@base44-preview/cli 0.1.22-pr.644.52a9e2d → 0.1.22-pr.644.73e28ed

package/dist/assets/backend-runtime/exec.ts

@@ -12,10 +12,8 @@
  * - BASE44_PRIVILEGED: When "true", adds the X-Bypass-RLS header (bypass RLS)
  * - BASE44_DATA_ENV: When set, adds the X-Data-Env header (target data environment)
  * - BASE44_SERVICE_TOKEN: When set, passed as `serviceToken` (enables `base44.asServiceRole`)
- * - BASE44_EXTRA_HEADERS: When set, a JSON object of extra headers on every SDK request
  *
- * BASE44_SERVICE_TOKEN and BASE44_EXTRA_HEADERS are removed from the environment
- * before the user script runs.
+ * BASE44_SERVICE_TOKEN is removed from the environment before the user script runs.
  */
 
 export {};
@@ -27,9 +25,7 @@ const appBaseUrl = Deno.env.get("BASE44_APP_BASE_URL");
 const isPrivileged = Deno.env.get("BASE44_PRIVILEGED") === "true";
 const dataEnv = Deno.env.get("BASE44_DATA_ENV");
 const serviceToken = Deno.env.get("BASE44_SERVICE_TOKEN");
-const extraHeaders = Deno.env.get("BASE44_EXTRA_HEADERS");
 Deno.env.delete("BASE44_SERVICE_TOKEN");
-Deno.env.delete("BASE44_EXTRA_HEADERS");
 
 if (!scriptPath) {
   console.error("SCRIPT_PATH environment variable is required");
@@ -48,9 +44,7 @@ if (!appBaseUrl) {
 
 import { createClient } from "npm:@base44/sdk";
 
-const customHeaders: Record<string, string> = extraHeaders
-  ? JSON.parse(extraHeaders)
-  : {};
+const customHeaders: Record<string, string> = {};
 if (isPrivileged) customHeaders["X-Bypass-RLS"] = "true";
 if (dataEnv) customHeaders["X-Data-Env"] = dataEnv;
 

package/dist/cli/index.js

@@ -247411,8 +247411,7 @@ class Base44Command extends Command2 {
         if (branch !== undefined && !branch.trim()) {
           throw new InvalidInputError("--branch must not be empty.");
         }
-        const { requireAuth } = this._commandOptions;
-        if (typeof requireAuth === "function" ? requireAuth() : requireAuth) {
+        if (this._commandOptions.requireAuth) {
           await ensureAuth(this.context);
         }
         if (this._commandOptions.requireAppContext) {
@@ -256168,39 +256167,19 @@ function getDevCommand() {
 var ACCESS_TOKEN_VAR = "BASE44_EXEC_ACCESS_TOKEN";
 var SERVER_URL_VAR = "BASE44_EXEC_SERVER_URL";
 var SERVICE_TOKEN_VAR = "BASE44_EXEC_SERVICE_TOKEN";
-var HEADERS_VAR = "BASE44_EXEC_HEADERS";
 var EXEC_ENV_VARS = [
   ACCESS_TOKEN_VAR,
   SERVER_URL_VAR,
-  SERVICE_TOKEN_VAR,
-  HEADERS_VAR
+  SERVICE_TOKEN_VAR
 ];
+var PRIVILEGED_ENV_VAR = "BASE44_PRIVILEGED";
+var DATA_ENV_ENV_VAR = "BASE44_DATA_ENV";
 function read3(env, name) {
   return env[name]?.trim() || undefined;
 }
 function hasExecEnvTarget(env = process.env) {
   return EXEC_ENV_VARS.some((name) => read3(env, name) !== undefined);
 }
-var HeadersSchema = record(string2(), string2());
-function parseHeaders(raw) {
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    throw new InvalidInputError(`${HEADERS_VAR} is not valid JSON.`, {
-      hints: [{ message: `Set ${HEADERS_VAR} to e.g. '{"X-Header":"value"}'` }]
-    });
-  }
-  const result = HeadersSchema.safeParse(parsed);
-  if (!result.success) {
-    throw new InvalidInputError(`${HEADERS_VAR} must be a JSON object of string header values.`, {
-      hints: [
-        { message: `Set ${HEADERS_VAR} to e.g. '{"X-Header":"value"}'` }
-      ]
-    });
-  }
-  return result.data;
-}
 function readExecEnvTarget(env = process.env) {
   if (!hasExecEnvTarget(env)) {
     return;
@@ -256212,7 +256191,7 @@ function readExecEnvTarget(env = process.env) {
     throw new InvalidInputError(`${missing} is not set. ${ACCESS_TOKEN_VAR} and ${SERVER_URL_VAR} must be set together.`, {
       hints: [
         {
-          message: `Set both ${ACCESS_TOKEN_VAR} and ${SERVER_URL_VAR}, or unset all BASE44_EXEC_* variables to use your login`
+          message: `Set both ${ACCESS_TOKEN_VAR} and ${SERVER_URL_VAR}, or unset all of them to use your login`
         }
       ]
     });
@@ -256221,34 +256200,26 @@ function readExecEnvTarget(env = process.env) {
     throw new InvalidInputError(`${SERVER_URL_VAR} is not a valid URL.`);
   }
   const serviceToken = read3(env, SERVICE_TOKEN_VAR);
-  const rawHeaders = read3(env, HEADERS_VAR);
-  return {
-    token,
-    serverUrl,
-    ...serviceToken ? { serviceToken } : {},
-    ...rawHeaders ? { headers: parseHeaders(rawHeaders) } : {}
-  };
+  return { token, serverUrl, ...serviceToken ? { serviceToken } : {} };
 }
 // src/core/exec/run-script.ts
 import { spawn as spawn4 } from "node:child_process";
 import { copyFileSync, writeFileSync as writeFileSync3 } from "node:fs";
 var SERVICE_TOKEN_ENV = "BASE44_SERVICE_TOKEN";
-var EXTRA_HEADERS_ENV = "BASE44_EXTRA_HEADERS";
-function wrapperOnlyEnv(serviceToken, headers) {
-  return {
-    ...serviceToken ? { [SERVICE_TOKEN_ENV]: serviceToken } : {},
-    ...headers ? { [EXTRA_HEADERS_ENV]: JSON.stringify(headers) } : {}
-  };
-}
 function inheritedEnv() {
   const env = { ...process.env };
-  for (const name of [...EXEC_ENV_VARS, SERVICE_TOKEN_ENV, EXTRA_HEADERS_ENV]) {
+  for (const name of [
+    ...EXEC_ENV_VARS,
+    PRIVILEGED_ENV_VAR,
+    DATA_ENV_ENV_VAR,
+    SERVICE_TOKEN_ENV
+  ]) {
     delete env[name];
   }
   return env;
 }
 async function runScript(options) {
-  const { appId, code, local, privileged, dataEnv, serviceToken, headers } = options;
+  const { appId, code, local, privileged, dataEnv, serviceToken } = options;
   verifyDenoInstalled("to run scripts with exec");
   const cleanupFns = [];
   const tempScript = await $file({ postfix: ".ts" });
@@ -256261,10 +256232,10 @@ async function runScript(options) {
   copyFileSync(getExecWrapperPath(), tempWrapper.path);
   try {
     const exitCode = await new Promise((resolvePromise) => {
-      const child = spawn4("deno", ["run", "--allow-all", "--node-modules-dir=auto", tempWrapper.path], {
+      const child = spawn4("deno", ["run", "--allow-all", "--node-modules-dir=none", tempWrapper.path], {
         env: {
           ...inheritedEnv(),
-          ...wrapperOnlyEnv(serviceToken, headers),
+          ...serviceToken ? { [SERVICE_TOKEN_ENV]: serviceToken } : {},
           SCRIPT_PATH: scriptPath,
           BASE44_APP_ID: appId,
           BASE44_ACCESS_TOKEN: appUserToken,
@@ -256345,8 +256316,7 @@ async function execAction({ app, isNonInteractive }, options) {
     local,
     privileged: options.privileged,
     dataEnv: options.dataEnv,
-    serviceToken: envTarget?.serviceToken,
-    headers: envTarget?.headers
+    serviceToken: envTarget?.serviceToken
   });
   if (exitCode !== 0) {
     process.exitCode = exitCode;
@@ -256354,7 +256324,7 @@ async function execAction({ app, isNonInteractive }, options) {
   return {};
 }
 function getExecCommand() {
-  return new Base44Command("exec", { requireAuth: () => !hasExecEnvTarget() }).description("Run a script with the Base44 SDK pre-authenticated as the current user").option("--local", "Run against the local `base44 dev` server instead of the deployed app").option("--port <number>", `Port the local dev server is on (with --local; defaults to ${DEFAULT_DEV_SERVER_PORT})`).option("--privileged", "Run with admin privileges (bypass RLS). Requires app owner/editor role.").option("--data-env <environment>", "Data environment to run against (e.g. dev, prod)").addHelpText("after", `
+  return new Base44Command("exec", { requireAuth: !hasExecEnvTarget() }).description("Run a script with the Base44 SDK pre-authenticated as the current user").option("--local", "Run against the local `base44 dev` server instead of the deployed app").option("--port <number>", `Port the local dev server is on (with --local; defaults to ${DEFAULT_DEV_SERVER_PORT})`).addOption(new Option2("--privileged", "Run with admin privileges (bypass RLS). Requires app owner/editor role.").env(PRIVILEGED_ENV_VAR)).addOption(new Option2("--data-env <environment>", "Data environment to run against (e.g. dev, prod)").env(DATA_ENV_ENV_VAR)).addHelpText("after", `
 Examples:
   Run a script file:
     $ cat ./script.ts | base44 exec
@@ -256366,14 +256336,7 @@ Examples:
     $ echo "await base44.entities.Task.create({ title: 'seed' })" | base44 exec --local
 
   With privileged access (bypass RLS):
-    $ echo "const all = await base44.entities.Task.list()" | base44 exec --privileged
-
-Environment (for sandboxes and agents; no login or linked project needed):
-  BASE44_EXEC_ACCESS_TOKEN   App-user token for the SDK (requires BASE44_EXEC_SERVER_URL)
-  BASE44_EXEC_SERVER_URL     SDK server URL (requires BASE44_EXEC_ACCESS_TOKEN)
-  BASE44_EXEC_SERVICE_TOKEN  Optional service token, enables base44.asServiceRole
-  BASE44_EXEC_HEADERS        Optional JSON object of extra request headers
-  The app id comes from --app-id or BASE44_APP_ID.`).action(execAction);
+    $ echo "const all = await base44.entities.Task.list()" | base44 exec --privileged`).action(execAction);
 }
 
 // src/cli/commands/project/eject.ts
@@ -260585,4 +260548,4 @@ export {
   runCLI
 };
 
-//# debugId=FD7BADBA9A7011E864756E2164756E21
+//# debugId=CBF218C6D6FED80864756E2164756E21