unoverse 0.1.14 → 0.1.16

package/lib/create.mjs

@@ -72,8 +72,13 @@ async function validateRegistryToken(token) {
 function resolveTarget(nameArg) {
   const dir = nameArg || ".";
   const here = dir === ".";
+  // DOTFILES DO NOT COUNT. A folder holding only .git, .claude, .vscode or .DS_Store is
+  // empty to the person standing in it: that is tool and editor config they had before
+  // they decided to build anything. Naming a few exceptions was not enough — a fresh
+  // folder opened in an editor already has .claude/ in it, and refusing that reads as
+  // the tool being broken.
   const existing = existsSync(dir)
-    ? readdirSync(dir).filter((f) => f !== ".git" && f !== ".DS_Store")
+    ? readdirSync(dir).filter((f) => !f.startsWith("."))
     : [];
   if (existing.length) {
     fail(here ? "this folder is not empty" : `./${dir} is not empty`);
@@ -207,6 +212,11 @@ export async function create(nameArg) {
     }
 
     if (choice === "2") {
+      // TARGET FIRST, credential second. This used to ask for the registry token, make a
+      // network round-trip to validate it, and only then discover the folder was not
+      // empty. Never ask for a credential you are about to throw away.
+      const name = resolveTarget(nameArg);
+
       console.log(`\n  ${cyan("A universe needs a registry access token.")}`);
       console.log(`  ${dim("It authorizes the platform's images. Your Unoverse admin issues it.")}\n`);
       const token = await ask(rl, "Registry access token: ");
@@ -224,7 +234,6 @@ export async function create(nameArg) {
       }
       ok("token accepted");
 
-      const name = resolveTarget(nameArg);
       download(name);
       ok(`universe scaffolded in ${label(name)}`);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",