unoverse 0.1.211 → 0.1.213

package/lib/login.mjs

@@ -174,7 +174,7 @@ export async function login(universeInput, { log = console.log } = {}) {
   if (!config.authEnabled) {
     throw new Error(
       `${origin} has authentication switched off, so there is no account to sign in with.\n` +
-        `  To deploy there, set UNOVERSE_TOKEN to a deploy key minted on the universe itself.`,
+        `  To deploy there, set UNOVERSE_TOKEN to a publish key minted on the universe itself.`,
     );
   }
   if (!config.issuer) throw new Error(`${origin} has no identity provider configured.`);
@@ -257,13 +257,13 @@ export async function tokenFor(origin, { interactive = true, log = console.log }
   } else if (!config.authEnabled) {
     throw new Error(
       `${origin} has authentication switched off.\n` +
-        `  To deploy there, set UNOVERSE_TOKEN to a deploy key minted on the universe itself.`,
+        `  To deploy there, set UNOVERSE_TOKEN to a publish key minted on the universe itself.`,
     );
   }
 
   if (!interactive || !process.stdin.isTTY) {
     throw new Error(
-      `No credential for ${origin}. In CI, set UNOVERSE_TOKEN to a deploy key.\n` +
+      `No credential for ${origin}. In CI, set UNOVERSE_TOKEN to a publish key.\n` +
         `  At a terminal, run: unoverse login ${origin}`,
     );
   }

package/lib/publish.mjs

@@ -1,5 +1,5 @@
 /**
- * unoverse publish — ship an asset workspace's items to its universe.
+ * unoverse deploy studio: ship an asset workspace's items to its universe.
  *
  * The terminal face of @unoverse-platform/base items/publish. The order is the safety:
  * LINT, then COMPARE (a dry-run per item against the universe), then a plan and a
@@ -49,7 +49,7 @@ const ask = async (question) => {
 };
 
 /**
- * `unoverse publish [project] [--to <universe>] [--dry-run] [--yes]`
+ * `unoverse deploy studio [project] [--to <universe> | --env <name>] [--dry-run] [--yes]`
  * Run from anywhere inside an asset workspace. bin/unoverse.mjs routes here only when
  * the nearest marker up from cwd is a design home.
  */
@@ -59,7 +59,9 @@ export async function publish(args) {
     const i = args.indexOf(`--${name}`);
     return i >= 0 ? args[i + 1] : undefined;
   };
-  const positional = args.find((a) => !a.startsWith("--") && a !== opt("to"));
+  // An option's value is never the project: `--env uat` must not read "uat" as one.
+  const optionValues = new Set(["to", "env"].map(opt).filter(Boolean));
+  const positional = args.find((a) => !a.startsWith("--") && !optionValues.has(a));
 
   const ws = findWorkspace();
   if (ws?.kind !== "assets") die("no design/ folder here or above. Run this inside your workspace.");
@@ -81,10 +83,20 @@ export async function publish(args) {
     die(`no project "${project}" in ${designRoot}. Found: ${projects.join(", ") || "none"}`);
   }
 
-  // ── which universe: --to overrides, unoverse.yaml remembers, the login answers,
-  //    and only a machine that knows nothing asks ─────────────────────────────
+  // ── which universe: --to overrides, --env names one from unoverse.yaml's
+  //    `environments:`, `universe:` is the default, the login answers, and only a
+  //    machine that knows nothing asks ─────────────────────────────────────────
   const config = await readConfig(ws.root);
-  let universe = opt("to") ?? config.universe;
+  const envName = opt("env");
+  let envUniverse;
+  if (envName && !opt("to")) {
+    envUniverse = config.environments?.[envName];
+    if (!envUniverse) {
+      const known = Object.keys(config.environments ?? {});
+      die(`no environment "${envName}" in unoverse.yaml. ${known.length ? `Found: ${known.join(", ")}` : "Add one:\n\n    environments:\n      " + envName + ": https://your-universe.example"}`);
+    }
+  }
+  let universe = opt("to") ?? envUniverse ?? config.universe;
   if (!universe) {
     // THE LOGIN ALREADY NAMED THE UNIVERSE. `unoverse login` takes an address and
     // keeps a session for it, so a machine signed in to exactly one universe has

package/lib/ui.mjs

@@ -22,7 +22,7 @@ export async function ask(rl, q) {
 }
 
 export const OPTIONS = [
-  ["Studio", "Components, agents and workflows", "Most people start here"],
+  ["Studio", "Components, apps, agents and nodes", "Most people start here"],
   ["Universe", "Run the platform yourself, on your own infrastructure"],
   ["Client", "A client accelerator that talks to unoverse"],
 ];

package/lib/workspace.mjs

@@ -6,10 +6,11 @@
  * reason studio keeps one: this package is plain node and cannot import base's TypeScript.
  * Keep the three in step.
  *
- * `unoverse.yaml` at the workspace root is the COMMITTED project config — today one key,
- * `universe:`, the publish target. It is config, not a secret: the whole team and CI
- * publish to the same place, which is exactly why it belongs in the repo. Credentials
- * never live here (they are per machine, in ~/.unoverse — see session.mjs).
+ * `unoverse.yaml` at the workspace root is the COMMITTED project config: `universe:`, the
+ * default deploy target, and `environments:`, named targets (`uat`, `production`) that CI
+ * picks with `--env`. It is config, not a secret: the whole team and CI deploy to the same
+ * places, which is exactly why it belongs in the repo. Credentials never live here (they
+ * are per machine in ~/.unoverse, see session.mjs, or a CI secret in UNOVERSE_TOKEN).
  */
 import { existsSync, renameSync, readFileSync, writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";

package/operator/docker-compose.yml

@@ -275,7 +275,6 @@ services:
       # Connection budget (INFRASTRUCTURE.md, Postgres law) — per-size values
       # rendered by the infra Terraform; unset in local dev = code defaults (10).
       - DB_POOL_ENGINE=${DB_POOL_ENGINE:-}
-      - DB_POOL_ENGINE_LEGACY=${DB_POOL_ENGINE_LEGACY:-}
       # Encrypts stored credentials at rest. WITHOUT this the engine falls back to a
       # key committed in source (SECURITY.md § Credential encryption at rest) — set it
       # in every deployment: openssl rand -base64 32

package/operator/infra/aws/main.tf

@@ -83,24 +83,21 @@ locals {
       instance    = "t3.xlarge"
       pg          = "db.t4g.small"
       redis       = "cache.t4g.micro"
-      pool_engine = 8
-      pool_legacy = 4
+      pool_engine = 12
       pool_memory = 4
     }
     medium = { # 8 vCPU / 32 GB
       instance    = "m6i.2xlarge"
       pg          = "db.t4g.medium"
       redis       = "cache.t4g.small"
-      pool_engine = 20
-      pool_legacy = 8
+      pool_engine = 28
       pool_memory = 10
     }
     large = { # 8 vCPU / 64 GB — memory-optimized: the engine is ONE event loop
       instance    = "r6i.2xlarge"
       pg          = "db.m6g.large"
       redis       = "cache.t4g.medium"
-      pool_engine = 40
-      pool_legacy = 12
+      pool_engine = 52
       pool_memory = 20
     }
   }

package/operator/infra/aws/outputs.tf

@@ -102,7 +102,6 @@ output "env_production" {
 
     # Connection budget (INFRASTRUCTURE.md, size = ${var.size})
     DB_POOL_ENGINE=${local.s.pool_engine}
-    DB_POOL_ENGINE_LEGACY=${local.s.pool_legacy}
     DB_POOL_MEMORY=${local.s.pool_memory}
 
     # Credential encryption at rest — per-deployment, generated by Terraform.

package/operator/infra/digitalocean/main.tf

@@ -27,9 +27,9 @@ locals {
       droplet = "s-4vcpu-16gb-amd" # 4 vCPU / 16 GB — the POC box
       pg      = "db-s-1vcpu-1gb"   # ~22 backend connections (~19 usable) — hence the pool
       redis   = "db-s-1vcpu-1gb"
-      # Connection budget: engine 8 / legacy 4 / memory 4 (+2 ops, +1 reserve = 19)
-      pool_engine = 8
-      pool_legacy = 4
+      # Connection budget: engine 12 / memory 4 (+2 ops, +1 reserve = 19). The engine took the
+      # removed legacy pool's 4 on 2026-09-29 (docs/migrations/DATABASE_ROOT_CAUSE.md).
+      pool_engine = 12
       pool_memory = 4
       pgbouncer   = 17 # backend connections the managed pool holds (leaves 5 direct: migrations + ops)
     }
@@ -37,8 +37,7 @@ locals {
       droplet     = "g-8vcpu-32gb"
       pg          = "db-s-2vcpu-4gb"
       redis       = "db-s-1vcpu-2gb"
-      pool_engine = 20
-      pool_legacy = 8
+      pool_engine = 28
       pool_memory = 10
       pgbouncer   = 40
     }
@@ -46,8 +45,7 @@ locals {
       droplet     = "m-8vcpu-64gb" # memory-optimized: the engine is ONE event loop — RAM, not cores
       pg          = "db-s-4vcpu-8gb"
       redis       = "db-s-2vcpu-4gb"
-      pool_engine = 40
-      pool_legacy = 12
+      pool_engine = 52
       pool_memory = 20
       pgbouncer   = 80
     }

package/operator/infra/digitalocean/outputs.tf

@@ -95,7 +95,6 @@ output "env_production" {
 
     # Connection budget (INFRASTRUCTURE.md, size = ${var.size})
     DB_POOL_ENGINE=${local.s.pool_engine}
-    DB_POOL_ENGINE_LEGACY=${local.s.pool_legacy}
     DB_POOL_MEMORY=${local.s.pool_memory}
 
     # Credential encryption at rest — per-deployment, generated by Terraform.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.211",
+  "version": "0.1.213",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",

package/vendor/base/lint/design/index.mjs

@@ -924,6 +924,15 @@ function componentNamesForFile(file) {
   const org = projectSegs.join("/");
   const cached = componentNamesCache.get(org);
   if (cached !== undefined) return cached;
+  // A PARTIAL SET IS WORSE THAN NO SET (the app-sizes trap below, same cause). A developer's
+  // project has no design system on disk, so DS falls back to DESIGN_ROOT and only the org's
+  // own names would be left: every marketplace name a preview uses (`card`) then reads as
+  // unknown, and a fresh Studio workspace failed lint on its own sample. Unverifiable here,
+  // so not asserted.
+  if (DS === DESIGN_ROOT) {
+    componentNamesCache.set(org, null);
+    return null;
+  }
   const dirs = [
     join(DS, "components"),
     join(DESIGN_ROOT, ...projectSegs, "components"),