@base44-preview/sdk 0.8.43-pr.260.d28232f → 0.8.44-pr.260.59c4ba5

package/dist/modules/auth.types.d.ts

@@ -134,12 +134,15 @@ export interface AuthModule {
     /**
      * Updates the current authenticated user's information.
      *
-     * You can update `role` and any [custom fields](/developers/backend/resources/entities/user-schema#custom-fields) defined in your
-     * User entity schema.
-     * The `role` value must be either `'user'` or `'admin'`.
+     * You can update any [custom fields](/developers/backend/resources/entities/user-schema#custom-fields)
+     * defined in your User entity schema.
+     *
+     * Updating `role` requires editor access on the app.
+     *
      * <Note>
-     * The following fields are read-only and can't be changed with this method:
-     * `id`, `email`, `full_name`, `created_date`, `updated_date`, and `created_by`.
+     * These fields can't be changed with this method:
+     * `id`, `email`, `full_name`, `created_date`, `updated_date`, `created_by`,
+     * and `collaborator_role`.
      * </Note>
      *
      * @param data - Object containing the fields to update.
@@ -147,9 +150,8 @@ export interface AuthModule {
      *
      * @example
      * ```typescript
-     * // Update role and custom fields defined in your User entity
+     * // Update custom fields defined in your User entity
      * await base44.auth.updateMe({
-     *   role: 'admin',
      *   bio: 'Software developer',
      *   preferences: { theme: 'dark' }
      * });

package/dist/modules/connectors.js

@@ -25,7 +25,7 @@ export function createConnectorsModule(axios, appId) {
             if (!integrationType || typeof integrationType !== "string") {
                 throw new Error("Integration type is required and must be a string");
             }
-            const response = await axios.get(`/apps/${appId}/external-auth/tokens/${integrationType}`);
+            const response = await axios.get(`/apps/${appId}/external-auth/tokens/${encodeURIComponent(integrationType)}`);
             // @ts-expect-error
             return response.access_token;
         },
@@ -34,7 +34,7 @@ export function createConnectorsModule(axios, appId) {
             if (!integrationType || typeof integrationType !== "string") {
                 throw new Error("Integration type is required and must be a string");
             }
-            const response = await axios.get(`/apps/${appId}/external-auth/tokens/${integrationType}`);
+            const response = await axios.get(`/apps/${appId}/external-auth/tokens/${encodeURIComponent(integrationType)}`);
             const data = response;
             return {
                 accessToken: data.access_token,
@@ -46,7 +46,7 @@ export function createConnectorsModule(axios, appId) {
             if (!connectorId || typeof connectorId !== "string") {
                 throw new Error("Connector ID is required and must be a string");
             }
-            const response = await axios.get(`/apps/${appId}/external-auth/tokens/connectors/${connectorId}`);
+            const response = await axios.get(`/apps/${appId}/external-auth/tokens/connectors/${encodeURIComponent(connectorId)}`);
             const data = response;
             return {
                 accessToken: data.access_token,
@@ -60,7 +60,7 @@ export function createConnectorsModule(axios, appId) {
             if (!connectorId || typeof connectorId !== "string") {
                 throw new Error("Connector ID is required and must be a string");
             }
-            const response = await axios.get(`/apps/${appId}/app-user-auth/connectors/${connectorId}/token`);
+            const response = await axios.get(`/apps/${appId}/app-user-auth/connectors/${encodeURIComponent(connectorId)}/token`);
             const data = response;
             return data.access_token;
         },
@@ -69,7 +69,7 @@ export function createConnectorsModule(axios, appId) {
             if (!connectorId || typeof connectorId !== "string") {
                 throw new Error("Connector ID is required and must be a string");
             }
-            const response = await axios.get(`/apps/${appId}/app-user-auth/connectors/${connectorId}/token`);
+            const response = await axios.get(`/apps/${appId}/app-user-auth/connectors/${encodeURIComponent(connectorId)}/token`);
             const data = response;
             return {
                 accessToken: data.access_token,
@@ -78,7 +78,9 @@ export function createConnectorsModule(axios, appId) {
         },
         async callApi(integrationType, request) {
             assertNonEmptyString(integrationType, "Integration type");
-            return proxyCall(axios, `/apps/${appId}/connectors/${integrationType}/call`, request);
+            // Encoded so a runtime-built identifier can only ever select a
+            // connector, never re-target another route under this token.
+            return proxyCall(axios, `/apps/${appId}/connectors/${encodeURIComponent(integrationType)}/call`, request);
         },
     };
 }
@@ -108,9 +110,9 @@ async function proxyCall(axios, url, request) {
     }
     const response = await axios.post(url, {
         method,
-        // Omitted rather than sent as null so the proxy applies the connector's
-        // declared default host.
-        ...(request.host === undefined ? {} : { host: request.host }),
+        // Omitted when unset (undefined or null, since untyped callers write
+        // either) so the proxy applies the connector's declared default host.
+        ...(request.host == null ? {} : { host: request.host }),
         path: request.path,
         query: (_b = request.query) !== null && _b !== void 0 ? _b : {},
         headers: (_c = request.headers) !== null && _c !== void 0 ? _c : {},
@@ -142,7 +144,7 @@ export function createUserConnectorsModule(axios, appId) {
             if (!connectorId || typeof connectorId !== "string") {
                 throw new Error("Connector ID is required and must be a string");
             }
-            const response = await axios.post(`/apps/${appId}/app-user-auth/connectors/${connectorId}/initiate`);
+            const response = await axios.post(`/apps/${appId}/app-user-auth/connectors/${encodeURIComponent(connectorId)}/initiate`);
             const data = response;
             return data.redirect_url;
         },
@@ -150,7 +152,7 @@ export function createUserConnectorsModule(axios, appId) {
             if (!connectorId || typeof connectorId !== "string") {
                 throw new Error("Connector ID is required and must be a string");
             }
-            await axios.delete(`/apps/${appId}/app-user-auth/connectors/${connectorId}`);
+            await axios.delete(`/apps/${appId}/app-user-auth/connectors/${encodeURIComponent(connectorId)}`);
         },
     };
 }

package/dist/modules/connectors.types.d.ts

@@ -89,7 +89,7 @@ export interface ConnectorApiResponse<T = unknown> {
      * The parsed upstream response body, or proxy error details when no response
      * was received. `null` when the response was binary — see {@link dataBase64}.
      */
-    data: T;
+    data: T | null;
     /**
      * The response body base64-encoded, for the media types the connector declares
      * as binary (images, PDFs). Set instead of {@link data}, never alongside it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.43-pr.260.d28232f",
+  "version": "0.8.44-pr.260.59c4ba5",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",