lakebed 0.0.17 → 0.0.18

package/README.md

@@ -61,7 +61,7 @@ export default capsule({
 
 ## Auth
 
-Every app starts with local guest auth. To let users sign in with Google, render the built-in button. Lakebed always asks Shoo for profile fields so the app can show a useful identifier like `auth.email` or `auth.displayName`.
+Every app starts with local guest auth. To let users sign in with Google, render the built-in button. Lakebed asks Shoo for profile fields and exposes the user's name and avatar through `auth.displayName` and `auth.picture`.
 Check `auth.isLoading` before showing signed-out UI, because Lakebed may still be confirming a stored session.
 
 ```tsx
@@ -69,7 +69,7 @@ import { SignInWithGoogle, signOut, useAuth } from "lakebed/client";
 
 export function App() {
   const auth = useAuth();
-  const authLabel = auth.email ?? auth.displayName;
+  const authLabel = auth.displayName;
 
   if (auth.isLoading) {
     return <p>Checking session</p>;
@@ -78,7 +78,8 @@ export function App() {
   return auth.isGuest ? (
     <SignInWithGoogle />
   ) : (
-    <button type="button" onClick={() => signOut()}>
+    <button className="inline-flex items-center gap-2" type="button" onClick={() => signOut()}>
+      {auth.picture ? <img alt="" className="h-6 w-6 rounded-full" referrerPolicy="no-referrer" src={auth.picture} /> : null}
       Sign out {authLabel}
     </button>
   );
@@ -90,7 +91,7 @@ After sign-in, server handlers receive the verified Google identity through `ctx
 ```ts
 mutations: {
   save: mutation((ctx) => {
-    ctx.log.info("signed in user", { userId: ctx.auth.userId, email: ctx.auth.email });
+    ctx.log.info("signed in user", { userId: ctx.auth.userId, displayName: ctx.auth.displayName });
   });
 }
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lakebed",
-  "version": "0.0.17",
+  "version": "0.0.18",
   "description": "Agent-native CLI and runtime for building and deploying Lakebed capsules.",
   "license": "UNLICENSED",
   "type": "module",
@@ -52,9 +52,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "check": "node --check src/cli.js && node --check src/runtime.js && node --check src/server.js && node --check src/client.js && node --check src/source-store.js && node --check src/source-runtime.js && node --check src/source-runtime-worker.js && node --check src/source-runtime-loader.mjs && node --check src/anonymous.js && node --check src/anonymous-server.js && node --check src/auth.js && node --check src/version.js"
-  },
   "dependencies": {
     "esbuild": "^0.27.1",
     "pg": "^8.16.3",
@@ -63,5 +60,8 @@
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"
+  },
+  "scripts": {
+    "check": "node --check src/cli.js && node --check src/runtime.js && node --check src/server.js && node --check src/client.js && node --check src/source-store.js && node --check src/source-runtime.js && node --check src/source-runtime-worker.js && node --check src/source-runtime-loader.mjs && node --check src/anonymous.js && node --check src/anonymous-server.js && node --check src/auth.js && node --check src/version.js"
   }
-}
+}

package/src/anonymous.js

@@ -29,7 +29,7 @@ export const DEFAULT_ANONYMOUS_LIMITS = {
 };
 
 const expressionOps = new Set(["arg", "auth", "call", "row"]);
-const authFields = new Set(["displayName", "email", "emailVerified", "isAuthenticated", "isGuest", "name", "picture", "provider", "userId"]);
+const authFields = new Set(["displayName", "email", "emailVerified", "isAuthenticated", "isGuest", "picture", "provider", "userId"]);
 const sourceModuleCache = new Map();
 
 export class AnonymousCompilerError extends Error {
@@ -228,7 +228,6 @@ function createSymbolicAuth() {
     emailVerified: new SymbolicValue(["auth", "emailVerified"], true),
     isAuthenticated: new SymbolicValue(["auth", "isAuthenticated"], true),
     isGuest: new SymbolicValue(["auth", "isGuest"], false),
-    name: new SymbolicValue(["auth", "name"], "Trace Guest"),
     picture: new SymbolicValue(["auth", "picture"], "https://example.test/avatar.png"),
     provider: new SymbolicValue(["auth", "provider"], "google"),
     userId: new SymbolicValue(["auth", "userId"], "guest:trace")
@@ -248,6 +247,8 @@ function createSymbolicRow({ auth, idExpr, scanId, schema, tableName }) {
       row[fieldName] = auth.userId;
     } else if (fieldName === "authorName") {
       row[fieldName] = auth.displayName;
+    } else if (fieldName === "authorPicture") {
+      row[fieldName] = auth.picture;
     } else if (field.kind === "boolean") {
       row[fieldName] = true;
     } else {

package/src/auth.js

@@ -81,15 +81,14 @@ function authFromClaims(claims) {
     return null;
   }
 
-  const name = stringClaim(claims, "name");
+  const name = stringClaim(claims, "name")?.trim();
   const email = stringClaim(claims, "email");
   return {
-    displayName: name ?? email ?? "Google User",
+    displayName: name || "Google User",
     email,
     emailVerified: booleanClaim(claims, "email_verified"),
     isAuthenticated: true,
     isGuest: false,
-    name,
     picture: stringClaim(claims, "picture"),
     provider: "google",
     userId: `google:${pairwiseSub}`

package/src/cli.js

@@ -1609,11 +1609,35 @@ export default capsule({
     "client/index.tsx": `import { SignInWithGoogle, signOut, useAuth, useMutation, useQuery } from "lakebed/client";
 import { cleanTodoText, type Todo } from "../shared/todo";
 
+function AuthAvatar({ label, picture }: { label: string; picture?: string }) {
+  const initial = label.trim().slice(0, 1).toUpperCase() || "?";
+
+  if (picture) {
+    return (
+      <img
+        alt=""
+        className="h-7 w-7 shrink-0 rounded-full border border-neutral-800 bg-neutral-900 object-cover"
+        referrerPolicy="no-referrer"
+        src={picture}
+      />
+    );
+  }
+
+  return (
+    <span
+      aria-hidden="true"
+      className="flex h-7 w-7 shrink-0 items-center justify-center rounded-full border border-neutral-800 bg-neutral-900 text-xs font-medium text-neutral-300"
+    >
+      {initial}
+    </span>
+  );
+}
+
 export function App() {
   const auth = useAuth();
   const todos = useQuery<Todo[]>("todos");
   const addTodo = useMutation<[text: string], void>("addTodo");
-  const authLabel = auth.email ?? auth.displayName;
+  const authLabel = auth.displayName;
   const authStatus = auth.isLoading && auth.isGuest ? "checking session" : "signed in as " + authLabel;
 
   async function onSubmit(event: SubmitEvent) {
@@ -1633,11 +1657,14 @@ export function App() {
     <main className="min-h-screen bg-black px-6 py-10 text-white">
       <section className="mx-auto max-w-2xl">
         <div className="mb-3 flex items-center justify-between gap-3">
-          <p className="font-mono text-sm text-neutral-500">{authStatus}</p>
+          <div className="flex min-w-0 items-center gap-2">
+            {!auth.isLoading ? <AuthAvatar label={authLabel} picture={auth.picture} /> : null}
+            <p className="min-w-0 truncate font-mono text-sm text-neutral-500">{authStatus}</p>
+          </div>
           {!auth.isLoading && auth.isGuest ? (
-            <SignInWithGoogle className="border border-neutral-700 px-3 py-1.5 text-sm font-medium text-neutral-200 hover:border-white hover:text-white" />
+            <SignInWithGoogle className="shrink-0 border border-neutral-700 px-3 py-1.5 text-sm font-medium text-neutral-200 hover:border-white hover:text-white" />
           ) : !auth.isLoading ? (
-            <button className="text-sm text-neutral-400 hover:text-white" type="button" onClick={() => signOut()}>
+            <button className="shrink-0 text-sm text-neutral-400 hover:text-white" type="button" onClick={() => signOut()}>
               Sign out
             </button>
           ) : null}

package/src/client.d.ts

@@ -9,7 +9,6 @@ export type Auth = {
   isLoading?: boolean;
   email?: string;
   emailVerified?: boolean;
-  name?: string;
   picture?: string;
 };
 

package/src/client.js

@@ -349,13 +349,13 @@ function createGoogleAuthFromToken(token) {
     return null;
   }
 
+  const displayName = typeof claims.name === "string" && claims.name.trim() ? claims.name.trim() : "Google User";
   return {
-    displayName: claims.name ?? claims.email ?? "Google User",
+    displayName,
     email: claims.email,
     emailVerified: claims.email_verified,
     isAuthenticated: true,
     isGuest: false,
-    name: claims.name,
     picture: claims.picture,
     provider: "google",
     userId: `google:${pairwiseSub}`

package/src/server.d.ts

@@ -17,7 +17,6 @@ export type AuthContext = {
   isAuthenticated: boolean;
   email?: string;
   emailVerified?: boolean;
-  name?: string;
   picture?: string;
 };
 

package/src/version.js

@@ -1 +1 @@
-export const LAKEBED_VERSION = "0.0.17";
+export const LAKEBED_VERSION = "0.0.18";