unoverse 0.1.136 → 0.1.138

package/operator/lib/setup.sh

@@ -200,20 +200,26 @@ cmd_setup() {
   read -p "  REDIS_TLS [$rd]: " REDIS_TLS
   REDIS_TLS="${REDIS_TLS:-$rd}"
 
-  # Auth (required — from admin)
-  # ASK BEFORE DEMANDING. A developer trying the platform locally has no identity
-  # provider yet, and AUTH_ISSUER was required, so init could not be completed at all.
+  # BRING YOUR OWN, or take the one the deploy makes. The question used to be "do you have
+  # an identity provider (Auth0/OIDC) to connect?", which reads as a requirement a
+  # developer must go and satisfy. It is not one: AWS provisions a Cognito user pool and
+  # writes AUTH_ISSUER, AUTH_CLIENT_ID and AUTH_AUDIENCE into .env.production itself
+  # (infra/aws/outputs.tf). Only DigitalOcean needs an issuer from you, and only at deploy
+  # time (deploy.sh _ensure_ground_config), where it asks.
   #
-  # This is a LOCAL switch only. INFRASTRUCTURE.md is explicit that auth is always on for
-  # a deployed universe ("there is no auth-off deployment"), and the platform enforces it
-  # rather than trusting this wizard: authConfig.ts refuses to start with auth off when
-  # NODE_ENV=production. So answering "no" here cannot produce an unprotected deployment.
+  # So the honest question is whether you are bringing one, and the default is no.
+  #
+  # Answering either way is a LOCAL switch only. INFRASTRUCTURE.md is explicit that there
+  # is no auth-off deployment, and the platform enforces that rather than trusting this
+  # wizard: authConfig.ts refuses to start with auth off when NODE_ENV=production.
   pull_status_line
   local cur_auth idp_prompt
   cur_auth=$(_env_cur AUTH_ENABLED)
   idp_prompt="[y/N]"
   [ "$cur_auth" = "true" ] && idp_prompt="[Y/n]"
-  read -r -p "  Do you have an identity provider (Auth0/OIDC) to connect? $idp_prompt " HAS_IDP
+  echo ""
+  info "Sign-in: deploying provides one. ${DIM}AWS creates a Cognito user pool; DigitalOcean asks for an issuer then${NC}"
+  read -r -p "  Are you bringing your own (Auth0/OIDC)? $idp_prompt " HAS_IDP
   echo ""
   if [ -z "$HAS_IDP" ] && [ "$cur_auth" = "true" ]; then HAS_IDP=y; fi
 
@@ -253,15 +259,16 @@ cmd_setup() {
     cur_aud="${cur_aud:-gravity-api}"
     read -p "  AUTH_AUDIENCE [$cur_aud]: " AUTH_AUDIENCE
     AUTH_AUDIENCE="${AUTH_AUDIENCE:-$cur_aud}"
+    ok "Your provider will be used, here and when you deploy"
   else
     AUTH_ENABLED=false
     AUTH_ISSUER=""
     AUTH_CLIENT_ID=""
     AUTH_AUDIENCE="gravity-api"
-    warn "Auth is OFF for local development"
-    info "Deploying needs it: ${BOLD}unoverse deploy${NC} runs with auth on, and the server refuses to start without it in production"
+    info "No sign-in locally. The deploy makes one when you ship this universe"
   fi
 
+
   # NOT ASKED. 4105 is the port docker-compose publishes, so locally this is a fact the
   # CLI already knows, and confirming it is not a question. A DEPLOYED universe gets its
   # own API_URL rendered into .env.production by Terraform, which never comes through here.
@@ -313,6 +320,11 @@ cmd_setup() {
   # Write .env
   cat > "$ROOT/.env" << ENVEOF
 # Written by unoverse create
+# LOCAL DEVELOPMENT, and it goes WITH AUTH_ENABLED below. Unset means production, where
+# auth-off is refused (authConfig.ts:63) and docker-compose.yml defaults NODE_ENV to
+# production — so omitting this line left a local universe that could not boot. A deployed
+# universe sets neither: Terraform renders .env.production with auth on.
+NODE_ENV=development
 DOCR_TOKEN=${DOCR_TOKEN}
 DOCR_USER=${DOCR_USER:-${DOCR_TOKEN}}
 DATABASE_URL=${DATABASE_URL}
@@ -331,6 +343,9 @@ OPENAI_API_KEY=${OPENAI_API_KEY}
 # back it up with the database. Kept on re-runs.
 CREDENTIAL_ENCRYPTION_KEY=${CREDENTIAL_ENCRYPTION_KEY}
 HYPERBROWSER_API_KEY=${HYPERBROWSER_API_KEY}
+# Marketplace catalogue to install from (docs/architecture/MARKETPLACE.md).
+# Empty = local items only. No default: a URL is never hardcoded.
+UNOVERSE_MARKETPLACE_URL=
 DOMAIN=
 ENVEOF
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.136",
+  "version": "0.1.138",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",