@base44-preview/cli 0.1.5-pr.569.0f0eefe → 0.1.5-pr.570.3e2e87e

package/dist/assets/deno-runtime/exec.ts

@@ -9,6 +9,8 @@
  * - BASE44_APP_ID: App identifier from .app.jsonc
  * - BASE44_ACCESS_TOKEN: User's access token
  * - BASE44_APP_BASE_URL: App's published URL / subdomain (used for function calls)
+ * - BASE44_PRIVILEGED: When "true", adds the X-Bypass-RLS header (bypass RLS)
+ * - BASE44_DATA_ENV: When set, adds the X-Data-Env header (target data environment)
  */
 
 export {};
@@ -17,6 +19,8 @@ const scriptPath = Deno.env.get("SCRIPT_PATH");
 const appId = Deno.env.get("BASE44_APP_ID");
 const accessToken = Deno.env.get("BASE44_ACCESS_TOKEN");
 const appBaseUrl = Deno.env.get("BASE44_APP_BASE_URL");
+const isPrivileged = Deno.env.get("BASE44_PRIVILEGED") === "true";
+const dataEnv = Deno.env.get("BASE44_DATA_ENV");
 
 if (!scriptPath) {
   console.error("SCRIPT_PATH environment variable is required");
@@ -35,10 +39,15 @@ if (!appBaseUrl) {
 
 import { createClient } from "npm:@base44/sdk";
 
+const customHeaders: Record<string, string> = {};
+if (isPrivileged) customHeaders["X-Bypass-RLS"] = "true";
+if (dataEnv) customHeaders["X-Data-Env"] = dataEnv;
+
 const base44 = createClient({
   appId,
   token: accessToken,
   serverUrl: appBaseUrl,
+  headers: customHeaders,
 });
 
 (globalThis as any).base44 = base44;

package/dist/cli/index.js

@@ -258458,7 +258458,7 @@ function getDevCommand() {
 import { spawn as spawn4 } from "node:child_process";
 import { copyFileSync, writeFileSync as writeFileSync2 } from "node:fs";
 async function runScript(options8) {
-  const { appId, code: code2, local } = options8;
+  const { appId, code: code2, local, privileged, dataEnv } = options8;
   verifyDenoInstalled("to run scripts with exec");
   const cleanupFns = [];
   const tempScript = await $file({ postfix: ".ts" });
@@ -258477,7 +258477,9 @@ async function runScript(options8) {
           SCRIPT_PATH: scriptPath,
           BASE44_APP_ID: appId,
           BASE44_ACCESS_TOKEN: appUserToken,
-          BASE44_APP_BASE_URL: appBaseUrl
+          BASE44_APP_BASE_URL: appBaseUrl,
+          ...privileged ? { BASE44_PRIVILEGED: "true" } : {},
+          ...dataEnv ? { BASE44_DATA_ENV: dataEnv } : {}
         },
         stdio: "inherit"
       });
@@ -258542,14 +258544,20 @@ async function execAction({ app, isNonInteractive }, options8) {
     throw noInputError;
   }
   const local = options8.local ? await resolveLocalTarget(options8.port !== undefined ? parsePort(options8.port) : DEFAULT_DEV_SERVER_PORT) : undefined;
-  const { exitCode } = await runScript({ appId: app.id, code: code2, local });
+  const { exitCode } = await runScript({
+    appId: app.id,
+    code: code2,
+    local,
+    privileged: options8.privileged,
+    dataEnv: options8.dataEnv
+  });
   if (exitCode !== 0) {
     process.exitCode = exitCode;
   }
   return {};
 }
 function getExecCommand() {
-  return new Base44Command("exec").description("Run a script with the Base44 SDK pre-authenticated as the current user").option("--local", "Run against the local `base44 dev` server instead of the deployed app").option("--port <number>", `Port the local dev server is on (with --local; defaults to ${DEFAULT_DEV_SERVER_PORT})`).addHelpText("after", `
+  return new Base44Command("exec").description("Run a script with the Base44 SDK pre-authenticated as the current user").option("--local", "Run against the local `base44 dev` server instead of the deployed app").option("--port <number>", `Port the local dev server is on (with --local; defaults to ${DEFAULT_DEV_SERVER_PORT})`).option("--privileged", "Run with admin privileges (bypass RLS). Requires app owner/editor role.").option("--data-env <environment>", "Data environment to run against (e.g. dev, prod)").addHelpText("after", `
 Examples:
   Run a script file:
     $ cat ./script.ts | base44 exec
@@ -258558,7 +258566,10 @@ Examples:
     $ echo "const users = await base44.entities.User.list()" | base44 exec
 
   Against the local dev server (base44 dev must be running):
-    $ echo "await base44.entities.Task.create({ title: 'seed' })" | base44 exec --local`).action(execAction);
+    $ echo "await base44.entities.Task.create({ title: 'seed' })" | base44 exec --local
+
+  With privileged access (bypass RLS):
+    $ echo "const all = await base44.entities.Task.list()" | base44 exec --privileged`).action(execAction);
 }
 
 // src/cli/commands/project/eject.ts
@@ -262952,4 +262963,4 @@ export {
   CLIExitError
 };
 
-//# debugId=8BDA6B1F446714F764756E2164756E21
+//# debugId=6F90C592BC20AEC764756E2164756E21