unoverse 0.1.142 → 0.1.144

package/operator/.env.example

@@ -67,3 +67,9 @@ AUTH_AUDIENCE=gravity-api
 
 # Quick no-login mode (local only — production refuses to start with it):
 # AUTH_ENABLED=false
+
+# Node memoization (docs/unoverseCopilot/EXECUTION_EFFICIENCY.md §3). OFF by default.
+# Cacheable nodes (capabilities.cacheable in the node YAML) reuse a prior run's output when
+# the fingerprint matches — saves re-running expensive parses/scrapes across test cycles.
+# WORKFLOW_NODE_MEMOIZATION=true
+# WORKFLOW_NODE_MEMOIZATION_TTL_MS=21600000

package/operator/lib/deploy.sh

@@ -918,6 +918,68 @@ EOF
 
   rm -f "$tmp_inventory"
 
+  # ── POST-DEPLOY SMOKE ───────────────────────────────────────────────────────
+  # The deployed stack, probed from the outside. SELF-CONTAINED (curl only): this script
+  # is vendored into the operator CLI and runs in a universe folder, so it can lean on no
+  # repo test suite. Every check is an outage that shipped and was found by hand: the
+  # blank canvas (uncompressed/uncached bundle, 2026-08-15), the no-login boot (empty
+  # auth config, 2026-08-14), and the engine→Postgres 500 behind a healthy-looking stack
+  # (Trusted Sources, 2026-08-13). The repo twin with more detail lives at
+  # apps/canvas/tests/smoke/deployed.test.ts.
+  # Runs on the plain deploy only — init/db/harden are not "the site is live" moments.
+  if [ -z "$subcommand" ] || [ "$subcommand" = "deploy" ]; then
+    local smoke_canvas smoke_api smoke_fail=0
+    smoke_canvas=$(terraform -chdir="$ROOT/infra/$cloud" output -raw canvas_url 2>/dev/null)
+    smoke_api=$(terraform -chdir="$ROOT/infra/$cloud" output -raw api_url 2>/dev/null)
+    if [ -n "$smoke_api" ]; then
+      echo ""
+      info "Smoke-testing the deployed stack ${DIM}($smoke_api)${NC}"
+      # WAIT FOR STEADY STATE FIRST. A restart is ~36s of boot plus however many
+      # health-check intervals the load balancer needs to re-admit the droplet, and
+      # during that window EVERY api-side probe answers 503. The smoke test measures
+      # the stack's steady state, not the race — so it starts at the first 200 from
+      # /health THROUGH the balancer (which proves both the app and re-admission), and
+      # only a stack that never gets there fails. Observed live 2026-08-16: a healthy
+      # v1.13.79 deploy reported four FAILs and "fix forward or roll back", all of it
+      # re-admission lag. A false stop after the irreversible half is the worst kind.
+      local smoke_wait=0
+      until [ "$(curl -s -m 5 -o /dev/null -w '%{http_code}' "$smoke_api/health")" = 200 ]; do
+        if [ "$smoke_wait" -ge 180 ]; then
+          echo -e "    ${RED}FAIL${NC} stack never became healthy (/health ≠ 200 after ${smoke_wait}s)"
+          smoke_fail=1
+          break
+        fi
+        [ "$smoke_wait" = 0 ] && echo -e "    ${DIM}waiting for /health through the balancer (boot + LB re-admission)...${NC}"
+        sleep 5; smoke_wait=$((smoke_wait + 5))
+      done
+      [ "$smoke_fail" = 0 ] && [ "$smoke_wait" -gt 0 ] && echo -e "    ${DIM}healthy after ${smoke_wait}s${NC}"
+      _smoke() { # name, then the test itself as "$@"
+        local name="$1"; shift
+        if "$@" >/dev/null 2>&1; then echo -e "    ${GREEN}ok${NC} $name"
+        else echo -e "    ${RED}FAIL${NC} $name"; smoke_fail=1; fi
+      }
+      # Universe discovery answers (the connector's first question).
+      _smoke "universe discovery" curl -sf -m 10 "$smoke_api/.well-known/unoverse-universe" -o /dev/null
+      # Embed doorway is served AND compressed (identity-encoded JS was a live outage).
+      _smoke "embed.js gzipped" sh -c "curl -sf -m 10 -H 'accept-encoding: gzip' -D - '$smoke_api/embed.js' -o /dev/null | grep -qi '^content-encoding: gzip'"
+      # MCP lane accepts an initialize (every external connector dies here first).
+      _smoke "MCP initialize" sh -c "curl -sf -m 10 -X POST '$smoke_api/mcp' -H 'content-type: application/json' -H 'accept: application/json, text/event-stream' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{\"protocolVersion\":\"2025-06-18\",\"capabilities\":{},\"clientInfo\":{\"name\":\"smoke\",\"version\":\"0\"}}}' -o /dev/null"
+      # Engine → Postgres canary: 200 (auth off) or 401 (auth on) prove the chain; a 500
+      # is the DB-unreachable incident that hides behind an otherwise healthy stack.
+      _smoke "engine reaches database" sh -c "code=\$(curl -s -m 10 -o /dev/null -w '%{http_code}' '$smoke_api/marketplace'); [ \"\$code\" = 200 ] || [ \"\$code\" = 401 ]"
+      if [ -n "$smoke_canvas" ]; then
+        # The canvas page and the hashed bundle it names: present, compressed, cacheable.
+        _smoke "canvas page + compressed bundle" sh -c "asset=\$(curl -sf -m 10 '$smoke_canvas/' | grep -o '/assets/index-[^\"]*\.js' | head -1); [ -n \"\$asset\" ] && curl -sf -m 20 -H 'accept-encoding: gzip' -D - \"$smoke_canvas\$asset\" -o /dev/null | grep -qi '^content-encoding: gzip'"
+        # Empty auth values in config.js = the no-login boot where every call 401s.
+        _smoke "canvas auth config present" sh -c "! curl -sf -m 10 '$smoke_canvas/config.js' | grep -qE '(issuer|clientId): *\"\"'"
+      fi
+      if [ "$smoke_fail" = 1 ]; then
+        fail "Deploy finished but the smoke test FAILED — the stack above is live and misbehaving. Fix forward or roll back."
+        exit 1
+      fi
+    fi
+  fi
+
   echo ""
   echo -e "  ${GREEN}${BOLD}Done${NC} ${DIM}in $(timer_elapsed)${NC}"
   echo ""

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.142",
+  "version": "0.1.144",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",