unoverse 0.1.165 → 0.1.166

package/lib/publish.mjs

@@ -155,9 +155,19 @@ export async function publish(args) {
   // Deploy is a SYNC: what left the workspace leaves the universe, said before it happens.
   for (const r of plan.remove ?? []) console.log(`  ${c.red}-${c.off} ${label(r)} ${c.dim}(no longer in this workspace — will be removed)${c.off}`);
 
+  if (plan.syncUnavailable) {
+    console.log(`  ${c.yellow}⚠${c.off} this universe cannot answer the sync check yet ${c.dim}(its server predates it)${c.off}`);
+    console.log(`    ${c.dim}items you deleted from the workspace were NOT reconciled. Update the universe`);
+    console.log(`    ${c.dim}(unoverse update on its box), then deploy again to remove them.${c.off}`);
+  }
+
   const toSend = plan.create.length + plan.update.length + (plan.remove?.length ?? 0);
   if (!toSend) {
-    console.log(`\n  ${c.green}✓${c.off} nothing to do, ${project} is up to date\n`);
+    if (plan.syncUnavailable) {
+      console.log(`\n  ${c.green}✓${c.off} nothing new to send ${c.dim}(deletions unchecked, see above)${c.off}\n`);
+    } else {
+      console.log(`\n  ${c.green}✓${c.off} nothing to do, ${project} is up to date\n`);
+    }
     process.exit(plan.refused.length ? 1 : 0);
   }
   if (flag("dry-run")) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.165",
+  "version": "0.1.166",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",

package/vendor/base/items/publish.js

@@ -24,7 +24,17 @@ import { collectProject } from "./collect.js";
 export async function lintForPublish(designRoot, project) {
     const { lintDefinitions } = await import("../lint/design/index.mjs");
     const result = lintDefinitions(designRoot);
-    const mine = result.problems.filter((p) => !p.file || p.file.includes(`/${project}/`) || !p.file.includes("/design/"));
+    /**
+     * SCOPED TO THE PROJECT BEING DEPLOYED, on paths that may be relative. The old
+     * check looked for "/design/" with a leading slash, which a relative path never
+     * has, so every other project's findings leaked through and a bpp comment blocked
+     * a lyceum deploy (observed live 2026-08-21). Boundary regexes hold for absolute
+     * and relative paths alike; findings outside the design tree (the tree itself,
+     * nodes, prompts) still always count.
+     */
+    const inDesign = (f) => /(^|\/)design\//.test(f);
+    const inProject = (f) => new RegExp(`(^|/)design/${project}(/|$)`).test(f);
+    const mine = result.problems.filter((p) => !p.file || !inDesign(p.file) || inProject(p.file));
     return { problems: mine, errors: mine.filter((p) => p.level === "error") };
 }
 /**
@@ -65,10 +75,18 @@ project = "", fetchImpl = fetch) {
                         plan.remove.push(r);
                 }
             }
-            // An older universe answers this op with an error: no removals proposed, the
-            // additive behavior every deploy had before. Never a failure.
+            else {
+                // An older universe answers this op with an error: no removals proposed, the
+                // additive behavior every deploy had before — but SAID, never silent. A deploy
+                // that could not check deletions and prints "up to date" is lying by omission
+                // (observed live 2026-08-21: an hour of retests against a server that could
+                // not answer, each one claiming there was nothing to do).
+                plan.syncUnavailable = true;
+            }
+        }
+        catch {
+            plan.syncUnavailable = true; /* unreachable universe also fails later, on the real sends */
         }
-        catch { /* unreachable universe fails later, on the real sends */ }
     }
     for (const item of items) {
         // ASK THE GATE, not the item store. `/api/items` is deliberately shut (§9.10), so a

package/vendor/base/lint/design/file.mjs

@@ -54,8 +54,27 @@ function lintFile(file) {
   // never a style the SDK resolves — token law governs the inside, not the envelope.
   if (!isFixture(file) && !isHook(file) && !isManifest(file))
     src.split("\n").forEach((line, i) => {
-      if (RAW_VALUE.test(line) && !/^\s*"?appWidth"?\s*:/.test(line))
-        report("error", file, `raw value. Token names only; add/scale a token in the org styles instead (LAW 1, docs/design/06): ${line.trim()}`, i + 1);
+      /**
+       * THE RULE JUDGES CODE, NEVER COMMENTARY. A comment explaining a contrast
+       * decision legitimately names the hex it rejected ("#E9F1FF dropped it to
+       * 1.14:1"), and scanning the raw line flagged exactly the best-documented
+       * files (observed live 2026-08-21: two comment hexes blocked a deploy).
+       * YAML comments start at an unquoted #, at line start or after whitespace;
+       * everything from there is prose. A quoted "#fff" VALUE stays visible to the
+       * rule, which is the whole point of the law.
+       */
+      let code = line, inS = false, inD = false;
+      for (let j = 0; j < line.length; j++) {
+        const ch = line[j];
+        if (ch === "'" && !inD) inS = !inS;
+        else if (ch === '"' && !inS) inD = !inD;
+        else if (ch === "#" && !inS && !inD && (j === 0 || /\s/.test(line[j - 1]))) {
+          code = line.slice(0, j);
+          break;
+        }
+      }
+      if (RAW_VALUE.test(code) && !/^\s*"?appWidth"?\s*:/.test(code))
+        report("error", file, `raw value. Token names only; add/scale a token in the org styles instead (LAW 1, docs/design/06): ${code.trim()}`, i + 1);
     });
 
   let json;