lakebed 0.0.4 → 0.0.5

package/README.md

@@ -144,7 +144,7 @@ LAKEBED_GITHUB_CLIENT_SECRET=...
 LAKEBED_SESSION_SECRET=...
 ```
 
-Claimed deploys are listed at `/deploys` on the deploy API origin. They keep the same resource limits as anonymous deploys. Anonymous deploys cannot use outbound `fetch`; after a deploy is claimed, `lakebed deploy` can update it with a source-backed server artifact that supports async handlers and server-side fetch.
+Claimed deploys are listed at `/deploys` on the deploy API origin. They keep the same resource limits as anonymous deploys. Anonymous deploys cannot use outbound `fetch`; after a deploy is claimed, `lakebed deploy` can update it with a source-backed server artifact that supports async handlers and server-side fetch. If the first deploy already needs server-side `fetch`, `lakebed deploy` creates a claim-required preview, saves its claim metadata, and prints the claim URL. Open that URL, then run `lakebed deploy` again to publish the real source-backed app.
 
 ## Admin Dashboard
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lakebed",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Agent-native CLI and runtime for building and deploying Lakebed capsules.",
   "license": "UNLICENSED",
   "type": "module",
@@ -29,7 +29,8 @@
     "src/runtime.js",
     "src/server.d.ts",
     "src/server.js",
-    "src/source-store.js"
+    "src/source-store.js",
+    "src/version.js"
   ],
   "exports": {
     "./package.json": "./package.json",
@@ -48,6 +49,9 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "check": "node --check src/cli.js && node --check src/runtime.js && node --check src/server.js && node --check src/client.js && node --check src/source-store.js && node --check src/anonymous.js && node --check src/anonymous-server.js && node --check src/auth.js && node --check src/version.js"
+  },
   "dependencies": {
     "esbuild": "^0.27.1",
     "pg": "^8.16.3",
@@ -56,8 +60,5 @@
   },
   "devDependencies": {
     "@types/ws": "^8.18.1"
-  },
-  "scripts": {
-    "check": "node --check src/cli.js && node --check src/runtime.js && node --check src/server.js && node --check src/client.js && node --check src/source-store.js && node --check src/anonymous.js && node --check src/anonymous-server.js && node --check src/auth.js"
   }
-}
+}

package/src/anonymous.js

@@ -1,8 +1,10 @@
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { readFile } from "node:fs/promises";
+import { LAKEBED_VERSION } from "./version.js";
 
 export const ANONYMOUS_ARTIFACT_FORMAT = "lakebed.capsule.artifact.v1";
 export const ANONYMOUS_ARTIFACT_MEDIA_TYPE = "application/vnd.lakebed.artifact+json";
+export { LAKEBED_VERSION };
 
 export const DEFAULT_ANONYMOUS_LIMITS = {
   artifactBytes: 1024 * 1024,
@@ -494,7 +496,7 @@ function compileServerToIr(app, schema) {
   return { diagnostics, mutations, queries };
 }
 
-export async function createAnonymousArtifact({ app, clientOut, sourceStore, version = "0.0.3" }) {
+export async function createAnonymousArtifact({ app, clientOut, sourceStore, version = LAKEBED_VERSION }) {
   const sourceFiles = await readSourceFiles(sourceStore);
   const diagnostics = forbiddenSourceDiagnostics(sourceFiles);
   const { diagnostics: schemaDiagnostics, schema } = serializeSchema(app.schema);
@@ -556,7 +558,7 @@ export async function createAnonymousArtifact({ app, clientOut, sourceStore, ver
   };
 }
 
-export async function createClaimedArtifact({ app, clientOut, serverOut, sourceStore, version = "0.0.3" }) {
+export async function createClaimedArtifact({ app, clientOut, serverOut, sourceStore, version = LAKEBED_VERSION }) {
   if (!serverOut) {
     throw new AnonymousCompilerError([diagnostic("server/index.ts", "Claimed deploys require a bundled server module.")]);
   }

package/src/cli.js

@@ -9,6 +9,7 @@ import { WebSocketServer } from "ws";
 import {
   ANONYMOUS_ARTIFACT_MEDIA_TYPE,
   AnonymousCompilerError,
+  LAKEBED_VERSION,
   createAnonymousArtifact,
   createClaimedArtifact,
   parseTtlSeconds,
@@ -17,7 +18,7 @@ import {
 import { startAnonymousServer } from "./anonymous-server.js";
 import { authFromUrl as resolveAuthFromUrl, createGuestAuth, requestOrigin, shooBaseUrlFromEnv } from "./auth.js";
 import { LogBuffer, StateCell } from "./runtime.js";
-import { createMemorySourceStoreFromDirectory, sourcePathDirname, sourcePathJoin } from "./source-store.js";
+import { MemorySourceStore, createMemorySourceStoreFromDirectory, sourcePathDirname, sourcePathJoin } from "./source-store.js";
 
 const root = process.cwd();
 const packageDir = resolve(dirname(fileURLToPath(import.meta.url)), "..");
@@ -601,6 +602,71 @@ async function buildAnonymousEnvelope(capsuleArg) {
   };
 }
 
+const claimRequiredDiagnosticMessages = new Set([
+  "Outbound fetch is disabled for anonymous deploys.",
+  "Async server handlers are not part of the anonymous IR yet. Use synchronous Lakebed database operations."
+]);
+
+function canDeployAfterClaim(error) {
+  return (
+    error instanceof AnonymousCompilerError &&
+    error.diagnostics.length > 0 &&
+    error.diagnostics.every((entry) => claimRequiredDiagnosticMessages.has(entry.message))
+  );
+}
+
+async function buildClaimRequiredEnvelope({ capsuleDir }) {
+  const sourceStore = new MemorySourceStore();
+  await sourceStore.writeFile(
+    "server/index.ts",
+    `import { capsule } from "lakebed/server";
+
+export default capsule({
+  name: "Claim Required",
+  schema: {},
+  queries: {},
+  mutations: {}
+});
+`
+  );
+  await sourceStore.writeFile(
+    "client/index.tsx",
+    `export function App() {
+  return (
+    <main className="min-h-screen bg-neutral-950 px-6 py-12 text-neutral-100">
+      <section className="mx-auto max-w-2xl rounded-lg border border-neutral-800 bg-neutral-900 p-8 shadow-2xl">
+        <p className="text-sm font-semibold uppercase tracking-wide text-cyan-300">Lakebed deploy</p>
+        <h1 className="mt-3 text-3xl font-semibold">Claim required</h1>
+        <p className="mt-4 text-neutral-300">
+          This capsule uses server-side fetch. Claim this deploy, then run lakebed deploy again to publish the app.
+        </p>
+      </section>
+    </main>
+  );
+}
+`
+  );
+  const built = await buildCapsule({
+    capsuleDir,
+    capsuleId: `claim-required-${Date.now()}`,
+    sourceStore
+  });
+  const artifact = await createAnonymousArtifact({
+    app: built.app,
+    clientOut: built.clientOut,
+    sourceStore
+  });
+
+  return {
+    artifact: artifact.artifact,
+    artifactHash: artifact.artifactHash,
+    clientBundle: artifact.clientBundle,
+    clientBundleHash: artifact.clientBundleHash,
+    claimRequired: true,
+    mediaType: ANONYMOUS_ARTIFACT_MEDIA_TYPE
+  };
+}
+
 async function buildClaimedEnvelope(capsuleArg) {
   const capsuleDir = resolveCapsuleDir(capsuleArg);
   const sourceStore = await createMemorySourceStoreFromDirectory(capsuleDir);
@@ -681,7 +747,7 @@ function deployRequestBody(envelope, ttl) {
   return JSON.stringify({
     artifact: envelope.artifact,
     clientBundle: envelope.clientBundle,
-    clientVersion: "0.0.3",
+    clientVersion: LAKEBED_VERSION,
     requestedTtlSeconds: ttl
   });
 }
@@ -752,12 +818,16 @@ async function deployCommand(args) {
   try {
     envelope = currentDeploy?.claimed ? await buildClaimedEnvelope(capsuleDir) : await buildAnonymousEnvelope(capsuleDir);
   } catch (error) {
-    if (error instanceof AnonymousCompilerError && canUpdate && !currentDeploy?.claimed) {
+    if (error instanceof AnonymousCompilerError && canUpdate && currentDeploy && !currentDeploy.claimed) {
       throw new Error(
         `${error.message}\n\nThis deploy is still anonymous. Claim it first, then run lakebed deploy again to use server-side fetch.`
       );
     }
-    throw error;
+    if ((!canUpdate || !currentDeploy) && canDeployAfterClaim(error)) {
+      envelope = await buildClaimRequiredEnvelope({ capsuleDir });
+    } else {
+      throw error;
+    }
   }
   const body = deployRequestBody(envelope, ttl);
   let mode = "created";
@@ -801,11 +871,15 @@ async function deployCommand(args) {
   }
 
   if (hasFlag(args, "--json")) {
-    console.log(JSON.stringify(deployed, null, 2));
+    console.log(JSON.stringify(envelope.claimRequired ? { ...deployed, claimRequired: true } : deployed, null, 2));
     return;
   }
 
-  console.log(`${mode === "updated" ? "Updated" : "Created"} anonymous preview.\n`);
+  if (envelope.claimRequired && mode !== "updated") {
+    console.log("Created claim-required preview.\n");
+  } else {
+    console.log(`${mode === "updated" ? "Updated" : "Created"} anonymous preview.\n`);
+  }
   console.log(`App:        ${deployed.url}`);
   console.log(`Expires:    ${deployed.expiresAt}`);
   if (deployed.claimUrl) {
@@ -818,6 +892,10 @@ async function deployCommand(args) {
   console.log(`  requests:        ${deployed.limits.requestsPerDay} / day`);
   console.log(`  mutations:       ${deployed.limits.mutationsPerDay} / day`);
   console.log(`  outbound fetch:  ${envelope.artifact.deployTarget === "claimed-source" ? "enabled" : "disabled"}`);
+  if (envelope.claimRequired) {
+    console.log("\nThis app needs a claimed deploy before server-side fetch can run.");
+    console.log("Open the claim URL, then run lakebed deploy again.");
+  }
 }
 
 async function claimCommand(args) {

package/src/version.js

@@ -0,0 +1 @@
+export const LAKEBED_VERSION = "0.0.5";