@base44-preview/sdk 0.8.48-pr.283.2de4c8a → 0.8.48-pr.284.e0a8d2f

package/README.md

@@ -7,24 +7,6 @@ You can use it in two ways:
 - **Inside Base44 apps**: When Base44 generates your app, the SDK is already set up and ready to use.
 - **External apps**: Use the SDK to build your own frontend or backend that uses Base44 as a backend service.
 
-## Platform SDK (server)
-
-The same package includes a separate server entry point for provisioning users and
-managing their apps:
-
-```ts
-import { Base44PlatformClient } from "@base44/sdk/platform/server";
-
-const platform = new Base44PlatformClient({ apiKey, workspaceId });
-await platform.users.provision({ externalId: "customer_42" });
-const apps = await platform.asUser("customer_42").apps.list();
-```
-
-Use this entry point only on your server. `tokenStore` is optional and defaults to
-in-memory caching. See the [platform guide](platform-docs/README.md),
-[complete API reference](platform-docs/api.md), and [token lifecycle](platform-docs/tokens.md).
-The existing `@base44/sdk` root import continues to provide the runtime SDK.
-
 ## Installation
 
 **Inside Base44 apps**: The SDK is already available. No installation needed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.48-pr.283.2de4c8a",
+  "version": "0.8.48-pr.284.e0a8d2f",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -9,8 +9,8 @@
     "dist"
   ],
   "scripts": {
-    "build": "npm run build:runtime && npm run build:platform",
-    "lint": "eslint src platform-src examples/platform-server.ts",
+    "build": "tsc",
+    "lint": "eslint src",
     "test": "npm run test:types && vitest run",
     "test:types": "tsc --noEmit -p tsconfig.type-tests.json",
     "test:unit": "vitest run tests/unit",
@@ -23,12 +23,7 @@
     "create-docs-local": "npm run create-docs && npm run copy-docs-local",
     "copy-docs-local": "node scripts/mintlify-post-processing/copy-to-local-docs.js",
     "create-docs:generate": "typedoc",
-    "create-docs:process": "node scripts/mintlify-post-processing/file-processing/file-processing.js",
-    "build:runtime": "tsc",
-    "build:platform": "tsc -p tsconfig.platform.json",
-    "test:platform": "vitest run tests/unit/platform",
-    "test:package": "npm run build && node --test tests/package/platform-server.test.mjs",
-    "docs:platform": "typedoc --options typedoc.platform.json"
+    "create-docs:process": "node scripts/mintlify-post-processing/file-processing/file-processing.js"
   },
   "dependencies": {
     "axios": "^1.18.1",
@@ -68,36 +63,5 @@
   "bugs": {
     "url": "https://github.com/base44/javascript-sdk/issues"
   },
-  "homepage": "https://github.com/base44/javascript-sdk#readme",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "default": "./dist/index.js"
-    },
-    "./platform/server": {
-      "types": "./dist/platform/server/index.d.ts",
-      "default": "./dist/platform/server/index.js"
-    },
-    "./dist/*.d.ts": "./dist/*.d.ts",
-    "./dist/*.js": {
-      "types": "./dist/*.d.ts",
-      "default": "./dist/*.js"
-    },
-    "./dist/*": {
-      "types": "./dist/*.d.ts",
-      "default": "./dist/*.js"
-    },
-    "./package.json": "./package.json",
-    "./*": "./*"
-  },
-  "typesVersions": {
-    "*": {
-      "platform/server": [
-        "dist/platform/server/index.d.ts"
-      ],
-      "*": [
-        "*"
-      ]
-    }
-  }
+  "homepage": "https://github.com/base44/javascript-sdk#readme"
 }

package/dist/platform/server/client.d.ts

@@ -1,29 +0,0 @@
-import type { PlatformClientConfig, TokenRequestOptions } from "./types.js";
-import type { UsersModule } from "./modules/users.types.js";
-import type { AppsModule } from "./modules/apps.types.js";
-/** Immutable server-side view of one provisioned user; never a browser session. */
-export interface PlatformUserClient {
-    /** Canonical caller-owned external ID, not the Base44 user ID. */
-    readonly externalId: string;
-    /** App operations authenticated as this user. */
-    readonly apps: AppsModule;
-    /** Lazily mint/reuse a server credential. Never send the result to the browser. */
-    getAccessToken(options?: TokenRequestOptions): Promise<string>;
-    /** Revoke refresh credentials and clear storage even if remote revocation fails. Does not deprovision. */
-    revokeToken(): Promise<void>;
-}
-/** Server-only client for provisioning users and managing their apps.
- * @example
- * const platform = new Base44PlatformClient({ apiKey, workspaceId });
- * await platform.users.provision({ externalId: "customer_42" });
- * const apps = await platform.asUser("customer_42").apps.list();
- */
-export declare class Base44PlatformClient {
-    #private;
-    /** Explicit identity provisioning and offboarding, using the configured workspace API key. */
-    readonly users: UsersModule;
-    /** Construct without network access. One key must support provisioning and minting. */
-    constructor(config: PlatformClientConfig);
-    /** Bind a previously provisioned external user ID. Lazy, synchronous and safe to call concurrently. */
-    asUser(value: string): PlatformUserClient;
-}

package/dist/platform/server/client.js

@@ -1,57 +0,0 @@
-import { Base44PlatformError } from "./errors.js";
-import { InMemoryTokenStore } from "./token-store.js";
-import { Tokens } from "./tokens.js";
-import { Transport, checkAbort, waitFor } from "./transport.js";
-import { createUsers } from "./modules/users.js";
-import { createApps } from "./modules/apps.js";
-import { externalId, identifier, invalid, positive } from "./validation.js";
-/** Server-only client for provisioning users and managing their apps.
- * @example
- * const platform = new Base44PlatformClient({ apiKey, workspaceId });
- * await platform.users.provision({ externalId: "customer_42" });
- * const apps = await platform.asUser("customer_42").apps.list();
- */
-export class Base44PlatformClient {
-    /** Explicit identity provisioning and offboarding, using the configured workspace API key. */
-    users;
-    #transport;
-    #tokens;
-    #workspaceId;
-    #buildTimeoutMs;
-    /** Construct without network access. One key must support provisioning and minting. */
-    constructor(config) {
-        if (typeof window !== "undefined")
-            throw new Base44PlatformError("server_only", "The platform client must run on your server.");
-        if (typeof config.apiKey !== "string" || !config.apiKey.trim())
-            invalid("apiKey is required.");
-        identifier(config.workspaceId);
-        let url;
-        try {
-            url = new URL(config.serverUrl ?? "https://base44.app");
-        }
-        catch {
-            invalid("serverUrl must be an absolute HTTP(S) URL.");
-        }
-        if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash)
-            invalid("serverUrl must be an HTTP(S) URL without credentials, query or fragment.");
-        const serverUrl = url.toString().replace(/\/+$/, "");
-        this.#workspaceId = config.workspaceId;
-        this.#buildTimeoutMs = positive(config.buildTimeoutMs ?? 120_000);
-        this.#transport = new Transport(serverUrl, config.fetch ?? globalThis.fetch, positive(config.timeoutMs ?? 30_000));
-        this.#tokens = new Tokens(this.#transport, config.tokenStore ?? new InMemoryTokenStore(), config.apiKey, { serverUrl, workspaceId: config.workspaceId });
-        this.users = Object.freeze(createUsers(this.#transport, this.#tokens, config.apiKey));
-    }
-    /** Bind a previously provisioned external user ID. Lazy, synchronous and safe to call concurrently. */
-    asUser(value) {
-        const id = externalId(value);
-        return Object.freeze({
-            externalId: id,
-            apps: Object.freeze(createApps(this.#transport, this.#tokens, id, this.#workspaceId, this.#buildTimeoutMs)),
-            getAccessToken: async (options = {}) => {
-                checkAbort(options.signal);
-                return waitFor(this.#tokens.get(id, options.forceRefresh), options.signal);
-            },
-            revokeToken: () => this.#tokens.revoke(id),
-        });
-    }
-}

package/dist/platform/server/errors.d.ts

@@ -1,28 +0,0 @@
-/** Stable SDK failure categories; server response prose is never copied into errors. */
-export type PlatformErrorCode = "invalid_argument" | "server_only" | "http_error" | "invalid_response" | "network_error" | "timeout" | "aborted" | "token_store_error";
-/** Safe error representation, suitable for returning to your own application. */
-export interface PlatformErrorJSON {
-    /** Always Base44PlatformError. */
-    name: "Base44PlatformError";
-    /** SDK-defined message containing no request or response bodies. */
-    message: string;
-    /** HTTP status, or 0 for a local, network, cancellation or storage failure. */
-    status: number;
-    /** Stable SDK category; inspect status for HTTP failures. */
-    code: PlatformErrorCode;
-}
-/** All SDK failures use this error; no raw response, credential or fetch error is retained. */
-export declare class Base44PlatformError extends Error {
-    /** SDK failure category. */
-    readonly code: PlatformErrorCode;
-    /** HTTP status, or 0 if no HTTP failure response was received. */
-    readonly status: number;
-    /** Create a safe error from an SDK category, message and optional HTTP status. */
-    constructor(
-    /** SDK failure category. */
-    code: PlatformErrorCode, message: string, 
-    /** HTTP status, or 0 if no HTTP failure response was received. */
-    status?: number);
-    /** Return safe fields only; excludes stack traces and transport internals. */
-    toJSON(): PlatformErrorJSON;
-}

package/dist/platform/server/errors.js

@@ -1,20 +0,0 @@
-/** All SDK failures use this error; no raw response, credential or fetch error is retained. */
-export class Base44PlatformError extends Error {
-    code;
-    status;
-    /** Create a safe error from an SDK category, message and optional HTTP status. */
-    constructor(
-    /** SDK failure category. */
-    code, message, 
-    /** HTTP status, or 0 if no HTTP failure response was received. */
-    status = 0) {
-        super(message);
-        this.code = code;
-        this.status = status;
-        this.name = "Base44PlatformError";
-    }
-    /** Return safe fields only; excludes stack traces and transport internals. */
-    toJSON() {
-        return { name: "Base44PlatformError", message: this.message, status: this.status, code: this.code };
-    }
-}

package/dist/platform/server/index.d.ts

@@ -1,9 +0,0 @@
-/** Server-side Base44 platform SDK. Runtime app entities remain in @base44/sdk. */
-export { Base44PlatformClient } from "./client.js";
-export type { PlatformUserClient } from "./client.js";
-export { Base44PlatformError } from "./errors.js";
-export type { PlatformErrorCode, PlatformErrorJSON } from "./errors.js";
-export { InMemoryTokenStore } from "./token-store.js";
-export type { PlatformClientConfig, RequestOptions, TokenRequestOptions, TokenKey, TokenRecord, TokenStore } from "./types.js";
-export type { UsersModule, ProvisionUserInput, ProvisionedUser, DeprovisionResult } from "./modules/users.types.js";
-export type { AppsModule, PlatformApp, AppState, ListAppsInput, CreateAppInput, PreviewResult, DeployResult } from "./modules/apps.types.js";

package/dist/platform/server/index.js

@@ -1,4 +0,0 @@
-/** Server-side Base44 platform SDK. Runtime app entities remain in @base44/sdk. */
-export { Base44PlatformClient } from "./client.js";
-export { Base44PlatformError } from "./errors.js";
-export { InMemoryTokenStore } from "./token-store.js";

package/dist/platform/server/modules/apps.d.ts

@@ -1,4 +0,0 @@
-import { Transport } from "../transport.js";
-import { Tokens } from "../tokens.js";
-import type { AppsModule } from "./apps.types.js";
-export declare function createApps(transport: Transport, tokens: Tokens, id: string, workspaceId: string, buildTimeoutMs: number): AppsModule;

package/dist/platform/server/modules/apps.js

@@ -1,66 +0,0 @@
-import { checkAbort, waitFor } from "../transport.js";
-import { object, identifier, requiredString, nullableString, badResponse, invalid } from "../validation.js";
-function projectApp(value) {
-    const data = object(value);
-    const state = data.status && typeof data.status === "object" ? object(data.status).state : undefined;
-    return {
-        id: requiredString(data.id), name: nullableString(data.name), slug: nullableString(data.slug),
-        state: state === "ready" || state === "processing" || state === "error" ? state : "unknown",
-        updatedAt: nullableString(data.updated_date), previewScreenshotUrl: nullableString(data.preview_screenshot_url),
-        logoUrl: nullableString(data.logo_url), lastDeployedAt: nullableString(data.last_deployed_at),
-        currentRevision: nullableString(data.last_git_commit_hash), deployedRevision: nullableString(data.last_deployed_git_commit_hash),
-        hasCustomInstructions: typeof data.custom_instructions === "string" && data.custom_instructions.length > 0,
-    };
-}
-export function createApps(transport, tokens, id, workspaceId, buildTimeoutMs) {
-    async function request(path, method, body, options = {}) {
-        checkAbort(options.signal);
-        const token = await waitFor(tokens.get(id), options.signal);
-        return transport.request(path, method, {
-            Authorization: `Bearer ${token}`, "X-Active-Workspace-Id": workspaceId, "Content-Type": "application/json",
-        }, body, options);
-    }
-    return {
-        async list(input = {}, options) {
-            const limit = input.limit ?? 20, skip = input.skip ?? 0;
-            if (!Number.isInteger(limit) || limit < 1 || !Number.isInteger(skip) || skip < 0)
-                invalid("limit must be positive and skip nonnegative integers.");
-            const query = new URLSearchParams({ q: JSON.stringify({ app_type: { $nin: ["user_agent"] } }), sort: "-updated_date", limit: String(limit), skip: String(skip), filter_mode: "all_apps_workspace" });
-            if (input.folderId !== undefined) {
-                identifier(input.folderId);
-                query.set("folder_id", input.folderId);
-            }
-            const data = await request(`/api/apps?${query}`, "GET", undefined, options);
-            return Array.isArray(data) ? data.map(projectApp) : badResponse();
-        },
-        async create(input, options) {
-            if (typeof input.prompt !== "string" || !input.prompt.trim())
-                invalid("An initial prompt is required.");
-            return projectApp(await request("/api/apps", "POST", {
-                name: input.name, user_description: input.prompt, organization_id: workspaceId,
-                public_settings: input.publicSettings, prevent_iframe_embedding: input.preventIframeEmbedding,
-                custom_instructions: input.customInstructions,
-                secrets: input.secrets === undefined ? undefined : Object.fromEntries(Object.entries(input.secrets).map(([key, value]) => [key, { type: "value", value }])),
-                initial_message: { content: input.prompt },
-            }, { timeoutMs: buildTimeoutMs, ...options }));
-        },
-        async get(appId, options) { return projectApp(await request(`/api/apps/${identifier(appId)}`, "GET", undefined, options)); },
-        async rename(appId, name, options) {
-            if (typeof name !== "string" || !name.trim())
-                invalid("A nonempty app name is required.");
-            return projectApp(await request(`/api/apps/${identifier(appId)}`, "PUT", { name: name.trim() }, options));
-        },
-        async addToFolder(folderId, appIds, options) {
-            appIds.forEach(identifier);
-            await request(`/api/app-folders/${identifier(folderId)}/items`, "POST", { app_ids: appIds }, options);
-        },
-        async getPreviewUrl(appId, options) {
-            const data = object(await request(`/api/apps/${identifier(appId)}/sandbox/preview-url`, "GET", undefined, options));
-            return { url: requiredString(data.preview_url), token: nullableString(data.preview_token) };
-        },
-        async deploy(appId, options) {
-            const data = object(await request(`/api/apps/${identifier(appId)}/deploy`, "POST", {}, { timeoutMs: buildTimeoutMs, ...options }));
-            return { appId: requiredString(data.app_id), checkpointId: nullableString(data.checkpoint_id), revision: requiredString(data.git_commit_hash), deployedAt: requiredString(data.deployed_at) };
-        },
-    };
-}

package/dist/platform/server/modules/apps.types.d.ts

@@ -1,87 +0,0 @@
-import type { RequestOptions } from "../types.js";
-/** Public build state. Unrecognized server states map to unknown. */
-export type AppState = "ready" | "processing" | "error" | "unknown";
-/** Projected app metadata. No source files, author identity, billing or raw status details. */
-export interface PlatformApp {
-    /** Base44 app ID. */
-    id: string;
-    /** App display name, or null if absent. */
-    name: string | null;
-    /** Public URL slug, or null if absent. */
-    slug: string | null;
-    /** Build state; unknown when missing or newly introduced by the server. */
-    state: AppState;
-    /** ISO 8601 update timestamp, or null. */
-    updatedAt: string | null;
-    /** Preview screenshot URL, or null. */
-    previewScreenshotUrl: string | null;
-    /** App logo URL, or null. */
-    logoUrl: string | null;
-    /** ISO 8601 last deployment timestamp, or null. */
-    lastDeployedAt: string | null;
-    /** Current code revision, or null; permits comparing edits with the deployed version. */
-    currentRevision: string | null;
-    /** Last deployed code revision, or null. */
-    deployedRevision: string | null;
-    /** Whether persisted custom instructions are nonempty. Does not return their contents. */
-    hasCustomInstructions: boolean;
-}
-/** App listing options; this is not a partner-user authorization filter. */
-export interface ListAppsInput {
-    /** Optional Base44 folder ID; omitted means no folder restriction. */
-    folderId?: string;
-    /** Maximum results; integer > 0, defaults to 20. No total count is returned. */
-    limit?: number;
-    /** Number of results to skip; integer >= 0, defaults to 0. */
-    skip?: number;
-}
-/** App creation, including the first build. Subsequent chat is not part of this SDK. */
-export interface CreateAppInput {
-    /** Initial build prompt; required, nonempty. Also used as the app description. */
-    prompt: string;
-    /** Optional display name; omitted lets the server choose. */
-    name?: string;
-    /** Optional persisted instructions applied starting with the initial build. */
-    customInstructions?: string;
-    /** Server-resolved secret name/value pairs installed before the build. Never accept browser-supplied values blindly. */
-    secrets?: Record<string, string>;
-    /** App access policy; omitted leaves the server default. */
-    publicSettings?: "private_with_login" | "public_with_login" | "public_without_login" | "workspace_with_login";
-    /** Whether to block iframe embedding; omitted leaves the server default. Starter sets false. */
-    preventIframeEmbedding?: boolean;
-}
-/** Preview access. Credential-bearing fields must not be logged or cached. */
-export interface PreviewResult {
-    /** Preview URL for unpublished changes. May itself include authorization material. */
-    url: string;
-    /** Short-lived preview credential, or null when not needed. Not a platform access token. */
-    token: string | null;
-}
-/** Completed deployment response; identifies the version published by this request. */
-export interface DeployResult {
-    /** Deployed app ID. */
-    appId: string;
-    /** Associated saved-version ID, or null. */
-    checkpointId: string | null;
-    /** Exact published code revision. */
-    revision: string;
-    /** ISO 8601 deployment timestamp. */
-    deployedAt: string;
-}
-/** App operations performed as the user bound by asUser. */
-export interface AppsModule {
-    /** List apps newest-updated first, excluding agent apps; returns a bare array. */
-    list(input?: ListAppsInput, options?: RequestOptions): Promise<PlatformApp[]>;
-    /** Create and start the first build. No automatic retry, filing or local ownership write. */
-    create(input: CreateAppInput, options?: RequestOptions): Promise<PlatformApp>;
-    /** Read projected metadata for an authorized app. */
-    get(appId: string, options?: RequestOptions): Promise<PlatformApp>;
-    /** Rename only; whitespace around the name is trimmed. */
-    rename(appId: string, name: string, options?: RequestOptions): Promise<PlatformApp>;
-    /** Move apps into a folder. Separate from creation; failure leaves created apps intact. */
-    addToFolder(folderId: string, appIds: string[], options?: RequestOptions): Promise<void>;
-    /** Boot or reuse a preview; request fresh access each time it is needed. */
-    getPreviewUrl(appId: string, options?: RequestOptions): Promise<PreviewResult>;
-    /** Publish the current main version. No polling or chat subscription is started. */
-    deploy(appId: string, options?: RequestOptions): Promise<DeployResult>;
-}

package/dist/platform/server/modules/apps.types.js

@@ -1 +0,0 @@
-export {};

package/dist/platform/server/modules/users.d.ts

@@ -1,4 +0,0 @@
-import type { UsersModule } from "./users.types.js";
-import { Transport } from "../transport.js";
-import { Tokens } from "../tokens.js";
-export declare function createUsers(transport: Transport, tokens: Tokens, apiKey: string): UsersModule;

package/dist/platform/server/modules/users.js

@@ -1,40 +0,0 @@
-import { Base44PlatformError } from "../errors.js";
-import { externalId, object, requiredString, boolean, badResponse } from "../validation.js";
-export function createUsers(transport, tokens, apiKey) {
-    const headers = { Authorization: apiKey, "Content-Type": "application/json" };
-    return {
-        async provision(input, options) {
-            const id = externalId(input.externalId);
-            return tokens.exclusive(id, async () => {
-                const data = object(await transport.request("/api/service/users", "POST", headers, {
-                    service_external_id: id, display_name: input.displayName,
-                }, options));
-                const email = requiredString(data.email);
-                const domain = email.split("@")[1]?.toLowerCase();
-                if (!domain || !(domain === "svc.base44.invalid" || domain.endsWith(".svc.base44.invalid")))
-                    return badResponse();
-                return {
-                    externalId: requiredString(data.service_external_id), userId: requiredString(data.user_id),
-                    email, role: requiredString(data.role), created: boolean(data.created),
-                };
-            });
-        },
-        async deprovision(value, options) {
-            const id = externalId(value);
-            return tokens.exclusive(id, async () => {
-                let removed;
-                try {
-                    const data = object(await transport.request(`/api/service/users/${encodeURIComponent(id)}`, "DELETE", headers, undefined, options));
-                    removed = boolean(data.removed);
-                }
-                catch (error) {
-                    if (!(error instanceof Base44PlatformError) || error.status !== 404)
-                        throw error;
-                    removed = false;
-                }
-                await tokens.remove(id);
-                return { removed };
-            });
-        },
-    };
-}

package/dist/platform/server/modules/users.types.d.ts

@@ -1,33 +0,0 @@
-import type { RequestOptions } from "../types.js";
-/** Input for an explicitly requested provisioning operation. */
-export interface ProvisionUserInput {
-    /** Stable ID from your system; trimmed and lowercased, never a Base44 user ID. */
-    externalId: string;
-    /** Optional display label visible to workspace administrators; avoid personal data. */
-    displayName?: string;
-}
-/** Synthetic service identity returned by provisioning, not a login-capable account. */
-export interface ProvisionedUser {
-    /** Canonical ID from your system. */
-    externalId: string;
-    /** Base44-assigned user ID. */
-    userId: string;
-    /** Synthetic, non-routable service address; not your customer's email. */
-    email: string;
-    /** Workspace role returned by Base44; this SDK never requests an elevated role. */
-    role: string;
-    /** True if created by this request, false if it already existed. */
-    created: boolean;
-}
-/** Outcome of removing a service identity. */
-export interface DeprovisionResult {
-    /** False if already absent; true if removed. */
-    removed: boolean;
-}
-/** Workspace-level identity operations, authenticated with the configured API key. */
-export interface UsersModule {
-    /** Explicitly create or return a principal; idempotent within its workspace. */
-    provision(input: ProvisionUserInput, options?: RequestOptions): Promise<ProvisionedUser>;
-    /** Offboard and clear local tokens. Owned apps may transfer to the workspace owner. */
-    deprovision(externalId: string, options?: RequestOptions): Promise<DeprovisionResult>;
-}

package/dist/platform/server/modules/users.types.js

@@ -1 +0,0 @@
-export {};

package/dist/platform/server/token-store.d.ts

@@ -1,11 +0,0 @@
-import type { TokenKey, TokenRecord, TokenStore } from "./types.js";
-/** Process-local storage. Reuse a client to reuse tokens; no cross-process synchronization. */
-export declare class InMemoryTokenStore implements TokenStore {
-    #private;
-    /** Return a copy, or null when absent. */
-    get(key: TokenKey): Promise<TokenRecord | null>;
-    /** Store a copy, isolated by URL, workspace and external user ID. */
-    set(key: TokenKey, record: TokenRecord): Promise<void>;
-    /** Remove cached credentials; does not revoke them remotely. */
-    delete(key: TokenKey): Promise<void>;
-}

package/dist/platform/server/token-store.js

@@ -1,17 +0,0 @@
-/** Process-local storage. Reuse a client to reuse tokens; no cross-process synchronization. */
-export class InMemoryTokenStore {
-    #records = new Map();
-    /** Return a copy, or null when absent. */
-    async get(key) {
-        const record = this.#records.get(JSON.stringify([key.serverUrl, key.workspaceId, key.externalId]));
-        return record ? { ...record } : null;
-    }
-    /** Store a copy, isolated by URL, workspace and external user ID. */
-    async set(key, record) {
-        this.#records.set(JSON.stringify([key.serverUrl, key.workspaceId, key.externalId]), { ...record });
-    }
-    /** Remove cached credentials; does not revoke them remotely. */
-    async delete(key) {
-        this.#records.delete(JSON.stringify([key.serverUrl, key.workspaceId, key.externalId]));
-    }
-}

package/dist/platform/server/tokens.d.ts

@@ -1,16 +0,0 @@
-import { Transport } from "./transport.js";
-import type { TokenKey, TokenStore } from "./types.js";
-export declare class Tokens {
-    #private;
-    private transport;
-    private store;
-    private apiKey;
-    private base;
-    constructor(transport: Transport, store: TokenStore, apiKey: string, base: Omit<TokenKey, "externalId">);
-    exclusive<T>(id: string, operation: () => Promise<T>): Promise<T>;
-    storage<T>(operation: () => Promise<T>): Promise<T>;
-    key(id: string): TokenKey;
-    get(id: string, force?: boolean): Promise<string>;
-    remove(id: string): Promise<void>;
-    revoke(id: string): Promise<void>;
-}

package/dist/platform/server/tokens.js

@@ -1,80 +0,0 @@
-import { Base44PlatformError } from "./errors.js";
-import { object, requiredString, nullableString, badResponse } from "./validation.js";
-export class Tokens {
-    transport;
-    store;
-    apiKey;
-    base;
-    #generation = new Map();
-    #pending = new Map();
-    constructor(transport, store, apiKey, base) {
-        this.transport = transport;
-        this.store = store;
-        this.apiKey = apiKey;
-        this.base = base;
-    }
-    async exclusive(id, operation) {
-        const prior = this.#pending.get(id);
-        const task = (async () => { await prior?.catch(() => { }); return operation(); })();
-        this.#pending.set(id, task);
-        try {
-            return await task;
-        }
-        finally {
-            if (this.#pending.get(id) === task)
-                this.#pending.delete(id);
-        }
-    }
-    async storage(operation) {
-        try {
-            return await operation();
-        }
-        catch {
-            throw new Base44PlatformError("token_store_error", "Token storage could not complete the operation.");
-        }
-    }
-    key(id) { return { ...this.base, externalId: id }; }
-    async get(id, force = false) {
-        // Capture before joining the queue so concurrent forced renewals share the new token.
-        const generation = this.#generation.get(id) ?? 0;
-        return this.exclusive(id, async () => {
-            const key = this.key(id);
-            const held = await this.storage(() => this.store.get(key));
-            const now = Date.now();
-            if (held && (held.renewAt ?? held.expiresAt) > now && (!force || (this.#generation.get(id) ?? 0) !== generation))
-                return held.accessToken;
-            const data = object(await this.transport.request("/api/service/user-tokens", "POST", {
-                Authorization: this.apiKey, "Content-Type": "application/json",
-            }, { service_external_id: id }));
-            const lifetime = Number(data.expires_in) * 1000;
-            if (!Number.isFinite(lifetime) || lifetime <= 0)
-                return badResponse();
-            const issuedAt = Date.now();
-            const record = {
-                accessToken: requiredString(data.access_token), refreshToken: nullableString(data.refresh_token),
-                expiresAt: issuedAt + lifetime,
-                renewAt: issuedAt + lifetime - Math.min(300_000, lifetime / 2),
-            };
-            await this.storage(() => this.store.set(key, record));
-            this.#generation.set(id, (this.#generation.get(id) ?? 0) + 1);
-            return record.accessToken;
-        });
-    }
-    async remove(id) {
-        await this.storage(() => this.store.delete(this.key(id)));
-    }
-    async revoke(id) {
-        return this.exclusive(id, async () => {
-            const record = await this.storage(() => this.store.get(this.key(id)));
-            try {
-                if (record?.refreshToken)
-                    await this.transport.request("/oauth/revoke", "POST", {
-                        "Content-Type": "application/x-www-form-urlencoded",
-                    }, new URLSearchParams({ token: record.refreshToken, client_id: "svc_delegate" }));
-            }
-            finally {
-                await this.remove(id);
-            }
-        });
-    }
-}

package/dist/platform/server/transport.d.ts

@@ -1,10 +0,0 @@
-import type { RequestOptions } from "./types.js";
-export declare function checkAbort(signal?: AbortSignal): void;
-export declare function waitFor<T>(promise: Promise<T>, signal?: AbortSignal): Promise<T>;
-export declare class Transport {
-    private url;
-    private fetcher;
-    private timeoutMs;
-    constructor(url: string, fetcher: typeof fetch, timeoutMs: number);
-    request(path: string, method: string, headers: Record<string, string>, body?: unknown, options?: RequestOptions): Promise<unknown>;
-}

package/dist/platform/server/transport.js

@@ -1,69 +0,0 @@
-import { Base44PlatformError } from "./errors.js";
-import { positive } from "./validation.js";
-export function checkAbort(signal) {
-    if (signal?.aborted)
-        throw new Base44PlatformError("aborted", "The request was cancelled.");
-}
-export async function waitFor(promise, signal) {
-    checkAbort(signal);
-    if (!signal)
-        return promise;
-    let abort = () => { };
-    try {
-        return await Promise.race([promise, new Promise((_, reject) => {
-                abort = () => reject(new Base44PlatformError("aborted", "The request was cancelled."));
-                signal.addEventListener("abort", abort, { once: true });
-            })]);
-    }
-    finally {
-        signal.removeEventListener("abort", abort);
-    }
-}
-export class Transport {
-    url;
-    fetcher;
-    timeoutMs;
-    constructor(url, fetcher, timeoutMs) {
-        this.url = url;
-        this.fetcher = fetcher;
-        this.timeoutMs = timeoutMs;
-    }
-    async request(path, method, headers, body, options = {}) {
-        checkAbort(options.signal);
-        const timeoutMs = positive(options.timeoutMs ?? this.timeoutMs);
-        const controller = new AbortController();
-        const abort = () => controller.abort();
-        options.signal?.addEventListener("abort", abort, { once: true });
-        const timer = setTimeout(abort, timeoutMs);
-        try {
-            const response = await this.fetcher(`${this.url}${path}`, {
-                method, headers, signal: controller.signal, redirect: "error", cache: "no-store",
-                body: body === undefined ? undefined : body instanceof URLSearchParams ? body : JSON.stringify(body),
-            });
-            if (!response.ok)
-                throw new Base44PlatformError("http_error", `Platform request failed (HTTP ${response.status}).`, response.status);
-            const text = await response.text();
-            if (!text.trim())
-                return undefined;
-            try {
-                return JSON.parse(text);
-            }
-            catch {
-                throw new Base44PlatformError("invalid_response", "The platform returned invalid JSON.");
-            }
-        }
-        catch (error) {
-            if (error instanceof Base44PlatformError)
-                throw error;
-            if (options.signal?.aborted)
-                throw new Base44PlatformError("aborted", "The request was cancelled.");
-            if (controller.signal.aborted)
-                throw new Base44PlatformError("timeout", "The request timed out; the server operation may still have completed.");
-            throw new Base44PlatformError("network_error", "The platform request could not be completed.");
-        }
-        finally {
-            clearTimeout(timer);
-            options.signal?.removeEventListener("abort", abort);
-        }
-    }
-}

package/dist/platform/server/types.d.ts

@@ -1,60 +0,0 @@
-/** Per-call controls. Cancellation does not roll back an accepted server operation. */
-export interface RequestOptions {
-    /** Abort this caller's wait and HTTP request. Shared token minting may finish. */
-    signal?: AbortSignal;
-    /** HTTP timeout in milliseconds; overrides the method default. Must be positive. */
-    timeoutMs?: number;
-}
-/** Persisted server credential. Never expose this record to a browser or logs. */
-export interface TokenRecord {
-    /** Opaque Base44 service-user access token. */
-    accessToken: string;
-    /** Refresh credential used only for revocation; null if not issued. */
-    refreshToken: string | null;
-    /** Access-token expiry, Unix epoch milliseconds. */
-    expiresAt: number;
-    /** Renew at this epoch millisecond timestamp; defaults to expiresAt when absent. */
-    renewAt?: number;
-}
-/** Storage namespace. All three fields participate in isolation. */
-export interface TokenKey {
-    /** Normalized configured platform URL (no trailing slash). */
-    serverUrl: string;
-    /** Configured Base44 workspace ID, not an external user ID. */
-    workspaceId: string;
-    /** Caller-owned ID, trimmed and lowercased to match provisioning. */
-    externalId: string;
-}
-/** Server-side storage adapter; operations must complete before their promise resolves. */
-export interface TokenStore {
-    /** Return a record or null on a miss. Do not log credentials. */
-    get(key: TokenKey): Promise<TokenRecord | null>;
-    /** Persist the complete record, replacing the previous one for this key. */
-    set(key: TokenKey, record: TokenRecord): Promise<void>;
-    /** Remove the record only; do not delete or provision the user. Missing is a no-op. */
-    delete(key: TokenKey): Promise<void>;
-}
-/** Server-only platform client configuration. */
-export interface PlatformClientConfig {
-    /** Workspace key with service_users:provision and user_tokens:mint permissions. */
-    apiKey: string;
-    /** Workspace for app operations. Must match the workspace that owns apiKey. */
-    workspaceId: string;
-    /** Trusted server configuration; defaults to https://base44.app. Never use request input. */
-    serverUrl?: string;
-    /** Defaults to a private in-memory store per client instance. */
-    tokenStore?: TokenStore;
-    /** Fetch-compatible transport; defaults to globalThis.fetch. */
-    fetch?: typeof globalThis.fetch;
-    /** Ordinary request timeout in milliseconds; default 30000. */
-    timeoutMs?: number;
-    /** Create/deploy timeout in milliseconds; default 120000. */
-    buildTimeoutMs?: number;
-}
-/** Controls acquisition of a server credential for legacy integrations. */
-export interface TokenRequestOptions {
-    /** Abort this caller’s wait; shared acquisition may finish and populate storage. */
-    signal?: AbortSignal;
-    /** Re-mint even if cached; default false. Never provisions a missing user. */
-    forceRefresh?: boolean;
-}

package/dist/platform/server/types.js

@@ -1 +0,0 @@
-export {};

package/dist/platform/server/validation.d.ts

@@ -1,9 +0,0 @@
-export declare function invalid(message: string): never;
-export declare function identifier(value: string): string;
-export declare function externalId(value: string): string;
-export declare function positive(value: number): number;
-export declare function object(value: unknown): Record<string, unknown>;
-export declare function badResponse(): never;
-export declare function requiredString(value: unknown): string;
-export declare function nullableString(value: unknown): string | null;
-export declare function boolean(value: unknown): boolean;

package/dist/platform/server/validation.js

@@ -1,36 +0,0 @@
-import { Base44PlatformError } from "./errors.js";
-export function invalid(message) {
-    throw new Base44PlatformError("invalid_argument", message);
-}
-export function identifier(value) {
-    if (typeof value !== "string" || !/^[A-Za-z0-9_-]+$/.test(value))
-        invalid("Expected a nonempty resource ID containing letters, digits, underscores or hyphens.");
-    return encodeURIComponent(value);
-}
-export function externalId(value) {
-    if (typeof value !== "string" || !value.trim() || value.trim() === "." || value.trim() === "..")
-        invalid("Expected a nonempty external user ID, excluding dot path segments.");
-    return value.trim().toLowerCase();
-}
-export function positive(value) {
-    if (!Number.isFinite(value) || value <= 0)
-        invalid("Expected a positive finite number.");
-    return value;
-}
-export function object(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return badResponse();
-    return value;
-}
-export function badResponse() {
-    throw new Base44PlatformError("invalid_response", "The platform returned an unexpected response shape.");
-}
-export function requiredString(value) {
-    return typeof value === "string" && value.length > 0 ? value : badResponse();
-}
-export function nullableString(value) {
-    return value == null ? null : typeof value === "string" ? value : badResponse();
-}
-export function boolean(value) {
-    return typeof value === "boolean" ? value : badResponse();
-}