speculos-toolkit 1.2.7 → 1.2.8

package/README.md

@@ -117,3 +117,21 @@ configuration into the CLI process itself.
 Docs: https://unified.speculos.ai · Source: https://github.com/speculosai/unified_platform
 
 MIT
+
+### Deployment consistency (1.2.8)
+
+An existing application's visibility changes only when the requested release is
+published. Allocation or a backend quota refusal preserves the live audience.
+Private code closes the frontend/backend gates before upload. A definitive bad
+frontend archive restores the prior audience; an ambiguous network failure keeps
+the application private until you retry. Use `npx -y speculos-toolkit@latest` for
+visibility changes to existing applications; older clients receive an upgrade
+message before any visibility change.
+
+The CLI carries an app-specific deployment ID through backend and frontend
+publication. Retried requests cannot publish different content under an already
+used ID. A backend release reserves its matching frontend while that release is
+unfinished, and a later dashboard visibility change invalidates an earlier
+allocation. After linking an anonymous terminal, its anonymous deployment and
+usage history is adopted into the verified account; pending adoption retries on
+history reads.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "speculos-toolkit",
-  "version": "1.2.7",
+  "version": "1.2.8",
   "description": "The Speculos toolkit for coding agents — deploy any frontend/backend to a live URL and build against your linked data connectors (BigQuery, Postgres, Snowflake, Salesforce, …). Built for Claude Code, Codex, Cursor, and friends.",
   "bin": {
     "speculos-toolkit": "bin/speculos-toolkit.js"

package/src/index.js

@@ -261,7 +261,7 @@ async function cmdDeploy(root, opts) {
   // ---- identity + slug allocation (mints a machine identity on first use) ----
   let alloc;
   try {
-    alloc = await client.allocate({ userId: identity && identity.userId, userKey: identity && identity.userKey, slug: d.slug, visibility: opts.visibility }, opts);
+    alloc = await client.allocate({ userId: identity && identity.userId, userKey: identity && identity.userKey, slug: d.slug, visibility: opts.visibility, deploymentProtocol: 2 }, opts);
   } catch (e) {
     // Readable first: emit() is JSON for the agent case, but a person who typed
     // --private with no account needs to see WHY in plain words.
@@ -287,6 +287,7 @@ async function cmdDeploy(root, opts) {
     try {
       created = await client.startBackend({
         userId, userKey, slug: d.slug, slugUuid, override,
+        deploymentId: alloc.deploymentId, finalizeVisibility: !d.frontend,
         backend: { tarB64: backendTar.base64, runtime: d.backend.runtime, startCmd: d.backend.startCmd, env: opts.env },
       }, opts);
     } catch (e) {
@@ -386,9 +387,10 @@ async function cmdDeploy(root, opts) {
     // directories and build output that copied a public/ credential file.
     const feTar = packDir(outDir, { dropBuildOutput: false, frontend: true, excludeDirs });
     let fe;
-    try { fe = await client.putFrontend({ userId, userKey, slug: d.slug, slugUuid, tarB64: feTar.base64, backendUrl: feBackendUrl, unsetBackend: !!opts.unsetBackend }, opts); }
+    try { fe = await client.putFrontend({ userId, userKey, slug: d.slug, slugUuid, deploymentId: alloc.deploymentId, tarB64: feTar.base64, backendUrl: feBackendUrl, unsetBackend: !!opts.unsetBackend }, opts); }
     catch (e) { emit({ ok: false, error: e.message, code: e.code || "FRONTEND" }); return 1; }
     frontendUrl = fe.frontendUrl;
+    if (fe.visibility) alloc.visibility = fe.visibility;
     if (fe.historyId) historyIds.push(fe.historyId);
   }