@base44-preview/sdk 0.8.44-pr.264.d98f3ac → 0.8.44-pr.265.8da157e

package/dist/build-session.d.ts

@@ -0,0 +1,79 @@
+import type { BuildSessionReader } from "./modules/build.types.js";
+import type { CreateClientOptions } from "./client.types.js";
+/**
+ * Configuration for reading a build session with a grant.
+ */
+export interface CreateBuildSessionConfig {
+    /** The app being built. A build session *is* an app — there is nothing separate to open. */
+    appId: string;
+    /**
+     * The Base44 server URL.
+     *
+     * @defaultValue `"https://base44.app"`
+     */
+    serverUrl?: string;
+    /**
+     * A grant token.
+     *
+     * Use {@link CreateBuildSessionConfig.getToken | getToken} instead for anything
+     * that outlives one grant, which most builds do.
+     */
+    token?: string;
+    /**
+     * Called for a grant before every request and every stream (re)connect.
+     *
+     * The shape to prefer. A grant is short-lived on purpose, so a build routinely
+     * outlasts the one it started with; re-reading the credential rather than
+     * capturing it is what makes a refresh invisible to the caller, and it is the
+     * habit the SDK's actors module already has internally.
+     */
+    getToken?: () => string | Promise<string> | undefined;
+    /** Additional client options. */
+    options?: CreateClientOptions;
+}
+/**
+ * Reads one build session with a grant.
+ *
+ * The browser's entry point. A grant is read-only, scoped to one session and
+ * short-lived, so this returns the read half of a build session and nothing else
+ * — the writes live on the server, where the credential that can start a turn
+ * belongs.
+ *
+ * That asymmetry is the design rather than a limitation, and it is the thing an
+ * integrator gets wrong first: reads go browser to Base44 directly, keeping an
+ * open stream off your serverless function path, while writes go browser to your
+ * server to Base44. Because a grant cannot send, no configuration lets a leaked
+ * browser credential spend your workspace's credits.
+ *
+ * Mint the grant on your server with
+ * {@link BuildSession.createGrant | createGrant()}.
+ *
+ * @param config - The app, and how to get a grant for it.
+ * @returns The read-only session.
+ *
+ * @example
+ * ```typescript
+ * import { createBuildSession } from '@base44/sdk';
+ *
+ * const build = createBuildSession({
+ *   appId,
+ *   // Re-read on every reconnect, so a build outliving its grant just works.
+ *   getToken: () =>
+ *     fetch('/api/base44/grant', { method: 'POST', body: JSON.stringify({ appId }) })
+ *       .then((response) => response.json())
+ *       .then((grant) => grant.token),
+ * });
+ *
+ * const unsubscribe = build.subscribe((event) => {
+ *   switch (event.type) {
+ *     case 'message.updated': upsertMessage(event.data); break;   // by messageId
+ *     case 'state.changed':   setStatus(event.data);     break;
+ *     case 'turn.finished':   markDone(event.turnId);    break;
+ *   }
+ * });
+ *
+ * // Sending goes to YOUR server, which holds the write credential.
+ * await fetch('/api/base44/message', { method: 'POST', body: … });
+ * ```
+ */
+export declare function createBuildSession(config: CreateBuildSessionConfig): BuildSessionReader;

package/dist/build-session.js

@@ -0,0 +1,59 @@
+import { createAxiosClient } from "./utils/axios-client.js";
+import { createBuildSessionReader } from "./modules/build.js";
+/**
+ * Reads one build session with a grant.
+ *
+ * The browser's entry point. A grant is read-only, scoped to one session and
+ * short-lived, so this returns the read half of a build session and nothing else
+ * — the writes live on the server, where the credential that can start a turn
+ * belongs.
+ *
+ * That asymmetry is the design rather than a limitation, and it is the thing an
+ * integrator gets wrong first: reads go browser to Base44 directly, keeping an
+ * open stream off your serverless function path, while writes go browser to your
+ * server to Base44. Because a grant cannot send, no configuration lets a leaked
+ * browser credential spend your workspace's credits.
+ *
+ * Mint the grant on your server with
+ * {@link BuildSession.createGrant | createGrant()}.
+ *
+ * @param config - The app, and how to get a grant for it.
+ * @returns The read-only session.
+ *
+ * @example
+ * ```typescript
+ * import { createBuildSession } from '@base44/sdk';
+ *
+ * const build = createBuildSession({
+ *   appId,
+ *   // Re-read on every reconnect, so a build outliving its grant just works.
+ *   getToken: () =>
+ *     fetch('/api/base44/grant', { method: 'POST', body: JSON.stringify({ appId }) })
+ *       .then((response) => response.json())
+ *       .then((grant) => grant.token),
+ * });
+ *
+ * const unsubscribe = build.subscribe((event) => {
+ *   switch (event.type) {
+ *     case 'message.updated': upsertMessage(event.data); break;   // by messageId
+ *     case 'state.changed':   setStatus(event.data);     break;
+ *     case 'turn.finished':   markDone(event.turnId);    break;
+ *   }
+ * });
+ *
+ * // Sending goes to YOUR server, which holds the write credential.
+ * await fetch('/api/base44/message', { method: 'POST', body: … });
+ * ```
+ */
+export function createBuildSession(config) {
+    const { appId, serverUrl = "https://base44.app", token, getToken, options, } = config;
+    return createBuildSessionReader({
+        axios: createAxiosClient({
+            baseURL: `${serverUrl}/api`,
+            onError: options === null || options === void 0 ? void 0 : options.onError,
+        }),
+        appId,
+        serverUrl,
+        getToken: getToken !== null && getToken !== void 0 ? getToken : (() => token),
+    });
+}

package/dist/index.d.ts

@@ -1,8 +1,10 @@
 import { createClient, createClientFromRequest, type Base44Client, type CreateClientConfig, type CreateClientOptions } from "./client.js";
+import { createPlatformClient, type CreatePlatformClientConfig, type PlatformClient, type PrincipalClient } from "./platform-client.js";
+import { createBuildSession, type CreateBuildSessionConfig } from "./build-session.js";
 import { Base44Error, type Base44ErrorJSON } from "./utils/axios-client.js";
 import { getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl } from "./utils/auth-utils.js";
-export { createClient, createClientFromRequest, Base44Error, getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, };
-export type { Base44Client, CreateClientConfig, CreateClientOptions, Base44ErrorJSON, };
+export { createClient, createClientFromRequest, createPlatformClient, createBuildSession, Base44Error, getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, };
+export type { Base44Client, CreateClientConfig, CreateClientOptions, Base44ErrorJSON, CreatePlatformClientConfig, PlatformClient, PrincipalClient, CreateBuildSessionConfig, };
 export * from "./types.js";
 export type { DeleteManyResult, DeleteResult, EntitiesModule, EntityFilterOperators, EntityFilterQuery, EntityFilterValue, EntityHandler, EntityRecord, EntityTypeRegistry, ImportResult, RealtimeEventType, RealtimeEvent, RealtimeCallback, SortField, UpdateManyResult, } from "./modules/entities.types.js";
 export type { AuthModule, LoginResponse, RegisterParams, VerifyOtpParams, ChangePasswordParams, ResetPasswordParams, User, } from "./modules/auth.types.js";
@@ -13,6 +15,8 @@ export type { AiGatewayModule, AiGatewayConnection, } from "./modules/ai-gateway
 export type { AppLogsModule } from "./modules/app-logs.types.js";
 export type { ActorsModule, ActorClient, ActorRef, Connection, ActorSubscription, ActorConnectOptions, ActorNameRegistry, ActorRegistry, } from "./modules/actors.types.js";
 export type { SsoModule, SsoAccessTokenResponse } from "./modules/sso.types.js";
+export type { PlatformsModule, PrincipalRole, ProvisionPrincipalParams, ServicePrincipal, DeprovisionResult, } from "./modules/platforms.types.js";
+export type { BuildEvent, BuildEventType, BuildGrant, BuildMessage, BuildMessagePage, BuildResponse, BuildSession, BuildSessionReader, BuildState, BuildStatus, BuildToolCall, BuildTurn, BuildTurnRef, BuildWaitingKind, BuildWaitingOn, CreateBuildGrantOptions, ListBuildMessagesOptions, RespondToBuildOptions, SendBuildMessageOptions, SubscribeToBuildOptions, WaitForTurnOptions, } from "./modules/build.types.js";
 export { Actor, type Conn } from "./actor.js";
 export type { ConnectorsModule, UserConnectorsModule, ConnectorApiRequest, ConnectorApiResponse, ConnectorApiResponsePhase, } from "./modules/connectors.types.js";
 export type { CustomIntegrationsModule, CustomIntegrationCallParams, CustomIntegrationCallResponse, } from "./modules/custom-integrations.types.js";

package/dist/index.js

@@ -1,6 +1,8 @@
 import { createClient, createClientFromRequest, } from "./client.js";
+import { createPlatformClient, } from "./platform-client.js";
+import { createBuildSession, } from "./build-session.js";
 import { Base44Error } from "./utils/axios-client.js";
 import { getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, } from "./utils/auth-utils.js";
-export { createClient, createClientFromRequest, Base44Error, getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, };
+export { createClient, createClientFromRequest, createPlatformClient, createBuildSession, Base44Error, getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, };
 export * from "./types.js";
 export { Actor } from "./actor.js";

package/dist/modules/auth.js

@@ -1,4 +1,3 @@
-import { removeAccessToken } from "../utils/auth-utils.js";
 import { resetAnalyticsSessionContext } from "./analytics.js";
 function isInsideIframe() {
     if (typeof window === "undefined")
@@ -116,10 +115,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
                 : window.location.href;
             // Build the login URL
             const loginUrl = `${options.appBaseUrl}/login?from_url=${encodeURIComponent(redirectUrl)}`;
-            // The login page must not boot with the token that just got us here,
-            // or a rejected token redirects to /login forever.
-            removeAccessToken({});
-            removeAccessToken({ storageKey: "token" });
+            // Redirect to the login page
             window.location.href = loginUrl;
         },
         // Redirects the user to a provider's login page
@@ -158,8 +154,17 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             hasAccessToken = false;
             // Only do the rest if in a browser environment
             if (typeof window !== "undefined") {
-                removeAccessToken({});
-                removeAccessToken({ storageKey: "token" });
+                // Remove token from localStorage
+                if (window.localStorage) {
+                    try {
+                        window.localStorage.removeItem("base44_access_token");
+                        // Remove "token" that is set by the built-in SDK of platform version 2
+                        window.localStorage.removeItem("token");
+                    }
+                    catch (e) {
+                        console.error("Failed to remove token from localStorage:", e);
+                    }
+                }
                 // Determine the from_url parameter
                 const fromUrl = redirectUrl || window.location.href;
                 // Redirect to server-side logout endpoint to clear HTTP-only cookies

package/dist/modules/build.d.ts

@@ -0,0 +1,38 @@
+import type { AxiosInstance } from "axios";
+import type { BuildSession, BuildSessionReader } from "./build.types.js";
+/** What the build module needs to talk to one app's session. @internal */
+export interface BuildSessionDeps {
+    /** An Axios client based at `${serverUrl}/api`. */
+    axios: AxiosInstance;
+    /** The app whose build session this is. */
+    appId: string;
+    /** Used to build the absolute stream URL, which `fetch` needs. */
+    serverUrl: string;
+    /**
+     * Re-read before every request and every stream (re)connect.
+     *
+     * A getter rather than a string because both credentials that reach here
+     * rotate: a grant expires inside a single build, and a principal's access
+     * token lives an hour. Capturing either would work right up until the first
+     * build long enough to matter.
+     *
+     * Omitted when the Axios client already carries a static credential.
+     */
+    getToken?: () => string | Promise<string> | undefined;
+}
+/**
+ * The read half of a build session — what a grant can do.
+ *
+ * @param deps - Transport, app id and credential.
+ * @returns The read-only session.
+ * @internal
+ */
+export declare function createBuildSessionReader(deps: BuildSessionDeps): BuildSessionReader;
+/**
+ * A build session with the writes, for a credential that may start turns.
+ *
+ * @param deps - Transport, app id and credential.
+ * @returns The full session.
+ * @internal
+ */
+export declare function createBuildSessionModule(deps: BuildSessionDeps): BuildSession;