@sylphx/sdk 0.10.0 → 0.10.2

package/README.md

@@ -26,20 +26,21 @@ bun add @sylphx/sdk
 
 ### 1. Environment Variables
 
-Your server connection URL and environment app ID from your
-[Platform Console](https://sylphx.com/console):
+Your server and browser connection URLs from your
+[Platform Console](https://sylphx.com/console). Sylphx deploys inject these
+automatically; local development can pull the same values into `.env.local`.
 
 ```bash
 # .env.local
-SYLPHX_URL=sylphx://sk_dev_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@bold-river-a1b2c3.api.sylphx.com
-NEXT_PUBLIC_SYLPHX_APP_ID=app_dev_xxxxxxxxxxxx
+SYLPHX_SECRET_URL=sylphx://sk_dev_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@bold-river-a1b2c3.api.sylphx.com
+NEXT_PUBLIC_SYLPHX_URL=sylphx://pk_dev_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@bold-river-a1b2c3.api.sylphx.com
 ```
 
 That's it. No other config needed.
 
 > **Key formats**
 > - `sylphx://sk_*@<tenant-slug>.api.sylphx.com` — Server connection URL (server only, never expose)
-> - `app_dev_*` / `app_stg_*` / `app_prod_*` — App ID (safe for client-side)
+> - `sylphx://pk_*@<tenant-slug>.api.sylphx.com` — Browser connection URL (publishable)
 >
 > Get both from **Console → Your App → API Keys**. The hosted BaaS API is always
 > addressed as `<tenant-slug>.api.sylphx.com`.
@@ -78,7 +79,7 @@ import { SylphxProvider } from '@sylphx/sdk/react'
 import { createServerClient } from '@sylphx/sdk'
 
 export default async function RootLayout({ children }: { children: React.ReactNode }) {
-  const sylphx = createServerClient(process.env.SYLPHX_URL!)
+  const sylphx = createServerClient(process.env.SYLPHX_SECRET_URL!)
   const apiUrl = sylphx.baseUrl.replace(/\/v[0-9]+$/, '')
 
   const config = await getAppConfig({
@@ -169,7 +170,7 @@ const userId = await currentUserId()
 ```ts
 import { createServerClient, getPlans, track } from '@sylphx/sdk'
 
-const sylphx = createServerClient(process.env.SYLPHX_URL!)
+const sylphx = createServerClient(process.env.SYLPHX_SECRET_URL!)
 
 // Billing
 const plans = await getPlans(sylphx)
@@ -189,7 +190,7 @@ import {
 } from '@sylphx/sdk/server'
 import { createServerClient } from '@sylphx/sdk'
 
-const sylphx = createServerClient(process.env.SYLPHX_URL!)
+const sylphx = createServerClient(process.env.SYLPHX_SECRET_URL!)
 
 const config = await getAppConfig({
   secretKey: sylphx.secretKey!,
@@ -210,7 +211,7 @@ export async function POST(request: Request) {
   const result = await verifyWebhook({
     payload: body,
     signatureHeader: request.headers.get('x-webhook-signature'),
-    secret: process.env.SYLPHX_SECRET_KEY!,
+    secret: process.env.SYLPHX_WEBHOOK_SECRET!,
   })
 
   if (!result.valid) {
@@ -229,7 +230,7 @@ Or use the handler factory:
 import { createWebhookHandler } from '@sylphx/sdk/server'
 
 export const POST = createWebhookHandler({
-  secret: process.env.SYLPHX_SECRET_KEY!,
+  secret: process.env.SYLPHX_WEBHOOK_SECRET!,
   handlers: {
     'user.created': async (data) => { /* ... */ },
     'subscription.updated': async (data) => { /* ... */ },
@@ -243,7 +244,7 @@ export const POST = createWebhookHandler({
 import { verifyAccessToken } from '@sylphx/sdk/server'
 
 const payload = await verifyAccessToken(token, {
-  secretKey: process.env.SYLPHX_SECRET_KEY!,
+  secretKey: createServerClient(process.env.SYLPHX_SECRET_URL!).secretKey!,
 })
 // payload.sub, payload.email, payload.role, payload.app_id
 ```
@@ -378,7 +379,7 @@ For non-React environments or maximum control:
 ```ts
 import { createClient, signIn, track, getPlans } from '@sylphx/sdk'
 
-const config = createClient(process.env.SYLPHX_URL!)
+const config = createClient(process.env.NEXT_PUBLIC_SYLPHX_URL!)
 
 // Auth
 const tokens = await signIn(config, { email, password })