uniweb 1.21.21 → 1.21.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "1.21.21",
+  "version": "1.21.23",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -42,12 +42,12 @@
     "prompts": "^2.4.2",
     "tar": "^7.5.21",
     "@uniweb/content-writer": "~1.3.1",
-    "@uniweb/schemas": "~1.6.5",
     "@uniweb/core": "~1.4.12",
+    "@uniweb/schemas": "~1.6.5",
     "@uniweb/semantic-parser": "~1.13.0"
   },
   "peerDependencies": {
-    "@uniweb/build": "~1.10.13",
+    "@uniweb/build": "~1.10.14",
     "@uniweb/content-reader": "~1.5.7",
     "@uniweb/semantic-parser": "~1.13.0"
   },

package/partials/agents.md

@@ -1581,7 +1581,7 @@ fonts:
     - { family: "Fraunces", src: /fonts/fraunces.woff2, weight: "100 900" }
 ```
 
-The build auto-adds preconnect hints for imports, emits `@font-face` + preload for faces, and drops any family no role references.
+The build auto-adds preconnect hints for imports, emits `@font-face` + preload for faces, and drops any family no role references. `uniweb push` uploads each face's file (under `public/`) with the site's media, so self-hosted faces work on a site published with Uniweb too.
 
 > **`serif` and `font-serif` are the same font var** — the `font-` spelling is just the one Tailwind's `font-serif` utility reads. Declare it either way in `main.js`; the site sets it by the bare role name under `fonts:`.
 

package/src/backend/client.js

@@ -920,8 +920,9 @@ export class BackendClient {
   /**
    * GET /dev/site — one page of the sites in the workspace the client names
    * (`setWorkspace`; none ⇒ personal): `{ sites: [{ uuid, name?, updated_at,
-   * deployment?: { status, published_url, … } }] }`. A page shorter than `limit` is
-   * the last. `deployment` is absent for a site never published.
+   * deployment?: { status, published_url, visitor_url, … } }] }`. A page shorter than
+   * `limit` is the last. `deployment` is absent for a site never published. `uniweb site`
+   * shows `visitor_url`, else `published_url` (`liveAddress`).
    *
    * @param {{ limit?: number, offset?: number }} [opts]
    * @returns {Promise<Response>}
@@ -951,11 +952,14 @@ export class BackendClient {
    * who has the site open in the app right now, and on what — `uniweb status` shows
    * it (`describeEditors`, commands/status.js).
    *
-   * ⭐ **The backend also serves a LIVE-SITE record here, and nothing in this CLI reads
-   * it yet** (shipped 2026-08-29; documented here so it is not lost twice):
+   * ⭐ **The backend also serves a LIVE-SITE record here** (shipped 2026-08-29), and
+   * `uniweb status` reads part of it: the address it shows (`visitor_url`, else
+   * `last_published_url` — `liveAddress`), and the foundation and runtime its `--json`
+   * detail carries. Nothing reads the rest yet:
    *
    *   last_published_url · last_published_foundation · last_published_extensions
    *   last_published_runtime · last_published_runtime_floor · last_published_runtime_resolution
+   *   visitor_url — where visitors go: the custom domain while one is active (2026-10-28)
    *
    * Three things about it that a reader will otherwise get wrong:
    *

package/src/backend/live-address.js

@@ -0,0 +1,22 @@
+/**
+ * Where a site's visitors go — the address the CLI shows wherever it says where a site is live:
+ * `uniweb publish`, `uniweb status`, `uniweb site list` and `uniweb site unpublish`.
+ *
+ * A backend names two addresses for a published site. `visitor_url` is where its visitors go: the
+ * site's custom domain while one is active, else the address it was delivered to. The other — `url`
+ * on a publish, `last_published_url` on a site's status, `deployment.published_url` on a list row —
+ * is where the last publish delivered it, which may be a subdomain that only redirects to that
+ * domain. The first is shown; the second only where the first is absent or null, as from a backend
+ * that does not send it. Both are complete addresses, read verbatim and never composed onto.
+ *
+ * ⛔ Not a liveness claim. Whether a site IS live is `published` (status) or `deployment.status`
+ * (list): an unpublished site keeps both addresses.
+ *
+ * @param {unknown} visitorUrl - the answer's `visitor_url`
+ * @param {unknown} deliveredUrl - the address the last publish delivered the site to
+ * @returns {string|null}
+ */
+export function liveAddress(visitorUrl, deliveredUrl) {
+  for (const url of [visitorUrl, deliveredUrl]) if (typeof url === 'string' && url) return url
+  return null
+}

package/src/commands/publish.js

@@ -118,6 +118,7 @@ import { repoOf } from '../utils/sync-point.js'
 import { commitBeforeSending } from '../backend/commit-before-sending.js'
 import { resolveWorkspace, describeWorkspace, previewWorkspace, SOURCE_LABEL } from '../backend/workspace.js'
 import { uploadSiteMedia, describeAssetRefusal } from '../backend/site-media.js'
+import { liveAddress } from '../backend/live-address.js'
 import {
   updateBackendMap,
   readBackendState,
@@ -1064,6 +1065,10 @@ export async function publish(args = []) {
   // prefixed with our own origin; the reply is absolute now, so a path from an
   // older backend is simply shown as one.
   const serveUrl = typeof result.url === 'string' && result.url ? result.url : null
+  // …and where its visitors go, which is what is shown: its custom domain while one is
+  // active (`liveAddress`). The backend reads it on every publish and stores it nowhere, so
+  // deploy.yml keeps the address this publish delivered to.
+  const shownUrl = liveAddress(result.visitor_url, serveUrl)
 
   // 8. Persist deploy.yml memory — a record of what went live (and so a re-run
   //    reuses the resolved target without re-asking). Identity is sync.json's,
@@ -1145,7 +1150,7 @@ export async function publish(args = []) {
     )
     say.dim(`  site.yml lists ${unserved.join(', ')}, and ${unserved.length === 1 ? 'it was' : 'they were'} not published.`)
   }
-  if (serveUrl) console.log(`  ${c.cyan}${serveUrl}${c.reset}`)
+  if (shownUrl) console.log(`  ${c.cyan}${shownUrl}${c.reset}`)
   // ⛔ No site.yml write for where it went live. That is a fact about this deploy,
   // not about the site, and it is recorded where deploy facts live: deploy.yml's
   // `lastDeploy.<target>.url` (step 8 above). site.yml carried it as `$url` ⇄

package/src/commands/site.js

@@ -27,6 +27,7 @@ import { join, resolve } from 'node:path'
 
 import { BackendClient, WorkspaceMismatchError, describeWorkspace } from '../backend/client.js'
 import { resolveWorkspace } from '../backend/workspace.js'
+import { liveAddress } from '../backend/live-address.js'
 import { checkFlags } from '../utils/flag-guard.js'
 import { confirm, isNonInteractive } from '../utils/interactive.js'
 import { readSiteIdentity } from '../utils/site-identity.js'
@@ -135,7 +136,7 @@ async function list(args) {
     name: s.name ?? null,
     status: s.deployment?.status ?? null,
     published: s.deployment?.status === 'published',
-    url: s.deployment?.published_url ?? null,
+    url: liveAddress(s.deployment?.visitor_url, s.deployment?.published_url),
     updated_at: s.updated_at ?? null
   }))
   if (json) {
@@ -270,7 +271,7 @@ async function unpublish(args) {
   if (!target) return { exitCode: 2 }
   const site = await findSite(client, target.uuid)
   const label = site?.name ? `“${site.name}” (${target.uuid})` : target.uuid
-  const url = site?.deployment?.published_url
+  const url = liveAddress(site?.deployment?.visitor_url, site?.deployment?.published_url)
   const ok = await confirmed(
     args,
     `Unpublish ${label} on ${client.origin}?${url ? ` Visitors get nothing at ${url} until it is published again.` : ''}`,

package/src/commands/status.js

@@ -60,6 +60,7 @@ import {
 import { describeWorkspace, resolveWorkspace, SOURCE_LABEL } from '../backend/workspace.js'
 import { BackendClient, resolveBackendOrigin } from '../backend/client.js'
 import { readAppChanges } from '../backend/app-changes.js'
+import { liveAddress } from '../backend/live-address.js'
 import { probePull } from './pull.js'
 import { readOrgFlag } from '../utils/args.js'
 import { listSyncedBackends, readBackendState } from '@uniweb/build/uwx'
@@ -649,9 +650,10 @@ async function appChecks(siteDir, siteYml, { offline, args, git }) {
   if (site) {
     // ⭐ WHERE THE SITE IS LIVE IS THE BACKEND'S TO SAY, never deploy.yml's: a receipt is
     // what this copy published, and a publish from the app or another copy does not move it.
-    // ⛔ `last_published_url` outlives an unpublish (`client.siteStatus`), so it is said as
-    // where the site WAS live when it is not live now — never as where it is.
-    const url = typeof site.last_published_url === 'string' && site.last_published_url ? site.last_published_url : null
+    // It is where visitors go: the custom domain while one is active (`liveAddress`).
+    // ⛔ Both addresses outlive an unpublish (`client.siteStatus`), so the one shown is said
+    // as where the site WAS live when it is not live now — never as where it is.
+    const url = liveAddress(site.visitor_url, site.last_published_url)
     const when = site.last_published_at ? sinceLabel(site.last_published_at, Date.now()) : null
     const at = `${url ? ` at ${url}` : ''}${when ? `, published ${when}` : ''}`
     const detail = {

package/src/framework-index.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-10-28T04:08:25.023Z",
+  "generatedAt": "2026-10-28T14:10:12.997Z",
   "packages": {
     "@uniweb/api": {
       "version": "1.6.4"
     },
     "@uniweb/build": {
-      "version": "1.10.13"
+      "version": "1.10.14"
     },
     "@uniweb/content-reader": {
       "version": "1.5.7"