unoverse 0.1.1 → 0.1.2

package/lib/create.mjs

@@ -24,6 +24,18 @@ async function ask(rl, q) {
   return (await rl.question(`  ${q}`)).trim();
 }
 
+/** Operators hold the credential in two shapes: the raw dop_v1 API token, and the
+ * pre-encoded base64 `user:token` blob that docker config (and the starter's own
+ * `docr` setting) uses. Wrapping the second shape in base64 AGAIN is how a valid
+ * credential gets refused, so detect it and pass it through untouched. */
+function registryAuth(token) {
+  if (/^[A-Za-z0-9+/]+=*$/.test(token)) {
+    const decoded = Buffer.from(token, "base64").toString("utf8");
+    if (/^[\x20-\x7e]+:[\x20-\x7e]+$/.test(decoded)) return token;
+  }
+  return Buffer.from(`${token}:${token}`).toString("base64");
+}
+
 /** The gate: prove the token opens the registry before handing over the kit.
  * Docker registries use the bearer-realm flow: /v2/ answers 401 and names the
  * auth realm; presenting the token there yields 200 (valid) or 401 (refused). */
@@ -34,10 +46,9 @@ async function validateRegistryToken(token) {
     const realm = /realm="([^"]+)"/.exec(wa)?.[1];
     const service = /service="([^"]+)"/.exec(wa)?.[1] ?? REGISTRY_HOST;
     if (!realm) return probe.status === 200;
-    const auth = Buffer.from(`${token}:${token}`).toString("base64");
     const res = await fetch(
       `${realm}?service=${encodeURIComponent(service)}&scope=registry:catalog:*`,
-      { headers: { Authorization: `Basic ${auth}` } },
+      { headers: { Authorization: `Basic ${registryAuth(token)}` } },
     );
     return res.ok;
   } catch {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "unoverse",
-  "version": "0.1.1",
-  "description": "The Unoverse front door \u2014 create a Studio project, a universe, or a client app, and launch Studio.",
+  "version": "0.1.2",
+  "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",
   "bin": {
@@ -20,4 +20,4 @@
     "type": "git",
     "url": "git+https://github.com/unoverse-platform/unoverse.git"
   }
-}
+}