@base44-preview/sdk 0.8.52-pr.305.970f972 → 0.8.52-pr.307.064de09

package/dist/modules/ai-gateway.types.d.ts

@@ -42,7 +42,7 @@ export interface AiGatewayModuleConfig {
 /**
  * AI Gateway module for calling Base44's managed AI models from your own code.
  *
- * Call `connection()` to get a `baseURL`, `token`, and `headers` that
+ * `connection()` hands you a `baseURL`, `token`, and `headers` that
  * authenticate as your Base44 app. An OpenAI-compatible client is any library, such as the `openai`
  * SDK or the Vercel AI SDK, that has the same request and response format
  * as OpenAI's API and lets you point it at a custom `baseURL`
@@ -51,9 +51,9 @@ export interface AiGatewayModuleConfig {
  * against the provider directly, no separate account, API key, or billing
  * setup with the underlying model provider required.
  *
- * The optional `provider` picks the API you connect to:
+ * `connection()` takes an optional `provider`, and each provider serves a different API:
  *
- * - `openai` (default): OpenAI-compatible chat completions, image, and video endpoints.
+ * - `openai` (default): OpenAI-compatible chat completions and image endpoints.
  * - `typesafe`: structured evaluations with the `jev` model.
  *
  * Call `connection()` from a backend function rather than the browser. This
@@ -71,52 +71,28 @@ export interface AiGatewayModuleConfig {
  *
  * The gateway also serves OpenAI's image endpoints, `/images/generations`
  * and `/images/edits`, so you can generate images and edit them using
- * reference images. Image requests use their own set of models. Pass
+ * reference images. Image requests use their own set of models: pass
  * `'automatic'` to let Base44 choose one, or pin a model such as
  * `'gemini_3_1_flash_image'` or `'gpt_image_2'`. For request options, the
  * full model list, and limits, see [Generate images with the AI Gateway](/developers/references/sdk/getting-started/ai-gateway-images).
  *
- * ## Video
- *
- * The gateway also serves OpenAI's video endpoints, `/videos`, so you can
- * generate video from a prompt, from a still image, or from existing media.
- * Video generation is asynchronous. `POST /videos` returns a job, and you poll
- * `GET /videos/{id}` until its status is `completed` or `failed`, which can
- * take minutes. Video models are their own set, and there's no `automatic`
- * option, so pin a model such as `'veo_3_1_fast'` or `'seedance_2'`. For
- * request options, the full model list, and limits, see
- * [Generate video with the AI Gateway](/developers/references/sdk/getting-started/ai-gateway-video).
- *
  * ## Structured evaluations
  *
  * The `typesafe` provider runs the `jev` evaluation model through
  * `@ai-sdk/typesafe-ai` and `experimental_evaluate` from the `ai` package,
- * version 7.0.105 or later. Pass `evaluationModel("jev")`, and note that the
- * gateway rejects other model IDs, such as `"jev-latest"`. Give it some app
- * state and a set of questions, each a `choice`, `score`, or `boolean`. Choice
- * and score answers come back with `probabilities` per option, and boolean
- * answers with a single `probability` of `true`. Use it to classify, score, or
- * route records, then apply your own thresholds and actions in code.
+ * version 7.0.105 or later. Pass `evaluationModel("jev")`; the gateway rejects
+ * other model IDs, such as `"jev-latest"`. Give it some app state and a set of
+ * questions, each a `choice`, `score`, or `boolean`. Choice and score answers
+ * come back with `probabilities` per option; boolean answers with a single
+ * `probability` of `true`. Use it to classify, score, or route records, then
+ * apply your own thresholds and actions in code.
  *
  * ## Authentication Modes
  *
  * The mode determines which token `connection()` returns:
  *
  * - **User authentication** (`base44.aiGateway`): Returns the signed-in app user's token.
- * - **Service role authentication** (`base44.asServiceRole.aiGateway`): Returns the service-role token instead.
- *
- * Use service role, as every example here does. An app that restricts Core
- * integrations rejects user-token gateway calls unless it's shared privately
- * or with your workspace, and most new apps have that restriction on from the
- * start. A user-token call therefore works while you're building and starts
- * failing the moment you share the app publicly. Service role also works when
- * there's no signed-in user at all, such as from a scheduled automation.
- *
- * The mode changes which token you get and nothing else. It grants the model
- * no extra reach, because the gateway runs a model and never touches your
- * data. Access to your app's data comes from the `base44.entities` calls you
- * write around the gateway call, so pick the mode for those on their own
- * merits rather than matching this one.
+ * - **Service role authentication** (`base44.asServiceRole.aiGateway`): Returns the service-role token instead. Use it from backend functions: apps that restrict Core integrations, the default for new apps, reject user-token gateway calls on public apps. It also works when there's no signed-in user, such as from a scheduled automation.
  *
  * ## Billing and limits
  *
@@ -224,30 +200,6 @@ export interface AiGatewayModule {
      *
      * @example
      * ```typescript
-     * // Start a video and record the job to poll later
-     * import { createClientFromRequest } from "@base44/sdk";
-     *
-     * // Runs inside a backend function
-     * const base44 = createClientFromRequest(request);
-     * const { baseURL, token, headers } = base44.asServiceRole.aiGateway.connection();
-     *
-     * const response = await fetch(`${baseURL}/videos`, {
-     *   method: "POST",
-     *   headers: { ...headers, Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
-     *   body: JSON.stringify({
-     *     model: "veo_3_1_fast",
-     *     prompt: "A lighthouse beam sweeping across a calm sea at dawn",
-     *     seconds: 8,
-     *   }),
-     * });
-     *
-     * // Video generation takes minutes, so store the id and poll it from a later request
-     * const { id } = await response.json();
-     * await base44.asServiceRole.entities.Clip.update(clipId, { video_id: id });
-     * ```
-     *
-     * @example
-     * ```typescript
      * // Route a support ticket with a structured evaluation
      * import { createClientFromRequest } from "@base44/sdk";
      * import { experimental_evaluate as evaluate } from "ai";

package/dist/modules/analytics.d.ts

@@ -1,6 +1,6 @@
 import { AxiosInstance } from "axios";
 import { TrackEventParams, AnalyticsModuleOptions } from "./analytics.types";
-import type { InternalAuthModule } from "./auth.types";
+import type { AuthModule } from "./auth.types";
 export declare const USER_HEARTBEAT_EVENT_NAME = "__user_heartbeat_event__";
 export declare const ANALYTICS_INITIALIZATION_EVENT_NAME = "__initialization_event__";
 export declare const ANALYTICS_SESSION_DURATION_EVENT_NAME = "__session_duration_event__";
@@ -10,7 +10,7 @@ export interface AnalyticsModuleArgs {
     axiosClient: AxiosInstance;
     serverUrl: string;
     appId: string;
-    userAuthModule: InternalAuthModule;
+    userAuthModule: AuthModule;
     enabled: boolean;
 }
 export declare const createAnalyticsModule: ({ axiosClient, serverUrl, appId, userAuthModule, enabled, }: AnalyticsModuleArgs) => {

package/dist/modules/analytics.js

@@ -196,9 +196,33 @@ function trackInitializationEvent(track) {
         eventName: ANALYTICS_INITIALIZATION_EVENT_NAME,
         properties: {
             referrer: document === null || document === void 0 ? void 0 : document.referrer,
+            ...getAttributionParams(),
         },
     });
 }
+// Allowlist, never the whole query string: landing URLs carry PII
+// (e.g. `utm_email`) and tokens.
+const ATTRIBUTION_PARAM_KEYS = [
+    "utm_source", "utm_medium", "utm_campaign", "utm_term", "utm_content", "utm_id",
+    "gclid", "gbraid", "wbraid", "gad_source", "gad_campaignid",
+    "fbclid", "msclkid", "ttclid", "li_fat_id",
+];
+function getAttributionParams() {
+    try {
+        const params = new URLSearchParams(window.location.search);
+        const out = {};
+        for (const key of ATTRIBUTION_PARAM_KEYS) {
+            const value = params.get(key);
+            if (value)
+                out[key] = value.slice(0, 500);
+        }
+        return out;
+    }
+    catch (_a) {
+        // React Native has no `window.location`.
+        return {};
+    }
+}
 function setSessionDurationTimerStart() {
     if (typeof window === "undefined" ||
         analyticsSharedState.sessionStartTime !== null) {

package/dist/modules/auth.d.ts

@@ -1,5 +1,5 @@
 import { AxiosInstance } from "axios";
-import { AuthModuleOptions, InternalAuthModule } from "./auth.types";
+import { AuthModuleOptions, AuthModule } from "./auth.types";
 /**
  * Creates the auth module for the Base44 SDK.
  *
@@ -10,4 +10,4 @@ import { AuthModuleOptions, InternalAuthModule } from "./auth.types";
  * @returns Auth module with authentication and user management methods
  * @internal
  */
-export declare function createAuthModule(axios: AxiosInstance, functionsAxiosClient: AxiosInstance, appId: string, options: AuthModuleOptions): InternalAuthModule;
+export declare function createAuthModule(axios: AxiosInstance, functionsAxiosClient: AxiosInstance, appId: string, options: AuthModuleOptions): AuthModule;

package/dist/modules/auth.types.d.ts

@@ -321,6 +321,20 @@ export interface AuthModule {
      * ```
      */
     isAuthenticated(): Promise<boolean>;
+    /**
+     * Checks whether an access token is currently set on the client.
+     *
+     * Reports only that a token is present, not that it's valid: an expired or revoked token still returns `true`. Use it to skip requests that can't succeed without a session, such as {@linkcode me | me()} for an anonymous visitor, and use {@linkcode isAuthenticated | isAuthenticated()} to confirm a session with the server. The token is the one passed to {@linkcode createClient | createClient()} or set with {@linkcode setToken | setToken()}, and {@linkcode logout | logout()} clears it. A session held only in an HTTP-only cookie isn't visible to the client and returns `false`.
+     *
+     * @returns `true` if the client has an access token, `false` otherwise.
+     *
+     * @example
+     * ```typescript
+     * // Skip the user lookup for anonymous visitors
+     * const user = base44.auth.hasToken() ? await base44.auth.me() : null;
+     * ```
+     */
+    hasToken(): boolean;
     /**
      * Invites a user to the app.
      *
@@ -523,20 +537,3 @@ export interface AuthModule {
      */
     changePassword(params: ChangePasswordParams): Promise<any>;
 }
-/**
- * The auth module as constructed internally, before it is narrowed to
- * {@link AuthModule} on the public client. Not exported from the package
- * index — SDK consumers see only {@link AuthModule}.
- *
- * @internal
- */
-export interface InternalAuthModule extends AuthModule {
-    /**
-     * Whether an access token is currently set on the client.
-     *
-     * Reports only the presence of a token, never its validity — an expired or
-     * revoked token still reads as `true`. Callers use this to skip requests that
-     * could not succeed without a session, not to decide that one is valid.
-     */
-    hasToken(): boolean;
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.52-pr.305.970f972",
+  "version": "0.8.52-pr.307.064de09",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",