uniweb 0.51.0 → 0.51.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "0.51.0",
+  "version": "0.51.2",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,15 +41,15 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/core": "^0.26.1",
+    "@uniweb/runtime": "^0.21.0",
     "@uniweb/kit": "^0.18.4",
-    "@uniweb/semantic-parser": "^1.4.0",
-    "@uniweb/runtime": "^0.20.3"
+    "@uniweb/core": "^0.26.2",
+    "@uniweb/semantic-parser": "^1.4.0"
   },
   "peerDependencies": {
-    "@uniweb/content-reader": "^1.2.4",
     "@uniweb/semantic-parser": "^1.4.0",
-    "@uniweb/build": "^0.47.0"
+    "@uniweb/content-reader": "^1.2.4",
+    "@uniweb/build": "^0.47.1"
   },
   "peerDependenciesMeta": {
     "@uniweb/build": {

package/src/backend/payment-handoff.js

@@ -9,12 +9,27 @@
  * the answer.
  *
  * ⛔ THERE IS NO PRE-FLIGHT, AND ADDING ONE BACK IS A REGRESSION. A
- * `GET …/can-go-live` probe used to run before go-live; it called a route no
- * backend serves, and it folded every failure — 404 included — into
- * "proceed". A check that answers "fine" when it cannot reach the server is not
- * a check, and it made the CLI assume a posture it has no business assuming. A
- * pre-flight also cannot be authoritative: the backend re-evaluates at publish
- * time regardless, so a second asker is a second producer of one decision.
+ * `can-go-live` probe used to run before go-live, and it folded every failure —
+ * 404 included — into "proceed". A check that answers "fine" when it cannot
+ * reach the server is not a check, and it made the CLI assume a posture it has no
+ * business assuming. A pre-flight also cannot be authoritative: the backend
+ * re-evaluates at publish time regardless, so a second asker is a second producer
+ * of one decision — which is the reason that would stand even if the probe had
+ * worked.
+ *
+ * ⚠️ **THIS COMMENT USED TO SAY THE PROBE "called a route no backend serves".
+ * That was FALSE, corrected 2026-09-12.** What it called was
+ * `/dev/site/{uuid}/can-go-live` — and the 404 came from the PATH being wrong,
+ * not from the capability being absent. So the probe never worked at any version
+ * that shipped it, and every failure was swallowed by the fold above, which is
+ * exactly why nobody noticed.
+ *
+ * ⭐ Kept as a warning about the SHAPE of the old justification, not just the
+ * fact: a correct rule was resting on a claim about another system that this
+ * repo cannot see, and the claim was wrong. The rule survives because its real
+ * reasons are local — the fold, and the second-producer argument. **If you find
+ * yourself defending a rule here with an assertion about what a server does,
+ * check it or drop it.**
  *
  * WHAT THE CLI KNOWS ABOUT PAYMENT: nothing. It opens whatever settlement URL
  * the backend hands it, VERBATIM — provider-agnostic, and route-agnostic. The
@@ -125,10 +140,15 @@ export function readPaymentRefusal({ status, contentType = '', body = '' } = {})
   // key for every reason, which is what lets a reason we have never heard of still
   // reach its remedy.
   //
-  // ⚖️ `settlement.url` is the older shape and is still read. Not an alias we
-  // maintain: it is what a backend that has not moved yet still serves, and
-  // dropping the read would take away a door those deployments have today. New
-  // code never emits it and nothing here prefers it.
+  // ⚖️ `settlement.url` is the older shape and is still read, as a DEFENSIVE
+  // read and nothing more.
+  //
+  // ⛔ **This comment used to justify it as "what a backend that has not moved yet
+  // still serves". That is unverified and probably false** — corrected 2026-09-12,
+  // after the backend searched its whole tree and reported serving neither this
+  // nor `remedy_url` on any route. ⇒ Keep the read (it costs nothing and a door
+  // withheld is worse than a door read twice); do not repeat the claim about who
+  // serves it. The current contract is `remedy_url`, one key for every reason.
   const legacy = problem.settlement
   const candidate =
     (typeof problem.remedy_url === 'string' && problem.remedy_url) ||

package/src/framework-index.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-09-12T17:05:58.363Z",
+  "generatedAt": "2026-09-12T22:47:22.112Z",
   "packages": {
     "@uniweb/api": {
       "version": "0.3.3",
@@ -10,7 +10,7 @@
       ]
     },
     "@uniweb/build": {
-      "version": "0.47.0",
+      "version": "0.47.1",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",
@@ -34,7 +34,7 @@
       "deps": []
     },
     "@uniweb/core": {
-      "version": "0.26.1",
+      "version": "0.26.2",
       "path": "framework/core",
       "deps": [
         "@uniweb/semantic-parser",
@@ -82,7 +82,7 @@
       ]
     },
     "@uniweb/runtime": {
-      "version": "0.20.3",
+      "version": "0.21.0",
       "path": "framework/runtime",
       "deps": [
         "@uniweb/core",
@@ -110,7 +110,7 @@
       "deps": []
     },
     "@uniweb/templates": {
-      "version": "0.13.0",
+      "version": "0.13.1",
       "path": "framework/templates",
       "deps": []
     },
@@ -120,7 +120,7 @@
       "deps": []
     },
     "@uniweb/unipress": {
-      "version": "0.9.14",
+      "version": "0.9.15",
       "path": "framework/unipress",
       "deps": [
         "@uniweb/build",