@base44-preview/sdk 0.8.53-pr.322.e2bf534 → 0.8.53-pr.323.0c3777e

package/dist/modules/ai-gateway.types.d.ts

@@ -5,8 +5,9 @@ export interface AiGatewayConnection {
     /** Base URL of the selected gateway provider. */
     baseURL: string;
     /**
-     * Bearer token that authenticates the request. Empty string when the caller is
-     * unauthenticated.
+     * Bearer token that authenticates the request: the service-role token from
+     * `base44.asServiceRole.aiGateway`, or the signed-in user's token from
+     * `base44.aiGateway`. The gateway expects the service-role token.
      */
     token: string;
     /**
@@ -91,8 +92,8 @@ export interface AiGatewayModuleConfig {
  *
  * The mode determines which token `connection()` returns:
  *
- * - **User authentication** (`base44.aiGateway`): Returns the signed-in app user's token.
- * - **Service role authentication** (`base44.asServiceRole.aiGateway`): Returns the service-role token instead. Use it from backend functions: apps that restrict Core integrations, the default for new apps, reject user-token gateway calls on public apps. It also works when there's no signed-in user, such as from a scheduled automation.
+ * - **Service role authentication** (`base44.asServiceRole.aiGateway`): Returns the app's service-role token. Use it server-side; the gateway rejects other calls with a `403` and the error code `ai_gateway_requires_service_role`. It also works with no signed-in user, such as from a scheduled automation.
+ * - **User authentication** (`base44.aiGateway`): Returns the signed-in app user's token. The gateway accepts it only on apps shared privately or with your workspace.
  *
  * ## Billing and limits
  *

package/dist/modules/integrations.types.d.ts

@@ -19,7 +19,7 @@ export type IntegrationEndpointFunction = (data: Record<string, any>) => Promise
  * ```typescript
  * await base44.integrations.Core.InvokeLLM({
  *   prompt: 'Explain quantum computing',
- *   model: 'gpt_5'
+ *   model: 'gemini_3_8_flash'
  * });
  * ```
  *
@@ -43,9 +43,9 @@ export interface InvokeLLMParams {
     prompt: string;
     /** Optionally specify a model to override the app-level model setting for this specific call.
      *
-     * Options: `"gpt_5_mini"`, `"gemini_3_flash"`, `"gpt_5_4"`, `"gpt_5_6_sol"`, `"gpt_5_6_luna"`, `"gemini_3_1_pro"`, `"claude_sonnet_4_6"`, `"claude_opus_4_6"`, `"claude_opus_4_7"`, `"claude_opus_4_8"`, `"claude-sonnet-5"`
+     * Options: `"gemini_3_8_flash"`, `"gpt_6_luna"`, `"claude-sonnet-5"`, `"claude_opus_5_5"`, `"gpt_6_sol"`, `"gpt_6_astra"`, `"claude_fable_5_1"`, `"glm_5_2"`, `"gemini_3_1_pro"`, `"gpt_5_4"`, `"claude_sonnet_4_6"`, `"claude_opus_4_6"`, `"claude_opus_4_7"`, `"claude_opus_4_8"`, `"claude_opus_5"`, `"gpt_5_6_terra"`, `"gpt_5_6_sol"`, `"gpt_5_6_luna"`
      */
-    model?: 'gpt_5_mini' | 'gemini_3_flash' | 'gpt_5_4' | 'gpt_5_6_sol' | 'gpt_5_6_luna' | 'gemini_3_1_pro' | 'claude_sonnet_4_6' | 'claude_opus_4_6' | 'claude_opus_4_7' | 'claude_opus_4_8' | 'claude-sonnet-5';
+    model?: 'gemini_3_8_flash' | 'gpt_6_luna' | 'claude-sonnet-5' | 'claude_opus_5_5' | 'gpt_6_sol' | 'gpt_6_astra' | 'claude_fable_5_1' | 'glm_5_2' | 'gemini_3_1_pro' | 'gpt_5_4' | 'claude_sonnet_4_6' | 'claude_opus_4_6' | 'claude_opus_4_7' | 'claude_opus_4_8' | 'claude_opus_5' | 'gpt_5_6_terra' | 'gpt_5_6_sol' | 'gpt_5_6_luna';
     /** If set to `true`, the LLM will use Google Search, Maps, and News to gather real-time context before answering.
      * @default false
      */

package/dist/modules/payments-checkout.d.ts

@@ -1,9 +1,22 @@
 import type { CheckoutElement, CheckoutMount, CompleteCheckoutResult, MountableCheckout, MountCheckoutOptions } from "./payments.types.js";
 /** @internal */
 export type LoadScript = (src: string) => Promise<void>;
+/**
+ * The response of `GET /payments/config`.
+ * @internal
+ */
+export interface PaymentsCheckoutConfig {
+    paypal?: {
+        script_url?: string;
+    };
+    stripe?: {
+        script_url?: string;
+    };
+}
 /** @internal */
 export interface MountCheckoutDeps {
     completeCheckout: (checkoutId: string) => Promise<CompleteCheckoutResult>;
+    getConfig: () => Promise<PaymentsCheckoutConfig>;
     loadScript: LoadScript;
 }
 /**

package/dist/modules/payments-checkout.js

@@ -1,11 +1,29 @@
-// PayPal JS SDK v6: https://developer.paypal.com/sdk/js/reference
-const PAYPAL_SCRIPT_URLS = {
-    live: "https://www.paypal.com/web-sdk/v6/core",
-    sandbox: "https://www.sandbox.paypal.com/web-sdk/v6/core",
+// The backend picks each script URL, but the script runs on the buyer's page, so only these hosts may load.
+const ALLOWED_SCRIPT_HOSTS = {
+    paypal: ["www.paypal.com", "www.sandbox.paypal.com"],
+    stripe: ["js.stripe.com"],
 };
-// Use v3 rather than a dated release, because Base44 creates sessions with ui_mode "embedded",
-// which dahlia and later reject.
-const STRIPE_SCRIPT_URL = "https://js.stripe.com/v3/";
+async function scriptUrlFor(provider, deps) {
+    var _a, _b;
+    const value = (_b = (_a = (await deps.getConfig())) === null || _a === void 0 ? void 0 : _a[provider]) === null || _b === void 0 ? void 0 : _b.script_url;
+    let url;
+    try {
+        url = value ? new URL(value) : undefined;
+    }
+    catch (_c) {
+        url = undefined;
+    }
+    if (!url ||
+        url.protocol !== "https:" ||
+        url.port !== "" ||
+        url.username !== "" ||
+        url.password !== "" ||
+        !ALLOWED_SCRIPT_HOSTS[provider].includes(url.hostname)) {
+        const name = provider === "paypal" ? "PayPal" : "Stripe";
+        throw new Error(`The payments config has no valid ${name} script URL`);
+    }
+    return url.href;
+}
 function browserGlobals() {
     return window;
 }
@@ -49,10 +67,10 @@ const stripeInstances = new Map();
 // Stripe allows one Embedded Checkout at a time, so mounts run in order and replace the last.
 let stripeQueue = Promise.resolve();
 let activeStripeCheckout = null;
-function mountStripe(element, embedded, deps) {
+function mountStripe(element, scriptUrl, embedded, deps) {
     const mount = stripeQueue.then(async () => {
         var _a;
-        const Stripe = await loadGlobal(STRIPE_SCRIPT_URL, () => browserGlobals().Stripe, deps.loadScript);
+        const Stripe = await loadGlobal(scriptUrl, () => browserGlobals().Stripe, deps.loadScript);
         let stripe = stripeInstances.get(embedded.publishable_key);
         if (!stripe) {
             stripe = Stripe(embedded.publishable_key);
@@ -92,31 +110,9 @@ function mountStripe(element, embedded, deps) {
     stripeQueue = mount.catch(() => undefined);
     return mount;
 }
-// The v6 script for one environment defines the same global as the other's.
-let loadedPayPalEnvironment;
-async function mountPayPal(element, checkoutId, currency, embedded, options, deps) {
+async function mountPayPal(element, scriptUrl, checkoutId, currency, embedded, options, deps) {
     var _a;
-    const environment = embedded.environment;
-    const scriptUrl = PAYPAL_SCRIPT_URLS[environment];
-    if (!scriptUrl) {
-        throw new Error("This checkout is missing embedded.environment. Pass the full result of createCheckout() to mountCheckout().");
-    }
-    if (loadedPayPalEnvironment && loadedPayPalEnvironment !== environment) {
-        throw new Error(`PayPal's ${loadedPayPalEnvironment} script is already loaded on this page, so a ${environment} checkout can't mount. Reload the page first.`);
-    }
-    // The environment of a PayPal script the app loaded itself can't be detected, so it's trusted.
-    if (!browserGlobals().paypal && !loadedPayPalEnvironment) {
-        loadedPayPalEnvironment = environment;
-    }
-    let paypal;
-    try {
-        paypal = await loadGlobal(scriptUrl, () => browserGlobals().paypal, deps.loadScript);
-    }
-    catch (error) {
-        if (!browserGlobals().paypal)
-            loadedPayPalEnvironment = undefined;
-        throw error;
-    }
+    const paypal = await loadGlobal(scriptUrl, () => browserGlobals().paypal, deps.loadScript);
     if (typeof paypal.createInstance !== "function") {
         throw new Error("Another PayPal JS SDK version is already loaded on this page. Remove it to use mountCheckout().");
     }
@@ -230,9 +226,9 @@ export async function mountCheckout(element, checkout, options, deps) {
     }
     switch (embedded.provider) {
         case "stripe":
-            return mountStripe(element, embedded, deps);
+            return mountStripe(element, await scriptUrlFor("stripe", deps), embedded, deps);
         case "paypal":
-            return mountPayPal(element, checkout.checkout_id, checkout.currency, embedded, options, deps);
+            return mountPayPal(element, await scriptUrlFor("paypal", deps), checkout.checkout_id, checkout.currency, embedded, options, deps);
         default:
             throw new Error(`Embedded checkout isn't supported for provider ${embedded.provider}`);
     }

package/dist/modules/payments.js

@@ -1,4 +1,4 @@
-import { loadScript, mountCheckout } from "./payments-checkout.js";
+import { loadScript, mountCheckout, } from "./payments-checkout.js";
 function requireId(value, name) {
     if (!value || typeof value !== "string") {
         throw new Error(`${name} is required and must be a string`);
@@ -45,12 +45,22 @@ function createPaymentsRequests(axios, appId) {
  */
 export function createPaymentsModule(axios, appId) {
     const requests = createPaymentsRequests(axios, appId);
+    // One fetch per client, retried on the next mount if it fails.
+    let config;
+    const getConfig = () => {
+        config !== null && config !== void 0 ? config : (config = axios.get(`/apps/${appId}/payments/config`).catch((error) => {
+            config = undefined;
+            throw error;
+        }));
+        return config;
+    };
     return {
         completeCheckout: requests.completeCheckout,
         listPurchases: requests.listPurchases,
         mountCheckout(element, checkout, options = {}) {
             return mountCheckout(element, checkout, options, {
                 completeCheckout: requests.completeCheckout,
+                getConfig,
                 loadScript,
             });
         },

package/dist/modules/payments.types.d.ts

@@ -111,8 +111,6 @@ export interface PayPalEmbeddedCheckout {
     partner_attribution_id?: string | null;
     /** Whether the checkout is a one-time payment or a subscription. */
     intent: "capture" | "subscription";
-    /** PayPal environment the checkout was created in. */
-    environment: "sandbox" | "live";
 }
 /**
  * Data that an embedded checkout needs to render, by provider.
@@ -258,7 +256,7 @@ export interface SubscriptionResult {
     /** ID of the subscription. */
     subscription_id: string;
     /** Current status of the subscription. */
-    status: "active" | "paused" | "canceled";
+    status: "active" | "past_due" | "paused" | "canceled";
     /** Whether the subscription is set to cancel at the end of the current billing period. */
     cancel_at_period_end: boolean;
 }
@@ -282,7 +280,9 @@ export interface MountCheckoutOptions {
     /**
      * Called after the buyer approves a PayPal payment and the SDK completes the checkout.
      *
-     * Stripe doesn't call this. After a Stripe payment, the buyer returns to the checkout's `success_path` with a `session_id` query parameter. That parameter is the `checkout_id`. Check the purchase there with [`listPurchases()`](/developers/references/sdk/docs/interfaces/payments#listpurchases).
+     * Use it to update the page, not to grant access. Browser callbacks can be faked, so unlock paid content only after your backend confirms the purchase, for example with [`listPurchases()`](/developers/references/sdk/docs/interfaces/service-role-payments#listpurchases) in a backend function.
+     *
+     * Stripe doesn't call this. After a Stripe payment, the buyer returns to the checkout's `success_path` with a `session_id` query parameter. That parameter is the `checkout_id`. Show the result there with [`listPurchases()`](/developers/references/sdk/docs/interfaces/payments#listpurchases), and grant access only after your backend confirms it.
      */
     onComplete?: (result: CompleteCheckoutResult) => void;
     /** Called when the buyer closes the PayPal window without paying. The button stays mounted so the buyer can try again. */
@@ -405,7 +405,9 @@ export interface PaymentsModule {
      * - PayPal: Renders a PayPal button. When the buyer approves the payment, the SDK calls {@linkcode completeCheckout | completeCheckout()} and then `onComplete`.
      * - Stripe: Mounts Stripe Embedded Checkout. After paying, the buyer returns to the checkout's `success_path`. Stripe allows one embedded checkout per page, so mounting another Stripe checkout destroys the previous one.
      *
-     * Requires a browser environment and can't be used in the backend. Rejects when the checkout isn't embedded, when the provider's script fails to load, or when PayPal isn't available for the checkout's currency.
+     * Requires a browser environment and can't be used in the backend. Rejects when the checkout isn't embedded, when the payments config can't be fetched or has no valid script URL for the provider, when the provider's script fails to load, or when PayPal isn't available for the checkout's currency.
+     *
+     * The checkout's callbacks run in the buyer's browser, where they can be faked. Grant access to what the buyer paid for only after your backend confirms the purchase, for example with [`listPurchases()`](/developers/references/sdk/docs/interfaces/service-role-payments#listpurchases) in a backend function.
      *
      * @param element - Element to render the checkout in. It should be empty.
      * @param checkout - The result of [`createCheckout()`](/developers/references/sdk/docs/interfaces/service-role-payments#createcheckout).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.53-pr.322.e2bf534",
+  "version": "0.8.53-pr.323.0c3777e",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",