unoverse 0.1.34 → 0.1.35

package/lib/create.mjs

@@ -31,6 +31,17 @@ async function ask(rl, q) {
  * pre-encoded base64 `user:token` blob that docker config (and the starter's own
  * `docr` setting) uses. Wrapping the second shape in base64 AGAIN is how a valid
  * credential gets refused, so detect it and pass it through untouched. */
+/** The raw dop_v1 token, whichever shape was pasted. docker login needs the raw form,
+ * so the base64 user:token blob is decoded before anything downstream sees it. */
+function rawToken(token) {
+  if (/^[A-Za-z0-9+/]+=*$/.test(token) && !token.startsWith("dop_v1_")) {
+    const decoded = Buffer.from(token, "base64").toString("utf8");
+    const m = /^([\x20-\x7e]+):[\x20-\x7e]+$/.exec(decoded);
+    if (m) return m[1];
+  }
+  return token;
+}
+
 function registryAuth(token) {
   if (/^[A-Za-z0-9+/]+=*$/.test(token)) {
     const decoded = Buffer.from(token, "base64").toString("utf8");
@@ -280,7 +291,7 @@ export async function create(nameArg) {
       const r = spawnSync("bash", [operatorScript, "init"], {
         stdio: "inherit",
         cwd: name,
-        env: { ...process.env, UNOVERSE_DOCR_TOKEN: token },
+        env: { ...process.env, UNOVERSE_DOCR_TOKEN: rawToken(token) },
       });
       if (r.status !== 0) {
         fail(`setup did not finish. Run 'unoverse start'${name === "." ? "" : ` in ./${name}`} to pick it back up`);

package/operator/lib/init.sh

@@ -160,13 +160,17 @@ cmd_init() {
 
   # THE DOWNLOAD STARTS NOW (see the block at the top of this file).
   if [ "$DOCKER_OK" = "1" ]; then
-    if echo "$DOCR_TOKEN" | docker login "$DOCR_REGISTRY" -u "$DOCR_TOKEN" --password-stdin >/dev/null 2>&1; then
+    local login_err
+    if login_err=$(echo "$DOCR_TOKEN" | docker login "$DOCR_REGISTRY" -u "$DOCR_TOKEN" --password-stdin 2>&1 >/dev/null); then
       start_background_pull
       echo ""
       echo -e "  ${CYAN}⬇${NC} ${DIM}Platform images are downloading in the background while you configure${NC}"
       echo ""
     else
-      warn "Registry login failed with this token. Images will not pull until it is fixed"
+      # The REASON, not just the fact: a swallowed docker error left "login failed"
+      # undiagnosable when create had just validated the same credential.
+      warn "Registry login failed. Images will not pull until it is fixed"
+      echo "$login_err" | grep -vi "warning" | head -3 | sed 's/^/      /'
     fi
   fi
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",