@depup/base44__sdk 0.8.42-depup.0 → 0.8.43-depup.0

package/README.md

@@ -13,8 +13,8 @@ npm install @depup/base44__sdk
 
 | Field | Value |
 |-------|-------|
-| Original | [@base44/sdk](https://www.npmjs.com/package/@base44/sdk) @ 0.8.42 |
-| Processed | 2026-08-16 |
+| Original | [@base44/sdk](https://www.npmjs.com/package/@base44/sdk) @ 0.8.43 |
+| Processed | 2026-08-18 |
 | Smoke test | passed |
 | Deps updated | 3 |
 

package/changes.json

@@ -13,6 +13,6 @@
       "to": "^14.0.1"
     }
   },
-  "timestamp": "2026-08-16T16:05:23.532Z",
+  "timestamp": "2026-08-18T08:10:22.589Z",
   "totalUpdated": 3
 }

package/dist/client.js

@@ -113,6 +113,7 @@ export function createClient(config) {
     const userAuthModule = createAuthModule(axiosClient, functionsAxiosClient, appId, {
         appBaseUrl: normalizedAppBaseUrl,
         serverUrl,
+        token,
     });
     // Apply the access token before any module that may issue authenticated
     // requests during construction (notably analytics, which fires an init

package/dist/modules/analytics.d.ts

@@ -1,6 +1,6 @@
 import { AxiosInstance } from "axios";
 import { TrackEventParams, AnalyticsModuleOptions } from "./analytics.types";
-import type { AuthModule } from "./auth.types";
+import type { InternalAuthModule } from "./auth.types";
 export declare const USER_HEARTBEAT_EVENT_NAME = "__user_heartbeat_event__";
 export declare const ANALYTICS_INITIALIZATION_EVENT_NAME = "__initialization_event__";
 export declare const ANALYTICS_SESSION_DURATION_EVENT_NAME = "__session_duration_event__";
@@ -10,7 +10,7 @@ export interface AnalyticsModuleArgs {
     axiosClient: AxiosInstance;
     serverUrl: string;
     appId: string;
-    userAuthModule: AuthModule;
+    userAuthModule: InternalAuthModule;
 }
 export declare const createAnalyticsModule: ({ axiosClient, serverUrl, appId, userAuthModule, }: AnalyticsModuleArgs) => {
     track: (params: TrackEventParams) => void;

package/dist/modules/analytics.js

@@ -247,6 +247,13 @@ export function resetAnalyticsSessionContext() {
 }
 async function getSessionContext(userAuthModule) {
     if (!analyticsSharedState.sessionContext) {
+        // With no token there is no identity to resolve: `me()` can only answer 401,
+        // which the browser logs to the console before any handler here sees it. On
+        // a public page that request is the sole reason an error appears, so skip
+        // it. This is not memoized — a visitor who logs in later must still resolve.
+        if (!userAuthModule.hasToken()) {
+            return { user_id: null, session_id: getAnalyticsSessionId() };
+        }
         if (!sessionContextPromise) {
             const sessionId = getAnalyticsSessionId();
             sessionContextPromise = userAuthModule

package/dist/modules/auth.d.ts

@@ -1,5 +1,5 @@
 import { AxiosInstance } from "axios";
-import { AuthModule, AuthModuleOptions } from "./auth.types";
+import { AuthModuleOptions, InternalAuthModule } from "./auth.types";
 /**
  * Creates the auth module for the Base44 SDK.
  *
@@ -10,4 +10,4 @@ import { AuthModule, AuthModuleOptions } from "./auth.types";
  * @returns Auth module with authentication and user management methods
  * @internal
  */
-export declare function createAuthModule(axios: AxiosInstance, functionsAxiosClient: AxiosInstance, appId: string, options: AuthModuleOptions): AuthModule;
+export declare function createAuthModule(axios: AxiosInstance, functionsAxiosClient: AxiosInstance, appId: string, options: AuthModuleOptions): InternalAuthModule;

package/dist/modules/auth.js

@@ -78,7 +78,14 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
     const clearPendingMe = () => {
         pendingMe = null;
     };
+    // Tracked here rather than read off `axios.defaults` so the answer stays tied
+    // to the identity transitions below (`setToken`, `logout`) instead of to the
+    // header a caller may have set on the instance directly.
+    let hasAccessToken = Boolean(options.token);
     return {
+        hasToken() {
+            return hasAccessToken;
+        },
         // Get current user information
         async me() {
             const request = pendingMe !== null && pendingMe !== void 0 ? pendingMe : axios.get(`/apps/${appId}/entities/User/me`).finally(() => {
@@ -144,6 +151,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             // flight would otherwise resolve into callers that run after the logout.
             clearPendingMe();
             resetAnalyticsSessionContext();
+            hasAccessToken = false;
             // Only do the rest if in a browser environment
             if (typeof window !== "undefined") {
                 // Remove token from localStorage
@@ -172,6 +180,7 @@ export function createAuthModule(axios, functionsAxiosClient, appId, options) {
             // resolved for the previous one must not be handed to later callers.
             clearPendingMe();
             resetAnalyticsSessionContext();
+            hasAccessToken = true;
             // handle token change for axios clients
             axios.defaults.headers.common["Authorization"] = `Bearer ${token}`;
             functionsAxiosClient.defaults.headers.common["Authorization"] = `Bearer ${token}`;

package/dist/modules/auth.types.d.ts

@@ -92,6 +92,12 @@ export interface AuthModuleOptions {
     serverUrl: string;
     /** Base URL for the app (used for login redirects). */
     appBaseUrl: string;
+    /**
+     * Access token the client was constructed with, if any. Seeds the module's
+     * view of whether a session exists before {@link AuthModule.setToken} runs,
+     * which is how the server-side SDK reports a token it never sets explicitly.
+     */
+    token?: string;
 }
 /**
  * Authentication module for managing user authentication and authorization. The module automatically stores tokens in local storage when available and manages authorization headers for API requests.
@@ -515,3 +521,20 @@ export interface AuthModule {
      */
     changePassword(params: ChangePasswordParams): Promise<any>;
 }
+/**
+ * The auth module as constructed internally, before it is narrowed to
+ * {@link AuthModule} on the public client. Not exported from the package
+ * index — SDK consumers see only {@link AuthModule}.
+ *
+ * @internal
+ */
+export interface InternalAuthModule extends AuthModule {
+    /**
+     * Whether an access token is currently set on the client.
+     *
+     * Reports only the presence of a token, never its validity — an expired or
+     * revoked token still reads as `true`. Callers use this to skip requests that
+     * could not succeed without a session, not to decide that one is valid.
+     */
+    hasToken(): boolean;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@depup/base44__sdk",
-  "version": "0.8.42-depup.0",
+  "version": "0.8.43-depup.0",
   "description": "JavaScript SDK for Base44 API (with updated dependencies)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -88,8 +88,8 @@
     },
     "depsUpdated": 3,
     "originalPackage": "@base44/sdk",
-    "originalVersion": "0.8.42",
-    "processedAt": "2026-08-16T16:05:37.525Z",
+    "originalVersion": "0.8.43",
+    "processedAt": "2026-08-18T08:10:35.872Z",
     "smokeTest": "passed"
   }
 }