Skip to content

docs(auth, entities): fix reference docs from support feedback - #352

Merged
wixysam merged 1 commit into
mainfrom
docs-feedback
Oct 22, 2026
Merged

wixysam merged 1 commit into
mainfrom
docs-feedback

Conversation

@wixysam

@wixysam wixysam commented Oct 22, 2026

Copy link
Copy Markdown
Collaborator

Fixes to the SDK reference JSDoc from a batch of support and customer feedback. Each claim was checked against apper main.

Changes

auth.types.ts

  • updateMe(): Field-level security write rules on custom User fields apply. If the payload includes a field the user can't write, the call throws a permission error and nothing is saved (entity_crud.py checks FLS before entity.update()).
  • register() turnstile_token and loginViaEmailPassword() turnstileToken: Now say the token has no effect. App-user auth never verifies Turnstile; only platform sign-in does (register_platform_auth.py).

entities.types.ts

  • updateMany(): All update operators in a call apply to each record in a single write. Adds a "Save only if the record hasn't changed" example (id + version filter, $inc version, check updated === 0).
  • delete() / deleteMany(): Replaced "Permanently removes" with "moves to the entity's trash", with links to Recently deleted and the restore / permanent-delete REST endpoints. Both SDK calls soft-delete.
  • User entity: Service role can read and update any user, and remove any user except the app owner. A removed user stays in Recently deleted for 30 days and is then deleted permanently. Replaces "read, update, and delete any user".

Follow-up

  • Regenerate the SDK reference into mintlify-docs after merge.
  • For the devs: verify Turnstile for app users, or deprecate the parameter.

🤖 Generated with Claude Code

- updateMe(): field-level write rules on custom User fields apply, and a
  denied field fails the whole call.
- updateMany(): all update operators apply to a record in one write, plus
  an optimistic-concurrency example using a version field.
- delete() and deleteMany(): records move to trash rather than being
  permanently removed, with links to restore and permanent delete.
- User entity: service role can remove any user except the owner, and a
  removed user is kept in Recently deleted for 30 days.
- turnstileToken / turnstile_token: has no effect for app users.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown
Contributor

🚀 Package Preview Available!


Install this PR's preview build with npm:

npm i @base44-preview/sdk@0.8.56-pr.352.b15ea38

Prefer not to change any import paths? Install using npm alias so your code still imports @base44/sdk:

npm i "@base44/sdk@npm:@base44-preview/sdk@0.8.56-pr.352.b15ea38"

Or add it to your package.json dependencies:

{
  "dependencies": {
    "@base44/sdk": "npm:@base44-preview/sdk@0.8.56-pr.352.b15ea38"
  }
}

Preview published to npm registry — try new features instantly!

@wixysam
wixysam merged commit b9d6007 into main Oct 22, 2026
7 of 8 checks passed
@wixysam
wixysam deleted the docs-feedback branch October 22, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants