@unoverse-platform/studio 0.1.109 → 0.1.111

package/bin/studio.mjs

@@ -22,7 +22,7 @@ import { fileURLToPath } from "url";
 import { existsSync, readdirSync } from "fs";
 import { createInterface } from "readline/promises";
 import { execSync } from "child_process";
-import { hasDesignHome, orgRepoName, authoringRoot } from "../local/design-home.mjs";
+import { hasDesignHome, orgRepoName, authoringRoot, platformHome } from "../local/design-home.mjs";
 import { createOrgRepo, checkProjectName } from "../local/scaffold.mjs";
 
 const here = dirname(fileURLToPath(import.meta.url));
@@ -44,7 +44,7 @@ const appRoot = resolve(here, "..");
 function findProjectRootFromCwd() {
   for (let dir = process.cwd(); ; ) {
     if (orgRepoName(dir) || hasDesignHome(dir)) return dir;
-    if (hasDesignHome(join(dir, "apps/unoverse"))) return join(dir, "apps/unoverse");
+    if (platformHome(dir)) return platformHome(dir);
     const parent = resolve(dir, "..");
     if (parent === dir) return process.cwd();
     dir = parent;
@@ -83,7 +83,7 @@ async function scaffoldIfEmpty() {
   // The same walk findProjectRoot does. A project ABOVE us is a project; do not offer to
   // make a second one inside it.
   for (let dir = cwd; ; ) {
-    if (orgRepoName(dir) || hasDesignHome(dir) || hasDesignHome(join(dir, "apps/unoverse"))) return;
+    if (orgRepoName(dir) || hasDesignHome(dir) || platformHome(dir)) return;
     const parent = resolve(dir, "..");
     if (parent === dir) break;
     dir = parent;

package/local/authoring.ts

@@ -88,8 +88,8 @@ export function vocabulary(
 }
 
 /** Atom names off disk, for completion of `Ref.ref`. */
-export function atomNames(projectRoot: string): { name: string }[] {
-  const dirs = [resolve(authoringRoot(projectRoot), "marketplace/atoms"), resolve(authoringRoot(projectRoot), "atoms")];
+export function atomNames(projectRoot: string, marketplace: string): { name: string }[] {
+  const dirs = [resolve(marketplace, "atoms"), resolve(authoringRoot(projectRoot), "atoms")];
   const names = new Set<string>();
   for (const d of dirs) {
     if (!existsSync(d)) continue;

package/local/catalog.ts

@@ -10,7 +10,7 @@
  *
  * See docs/architecture/authoring/LOCAL_STUDIO.md.
  */
-import { hasDesignHome, orgRepoName } from "./design-home.mjs";
+import { hasDesignHome, orgRepoName, platformHome } from "./design-home.mjs";
 import { resolve } from "path";
 import { existsSync } from "fs";
 
@@ -34,6 +34,8 @@ type Loaders = {
   projectDir: (name: string) => string;
   /** A component id's on-disk folder, either tier. Null for a flat, folderless one. */
   componentFolder: (ref: string) => string | null;
+  /** The marketplace tier on disk (base paths.ts `marketplace`). Absent outside the monorepo. */
+  marketplace: string;
 };
 
 /**
@@ -49,9 +51,10 @@ export function findProjectRoot(from: string = process.cwd()): string {
     if (orgRepoName(dir)) return dir;
     // A developer's project (starter kit): rx/ sits at the root.
     if (hasDesignHome(dir)) return dir;
-    // This monorepo, where Studio's author works: rx/ lives under apps/unoverse. Same
-    // shape underneath (design/), just nested, so return that as the root.
-    if (hasDesignHome(resolve(dir, "apps/unoverse"))) return resolve(dir, "apps/unoverse");
+    // This monorepo, where Studio's author works: the home is apps/unoverse, found by the
+    // marker base paths.ts uses. It holds no orgs, so Studio shows the marketplace tier.
+    const platform = platformHome(dir);
+    if (platform) return platform;
     const parent = resolve(dir, "..");
     if (parent === dir) break;
     dir = parent;
@@ -136,5 +139,6 @@ export async function loadCatalog(
     DEFAULT_ORG: theme.DEFAULT_ORG as string,
     projectDir: defs.projectDir as Loaders["projectDir"],
     componentFolder: defs.componentFolder as Loaders["componentFolder"],
+    marketplace: (paths.getPaths as () => { marketplace: string })().marketplace,
   };
 }

package/local/design-home.d.mts

@@ -1,5 +1,7 @@
 export function designHome(root: string): string;
 export function hasDesignHome(root: string): boolean;
+/** The platform repo's home (`<dir>/apps/unoverse`) when `dir` is that repo's root, else null. */
+export function platformHome(dir: string): string | null;
 
 /** The org an org repo declares in its unoverse.yaml, or null when this is not an org repo (UNO-88). */
 export function orgRepoName(root: string): string | null;

package/local/design-home.mjs

@@ -30,6 +30,17 @@ export function hasDesignHome(root) {
   return existsSync(join(root, "design")) || existsSync(join(root, "rx"));
 }
 
+/**
+ * THE PLATFORM REPO: `apps/unoverse` beside the marketplace tier it authors
+ * (`packages/marketplace/definitions`). The same marker base `paths.ts` findHome uses, and the
+ * home it returns. It holds no orgs (its design/ was retired 2026-10-04), so Studio there
+ * shows the marketplace tier alone. DETECTION ONLY, like hasDesignHome. Keep in step.
+ */
+export function platformHome(dir) {
+  const home = join(dir, "apps", "unoverse");
+  return existsSync(join(dir, "packages", "marketplace", "definitions")) && existsSync(home) ? home : null;
+}
+
 /**
  * AN ORG REPO (UNO-88): `unoverse.yaml` declares `org: <slug>` and the org's folders sit at
  * the root, with no design/. The name is declared, never read off the folder. Mirrors base

package/local/plugin.ts

@@ -15,7 +15,7 @@
  *
  * See docs/architecture/authoring/LOCAL_STUDIO.md.
  */
-import { designHome, authoringRoot, orgRepoName, lintOptions } from "./design-home.mjs";
+import { designHome, authoringRoot, orgRepoName, lintOptions, platformHome } from "./design-home.mjs";
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
 import { resolve, dirname } from "path";
@@ -36,7 +36,7 @@ import { atomNames, vocabulary } from "./authoring.js";
  */
 function definitionHome(
   uri: string,
-  c: { componentFolder: (ref: string) => string | null; projectDir: (n: string) => string; listOrgs: () => string[] },
+  c: { componentFolder: (ref: string) => string | null; projectDir: (n: string) => string; listOrgs: () => string[]; marketplace: string },
   projectRoot: string,
 ): string | null {
   // An app definition is addressed as `unoverse://apps/<org>/<name>/definition`, so the
@@ -62,14 +62,14 @@ function definitionHome(
     const [org, name] = i === -1 ? [null, ref] : [ref.slice(0, i), ref.slice(i + 1)];
     const homes = org
       ? [resolve(c.projectDir(org), "templates", name.toLowerCase())]
-      : [resolve(authoringRoot(projectRoot), "marketplace/templates", ref.toLowerCase())];
+      : [resolve(c.marketplace, "templates", ref.toLowerCase())];
     for (const dir of homes) if (existsSync(dir)) return dir;
     return null;
   }
   const folder = c.componentFolder(ref);
   if (folder) return folder;
   // A flat, folderless component: `rx/components/<name>.json` in either tier.
-  for (const dir of [resolve(authoringRoot(projectRoot), "marketplace/components"), resolve(authoringRoot(projectRoot), "components")]) {
+  for (const dir of [resolve(c.marketplace, "components"), resolve(authoringRoot(projectRoot), "components")]) {
     const flat = resolve(dir, `${ref.toLowerCase()}.json`);
     if (existsSync(flat)) return flat;
   }
@@ -167,7 +167,7 @@ function readMarkdownLibrary(dir: string): MarkdownEntry[] {
  * A skill or a prompt block lives in one of two places, and the NAME's shape is what
  * carries which:
  *
- *   UNIVERSAL  `design/marketplace/<folder>/`, named bare. Published to the marketplace.
+ *   UNIVERSAL  the marketplace tier's `<folder>/` (base paths.ts `marketplace`), named bare.
  *   ORG        `design/<org>/<folder>/`, named `<org>/<name>`. Private to that org.
  *
  * The universe server resolves both (the items loaders). This host read the universal
@@ -177,8 +177,8 @@ function readMarkdownLibrary(dir: string): MarkdownEntry[] {
  * Scoping is the server's `?org=`: an org sees the universal tier plus its own and never
  * another org's, the rule RX_ORG_MODEL.md settled for a project's assets.
  */
-function readLibrary(projectRoot: string, folder: "skills" | "blocks", orgs: string[], org?: string): MarkdownEntry[] {
-  const out = readMarkdownLibrary(resolve(authoringRoot(projectRoot), "marketplace", folder));
+function readLibrary(projectRoot: string, marketplace: string, folder: "skills" | "blocks", orgs: string[], org?: string): MarkdownEntry[] {
+  const out = readMarkdownLibrary(resolve(marketplace, folder));
   for (const o of orgs) {
     if (org && org !== "all" && o !== org) continue;
     // The org's own folder: the repo root in an org repo (UNO-88), else design/<org>/.
@@ -202,11 +202,26 @@ function readLibrary(projectRoot: string, folder: "skills" | "blocks", orgs: str
 const recentSelfWrites = new Map<string, number>();
 const SELF_WRITE_WINDOW_MS = 2000;
 
+
+/**
+ * WHY A NEW PROJECT IS REFUSED HERE, or null when it is allowed. A new org is a new repo
+ * (UNO-88), made with `unoverse create` in its own folder: never a second org inside an org
+ * repo, and never an org inside the platform repo, which holds none since 2026-10-04.
+ */
+function newProjectRefusal(root: string | null): string | null {
+  if (!root) return null;
+  if (orgRepoName(root)) return "This repo is one org. A new org is a new repo: run `unoverse create` in a new folder.";
+  if (platformHome(resolve(root, "..", "..")) === root) return "The platform repo holds no orgs. A new org is a new repo: run `unoverse create` in a new folder.";
+  return null;
+}
+
 export function localStudioHost(): Plugin {
   let projectRoot: string;
   let baseSrc: string;
   /** The node the developer last picked in the preview, for an agent to read. */
   let selection: Record<string, unknown> | null = null;
+  /** The marketplace tier on disk, watched beside the project when this checkout authors it. */
+  let marketplaceDir: string | undefined;
 
   return {
     name: "local-studio-host",
@@ -245,6 +260,10 @@ export function localStudioHost(): Plugin {
 
       const ssr = (id: string) => server.ssrLoadModule(id) as Promise<Record<string, unknown>>;
       const catalog = loadCatalog(baseSrc, ssr, projectRoot);
+      // Lint options for this project, naming the marketplace tier when this checkout authors
+      // it outside the design root (the monorepo's packages/marketplace/definitions).
+      const lintWith = (c: { marketplace: string }, extra: Record<string, unknown> = {}) =>
+        lintOptions(projectRoot, existsSync(c.marketplace) ? { ...extra, marketplace: c.marketplace } : extra);
       // Node packages load lazily: only when the Nodes section is first opened, so a
       // developer authoring only design assets never pays for it at startup.
       let nodesOnce: Promise<LocalNodes | null> | null = null;
@@ -272,6 +291,12 @@ export function localStudioHost(): Plugin {
         const full = resolve(projectRoot, dir);
         if (existsSync(full)) server.watcher.add(full);
       }
+      // The marketplace tier too, when this checkout authors it: in the monorepo it is
+      // packages/marketplace/definitions, outside the project folder watched above.
+      void catalog.then((c) => {
+        marketplaceDir = c.marketplace;
+        if (existsSync(c.marketplace)) server.watcher.add(c.marketplace);
+      });
 
       server.middlewares.use(async (req, res, next) => {
         const url = new URL(req.url ?? "/", "http://local");
@@ -366,7 +391,7 @@ export function localStudioHost(): Plugin {
             case path === "/dev/orgs":
               // `orgRepo` names the org when this folder is one org's repo (UNO-88): the picker
               // then offers no second project, since a new org is a new repo.
-              return json(res, { orgs: c.themeOrgs(), orgRepo: orgRepoName(projectRoot) ?? null });
+              return json(res, { orgs: c.themeOrgs(), orgRepo: orgRepoName(projectRoot) ?? null, canCreate: newProjectRefusal(projectRoot) === null });
 
             /**
              * NEW PROJECT. The only thing Studio writes to disk that is not a definition.
@@ -383,8 +408,9 @@ export function localStudioHost(): Plugin {
             case path === "/dev/projects" && req.method === "POST": {
               // ONE ORG, ONE REPO (UNO-88): a new org is a new repo, made with `unoverse create`
               // in its own folder, never a second org inside this one.
-              if (orgRepoName(projectRoot)) {
-                return json(res, { error: "This repo is one org. A new org is a new repo: run `unoverse create` in a new folder." }, 400);
+              {
+                const refusal = newProjectRefusal(projectRoot);
+                if (refusal) return json(res, { error: refusal }, 400);
               }
               const { createProject } = await import("./scaffold.mjs");
               const name = String((await body()).name ?? "");
@@ -467,17 +493,17 @@ export function localStudioHost(): Plugin {
             case path === "/local/source": {
               const roots = writableRoots(projectRoot, c);
               const direct = url.searchParams.get("path");
-              if (direct) return json(res, { files: sourceFiles(direct, roots, projectRoot) });
+              if (direct) return json(res, { files: sourceFiles(direct, roots, projectRoot, c.marketplace) });
 
               const uri = url.searchParams.get("uri") ?? "";
               const home = definitionHome(uri, c, projectRoot);
               if (!home) return json(res, { error: `no source for ${uri}` }, 404);
-              return json(res, { home, files: sourceFiles(home, roots, projectRoot) });
+              return json(res, { home, files: sourceFiles(home, roots, projectRoot, c.marketplace) });
             }
 
             case path === "/local/source/file" && req.method !== "POST": {
               const p = url.searchParams.get("path") ?? "";
-              const found = readSource(p, writableRoots(projectRoot, c), projectRoot);
+              const found = readSource(p, writableRoots(projectRoot, c), projectRoot, c.marketplace);
               return found ? json(res, found) : json(res, { error: "not readable" }, 404);
             }
 
@@ -512,7 +538,8 @@ export function localStudioHost(): Plugin {
                 b.text as string,
                 writableRoots(projectRoot, c),
                 projectRoot,
-                (designRoot) => ({ problems: [...lintMod.lintDefinitions(designRoot, lintOptions(projectRoot)).problems, ...objectsMod.lintObjects(designRoot, lintOptions(projectRoot)).problems, ...promptsMod.lintPrompts(designRoot, lintOptions(projectRoot)).problems] }),
+                (designRoot) => ({ problems: [...lintMod.lintDefinitions(designRoot, lintWith(c)).problems, ...objectsMod.lintObjects(designRoot, lintWith(c)).problems, ...promptsMod.lintPrompts(designRoot, lintWith(c)).problems] }),
+                c.marketplace,
               );
               return json(res, result, result.saved ? 200 : result.error === "lint errors" ? 422 : 403);
             }
@@ -544,7 +571,7 @@ export function localStudioHost(): Plugin {
               const abs = resolve(p);
               const overlay = { [abs]: b.text as string };
               const root = authoringRoot(projectRoot);
-              const opts = lintOptions(projectRoot, { overlay });
+              const opts = lintWith(c, { overlay });
               const problems = [...lintMod.lintDefinitions(root, opts).problems, ...objectsMod.lintObjects(root, opts).problems, ...promptsMod.lintPrompts(root, opts).problems];
               return json(res, {
                 findings: problems.filter((f) => f.file && resolve(f.file) === abs),
@@ -561,7 +588,7 @@ export function localStudioHost(): Plugin {
               const theme = c.resolveTheme(url.searchParams.get("theme") ?? "light");
               return json(
                 res,
-                vocabulary(vocabMod, theme, atomNames(projectRoot), c.listDefinitions("component") as { name?: string }[]),
+                vocabulary(vocabMod, theme, atomNames(projectRoot, c.marketplace), c.listDefinitions("component") as { name?: string }[]),
               );
             }
 
@@ -584,17 +611,17 @@ export function localStudioHost(): Plugin {
               return json(res, selection ?? { empty: true });
 
             case path === "/skills":
-              return json(res, { skills: readLibrary(projectRoot, "skills", c.listOrgs(), org) });
+              return json(res, { skills: readLibrary(projectRoot, c.marketplace, "skills", c.listOrgs(), org) });
 
             case path.startsWith("/skills/"): {
               const name = decodeURIComponent(path.slice("/skills/".length).replace(/\/file$/, ""));
-              const found = readLibrary(projectRoot, "skills", c.listOrgs()).find((s) => s.name === name || s.id === name);
+              const found = readLibrary(projectRoot, c.marketplace, "skills", c.listOrgs()).find((s) => s.name === name || s.id === name);
               // SkillsView reads `d.skill`, matching the server's shape. Not the bare object.
               return found ? json(res, { skill: found }) : json(res, { error: "skill not found" }, 404);
             }
 
             case path === "/prompt-blocks":
-              return json(res, { blocks: readLibrary(projectRoot, "blocks", c.listOrgs(), org) });
+              return json(res, { blocks: readLibrary(projectRoot, c.marketplace, "blocks", c.listOrgs(), org) });
 
             // Registry toggles are a DEPLOYED concept: they persist to installed_plugins
             // and decide what a running universe exposes. Local Studio has no database and
@@ -674,7 +701,7 @@ export function localStudioHost(): Plugin {
      * else, which means the developer's other editor, still reloads.
      */
     handleHotUpdate({ server, file }) {
-      const watched = [authoringRoot(projectRoot)];
+      const watched = [authoringRoot(projectRoot), ...(marketplaceDir ? [marketplaceDir] : [])];
       if (!watched.some((w) => file.startsWith(w))) return;
       const self = recentSelfWrites.get(resolve(file));
       if (self !== undefined && Date.now() - self < SELF_WRITE_WINDOW_MS) return [];
@@ -684,10 +711,12 @@ export function localStudioHost(): Plugin {
 
     configResolved() {
       // Surface a clear failure at startup rather than an empty catalog later.
-      if (projectRoot && !existsSync(authoringRoot(projectRoot))) {
+      // The platform repo authors no orgs, so its design/ is absent by design: no org tier.
+      const platform = projectRoot ? platformHome(resolve(projectRoot, "..", "..")) === projectRoot : false;
+      if (projectRoot && !platform && !existsSync(authoringRoot(projectRoot))) {
         throw new Error(`No rx/ folder at ${projectRoot}`);
       }
-      if (projectRoot) statSync(authoringRoot(projectRoot));
+      if (projectRoot && !platform) statSync(authoringRoot(projectRoot));
     },
   };
 }

package/local/sample-identity/brand.yaml

@@ -1,5 +1,5 @@
 # The org's brand: its own words, and only those. The briefs, the limits and the shape are the
-# brand object's (design/marketplace/objects/brand/); this file carries the answers as defaults.
+# brand object's (packages/marketplace/definitions/objects/brand/); this file carries the answers as defaults.
 unoverse: "1.0"
 type: identity
 extends: brand

package/local/sample-identity/organisation.yaml

@@ -1,5 +1,5 @@
 # The org's organisation: its own words, and only those. The briefs, the limits and the shape are the
-# organisation object's (design/marketplace/objects/organisation/); this file carries the answers as defaults.
+# organisation object's (packages/marketplace/definitions/objects/organisation/); this file carries the answers as defaults.
 unoverse: "1.0"
 type: identity
 extends: organisation

package/local/sample-identity/purpose.yaml

@@ -1,5 +1,5 @@
 # The org's purpose: its own words, and only those. The briefs, the limits and the shape are the
-# purpose object's (design/marketplace/objects/purpose/); this file carries the answers as defaults.
+# purpose object's (packages/marketplace/definitions/objects/purpose/); this file carries the answers as defaults.
 unoverse: "1.0"
 type: identity
 extends: purpose

package/local/sample-identity/story.yaml

@@ -1,5 +1,5 @@
 # The org's story: its own words, and only those. The briefs, the limits and the shape are the
-# story object's (design/marketplace/objects/story/); this file carries the answers as defaults.
+# story object's (packages/marketplace/definitions/objects/story/); this file carries the answers as defaults.
 unoverse: "1.0"
 type: identity
 extends: story

package/local/scaffold.mjs

@@ -221,10 +221,10 @@ export function topUpSamples(home, project) {
  */
 
 /**
- * EDITOR HELP FOR NODES, WITHOUT A LINE IN EVERY FILE (2026-09-05). The YAML language
- * server maps files to schemas by glob from `.vscode/settings.json`, so a workspace that
- * carries this mapping gets autocomplete and errors on every node file it will ever hold,
- * and no file needs a `$schema:` key. The schemas are the docs site's, so the mapping
+ * EDITOR HELP FOR NODES AND DESIGN, WITHOUT A LINE IN EVERY FILE (nodes 2026-09-05, design
+ * 2026-10-04). The YAML language server maps files to schemas by glob from
+ * `.vscode/settings.json`, so a workspace that carries this mapping gets autocomplete and
+ * errors on every node and design file it will hold, and no file needs a `$schema:` key. The schemas are the docs site's, so the mapping
  * stays true across releases. Written once, never over a developer's own settings.
  */
 const SCHEMAS = "https://docs.unoverse.ai/schemas/nodes";
@@ -257,6 +257,22 @@ const NODE_SCHEMA_MAP = {
   [`${SCHEMAS.replace(/\/nodes$/, "/pipelines")}/config.schema.json`]: ["design/*/pipelines/*/config.yaml"],
   [`${SCHEMAS.replace(/\/nodes$/, "/pipelines")}/interface.schema.json`]: ["design/*/pipelines/*/interface.yaml"],
   [`${SCHEMAS.replace(/\/nodes$/, "/pipelines")}/test.schema.json`]: ["design/*/pipelines/*/test.yaml"],
+  // DESIGN (UNO-90): components, templates, apps, atoms and Agents, from the same site. A
+  // manifest is a different shape from a definition, so the definition globs refuse the name
+  // with `!(manifest)` (a negated ENTRY in this list is not honoured reliably by the YAML
+  // extension) and the manifest schema takes it. Atoms carry no manifest.
+  [`${SCHEMAS.replace(/\/nodes$/, "/design")}/unoverse.schema.json`]: [
+    "design/*/components/**/!(manifest).yaml",
+    "design/*/templates/**/!(manifest).yaml",
+    "design/*/apps/**/!(manifest).yaml",
+    "design/*/atoms/**/*.yaml",
+  ],
+  [`${SCHEMAS.replace(/\/nodes$/, "/design")}/manifest.schema.json`]: [
+    "design/*/components/**/manifest.yaml",
+    "design/*/templates/**/manifest.yaml",
+    "design/*/apps/**/manifest.yaml",
+  ],
+  [`${SCHEMAS.replace(/\/nodes$/, "/design")}/agent.schema.json`]: ["design/*/agents/*.yaml"],
 };
 export function writeEditorSettings(home, flat = false) {
   const dir = join(home, ".vscode");

package/local/source.ts

@@ -61,11 +61,16 @@ export function writableRoots(
  * work. Everything else is read-only, and the reason distinguishes the design system a
  * developer builds ON (normal, shown without a save button) from a path that has no
  * business being addressed at all.
+ *
+ * `designSystem` is the marketplace tier on disk when this checkout authors it (base
+ * paths.ts `marketplace`, the monorepo's packages/marketplace/definitions). It sits outside
+ * the project, and it is the design system a developer builds on, so it reads as installed.
  */
-export function writability(path: string, roots: string[], projectRoot: string): Writability {
+export function writability(path: string, roots: string[], projectRoot: string, designSystem?: string): Writability {
   const abs = resolve(path);
   if (roots.some((r) => within(r, abs))) return { writable: true };
-  // Inside the project but not in a writable root: the marketplace on disk, rx/_schema,
+  if (designSystem && within(resolve(designSystem), abs)) return { writable: false, reason: "installed" };
+  // Inside the project but not in a writable root: the marketplace on disk
   // or the legacy orgs/ container. Reading is the point; writing is what is refused.
   if (within(resolve(projectRoot), abs)) return { writable: false, reason: "installed" };
   // node_modules, or anywhere else entirely. The design system resolves here for a
@@ -98,14 +103,14 @@ const SOURCE_EXT = /\.(ya?ml|json|jsonc|md|mjs|js)$/;
  * `components/`), and a simple one is a single flat file. Both shapes are returned as a
  * list so the pane never has to know which it is looking at.
  */
-export function sourceFiles(folderOrFile: string, roots: string[], projectRoot: string): SourceFile[] {
+export function sourceFiles(folderOrFile: string, roots: string[], projectRoot: string, designSystem?: string): SourceFile[] {
   const abs = resolve(folderOrFile);
   if (!existsSync(abs)) return [];
   const out: SourceFile[] = [];
   const base = statSync(abs).isDirectory() ? abs : resolve(abs, "..");
 
   const add = (p: string) => {
-    const w = writability(p, roots, projectRoot);
+    const w = writability(p, roots, projectRoot, designSystem);
     out.push({ path: p, rel: relative(base, p) || p.split(sep).pop()!, writable: w.writable, reason: w.reason });
   };
 
@@ -160,9 +165,10 @@ export async function saveSource(
   roots: string[],
   projectRoot: string,
   lint: (designRoot: string) => Promise<{ problems: LintFinding[] }> | { problems: LintFinding[] },
+  designSystem?: string,
 ): Promise<SaveResult> {
   const abs = resolve(path);
-  const w = writability(abs, roots, projectRoot);
+  const w = writability(abs, roots, projectRoot, designSystem);
   if (!w.writable) {
     const why =
       w.reason === "installed"
@@ -215,10 +221,10 @@ export interface LintFinding {
 }
 
 /** One file's text, refused unless it is a file Studio would list. */
-export function readSource(path: string, roots: string[], projectRoot: string): { text: string; writable: boolean; reason?: ReadOnlyReason } | null {
+export function readSource(path: string, roots: string[], projectRoot: string, designSystem?: string): { text: string; writable: boolean; reason?: ReadOnlyReason } | null {
   const abs = resolve(path);
   if (!existsSync(abs) || !statSync(abs).isFile()) return null;
-  const w = writability(abs, roots, projectRoot);
+  const w = writability(abs, roots, projectRoot, designSystem);
   // A path outside the project entirely is not shown. The design system is, because
   // reading what you build on is the normal case.
   if (w.reason === "outside-project" && !abs.includes(`${sep}node_modules${sep}`)) return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unoverse-platform/studio",
-  "version": "0.1.109",
+  "version": "0.1.111",
   "type": "module",
   "description": "Unoverse Studio: the local authoring app. Reads your own rx/ folder, no backend.",
   "scripts": {

package/screens/DesignSystemView.tsx

@@ -319,7 +319,7 @@ export function DesignSystemView({
             {foundation ? (
               <>Tokens with an <OverrideMark /> are <b className="text-gray-900">{org}</b>&rsquo;s own; the rest are inherited from the design-system foundation.</>
             ) : (
-              <>Live tokens from the design-system foundation (<code>design/marketplace/styles</code>). Toggle the theme to restyle everything.</>
+              <>Live tokens from the design-system foundation (<code>packages/marketplace/definitions/styles</code>). Toggle the theme to restyle everything.</>
             )}
           </p>
           {current.body}

package/screens/EmptyLibrary.tsx

@@ -11,7 +11,7 @@
  * without needing to say so.
  *
  * AND IT MUST NAME THE RIGHT FOLDER. The old copy always said
- * `apps/unoverse/design/marketplace/blocks/`, which is the UNIVERSAL tier. Studio scoped to an org
+ * `packages/marketplace/definitions/blocks/`, which is the UNIVERSAL tier. Studio scoped to an org
  * is telling you where to author for THAT org, and sending someone to the universal
  * folder would have them write a platform-wide asset when they wanted their own.
  */

package/screens/PromptBlocksView.tsx

@@ -1,6 +1,6 @@
 /**
  * Prompt-blocks view — browse the reusable prompt-snippet library
- * (apps/unoverse/design/marketplace/blocks) served by the Unoverse server's /prompt-blocks
+ * (packages/marketplace/definitions/blocks) served by the Unoverse server's /prompt-blocks
  * route. Left: a navigator of blocks grouped by category. Right: the selected block's
  * metadata + full markdown content, with an enable toggle.
  *

package/src/App.tsx

@@ -79,8 +79,8 @@ function Shell() {
   const [variant, setVariant] = usePersistentState<string>("studio:variant", "light");
 
   const [projects, setProjects] = useState<string[]>([]);
-  // Set when this folder is one org's repo: there is no second project to create here.
-  const [orgRepo, setOrgRepo] = useState<string | null>(null);
+  // False in an org repo and in the platform repo: a new org is a new repo there.
+  const [canCreate, setCanCreate] = useState(true);
   const [theme, setTheme] = useState<ResolvedTheme | null>(null);
   const [foundation, setFoundation] = useState<ResolvedTheme | null>(null);
   const [error, setError] = useState<string | null>(null);
@@ -92,7 +92,7 @@ function Shell() {
       .then((r) => r.json())
       .then((d) => {
         setProjects(d.orgs ?? []);
-        setOrgRepo(d.orgRepo ?? null);
+        setCanCreate(d.canCreate !== false);
       })
       .catch((e) => setError(String(e)));
   useEffect(() => {
@@ -166,8 +166,8 @@ function Shell() {
                 {o}
               </option>
             ))}
-            {!orgRepo && <option disabled>──────────</option>}
-            {!orgRepo && <option value="__new">New project…</option>}
+            {canCreate && <option disabled>──────────</option>}
+            {canCreate && <option value="__new">New project…</option>}
           </select>
           <button
             onClick={() => setVariant(variant === "light" ? "dark" : "light")}

package/vendor/base/src/definitions/load/assets.ts

@@ -7,7 +7,7 @@
  */
 import { readFileSync, existsSync, statSync } from "fs";
 import { join, extname, dirname } from "path";
-import { projectDir } from "../registry/homes.js";
+import { marketplaceHome } from "../registry/homes.js";
 
 const ASSET_PREFIX = "assets/";
 const ASSET_MAX_BYTES = 256 * 1024;
@@ -29,7 +29,7 @@ function assetFile(from: string | undefined, src: string): string | null {
     if (existsSync(f)) return f;
     if (existsSync(join(dir, "styles"))) break;
   }
-  const shared = join(projectDir("marketplace"), "assets", rel);
+  const shared = join(marketplaceHome(), "assets", rel);
   return existsSync(shared) ? shared : null;
 }
 

package/vendor/base/src/definitions/registry/catalog.ts

@@ -353,7 +353,7 @@ export function loadComponentApp(id: string, org?: string): AppManifest | null {
  *  about which home a definition lives in. */
 export function loadTemplateApp(id: string, org?: string): AppManifest | null {
   const lower = id.toLowerCase();
-  // TWO TIERS, like components: the marketplace shelf (`design/marketplace/templates`) or
+  // TWO TIERS, like components: the marketplace shelf (`packages/marketplace/definitions/templates`) or
   // an org's own (`design/<org>/templates`). A shelf template carries no org, and its tool
   // id is the bare name.
   const home = org ? join(projectDir(org), "templates") : SHARED_DIR.template;

package/vendor/base/src/definitions/registry/datasetSql.ts

@@ -2,13 +2,9 @@
  * A DATASET'S TABLE, AS SQL (docs/unoverse/data/objects/dataset.md, PROPOSED 2026-09-18).
  *
  * The declaration in an object's folder is the schema, so nobody writes SQL and nobody edits a
- * schema by hand. This turns that declaration into a migration: a file a person reads, approves
- * and can reverse. Nothing here runs anything.
- *
- * WHERE IT GOES. Beside the declaration, as `dataset.sql`, and never into the migrations folder:
- * a dataset's table is made at publish by the platform's one door, and a file kept where the
- * migration runner finds it would be a step someone has to run. This is what ran, written down,
- * so a schema change can be read and compared and is never invisible.
+ * schema by hand. This turns that declaration into the statements the platform's one door runs
+ * (services/dataset/ensure.ts). Nothing here runs anything, and nothing here is ever written to
+ * a file: an org holds no SQL.
  *
  * THE POLICIES ARE PART OF THE TABLE, not a later step. They are written in the same statement
  * block, so a table cannot exist without them. A table created today and secured on Thursday is
@@ -100,11 +96,10 @@ export function datasetMigration(object: string, d: DatasetDefinition, org?: str
   const indexed = d.columns.filter((c) => c.indexed);
   const lines: string[] = [];
 
-  lines.push(`-- THE ${object.toUpperCase()} DATASET (docs/unoverse/data/objects/dataset.md).`);
-  lines.push(`-- Generated from ${org ? `design/${org}` : "design"}/objects/${object}/dataset.yaml. Do not edit by hand:`);
-  lines.push(`-- edit the declaration and generate it again, so the folder and the database never disagree.`);
-  if (d.description) lines.push(`--\n-- ${d.description.replace(/\s+/g, " ")}`);
-  lines.push("");
+  // NO CALLER TEXT IN A COMMENT (2026-10-04): the org's and the object's names once went into a
+  // header here, and a line break in either ended the comment and ran what followed as SQL. What
+  // this returns is run, so it holds only names the generator squeezed or the lint checked.
+  if (d.description) lines.push(`-- ${d.description.replace(/\s+/g, " ")}`);
   lines.push(`CREATE TABLE IF NOT EXISTS ${t} (`);
   lines.push(`  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),`);
   lines.push(`  -- WHOSE IT IS, and what it belongs to. Not the author's to name, and not optional:`);