uniweb 0.70.1 → 0.70.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "0.70.1",
+  "version": "0.70.2",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,17 +41,17 @@
     "js-yaml": "^4.1.0",
     "prompts": "^2.4.2",
     "tar": "^7.0.0",
-    "@uniweb/core": "^0.30.1",
+    "@uniweb/content-writer": "^0.3.4",
     "@uniweb/runtime": "^0.27.6",
     "@uniweb/kit": "^0.19.5",
-    "@uniweb/schemas": "^0.7.1",
+    "@uniweb/core": "^0.30.1",
     "@uniweb/semantic-parser": "^1.4.1",
-    "@uniweb/content-writer": "^0.3.4"
+    "@uniweb/schemas": "^0.7.2"
   },
   "peerDependencies": {
-    "@uniweb/build": "^0.64.1",
     "@uniweb/content-reader": "^1.2.5",
-    "@uniweb/semantic-parser": "^1.4.1"
+    "@uniweb/semantic-parser": "^1.4.1",
+    "@uniweb/build": "^0.64.2"
   },
   "peerDependenciesMeta": {
     "@uniweb/build": {

package/src/backend/site-preview.js

@@ -0,0 +1,77 @@
+/**
+ * What `uniweb dev` asks the backend before previewing a site whose foundation is a catalog ref —
+ * every clone.
+ *
+ * Such a site has no build of its foundation, and a build does not turn a ref into a URL: where a
+ * version is served is the backend's to say. So the dev server is handed the backend's answer, read
+ * for it here through the site — the route push and pull read the version's section types from
+ * (`client.readRegisteredFoundation`) — and passed on in `UNIWEB_PREVIEW` (`@uniweb/build/site`'s
+ * `preview.js` has the contract). The backend it names is also where the site's kept media URLs are
+ * fetched from.
+ *
+ * ⛔ Nothing here is kept. The answer lives as long as the dev server: `site.yml` keeps the ref, and
+ * no file a push or pull reads gets the URL — the round trip never sees it.
+ *
+ * ⚠️ It may not be known. Whether a backend tells the CLI where a version is served is the backend's
+ * to decide, and may change, so an answer without a location is an ordinary outcome: the preview
+ * says so and does not start. Nothing else reads it — push, pull and publish work without it.
+ */
+import { readBackendState, parseCatalogRef } from '@uniweb/build/uwx'
+import { BackendClient } from './client.js'
+import { resolveWorkspace } from './workspace.js'
+import { readDeclaredFoundation } from '../utils/install-integrity.js'
+import { syncedBackends } from '../utils/site-identity.js'
+
+/**
+ * What the dev server of `siteDir` is handed, when its foundation is a catalog ref.
+ *
+ * @param {object} p
+ * @param {string} p.siteDir
+ * @param {string[]} [p.args]
+ * @param {BackendClient} [p.client] - injected in tests
+ * @returns {Promise<null
+ *   | { preview: { backend: string, foundation: { ref: string, url: string, cssUrl: string|null } } }
+ *   | { refused: string[] }>}
+ *   null when there is nothing to ask — the foundation is not a catalog ref
+ */
+export async function readSitePreview({ siteDir, args = [], client = null }) {
+  const ref = readDeclaredFoundation(siteDir)
+  if (!parseCatalogRef(ref)) return null
+
+  client = client || new BackendClient({ args, command: 'Previewing' })
+  const uuid = readBackendState(siteDir, client.origin).site?.uuid
+  if (!uuid) {
+    const known = syncedBackends(siteDir)
+    return {
+      refused: [
+        `This site's foundation is ${ref}, and the backend the site is on says where that version is served.`,
+        known.length
+          ? `The site is on ${known.join(', ')} — not on ${client.origin}, the backend you are logged in to. To preview it: uniweb login --backend <url>`
+          : `The site is on no backend yet: \`uniweb push\` puts it on ${client.origin}.`
+      ]
+    }
+  }
+
+  const ws = await resolveWorkspace({ client, args })
+  if (ws.refused) return { refused: ['A preview reads the site in one workspace, and none is chosen.', ws.reason] }
+  client.setWorkspace(ws.workspace, { source: ws.source })
+
+  const reply = await client.readRegisteredFoundation(uuid, ref)
+  const url = typeof reply?.module_url === 'string' && reply.module_url ? reply.module_url : null
+  if (!url) {
+    return {
+      refused: [
+        reply
+          ? `${client.origin} did not say where ${ref} is served, so this site cannot be previewed here.`
+          : `Could not read ${ref} through this site on ${client.origin}, so this site cannot be previewed here.`,
+        'Push, pull and publish do not need it.'
+      ]
+    }
+  }
+  return {
+    preview: {
+      backend: client.origin,
+      foundation: { ref, url, cssUrl: typeof reply.css_url === 'string' && reply.css_url ? reply.css_url : null }
+    }
+  }
+}

package/src/backend/site-sync.js

@@ -701,8 +701,13 @@ export async function ensureRegisteredFoundation({ client, siteDir, siteUuid, re
   const kept = readRegisteredFoundation(siteDir, ref)
   if (kept) return kept
   const reply = siteUuid ? await client.readRegisteredFoundation(siteUuid, ref) : null
-  if (reply) writeRegisteredFoundation(siteDir, ref, reply)
-  return reply
+  if (!reply) return null
+  // ⛔ ONLY WHAT WE READ — the section types. The reply carries more than we asked for, a serve
+  // location among it, and a serve location is decided at publish and read from the response that
+  // carries it, never kept. Until 2026-09-26 the whole reply was kept.
+  const sectionTypes = { schema: reply.schema }
+  writeRegisteredFoundation(siteDir, ref, sectionTypes)
+  return sectionTypes
 }
 
 // The Sections whose declared keys a push reads before it sends an optional one.

package/src/commands/dev.js

@@ -24,6 +24,14 @@
  * site by default (mirrors the `pnpm dev` shortcut `uniweb create` writes).
  * Use `--site` to pick a different one without editing the root scripts.
  *
+ * A site whose foundation is a catalog ref — every clone — has no build of it, and
+ * only the backend the site is on can say where that version is served. So `dev`
+ * asks it, through the site, and hands the answer to the dev server it starts in its
+ * environment (`UNIWEB_PREVIEW`), with the backend it asked, which is also where the
+ * site's kept media URLs are fetched from. Nothing is written: `site.yml` keeps the
+ * ref and the round trip never sees the URL. A backend that does not say is an
+ * ordinary answer — `dev` says so and starts nothing (`backend/site-preview.js`).
+ *
  * Implementation: shells out to the package manager that invoked the CLI
  * (detected via npm_config_user_agent), running the workspace-filtered
  * dev command (`pnpm --filter <name> dev` or `npm -w <name> run dev`).
@@ -121,12 +129,32 @@ export async function dev(args = []) {
   const [bin, ...rest] = command.split(' ')
   const sitePath = join(rootDir, site.path)
 
+  // ⭐ A SITE WHOSE FOUNDATION IS A CATALOG REF — a clone — is previewed with what the backend
+  // it is on says: where that version is served. Asked here, for this dev server alone, and
+  // handed to it in its environment; nothing is written (`backend/site-preview.js`). Any other
+  // site needs nothing from a backend, and this asks nothing.
+  const { readSitePreview } = await import('../backend/site-preview.js')
+  const asked = await readSitePreview({ siteDir: sitePath, args })
+  if (asked?.refused) {
+    console.error(`${RED}✗${RESET} ${asked.refused[0]}`)
+    for (const line of asked.refused.slice(1)) console.error(`  ${line}`)
+    process.exit(1)
+  }
+  let env = process.env
+  if (asked?.preview) {
+    const { PREVIEW_ENV, encodePreview } = await import('@uniweb/build/site')
+    env = { ...process.env, [PREVIEW_ENV]: encodePreview(asked.preview) }
+    console.error(
+      `${DIM}→ Previewing with ${asked.preview.foundation.ref}, served by ${asked.preview.backend}${RESET}`
+    )
+  }
+
   console.error(
     `${DIM}→ ${command}${RESET} ${DIM}(site: ${site.name}, dir: ${sitePath})${RESET}`
   )
   console.error('')
 
-  const child = spawn(bin, rest, { cwd: rootDir, stdio: 'inherit' })
+  const child = spawn(bin, rest, { cwd: rootDir, stdio: 'inherit', env })
   child.on('close', (code) => process.exit(code ?? 0))
   child.on('error', (err) => {
     console.error(`${RED}✗${RESET} Failed to start dev server: ${err.message}`)

package/src/framework-index.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-09-26T21:30:58.826Z",
+  "generatedAt": "2026-09-27T03:02:47.415Z",
   "packages": {
     "@uniweb/api": {
       "version": "0.6.3",
@@ -10,7 +10,7 @@
       ]
     },
     "@uniweb/build": {
-      "version": "0.64.1",
+      "version": "0.64.2",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",
@@ -96,7 +96,7 @@
       "deps": []
     },
     "@uniweb/schemas": {
-      "version": "0.7.1",
+      "version": "0.7.2",
       "path": "framework/schemas",
       "deps": []
     },