connectbase-client 0.6.15 → 0.6.17

package/README.md

@@ -12,14 +12,39 @@ pnpm add connectbase-client
 yarn add connectbase-client
 ```
 
+## API Key Types
+
+Connect Base provides **two types** of API Keys. Use the right key for your use case:
+
+| Type | Prefix | Use For | Permissions | Safe to Expose? |
+|------|--------|---------|-------------|-----------------|
+| **Public Key** | `cb_pk_` | SDK / Web apps | Limited (RLS enforced) | ✅ Yes — safe in frontend code |
+| **Secret Key** | `cb_sk_` | MCP / Admin tools | Full access (bypasses RLS) | ❌ **Never expose in frontend or public repos** |
+
+**Which key should I use?**
+
+| Context | Key Type | Example |
+|---------|----------|---------|
+| Frontend SDK (`new ConnectBase()`) | **Public Key** (`cb_pk_`) | Web/app: DB queries, auth, file uploads |
+| `.env` file (`VITE_CONNECTBASE_API_KEY`) | **Public Key** (`cb_pk_`) | React, Vue, etc. |
+| CLI deploy (`.connectbaserc`) | **Public Key** (`cb_pk_`) | `npx connectbase deploy` |
+| MCP server (AI tools) | **Secret Key** (`cb_sk_`) | Claude, Cursor, Windsurf |
+| Server-side admin tasks | **Secret Key** (`cb_sk_`) | Backend full data access |
+
+> ⚠️ **MCP server rejects Public Keys** — you must use a Secret Key (`cb_sk_`).
+>
+> ⚠️ **Never use Secret Keys in frontend code** — RLS is bypassed, exposing all data.
+
+Create API Keys in the Console under **Settings > API tab**. Choose Public or Secret type when creating. The full key is shown **only once** at creation time.
+
 ## Quick Start
 
 ```typescript
 import ConnectBase from 'connectbase-client'
 
-// Initialize the SDK
+// Initialize the SDK — use a Public Key (cb_pk_)
 const cb = new ConnectBase({
-  apiKey: 'your-api-key'
+  apiKey: 'cb_pk_your-public-key'
 })
 
 // Create a game room client

package/dist/cli.js

@@ -30,7 +30,7 @@ var crypto = __toESM(require("crypto"));
 var https = __toESM(require("https"));
 var http = __toESM(require("http"));
 var readline = __toESM(require("readline"));
-var VERSION = "0.6.15";
+var VERSION = "0.6.17";
 var DEFAULT_BASE_URL = "https://api.connectbase.world";
 var colors = {
   reset: "\x1B[0m",
@@ -445,10 +445,23 @@ function addDeployScript(deployDir) {
   }
 }
 async function downloadDocs(apiKey, templates) {
-  const claudeDir = path.join(process.cwd(), ".claude");
-  const claudeMdPath = path.join(claudeDir, "CLAUDE.md");
-  if (!fs.existsSync(claudeDir)) {
-    fs.mkdirSync(claudeDir, { recursive: true });
+  let claudeMdPath = path.join(process.cwd(), "CLAUDE.md");
+  if (fs.existsSync(claudeMdPath)) {
+    const choice = await prompt(`${colors.yellow}\u26A0${colors.reset} CLAUDE.md\uAC00 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4. \uC5B4\uB5BB\uAC8C \uD560\uAE4C\uC694?
+  ${colors.cyan}1${colors.reset}) \uB36E\uC5B4\uC4F0\uAE30
+  ${colors.cyan}2${colors.reset}) .claude/CLAUDE.md\uC5D0 \uC800\uC7A5
+  ${colors.cyan}3${colors.reset}) \uCDE8\uC18C
+${colors.blue}?${colors.reset} \uC120\uD0DD (1/2/3): `);
+    if (choice === "2") {
+      const claudeDir = path.join(process.cwd(), ".claude");
+      if (!fs.existsSync(claudeDir)) {
+        fs.mkdirSync(claudeDir, { recursive: true });
+      }
+      claudeMdPath = path.join(claudeDir, "CLAUDE.md");
+    } else if (choice !== "1") {
+      info("SDK \uAC00\uC774\uB4DC \uB2E4\uC6B4\uB85C\uB4DC\uB97C \uAC74\uB108\uB701\uB2C8\uB2E4");
+      return;
+    }
   }
   if (!templates) {
     templates = ["rules"];
@@ -466,7 +479,8 @@ async function downloadDocs(apiKey, templates) {
     }
     const content = typeof res.data === "string" ? res.data : JSON.stringify(res.data);
     fs.writeFileSync(claudeMdPath, content);
-    success(`.claude/CLAUDE.md \uC0DD\uC131 \uC644\uB8CC`);
+    const relativePath = path.relative(process.cwd(), claudeMdPath);
+    success(`${relativePath} \uC0DD\uC131 \uC644\uB8CC`);
     log(`${colors.dim}\u203B SDK \uBB38\uC11C\uB294 MCP search_sdk_docs\uB85C \uAC80\uC0C9\uD558\uC138\uC694${colors.reset}`);
   } catch {
     warn("SDK \uAC00\uC774\uB4DC \uB2E4\uC6B4\uB85C\uB4DC \uC2E4\uD328, \uAE30\uBCF8 CLAUDE.md\uB97C \uC0DD\uC131\uD569\uB2C8\uB2E4");
@@ -476,7 +490,8 @@ async function downloadDocs(apiKey, templates) {
 
 \uC790\uC138\uD55C \uAC00\uC774\uB4DC: https://connectbase.world
 `);
-    success(".claude/CLAUDE.md \uC0DD\uC131 \uC644\uB8CC (\uAE30\uBCF8)");
+    const relativePath = path.relative(process.cwd(), claudeMdPath);
+    success(`${relativePath} \uC0DD\uC131 \uC644\uB8CC (\uAE30\uBCF8)`);
   }
 }
 async function setupClaudeCode(apiKey) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "connectbase-client",
-  "version": "0.6.15",
+  "version": "0.6.17",
   "description": "Connect Base JavaScript/TypeScript SDK for browser and Node.js",
   "repository": {
     "type": "git",