connectbase-client 6.10.0 → 6.11.0

package/CHANGELOG.md

@@ -3,6 +3,53 @@
 본 SDK 의 모든 주요 변경사항을 [Keep a Changelog](https://keepachangelog.com/ko/1.1.0/) 형식으로 기록합니다.
 버전은 [Semantic Versioning](https://semver.org/lang/ko/) 을 따릅니다.
 
+## [6.11.0] - 2026-11-11
+
+### Security — CLI 브라우저 로그인은 터미널의 사용자 코드로 승인한다
+
+- `connectbase login` 이 터미널에 사용자 코드(XXXX-XXXX)를 보여 주고, 브라우저에서는 그 코드를 직접 입력해 승인한다
+  (RFC 8628 방식). 예전에는 승인 링크가 곧 폴링 자격이어서, 남이 만든 링크를 승인하면 그 사람이 내 계정의 Secret Key 를
+  받았다. 승인 화면은 요청한 기기, OS, IP, 시각을 보여 주고, 거부하면 CLI 가 바로 끝난다.
+- 구버전 CLI 는 서버가 `426 cli_upgrade_required` 로 거절한다. 이 버전 이상으로 올려야 로그인할 수 있다.
+
+### Changed — 로그인한 적 없는 방문자의 세션 복구가 브라우저 콘솔 오류를 남기지 않는다
+
+- 쿠키만으로 세션을 복구할 때 `/v1/auth/re-issue?quiet=1` 로 묻고, 세션이 없으면 서버가 401 대신 204 로 답한다. 앱이 받는
+  결과(세션 없음, `onTokenExpired`)는 그대로이고, 매 페이지 「Failed to load resource 401」 오류(Lighthouse 콘솔 오류)만 사라진다.
+
+
+### Security — 소셜 로그인 콜백은 이 브라우저에서 시작한 로그인만 받는다
+
+- `cb.oauth.signIn()` / `signUp()` 이 일회용 `state` 를 이 브라우저(localStorage)에 남기고 서버로 보낸다. 콜백의 토큰이나
+  `code` 는 그 값이 돌아올 때만 받는다. 확인되지 않으면 토큰을 쓰지 않고 `getCallbackResult()` 가
+  `{ error: 'oauth_state_mismatch' }` 를, `exchangeCodeFromCallback()` 이 같은 코드의 오류를 던진다. 남이 보낸 콜백
+  링크로 다른 계정에 로그인되던 문제(로그인 CSRF)를 막는다. 기존 세션은 끊지 않는다.
+- 앱이 넘긴 `state` 는 서버로 보내지 않고 `result.state` 로 그대로 돌려준다.
+- URL 의 토큰은 `new ConnectBase()` 때 `history.replaceState` 로 바로 지운다(`autoRestoreSession` 과 무관). `location.search`
+  로 토큰을 직접 읽던 코드는 `getCallbackResult()` 결과를 써야 한다.
+- 인가 URL 을 직접 만드는 앱을 위한 `cb.oauth.createCallbackState(appState?)` 추가. 그 값을 `state` 쿼리로 넘긴다.
+- 콜백 주소는 로그인을 시작한 페이지와 같은 출처여야 한다(다르면 시작할 때 콘솔 경고).
+- 팝업: 우리가 연 팝업(`event.source`)에서 우리가 아는 출처(`event.origin`)로 온 메시지만 받는다. 서버 제공 콜백을 쓰면
+  `opener_origin` 을 보내 1회용 `code` 를 받아 교환한다. 앱이 지정한 팝업 콜백 페이지는 같은 출처 창에만 결과를 보낸다.
+  서버의 `popup_opener_not_allowed` 는 해결 방법을 담은 `ApiError`(같은 `code`)로 던진다.
+- 분석(`page_url`, `referrer`)과 에러 리포트(`url`, `source`, `message`, `stack`)에서 토큰, `code` 같은 자격증명을 지운다.
+
+### Security — 그 밖
+
+- 게임 상태 델타의 `__proto__`, `constructor`, `prototype` 경로를 버리고 자기 속성으로만 따라간다(프로토타입 오염).
+- 브라우저에서 `secretKey`(또는 `cb_sk_` 를 publicKey 로)를 쓰면 경고한다.
+- CLI: 서버 주소는 `--base-url` > `CONNECTBASE_BASE_URL` > `.connectbaserc` 순이다. 저장소의 `.connectbaserc` 가 공식 서버가
+  아닌 주소를 정하면 터미널에서는 확인을 묻고 비대화형에서는 중단한다(`--allow-repo-base-url` 로 허용). `.connectbaserc` 의
+  `deployDir` 이 프로젝트 밖이면 배포하지 않는다. 브라우저 열기는 셸을 거치지 않는다. `.connectbaserc`, `.mcp.json` 은
+  0600 으로 쓴다.
+
+### Fixed — 큰 웹 배포가 「요청 본문이 상한을 초과했습니다」로 실패하던 문제
+
+서버는 배포 요청 하나를 128 MiB 로 자릅니다. 변경 파일이 많으면(예: 영상 120개, 148MB) 한 요청에 다 실어 실패했고, 나눠
+올리면 release 가 여러 개로 쪼개져 중간 판이 잠깐 사이트에 나갔습니다. 이제 요청 하나가 약 96 MiB 를 넘으면 바이너리를 큰
+것부터 Object Storage 로 직접 올려(presign, 이미 있던 경로) 요청 하나, release 하나로 반영합니다. 텍스트만으로 넘치면 이유를
+알리고 멈춥니다.
+
 ## [6.10.0] - 2026-10-30
 
 ### Added — 실시간 메시지의 `fromConn`(보낸 연결의 서버 ID)

package/README.md

@@ -907,6 +907,8 @@ await cb.storage.deletePageMeta('web-storage-id', '/products/123')
 
 문서를 등록하고 BM25 풀텍스트 검색으로 관련 청크를 찾는 RAG 인프라. 한국어는 nori 형태소 분석기 적용. AI 채팅에 컨텍스트로 연결하려면 `cb.ai.chatStream({ knowledgeBaseId })` 를 사용한다.
 
+> 문서 추가, 수정, 삭제는 로그인한 회원 토큰(본인 자료)이나 `secretKey`(서버)가 필요합니다. Public Key 만으로는 401 `KB_WRITE_CREDENTIAL_REQUIRED` 입니다.
+
 ```typescript
 // 텍스트 문서 추가 (즉시 처리)
 const doc = await cb.knowledge.addDocument('kb-id', {

package/dist/cli.js

@@ -31,12 +31,18 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/cli.ts
 var cli_exports = {};
 __export(cli_exports, {
+  DEPLOY_REQUEST_BUDGET_BYTES: () => DEPLOY_REQUEST_BUDGET_BYTES,
   TunnelConnectSelector: () => TunnelConnectSelector,
   ancestorCommandLines: () => ancestorCommandLines,
   apiErrorMessage: () => apiErrorMessage,
+  browserAuthStartBody: () => browserAuthStartBody,
+  browserAuthUrl: () => browserAuthUrl,
+  browserOpenCommand: () => browserOpenCommand,
   buildFirstHint: () => buildFirstHint,
   collectDeployFiles: () => collectDeployFiles,
   computeDeployDiff: () => computeDeployDiff,
+  decideBaseUrl: () => decideBaseUrl,
+  describeBaseUrl: () => describeBaseUrl,
   detectPackageManager: () => detectPackageManager,
   formatSkippedFilesReport: () => formatSkippedFilesReport,
   getTunnelConnectCandidates: () => getTunnelConnectCandidates,
@@ -44,21 +50,28 @@ __export(cli_exports, {
   isAllowedDeployExt: () => isAllowedDeployExt,
   isBinaryDeployExt: () => isBinaryDeployExt,
   isExtensionlessDataFile: () => isExtensionlessDataFile,
+  isOutsideProject: () => isOutsideProject,
+  isPlatformBaseUrl: () => isPlatformBaseUrl,
+  loadConfig: () => loadConfig,
   makeRequest: () => makeRequest,
   normalizeRelativePath: () => normalizeRelativePath,
+  openBrowser: () => openBrowser,
   packageManagerCommands: () => packageManagerCommands,
   packageScriptInvocationPattern: () => packageScriptInvocationPattern,
   parseArgs: () => parseArgs,
   registerEndpointBinding: () => registerEndpointBinding,
   runningInsidePackageScript: () => runningInsidePackageScript,
+  selectBinariesToOffload: () => selectBinariesToOffload,
   sha256Hex: () => sha256Hex,
-  storageAdminHeaders: () => storageAdminHeaders
+  storageAdminHeaders: () => storageAdminHeaders,
+  writeSecretFile: () => writeSecretFile
 });
 module.exports = __toCommonJS(cli_exports);
 var crypto = __toESM(require("crypto"));
 var fs2 = __toESM(require("fs"));
 var http = __toESM(require("http"));
 var https = __toESM(require("https"));
+var os2 = __toESM(require("os"));
 var path2 = __toESM(require("path"));
 var readline = __toESM(require("readline"));
 
@@ -157,7 +170,7 @@ function handleTunnelError(msg, appId, localPort) {
 }
 
 // src/cli.ts
-var VERSION = "6.10.0" ? "6.10.0" : getPackageVersion();
+var VERSION = "6.11.0" ? "6.11.0" : getPackageVersion();
 var DEFAULT_BASE_URL = "https://api.connectbase.world";
 var colors = {
   reset: "\x1B[0m",
@@ -315,6 +328,32 @@ function isExtensionlessDataFile(filePath) {
   return path2.extname(base) === "" && !ALLOWED_EXTENSIONLESS_FILES.has(base);
 }
 var WEB_FILE_MAX_STORED_BYTES = 6 * 1024 * 1024 - 64 * 1024;
+var DEPLOY_REQUEST_BUDGET_BYTES = 96 * 1024 * 1024;
+function deployEntryBytes(f) {
+  return Buffer.byteLength(f.content, "utf8") + Buffer.byteLength(f.path, "utf8") + 256;
+}
+function selectBinariesToOffload(upsert, perFileLimit = WEB_FILE_MAX_STORED_BYTES, budget = DEPLOY_REQUEST_BUDGET_BYTES) {
+  const offload = new Set(
+    upsert.filter(
+      (f) => f.is_binary && Buffer.byteLength(f.content, "utf8") > perFileLimit
+    )
+  );
+  let inlineBytes = upsert.reduce(
+    (sum, f) => offload.has(f) ? sum : sum + deployEntryBytes(f),
+    0
+  );
+  if (inlineBytes > budget) {
+    const rest = upsert.filter((f) => f.is_binary && !offload.has(f)).sort(
+      (a, b) => Buffer.byteLength(b.content, "utf8") - Buffer.byteLength(a.content, "utf8")
+    );
+    for (const f of rest) {
+      if (inlineBytes <= budget) break;
+      offload.add(f);
+      inlineBytes -= deployEntryBytes(f);
+    }
+  }
+  return { offload: upsert.filter((f) => offload.has(f)), inlineBytes };
+}
 function sha256Hex(value) {
   return crypto.createHash("sha256").update(value, "utf8").digest("hex");
 }
@@ -359,11 +398,13 @@ function reportDeployAuthError(status, data) {
   return true;
 }
 function loadConfig() {
+  const envBaseUrl = process.env.CONNECTBASE_BASE_URL;
   const config = {
     publicKey: process.env.CONNECTBASE_PUBLIC_KEY,
     secretKey: process.env.CONNECTBASE_SECRET_KEY,
     storageId: process.env.CONNECTBASE_STORAGE_ID,
-    baseUrl: process.env.CONNECTBASE_BASE_URL || DEFAULT_BASE_URL
+    baseUrl: envBaseUrl || DEFAULT_BASE_URL,
+    baseUrlFromRepo: false
   };
   const rcPath = path2.join(process.cwd(), ".connectbaserc");
   if (fs2.existsSync(rcPath)) {
@@ -372,7 +413,10 @@ function loadConfig() {
       if (rcContent.publicKey) config.publicKey = rcContent.publicKey;
       if (rcContent.secretKey) config.secretKey = rcContent.secretKey;
       if (rcContent.storageId) config.storageId = rcContent.storageId;
-      if (rcContent.baseUrl) config.baseUrl = rcContent.baseUrl;
+      if (!envBaseUrl && rcContent.baseUrl && typeof rcContent.baseUrl === "string") {
+        config.baseUrl = rcContent.baseUrl;
+        config.baseUrlFromRepo = true;
+      }
       if (rcContent.deployDir) config.deployDir = rcContent.deployDir;
       if (rcContent.includeExtensionless === true)
         config.includeExtensionless = true;
@@ -573,12 +617,9 @@ function putToPresignedUrl(uploadUrl, body, contentType, timeoutMs) {
   });
 }
 async function offloadLargeBinaries(baseStorageUrl, headers, diff, _envLabel, timeoutMs) {
-  const oversized = diff.upsert.filter(
-    (f) => Buffer.byteLength(f.content, "utf8") > WEB_FILE_MAX_STORED_BYTES
+  const largeText = diff.upsert.filter(
+    (f) => !f.is_binary && Buffer.byteLength(f.content, "utf8") > WEB_FILE_MAX_STORED_BYTES
   );
-  if (oversized.length === 0) return;
-  const largeText = oversized.filter((f) => !f.is_binary);
-  const largeBinaries = oversized.filter((f) => f.is_binary);
   if (largeText.length > 0) {
     error(
       `\uC6F9 \uC2A4\uD1A0\uB9AC\uC9C0 \uD30C\uC77C\uB2F9 \uD06C\uAE30 \uD55C\uB3C4(\uC57D ${formatSize(WEB_FILE_MAX_STORED_BYTES)})\uB97C \uCD08\uACFC\uD55C \uD14D\uC2A4\uD2B8 \uD30C\uC77C\uC774 \uC788\uC5B4 \uBC30\uD3EC\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4:`
@@ -593,6 +634,18 @@ async function offloadLargeBinaries(baseStorageUrl, headers, diff, _envLabel, ti
     );
     process.exit(1);
   }
+  const { offload: largeBinaries, inlineBytes } = selectBinariesToOffload(
+    diff.upsert
+  );
+  if (inlineBytes > DEPLOY_REQUEST_BUDGET_BYTES) {
+    error(
+      `\uD14D\uC2A4\uD2B8 \uD30C\uC77C\uB9CC\uC73C\uB85C \uBC30\uD3EC \uC694\uCCAD \uD55C\uB3C4(\uC57D ${formatSize(DEPLOY_REQUEST_BUDGET_BYTES)})\uB97C \uB118\uC2B5\uB2C8\uB2E4. \uD14D\uC2A4\uD2B8\uB294 \uC9C1\uC811 \uC5C5\uB85C\uB4DC\uB85C \uB3CC\uB9B4 \uC218 \uC5C6\uC5B4\uC694.`
+    );
+    warn(
+      "\uBCC0\uACBD\uD55C \uD14D\uC2A4\uD2B8 \uD30C\uC77C\uC744 \uB098\uB220 \uC5EC\uB7EC \uBC88 \uBC30\uD3EC\uD558\uAC70\uB098, \uD070 \uB370\uC774\uD130 \uD30C\uC77C\uC740 \uD30C\uC77C \uC2A4\uD1A0\uB9AC\uC9C0(cb.storage)\uB85C \uC62E\uAE30\uC138\uC694."
+    );
+    process.exit(1);
+  }
   if (largeBinaries.length === 0) return;
   const presignFiles = largeBinaries.map((f) => ({
     path: f.path,
@@ -632,7 +685,7 @@ async function offloadLargeBinaries(baseStorageUrl, headers, diff, _envLabel, ti
   }
   const entryByPath = new Map(presigned.map((p) => [p.path, p]));
   info(
-    `\uB300\uC6A9\uB7C9 \uBC14\uC774\uB108\uB9AC ${largeBinaries.length}\uAC1C\uB97C Object Storage \uB85C \uC9C1\uC811 \uC5C5\uB85C\uB4DC\uD569\uB2C8\uB2E4...`
+    `\uBC14\uC774\uB108\uB9AC ${largeBinaries.length}\uAC1C\uB97C Object Storage \uB85C \uC9C1\uC811 \uC5C5\uB85C\uB4DC\uD569\uB2C8\uB2E4(\uD30C\uC77C\uB2F9 \uD55C\uB3C4 \uCD08\uACFC\uC774\uAC70\uB098 \uC694\uCCAD \uD558\uB098\uAC00 \uC57D ${formatSize(DEPLOY_REQUEST_BUDGET_BYTES)} \uB97C \uB118\uC5B4\uC11C)...`
   );
   for (const f of largeBinaries) {
     const entry = entryByPath.get(f.path);
@@ -1197,26 +1250,59 @@ function getProjectRoot() {
 function consoleUrlFor(baseUrl) {
   return baseUrl.replace("api.", "");
 }
-function openBrowser(url) {
-  const { exec } = require("child_process");
-  const platform2 = process.platform;
-  let command;
-  if (platform2 === "darwin") {
-    command = `open "${url}"`;
-  } else if (platform2 === "win32") {
-    command = `start "" "${url}"`;
-  } else {
-    command = `xdg-open "${url}"`;
+function browserOpenCommand(url, platform2 = process.platform) {
+  let target;
+  try {
+    const parsed = new URL(url);
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+      return null;
+    }
+    target = parsed.toString();
+  } catch {
+    return null;
+  }
+  if (platform2 === "darwin") return { command: "open", args: [target] };
+  if (platform2 === "win32") {
+    return {
+      command: "rundll32",
+      args: ["url.dll,FileProtocolHandler", target]
+    };
   }
-  exec(command, () => {
+  return { command: "xdg-open", args: [target] };
+}
+function openBrowser(url) {
+  const opener = browserOpenCommand(url);
+  if (!opener) return;
+  const { spawn } = require("child_process");
+  const child = spawn(opener.command, opener.args, {
+    stdio: "ignore",
+    detached: true
+  });
+  child.on("error", () => {
   });
+  child.unref();
+}
+function browserAuthStartBody() {
+  return {
+    flow: "user_code",
+    hostname: os2.hostname(),
+    os: `${process.platform} ${process.arch}`,
+    cli_version: VERSION
+  };
+}
+function browserAuthUrl(baseUrl, start) {
+  if (!start.user_code) {
+    return `${consoleUrlFor(baseUrl)}/auth/cli-auth?session=${start.session_id}`;
+  }
+  return `${consoleUrlFor(baseUrl)}/auth/cli-auth`;
 }
 async function browserAuthFlow(baseUrl = DEFAULT_BASE_URL) {
   info("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uC138\uC158\uC744 \uC2DC\uC791\uD569\uB2C8\uB2E4...");
   const startRes = await makeRequest(
     `${baseUrl}/v1/public/cli-auth/start`,
     "POST",
-    {}
+    {},
+    JSON.stringify(browserAuthStartBody())
   );
   if (startRes.status !== 200) {
     error(
@@ -1224,15 +1310,28 @@ async function browserAuthFlow(baseUrl = DEFAULT_BASE_URL) {
     );
     process.exit(1);
   }
-  const { session_id } = startRes.data;
-  const authUrl = `${consoleUrlFor(baseUrl)}/auth/cli-auth?session=${session_id}`;
+  const start = startRes.data;
+  const { session_id } = start;
+  const authUrl = browserAuthUrl(baseUrl, start);
   log(`
 ${colors.cyan}\uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uB85C\uADF8\uC778\uD558\uC138\uC694:${colors.reset}`);
   log(`${colors.dim}${authUrl}${colors.reset}
 `);
+  if (start.user_code) {
+    log(`${colors.cyan}\uBE0C\uB77C\uC6B0\uC800\uC5D0 \uC774 \uCF54\uB4DC\uB97C \uC785\uB825\uD558\uC138\uC694:${colors.reset}`);
+    log(`
+    ${colors.green}${start.user_code}${colors.reset}
+`);
+    log(
+      `${colors.dim}\uC774 \uBA85\uB839\uC744 \uC9C1\uC811 \uC2E4\uD589\uD558\uC9C0 \uC54A\uC558\uB2E4\uBA74 \uC2B9\uC778\uD558\uC9C0 \uB9C8\uC138\uC694.${colors.reset}
+`
+    );
+  }
   openBrowser(authUrl);
-  const pollInterval = 3e3;
-  const maxAttempts = 100;
+  const pollInterval = (start.interval ?? 3) * 1e3;
+  const maxAttempts = Math.ceil(
+    (start.expires_in ?? 300) * 1e3 / pollInterval
+  );
   let attempts = 0;
   let consecutive404 = 0;
   const max404Retries = 5;
@@ -1346,7 +1445,7 @@ function saveSecretKeyToRc(secretKey, dir = process.cwd()) {
     }
   }
   rcData.secretKey = secretKey;
-  fs2.writeFileSync(rcPath, `${JSON.stringify(rcData, null, 2)}
+  writeSecretFile(rcPath, `${JSON.stringify(rcData, null, 2)}
 `);
 }
 async function fetchAppsWithSecretKey(baseUrl, secretKey) {
@@ -1679,7 +1778,7 @@ ${colors.blue}?${colors.reset} \uC120\uD0DD (\uBC88\uD638): `
   if (secretKey) {
     rcData.secretKey = secretKey;
   }
-  fs2.writeFileSync(rcPath, `${JSON.stringify(rcData, null, 2)}
+  writeSecretFile(rcPath, `${JSON.stringify(rcData, null, 2)}
 `);
   success(".connectbaserc \uC0DD\uC131 \uC644\uB8CC");
   addToGitignore(".connectbaserc");
@@ -1723,6 +1822,13 @@ function detectBuildDir() {
     return "./dist";
   return "./dist";
 }
+function writeSecretFile(filePath, content) {
+  try {
+    if (fs2.existsSync(filePath)) fs2.chmodSync(filePath, 384);
+  } catch {
+  }
+  fs2.writeFileSync(filePath, content, { mode: 384 });
+}
 function addToGitignore(entry, basePath) {
   const dir = basePath || process.cwd();
   const gitignorePath = path2.join(dir, ".gitignore");
@@ -2248,12 +2354,16 @@ async function setupMcp(secretKey, baseUrl = DEFAULT_BASE_URL) {
     } catch {
       const backupPath = `${mcpConfigPath}.backup`;
       fs2.copyFileSync(mcpConfigPath, backupPath);
+      try {
+        fs2.chmodSync(backupPath, 384);
+      } catch {
+      }
       warn(`.mcp.json \uD30C\uC2F1 \uC2E4\uD328, \uBC31\uC5C5 \uC0DD\uC131: ${backupPath}`);
       mcpConfig = { mcpServers: {} };
     }
   }
   mcpConfig.mcpServers["connect-base"] = mcpEntry;
-  fs2.writeFileSync(mcpConfigPath, `${JSON.stringify(mcpConfig, null, 2)}
+  writeSecretFile(mcpConfigPath, `${JSON.stringify(mcpConfig, null, 2)}
 `);
   success(`${mcpConfigPath} \uC0DD\uC131 \uC644\uB8CC`);
   addToGitignore(".mcp.json", root);
@@ -2422,7 +2532,7 @@ ${colors.cyan}ConnectBase Update${colors.reset}
               headers: { Authorization: `Bearer ${secretKey}` }
             };
             mcpConfig.mcpServers = servers;
-            fs2.writeFileSync(
+            writeSecretFile(
               mcpConfigPath,
               `${JSON.stringify(mcpConfig, null, 2)}
 `
@@ -2973,7 +3083,7 @@ async function startTunnel(port, config, tunnelOpts) {
         }
       }
       rcData.secretKey = sk;
-      fs2.writeFileSync(rcPath2, `${JSON.stringify(rcData, null, 2)}
+      writeSecretFile(rcPath2, `${JSON.stringify(rcData, null, 2)}
 `);
       addToGitignore(".connectbaserc");
       success("Secret Key \uBC1C\uAE09 \uBC0F \uC800\uC7A5 \uC644\uB8CC");
@@ -3007,7 +3117,7 @@ async function startTunnel(port, config, tunnelOpts) {
     }
     if (rcData.tunnelAppId !== appId) {
       rcData.tunnelAppId = appId;
-      fs2.writeFileSync(rcPath, `${JSON.stringify(rcData, null, 2)}
+      writeSecretFile(rcPath, `${JSON.stringify(rcData, null, 2)}
 `);
     }
   } catch {
@@ -3688,6 +3798,7 @@ ${colors.yellow}\uC635\uC158:${colors.reset}
   -s, --storage <id>    \uC2A4\uD1A0\uB9AC\uC9C0 ID
   -k, --public-key <key>   API Key
   -u, --base-url <url>  \uC11C\uBC84 URL (\uAE30\uBCF8: ${DEFAULT_BASE_URL})
+  --allow-repo-base-url  .connectbaserc \uC758 \uBE44\uACF5\uC2DD \uC11C\uBC84 URL \uC744 \uD655\uC778 \uC5C6\uC774 \uD5C8\uC6A9 (Secret Key \uAC00 \uADF8 \uC11C\uBC84\uB85C \uC804\uC1A1\uB428)
   -t, --timeout <sec>   \uC694\uCCAD \uD0C0\uC784\uC544\uC6C3 (\uCD08, tunnel/deploy \uACF5\uD1B5. deploy \uBBF8\uC9C0\uC815 \uC2DC \uD30C\uC77C \uD06C\uAE30\uC5D0 \uB530\uB77C \uC790\uB3D9 \uC0B0\uC815)
   --max-body <MB>       \uD130\uB110 \uCD5C\uB300 \uBC14\uB514 \uD06C\uAE30 (MB, tunnel \uC804\uC6A9)
   --force               \uD130\uB110 lockfile \uBB34\uC2DC (\uC911\uBCF5 \uC2E4\uD589 \uAC15\uC81C, tunnel \uC804\uC6A9)
@@ -3748,7 +3859,7 @@ ${colors.yellow}\uD658\uACBD\uBCC0\uC218:${colors.reset}
   CONNECTBASE_SECRET_KEY    Secret Key (cb_sk_*) \u2014 \uBC30\uD3EC/\uC2B9\uACA9/\uD130\uB110\uC5D0 \uD544\uC218
   CONNECTBASE_PUBLIC_KEY       (deprecated) \uB808\uAC70\uC2DC \u2014 publicKey \uB610\uB294 secretKey \uB85C \uC0AC\uC6A9
   CONNECTBASE_STORAGE_ID    \uC2A4\uD1A0\uB9AC\uC9C0 ID
-  CONNECTBASE_BASE_URL      \uC11C\uBC84 URL
+  CONNECTBASE_BASE_URL      \uC11C\uBC84 URL (.connectbaserc \uBCF4\uB2E4 \uC6B0\uC120)
 
 ${colors.yellow}\uC124\uC815 \uD30C\uC77C (.connectbaserc):${colors.reset}
   {
@@ -3760,6 +3871,65 @@ ${colors.yellow}\uC124\uC815 \uD30C\uC77C (.connectbaserc):${colors.reset}
   }
 `);
 }
+var PLATFORM_API_HOST = new URL(DEFAULT_BASE_URL).host;
+var LOCAL_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
+function isPlatformBaseUrl(baseUrl) {
+  try {
+    const url = new URL(baseUrl);
+    if (url.protocol === "https:" && url.host === PLATFORM_API_HOST) {
+      return true;
+    }
+    return (url.protocol === "http:" || url.protocol === "https:") && LOCAL_HOSTNAMES.has(url.hostname);
+  } catch {
+    return false;
+  }
+}
+function describeBaseUrl(baseUrl) {
+  try {
+    return new URL(baseUrl).origin;
+  } catch {
+    return JSON.stringify(baseUrl);
+  }
+}
+function decideBaseUrl(opts) {
+  if (isPlatformBaseUrl(opts.baseUrl)) return "proceed";
+  if (!opts.fromRepoConfig || opts.allowRepoBaseUrl) return "notice";
+  return opts.interactive ? "confirm" : "refuse";
+}
+async function enforceBaseUrlPolicy(baseUrl, opts) {
+  const decision = decideBaseUrl({
+    baseUrl,
+    ...opts,
+    interactive: process.stdin.isTTY === true
+  });
+  if (decision === "proceed") return;
+  const target = describeBaseUrl(baseUrl);
+  if (decision === "notice") {
+    warn(
+      `\uC11C\uBC84 URL \uC774 ConnectBase \uACF5\uC2DD \uC8FC\uC18C\uAC00 \uC544\uB2D9\uB2C8\uB2E4: ${target}. Secret Key \uB97C \uD3EC\uD568\uD55C \uC790\uACA9\uC99D\uBA85\uC774 \uC774 \uC11C\uBC84\uB85C \uC804\uC1A1\uB429\uB2C8\uB2E4.`
+    );
+    return;
+  }
+  warn(`\uC774 \uC800\uC7A5\uC18C\uC758 .connectbaserc \uAC00 \uC11C\uBC84 URL \uC744 ${target} \uB85C \uC9C0\uC815\uD569\uB2C8\uB2E4.`);
+  log(
+    "  \uACC4\uC18D\uD558\uBA74 Secret Key(CONNECTBASE_SECRET_KEY \uD3EC\uD568)\uAC00 \uC774 \uC11C\uBC84\uB85C \uC804\uC1A1\uB429\uB2C8\uB2E4. \uBC1B\uC740 \uC800\uC7A5\uC18C\uB77C\uBA74 \uC911\uB2E8\uD558\uC138\uC694."
+  );
+  if (decision === "confirm") {
+    const answer = await prompt(`  ${target} \uB85C \uACC4\uC18D\uD560\uAE4C\uC694? (y/N): `);
+    if (answer.toLowerCase() === "y") return;
+    error("\uC911\uB2E8\uD588\uC2B5\uB2C8\uB2E4.");
+    process.exit(1);
+  }
+  error("\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC774\uB77C \uD655\uC778\uD560 \uC218 \uC5C6\uC5B4 \uC911\uB2E8\uD569\uB2C8\uB2E4.");
+  log(
+    `  \uC774 \uC11C\uBC84\uAC00 \uB9DE\uB2E4\uBA74 ${colors.cyan}--allow-repo-base-url${colors.reset} \uB97C \uBD99\uC774\uAC70\uB098 ${colors.cyan}--base-url${colors.reset}, ${colors.cyan}CONNECTBASE_BASE_URL${colors.reset} \uB85C \uC9C1\uC811 \uC9C0\uC815\uD558\uC138\uC694.`
+  );
+  process.exit(1);
+}
+function isOutsideProject(dir, root) {
+  const relative2 = path2.relative(path2.resolve(root), path2.resolve(root, dir));
+  return relative2 === ".." || relative2.startsWith(`..${path2.sep}`) || path2.isAbsolute(relative2);
+}
 function parseArgs(args) {
   const result = {
     options: {},
@@ -3776,6 +3946,8 @@ function parseArgs(args) {
       result.options.secretKey = args[++i];
     } else if (arg === "-u" || arg === "--base-url") {
       result.options.baseUrl = args[++i];
+    } else if (arg === "--allow-repo-base-url") {
+      result.options.allowRepoBaseUrl = "true";
     } else if (arg === "-t" || arg === "--timeout") {
       result.options.timeout = args[++i];
     } else if (arg === "--max-body") {
@@ -3840,8 +4012,12 @@ async function main() {
     publicKey: parsed.options.publicKey || fileConfig.publicKey,
     secretKey: parsed.options.secretKey || fileConfig.secretKey,
     storageId: parsed.options.storageId || fileConfig.storageId,
-    baseUrl: parsed.options.baseUrl || fileConfig.baseUrl || DEFAULT_BASE_URL
+    baseUrl: parsed.options.baseUrl || fileConfig.baseUrl
   };
+  await enforceBaseUrlPolicy(config.baseUrl, {
+    fromRepoConfig: !parsed.options.baseUrl && fileConfig.baseUrlFromRepo,
+    allowRepoBaseUrl: parsed.options.allowRepoBaseUrl === "true"
+  });
   if (parsed.command === "init") {
     await init(config, {
       yes: parsed.options.yes === "true",
@@ -3863,6 +4039,13 @@ async function main() {
     await setupMcp(config.secretKey, config.baseUrl);
   } else if (parsed.command === "deploy") {
     const directory = parsed.args[0] || fileConfig.deployDir || ".";
+    if (!parsed.args[0] && fileConfig.deployDir && isOutsideProject(fileConfig.deployDir, getProjectRoot())) {
+      error(
+        `.connectbaserc \uC758 deployDir \uC774 \uD504\uB85C\uC81D\uD2B8 \uBC16\uC744 \uAC00\uB9AC\uCF1C \uBC30\uD3EC\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4: ${JSON.stringify(fileConfig.deployDir)}`
+      );
+      log("  \uC774 \uD3F4\uB354\uAC00 \uB9DE\uB2E4\uBA74 \uBA85\uB839\uC904\uC5D0\uC11C \uC9C1\uC811 \uC9C0\uC815\uD558\uC138\uC694: deploy <\uD3F4\uB354>");
+      process.exit(1);
+    }
     if (!config.publicKey) {
       error(
         'Public Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase-client init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -k \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
@@ -3981,12 +4164,18 @@ main().catch((err) => {
 });
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DEPLOY_REQUEST_BUDGET_BYTES,
   TunnelConnectSelector,
   ancestorCommandLines,
   apiErrorMessage,
+  browserAuthStartBody,
+  browserAuthUrl,
+  browserOpenCommand,
   buildFirstHint,
   collectDeployFiles,
   computeDeployDiff,
+  decideBaseUrl,
+  describeBaseUrl,
   detectPackageManager,
   formatSkippedFilesReport,
   getTunnelConnectCandidates,
@@ -3994,13 +4183,19 @@ main().catch((err) => {
   isAllowedDeployExt,
   isBinaryDeployExt,
   isExtensionlessDataFile,
+  isOutsideProject,
+  isPlatformBaseUrl,
+  loadConfig,
   makeRequest,
   normalizeRelativePath,
+  openBrowser,
   packageManagerCommands,
   packageScriptInvocationPattern,
   parseArgs,
   registerEndpointBinding,
   runningInsidePackageScript,
+  selectBinariesToOffload,
   sha256Hex,
-  storageAdminHeaders
+  storageAdminHeaders,
+  writeSecretFile
 });