speculos-toolkit 1.0.0 → 1.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "speculos-toolkit",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "The Speculos toolkit for coding agents — deploy any frontend/backend to a live URL and build against your linked data connectors (BigQuery, Postgres, Snowflake, Salesforce, …). Built for Claude Code, Codex, Cursor, and friends.",
   "bin": {
     "speculos-toolkit": "bin/speculos-toolkit.js"

package/src/index.js

@@ -35,6 +35,11 @@ function parseArgs(argv) {
     else if (a === "--static" || a === "--no-build") opts.static = true;
     else if (a === "--relink" || a === "--force") opts.relink = true;
     else if (a === "--project") opts.project = true;
+    // Who can open the deployed app. A new app is private unless told
+    // otherwise; these also re-set an existing app on redeploy.
+    else if (a === "--private") opts.visibility = "private";
+    else if (a === "--org") opts.visibility = "org";
+    else if (a === "--public") opts.visibility = "public";
     else if (a === "--no-backend") opts.noBackend = true;
     else if (a === "--no-frontend") opts.noFrontend = true;
     else if (a === "--json") opts.json = true;
@@ -83,6 +88,8 @@ USAGE
                                       (read-only discovery, live queries)
 
 Frontends are hosted FREE at user-deployed.speculos.ai/<userId>/<slugUuid>.
+A NEW app is PRIVATE — deploy with --public (or flip it on the dashboard) to
+share it. A redeploy never changes the visibility of an app that is already live.
 Every Speculos account includes one backend app free (an isolated sandbox per app) —
 sign up at https://deploy.speculos.ai and run 'speculos-toolkit login'.
 Without an account a detected backend is skipped (frontend still ships free).
@@ -96,6 +103,9 @@ OPTIONS
   --build            force the frontend through its build step (vs serve as static)
   --static           serve the frontend dir as-is even if it has a build script
   --no-backend       frontend-only: skip backend even if one is detected
+  --private          only you can open the deployed app (DEFAULT for a new app)
+  --org              anyone in your org can open it
+  --public           anyone with the link can open it, no sign-in
   --no-frontend      backend-only: skip frontend even if one is detected
   --output <dir>     frontend build output dir (dist/build/out — auto-detected)
   --override <pw>    admin override password to deploy a backend without an account
@@ -176,7 +186,7 @@ async function cmdDeploy(root, opts) {
   // ---- identity + slug allocation (mints a machine identity on first use) ----
   let alloc;
   try {
-    alloc = await client.allocate({ userId: identity && identity.userId, userKey: identity && identity.userKey, slug: d.slug }, opts);
+    alloc = await client.allocate({ userId: identity && identity.userId, userKey: identity && identity.userKey, slug: d.slug, visibility: opts.visibility }, opts);
   } catch (e) { emit({ ok: false, error: e.message, code: e.code || "ALLOCATE" }); return 1; }
   if (alloc.userKey) { // freshly minted on the server
     identity = { userId: alloc.userId, userKey: alloc.userKey };
@@ -266,7 +276,17 @@ async function cmdDeploy(root, opts) {
   if (urls.frontend) log(opts, `  frontend: ${urls.frontend}`);
   if (urls.backend) log(opts, `  backend:  ${urls.backend}`);
   if (backendNote) log(opts, `  note: ${backendNote}`);
+  // Say who can open it. A new app is private now, and a URL printed with no
+  // word about visibility is the kind of thing people paste into Slack and
+  // then wonder why nobody can see it - or worse, assume it is private when
+  // they chose --public.
+  const visibility = alloc && alloc.visibility;
+  if (visibility === "private") log(opts, `  visibility: private — only you. Share with --public, --org, or the dashboard.`);
+  else if (visibility === "org") log(opts, `  visibility: org — anyone in your org can open it.`);
+  else if (visibility === "public") log(opts, `  visibility: public — anyone with the link.`);
+  if (alloc && alloc.visibilityNote) log(opts, `  note: ${alloc.visibilityNote}`);
   const out = { ok: true, slug: d.slug, userId, urls };
+  if (visibility) out.visibility = visibility;
   if (backendNote) out.backendNote = backendNote;
   emit({ ...out });
   return 0;