error` carrying the endpoint's own `error` message when it sends one. For file
+fields, declare `fileSlots` and the endpoint replies with `uploadUrls` — the
+bytes never ride inside the JSON. `submitForm()` / `resolveSubmitTarget(website)`
+are the same behaviour without React.
+
+Full reference: `development/receiving-form-submissions.md`.
+
 <!-- template:loom -->
 ### Content handlers
 

package/src/commands/doctor.js

@@ -204,6 +204,106 @@ function sourceMatches(dir, pattern) {
   return roots.some((r) => walk(join(dir, r)))
 }
 
+// A fenced data block tagged `form`, in any of the serialization formats the
+// parser accepts for one. Matched on the info string only — the body is the
+// author's business.
+//
+// No whitespace is allowed around the colon, because the parser allows none:
+// `processCodeInfo` in @uniweb/content-reader does a bare `info.split(':')` and
+// trims neither half, so ```` ```yaml: form ```` yields the tag `" form"` and
+// lands at `content.data[" form"]`. Matching it here would warn about a block
+// that is not a form.
+const FORM_BLOCK = /^\s*`{3,}\s*(?:yaml|yml|json):form\b/m
+
+/**
+ * Find the content files declaring a form, so we can tell whether having no
+ * submission destination matters for this site.
+ *
+ * Scans the page tree and layout only. A form is authored where it renders, and
+ * widening this to collections would trade a slower check for cases that do not
+ * occur.
+ */
+export function findFormContent(sitePath, siteYml) {
+  const roots = [
+    siteYml?.paths?.pages ? join(sitePath, siteYml.paths.pages) : join(sitePath, 'pages'),
+    join(sitePath, 'layout')
+  ]
+  const found = []
+
+  const walk = (dir) => {
+    let entries
+    try {
+      entries = readdirSync(dir, { withFileTypes: true })
+    } catch {
+      return // absent or unreadable — not this check's problem to report
+    }
+    for (const entry of entries) {
+      const p = join(dir, entry.name)
+      if (entry.isDirectory()) {
+        walk(p)
+      } else if (entry.name.endsWith('.md')) {
+        try {
+          if (FORM_BLOCK.test(readFileSync(p, 'utf8'))) found.push(relative(sitePath, p))
+        } catch {
+          // unreadable file — skip
+        }
+      }
+    }
+  }
+
+  for (const root of roots) walk(root)
+  return found
+}
+
+/**
+ * A site whose content declares a form needs somewhere to send it.
+ *
+ * Two things can supply that: `submit:` in site.yml, or the host at serve time.
+ * Doctor can only see the first — so it warns only when *nothing* could
+ * plausibly supply one: no declaration, and no deploy target that would put a
+ * host in the picture. On a site bound to a host, having no `submit:` is the
+ * correct configuration, and warning there would nag exactly the people who got
+ * it right.
+ *
+ * The consequence of being wrong in the other direction is what justifies the
+ * check at all: a form with no destination renders disabled, which is visible
+ * on the page but easy to ship without noticing.
+ */
+export async function checkFormSubmitTarget({ sitePath, siteName, siteYml, issues }) {
+  if (siteYml?.submit) return
+
+  const forms = findFormContent(sitePath, siteYml)
+  if (forms.length === 0) return
+
+  // A configured deploy target means a host is in the picture and may supply a
+  // destination we cannot see from here.
+  let deployYml = null
+  try {
+    deployYml = await loadDeployYml(sitePath)
+  } catch {
+    // malformed deploy.yml is reported by its own check; treat as absent here
+  }
+  if (deployYml?.targets && Object.keys(deployYml.targets).length > 0) return
+
+  const id = 'form-without-submit-target'
+  const n = forms.length
+  issues.push({
+    id,
+    type: 'warning',
+    site: siteName,
+    message: `${n} content file${n === 1 ? '' : 's'} declare${n === 1 ? 's' : ''} a form, but no submission destination is configured`
+  })
+  warn(`[${id}] ${n} content file${n === 1 ? '' : 's'} declare${n === 1 ? 's' : ''} a form with nowhere to send it`)
+  for (const f of forms.slice(0, 5)) log(`    • ${f}`)
+  if (n > 5) log(`    ${colors.dim}…and ${n - 5} more${colors.reset}`)
+  log(
+    `    Set ${colors.green}submit${colors.reset} in site.yml if you are providing the endpoint.`
+  )
+  log(
+    `    ${colors.dim}A host that handles submissions supplies one itself — this check is skipped once a deploy target is configured.${colors.reset}`
+  )
+}
+
 function checkGeneratedDataDir({ sitePath, siteName, siteYml, issues, shouldFix, fixed }) {
   const dataDir = join(sitePath, 'public', DATA_DIR)
   const declared = new Set(Object.keys(siteYml.collections || {}))
@@ -555,6 +655,9 @@ export async function doctor(args = []) {
     // than dist/, so what lands there persists and gets deployed. A collection
     // removed from site.yml leaves its compiled records behind — visible to
     // anyone who knows the URL, listed by nothing.
+    // Forms need a destination, and having none is only visible on the page.
+    await checkFormSubmitTarget({ sitePath, siteName, siteYml, issues })
+
     checkGeneratedDataDir({
       sitePath,
       siteName,

package/src/framework-index.json

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-07-31T23:11:07.347Z",
+  "generatedAt": "2026-08-01T11:04:49.789Z",
   "packages": {
     "@uniweb/build": {
-      "version": "0.16.8",
+      "version": "0.16.9",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",
@@ -45,7 +45,7 @@
       "deps": []
     },
     "@uniweb/kit": {
-      "version": "0.10.12",
+      "version": "0.10.13",
       "path": "framework/kit",
       "deps": [
         "@uniweb/core",
@@ -110,7 +110,7 @@
       "deps": []
     },
     "@uniweb/unipress": {
-      "version": "0.6.6",
+      "version": "0.6.7",
       "path": "framework/unipress",
       "deps": [
         "@uniweb/build",
@@ -278,6 +278,17 @@
         "ai-generated",
         "starter"
       ]
+    },
+    "services": {
+      "name": "Services",
+      "description": "Local-services site built around an author-designed quote request form",
+      "tags": [
+        "services",
+        "local-business",
+        "forms",
+        "quote",
+        "trades"
+      ]
     }
   }
 }