@unoverse-platform/studio 0.1.42 → 0.1.43

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unoverse-platform/studio",
-  "version": "0.1.42",
+  "version": "0.1.43",
   "type": "module",
   "description": "Unoverse Studio: the local authoring app. Reads your own rx/ folder, no backend.",
   "scripts": {

package/screens/TemplatesView.tsx

@@ -26,7 +26,7 @@ import { ComponentStore } from "@unoverse/sdk";
 import { StreamedUnoverseTemplate, useUnoverseConnection, computeAppWidth, resolveActiveLayout, visible, type ResolvedTheme, type UseVoiceServiceConfig } from "@unoverse/sdk";
 import { NativeAppHost } from "./NativeAppHost";
 import { inArrangement, viewOfSlice } from "./states";
-import { client, authedFetch, hasAuth, UNOVERSE_BASE } from "studio-host";
+import { client, authedFetch, hasAuth, UNOVERSE_BASE, liveUniverseUrl } from "studio-host";
 
 // Per-APP test conversation: each app chats in its own conversation id, so testing
 // one client's app never inherits another's agent history/memory (the "BPP answers
@@ -45,15 +45,23 @@ const chatIdFor = (app: string) => `demo-${app.toLowerCase()}-${SESSION_NONCE}`;
 // :4105 — since the workbench retired, uWS binds the public port DIRECTLY in dev, same
 // as prod (the retired workbench was :4205, the retired gateway :4100). Prod uses the
 // page origin.
-const CONN_DEFAULTS = { server: "localhost:4105", workflowId: "wf-r4jzo7", triggerNode: "inputtrigger1", token: "" };
-const CONN_KEY = "unoverse.workbench.conn";
+// THE LIVE SERVER IS NOT CONFIGURED HERE. The universe Studio is signed into (the
+// header connection, via studio-host's liveUniverseUrl) IS the live environment, so
+// being signed into one universe while previewing against another is impossible by
+// construction. Only with NO universe connected does the preview fall back to the
+// local dev platform. The old hardcoded default (`localhost:4105` + a sample
+// workflow id, persisted under "unoverse.workbench.conn") is retired: it kept green
+// "Connected" sessions against stale localhost stacks while the header showed a
+// production universe. Workflow + trigger come from the app's manifest binding; the
+// only thing persisted now is a hand-pasted JWT for auth-off dev servers.
+const LOCAL_DEV_SERVER = "localhost:4105";
+const CONN_DEFAULTS = { token: "" };
+const CONN_KEY = "unoverse.workbench.conn.v2";
 
 function loadConn(): typeof CONN_DEFAULTS {
   try {
     const saved = JSON.parse(localStorage.getItem(CONN_KEY) ?? "{}");
-    // Migration: drop retired ports (gateway :4100, workbench :4205) so the new default applies.
-    if (saved.server === "localhost:4100" || saved.server === "localhost:4205") delete saved.server;
-    return { ...CONN_DEFAULTS, ...saved };
+    return { token: typeof saved.token === "string" ? saved.token : "" };
   } catch {
     return { ...CONN_DEFAULTS };
   }
@@ -238,23 +246,30 @@ export function TemplatesView({
   const authToken = auth?.user?.access_token;
   const token = authToken || connCfg.token;
 
+  // The live server: the signed-in universe, else the local dev platform (see the
+  // CONN_DEFAULTS note). A universe URL is already an https origin; the bare local
+  // fallback gets http.
+  const universeUrl = liveUniverseUrl();
+  const liveServer = universeUrl ?? LOCAL_DEV_SERVER;
+  const liveBase = liveServer.includes("://") ? liveServer : `http://${liveServer}`;
+
   const config = useMemo(
     () => ({
-      apiUrl: `http://${connCfg.server}`,
+      apiUrl: liveBase,
       // Component stream rides the Unoverse `/stream` MCP endpoint (§5b). In the canvas
       // the path that reaches Unoverse is UNOVERSE_BASE (/unoverse-mcp proxy in dev, the
       // explicit gated URL in prod) — always absolute there. In local Studio UNOVERSE_BASE
       // is "" (a folder, not a universe; its origin serves no /stream), so the stream goes
       // to the CONNECTED universe — same base the apiUrl above uses. An empty string here
       // threw `Invalid URL` inside the SDK and killed the stream silently.
-      streamUrl: UNOVERSE_BASE || `http://${connCfg.server}`,
+      streamUrl: UNOVERSE_BASE || liveBase,
       // A real JWT makes the workbench a proper authenticated channel: it rides the
       // MCP stream's `Authorization` header and the REST `Authorization` header, so the
       // workflow gets full user context (incl. the email claim → CRM join). See
       // docs/AUTH_TOKEN_FLOW.md. Blank → no token (server must run with DISABLE_AUTH=true).
       getAccessToken: token ? async () => token : undefined,
     }),
-    [connCfg.server, token],
+    [liveBase, token],
   );
   // The APP decides which workflow runs: the selected template's manifest binding
   // (workflow + trigger) drives the connection. No manual entry — MCP decides.
@@ -395,7 +410,7 @@ export function TemplatesView({
             // START_CALL REST triggers the workflow on the gateway. The audio WS lane is
             // derived by the SDK from the client's server origin (see the renderer) — the
             // host passes NO wsUrl, so every host (incl. srcdoc iframes) is identical.
-            apiUrl: `http://${connCfg.server}`,
+            apiUrl: liveBase,
             getAccessToken: token ? async () => token : undefined,
             session: {
               userId: session.userId,
@@ -409,7 +424,7 @@ export function TemplatesView({
             store,
           }
         : undefined,
-    [isVoice, connCfg.server, token, session, store],
+    [isVoice, liveBase, token, session, store],
   );
 
   // "Load the app → it calls its workflow" — but ONLY for apps with autoTrigger (Mode B).
@@ -808,7 +823,7 @@ export function TemplatesView({
                         come from the selected app's manifest binding (no manual entry). */}
                     {(
                       [
-                        { label: "Server", value: connCfg.server, note: "environment" },
+                        { label: "Server", value: liveServer, note: universeUrl ? "signed-in universe" : "local dev (no universe connected)" },
                         { label: "Workflow", value: binding?.workflow ?? "— no app binding", note: "from app" },
                         { label: "Trigger node", value: binding?.trigger ?? "—", note: "from app" },
                       ]
@@ -1017,7 +1032,7 @@ export function TemplatesView({
                 /* NATIVE: the universe serves the app; Studio just hosts it. Same
                    ui:// shell ChatGPT loads, same boot contract, its own connections. */
                 <NativeAppHost
-                  server={UNOVERSE_BASE || `http://${connCfg.server}`}
+                  server={UNOVERSE_BASE || liveBase}
                   token={token}
                   templateId={`${selectedDef?.org ? `${selectedDef.org}/` : ""}${selected ?? ""}`}
                   userId={session.userId}

package/src/host.ts

@@ -21,6 +21,24 @@ export const UNOVERSE_BASE = "";
 /** No login offline. Kept so the shared screens can ask without branching on host. */
 export const hasAuth = false;
 
+/**
+ * The universe Studio is signed into (the header connection), or null when offline.
+ * THE LIVE PREVIEW'S SERVER. One source of truth: the same selection App.tsx keeps
+ * (`studio:universe` is its usePersistentState pointer into the saved universe list),
+ * so it is impossible to be signed into one universe and silently previewing against
+ * another. The shared screens fall back to the local dev platform only when no
+ * universe is connected.
+ */
+export function liveUniverseUrl(): string | null {
+  try {
+    const raw = localStorage.getItem("studio:universe");
+    const url = raw === null ? null : (JSON.parse(raw) as string | null);
+    return url || null;
+  } catch {
+    return null;
+  }
+}
+
 /**
  * SOURCE ACCESS: this host serves the files behind a definition, so the screens may show
  * the source view. Local Studio reads the developer's own folder, so it can.