unoverse 0.1.141 → 0.1.143

package/lib/create/download.mjs

@@ -7,11 +7,16 @@ import { spawnSync } from "node:child_process";
 export const STARTER_TARBALL =
   "https://codeload.github.com/unoverse-platform/starter/tar.gz/refs/heads/main";
 
-export function download(dir, stripComponents = 1, filter = "") {
+// The CLIENT STARTER has its own public repo. It used to be a folder inside the starter,
+// which meant handing someone the whole operator kit to give them one web page.
+export const CLIENT_TARBALL =
+  "https://codeload.github.com/unoverse-platform/client/tar.gz/refs/heads/main";
+
+export function download(dir, stripComponents = 1, filter = "", tarball = STARTER_TARBALL) {
   mkdirSync(dir, { recursive: true });
   const r = spawnSync(
     "sh",
-    ["-c", `curl -fsSL '${STARTER_TARBALL}' | tar -xz --strip-components=${stripComponents} -C '${dir}' ${filter}`],
+    ["-c", `curl -fsSL '${tarball}' | tar -xz --strip-components=${stripComponents} -C '${dir}' ${filter}`],
     { stdio: ["ignore", "inherit", "inherit"] },
   );
   if (r.status !== 0) throw new Error("download failed");

package/lib/create/index.mjs

@@ -15,7 +15,7 @@ import { spawnSync } from "node:child_process";
 import { cyan, dim, ok, fail, ask, select } from "../ui.mjs";
 import { parseCredential, validateRegistryToken, dockerUp, dockerLogin } from "./credential.mjs";
 import { resolveTarget, label } from "./target.mjs";
-import { download } from "./download.mjs";
+import { download, CLIENT_TARBALL } from "./download.mjs";
 
 export async function create(nameArg) {
   console.log(`\n  ${cyan("⬡ What are you building?")}\n`);
@@ -137,10 +137,21 @@ export async function create(nameArg) {
 
     if (choice === "3") {
       const name = resolveTarget(nameArg);
-      // The reference client ships inside the starter — take just that folder.
-      download(name, 3, "'*/packages/client'");
-      ok(`client app scaffolded in ${label(name)}`);
-      console.log(`\n  Next:${name === "." ? "" : `\n    cd ${name}`}\n    npm install && npm run dev\n\n  ${cyan("Build with Claude:")} open this folder in Claude Code and describe what you want, in plain words.\n`);
+      // Its own public repo, so the whole tree IS the project: one strip level, no filter.
+      download(name, 1, "", CLIENT_TARBALL);
+      ok(`client scaffolded in ${label(name)}`);
+      console.log(`
+  Next:${name === "." ? "" : `
+    cd ${name}`}
+    npm install
+    cp .env.example .env      ${dim("# your universe, and which app to load")}
+    npm run dev
+
+  The README documents every option: the script tag's attributes, how to hand it
+  your login, and how to open it from your own buttons.
+
+  ${cyan("Docs:")} https://docs.unoverse.ai
+`);
       return;
     }
 

package/operator/.env.example

@@ -67,3 +67,9 @@ AUTH_AUDIENCE=gravity-api
 
 # Quick no-login mode (local only — production refuses to start with it):
 # AUTH_ENABLED=false
+
+# Node memoization (docs/unoverseCopilot/EXECUTION_EFFICIENCY.md §3). OFF by default.
+# Cacheable nodes (capabilities.cacheable in the node YAML) reuse a prior run's output when
+# the fingerprint matches — saves re-running expensive parses/scrapes across test cycles.
+# WORKFLOW_NODE_MEMOIZATION=true
+# WORKFLOW_NODE_MEMOIZATION_TTL_MS=21600000

package/operator/lib/db-verify.sh

@@ -96,7 +96,18 @@ cmd_db_verify() {
       dictionary_clusters: [
         "cluster_id", "workflow_id", "parent_id", "depth", "name", "description",
         "name_embedding", "medoid_id", "terms", "member_count", "umap_x", "umap_y",
-        "umap_z", "radius", "created_at", "updated_at"
+        "umap_z", "radius", "created_at", "updated_at",
+        "region_id", "carried_overlap", "derived_from", "name_locked", "locked_at",
+        "locked_by", "member_ids"
+      ],
+      user_region_events: [
+        "id", "workflow_id", "user_id", "region_id", "region_name", "stage",
+        "source", "evidence", "occurred_at"
+      ],
+      dictionary_regions: [
+        "region_id", "workflow_id", "depth", "name", "description", "name_locked",
+        "locked_at", "locked_by", "stage", "stage_set_by", "needs_review",
+        "derived_from", "first_seen", "last_seen", "closed_at"
       ],
       dictionary_content_chunks: [
         "chunk_id", "text", "source_url", "source_type", "metadata",

package/operator/lib/deploy.sh

@@ -918,6 +918,49 @@ EOF
 
   rm -f "$tmp_inventory"
 
+  # ── POST-DEPLOY SMOKE ───────────────────────────────────────────────────────
+  # The deployed stack, probed from the outside. SELF-CONTAINED (curl only): this script
+  # is vendored into the operator CLI and runs in a universe folder, so it can lean on no
+  # repo test suite. Every check is an outage that shipped and was found by hand: the
+  # blank canvas (uncompressed/uncached bundle, 2026-08-15), the no-login boot (empty
+  # auth config, 2026-08-14), and the engine→Postgres 500 behind a healthy-looking stack
+  # (Trusted Sources, 2026-08-13). The repo twin with more detail lives at
+  # apps/canvas/tests/smoke/deployed.test.ts.
+  # Runs on the plain deploy only — init/db/harden are not "the site is live" moments.
+  if [ -z "$subcommand" ] || [ "$subcommand" = "deploy" ]; then
+    local smoke_canvas smoke_api smoke_fail=0
+    smoke_canvas=$(terraform -chdir="$ROOT/infra/$cloud" output -raw canvas_url 2>/dev/null)
+    smoke_api=$(terraform -chdir="$ROOT/infra/$cloud" output -raw api_url 2>/dev/null)
+    if [ -n "$smoke_api" ]; then
+      echo ""
+      info "Smoke-testing the deployed stack ${DIM}($smoke_api)${NC}"
+      _smoke() { # name, then the test itself as "$@"
+        local name="$1"; shift
+        if "$@" >/dev/null 2>&1; then echo -e "    ${GREEN}ok${NC} $name"
+        else echo -e "    ${RED}FAIL${NC} $name"; smoke_fail=1; fi
+      }
+      # Universe discovery answers (the connector's first question).
+      _smoke "universe discovery" curl -sf -m 10 "$smoke_api/.well-known/unoverse-universe" -o /dev/null
+      # Embed doorway is served AND compressed (identity-encoded JS was a live outage).
+      _smoke "embed.js gzipped" sh -c "curl -sf -m 10 -H 'accept-encoding: gzip' -D - '$smoke_api/embed.js' -o /dev/null | grep -qi '^content-encoding: gzip'"
+      # MCP lane accepts an initialize (every external connector dies here first).
+      _smoke "MCP initialize" sh -c "curl -sf -m 10 -X POST '$smoke_api/mcp' -H 'content-type: application/json' -H 'accept: application/json, text/event-stream' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2025-06-18\",\"capabilities\":{},\"clientInfo\":{\"name\":\"smoke\",\"version\":\"0\"}}}' -o /dev/null"
+      # Engine → Postgres canary: 200 (auth off) or 401 (auth on) prove the chain; a 500
+      # is the DB-unreachable incident that hides behind an otherwise healthy stack.
+      _smoke "engine reaches database" sh -c "code=\$(curl -s -m 10 -o /dev/null -w '%{http_code}' '$smoke_api/marketplace'); [ \"\$code\" = 200 ] || [ \"\$code\" = 401 ]"
+      if [ -n "$smoke_canvas" ]; then
+        # The canvas page and the hashed bundle it names: present, compressed, cacheable.
+        _smoke "canvas page + compressed bundle" sh -c "asset=\$(curl -sf -m 10 '$smoke_canvas/' | grep -o '/assets/index-[^\"]*\.js' | head -1); [ -n \"\$asset\" ] && curl -sf -m 20 -H 'accept-encoding: gzip' -D - \"$smoke_canvas\$asset\" -o /dev/null | grep -qi '^content-encoding: gzip'"
+        # Empty auth values in config.js = the no-login boot where every call 401s.
+        _smoke "canvas auth config present" sh -c "! curl -sf -m 10 '$smoke_canvas/config.js' | grep -qE '(issuer|clientId): *\"\"'"
+      fi
+      if [ "$smoke_fail" = 1 ]; then
+        fail "Deploy finished but the smoke test FAILED — the stack above is live and misbehaving. Fix forward or roll back."
+        exit 1
+      fi
+    fi
+  fi
+
   echo ""
   echo -e "  ${GREEN}${BOLD}Done${NC} ${DIM}in $(timer_elapsed)${NC}"
   echo ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.141",
+  "version": "0.1.143",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",