unoverse 0.0.1 → 0.1.1

package/README.md

@@ -1,6 +1,19 @@
 # unoverse
 
-**Reserved.** This name is held for the Unoverse platform CLI.
+The Unoverse front door.
 
-The real tool is coming soon. Until then, see the
-[Unoverse platform](https://github.com/unoverse-platform).
+```bash
+npm create unoverse@latest      # what are you building?
+```
+
+- **A Studio project** — author components, templates, nodes, and agent skills.
+  Most people start (and stay) here. Launches [Unoverse Studio](https://www.npmjs.com/package/@unoverse-platform/studio).
+- **A universe** — run the full platform on your own infrastructure. For
+  operators: requires a registry access token from your Unoverse admin.
+- **A client app** — a website or embed talking to an existing universe.
+
+Already have a universe? Its operator CLI lives inside it: `cd <universe> && ./unoverse`.
+
+```bash
+unoverse studio    # launch Studio any time
+```

package/bin/unoverse.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+/**
+ * unoverse — the front door.
+ *
+ * v0.1 owns FIRST CONTACT: `create` (what are you building?) and `studio`
+ * (launch the authoring app). Operating a universe stays with the `./unoverse`
+ * CLI inside the scaffolded kit; when this package absorbs it, that becomes
+ * transparent to the developer.
+ */
+import { existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { create } from "../lib/create.mjs";
+
+const [, , cmd, ...args] = process.argv;
+
+const HELP = `
+  ⬡ unoverse
+
+  unoverse create [name]   What are you building? Studio project · universe · client app
+  unoverse studio          Launch Unoverse Studio (authoring: components, nodes, skills)
+  unoverse help            This
+
+  Operating a running universe? That lives in your universe folder:
+    cd <your-universe> && ./unoverse
+`;
+
+switch (cmd) {
+  case "create":
+    await create(args[0]);
+    break;
+
+  case "studio": {
+    // Studio is its own npm app; this is a launcher, not a wrapper.
+    const r = spawnSync("npx", ["-y", "@unoverse-platform/studio@latest", ...args], {
+      stdio: "inherit",
+    });
+    process.exit(r.status ?? 0);
+  }
+
+  case "help":
+  case "--help":
+  case "-h":
+  case undefined:
+    console.log(HELP);
+    break;
+
+  case "--version":
+  case "-v": {
+    const { readFileSync } = await import("node:fs");
+    const { fileURLToPath } = await import("node:url");
+    const pkg = JSON.parse(
+      readFileSync(new URL("../package.json", import.meta.url), "utf8"),
+    );
+    console.log(pkg.version);
+    break;
+  }
+
+  default:
+    // A universe folder has its own operator CLI — point there rather than
+    // half-implementing its commands here (v0.2 absorbs them properly).
+    if (existsSync("./unoverse")) {
+      console.log(`\n  '${cmd}' is an operator command — run it in your universe:\n\n    ./unoverse ${cmd} ${args.join(" ")}\n`);
+    } else {
+      console.log(`\n  Unknown command: ${cmd}\n${HELP}`);
+    }
+    process.exit(1);
+}

package/lib/create.mjs

@@ -0,0 +1,137 @@
+/**
+ * `unoverse create` — first contact, as a question instead of a repo choice.
+ *
+ * Studio is the default path: most people author, few people operate. The
+ * universe (operator kit) is the professional tier and is GATED: it demands a
+ * valid registry access token BEFORE anything downloads, because the kit is
+ * useless without one — the platform's images only pull with it. Validation is
+ * a real auth round-trip against the registry, not a format check.
+ */
+import { createInterface } from "node:readline/promises";
+import { existsSync, mkdirSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+
+const REGISTRY_HOST = "registry.digitalocean.com";
+const STARTER_TARBALL =
+  "https://codeload.github.com/unoverse-platform/starter/tar.gz/refs/heads/main";
+
+const cyan = (s) => `\x1b[36m${s}\x1b[0m`;
+const dim = (s) => `\x1b[2m${s}\x1b[0m`;
+const ok = (s) => console.log(`  \x1b[32m✓\x1b[0m ${s}`);
+const fail = (s) => console.log(`  \x1b[31m✗\x1b[0m ${s}`);
+
+async function ask(rl, q) {
+  return (await rl.question(`  ${q}`)).trim();
+}
+
+/** The gate: prove the token opens the registry before handing over the kit.
+ * Docker registries use the bearer-realm flow: /v2/ answers 401 and names the
+ * auth realm; presenting the token there yields 200 (valid) or 401 (refused). */
+async function validateRegistryToken(token) {
+  try {
+    const probe = await fetch(`https://${REGISTRY_HOST}/v2/`);
+    const wa = probe.headers.get("www-authenticate") ?? "";
+    const realm = /realm="([^"]+)"/.exec(wa)?.[1];
+    const service = /service="([^"]+)"/.exec(wa)?.[1] ?? REGISTRY_HOST;
+    if (!realm) return probe.status === 200;
+    const auth = Buffer.from(`${token}:${token}`).toString("base64");
+    const res = await fetch(
+      `${realm}?service=${encodeURIComponent(service)}&scope=registry:catalog:*`,
+      { headers: { Authorization: `Basic ${auth}` } },
+    );
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+
+function download(dir, name) {
+  mkdirSync(dir, { recursive: true });
+  const r = spawnSync(
+    "sh",
+    ["-c", `curl -fsSL '${STARTER_TARBALL}' | tar -xz --strip-components=1 -C '${dir}'`],
+    { stdio: ["ignore", "inherit", "inherit"] },
+  );
+  if (r.status !== 0) throw new Error("download failed");
+  ok(`universe scaffolded at ./${name}`);
+}
+
+export async function create(nameArg) {
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    console.log(`\n  ${cyan("⬡ What are you building?")}\n`);
+    console.log("  1. A Studio project    — author components, nodes, agent skills (most people start here)");
+    console.log("  2. A universe          — run the full platform on your own infrastructure (operators)");
+    console.log("  3. A client app        — a website/embed against an existing universe\n");
+
+    const choice = (await ask(rl, "Choose [1]: ")) || "1";
+
+    if (choice === "1") {
+      console.log(`\n  ${dim("Launching Unoverse Studio — it creates and manages your projects.")}\n`);
+      rl.close();
+      const r = spawnSync("npx", ["-y", "@unoverse-platform/studio@latest"], { stdio: "inherit" });
+      process.exit(r.status ?? 0);
+    }
+
+    if (choice === "2") {
+      console.log(`\n  ${cyan("A universe needs a registry access token.")}`);
+      console.log(`  ${dim("It authorizes the platform's images — issued by your Unoverse admin.")}\n`);
+      const token = await ask(rl, "Registry access token: ");
+      if (!token) {
+        fail("no token — the universe kit is available to licensed operators");
+        process.exit(1);
+      }
+      process.stdout.write("  validating against the registry...");
+      const valid = await validateRegistryToken(token);
+      console.log("");
+      if (!valid) {
+        fail("that token was refused by the registry");
+        console.log(`  ${dim("Check it with your Unoverse admin, then try again.")}`);
+        process.exit(1);
+      }
+      ok("token accepted");
+
+      const name = nameArg || (await ask(rl, "Universe folder name [my-universe]: ")) || "my-universe";
+      if (existsSync(name)) {
+        fail(`./${name} already exists`);
+        process.exit(1);
+      }
+      download(name, name);
+      console.log(`
+  Next:
+    cd ${name}
+    ./unoverse init      ${dim("(setup wizard — have this token ready, it asks for it)")}
+    ./unoverse start
+
+  ${cyan("Build with Claude:")} open the folder in Claude Code — it ships an
+  authoring skill (components, nodes, agent skills) and a builder MCP that
+  constructs workflows live on your Canvas. Ask for what you want.
+`);
+      return;
+    }
+
+    if (choice === "3") {
+      const name = nameArg || (await ask(rl, "App folder name [my-client]: ")) || "my-client";
+      if (existsSync(name)) {
+        fail(`./${name} already exists`);
+        process.exit(1);
+      }
+      // The reference client ships inside the starter — take just that folder.
+      mkdirSync(name, { recursive: true });
+      const r = spawnSync(
+        "sh",
+        ["-c", `curl -fsSL '${STARTER_TARBALL}' | tar -xz --strip-components=3 -C '${name}' '*/packages/client'`],
+        { stdio: ["ignore", "inherit", "inherit"] },
+      );
+      if (r.status !== 0 ) throw new Error("download failed");
+      ok(`client app scaffolded at ./${name}`);
+      console.log(`\n  Next:\n    cd ${name}\n    npm install && npm run dev\n\n  ${cyan("Build with Claude:")} open the folder in Claude Code and ask for what you want.\n`);
+      return;
+    }
+
+    fail(`unknown choice: ${choice}`);
+    process.exit(1);
+  } finally {
+    rl.close();
+  }
+}

package/package.json

@@ -1,8 +1,23 @@
 {
   "name": "unoverse",
-  "version": "0.0.1",
-  "description": "Reserved for the Unoverse platform CLI — coming soon.",
-  "license": "SEE LICENSE IN README",
+  "version": "0.1.1",
+  "description": "The Unoverse front door \u2014 create a Studio project, a universe, or a client app, and launch Studio.",
+  "license": "SEE LICENSE IN README.md",
+  "type": "module",
+  "bin": {
+    "unoverse": "bin/unoverse.mjs"
+  },
+  "files": [
+    "bin",
+    "lib",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
   "homepage": "https://github.com/unoverse-platform",
-  "repository": { "type": "git", "url": "https://github.com/unoverse-platform/unoverse.git" }
-}
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/unoverse-platform/unoverse.git"
+  }
+}