@base44-preview/sdk 0.8.54-pr.344.ece486e → 0.8.55-pr.328.bc88e75

package/dist/client.js

@@ -3,6 +3,7 @@ import { createEntitiesModule } from "./modules/entities.js";
 import { createIntegrationsModule } from "./modules/integrations.js";
 import { createAuthModule } from "./modules/auth.js";
 import { createSsoModule } from "./modules/sso.js";
+import { createBrowserModule } from "./modules/browser.js";
 import { createConnectorsModule, createUserConnectorsModule, } from "./modules/connectors.js";
 import { getAccessToken } from "./utils/auth-utils.js";
 import { createFetchWithAuth } from "./utils/fetch-with-auth.js";
@@ -228,6 +229,7 @@ export function createClient(config) {
         }),
         integrations: createIntegrationsModule(serviceRoleAxiosClient, appId),
         sso: createSsoModule(serviceRoleAxiosClient, appId),
+        browser: createBrowserModule(serviceRoleAxiosClient),
         connectors: createConnectorsModule(serviceRoleAxiosClient, appId),
         functions: createFunctionsModule(serviceRoleFunctionsAxiosClient, appId, {
             getAuthHeaders: () => {

package/dist/client.types.d.ts

@@ -2,6 +2,7 @@ import type { EntitiesModule } from "./modules/entities.types.js";
 import type { IntegrationsModule } from "./modules/integrations.types.js";
 import type { AuthModule } from "./modules/auth.types.js";
 import type { SsoModule } from "./modules/sso.types.js";
+import type { BrowserModule } from "./modules/browser.types.js";
 import type { PaymentsModule, ServiceRolePaymentsModule } from "./modules/payments.types.js";
 import type { ConnectorsModule, UserConnectorsModule } from "./modules/connectors.types.js";
 import type { FunctionsModule } from "./modules/functions.types.js";
@@ -228,6 +229,8 @@ export interface Base44Client {
         aiGateway: AiGatewayModule;
         /** {@link AppLogsModule | App logs module} with elevated permissions. */
         appLogs: AppLogsModule;
+        /** {@link BrowserModule | Browser module} for remote browser sessions. */
+        browser: BrowserModule;
         /** {@link ConnectorsModule | Connectors module} for OAuth token retrieval. */
         connectors: ConnectorsModule;
         /** {@link EntitiesModule | Entities module} with elevated permissions. */

package/dist/index.d.ts

@@ -15,6 +15,7 @@ export type { AppModule, AppPublicSettings, AppPublicSettingsResponse, } from ".
 export type { ActorsModule, ActorClient, ActorRef, Connection, ActorSubscription, ActorConnectOptions, ActorNameRegistry, ActorRegistry, } from "./modules/actors.types.js";
 export type { SsoModule, SsoAccessTokenResponse } from "./modules/sso.types.js";
 export type { PaymentsModule, ServiceRolePaymentsModule, PaymentsErrorCode, PaymentsRecurringFrequency, CheckoutBuyer, CheckoutFreeTrial, CheckoutItem, CheckoutItemRecurring, CheckoutPresentation, CheckoutElement, CheckoutMount, MountableCheckout, CreateCheckoutParams, CreateCheckoutResult, CompleteCheckoutResult, EmbeddedCheckout, PayPalEmbeddedCheckout, StripeEmbeddedCheckout, MountCheckoutOptions, ListPurchasesParams, ServiceRoleListPurchasesParams, ListPurchasesResult, Purchase, PurchaseItem, PurchaseStatus, RefundParams, RefundResult, CancelSubscriptionOptions, SubscriptionResult, } from "./modules/payments.types.js";
+export type { BrowserModule, BrowserSession, BrowserSessionOptions, } from "./modules/browser.types.js";
 export { Actor, type Conn } from "./actor.js";
 export type { ConnectorsModule, UserConnectorsModule, ConnectorApiRequest, ConnectorApiResponse, ConnectorApiResponsePhase, } from "./modules/connectors.types.js";
 export type { CustomIntegrationsModule, CustomIntegrationCallParams, CustomIntegrationCallResponse, } from "./modules/custom-integrations.types.js";

package/dist/modules/auth.js

@@ -1,3 +1,4 @@
+import { getAccessToken, removeAccessToken } from "../utils/auth-utils.js";
 import { resetAnalyticsSessionContext } from "./analytics.js";
 function isInsideIframe() {
     if (typeof window === "undefined")
@@ -53,6 +54,21 @@ function loginViaPopup(url, redirectUrl, expectedOrigin) {
     }, 500);
     window.addEventListener("message", onMessage);
 }
+// "token" is the key the platform-v2 built-in SDK wrote.
+function removeStoredAccessTokens() {
+    removeAccessToken({});
+    removeAccessToken({ storageKey: "token" });
+}
+const isStoredAccessToken = (authorization) => authorization ===
+    `Bearer ${getAccessToken({ saveToStorage: false, removeFromUrl: false })}`;
+// A rejected token left in storage boots the next page with it, and an app
+// whose own /login does that loops 401 → /login. A token stored since the
+// request went out (a login in this or another tab) is not the rejected one.
+function clearTokenOnRejection(error, sentAuthorization) {
+    if (error.status === 401 && isStoredAccessToken(sentAuthorization)) {
+        removeStoredAccessTokens();
+    }
+}
 /**
  * Creates the auth module for the Base44 SDK.
  *
@@ -88,7 +104,14 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
         },
         // Get current user information
         async me() {
-            const request = pendingMe !== null && pendingMe !== void 0 ? pendingMe : axios.get(`/apps/${appId}/entities/User/me`).finally(() => {
+            const sentAuthorization = axios.defaults.headers.common["Authorization"];
+            const request = pendingMe !== null && pendingMe !== void 0 ? pendingMe : axios
+                .get(`/apps/${appId}/entities/User/me`)
+                .catch((error) => {
+                clearTokenOnRejection(error, sentAuthorization);
+                throw error;
+            })
+                .finally(() => {
                 // Only retire this request if it is still the shared one. An identity
                 // change mid-flight clears `pendingMe` and the next caller starts a
                 // fresh request; an unconditional clear here would retire that newer
@@ -154,17 +177,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             hasAccessToken = false;
             // Only do the rest if in a browser environment
             if (typeof window !== "undefined") {
-                // Remove token from localStorage
-                if (window.localStorage) {
-                    try {
-                        window.localStorage.removeItem("base44_access_token");
-                        // Remove "token" that is set by the built-in SDK of platform version 2
-                        window.localStorage.removeItem("token");
-                    }
-                    catch (e) {
-                        console.error("Failed to remove token from localStorage:", e);
-                    }
-                }
+                removeStoredAccessTokens();
                 // Determine the from_url parameter
                 const fromUrl = redirectUrl || window.location.href;
                 // Redirect to server-side logout endpoint to clear HTTP-only cookies

package/dist/modules/browser.d.ts

@@ -0,0 +1,10 @@
+import { AxiosInstance } from "axios";
+import { BrowserModule } from "./browser.types.js";
+/**
+ * Creates the Browser module for the Base44 SDK.
+ *
+ * @param axios - Axios instance (should be service role client)
+ * @returns Browser module with methods to create and end remote browser sessions
+ * @internal
+ */
+export declare function createBrowserModule(axios: AxiosInstance): BrowserModule;

package/dist/modules/browser.js

@@ -0,0 +1,42 @@
+/**
+ * Creates the Browser module for the Base44 SDK.
+ *
+ * @param axios - Axios instance (should be service role client)
+ * @returns Browser module with methods to create and end remote browser sessions
+ * @internal
+ */
+export function createBrowserModule(axios) {
+    const endSession = async (sessionId) => {
+        if (!sessionId || typeof sessionId !== "string") {
+            throw new Error("Session ID is required and must be a string");
+        }
+        await axios.delete(`/v1/browser-sessions/${encodeURIComponent(sessionId)}`);
+    };
+    return {
+        async getSession(options = {}) {
+            var _a;
+            // The app is derived from the service token, so the route isn't app-scoped.
+            const response = await axios.post("/v1/browser-sessions", {
+                capture_debug_artifacts: (_a = options.captureDebugArtifacts) !== null && _a !== void 0 ? _a : true,
+                // Omit when unset so the backend applies its configured default.
+                ...(options.sessionTimeoutSeconds !== undefined && {
+                    session_timeout_seconds: options.sessionTimeoutSeconds,
+                }),
+            });
+            const data = response;
+            return {
+                sessionId: data.session_id,
+                connectionUrl: data.connection_url,
+                connectionScope: data.connection_scope,
+                ...(data.connection_expires_at && {
+                    connectionExpiresAt: data.connection_expires_at,
+                }),
+                ...(data.session_expires_at && {
+                    sessionExpiresAt: data.session_expires_at,
+                }),
+                end: () => endSession(data.session_id),
+            };
+        },
+        endSession,
+    };
+}

package/dist/modules/browser.types.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Options for {@linkcode BrowserModule.getSession | getSession()}.
+ */
+export interface BrowserSessionOptions {
+    /**
+     * Whether to capture browser recordings and diagnostic logs for the session.
+     *
+     * Captured artifacts stay with the remote browser provider and can't be retrieved through the SDK. Defaults to `true`.
+     */
+    captureDebugArtifacts?: boolean;
+    /**
+     * Maximum lifetime of the session, in whole seconds.
+     *
+     * The session ends when the timeout expires, even if it's still in use. Base44 sets minimum and maximum allowed values and clamps the timeout to that range. When omitted, Base44 applies a default timeout.
+     */
+    sessionTimeoutSeconds?: number;
+}
+/**
+ * A remote browser session returned by {@linkcode BrowserModule.getSession | getSession()}.
+ */
+export interface BrowserSession {
+    /**
+     * Opaque session identifier issued to your app.
+     *
+     * Pass it unchanged to {@linkcode BrowserModule.endSession | endSession()} to end the session from a different request.
+     */
+    sessionId: string;
+    /**
+     * Signed WebSocket URL for connecting to the browser over the Chrome DevTools Protocol (CDP).
+     *
+     * Treat the complete URL as a credential. Don't log it or send it to the frontend.
+     */
+    connectionUrl: string;
+    /**
+     * Scope of the CDP connection.
+     *
+     * - `'browser'`: The socket controls the whole browser.
+     * - `'page'`: The socket controls a single page.
+     */
+    connectionScope: "browser" | "page";
+    /** ISO 8601 timestamp when the connection URL expires. Omitted when the provider doesn't expose it. */
+    connectionExpiresAt?: string;
+    /** ISO 8601 timestamp when the browser session expires. Omitted when the provider doesn't expose it. */
+    sessionExpiresAt?: string;
+    /**
+     * Ends the session. Equivalent to calling {@linkcode BrowserModule.endSession | endSession()} with this session's ID.
+     */
+    end: () => Promise<void>;
+}
+/**
+ * Browser module for running browser automation from your backend.
+ *
+ * This module creates remote browser sessions that you can control with a CDP client library such as Playwright or Puppeteer. Base44 doesn't store browser state, so each session is independent. End each session when you're done with it. Otherwise it keeps running until its timeout expires. To change the timeout, pass the `sessionTimeoutSeconds` option to {@linkcode BrowserModule.getSession | getSession()}.
+ *
+ * This module is only available to use with a client in service role authentication mode, which means it can only be used in backend environments.
+ */
+export interface BrowserModule {
+    /**
+     * Creates a new remote browser session and returns its connection details.
+     *
+     * Each call creates a fresh session. Calls aren't retried automatically, and repeating a failed call doesn't resume a previous session. Session creation is rate limited per app.
+     *
+     * @param options - Optional session settings.
+     * @returns Promise resolving to the new browser session.
+     *
+     * @example
+     * ```typescript
+     * // Open a page in a remote browser with Playwright
+     * import { createClientFromRequest } from 'npm:@base44/sdk';
+     * import { chromium } from 'npm:playwright-core';
+     *
+     * Deno.serve(async (req) => {
+     *   const base44 = createClientFromRequest(req);
+     *   const session = await base44.asServiceRole.browser.getSession();
+     *
+     *   try {
+     *     const browser = await chromium.connectOverCDP(session.connectionUrl);
+     *     const page = browser.contexts()[0]?.pages()[0] ?? (await browser.newPage());
+     *     await page.goto('https://example.com');
+     *     const title = await page.title();
+     *     await browser.close();
+     *
+     *     return Response.json({ title });
+     *   } finally {
+     *     await session.end();
+     *   }
+     * });
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // Turn off recordings and diagnostic logs
+     * const session = await base44.asServiceRole.browser.getSession({
+     *   captureDebugArtifacts: false,
+     * });
+     * ```
+     *
+     * @example
+     * ```typescript
+     * // Request a custom session timeout
+     * const session = await base44.asServiceRole.browser.getSession({
+     *   sessionTimeoutSeconds: 600,
+     * });
+     * ```
+     */
+    getSession(options?: BrowserSessionOptions): Promise<BrowserSession>;
+    /**
+     * Ends a browser session created by your app.
+     *
+     * Use this when the session was created in a different request. Otherwise call `end()` on the session returned by {@linkcode getSession | getSession()}. Ending a session that has already ended succeeds, so it's safe to call more than once. The call fails with the `browser_session_not_found` error code if the ID wasn't issued to your app.
+     *
+     * @param sessionId - The `sessionId` returned by {@linkcode getSession | getSession()}, unchanged.
+     * @returns Promise that resolves when the session has ended.
+     *
+     * @example
+     * ```typescript
+     * // End a session whose ID was saved by an earlier request
+     * import { createClientFromRequest } from 'npm:@base44/sdk';
+     *
+     * Deno.serve(async (req) => {
+     *   const base44 = createClientFromRequest(req);
+     *   const { sessionId } = await req.json();
+     *   await base44.asServiceRole.browser.endSession(sessionId);
+     *
+     *   return new Response(null, { status: 204 });
+     * });
+     * ```
+     */
+    endSession(sessionId: string): Promise<void>;
+}

package/dist/modules/browser.types.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/sdk",
-  "version": "0.8.54-pr.344.ece486e",
+  "version": "0.8.55-pr.328.bc88e75",
   "description": "JavaScript SDK for Base44 API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",