uniweb 1.21.22 → 1.22.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uniweb",
-  "version": "1.21.22",
+  "version": "1.22.0",
   "description": "Create structured Vite + React sites with content/code separation",
   "type": "module",
   "bin": {
@@ -41,15 +41,15 @@
     "js-yaml": "^4.3.2",
     "prompts": "^2.4.2",
     "tar": "^7.5.21",
-    "@uniweb/content-writer": "~1.3.1",
-    "@uniweb/core": "~1.4.12",
     "@uniweb/schemas": "~1.6.5",
-    "@uniweb/semantic-parser": "~1.13.0"
+    "@uniweb/content-writer": "~1.3.1",
+    "@uniweb/semantic-parser": "~1.13.0",
+    "@uniweb/core": "~1.4.12"
   },
   "peerDependencies": {
-    "@uniweb/build": "~1.10.14",
+    "@uniweb/semantic-parser": "~1.13.0",
     "@uniweb/content-reader": "~1.5.7",
-    "@uniweb/semantic-parser": "~1.13.0"
+    "@uniweb/build": "~1.11.0"
   },
   "peerDependenciesMeta": {
     "@uniweb/build": {

package/partials/agents.md

@@ -544,7 +544,9 @@ Optional attributes: `{size=20}`, `{color=red}`. Custom SVGs: `![Logo](./logo.sv
 ![alt](./img.jpg){href=/products}       <!-- Clickable media: href + target ride along -->
 ```
 
-Sizing and loading ride on the image: `{width=800 height=600 loading=lazy fit=cover position=center}`, and its credit as `{author="Jane Doe"}`. A video adds `{poster=./thumb.jpg autoplay muted loop controls}`; a `{role=pdf}` document adds `{preview=./cover.jpg author=… description=…}` and arrives in `content.documents` — `{ url, name, mime, size?, alt, caption, … }` — declare it in `content:` as `documents`.
+Sizing and loading ride on the image: `{width=800 height=600 loading=lazy fit=cover position=center}`, and its credit as `{author="Jane Doe"}`. A video adds `{poster=./thumb.jpg autoplay muted loop controls}`; a `{role=pdf}` document adds `{preview=./cover.jpg author=… description=…}` and arrives in `content.documents` — `{ url, name, mime, size?, alt, caption, … }` — declare it in `content:` as `documents`. Name a video's poster: a static build makes one from the video only when none is named and ffmpeg is installed, and `uniweb publish` sends only the poster you name.
+
+**Where media lives.** `./x` names a file beside the page, `/x` a file in `public/`, and both reach a static build and a site published with Uniweb. Keep a page's media beside it, and keep in `public/` what needs a fixed address: the favicon, fonts, a file other sites link to. `uniweb push` uploads a file beside a page wherever the page is, in a folder `paths:` mounts too; a file outside the site and the folders it mounts is not uploaded, so put that in `public/`. A site has no `assets/` folder for media: a build stops on a `/x` only `assets/` holds.
 
 **Placement — where a block sits in a section rendered in order.** `{placement=left}` (or `right`, `wide`, `full`) on an image or a video; a table takes it on its **caption line**, the paragraph after the table, after a blank line — `: Plans and prices {placement=wide #tbl-plans}`, which also gives the table a caption and a cross-reference id. It is the author's intent, not a size: kit's `<Render>`, `<Prose>` and `<Article>` lay all four out (`data-placement`, styled by `prose-tokens.css`), and any other component ignores it. A section type says which it honours in `meta.js` — `sequence: { label, placement: true }` — and the build warns when a file asks for one its type does not offer.
 
@@ -2877,8 +2879,8 @@ Foundations have their own free path too: `uniweb add ci --target foundation` pu
 **Three facts about a site, and they are independent — `uniweb status` opens with all three:**
 
 - **Synced** — the project has a site on a backend, so authors can edit it in the Uniweb app. `sync.json` names it on each backend: `https://uniweb.app` by default, or a server of your own (`uniweb login --server <url>`).
-- **Published** — that backend serves it live: Uniweb Cloud, on `https://uniweb.app`. A published site is a synced site; a synced site need not be published — it can sit in the app as a draft.
-- **Deployed** — a build of it is on another host, such as GitHub Pages or S3: by CI on every push (`uniweb add ci`), or by hand (`uniweb deploy`). `deploy.yml` lists those hosts, and a bare `uniweb deploy` goes to its default target.
+- **Published** — that backend serves it live: Uniweb Cloud, on `https://uniweb.app`. A published site is a synced site; a synced site need not be published — it can sit in the app as a draft. A publish is recorded in `deploy.yml` too, under a `host: uniweb` target: `deploys.<target>.url` is the address that publish delivered to. Where visitors go now (a custom domain, while one is active) is the backend's answer, and `uniweb status` shows it.
+- **Deployed** — a build of it is on another host, such as GitHub Pages or S3: by CI on every push (`uniweb add ci`), or by hand (`uniweb deploy`). `deploy.yml` lists those hosts beside the one a publish records, and a bare `uniweb deploy` goes to its default target.
 
 A site can be in more than one place — usually while it moves from one host to another. Before you ship, read where it is: `publish` makes a change live on Uniweb Cloud, `git push` on a CI-deployed host, and `uniweb deploy --target <name>` on one deployed by hand — and each of these is the person's to decide. `uniweb status` also lists the services the live site has (`services:` in `site.yml` is the request, never proof of what the site has).
 
@@ -3074,6 +3076,8 @@ These are **body only — no frontmatter**; params and config still come from th
 
 **A tagged data block translates by the shape its key declares** in the component's `meta.js` `data:` — a data schema or an inline field map: its text fields, never an enum, a URL or a `translatable: false` field. A key declared `{}` leaves its blocks to a heuristic that offers any string whose field name and value don't look structural, so a `style: display-black` naming one of your component's looks gets translated too. Declare the shape of every block a translator will see — `{ name: 'string', style: { type: 'string', enum: [...] } }`.
 
+**An image translates by its alt text.** Words alone give it its alt text in that language and keep its file. A translation that is an image also names the file that language shows: `"2d093636": "![La superposition](/docs-media/fr/overview.png)"`. Name it with a `/` path, a file in `public/`. A caption or a video's `poster` can be given the same way. An image with no alt text has nothing to translate, so give every image one.
+
 **Records translate in the same `extract` run**, into their own manifest at `locales/records/manifest.json` — keyed by the RECORD, so a record translated once is found by every query that returns it. A record whose query has a data schema translates exactly the fields the schema says are text — never an enum, a URL, a date, a number, a file, a reference or a `translatable: false` field — which are the fields a push carries in each language; mark a string that is a code or a key `translatable: false` and no translator is asked for it. An excerpt the build derives is re-derived from each language's body.
 
 **Component side.** Nothing to do: `content.title` arrives in the active language. The one thing a foundation builds is a switcher.

package/src/backend/client.js

@@ -920,8 +920,9 @@ export class BackendClient {
   /**
    * GET /dev/site — one page of the sites in the workspace the client names
    * (`setWorkspace`; none ⇒ personal): `{ sites: [{ uuid, name?, updated_at,
-   * deployment?: { status, published_url, … } }] }`. A page shorter than `limit` is
-   * the last. `deployment` is absent for a site never published.
+   * deployment?: { status, published_url, visitor_url, … } }] }`. A page shorter than
+   * `limit` is the last. `deployment` is absent for a site never published. `uniweb site`
+   * shows `visitor_url`, else `published_url` (`liveAddress`).
    *
    * @param {{ limit?: number, offset?: number }} [opts]
    * @returns {Promise<Response>}
@@ -951,11 +952,14 @@ export class BackendClient {
    * who has the site open in the app right now, and on what — `uniweb status` shows
    * it (`describeEditors`, commands/status.js).
    *
-   * ⭐ **The backend also serves a LIVE-SITE record here, and nothing in this CLI reads
-   * it yet** (shipped 2026-08-29; documented here so it is not lost twice):
+   * ⭐ **The backend also serves a LIVE-SITE record here** (shipped 2026-08-29), and
+   * `uniweb status` reads part of it: the address it shows (`visitor_url`, else
+   * `last_published_url` — `liveAddress`), and the foundation and runtime its `--json`
+   * detail carries. Nothing reads the rest yet:
    *
    *   last_published_url · last_published_foundation · last_published_extensions
    *   last_published_runtime · last_published_runtime_floor · last_published_runtime_resolution
+   *   visitor_url — where visitors go: the custom domain while one is active (2026-10-28)
    *
    * Three things about it that a reader will otherwise get wrong:
    *

package/src/backend/live-address.js

@@ -0,0 +1,22 @@
+/**
+ * Where a site's visitors go — the address the CLI shows wherever it says where a site is live:
+ * `uniweb publish`, `uniweb status`, `uniweb site list` and `uniweb site unpublish`.
+ *
+ * A backend names two addresses for a published site. `visitor_url` is where its visitors go: the
+ * site's custom domain while one is active, else the address it was delivered to. The other — `url`
+ * on a publish, `last_published_url` on a site's status, `deployment.published_url` on a list row —
+ * is where the last publish delivered it, which may be a subdomain that only redirects to that
+ * domain. The first is shown; the second only where the first is absent or null, as from a backend
+ * that does not send it. Both are complete addresses, read verbatim and never composed onto.
+ *
+ * ⛔ Not a liveness claim. Whether a site IS live is `published` (status) or `deployment.status`
+ * (list): an unpublished site keeps both addresses.
+ *
+ * @param {unknown} visitorUrl - the answer's `visitor_url`
+ * @param {unknown} deliveredUrl - the address the last publish delivered the site to
+ * @returns {string|null}
+ */
+export function liveAddress(visitorUrl, deliveredUrl) {
+  for (const url of [visitorUrl, deliveredUrl]) if (typeof url === 'string' && url) return url
+  return null
+}

package/src/backend/site-media.js

@@ -5,7 +5,8 @@
  *
  * Input is the site-root asset refs the producer surfaced in
  * `emitSyncPackages().localAssets` (`/images/hero.png`); `resolveAssetPath` finds the
- * file under the site's `public/` (or `assets/`). A ref whose file is missing is
+ * file under the site's `public/`, and refuses one only `assets/` holds, a folder retired
+ * 2026-10-28. A ref whose file is missing is
  * skipped (warned), never a broken serve URL. The serve URL is the backend's canonical
  * `serve_url`, read verbatim — origin-relative forms included; nothing here composes one.
  * Content-addressed like every asset: identical bytes → same id → a re-deploy of
@@ -49,8 +50,9 @@ export async function uploadSiteMedia(
   const files = []
   const missing = []
   // ⭐ A ref is a site-root media path (`/images/x.png`), resolved under the site — or a file the
-  // caller already located, `{ ref, path, contentType }`: a file record's file and its preview, which
-  // live in the records directory and declare their own type (`@uniweb/file`, 2026-09-28).
+  // caller already located, `{ ref, path, contentType? }`: a file record's file and its preview, which
+  // live in the records directory and declare their own type (`@uniweb/file`, 2026-09-28), and a
+  // section's co-located file, keyed by its path from the site root (`uwx/located-media.js`, 2026-10-28).
   const keys = []
   for (const item of refs) {
     const ref = typeof item === 'string' ? item : item?.ref

package/src/backend/site-sync.js

@@ -29,7 +29,6 @@ import {
 } from '../utils/sync-point.js'
 import { siteContentRoots } from '../utils/git.js'
 import { humanBytes } from '../utils/bytes.js'
-import { isAuthoredPreview } from '../utils/preview.js'
 import {
   describeRequestError,
   describeWorkspace,
@@ -56,7 +55,6 @@ import {
   updateBackendMap,
   clearBackendSections,
   normalizeBackendOrigin,
-  writeSiteConfig,
   harvestRecordItems,
   storedRecordItems,
   reprintRecordItems,
@@ -734,51 +732,6 @@ export function clearRemoteSyncStateIfUnbound(siteDir, backend) {
   return stale
 }
 
-/**
- * Drop the `site.yml` values that describe ONE PARTICULAR backend site, when this
- * project is bound to none (no `$uuid`) — a brand-new site, or the state our own
- * "clear `$uuid` to re-publish as a new site" recovery puts you in. Today that is
- * one value: `preview` in the APP's form — a timestamp naming the previous site's
- * generated card image, which is keyed by that site's uuid and would dangle on this
- * one.
- *
- * ⛔ An AUTHOR's preview is theirs and stays: a URL, or a path to an image in the
- * project, is as good for the new site as for the old.
- *
- * (`$url`, where the previous site was live, was dropped here too until it was
- * retired on 2026-09-17. A leftover line is inert — nothing reads or sends it.)
- *
- * The site.yml sibling of `clearRemoteSyncStateIfUnbound`, called beside it for the
- * same reason — before the create mints a uuid and makes the project look bound.
- *
- * @param {string} siteDir
- * @returns {string[]} the keys removed
- */
-export function dropSiteBoundValues(siteDir, backend) {
-  const file = join(siteDir, 'site.yml')
-  let y
-  try {
-    y = yaml.load(readFileSync(file, 'utf8'))
-  } catch {
-    return []
-  }
-  // ⛔ "Bound" is a question about THIS backend, answered by sync.json. This read
-  // `site.yml::$uuid` until 2026-09-20 and kept doing so after step 4 moved the key —
-  // so every project read as unbound and every push stripped a bound site's
-  // generated preview. A write, from a stale read, with nothing to notice it.
-  if (!y || typeof y !== 'object') return []
-  if (readBackendState(siteDir, backend).site?.uuid) return []
-  const dropped = []
-  if (
-    y.preview !== undefined &&
-    !isAuthoredPreview(y.preview) &&
-    writeSiteConfig(siteDir, { preview: null }) === 'updated'
-  ) {
-    dropped.push('preview')
-  }
-  return dropped
-}
-
 export function readSyncCache(siteDir, backend) {
   return readMap(siteDir, backend, 'hashes')
 }

package/src/commands/doctor.js

@@ -1112,9 +1112,16 @@ const DESCRIPTION_SHOWN = 160
 /** A path into the site's own files (`/images/card.jpg`), not an address of its own. */
 const isSitePath = (v) => typeof v === 'string' && v.startsWith('/') && !v.startsWith('//')
 
-/** `/x` → the file under the site's public/ or assets/ that serves it, or null when there is none. */
+/** `/x` → the file under the site's public/ that serves it, or null when there is none. */
 function siteFile(sitePath, ref) {
-  const { resolved } = resolveAssetPath(ref, join(sitePath, 'site.yml'), sitePath)
+  let resolved
+  try {
+    ;({ resolved } = resolveAssetPath(ref, join(sitePath, 'site.yml'), sitePath))
+  } catch (err) {
+    // A file in assets/, which no longer serves a `/x` — the build says how to move it.
+    if (err?.code === 'ASSETS_FOLDER_RETIRED') return null
+    throw err
+  }
   return resolved && existsSync(resolved) ? resolved : null
 }
 
@@ -1195,8 +1202,8 @@ export async function checkLinkPreviews({ sitePath, siteName, issues }) {
     const file = siteFile(sitePath, image)
     if (!file) {
       const id = 'share-image-missing'
-      issues.push({ id, type: 'warn', site: siteName, message: `${image}, the image a link to ${shownOn} shows, is not in public/ or assets/` })
-      warn(`[${id}] ${image} is not in public/ or assets/ — a link to ${shownOn} shows no image`)
+      issues.push({ id, type: 'warn', site: siteName, message: `${image}, the image a link to ${shownOn} shows, is not in public/` })
+      warn(`[${id}] ${image} is not in public/ — a link to ${shownOn} shows no image`)
       continue
     }
     readImageSize ??= (await import('@uniweb/build/images')).readImageSize
@@ -1276,8 +1283,8 @@ export async function checkFavicon({ sitePath, siteName, siteYml, issues, should
   if (named) {
     if (!isSitePath(named) || siteFile(sitePath, named)) return
     const id = 'favicon-missing'
-    issues.push({ id, type: 'warn', site: siteName, message: `favicon: ${named} is not in public/ or assets/` })
-    warn(`[${id}] favicon: ${named} is not in public/ or assets/ — every page links an icon that is not there`)
+    issues.push({ id, type: 'warn', site: siteName, message: `favicon: ${named} is not in public/` })
+    warn(`[${id}] favicon: ${named} is not in public/ — every page links an icon that is not there`)
     return
   }
 
@@ -1359,8 +1366,8 @@ export async function checkTouchIcon({ sitePath, siteName, siteYml, issues, shou
   const file = siteFile(sitePath, named)
   if (!file) {
     const id = 'touch-icon-missing'
-    issues.push({ id, type: 'warn', site: siteName, message: `touchIcon: ${named} is not in public/ or assets/` })
-    warn(`[${id}] touchIcon: ${named} is not in public/ or assets/ — every page links an icon that is not there`)
+    issues.push({ id, type: 'warn', site: siteName, message: `touchIcon: ${named} is not in public/` })
+    warn(`[${id}] touchIcon: ${named} is not in public/ — every page links an icon that is not there`)
     return
   }
   const { readImageSize, isImageOpaque } = await import('@uniweb/build/images')

package/src/commands/publish.js

@@ -110,7 +110,6 @@ import {
   unsettledFiles,
   commitWriteBacks,
   reportWriteBacks,
-  dropSiteBoundValues,
   pushSyncPackages,
   readSiteWorkspace
 } from '../backend/site-sync.js'
@@ -118,6 +117,7 @@ import { repoOf } from '../utils/sync-point.js'
 import { commitBeforeSending } from '../backend/commit-before-sending.js'
 import { resolveWorkspace, describeWorkspace, previewWorkspace, SOURCE_LABEL } from '../backend/workspace.js'
 import { uploadSiteMedia, describeAssetRefusal } from '../backend/site-media.js'
+import { liveAddress } from '../backend/live-address.js'
 import {
   updateBackendMap,
   readBackendState,
@@ -671,12 +671,6 @@ export async function publish(args = []) {
       `Cleared stale sync state from a previous site (${droppedState.join(', ')}).`
     )
   }
-  const droppedValues = dropSiteBoundValues(siteDir, client.origin)
-  if (droppedValues.length) {
-    say.dim(
-      `Dropped the previous site's ${droppedValues.join(' and ')} from site.yml.`
-    )
-  }
   // 3b. Make sure the SITE EXISTS before a single byte is uploaded.
   //
   //     Uploaded bytes are metered against an owning entity and reclaimed by
@@ -1064,6 +1058,10 @@ export async function publish(args = []) {
   // prefixed with our own origin; the reply is absolute now, so a path from an
   // older backend is simply shown as one.
   const serveUrl = typeof result.url === 'string' && result.url ? result.url : null
+  // …and where its visitors go, which is what is shown: its custom domain while one is
+  // active (`liveAddress`). The backend reads it on every publish and stores it nowhere, so
+  // deploy.yml keeps the address this publish delivered to.
+  const shownUrl = liveAddress(result.visitor_url, serveUrl)
 
   // 8. Persist deploy.yml memory — a record of what went live (and so a re-run
   //    reuses the resolved target without re-asking). Identity is sync.json's,
@@ -1145,7 +1143,7 @@ export async function publish(args = []) {
     )
     say.dim(`  site.yml lists ${unserved.join(', ')}, and ${unserved.length === 1 ? 'it was' : 'they were'} not published.`)
   }
-  if (serveUrl) console.log(`  ${c.cyan}${serveUrl}${c.reset}`)
+  if (shownUrl) console.log(`  ${c.cyan}${shownUrl}${c.reset}`)
   // ⛔ No site.yml write for where it went live. That is a fact about this deploy,
   // not about the site, and it is recorded where deploy facts live: deploy.yml's
   // `lastDeploy.<target>.url` (step 8 above). site.yml carried it as `$url` ⇄

package/src/commands/push.js

@@ -26,7 +26,8 @@
  * `uniweb login && uniweb push`. Run from a site, or a workspace with one site.
  *
  * Usage:
- *   uniweb push                          Build, push both lanes, back-fill $uuid
+ *   uniweb push                          Bring the foundation along, push both lanes,
+ *                                        back-fill $uuid
  *   uniweb push --org @org               Work in @org for this push, instead of the
  *   uniweb push --personal               workspace chosen at `uniweb login` (or your
  *                                        personal workspace). A site this push creates
@@ -97,7 +98,6 @@ import {
   refuseUnsendableRecords,
   ensureSiteExists,
   clearRemoteSyncStateIfUnbound,
-  dropSiteBoundValues,
   untakenBase,
   unsettledFiles,
   commitWriteBacks,
@@ -367,10 +367,6 @@ export async function push(args = [], deps = {}) {
         `Cleared stale sync state from a previous site (${dropped.join(', ')}).`
       )
     }
-    const stale = dropSiteBoundValues(siteDir, client.origin)
-    if (stale.length) {
-      note(`Dropped the previous site's ${stale.join(' and ')} from site.yml.`)
-    }
   }
   const priorHashes = readSyncCache(siteDir, client.origin)
   // Per-item identity, without which the backend reads every record as new and

package/src/commands/site.js

@@ -27,6 +27,7 @@ import { join, resolve } from 'node:path'
 
 import { BackendClient, WorkspaceMismatchError, describeWorkspace } from '../backend/client.js'
 import { resolveWorkspace } from '../backend/workspace.js'
+import { liveAddress } from '../backend/live-address.js'
 import { checkFlags } from '../utils/flag-guard.js'
 import { confirm, isNonInteractive } from '../utils/interactive.js'
 import { readSiteIdentity } from '../utils/site-identity.js'
@@ -135,7 +136,7 @@ async function list(args) {
     name: s.name ?? null,
     status: s.deployment?.status ?? null,
     published: s.deployment?.status === 'published',
-    url: s.deployment?.published_url ?? null,
+    url: liveAddress(s.deployment?.visitor_url, s.deployment?.published_url),
     updated_at: s.updated_at ?? null
   }))
   if (json) {
@@ -270,7 +271,7 @@ async function unpublish(args) {
   if (!target) return { exitCode: 2 }
   const site = await findSite(client, target.uuid)
   const label = site?.name ? `“${site.name}” (${target.uuid})` : target.uuid
-  const url = site?.deployment?.published_url
+  const url = liveAddress(site?.deployment?.visitor_url, site?.deployment?.published_url)
   const ok = await confirmed(
     args,
     `Unpublish ${label} on ${client.origin}?${url ? ` Visitors get nothing at ${url} until it is published again.` : ''}`,

package/src/commands/snapshot.js

@@ -23,8 +23,9 @@
  * A site keeps its chosen look in `site/snapshot.yml` (utils/snapshot-settings.js):
  * the command's defaults for that site, which flags override and `--save` writes.
  *
- * `preview:` is written only when site.yml has none, or holds the app's generated
- * token. An address the author wrote is never replaced.
+ * `preview:` is written only when site.yml has none, or holds something that is no
+ * author's address — the token an older pull wrote there for a card image the app
+ * generated. An address the author wrote is never replaced.
  */
 
 import { spawn } from 'node:child_process'
@@ -33,13 +34,12 @@ import { createRequire } from 'node:module'
 import { isAbsolute, join, relative, resolve, sep } from 'node:path'
 import { pathToFileURL } from 'node:url'
 import yaml from 'js-yaml'
-import { writeSiteConfig } from '@uniweb/build/uwx'
+import { isAuthoredPreview, writeSiteConfig } from '@uniweb/build/uwx'
 
 import { didYouMean } from '../utils/args.js'
 import { humanBytes } from '../utils/bytes.js'
 import { discoverSites } from '../utils/discover.js'
 import { detectWorkspacePm } from '../utils/pm.js'
-import { isAuthoredPreview } from '../utils/preview.js'
 import {
   SETTINGS_FILE,
   SettingsError,
@@ -447,7 +447,7 @@ export async function snapshot(args = []) {
       if (setPreview()) console.log(`  site.yml: ${CYAN}preview: ${value}${RESET}`)
       break
     case 'replace':
-      if (setPreview()) console.log(`  site.yml: ${CYAN}preview: ${value}${RESET} ${DIM}(replaces the app-generated preview)${RESET}`)
+      if (setPreview()) console.log(`  site.yml: ${CYAN}preview: ${value}${RESET} ${DIM}(replaces ${current}, which is not an image address)${RESET}`)
       break
     case 'unchanged':
       console.log(`  ${DIM}site.yml already has preview: ${value}${RESET}`)

package/src/commands/status.js

@@ -60,6 +60,7 @@ import {
 import { describeWorkspace, resolveWorkspace, SOURCE_LABEL } from '../backend/workspace.js'
 import { BackendClient, resolveBackendOrigin } from '../backend/client.js'
 import { readAppChanges } from '../backend/app-changes.js'
+import { liveAddress } from '../backend/live-address.js'
 import { probePull } from './pull.js'
 import { readOrgFlag } from '../utils/args.js'
 import { listSyncedBackends, readBackendState } from '@uniweb/build/uwx'
@@ -649,9 +650,10 @@ async function appChecks(siteDir, siteYml, { offline, args, git }) {
   if (site) {
     // ⭐ WHERE THE SITE IS LIVE IS THE BACKEND'S TO SAY, never deploy.yml's: a receipt is
     // what this copy published, and a publish from the app or another copy does not move it.
-    // ⛔ `last_published_url` outlives an unpublish (`client.siteStatus`), so it is said as
-    // where the site WAS live when it is not live now — never as where it is.
-    const url = typeof site.last_published_url === 'string' && site.last_published_url ? site.last_published_url : null
+    // It is where visitors go: the custom domain while one is active (`liveAddress`).
+    // ⛔ Both addresses outlive an unpublish (`client.siteStatus`), so the one shown is said
+    // as where the site WAS live when it is not live now — never as where it is.
+    const url = liveAddress(site.visitor_url, site.last_published_url)
     const when = site.last_published_at ? sinceLabel(site.last_published_at, Date.now()) : null
     const at = `${url ? ` at ${url}` : ''}${when ? `, published ${when}` : ''}`
     const detail = {

package/src/framework-index.json

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
-  "generatedAt": "2026-10-28T14:10:12.997Z",
+  "generatedAt": "2026-10-29T01:09:12.877Z",
   "packages": {
     "@uniweb/api": {
-      "version": "1.6.4"
+      "version": "1.6.5"
     },
     "@uniweb/build": {
-      "version": "1.10.14"
+      "version": "1.11.0"
     },
     "@uniweb/content-reader": {
       "version": "1.5.7"
@@ -36,7 +36,7 @@
       "version": "1.2.7"
     },
     "@uniweb/runtime": {
-      "version": "1.2.12"
+      "version": "1.2.13"
     },
     "@uniweb/scene": {
       "version": "1.0.1"
@@ -60,7 +60,7 @@
       "version": "1.2.1"
     },
     "@uniweb/unipress": {
-      "version": "1.1.16"
+      "version": "1.1.17"
     }
   },
   "templates": {

package/src/index.js

@@ -1607,8 +1607,8 @@ ${colors.bright}Usage:${colors.reset}
 
 Opens the site in a headless Chrome, captures it, and composes the captures into
 one image: by default ${colors.bright}site/public/preview.webp${colors.reset}, recorded as ${colors.cyan}preview:${colors.reset} in site.yml
-when site.yml has none, or only the app's generated one. A URL or image path you
-wrote is never replaced.
+when site.yml has none, or what it has is not an image address. A URL or image path
+you wrote is never replaced.
 
 A page that scrolls gets the ${colors.bright}split${colors.reset} layout: the first view in a browser window,
 beside a long strip of the page. A page that does not scroll as a page (a docs

package/src/utils/preview.js

@@ -1,20 +0,0 @@
-/**
- * `site.yml::preview` — the site's card image — has two writers: an author, who
- * writes an address (a URL, or a path to an image in the project), and the app,
- * which writes a token naming an image it generated. This is the one test that
- * tells them apart.
- *
- * It recognizes the author's shapes rather than the app's, so it does not depend
- * on the token's format: a URL, a path starting `/`, `./` or `../`, or a relative
- * path to an image file (`images/card.png`).
- */
-
-const IMAGE_FILE = /\.(avif|gif|jpe?g|png|svg|webp)$/i
-
-/**
- * @param {unknown} value
- * @returns {boolean} true when `value` is an author's address rather than the app's token
- */
-export const isAuthoredPreview = (value) =>
-  typeof value === 'string' &&
-  (/^https?:\/\//i.test(value) || /^\.{0,2}\//.test(value) || IMAGE_FILE.test(value.trim()))