uniweb 0.82.2 → 0.84.0

package/src/commands/publish.js

@@ -55,10 +55,9 @@ import {
 } from '@uniweb/build/site'
 import { emitSyncPackages } from '@uniweb/build/uwx'
 import {
-  decideDeclaration,
-  fingerprintRequest,
+  bankLanguages,
   reconcile,
-  reconcileRequest
+  settleServices
 } from '../backend/service-request.js'
 import { isSiteRelativeExtensionUrl } from '@uniweb/build'
 import { resolveDefaultLocale } from '@uniweb/core/locale-config'
@@ -235,19 +234,6 @@ export function unservedLanguages(asked, served) {
   return asked.filter((l) => !got.has(l))
 }
 
-function describeServices(rows) {
-  if (!Array.isArray(rows) || rows.length === 0) return 'nothing'
-  return rows
-    .map((r) => {
-      const name = typeof r?.name === 'string' ? r.name : '?'
-      // A row that omits `enabled` is an ask, not a refusal — the backend's three
-      // states. Only an explicit `false` reads as off.
-      return r?.enabled === false ? `${name} (off)` : name
-    })
-    .sort()
-    .join(', ')
-}
-
 async function persistLastDeploy(siteDir, opts) {
   if (opts.saveDeploys === false) return
   try {
@@ -392,9 +378,9 @@ export async function publish(args = []) {
     resolved = resolvePublishTarget(deployYml, client.origin, {
       defaultBackend: DEFAULT_BACKEND_ORIGIN
     })
-    // The last request we are known to have sent TO THIS BACKEND, for the declaration
-    // gate below. Read from the SAME deploy.yml load — one read, and the memo is the
-    // only durable record of it (see backend/service-request.js for why not the cache).
+    // The language selection last sent TO THIS BACKEND, for its reconcile below. Read
+    // from the SAME deploy.yml load — one read, and the memo is the only durable record
+    // of it (see backend/service-request.js).
     priorRequest = deployYml?.deploys?.[resolved.targetName] || null
   } catch {
     // Malformed/ambiguous deploy.yml — don't block the publish on the memo.
@@ -492,8 +478,9 @@ export async function publish(args = []) {
       cliBin: process.argv[1]
     })
   } catch (err) {
-    say.err(`Foundation release failed: ${err.message}`)
-    say.dim('Fix the foundation, then re-run `uniweb publish`.')
+    // A scope you are not a member of is said as that, with the ways on (`explainReleaseFailure`).
+    say.err(err.notMember ? err.message : `Foundation release failed: ${err.message}`)
+    for (const line of err.notMember ? err.ways : ['Fix the foundation, then re-run `uniweb publish`.']) say.dim(line)
     return { exitCode: 1 }
   }
 
@@ -512,8 +499,8 @@ export async function publish(args = []) {
       cliBin: process.argv[1]
     })
   } catch (err) {
-    say.err(`Extension release failed: ${err.message}`)
-    say.dim('Fix the extension, then re-run `uniweb publish`.')
+    say.err(err.notMember ? err.message : `Extension release failed: ${err.message}`)
+    for (const line of err.notMember ? err.ways : ['Fix the extension, then re-run `uniweb publish`.']) say.dim(line)
     return { exitCode: 1 }
   }
   if (!ext.proceed) return { exitCode: 1 }
@@ -817,98 +804,30 @@ export async function publish(args = []) {
   const injectInfo = {
     ...(fnd.ref ? { foundation: fnd.ref } : {})
   }
-  // ⛔ IS THE FILE ASKING FOR ANYTHING BY ITS `$services` / `$secrets` BLOCK?
-  //
-  // The blocks ride inside the site-content document, so without this gate every
-  // push re-sends them — and the backend REPLACES what it is sent. A paragraph
-  // edit would therefore overwrite whatever the stored request has become, which
-  // in the consent workflow is a decision the owner made in the app. Under "the
-  // file is a request", an unchanged block is not asking for anything.
-  //
-  // ⚠️ The residual window, stated because it is real and narrow: the base is
-  // banked at publish, so a request changed in the app BETWEEN a `uniweb pull` and
-  // the next publish is not seen — the pulled block reads as unchanged-from-nothing
-  // and is declared. It closes when the status route carries the stored request
-  // (backend is adding it) and we compare against theirs instead of our memory.
-  //
-  // ⭐ ASK THE BACKEND rather than trusting our memory, when it will tell us. The
-  // banked fingerprint says what WE last sent; the status read says what the site
-  // actually has. Only the second one sees a change made in the app, which is where
-  // the consent workflow's decisions happen — so this is what closes the window
-  // between a `uniweb pull` and the next publish.
-  //
-  // ⚖️ Degrades to the banked comparison on any failure — an older backend, a
-  // network blip, a site never pushed. That is the shipped behaviour and it is safe:
-  // it withholds an unchanged block and sends a changed one; it merely cannot see
-  // the app's side.
-  // What this site is PROVISIONED with on the backend being published to.
-  const provisioned = readBackendState(siteDir, client.origin)
-  const boundUuid = provisioned.site?.uuid || null
-  let declaration = decideDeclaration(siteYml, priorRequest, provisioned)
-  let adopted = null
-  // Before the push, so a never-synced site has no uuid and simply skips this.
-  const status =
-    // This backend's site, from sync.json. It read `site.yml::$uuid`, so after step 4
-    // the remote reconcile below never ran and every publish declared blind.
-    boundUuid
-      ? await client.siteStatus(boundUuid)
-      : null
-  if (status && Array.isArray(status.services)) {
-    const r = reconcileRequest(siteYml, status.services, priorRequest, provisioned)
-    if (r.action === 'none') {
-      declaration = { declare: false, reason: 'in-sync' }
-    } else if (r.action === 'send') {
-      declaration = { declare: true, reason: 'changed' }
-    } else if (r.action === 'adopt') {
-      // The owner decided in the app and this file is simply behind. Nothing to
-      // ask for, so nothing is sent — and the file can be brought in line, which
-      // is offered rather than done, because site.yml is theirs.
-      declaration = { declare: false, reason: 'adopt' }
-      adopted = status.services
-    } else {
-      // ⛔ CONFLICT — both moved. Withhold and SAY SO. Not a stop: the content
-      // publish is a separate thing the owner asked for, and blocking it over a
-      // services disagreement couples two unrelated intents. Not a guess either;
-      // the request stays in their file, unsent, and they are told.
-      declaration = { declare: false, reason: 'conflict' }
-      adopted = status.services
-    }
-  }
+  // ⭐ WHAT THE SITE HAS — read before the push, for the two requests a publish
+  // carries: the services (`site.yml::services`) and the language selection. Only
+  // this read sees a decision the owner made in the app since this clone last synced.
+  // It reads this backend's site, from sync.json; a never-synced site has none.
+  const boundUuid = readBackendState(siteDir, client.origin).site?.uuid || null
+  const status = boundUuid ? await client.siteStatus(boundUuid) : null
 
-  // ⛔ EVERY STRING BELOW IS FOR A SITE OWNER, NOT FOR US.
-  //
-  // "request", "declaration", "send", "adopt", "reconcile" are how this file
-  // MODELS the problem and they are the wrong words to say out loud: an author
-  // does not think they are sending a request, they think they want their site to
-  // have search. Say services, on and off, site.yml and your site. The internal
-  // vocabulary stays in the code and the comments, where it earns its precision.
-  //
-  // ⭐ THE OWNER IS THE ONLY ONE WHO CAN RANK TWO OF THEIR OWN INTENTS.
-  //
-  // `conflict` means the file and the site both moved since we last agreed, so
-  // neither is "the" request. ⛔ Withholding silently and saying "edit site.yml"
-  // is advice that CANNOT WORK: with no banked base the file has nothing to move
-  // relative to, so editing it produces the same conflict forever. That shipped
-  // for one commit. Asking is the only thing that resolves it.
-  if (declaration.reason === 'conflict') {
-    say.warn('Your site\'s services were changed elsewhere, and site.yml changed too.')
-    say.dim(`  in sync.json: ${describeServices(provisioned.services)}`)
-    say.dim(`  on your site: ${describeServices(adopted)}`)
-    if (isNonInteractive(args)) {
-      say.dim('  Left your site as it is — run without --non-interactive to choose.')
-    } else if (await confirm('Use the services listed in site.yml?', false)) {
-      declaration = { declare: true, reason: 'resolved-send' }
-      adopted = null
-    } else {
-      // Declining to send is not yet a decision to take theirs, so this falls
-      // through to the offer below and "neither, leave it alone" stays available.
-      declaration = { declare: false, reason: 'adopt' }
-    }
-  }
+  // ⭐ THE SERVICES: what the owner changed in `site.yml::services` is sent, applied
+  // over the site's own list; what the site changed is kept and offered into the file;
+  // where both changed, the owner is asked (`settleServices`). An ask whose decision is
+  // still open is never sent over the decision the site holds.
+  const services = await settleServices({
+    client,
+    siteDir,
+    siteYml,
+    status,
+    interactive: !isNonInteractive(args),
+    confirm,
+    say
+  })
 
-  // ⭐ THE SAME QUESTION FOR THE LANGUAGE SELECTION, and it is the one that costs.
+  // ⭐ THE LANGUAGE SELECTION IS A REQUEST TOO, and it is the one that costs.
   //
-  // `publishLanguages` is a request like `$services`: pushed up, projected back on
+  // `publishLanguages` is a request like `services`: pushed up, projected back on
   // pull, stored on the other side. ⛔ Nothing over there deliberately rewrites it
   // today — which is why this was nearly skipped — but a base is not only for
   // detecting an overwrite. Without one, a selection that has always been in the
@@ -937,34 +856,6 @@ export async function publish(args = []) {
     }
   }
 
-  if (declaration.reason === 'adopt' && adopted) {
-    // ⚖️ Deliberately says WHAT differs, not WHO moved. The usual cause is a
-    // decision made in the app — but the same state follows a request of ours the
-    // site refused, where nothing of theirs changed and ours simply did not take.
-    // We cannot tell those apart here, so the wording claims neither.
-    say.info('Your site has different services than site.yml lists.')
-    say.dim(`  in sync.json: ${describeServices(provisioned.services)}`)
-    say.dim(`  on your site: ${describeServices(adopted)}`)
-    // ⭐ OFFERED, NEVER DONE. site.yml is the owner's file, and a publish that
-    // silently rewrites an authored file is the surprise this seam exists to
-    // avoid. Default No, and declining costs nothing: the site is already
-    // correct, only the file is behind, and the offer returns next publish.
-    //
-    // ⚖️ A DECLINED conflict reaches here too, and that is deliberate — having
-    // been asked which they meant and said "not mine", taking the site's is the
-    // other half of the same question, not a silent overwrite of an edit.
-    if (!isNonInteractive(args) && (await confirm('Update site.yml to match?', false))) {
-      const { writeSiteConfig } = await import('@uniweb/build/uwx')
-      writeSiteConfig(siteDir, { $services: adopted })
-      // Keep the in-memory copy in step, or the deploy.yml bank below records the
-      // file as it WAS and the offer repeats forever.
-      siteYml.$services = adopted
-      say.ok('site.yml updated.')
-    }
-  } else if (!declaration.declare && declaration.reason !== 'adopt') {
-    say.dim('Services unchanged.')
-  }
-
   // publish rides the same gated push as `uniweb push`: if an app author has
   // edited since this clone last synced, the push is refused rather than
   // overwriting them, and nothing goes live. `--force` drops the precondition.
@@ -982,7 +873,8 @@ export async function publish(args = []) {
     backend: client.origin,
     // The keys this deployment's Sections take — see deploymentFields.
     ...fields,
-    ...(declaration.declare ? {} : { declareServices: false }),
+    // The `services` Section as settled above — or withheld.
+    ...services.emit,
     // Placement identity for the folder — see writeFolderItemUuids.
     folderItemUuids: readFolderItemUuids(siteDir, client.origin),
     // Identity for the records' list items — see readRecordItemUuids.
@@ -1029,6 +921,9 @@ export async function publish(args = []) {
     report
   })
   if (pushResult.exitCode !== 0) return { exitCode: pushResult.exitCode }
+  // The push stored what it sent: the services agreed on are recorded now, whether or
+  // not the site then goes live.
+  services.after()
   const siteUuid = pushResult.boundSiteUuid
   if (!siteUuid) {
     say.err('Push did not yield a site uuid — cannot go live.')
@@ -1126,24 +1021,9 @@ export async function publish(args = []) {
     lastDeploy: {
       at: new Date().toISOString(),
       host: 'uniweb',
-      // The request this publish is known to have sent — the base the declaration
-      // gate compares against next time. ⛔ A FINGERPRINT, never the block:
-      // deploy.yml is committed, `$secrets` carries secret material and a
-      // service's `config` is opaque, so recording either verbatim would write
-      // them into git. Absent when the file declares no block.
-      ...(declaration.declare
-        ? fingerprintRequest(siteYml, provisioned)
-        : {
-            // Nothing was sent, so the base is unchanged — carry it forward
-            // rather than dropping it, or the next publish would read "no record"
-            // and declare.
-            ...(priorRequest?.servicesRequest
-              ? { servicesRequest: priorRequest.servicesRequest }
-              : {}),
-            ...(priorRequest?.secretsRequest
-              ? { secretsRequest: priorRequest.secretsRequest }
-              : {})
-          }),
+      // The language selection this publish sent — the base its reconcile compares
+      // against next time. ⛔ A FINGERPRINT: the selection itself is in site.yml.
+      ...bankLanguages(siteYml),
       // What was actually shipped. A version number can't answer that — two
       // publishes of "0.1.0" are not the same content — and after the fact the
       // working tree has moved on. `dirty` matters as much as the sha: it says the

package/src/commands/push.js

@@ -37,6 +37,9 @@
  *   uniweb push --foundation <dir>       Use this local foundation for the Model schema
  *   uniweb push --all                    Send every record (bypass the changed-only cache)
  *   uniweb push --force                  Overwrite upstream changes (drop the staleness gate)
+ *   uniweb push --no-release             Send content against the foundation already
+ *                                        released; release nothing
+ *   uniweb push --bump                   Release above a newer registered version
  *
  * Pushes are GATED by default: each entity carries the backend `version` this clone
  * last saw (a top-level `base_version` on the manifest entry), and the backend refuses the whole package
@@ -71,7 +74,8 @@ import {
   syncedElsewhere,
   describeSyncedElsewhere
 } from '../utils/site-identity.js'
-import { confirm } from '../utils/interactive.js'
+import { confirm, isNonInteractive } from '../utils/interactive.js'
+import { settleServices } from '../backend/service-request.js'
 import { guardEmptyRecords } from '../utils/records-guard.js'
 import { bringFoundationAlong } from '../backend/foundation-bring-along.js'
 import {
@@ -274,8 +278,9 @@ export async function push(args = [], deps = {}) {
       verb: 'push'
     })
   } catch (err) {
-    error(`Foundation release failed: ${err.message}`)
-    note('Fix the foundation, then re-run `uniweb push`.')
+    // A scope you are not a member of is said as that, with the ways on (`explainReleaseFailure`).
+    error(err.notMember ? err.message : `Foundation release failed: ${err.message}`)
+    for (const line of err.notMember ? err.ways : ['Fix the foundation, then re-run `uniweb push`.']) note(line)
     return { exitCode: 1 }
   }
   if (!fnd.proceed) return { exitCode: 1 }
@@ -516,6 +521,20 @@ export async function push(args = [], deps = {}) {
       ref: siteYml?.foundation
     })
   }
+  // ⭐ THE SERVICES `site.yml` ASKS FOR — what the owner changed is sent over the site's
+  // own list; what the site changed is kept and offered into the file; where both
+  // changed, the owner is asked. Shared with `uniweb publish` (`settleServices`).
+  // Offline for `-o` and `--dry-run`: nothing is read, and nothing is recorded.
+  const offline = Boolean(output) || dryRun
+  const services = await settleServices({
+    client,
+    siteDir,
+    siteYml,
+    offline,
+    interactive: !offline && !isNonInteractive(args),
+    confirm,
+    say: { info, warn, dim: note, ok: success }
+  })
   const emitOptions = {
     backend: client.origin,
     // Placement identity for the folder — see writeFolderItemUuids.
@@ -551,7 +570,9 @@ export async function push(args = [], deps = {}) {
           itemBaseVersions: readItemBaseVersions(siteDir, client.origin)
         }),
     ...(assetRewrite ? { assetRewrite } : {}),
-    ...(assetIds ? { assetIds } : {})
+    ...(assetIds ? { assetIds } : {}),
+    // The `services` Section as settled above — or withheld.
+    ...services.emit
   }
   let pkg
   try {
@@ -580,6 +601,8 @@ export async function push(args = [], deps = {}) {
 
   // Nothing changed since the last push — the backend is already up to date.
   if (totalEntities === 0) {
+    // The site already holds what this copy has, so what was settled is agreed.
+    if (!offline) services.after()
     success(
       `Nothing to push — ${skipped} entit${skipped === 1 ? 'y' : 'ies'} unchanged since the last push.`
     )
@@ -640,6 +663,7 @@ export async function push(args = [], deps = {}) {
     }
   })
   if (result.exitCode !== 0) return { exitCode: result.exitCode }
+  services.after()
   success(
     `Pushed ${result.finalizedTotal} entit${result.finalizedTotal === 1 ? 'y' : 'ies'}` +
       (result.wrote.length ? ` — ${result.wrote.join(', ')}` : '')

package/src/commands/register.js

@@ -88,8 +88,9 @@ import {
   computeFoundationDigest,
   readRuntimePin
 } from '../utils/code-upload.js'
-import { deriveScope, publishScope } from '../utils/registry-orgs.js'
+import { deriveScope, publishScope, belongsToScope } from '../utils/registry-orgs.js'
 import { BackendClient } from '../backend/client.js'
+import { resolveWorkspace, scopeOfWorkspace, SOURCE_LABEL } from '../backend/workspace.js'
 import { writeJsonPreservingStyleAsync } from '../utils/json-file.js'
 import {
   findWorkspaceRoot,
@@ -316,8 +317,10 @@ export async function settleFoundationName(targetDir, { args, isPreview }) {
  * A preview (`--dry-run`, `-o`) writes nothing: a bare name previews under `--scope`,
  * or unscoped.
  *
- * @returns {Promise<{ scope: string|null, source: string|null } | { cancelled: true } | null>}
- *   null when refused (the reason is printed); `cancelled` when no org was chosen
+ * @returns {Promise<{ scope: string|null, source: string|null } | null>}
+ *   null when refused, the reason printed — no scope chosen included, since a name with
+ *   no scope cannot register. ⛔ Until 2026-10-06 "no scope chosen" was `cancelled`, and
+ *   register exited 0 having registered nothing.
  */
 export async function settleFoundationScope(targetDir, { args, isPreview, flagScope, client }) {
   let read
@@ -351,7 +354,7 @@ export async function settleFoundationScope(targetDir, { args, isPreview, flagSc
   let source = flagScope ? '--scope' : null
   if (!scope) {
     scope = await deriveScopeFromLogin(client, args)
-    if (!scope) return { cancelled: true }
+    if (!scope) return null
     source = 'login'
   }
 
@@ -375,11 +378,35 @@ export async function settleFoundationScope(targetDir, { args, isPreview, flagSc
 }
 
 /**
- * A scope derived from the login (`deriveScope`): your personal scope when you belong
- * to no org, else a pick — as `@handle`, or null when none was chosen.
+ * The scope a bare name registers under when `--scope` names none — as `@handle`, or null
+ * when none was chosen.
+ *
+ * ⭐ THE WORKSPACE THIS COMMAND WORKS IN *[Diego, 2026-10-06]* — an organization's handle,
+ * or your own for your personal workspace — said, not asked (`scopeOfWorkspace`). A team
+ * working in `@acme` registers `@acme/…`, which any of its members can release.
+ * ⛔ Until 2026-10-06 the default was your personal scope wherever you worked, so a team's
+ * foundation registered as `@jane/…` — releasable by Jane alone, and fixed only by
+ * renaming it into a new foundation.
+ *
+ * When the workspace names no scope — none is chosen, or it is a unit without a handle —
+ * the scope is derived from your orgs as before (`deriveScope`): your personal scope when
+ * you belong to none, else a pick at a terminal, your personal scope without one.
  */
 async function deriveScopeFromLogin(client, args) {
   const token = await client.token()
+  const ws = await resolveWorkspace({ client, args })
+  const personal = !ws.refused && ws.source !== 'offline' && ws.workspace === null
+  const accountHandle = personal ? (await client.fetchOrgs()).account_handle : null
+  const fromWorkspace = scopeOfWorkspace(ws, accountHandle)
+  if (fromWorkspace) {
+    const named = `${colors.bright}${fromWorkspace}${colors.reset}`
+    console.error(
+      personal
+        ? `Registering under your personal scope ${named} — you work in your personal workspace (${SOURCE_LABEL[ws.source]}). For an org: --scope @org.`
+        : `Registering under ${named} — the workspace you work in (${SOURCE_LABEL[ws.source]}). For another scope: --scope @org.`
+    )
+    return fromWorkspace
+  }
   const sess = await readRegistryAuth(client.origin)
   const derived = await deriveScope({
     apiBase: client.origin,
@@ -585,11 +612,13 @@ async function runRegister(args = []) {
     : await resolveFoundationDir(args)
 
   // Scope. ⭐ A FOUNDATION's is the one in its name (`name: '@acme/marketing'` in
-  // main.js), settled below before the build; a bare name takes --scope, else one
-  // derived from your orgs, and register writes it into the name (2026-09-22).
-  // A SCHEMAS-ONLY package has no name to carry one: --scope, else package.json
-  // `uniweb.scope`, else (real submit only) derived from login membership. Either
-  // spelling, `@acme` or `acme`, and from here on the one form: `@acme` (publishScope).
+  // main.js), settled below before the build; a bare name takes --scope, else the
+  // workspace the command works in (`deriveScopeFromLogin`), and register writes it
+  // into the name (2026-09-22). A SCHEMAS-ONLY package has no name to carry one:
+  // --scope, else package.json `uniweb.scope`, else (real submit only) the workspace
+  // the command works in. Either spelling, `@acme` or `acme`, and from here on the one
+  // form: `@acme` (publishScope). ⛔ This said "derived from your orgs" / "from login
+  // membership" until 2026-10-06, read as the personal-scope default that was replaced.
   const pkgScope = standalone ? readPkgScope(targetDir) : null
   const givenScope = scopeFlag || pkgScope
   let scope = publishScope(givenScope)
@@ -640,7 +669,6 @@ async function runRegister(args = []) {
       client
     })
     if (!settled) return { exitCode: 2 }
-    if (settled.cancelled) return { exitCode: 0 }
     scope = settled.scope
     scopeSource = settled.source
     // Build-if-stale (`foundationNeedsBuild`): a missing or stale dist/ gets
@@ -691,12 +719,12 @@ async function runRegister(args = []) {
     }
   }
 
-  // A schemas-only package with no scope, on a real submit → derive it from the login
-  // (your personal scope, or a pick among it and your orgs) and persist it to package.json.
+  // A schemas-only package with no scope, on a real submit → the workspace you work in,
+  // else derived from your orgs (`deriveScopeFromLogin`), and persisted to package.json.
   // (A foundation's was settled before its build — `settleFoundationScope`.)
   if (standalone && !scope && !isPreview) {
     const derived = await deriveScopeFromLogin(client, args)
-    if (!derived) return { exitCode: 0 }
+    if (!derived) return { exitCode: 2 }
     scope = derived
     scopeSource = 'login'
     try {
@@ -852,10 +880,27 @@ async function runRegister(args = []) {
         `${colors.dim}Schema for this version is already registered — resuming code delivery.${colors.reset}`
       )
     } else {
-      error(
-        `Registry rejected the submission: HTTP ${res.status} ${res.statusText}`
-      )
-      if (res.status === 401 || res.status === 403) {
+      // ⭐ NOT A MEMBER OF THE SCOPE IS SAID AS THAT *[Diego, 2026-10-06]*. The registry
+      // decides who may release into a scope — its account, or an org's members — and
+      // when the orgs read says you are neither, that is the refusal to name. ⛔ Until then
+      // a 403 here printed "log in again", the wrong advice for a scope that is not yours.
+      // Read to explain a refusal, never to gate one; a 401 is the credential itself.
+      const member =
+        res.status === 401 ? null : belongsToScope(scope, await client.fetchOrgs().catch(() => null))
+      if (member === false) {
+        const what = standalone
+          ? `data schemas under ${scope}`
+          : doc.entities.find((e) => e.model === '@uniweb/foundation-schema')?.info?.name || `a foundation under ${scope}`
+        error(`You can't release ${what}: you're not a member of ${scope}.`)
+        log(
+          `  ${colors.dim}A member of ${scope} can release it. (The registry answered HTTP ${res.status}.)${colors.reset}`
+        )
+      } else {
+        error(
+          `Registry rejected the submission: HTTP ${res.status} ${res.statusText}`
+        )
+      }
+      if (member !== false && (res.status === 401 || res.status === 403)) {
         log(
           `  ${colors.dim}The registry didn't accept your credentials — it may use different ones than \`uniweb login\`.${colors.reset}`
         )

package/src/commands/status.js

@@ -14,8 +14,11 @@
  *
  * Usage:
  *   uniweb status            Sync identity + unpushed content + foundation ref (local)
- *   uniweb status --remote   Also: draft-vs-live + a newer-registered-foundation check
- *   uniweb status --json     One JSON line (adds a `remote` object under --remote)
+ *   uniweb status --remote   Also: whether the backend still holds the site, draft-vs-live,
+ *                            and a newer-registered-foundation check
+ *   uniweb status --json     One JSON line (adds a `remote` object under --remote, whose
+ *                            `site_state` is live / gone / unknown — `gone` only on the
+ *                            backend's own word that it holds no such site)
  *
  * Run from a site, or a workspace with one site.
  */
@@ -119,6 +122,9 @@ export async function status(args = []) {
   // Remote signals — opt-in (`--remote`). May prompt for login. Degrades to null
   // on 404 / any failure, so a backend without the endpoints just shows local.
   let site = null
+  // Whether the backend holds the site this binding names — live / gone / unknown, never
+  // folded (`client.siteState`). Null when there is no binding to ask about.
+  let siteState = null
   let fdnLatest = null
   let foundationFresh = null // true/false when both digests are known; else null
   let localFoundationVersion = null
@@ -134,7 +140,14 @@ export async function status(args = []) {
       const ws = await resolveWorkspace({ client, args })
       if (ws.refused) throw Object.assign(new Error(ws.reason), { status: 409 })
       client.setWorkspace(ws.workspace, { source: ws.source })
-      if (uuid) site = await client.siteStatus(uuid)
+      if (uuid) {
+        siteState = await client.siteState(uuid)
+        if (siteState.state === 'live') {
+          site = siteState.site || null
+          // In another workspace: it exists, and the refusal says where — report it.
+          if (siteState.status === 409) remoteError = siteState.detail
+        }
+      }
       // Foundation freshness: prefer the LOCAL foundation's scoped name (so a
       // local-foundation site can be checked too); fall back to a scoped
       // site.yml ref. The digest compare is read-only — it never builds, so it
@@ -153,6 +166,8 @@ export async function status(args = []) {
       // backend does not work on this site from, or the deployment has another. Saying
       // nothing would read as "fine".
       if (err instanceof WorkspaceMismatchError || err?.status === 409) remoteError = err.message
+      // Not asked, or not answered: that is not knowing, never `gone`.
+      if (uuid && !siteState) siteState = { state: 'unknown', status: null, detail: err?.message || null }
     }
   }
 
@@ -168,6 +183,10 @@ export async function status(args = []) {
         ...(remote
           ? {
               remote: {
+                // ⭐ live · gone · unknown — `gone` only on the backend's own word about
+                // this site; null when this directory names no site on this backend.
+                site_state: siteState ? siteState.state : null,
+                site_state_detail: siteState?.detail ?? null,
                 site,
                 foundation_latest: fdnLatest?.latest_version ?? null,
                 foundation_fresh: foundationFresh,
@@ -221,6 +240,16 @@ export async function status(args = []) {
   // Remote signals
   if (remote) {
     if (remoteError) say.warn(remoteError)
+    if (siteState?.state === 'gone') {
+      say.warn(`The backend has no site ${uuid} — it was deleted there, or the backend was rebuilt.`)
+      say.dim(
+        `To push this as a new site: uniweb forget --backend ${probeBackend}, then uniweb push.`
+      )
+    } else if (siteState?.state === 'unknown') {
+      say.dim(
+        `Could not tell whether the backend holds this site${siteState.detail ? ` (${siteState.detail})` : ''}.`
+      )
+    }
     if (site) {
       if (site.draft_dirty) {
         say.info(

package/src/framework-index.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-10-06T02:16:00.292Z",
+  "generatedAt": "2026-10-06T19:21:14.306Z",
   "packages": {
     "@uniweb/api": {
       "version": "0.6.10",
@@ -10,7 +10,7 @@
       ]
     },
     "@uniweb/build": {
-      "version": "0.76.1",
+      "version": "0.77.0",
       "path": "framework/build",
       "deps": [
         "@uniweb/content-reader",
@@ -35,7 +35,7 @@
       "deps": []
     },
     "@uniweb/core": {
-      "version": "0.37.1",
+      "version": "0.37.2",
       "path": "framework/core",
       "deps": [
         "@uniweb/semantic-parser",
@@ -55,7 +55,7 @@
       ]
     },
     "@uniweb/kit": {
-      "version": "0.19.17",
+      "version": "0.19.18",
       "path": "framework/kit",
       "deps": [
         "@uniweb/core",
@@ -84,7 +84,7 @@
       ]
     },
     "@uniweb/runtime": {
-      "version": "0.29.1",
+      "version": "0.29.2",
       "path": "framework/runtime",
       "deps": [
         "@uniweb/core",
@@ -127,7 +127,7 @@
       "deps": []
     },
     "@uniweb/unipress": {
-      "version": "0.10.20",
+      "version": "0.10.21",
       "path": "framework/unipress",
       "deps": [
         "@uniweb/build",