@base44-preview/sdk 0.8.48-pr.280.dac0f98 → 0.8.48-pr.282.1b5a2bd

package/dist/client.js

@@ -5,6 +5,7 @@ import { createAuthModule } from "./modules/auth.js";
 import { createSsoModule } from "./modules/sso.js";
 import { createConnectorsModule, createUserConnectorsModule, } from "./modules/connectors.js";
 import { getAccessToken } from "./utils/auth-utils.js";
+import { exchangeEmbedToken, isEmbeddedTab, markEmbeddedTab, takeEmbedTokenFromUrl, } from "./utils/embed-session.js";
 import { createFetchWithAuth } from "./utils/fetch-with-auth.js";
 import { createFunctionsModule } from "./modules/functions.js";
 import { createAgentsModule } from "./modules/agents.js";
@@ -14,9 +15,6 @@ import { createAppModule } from "./modules/app.js";
 import { createUsersModule } from "./modules/users.js";
 import { RoomsSocket } from "./utils/socket-utils.js";
 import { createAnalyticsModule } from "./modules/analytics.js";
-import { createExperimentsModule } from "./modules/experiments.js";
-import { createExposureTracker } from "./modules/experiment-exposures.js";
-import { EXPERIMENTS_CONTEXT_HEADER, getBrowserExperimentsContext, readExperimentsContext } from "./modules/experiments-context.js";
 import { createActorsModule, resolveActorsHost, } from "./modules/actors.js";
 /**
  * Creates a Base44 client.
@@ -56,17 +54,24 @@ import { createActorsModule, resolveActorsHost, } from "./modules/actors.js";
  * ```
  */
 export function createClient(config) {
-    var _a, _b, _c, _d, _e, _f, _g;
-    const { serverUrl = "https://base44.app", appId, analytics, token, serviceToken, requiresAuth = false, appBaseUrl, options, functionsVersion, headers: optionalHeaders, } = config;
+    var _a, _b, _c, _d;
+    const { serverUrl = "https://base44.app", appId, analytics, serviceToken, requiresAuth = false, appBaseUrl, options, functionsVersion, headers: optionalHeaders, } = config;
     // Normalize appBaseUrl to always be a string (empty if not provided or invalid)
     const normalizedAppBaseUrl = typeof appBaseUrl === "string" ? appBaseUrl : "";
-    const experimentsContext = (_a = config.experiments) !== null && _a !== void 0 ? _a : getBrowserExperimentsContext(appId);
+    const embedOtt = takeEmbedTokenFromUrl();
+    if (embedOtt) {
+        markEmbeddedTab();
+    }
+    const embedded = Boolean(embedOtt) || isEmbeddedTab();
+    // In a frame the passed token is the OTT itself or a stale stored one, not this session.
+    const token = embedded ? undefined : config.token;
     const socketConfig = {
         serverUrl,
         mountPath: "/ws-user-apps/socket.io/",
         transports: ["websocket"],
         appId,
-        token,
+        // null (not undefined): inside a frame the socket must never fall back to storage.
+        token: embedded ? null : token,
     };
     let socket = null;
     const getSocket = () => {
@@ -77,14 +82,9 @@ export function createClient(config) {
         }
         return socket;
     };
-    const { [EXPERIMENTS_CONTEXT_HEADER]: inheritedExperimentsContext, ...requestHeaders } = optionalHeaders !== null && optionalHeaders !== void 0 ? optionalHeaders : {};
     const headers = {
-        ...requestHeaders,
+        ...optionalHeaders,
         "X-App-Id": String(appId),
-        ...(experimentsContext ? {
-            "Base44-Visitor-Id": experimentsContext.identity.visitorId,
-            "Base44-Experiment-Preview": JSON.stringify((_b = experimentsContext.preview) !== null && _b !== void 0 ? _b : {}),
-        } : {}),
     };
     const functionHeaders = functionsVersion
         ? {
@@ -130,52 +130,64 @@ export function createClient(config) {
         baseURL: `${serverUrl}/api`,
         headers,
     });
-    const exposureTracker = createExposureTracker({
-        axiosClient,
-        appId,
-        enabled: (_c = analytics === null || analytics === void 0 ? void 0 : analytics.enabled) !== null && _c !== void 0 ? _c : true,
-        source: typeof window === "undefined" ? "backend" : "browser",
-        pageUrl: experimentsContext === null || experimentsContext === void 0 ? void 0 : experimentsContext.pageUrl,
-    });
-    const experiments = createExperimentsModule({
-        getAuth: () => userAuthModule,
-        trackExposure: exposureTracker.track,
-        flushExposures: exposureTracker.flush,
-        context: experimentsContext,
-    });
     const userAuthModule = createAuthModule(axiosClient, functionsAxiosClient, appId, {
         appBaseUrl: normalizedAppBaseUrl,
         serverUrl,
         token,
-        onAuthStateChange: experiments.onAuthStateChange,
+        embedded,
     });
     // Apply the access token before any module that may issue authenticated
     // requests during construction (notably analytics, which fires an init
     // event whose flush calls auth.me()). Without this, the first User/me
     // request is built before setToken runs and goes out unauthenticated.
-    if (typeof window !== "undefined") {
+    // Skipped in a frame: the session comes from the exchange below.
+    if (typeof window !== "undefined" && !embedded) {
         const accessToken = token || getAccessToken();
         if (accessToken) {
             userAuthModule.setToken(accessToken);
         }
     }
-    if (experimentsContext) {
-        const { userId, status } = experimentsContext.identity;
-        // The document's cookie identity may differ from this client's localStorage token.
-        const needsClientIdentity = typeof window !== "undefined" && userAuthModule.hasToken() &&
-            experimentsContext.config.experiments.some((experiment) => experiment.assign_by === "user");
-        experiments.onAuthStateChange(status === "pending" || needsClientIdentity ? { status: "pending" } :
-            userId ? { status: "authenticated", userId } : { status: "anonymous" });
+    // Live token for every module; outside a frame it still falls back to storage.
+    const getToken = () => { var _a; return (_a = userAuthModule.getToken()) !== null && _a !== void 0 ? _a : (embedded ? null : getAccessToken()); };
+    const applyToken = (newToken, saveToStorage) => {
+        userAuthModule.setToken(newToken, saveToStorage);
+        socketConfig.token = newToken;
+        if (socket) {
+            socket.updateConfig({ token: newToken });
+        }
+    };
+    // Settles once the exchanged session is applied (memory only); at once otherwise.
+    const authReady = embedOtt
+        ? exchangeEmbedToken({ serverUrl, appId, ott: embedOtt }).then((sessionToken) => {
+            if (sessionToken) {
+                applyToken(sessionToken, false);
+            }
+        })
+        : Promise.resolve();
+    if (embedOtt) {
+        // Requests issued during the exchange wait for it. Registered after createAxiosClient's
+        // interceptors so it runs first and the anonymous-visitor header sees the Authorization.
+        for (const client of [axiosClient, functionsAxiosClient]) {
+            client.interceptors.request.use(async (requestConfig) => {
+                await authReady;
+                const sessionToken = getToken();
+                if (sessionToken && !requestConfig.headers.get("Authorization")) {
+                    requestConfig.headers.set("Authorization", `Bearer ${sessionToken}`);
+                }
+                return requestConfig;
+            });
+        }
     }
     const actorsModule = createActorsModule({
         appId,
         // serverUrl is often relative/empty (same-origin app); the proxy-fallback
         // URL needs an absolute host, so fall back to the page origin.
-        host: resolveActorsHost(serverUrl, typeof window !== "undefined" ? (_d = window.location) === null || _d === void 0 ? void 0 : _d.origin : undefined),
+        host: resolveActorsHost(serverUrl, typeof window !== "undefined" ? (_a = window.location) === null || _a === void 0 ? void 0 : _a.origin : undefined),
         functionsVersion,
-        getAuthToken: () => token || getAccessToken(),
+        getAuthToken: getToken,
         mintConnectionToken: async (actorName, room, connectionId) => {
-            const authToken = token || getAccessToken();
+            await authReady;
+            const authToken = getToken();
             return await actorsAxiosClient.post(`/apps/${appId}/actors/${encodeURIComponent(actorName)}/connection-token`, { room, connection_id: connectionId }, {
                 headers: {
                     ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),
@@ -199,27 +211,25 @@ export function createClient(config) {
         integrations: createIntegrationsModule(axiosClient, appId),
         connectors: createUserConnectorsModule(axiosClient, appId),
         auth: userAuthModule,
-        experiments: experiments.module,
         functions: createFunctionsModule(functionsAxiosClient, appId, {
             getAuthHeaders: () => {
                 const headers = {};
-                // Get current token from storage or initial config
-                const currentToken = token || getAccessToken();
-                if (currentToken) {
-                    headers["Authorization"] = `Bearer ${currentToken}`;
+                const sessionToken = getToken();
+                if (sessionToken) {
+                    headers["Authorization"] = `Bearer ${sessionToken}`;
                 }
                 return headers;
             },
-            baseURL: (_e = functionsAxiosClient.defaults) === null || _e === void 0 ? void 0 : _e.baseURL,
+            baseURL: (_b = functionsAxiosClient.defaults) === null || _b === void 0 ? void 0 : _b.baseURL,
         }),
         agents: createAgentsModule({
             axios: axiosClient,
             getSocket,
             appId,
             serverUrl,
-            token,
+            getToken,
         }),
-        aiGateway: createAiGatewayModule({ serverUrl, token, appId }),
+        aiGateway: createAiGatewayModule({ serverUrl, getToken, appId }),
         appLogs: createAppLogsModule(axiosClient, appId),
         app: createAppModule(axiosClient, appId),
         users: createUsersModule(axiosClient, appId),
@@ -228,14 +238,11 @@ export function createClient(config) {
             serverUrl,
             appId,
             userAuthModule,
-            enabled: (_f = analytics === null || analytics === void 0 ? void 0 : analytics.enabled) !== null && _f !== void 0 ? _f : true,
-            getVisitorId: experiments.visitorId,
-            experimentsContext,
+            enabled: (_c = analytics === null || analytics === void 0 ? void 0 : analytics.enabled) !== null && _c !== void 0 ? _c : true,
         }),
         actors: actorsModule.module,
         cleanup: () => {
             userModules.analytics.cleanup();
-            experiments.cleanup();
             actorsModule.closeAll();
             if (socket) {
                 socket.disconnect();
@@ -260,16 +267,20 @@ export function createClient(config) {
                 }
                 return headers;
             },
-            baseURL: (_g = serviceRoleFunctionsAxiosClient.defaults) === null || _g === void 0 ? void 0 : _g.baseURL,
+            baseURL: (_d = serviceRoleFunctionsAxiosClient.defaults) === null || _d === void 0 ? void 0 : _d.baseURL,
         }),
         agents: createAgentsModule({
             axios: serviceRoleAxiosClient,
             getSocket,
             appId,
             serverUrl,
-            token,
+            getToken: () => token,
+        }),
+        aiGateway: createAiGatewayModule({
+            serverUrl,
+            getToken: () => serviceToken,
+            appId,
         }),
-        aiGateway: createAiGatewayModule({ serverUrl, token: serviceToken, appId }),
         appLogs: createAppLogsModule(serviceRoleAxiosClient, appId),
         cleanup: () => {
             if (socket) {
@@ -303,15 +314,13 @@ export function createClient(config) {
             appId: String(appId),
             serverUrl,
             functionsVersion,
-            platformHeaders: {
-                ...headers,
-                ...(inheritedExperimentsContext ? { [EXPERIMENTS_CONTEXT_HEADER]: inheritedExperimentsContext } : {}),
-            },
+            platformHeaders: optionalHeaders,
         }),
         /**
          * Sets a new authentication token for all subsequent requests.
          *
          * @param newToken - The new authentication token
+         * @param saveToStorage - Whether to also keep the token in local storage. Defaults to `true`.
          *
          * @example
          * ```typescript
@@ -323,14 +332,8 @@ export function createClient(config) {
          * base44.setToken(access_token);
          * ```
          */
-        setToken(newToken) {
-            userModules.auth.setToken(newToken);
-            if (socket) {
-                socket.updateConfig({
-                    token: newToken,
-                });
-            }
-            socketConfig.token = newToken;
+        setToken(newToken, saveToStorage = true) {
+            applyToken(newToken, saveToStorage);
         },
         /**
          * Gets the current client configuration.
@@ -458,10 +461,6 @@ export function createClientFromRequest(request) {
     }
     // Prepare additional headers to propagate
     const additionalHeaders = {};
-    const encodedExperiments = request.headers.get(EXPERIMENTS_CONTEXT_HEADER);
-    const experimentsContext = readExperimentsContext(encodedExperiments, appId);
-    if (experimentsContext && encodedExperiments)
-        additionalHeaders[EXPERIMENTS_CONTEXT_HEADER] = encodedExperiments;
     if (stateHeader) {
         additionalHeaders["Base44-State"] = stateHeader;
     }
@@ -482,6 +481,5 @@ export function createClientFromRequest(request) {
         serviceToken: serviceRoleToken,
         functionsVersion: functionsVersion !== null && functionsVersion !== void 0 ? functionsVersion : undefined,
         headers: additionalHeaders,
-        experiments: experimentsContext ? { ...experimentsContext, pageUrl: request.url ? new URL(request.url).pathname : "/" } : undefined,
     });
 }

package/dist/client.types.d.ts

@@ -9,8 +9,6 @@ import type { AiGatewayModule } from "./modules/ai-gateway.types.js";
 import type { AppLogsModule } from "./modules/app-logs.types.js";
 import type { AppModule } from "./modules/app.types.js";
 import type { AnalyticsModule } from "./modules/analytics.types.js";
-import type { ExperimentsModule } from "./modules/experiments.types.js";
-import type { ExperimentsContext } from "./modules/experiments-config.types.js";
 import type { ActorsModule } from "./modules/actors.types.js";
 import type { FetchWithAuthInit } from "./utils/fetch-with-auth.js";
 /**
@@ -41,9 +39,9 @@ export interface CreateClientAnalyticsConfig {
     /**
      * Whether app analytics is enabled for this client.
      *
-     * When disabled, automatic analytics, experiment exposures and calls to
-     * `analytics.track()` are no-ops. The SDK does not create an analytics session
-     * identifier, start heartbeat timers, or send analytics requests.
+     * When disabled, automatic analytics and calls to `analytics.track()` are
+     * no-ops. The SDK does not create an analytics session identifier, start
+     * heartbeat timers, or send analytics requests.
      *
      * @defaultValue `true`
      */
@@ -81,12 +79,6 @@ export interface CreateClientConfig {
      * Omit this option to preserve the default analytics behavior.
      */
     analytics?: CreateClientAnalyticsConfig;
-    /**
-     * Platform-validated context for local flag evaluation. Request-scoped on servers.
-     * Automatically read from the platform bootstrap in browsers and trusted headers
-     * by createClientFromRequest(). Not an authorization credential.
-     */
-    experiments?: ExperimentsContext;
     /**
      * User authentication token. Used to authenticate as a specific user.
      *
@@ -142,8 +134,6 @@ export interface Base44Client {
     connectors: UserConnectorsModule;
     /** {@link EntitiesModule | Entities module} for CRUD operations on your data models. */
     entities: EntitiesModule;
-    /** {@link ExperimentsModule | Experiments module} for local feature flags and exposures. */
-    experiments: ExperimentsModule;
     /** {@link FunctionsModule | Functions module} for invoking custom backend functions. */
     functions: FunctionsModule;
     /** {@link IntegrationsModule | Integrations module} for calling pre-built integration endpoints. */
@@ -210,8 +200,9 @@ export interface Base44Client {
      * Updates the token for both HTTP requests and WebSocket connections.
      *
      * @param newToken - The new authentication token.
+     * @param saveToStorage - Whether to also keep the token in local storage so it survives a page load. Defaults to `true`.
      */
-    setToken(newToken: string): void;
+    setToken(newToken: string, saveToStorage?: boolean): void;
     /**
      * Gets the current client configuration.
      * @internal

package/dist/index.d.ts

@@ -4,9 +4,6 @@ import { getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl } from
 export { createClient, createClientFromRequest, Base44Error, getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, };
 export type { Base44Client, CreateClientAnalyticsConfig, CreateClientConfig, CreateClientOptions, Base44ErrorJSON, };
 export * from "./types.js";
-export { evaluateExperiments } from "./modules/experiments-evaluator.js";
-export type { ExperimentsConfig, ExperimentsContext, ExperimentsIdentity } from "./modules/experiments-config.types.js";
-export type { ExperimentsModule, ExperimentsSnapshot, } from "./modules/experiments.types.js";
 export type { DeleteManyResult, DeleteResult, EntitiesModule, EntityFilterOperators, EntityFilterQuery, EntityFilterValue, EntityHandler, EntityRecord, EntityTypeRegistry, ImportResult, RealtimeEventType, RealtimeEvent, RealtimeCallback, SortField, UpdateManyResult, } from "./modules/entities.types.js";
 export type { AuthModule, LoginResponse, RegisterParams, VerifyOtpParams, ChangePasswordParams, ResetPasswordParams, User, } from "./modules/auth.types.js";
 export type { IntegrationsModule, IntegrationEndpointFunction, CoreIntegrations, InvokeLLMParams, GenerateImageParams, GenerateImageResult, UploadFileParams, UploadFileResult, SendEmailParams, SendEmailResult, ExtractDataFromUploadedFileParams, ExtractDataFromUploadedFileResult, UploadPrivateFileParams, UploadPrivateFileResult, CreateFileSignedUrlParams, CreateFileSignedUrlResult, } from "./modules/integrations.types.js";

package/dist/index.js

@@ -3,5 +3,4 @@ import { Base44Error } from "./utils/axios-client.js";
 import { getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, } from "./utils/auth-utils.js";
 export { createClient, createClientFromRequest, Base44Error, getAccessToken, saveAccessToken, removeAccessToken, getLoginUrl, };
 export * from "./types.js";
-export { evaluateExperiments } from "./modules/experiments-evaluator.js";
 export { Actor } from "./actor.js";

package/dist/modules/agents.d.ts

@@ -1,2 +1,2 @@
 import { AgentsModule, AgentsModuleConfig } from "./agents.types.js";
-export declare function createAgentsModule({ axios, getSocket, appId, serverUrl, token, }: AgentsModuleConfig): AgentsModule;
+export declare function createAgentsModule({ axios, getSocket, appId, serverUrl, getToken, }: AgentsModuleConfig): AgentsModule;

package/dist/modules/agents.js

@@ -1,5 +1,4 @@
-import { getAccessToken } from "../utils/auth-utils.js";
-export function createAgentsModule({ axios, getSocket, appId, serverUrl, token, }) {
+export function createAgentsModule({ axios, getSocket, appId, serverUrl, getToken, }) {
     const baseURL = `/apps/${appId}/agents`;
     // Track active conversations
     const currentConversations = {};
@@ -56,7 +55,7 @@ export function createAgentsModule({ axios, getSocket, appId, serverUrl, token,
     };
     const getWhatsAppConnectURL = (agentName) => {
         const baseUrl = `${serverUrl}/api/apps/${appId}/agents/${encodeURIComponent(agentName)}/whatsapp`;
-        const accessToken = token !== null && token !== void 0 ? token : getAccessToken();
+        const accessToken = getToken();
         if (accessToken) {
             return `${baseUrl}?token=${accessToken}`;
         }
@@ -67,7 +66,7 @@ export function createAgentsModule({ axios, getSocket, appId, serverUrl, token,
     };
     const getTelegramConnectURL = (agentName) => {
         const baseUrl = `${serverUrl}/api/apps/${appId}/agents/${encodeURIComponent(agentName)}/telegram`;
-        const accessToken = token !== null && token !== void 0 ? token : getAccessToken();
+        const accessToken = getToken();
         if (accessToken) {
             return `${baseUrl}?token=${accessToken}`;
         }

package/dist/modules/agents.types.d.ts

@@ -160,8 +160,8 @@ export interface AgentsModuleConfig {
     appId: string;
     /** Server URL */
     serverUrl?: string;
-    /** Authentication token */
-    token?: string;
+    /** Returns the current authentication token, if any */
+    getToken: () => string | null | undefined;
 }
 /**
  * Agents module for managing AI agent conversations.

package/dist/modules/ai-gateway.d.ts

@@ -1,2 +1,2 @@
 import { AiGatewayModule, AiGatewayModuleConfig } from "./ai-gateway.types.js";
-export declare function createAiGatewayModule({ serverUrl, token, appId, }: AiGatewayModuleConfig): AiGatewayModule;
+export declare function createAiGatewayModule({ serverUrl, getToken, appId, }: AiGatewayModuleConfig): AiGatewayModule;

package/dist/modules/ai-gateway.js

@@ -1,10 +1,9 @@
-import { getAccessToken } from "../utils/auth-utils.js";
-export function createAiGatewayModule({ serverUrl, token, appId, }) {
+export function createAiGatewayModule({ serverUrl, getToken, appId, }) {
     const connection = () => {
         var _a;
         return ({
             baseURL: `${serverUrl}/api/apps/${appId}/ai/openai/v1`,
-            token: (_a = token !== null && token !== void 0 ? token : getAccessToken()) !== null && _a !== void 0 ? _a : "",
+            token: (_a = getToken()) !== null && _a !== void 0 ? _a : "",
         });
     };
     return {

package/dist/modules/ai-gateway.types.d.ts

@@ -17,8 +17,8 @@ export interface AiGatewayConnection {
 export interface AiGatewayModuleConfig {
     /** Server URL */
     serverUrl?: string;
-    /** Authentication token */
-    token?: string;
+    /** Returns the current authentication token, if any */
+    getToken: () => string | null | undefined;
     /** Application ID */
     appId: string;
 }

package/dist/modules/analytics.d.ts

@@ -1,7 +1,6 @@
 import { AxiosInstance } from "axios";
-import { TrackEventParams, TrackEventData, AnalyticsModuleOptions, SessionContext } from "./analytics.types";
+import { TrackEventParams, AnalyticsModuleOptions } from "./analytics.types";
 import type { InternalAuthModule } from "./auth.types";
-import type { ExperimentsContext } from "./experiments-config.types.js";
 export declare const USER_HEARTBEAT_EVENT_NAME = "__user_heartbeat_event__";
 export declare const ANALYTICS_INITIALIZATION_EVENT_NAME = "__initialization_event__";
 export declare const ANALYTICS_SESSION_DURATION_EVENT_NAME = "__session_duration_event__";
@@ -13,22 +12,8 @@ export interface AnalyticsModuleArgs {
     appId: string;
     userAuthModule: InternalAuthModule;
     enabled: boolean;
-    getVisitorId?: () => string | undefined;
-    experimentsContext?: ExperimentsContext;
 }
-/** @internal */
-export declare function isAnalyticsEnabled(enabled: boolean, state?: {
-    requestsQueue: TrackEventData[];
-    isProcessing: boolean;
-    isHeartBeatProcessing: boolean;
-    wasInitializationTracked: boolean;
-    sessionContext: SessionContext | null;
-    sessionContextPromise: Promise<SessionContext> | null;
-    sessionStartTime: string | null;
-    fallbackSessionId: string | null;
-    config: Required<AnalyticsModuleOptions>;
-}): boolean;
-export declare const createAnalyticsModule: ({ axiosClient, serverUrl, appId, userAuthModule, enabled, getVisitorId, experimentsContext, }: AnalyticsModuleArgs) => {
+export declare const createAnalyticsModule: ({ axiosClient, serverUrl, appId, userAuthModule, enabled, }: AnalyticsModuleArgs) => {
     track: (params: TrackEventParams) => void;
     cleanup: () => void;
 };
@@ -42,16 +27,6 @@ export declare const createAnalyticsModule: ({ axiosClient, serverUrl, appId, us
  *
  * @internal
  */
-export declare function resetAnalyticsSessionContext(axiosClient?: AxiosInstance): void;
+export declare function resetAnalyticsSessionContext(): void;
 export declare function getAnalyticsConfigFromUrlParams(): AnalyticsModuleOptions | undefined;
-export declare function getAnalyticsSessionId(state?: {
-    requestsQueue: TrackEventData[];
-    isProcessing: boolean;
-    isHeartBeatProcessing: boolean;
-    wasInitializationTracked: boolean;
-    sessionContext: SessionContext | null;
-    sessionContextPromise: Promise<SessionContext> | null;
-    sessionStartTime: string | null;
-    fallbackSessionId: string | null;
-    config: Required<AnalyticsModuleOptions>;
-}): string;
+export declare function getAnalyticsSessionId(): string;