unoverse 0.1.19 → 0.1.21

package/operator/lib/init.sh

@@ -103,7 +103,7 @@ cmd_init() {
     ok "Registry token carried over from create"
   else
     while true; do
-      read -p "  DOCR Token (from your Unoverse admin): " DOCR_TOKEN
+      read -p "  DOCR Token (from your Unoverse admin): " DOCR_TOKEN || { fail "no input (end of stream). Run unoverse init interactively"; exit 1; }
       if [[ "$DOCR_TOKEN" == dop_v1_* ]]; then
         break
       fi
@@ -111,9 +111,13 @@ cmd_init() {
     done
   fi
 
-  # Database (required — from admin)
+  # A DEFAULT, because "from your admin" is meaningless when you are the admin. The
+  # platform ships no database (docker-compose has no postgres), so this points at one
+  # you run. Enter takes the conventional local one.
+  DB_DEFAULT="postgres://postgres:postgres@localhost:5432/universe"
   while true; do
-    read -p "  DATABASE_URL (from your admin): " DATABASE_URL
+    read -p "  DATABASE_URL [${DB_DEFAULT}]: " DATABASE_URL || { fail "no input (end of stream). Run unoverse init interactively"; exit 1; }
+    DATABASE_URL="${DATABASE_URL:-$DB_DEFAULT}"
     if [ -n "$DATABASE_URL" ] && [[ "$DATABASE_URL" != *"user:password"* ]]; then
       break
     fi
@@ -148,28 +152,59 @@ cmd_init() {
   REDIS_TLS="${REDIS_TLS:-false}"
 
   # Auth (required — from admin)
-  while true; do
-    read -p "  AUTH_ISSUER (e.g. https://your-tenant.auth0.com): " AUTH_ISSUER
-    if [ -n "$AUTH_ISSUER" ] && [[ "$AUTH_ISSUER" != *"your-tenant"* ]]; then
-      break
-    fi
-    fail "AUTH_ISSUER is required. Get it from your Unoverse admin"
-  done
+  # ASK BEFORE DEMANDING. A developer trying the platform locally has no identity
+  # provider yet, and AUTH_ISSUER was required, so init could not be completed at all.
+  #
+  # This is a LOCAL switch only. INFRASTRUCTURE.md is explicit that auth is always on for
+  # a deployed universe ("there is no auth-off deployment"), and the platform enforces it
+  # rather than trusting this wizard: authConfig.ts refuses to start with auth off when
+  # NODE_ENV=production. So answering "no" here cannot produce an unprotected deployment.
+  echo ""
+  read -r -p "  Do you have an identity provider (Auth0/OIDC) to connect? [y/N] " HAS_IDP
+  echo ""
 
-  while true; do
-    read -p "  AUTH_CLIENT_ID: " AUTH_CLIENT_ID
-    if [ -n "$AUTH_CLIENT_ID" ] && [[ "$AUTH_CLIENT_ID" != *"your-"* ]]; then
-      break
-    fi
-    fail "AUTH_CLIENT_ID is required. Get it from your Unoverse admin"
-  done
+  if [[ "$HAS_IDP" =~ ^[Yy]$ ]]; then
+    AUTH_ENABLED=true
+    while true; do
+      read -p "  AUTH_ISSUER (e.g. https://your-tenant.auth0.com): " AUTH_ISSUER || { fail "no input (end of stream). Run unoverse init interactively"; exit 1; }
+      if [ -n "$AUTH_ISSUER" ] && [[ "$AUTH_ISSUER" == https://* ]]; then
+        break
+      fi
+      fail "AUTH_ISSUER must be an https:// URL from your identity provider"
+    done
+
+    while true; do
+      read -p "  AUTH_CLIENT_ID: " AUTH_CLIENT_ID || { fail "no input (end of stream). Run unoverse init interactively"; exit 1; }
+      if [ -n "$AUTH_CLIENT_ID" ] && [[ "$AUTH_CLIENT_ID" != *"your-"* ]]; then
+        break
+      fi
+      fail "AUTH_CLIENT_ID is required"
+    done
+
+    read -p "  AUTH_AUDIENCE [gravity-api]: " AUTH_AUDIENCE
+    AUTH_AUDIENCE="${AUTH_AUDIENCE:-gravity-api}"
+  else
+    AUTH_ENABLED=false
+    AUTH_ISSUER=""
+    AUTH_CLIENT_ID=""
+    AUTH_AUDIENCE="gravity-api"
+    warn "Auth is OFF for local development"
+    info "Deploying needs it: ${BOLD}unoverse deploy${NC} runs with auth on, and the server refuses to start without it in production"
+  fi
 
-  read -p "  AUTH_AUDIENCE [gravity-api]: " AUTH_AUDIENCE
-  AUTH_AUDIENCE="${AUTH_AUDIENCE:-gravity-api}"
+  # NOT ASKED. 4105 is the port docker-compose publishes, so locally this is a fact the
+  # CLI already knows, and confirming it is not a question. A DEPLOYED universe gets its
+  # own API_URL rendered into .env.production by Terraform, which never comes through here.
+  API_URL="http://localhost:4105"
 
-  # API URL
-  read -p "  API_URL [http://localhost:4105]: " API_URL
-  API_URL="${API_URL:-http://localhost:4105}"
+  # DERIVED FROM THE FOLDER, not hardcoded. Every key the memory server writes is
+  # prefixed with this, so two universes sharing one Redis and the same namespace mix
+  # their streams and caches. It used to be written as a literal `gravity` for every
+  # local universe, while Terraform rendered `universe` for deployed ones: same Redis,
+  # same prefix, silently interleaved.
+  REDIS_NAMESPACE=$(basename "$ROOT" | tr '[:upper:]' '[:lower:]' | tr -c 'a-z0-9-' '-' | sed 's/-*$//')
+  REDIS_NAMESPACE="${REDIS_NAMESPACE:-universe}"
+  ok "Redis namespace: ${BOLD}${REDIS_NAMESPACE}${NC}"
 
   # OpenAI (for Memory Server)
   read -p "  OPENAI_API_KEY (for Memory Server, blank to skip): " OPENAI_API_KEY
@@ -183,7 +218,8 @@ REDIS_HOST=${REDIS_HOST}
 REDIS_PORT=${REDIS_PORT}
 REDIS_PASSWORD=${REDIS_PASSWORD}
 REDIS_TLS=${REDIS_TLS}
-REDIS_NAMESPACE=gravity
+REDIS_NAMESPACE=${REDIS_NAMESPACE}
+AUTH_ENABLED=${AUTH_ENABLED}
 AUTH_ISSUER=${AUTH_ISSUER}
 AUTH_CLIENT_ID=${AUTH_CLIENT_ID}
 AUTH_AUDIENCE=${AUTH_AUDIENCE}

package/operator/lib/update.sh

@@ -7,6 +7,21 @@ cmd_update() {
   echo ""
   timer_start
 
+  # ── Refuse before doing half the job ───────────────────────────────────────────
+  # This used to run against an unconfigured folder with Docker down: compose warned
+  # about thirty blank variables, then failed on the daemon, after reporting that the
+  # code had updated. Ask first.
+  if [ ! -f "$ROOT/.env" ]; then
+    fail "This universe is not configured yet"
+    info "Run ${BOLD}unoverse init${NC} first"
+    exit 1
+  fi
+  if ! docker info >/dev/null 2>&1; then
+    fail "Docker is not running. Update pulls images, so it needs the daemon"
+    info "Start Docker Desktop, then run ${BOLD}unoverse update${NC} again"
+    exit 1
+  fi
+
   # ── Developer work is SAFE, by design ──────────────────────────────────────────
   # `update` refreshes the PLATFORM (its own tracked files) and NEVER touches a developer's
   # own work. Custom nodes live as UNTRACKED files (apps/unoverse/nodes/<yours>) — `git reset
@@ -27,7 +42,18 @@ cmd_update() {
     exit 1
   fi
 
-  # Step 1: Code — pull from customer's fork
+  # Step 1: Code — pull from customer's fork.
+  #
+  # NOT EVERY UNIVERSE IS A GIT CLONE. `unoverse create` extracts a tarball, so there is
+  # no remote to pull from and never was. That is not a failure: the images carry the
+  # platform, and the files here are yours. Skip the step and say which mode you are in,
+  # rather than running git commands that all fail and then reporting "Code updated".
+  if ! git -C "$ROOT" rev-parse --git-dir >/dev/null 2>&1; then
+    info "Not a git checkout, so there is no code to pull. Updating images only"
+    UNOVERSE_SKIP_GIT=1
+  fi
+
+  if [ "${UNOVERSE_SKIP_GIT:-}" != "1" ]; then
   printf "  ${DIM}●${NC} Pulling latest code..."
   local git_ok=true
   local git_log
@@ -89,6 +115,7 @@ cmd_update() {
       exit 1
     fi
   fi
+  fi   # UNOVERSE_SKIP_GIT
 
   # Step 2: Images — login to registry if DOCR_TOKEN is set
   local docr_token

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",