unoverse 0.1.90 → 0.1.92

package/operator/infra/aws/outputs.tf

@@ -126,6 +126,9 @@ output "env_production" {
     OPENAI_API_KEY=${var.openai_api_key}
     HYPERBROWSER_API_KEY=${var.hyperbrowser_api_key}
 
+    # Marketplace catalogue (MARKETPLACE.md §5). Empty = local items only.
+    UNOVERSE_MARKETPLACE_URL=${var.marketplace_url}
+
     # Ingress. With a domain: DOMAIN drives every URL (compose derives
     # https://api.<domain>). Without one (POC): DOMAIN stays empty and the
     # explicit URLs below point at the ALB's DNS name over plain HTTP.

package/operator/infra/aws/terraform.tfvars.example

@@ -53,3 +53,7 @@ roles = [
 # that locks every credential users save in the platform. If it's lost, no backup
 # can bring them back. Never commit it; keep a safe copy with your database backups.
 # To change any value: edit this file and re-render. Never hand-edit the output.
+
+# Marketplace catalogue to install from (docs/architecture/MARKETPLACE.md).
+# Leave unset for local items only.
+# marketplace_url = "https://marketplace.example.com"

package/operator/infra/aws/variables.tf

@@ -91,3 +91,14 @@ variable "hyperbrowser_api_key" {
   default     = ""
   sensitive   = true
 }
+
+# The catalogue this universe installs from (MARKETPLACE.md §5). NO DEFAULT, deliberately:
+# a URL is never hardcoded and never a fallback, and absent config means no remote
+# catalogue — the universe serves what it has on disk and in its rows, which is the correct
+# state for development and for air-gapped estates. It reaches the marketplace at install
+# time and at no other time.
+variable "marketplace_url" {
+  description = "Base URL of the marketplace catalogue. Empty = local items only."
+  type        = string
+  default     = ""
+}

package/operator/infra/digitalocean/main.tf

@@ -381,9 +381,15 @@ resource "digitalocean_project" "universe" {
   description = "unoverse universe: ${var.name}"
   purpose     = "Web Application"
   environment = var.size == "small" ? "Development" : "Production"
+  # EVERY resource this stack creates, or the dashboard lies. The Canvas load balancer was
+  # added without being listed here, so it stayed in the account's default project while
+  # the rest of the universe sat in this one: two views each reporting "LOAD BALANCERS (1)"
+  # and no single place showing what this universe actually is. Anything added below must
+  # be added here in the same commit.
   resources = compact([
     digitalocean_droplet.app.urn,
     digitalocean_loadbalancer.public.urn,
+    local.has_domain && var.canvas_public ? digitalocean_loadbalancer.canvas[0].urn : "",
     digitalocean_database_cluster.redis.urn,
     local.provision_pg ? digitalocean_database_cluster.pg[0].urn : "",
   ])

package/operator/infra/digitalocean/outputs.tf

@@ -118,6 +118,9 @@ output "env_production" {
     OPENAI_API_KEY=${var.openai_api_key}
     HYPERBROWSER_API_KEY=${var.hyperbrowser_api_key}
 
+    # Marketplace catalogue (MARKETPLACE.md §5). Empty = local items only.
+    UNOVERSE_MARKETPLACE_URL=${var.marketplace_url}
+
     # Ingress. With a domain: DOMAIN drives every URL (compose derives
     # https://api.<domain>). Without one (POC): DOMAIN stays empty and the
     # explicit URLs below point at the load balancer's IP over plain HTTP.

package/operator/infra/digitalocean/terraform.tfvars.example

@@ -50,3 +50,7 @@ openai_api_key       = "sk-..."       # memory server + OpenAI nodes
 # that locks every credential users save in the platform. If it's lost, no backup
 # can bring them back. Never commit it; keep a safe copy with your database backups.
 # To change any value: edit this file and re-render. Never hand-edit the output.
+
+# Marketplace catalogue to install from (docs/architecture/MARKETPLACE.md).
+# Leave unset for local items only.
+# marketplace_url = "https://marketplace.example.com"

package/operator/infra/digitalocean/variables.tf

@@ -125,3 +125,14 @@ variable "hyperbrowser_api_key" {
   default     = ""
   sensitive   = true
 }
+
+# The catalogue this universe installs from (MARKETPLACE.md §5). NO DEFAULT, deliberately:
+# a URL is never hardcoded and never a fallback, and absent config means no remote
+# catalogue — the universe serves what it has on disk and in its rows, which is the correct
+# state for development and for air-gapped estates. It reaches the marketplace at install
+# time and at no other time.
+variable "marketplace_url" {
+  description = "Base URL of the marketplace catalogue. Empty = local items only."
+  type        = string
+  default     = ""
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.90",
+  "version": "0.1.92",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",