unoverse 0.1.31 → 0.1.33

package/bin/unoverse.mjs

@@ -103,26 +103,36 @@ switch (cmd) {
     break;
 
   case "update": {
-    // Refresh the repo-local authoring skill alongside the CLI, when we are in a
-    // universe. It is a copy by necessity (Claude Code discovers .claude/skills off
-    // disk), so the CLI's own update is what keeps it current.
+    // ONE update: the CLI from npm, then everything the CLI is responsible for keeping
+    // current — the repo-local authoring skill and, in a universe, the platform images.
+    // Those two steps run via `_postupdate` in the NEWLY installed binary, not this
+    // process: this file is being replaced mid-command, and copying the skill from the
+    // old install would pin it one release behind forever.
+    const r = spawnSync("npm", ["install", "-g", "unoverse@latest"], { stdio: "inherit" });
+    if (r.status === 0) {
+      const v = spawnSync("unoverse", ["-v"], { encoding: "utf8" }).stdout?.trim();
+      console.log(`\n  ✓ unoverse is now ${v || "up to date"}`);
+      spawnSync("unoverse", ["_postupdate"], { stdio: "inherit" });
+    } else {
+      console.log(`\n  ✗ global install failed (permissions?). Try:\n\n    sudo npm install -g unoverse@latest\n    npx unoverse@latest    # or skip the global install entirely\n`);
+    }
+    process.exit(r.status ?? 0);
+  }
+
+  case "_postupdate": {
+    // Runs AS the new version, in the developer's cwd. Outside a universe there is
+    // nothing to refresh, and silence is the right answer.
     if (UNIVERSE) {
       const skillSrc = join(dirname(fileURLToPath(import.meta.url)), "../operator/skills/unoverse-create");
       if (existsSync(skillSrc)) {
         const { cpSync, mkdirSync } = await import("node:fs");
         mkdirSync(join(UNIVERSE.root, ".claude/skills"), { recursive: true });
         cpSync(skillSrc, join(UNIVERSE.root, ".claude/skills/unoverse-create"), { recursive: true });
-        console.log("  ✓ authoring skill refreshed (.claude/skills/unoverse-create)");
+        console.log("  ✓ authoring skill refreshed");
       }
+      operator(UNIVERSE, ["refresh-images"]);
     }
-    const r = spawnSync("npm", ["install", "-g", "unoverse@latest"], { stdio: "inherit" });
-    if (r.status === 0) {
-      const v = spawnSync("unoverse", ["-v"], { encoding: "utf8" }).stdout?.trim();
-      console.log(`\n  ✓ unoverse is now ${v || "up to date"}\n`);
-    } else {
-      console.log(`\n  ✗ global install failed (permissions?). Try:\n\n    sudo npm install -g unoverse@latest\n    npx unoverse@latest    # or skip the global install entirely\n`);
-    }
-    process.exit(r.status ?? 0);
+    process.exit(0);
   }
 
   // `urls` stays as an alias: it shipped in 0.1.4/0.1.5 and is in people's fingers.

package/operator/lib/init.sh

@@ -256,6 +256,24 @@ cmd_init() {
     [ -z "$OPENAI_API_KEY" ] && warn "No OpenAI key: the universe starts, but agents, embeddings and memory will not work until one is in .env"
   fi
 
+  # Node vendor keys, OPTIONAL: only the matching nodes need them, nothing platform-level
+  # does. Asked so compose stops warning about them and so they land in .env with names.
+  local cur_hb cur_sa
+  cur_hb=$(_env_cur HYPERBROWSER_API_KEY)
+  if [ -n "$cur_hb" ]; then
+    read -p "  HYPERBROWSER_API_KEY [keep current]: " HYPERBROWSER_API_KEY
+    HYPERBROWSER_API_KEY="${HYPERBROWSER_API_KEY:-$cur_hb}"
+  else
+    read -p "  HYPERBROWSER_API_KEY (browser nodes, blank to skip): " HYPERBROWSER_API_KEY
+  fi
+  cur_sa=$(_env_cur SEARCHAPI_KEY)
+  if [ -n "$cur_sa" ]; then
+    read -p "  SEARCHAPI_KEY [keep current]: " SEARCHAPI_KEY
+    SEARCHAPI_KEY="${SEARCHAPI_KEY:-$cur_sa}"
+  else
+    read -p "  SEARCHAPI_KEY (web-search nodes, blank to skip): " SEARCHAPI_KEY
+  fi
+
   # Write .env
   cat > "$ROOT/.env" << ENVEOF
 # Generated by unoverse init
@@ -272,6 +290,8 @@ AUTH_CLIENT_ID=${AUTH_CLIENT_ID}
 AUTH_AUDIENCE=${AUTH_AUDIENCE}
 API_URL=${API_URL}
 OPENAI_API_KEY=${OPENAI_API_KEY}
+HYPERBROWSER_API_KEY=${HYPERBROWSER_API_KEY}
+SEARCHAPI_KEY=${SEARCHAPI_KEY}
 DOMAIN=
 ENVEOF
 
@@ -288,7 +308,7 @@ ENVEOF
       fail "DOCR login failed. Check your token"
       exit 1
     fi
-    cmd_pull
+    pull_missing_images
   else
     echo ""
     info "Skipped the registry login and image pull. ${BOLD}unoverse start${NC} does both once Docker is up"
@@ -306,11 +326,14 @@ ENVEOF
   # A database that is not reachable yet is not a failed setup — .env is written and
   # correct, so say so and move on rather than unwinding everything.
   echo ""
+  # SUBSHELL, deliberately: cmd_db_setup exits on "services not up yet", and an exit in a
+  # sourced function would take all of init with it — setup then reported failure for a
+  # situation that just means "migrations run on start". Which they now do (start.sh).
   if grep -q '^DATABASE_URL=' "$ROOT/.env" 2>/dev/null; then
-    if cmd_db_setup; then
+    if (cmd_db_setup); then
       ok "Database schema is up to date"
     else
-      warn "Could not reach the database yet. Run ${BOLD}unoverse check${NC} once it is up"
+      info "Migrations wait for the platform: ${BOLD}unoverse start${NC} applies them once services are up"
     fi
   fi
 
@@ -326,5 +349,6 @@ ENVEOF
   echo -e "    ${GREEN}unoverse where${NC}     Its addresses, once it is up"
   echo ""
   info "Run ${BOLD}unoverse check${NC} anytime to see if it is healthy"
+  info "Change a setting any time: edit ${BOLD}.env${NC} directly, or re-run ${BOLD}unoverse create${NC} (Enter keeps each current value)"
   echo ""
 }

package/operator/lib/start.sh

@@ -33,6 +33,24 @@ check_docker_file_sharing() {
   return 0
 }
 
+# Pull whatever images are missing, VISIBLY. docker's own per-layer progress bars are the
+# loading indication — a developer staring at a silent screen while gigabytes download
+# assumes the tool is hung. Exists because init used to call cmd_pull (deleted with
+# update.sh), so nothing pulled and nothing printed, and start buried compose's pull
+# inside a log file.
+pull_missing_images() {
+  local img missing=""
+  for img in $(docker compose -f "$ROOT/docker-compose.yml" config --images 2>/dev/null | sort -u); do
+    docker image inspect "$img" >/dev/null 2>&1 || missing="$missing $img"
+  done
+  [ -n "$missing" ] || return 0
+  echo ""
+  info "Pulling platform images (first run — a few minutes, progress below)..."
+  echo ""
+  docker compose -f "$ROOT/docker-compose.yml" --env-file "$ROOT/.env" pull     || { fail "Image pull failed. Check the registry token (re-run unoverse create to change it)"; exit 1; }
+  echo ""
+}
+
 cmd_start() {
   # Login to registry if DOCR_TOKEN is set
   local docr_token
@@ -44,6 +62,8 @@ cmd_start() {
   # `start --pull` refreshes the images first. This is where refreshing a LOCAL universe
   # lives now: `update` is the CLI's word and means only the CLI, wherever you type it.
   # A server is refreshed by `unoverse deploy` from your machine, not on the box.
+  pull_missing_images
+
   if [ "${1:-}" = "--pull" ]; then
     info "Pulling the latest images..."
     docker compose -f "$ROOT/docker-compose.yml" pull || { fail "Image pull failed"; exit 1; }
@@ -137,6 +157,13 @@ cmd_start() {
     # Generates + tsc-builds nodes/components, then reloads unoverse so they load.
     # Non-fatal: build_component_nodes returns (doesn't exit) if it can't run, so start still finishes.
     build_component_nodes
+    # Migrations, now that the unoverse service is up (they run from inside its
+    # container). This is what makes start the resume point after any interrupted
+    # setup: pull, boot, migrate, no third command to know. Subshell for the same
+    # reason init uses one: cmd_db_setup exits rather than returns on failure.
+    if ! (cmd_db_setup) >/dev/null 2>&1; then
+      warn "Migrations did not apply. Run ${BOLD}unoverse check${NC} to see why"
+    fi
     print_access_urls
     echo ""
     info "Run ${BOLD}unoverse open${NC}    to open Canvas in your browser"

package/operator/operator.sh

@@ -64,6 +64,22 @@ case "${1:-}" in
   check)     cmd_check && cmd_db_verify && cmd_doctor ;;
   dev)       cmd_dev ;;
   ground)    shift; cmd_ground "$@" ;;
+  refresh-images)
+    # internal: `unoverse update` runs this after updating the CLI. Pull newer images
+    # if the registry has them, and recreate only what is already running — an update
+    # never boots a stopped universe.
+    if [ ! -f "$ROOT/.env" ]; then
+      : # unconfigured: nothing to refresh
+    elif ! docker info >/dev/null 2>&1; then
+      info "Docker is not running. Images refresh on the next unoverse start"
+    else
+      info "Checking for newer platform images..."
+      docker compose -f "$ROOT/docker-compose.yml" --env-file "$ROOT/.env" pull || warn "image check failed (network/registry?)"
+      if [ -n "$(docker compose -f "$ROOT/docker-compose.yml" ps -q 2>/dev/null)" ]; then
+        docker compose -f "$ROOT/docker-compose.yml" --env-file "$ROOT/.env" up -d --remove-orphans >/dev/null 2>&1 \
+          && ok "Running services moved to the new images"
+      fi
+    fi ;;
   deploy)
     # `deploy marketplace` is PLATFORM-OWNER only: it publishes the marketplace package
     # to npm, which a starter developer never does (they INSTALL from the marketplace).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",