unoverse 0.1.36 → 0.1.37

package/lib/create.mjs

@@ -33,11 +33,22 @@ async function ask(rl, q) {
  * credential gets refused, so detect it and pass it through untouched. */
 /** The raw dop_v1 token, whichever shape was pasted. docker login needs the raw form,
  * so the base64 user:token blob is decoded before anything downstream sees it. */
-function rawToken(token) {
-  if (/^[A-Za-z0-9+/]+=*$/.test(token) && !token.startsWith("dop_v1_")) {
+function rawToken(input) {
+  // Whatever shape arrives, the dop_v1 token inside comes out:
+  //  - the raw token
+  //  - base64("token:token")            (API-token docker auth)
+  //  - base64(":token")                 (DO's READ-ONLY credential: EMPTY username —
+  //    the shape the downloaded Docker Credentials file actually carries, and the one
+  //    a required-username decoder silently passed through, so docker was handed the
+  //    whole blob as a username and answered "unauthorized")
+  //  - the whole credentials JSON pasted as-is
+  const token = input.trim().replace(/^["']|["']$/g, "");
+  const inline = /dop_v1_[0-9a-f]{64}/.exec(token);
+  if (inline) return inline[0];
+  if (/^[A-Za-z0-9+/]+=*$/.test(token)) {
     const decoded = Buffer.from(token, "base64").toString("utf8");
-    const m = /^([\x20-\x7e]+):[\x20-\x7e]+$/.exec(decoded);
-    if (m) return m[1];
+    const m = /^([\x20-\x7e]*):([\x20-\x7e]+)$/.exec(decoded);
+    if (m) return m[1] || m[2];
   }
   return token;
 }
@@ -283,7 +294,7 @@ export async function create(nameArg) {
           if (res.ok) { ok("token accepted"); break; }
           fail("the registry refused it:");
           console.log(`      ${dim(res.err)}`);
-          console.log(`  ${dim("Paste the registry token from your admin (dop_v1_…), or Ctrl-C to stop.")}\n`);
+          console.log(`  ${dim("Paste the credential exactly as your admin sent it (any shape works), or Ctrl-C to stop.")}\n`);
         } else {
           const valid = await validateRegistryToken(token);
           console.log("");

package/operator/lib/db-verify.sh

@@ -35,7 +35,7 @@ cmd_db_verify() {
       workflows: [
         "id", "name", "description", "nodes", "edges", "active",
         "execution_mode", "test_inputs", "umap_settings", "viewport",
-        "mcp_schema", "memory_config", "created_at", "updated_at"
+        "mcp_schema", "memory_config", "content_taxonomy", "created_at", "updated_at"
       ],
       workflow_executions: [
         "execution_id", "workflow_id", "status", "start_time", "end_time",

package/operator/lib/init.sh

@@ -151,10 +151,18 @@ cmd_init() {
       else
         read -p "  DOCR Token (from your Unoverse admin): " DOCR_TOKEN || { fail "no input (end of stream). Run unoverse init interactively"; exit 1; }
       fi
+      # Accept the credential in any shape: raw dop_v1, or the base64 blob from DO's
+      # downloaded Docker credentials (which does NOT start with dop_v1 — it wraps the
+      # token behind an empty username). Extract rather than lecture about the format.
+      if [[ "$DOCR_TOKEN" != dop_v1_* ]]; then
+        local decoded
+        decoded=$(printf '%s' "$DOCR_TOKEN" | base64 -d 2>/dev/null | tr -d '\0')
+        case "$decoded" in *dop_v1_*) DOCR_TOKEN="dop_v1_${decoded##*dop_v1_}";; esac
+      fi
       if [[ "$DOCR_TOKEN" == dop_v1_* ]]; then
         break
       fi
-      fail "Token should start with dop_v1_"
+      fail "That does not look like a registry credential. Paste it exactly as it was sent"
     done
   fi
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.36",
+  "version": "0.1.37",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",