connectbase-client 6.2.0 → 6.3.0

package/CHANGELOG.md

@@ -3,6 +3,88 @@
 본 SDK 의 모든 주요 변경사항을 [Keep a Changelog](https://keepachangelog.com/ko/1.1.0/) 형식으로 기록합니다.
 버전은 [Semantic Versioning](https://semver.org/lang/ko/) 을 따릅니다.
 
+## [6.3.0] - 2026-09-07
+
+### Fixed — Secret Key 가 만료되면 `init` 을 다시 돌릴 수 없던 문제
+
+`init` 은 `.connectbaserc` 에 저장된 Secret Key 를 그대로 집어 씁니다. 그 키가 만료되거나
+취소되면 앱 목록 조회가 401 을 받고 **그대로 종료**했는데, 다시 실행해도 같은 죽은 키를
+다시 집어 오므로 같은 자리에서 또 죽었습니다. `.connectbaserc` 를 손으로 지우는 것 말고는
+빠져나올 길이 없었습니다.
+
+이제 401 을 받으면 **그 자리에서 재인증**합니다 (브라우저 로그인 또는 직접 입력). 새 키는
+즉시 `.connectbaserc` 에 저장되고 `.mcp.json` 에도 반영되므로, 파일을 지우는 절차가
+사라졌습니다. 비대화형(`--yes`)에서는 프롬프트 대신 새 키를 넘기라고 명확히 안내합니다.
+
+`connectbase mcp` 도 같습니다 — 넘겨받은 키가 살아 있는지 **먼저 확인**한 뒤 `.mcp.json`
+에 씁니다. 종전에는 만료된 키를 그대로 적고 "설정 완료" 라고 말해서, 실패가 Claude Code 의
+401 로만 드러났습니다. (네트워크 오류로는 막지 않습니다 — 오프라인에서도 설정은 써집니다.)
+
+재초기화 확인 프롬프트의 기본값도 "계속" 으로 바꿨습니다. 같은 앱을 고르면 Public Key 를
+재사용하므로 재실행은 안전한 동작입니다.
+
+### Fixed — `npm run deploy` 가 `command not found` 로 죽던 문제
+
+`init` 이 `package.json` 에 deploy 스크립트만 넣고 CLI 를 의존성으로 선언하지 않아서,
+SDK 가 설치되지 않은 프로젝트에서 마지막 안내대로 `npm run deploy` 를 치면
+`connectbase: command not found` 가 났습니다. 이제 `devDependencies` 에
+`connectbase-client` 를 함께 선언하고, 설치가 필요하면 마지막 안내에 `npm install` 을
+포함합니다. (`npx --yes` 를 스크립트에 박는 우회는 쓰지 않았습니다 — 빌드마다
+레지스트리에서 최신본을 끌어오면 재현 가능한 빌드가 아닙니다.)
+
+빌드 스크립트가 있으면 deploy 스크립트는 이제 build 명령을 **복사하지 않고**
+`npm run build && connectbase deploy <dir>` 로 위임합니다. 복사본은 build 가 바뀌어도
+갱신되지 않아 조용히 낡습니다.
+
+### Fixed — `--base-url` / `CONNECTBASE_BASE_URL` 이 `init` 에서 무시되던 문제
+
+`init` 과 브라우저 로그인, SDK 문서 다운로드, MCP 설정이 상수를 직접 참조해, 로컬이나
+스테이징 스택을 지정해도 프로덕션 API 로 갔습니다. 브라우저 로그인 URL 도 같은 환경을
+가리키도록 API URL 에서 파생시킵니다.
+
+### Fixed — CLI 버전을 빌드 시점에 주입
+
+종전에는 런타임에 `package.json` 을 찾아 읽고, 실패하면 하드코딩된 옛 버전(`3.25.1`)으로
+폴백했습니다. 그 폴백은 조용히 낡았고, 단순히 `--version` 이 틀리는 데서 끝나지 않았습니다 —
+`init` 이 사용자의 `package.json` 에 적는 의존성 범위에까지 그 값이 들어갑니다.
+
+### Fixed — git 저장소가 아닌 폴더에서 `fatal:` 오류가 출력되던 문제
+
+`init` 이 프로젝트 루트를 찾을 때 쓰는 `git rev-parse` 의 stderr 가 그대로 새어 나와,
+정상 경로인데도 화면에 `fatal: … 깃 저장소가 아닙니다` 가 세 번 찍혔습니다.
+
+### Changed — 문서의 `npx` 예제가 패키지 이름을 쓰도록 통일
+
+`connectbase` 는 이 패키지가 설치하는 **bin 이름**이지 npm 패키지 이름이 아닙니다. npx 는
+로컬 `node_modules/.bin` 을 먼저 보고, 없으면 그 이름의 **패키지**를 레지스트리에서 받으려
+합니다. 그래서 `npx connectbase init` 은 이 패키지가 이미 설치된 프로젝트에서만 동작하고,
+아무것도 없는 새 폴더 — 즉 `init` 을 처음 실행하는 바로 그 상황 — 에서는 npm 404 가 났습니다.
+
+```
+$ npx connectbase init
+npm error 404 Not Found - GET https://registry.npmjs.org/connectbase
+```
+
+전역 설치(`npm i -g connectbase-client`)로 PATH 에 `connectbase` 가 있어도 마찬가지입니다.
+npx 는 PATH 를 보지 않습니다.
+
+규칙을 하나로 정리했습니다:
+
+| 형태 | 이름 | 왜 |
+|---|---|---|
+| `npx …` | `connectbase-client` | npx 인자는 **패키지** 이름이다. 설치 여부와 무관하게 항상 동작 |
+| 전역 설치 후 / `npm run` 스크립트 / `node_modules/.bin` | `connectbase` | 짧은 bin 이름. 0.16.1 에서 정한 용도 그대로 |
+
+```bash
+npx connectbase-client init     # 설치 전 — 패키지 이름
+npm install                     # init 이 devDependencies 에 넣어 둔 것을 설치
+npm run deploy                  # 내부적으로 `connectbase deploy ./dist` — 짧은 이름 그대로
+```
+
+`connectbase` 를 실제 패키지로도 발행하려 했으나, npm 이 2013 년의 `connect-base` 와
+이름이 유사하다는 이유로 거절했습니다 (`@connectbase` 스코프도 타인이 사용 중). 이름을
+확보하면 `npx connectbase` 도 함께 동작하게 할 예정입니다.
+
 ## [6.2.0] - 2026-09-06
 
 ### Added — 웹 스토리지 관리 API 에 Secret Key 전송
@@ -23,7 +105,7 @@ production 승격이 가능했습니다 — 공개된 사이트에서 키를 뽑
 
 **이 버전은 아무것도 깨뜨리지 않습니다.** Secret Key 가 없으면 경고만 하고 그대로 진행합니다.
 CLI 가 서버보다 먼저 조이면, 우리가 생성해 드리는 GitHub Actions 워크플로처럼 버전을 고정하지
-않는(`npx --yes connectbase deploy`) 환경이 서버 변경 전에 깨지기 때문입니다.
+않는(`npx --yes connectbase-client deploy`) 환경이 서버 변경 전에 깨지기 때문입니다.
 
 **지금 해두실 것.** CI 를 쓰신다면 저장소 시크릿에 `CONNECTBASE_SECRET_KEY` 를 추가하고
 워크플로 env 에 넣으세요. 워크플로 파일에 값을 직접 적으면 저장소에 커밋됩니다.
@@ -554,7 +636,7 @@ await ctx.cbAdmin.appMembers.remove(ctx.appId, memberId)
 ```bash
 # 이제 dist 에 두기만 하면 함께 올라간다
 echo "/blog  /blog.html  200" > dist/_redirects
-npx connectbase deploy ./dist
+npx connectbase-client deploy ./dist
 ```
 
 - `_redirects`, `_headers` 만 이름 완전일치로 허용한다. `Dockerfile`·`Makefile`·`LICENSE`
@@ -1152,7 +1234,7 @@ AI 에이전트(Claude Code 등)가 `init` 을 직접 실행할 수 있도록
   자동 정리(레거시 fullstack 파일 포함), `deploy` 성공 후 변경이 있을 때만 조용히 자동 갱신
   (`--skip-docs` 로 생략 가능).
 - **CLAUDE.md @import**: 참조 블록이 `@.claude/docs/project-rules.md` import 로 규칙을 매
-  세션 자동 로드. MCP 미연결 시 `npx connectbase mcp` 안내 지시 포함. `mcp` 명령도 비대화형
+  세션 자동 로드. MCP 미연결 시 `npx connectbase-client mcp` 안내 지시 포함. `mcp` 명령도 비대화형
   지원(`--secret-key`/env/.connectbaserc 자동 사용).
 
 ### Changed / Security
@@ -2793,7 +2875,7 @@ ComfyUI × 웹스토리지 같은 e2e 통합 패턴 (작업 제출 → 폴링
 
 ### Fixed
 
-- `npx connectbase docs` 가 인증 없이 곧장 문서를 받도록 수정. 백엔드 `/v1/storages/webs/claude-md`
+- `npx connectbase-client docs` 가 인증 없이 곧장 문서를 받도록 수정. 백엔드 `/v1/storages/webs/claude-md`
   는 public 라우트인데 CLI 가 불필요하게 브라우저 인증 → 앱 선택 → Public Key 발급을 강제하던
   흐름을 제거. 캐시된 publicKey 가 있으면 문서에 박아주고, 없으면 백엔드가 placeholder
   (`YOUR_PUBLIC_KEY_HERE`) 로 대체해 그대로 다운로드.
@@ -3225,7 +3307,7 @@ sisun 팀(`019d85c7-...`) 의 운영 피드백 3건이 시작점이며, 백엔
 
 ## [1.4.2] - 2026-04-18
 
-`npx connectbase docs` 명령이 init/deploy/tunnel 과 달리 brower auth 흐름을 거치지 않아, Public Key 가 없는 사용자가 키 발급 경로를 모른 채 prompt 만 보던 UX 문제 해결.
+`npx connectbase-client docs` 명령이 init/deploy/tunnel 과 달리 brower auth 흐름을 거치지 않아, Public Key 가 없는 사용자가 키 발급 경로를 모른 채 prompt 만 보던 UX 문제 해결.
 
 ### Fixed
 

package/README.md

@@ -27,7 +27,7 @@ Connect Base provides **two types** of Keys. Use the right key for your use case
 |---------|----------|---------|
 | Frontend SDK (`new ConnectBase()`) | **Public Key** (`cb_pk_`) | Web/app: DB queries, auth, file uploads |
 | `.env` file (`VITE_CONNECTBASE_PUBLIC_KEY`) | **Public Key** (`cb_pk_`) | React, Vue, etc. |
-| CLI deploy (`.connectbaserc`) | **Public Key + Secret Key** (`cb_pk_` + `cb_sk_`) | `npx connectbase deploy` |
+| CLI deploy (`.connectbaserc`) | **Public Key + Secret Key** (`cb_pk_` + `cb_sk_`) | `npx connectbase-client deploy` |
 | MCP server (AI tools) | **Secret Key** (`cb_sk_`) | Claude, Cursor, Windsurf |
 | Server-side admin tasks | **Secret Key** (`cb_sk_`) | Backend full data access |
 
@@ -131,22 +131,27 @@ try {
 
 Deploy your web application to Connect Base Web Storage with a single command.
 
-> 🔐 **Deploy commands require a Secret Key (`cb_sk_*`).** The web storage deploy, promote,
-> create and list routes require `Authorization: Bearer cb_sk_*` on top of `X-Public-Key`,
-> because a Public Key is a public identifier that ships in your browser bundle and cannot
-> prove deploy permission. The CLI reads `secretKey` from `.connectbaserc` or the
-> `CONNECTBASE_SECRET_KEY` environment variable and sends it automatically — **just update to
-> the latest version** (`npm i -g connectbase-client@latest`). Older CLIs fail with
-> **401 `SECRET_KEY_REQUIRED`**.
+> **After `npx`, always use the package name `connectbase-client`.** This package installs two
+> bins — `connectbase` and `connectbase-client` — but `connectbase` is a *bin* name, not a
+> package name. npx checks the local `node_modules/.bin` first and otherwise fetches a
+> **package** by that name, so `npx connectbase init` only works in a project that already has
+> this package installed; in an empty folder it fails with npm 404. A global install does not
+> help — npx does not look at `PATH`.
 >
-> **Never commit a Secret Key.** `init` adds `.connectbaserc` to `.gitignore`; in CI, inject it
-> from a repository secret instead.
+> Use the short `connectbase` **after** installing: globally, inside `npm run` scripts, or via
+> `node_modules/.bin`.
+>
+> ```bash
+> npx connectbase-client init   # nothing installed yet — package name
+> npm install                   # installs what init added to devDependencies
+> npm run deploy                # runs `connectbase deploy ./dist` — short name is fine here
+> ```
 
 ### Quick Start
 
 ```bash
 # 1. Initialize (one-time setup)
-npx connectbase init
+npx connectbase-client init
 
 # 2. Deploy
 npm run deploy
@@ -173,14 +178,14 @@ The `init` command will:
 If you prefer not to use `init`, you can pass options directly:
 
 ```bash
-npx connectbase deploy ./dist -s <storage-id> -k <public-key> --secret-key <secret-key>
+npx connectbase-client deploy ./dist -s <storage-id> -k <public-key> --secret-key <secret-key>
 ```
 
 The Secret Key can also come from `CONNECTBASE_SECRET_KEY` — preferred in CI, so it never
 appears in shell history or CI logs:
 
 ```bash
-CONNECTBASE_SECRET_KEY=cb_sk_... npx connectbase deploy ./dist -s <storage-id> -k <public-key>
+CONNECTBASE_SECRET_KEY=cb_sk_... npx connectbase-client deploy ./dist -s <storage-id> -k <public-key>
 ```
 
 ### Options
@@ -204,14 +209,14 @@ Expose a local server to the internet through a secure WebSocket tunnel. Useful
 
 ```bash
 # Expose local port 8084 to the internet
-npx connectbase tunnel 8084 -k <public-key>
+npx connectbase-client tunnel 8084 -k <public-key>
 
 # With environment variable
 export CONNECTBASE_PUBLIC_KEY=your-public-key
-npx connectbase tunnel 8084
+npx connectbase-client tunnel 8084
 
 # For GPU servers or long-running tasks (e.g., image generation)
-npx connectbase tunnel 7860 --timeout 300 --max-body 50
+npx connectbase-client tunnel 7860 --timeout 300 --max-body 50
 ```
 
 The tunnel creates a public URL like `https://tunnel.connectbase.world/<tunnel-id>/` that proxies all HTTP requests to your local service.
@@ -241,7 +246,7 @@ on the server, so your SDK only needs the Public Key.
 
 ```bash
 # Start ComfyUI on port 8188, expose it as endpoint label "comfyui-main"
-npx connectbase tunnel 8188 --label comfyui-main --description "ComfyUI on my desktop"
+npx connectbase-client tunnel 8188 --label comfyui-main --description "ComfyUI on my desktop"
 ```
 
 Authentication uses your User Secret Key (`cb_sk_*`); the CLI calls the dual-auth
@@ -272,14 +277,14 @@ The `init` command creates `.connectbaserc` automatically. You can also create i
 export CONNECTBASE_PUBLIC_KEY=cb_pk_your-public-key
 export CONNECTBASE_SECRET_KEY=cb_sk_your-secret-key   # required by deploy / promote
 export CONNECTBASE_STORAGE_ID=your-storage-id
-npx connectbase deploy ./dist
+npx connectbase-client deploy ./dist
 ```
 
 In CI, read the Secret Key from a repository secret:
 
 ```yaml
 # GitHub Actions
-- run: npx connectbase deploy ./dist
+- run: npx connectbase-client deploy ./dist
   env:
     CONNECTBASE_PUBLIC_KEY: ${{ vars.CONNECTBASE_PUBLIC_KEY }}
     CONNECTBASE_SECRET_KEY: ${{ secrets.CONNECTBASE_SECRET_KEY }}

package/dist/cli.js

@@ -147,18 +147,7 @@ function handleTunnelError(msg, appId, localPort) {
 }
 
 // src/cli.ts
-function getPackageVersion() {
-  try {
-    const pkgPath = path2.join(__dirname, "..", "package.json");
-    if (fs2.existsSync(pkgPath)) {
-      const pkg = JSON.parse(fs2.readFileSync(pkgPath, "utf-8"));
-      return pkg.version || "0.0.0";
-    }
-  } catch {
-  }
-  return "3.25.1";
-}
-var VERSION = getPackageVersion();
+var VERSION = "6.3.0" ? "6.3.0" : getPackageVersion();
 var DEFAULT_BASE_URL = "https://api.connectbase.world";
 var colors = {
   reset: "\x1B[0m",
@@ -311,7 +300,7 @@ function storageAdminHeaders(config) {
   );
   log("  \uACE7 \uC11C\uBC84\uAC00 Secret Key \uB97C \uC694\uAD6C\uD569\uB2C8\uB2E4. \uC9C0\uAE08 \uC124\uC815\uD574 \uB450\uC138\uC694.");
   log(
-    `  ${colors.cyan}npx connectbase init${colors.reset} \uC774 \uBC1C\uAE09\uD574 .connectbaserc \uC5D0 \uC800\uC7A5\uD569\uB2C8\uB2E4.`
+    `  ${colors.cyan}npx connectbase-client init${colors.reset} \uC774 \uBC1C\uAE09\uD574 .connectbaserc \uC5D0 \uC800\uC7A5\uD569\uB2C8\uB2E4.`
   );
   log(
     `  \uC774\uBBF8 \uD0A4\uAC00 \uC788\uB2E4\uBA74 ${colors.cyan}CONNECTBASE_SECRET_KEY${colors.reset} \uD658\uACBD\uBCC0\uC218\uB85C \uC9C0\uC815\uD558\uC138\uC694.`
@@ -667,10 +656,10 @@ async function deploy(directory, config, isDev = false, deployOpts = {}) {
       const pkg = JSON.parse(fs2.readFileSync(pkgPath, "utf-8"));
       if (pkg.scripts?.build) {
         warn(
-          `\uBC30\uD3EC \uC804 \uBE4C\uB4DC\uB97C \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694: ${colors.cyan}npm run build && npx connectbase deploy${colors.reset}`
+          `\uBC30\uD3EC \uC804 \uBE4C\uB4DC\uB97C \uBA3C\uC800 \uC2E4\uD589\uD558\uC138\uC694: ${colors.cyan}npm run build && npx connectbase-client deploy${colors.reset}`
         );
         warn(
-          `\uB610\uB294 package.json\uC5D0 deploy \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uB4F1\uB85D\uD558\uC138\uC694: ${colors.cyan}npx connectbase init${colors.reset}`
+          `\uB610\uB294 package.json\uC5D0 deploy \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uB4F1\uB85D\uD558\uC138\uC694: ${colors.cyan}npx connectbase-client init${colors.reset}`
         );
       }
     } catch {
@@ -702,7 +691,7 @@ async function deploy(directory, config, isDev = false, deployOpts = {}) {
   const envLabel = isDev ? "QA" : "Prod";
   if (isDev) {
     warn(
-      `${colors.yellow}--dev \uB294 deprecated${colors.reset} \uC785\uB2C8\uB2E4 \u2014 QA \uCC44\uB110\uB85C \uBC30\uD3EC\uD569\uB2C8\uB2E4(production \uBBF8\uBC18\uC601). \uC774\uD6C4 ${colors.cyan}npx connectbase promote${colors.reset} \uB85C production \uC5D0 \uBC18\uC601\uD558\uC138\uC694. promote_mode=manual \uC774\uBA74 \uC77C\uBC18 ${colors.cyan}deploy${colors.reset} \uB3C4 \uB3D9\uC77C\uD558\uAC8C QA \uB85C \uBC30\uD3EC\uB429\uB2C8\uB2E4.`
+      `${colors.yellow}--dev \uB294 deprecated${colors.reset} \uC785\uB2C8\uB2E4 \u2014 QA \uCC44\uB110\uB85C \uBC30\uD3EC\uD569\uB2C8\uB2E4(production \uBBF8\uBC18\uC601). \uC774\uD6C4 ${colors.cyan}npx connectbase-client promote${colors.reset} \uB85C production \uC5D0 \uBC18\uC601\uD558\uC138\uC694. promote_mode=manual \uC774\uBA74 \uC77C\uBC18 ${colors.cyan}deploy${colors.reset} \uB3C4 \uB3D9\uC77C\uD558\uAC8C QA \uB85C \uBC30\uD3EC\uB429\uB2C8\uB2E4.`
     );
   }
   const baseStorageUrl = `${config.baseUrl}/v1/public/storages/webs/${config.storageId}`;
@@ -918,7 +907,7 @@ ${colors.cyan}Production: ${dep.production_url}${colors.reset}`
           log(`
 ${colors.yellow}QA URL:  ${dep.qa_url}${colors.reset}`);
         log(
-          `${colors.dim}\uAC80\uC99D \uD6C4 \uBC18\uC601: ${colors.cyan}npx connectbase promote${colors.reset}
+          `${colors.dim}\uAC80\uC99D \uD6C4 \uBC18\uC601: ${colors.cyan}npx connectbase-client promote${colors.reset}
 `
         );
       }
@@ -1019,7 +1008,7 @@ ${colors.cyan}\uBC30\uD3EC \uC774\uB825${colors.reset} (promote_mode: ${data.pro
   if (data.qa_url)
     log(`${colors.yellow}QA:         ${data.qa_url}${colors.reset}`);
   log(
-    `${colors.dim}\uB864\uBC31: npx connectbase promote <deployment_id>${colors.reset}
+    `${colors.dim}\uB864\uBC31: npx connectbase-client promote <deployment_id>${colors.reset}
 `
   );
 }
@@ -1086,7 +1075,9 @@ function getProjectRoot() {
   const gitRoot = getGitRoot();
   return gitRoot || process.cwd();
 }
-var CONSOLE_URL = DEFAULT_BASE_URL.replace("api.", "");
+function consoleUrlFor(baseUrl) {
+  return baseUrl.replace("api.", "");
+}
 function openBrowser(url) {
   const { exec } = require("child_process");
   const platform2 = process.platform;
@@ -1101,10 +1092,10 @@ function openBrowser(url) {
   exec(command, () => {
   });
 }
-async function browserAuthFlow() {
+async function browserAuthFlow(baseUrl = DEFAULT_BASE_URL) {
   info("\uBE0C\uB77C\uC6B0\uC800 \uC778\uC99D \uC138\uC158\uC744 \uC2DC\uC791\uD569\uB2C8\uB2E4...");
   const startRes = await makeRequest(
-    `${DEFAULT_BASE_URL}/v1/public/cli-auth/start`,
+    `${baseUrl}/v1/public/cli-auth/start`,
     "POST",
     {}
   );
@@ -1115,7 +1106,7 @@ async function browserAuthFlow() {
     process.exit(1);
   }
   const { session_id } = startRes.data;
-  const authUrl = `${CONSOLE_URL}/auth/cli-auth?session=${session_id}`;
+  const authUrl = `${consoleUrlFor(baseUrl)}/auth/cli-auth?session=${session_id}`;
   log(`
 ${colors.cyan}\uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uB85C\uADF8\uC778\uD558\uC138\uC694:${colors.reset}`);
   log(`${colors.dim}${authUrl}${colors.reset}
@@ -1135,7 +1126,7 @@ ${colors.cyan}\uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uB85C\uADF8\uC778\uD558\uC13
     await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
     try {
       const pollRes = await makeRequest(
-        `${DEFAULT_BASE_URL}/v1/public/cli-auth/poll/${session_id}`,
+        `${baseUrl}/v1/public/cli-auth/poll/${session_id}`,
         "GET",
         {}
       );
@@ -1182,10 +1173,73 @@ ${colors.cyan}\uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uB85C\uADF8\uC778\uD558\uC13
   error("\uC778\uC99D \uC2DC\uAC04\uC774 \uCD08\uACFC\uB418\uC5C8\uC2B5\uB2C8\uB2E4. \uB2E4\uC2DC \uC2DC\uB3C4\uD574\uC8FC\uC138\uC694.");
   process.exit(1);
 }
+async function promptForSecretKey(baseUrl = DEFAULT_BASE_URL) {
+  log(`
+${colors.dim}\uC778\uC99D \uBC29\uC2DD\uC744 \uC120\uD0DD\uD558\uC138\uC694:${colors.reset}`);
+  log(`  ${colors.cyan}1${colors.reset}) Secret Key \uC9C1\uC811 \uC785\uB825 (cb_sk_...)`);
+  log(`  ${colors.cyan}2${colors.reset}) \uBE0C\uB77C\uC6B0\uC800 \uB85C\uADF8\uC778\uC73C\uB85C \uC790\uB3D9 \uBC1C\uAE09
+`);
+  const authChoice = await prompt(
+    `${colors.blue}?${colors.reset} \uC120\uD0DD (1/2): `
+  );
+  if (authChoice === "2") {
+    try {
+      return await browserAuthFlow(baseUrl);
+    } catch (err) {
+      error(`\uB124\uD2B8\uC6CC\uD06C \uC624\uB958: ${err instanceof Error ? err.message : err}`);
+      info(
+        "\uC778\uD130\uB137 \uC5F0\uACB0\uC744 \uD655\uC778\uD558\uAC70\uB098, Secret Key \uC9C1\uC811 \uC785\uB825(\uC635\uC158 1)\uC744 \uC2DC\uB3C4\uD558\uC138\uC694"
+      );
+      process.exit(1);
+    }
+  }
+  log(
+    `${colors.dim}Secret Key (cb_sk_): \uCF58\uC194 > \uD504\uB85C\uD544 > \uC2DC\uD06C\uB9BF \uD0A4 \uD0ED\uC5D0\uC11C \uBC1C\uAE09${colors.reset}
+`
+  );
+  const entered = await promptSecret(
+    `${colors.blue}?${colors.reset} Secret Key: `
+  );
+  if (!entered) {
+    error("Secret Key\uB294 \uD544\uC218\uC785\uB2C8\uB2E4");
+    process.exit(1);
+  }
+  if (entered.startsWith("cb_pk_")) {
+    error("Public Key\uAC00 \uC544\uB2CC Secret Key(cb_sk_)\uB97C \uC785\uB825\uD558\uC138\uC694");
+    info("Secret Key\uB294 \uCF58\uC194 > \uD504\uB85C\uD544 > \uC2DC\uD06C\uB9BF \uD0A4 \uD0ED\uC5D0\uC11C \uC0DD\uC131\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4");
+    process.exit(1);
+  }
+  if (!entered.startsWith("cb_sk_")) {
+    error(
+      "\uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uD0A4 \uD615\uC2DD\uC785\uB2C8\uB2E4. cb_sk_\uB85C \uC2DC\uC791\uD558\uB294 Secret Key\uB97C \uC785\uB825\uD558\uC138\uC694"
+    );
+    process.exit(1);
+  }
+  return entered;
+}
+function saveSecretKeyToRc(secretKey, dir = process.cwd()) {
+  const rcPath = path2.join(dir, ".connectbaserc");
+  let rcData = {};
+  if (fs2.existsSync(rcPath)) {
+    try {
+      rcData = JSON.parse(fs2.readFileSync(rcPath, "utf-8"));
+    } catch {
+    }
+  }
+  rcData.secretKey = secretKey;
+  fs2.writeFileSync(rcPath, `${JSON.stringify(rcData, null, 2)}
+`);
+}
+async function fetchAppsWithSecretKey(baseUrl, secretKey) {
+  return makeRequest(`${baseUrl}/v1/public/cli/apps`, "GET", {
+    "X-Public-Key": secretKey
+  });
+}
 async function init(config = {}, opts = {}) {
   log(`
 ${colors.cyan}Connect Base \uD504\uB85C\uC81D\uD2B8 \uCD08\uAE30\uD654${colors.reset}
 `);
+  const baseUrl = config.baseUrl || DEFAULT_BASE_URL;
   const cwd = process.cwd();
   const projectRoot = getProjectRoot();
   if (cwd !== projectRoot) {
@@ -1199,7 +1253,7 @@ ${colors.cyan}Connect Base \uD504\uB85C\uC81D\uD2B8 \uCD08\uAE30\uD654${colors.r
   if (!process.stdin.isTTY && !nonInteractive) {
     error("\uBE44\uB300\uD654\uD615 \uD658\uACBD\uC785\uB2C8\uB2E4. --yes \uD50C\uB798\uADF8\uC640 \uD568\uAED8 \uD544\uC694\uD55C \uAC12\uC744 \uC9C0\uC815\uD558\uC138\uC694");
     log(
-      `${colors.dim}\uC608: npx connectbase init --yes --secret-key cb_sk_... [--app <\uC571ID>] [--storage <\uC2A4\uD1A0\uB9AC\uC9C0ID>] [--deploy-dir ./dist]${colors.reset}`
+      `${colors.dim}\uC608: npx connectbase-client init --yes --secret-key cb_sk_... [--app <\uC571ID>] [--storage <\uC2A4\uD1A0\uB9AC\uC9C0ID>] [--deploy-dir ./dist]${colors.reset}`
     );
     log(
       `${colors.dim}Secret Key\uB294 CONNECTBASE_SECRET_KEY \uD658\uACBD\uBCC0\uC218\uB85C\uB3C4 \uC804\uB2EC\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4${colors.reset}`
@@ -1221,10 +1275,14 @@ ${colors.cyan}Connect Base \uD504\uB85C\uC81D\uD2B8 \uCD08\uAE30\uD654${colors.r
         process.exit(1);
       }
     } else {
+      info(
+        ".connectbaserc\uAC00 \uC774\uBBF8 \uC788\uC2B5\uB2C8\uB2E4 \u2014 \uAE30\uC874 \uC571/\uD0A4 \uC124\uC815\uC744 \uC7AC\uC0AC\uC6A9\uD574 \uB2E4\uC2DC \uAD6C\uC131\uD569\uB2C8\uB2E4"
+      );
       const overwrite = await prompt(
-        `${colors.yellow}\u26A0${colors.reset} .connectbaserc\uAC00 \uC774\uBBF8 \uC874\uC7AC\uD569\uB2C8\uB2E4. \uB36E\uC5B4\uC4F0\uC2DC\uACA0\uC2B5\uB2C8\uAE4C? (y/N): `
+        `${colors.blue}?${colors.reset} \uACC4\uC18D\uD560\uAE4C\uC694? (Y/n): `
       );
-      if (overwrite.toLowerCase() !== "y") {
+      const answer = overwrite.toLowerCase();
+      if (answer === "n" || answer === "no") {
         info("\uCD08\uAE30\uD654\uAC00 \uCDE8\uC18C\uB418\uC5C8\uC2B5\uB2C8\uB2E4");
         return;
       }
@@ -1238,57 +1296,14 @@ ${colors.cyan}Connect Base \uD504\uB85C\uC81D\uD2B8 \uCD08\uAE30\uD654${colors.r
       );
       process.exit(1);
     }
-    info("Secret Key \uD655\uC778\uB428 (\uD50C\uB798\uADF8/\uD658\uACBD\uBCC0\uC218/.connectbaserc)");
+    info("\uC800\uC7A5\uB41C Secret Key \uC0AC\uC6A9 (\uD50C\uB798\uADF8/\uD658\uACBD\uBCC0\uC218/.connectbaserc)");
   } else if (nonInteractive) {
     error(
       "Secret Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4: --secret-key cb_sk_... \uB610\uB294 CONNECTBASE_SECRET_KEY \uD658\uACBD\uBCC0\uC218"
     );
     process.exit(1);
   } else {
-    log(`
-${colors.dim}\uC778\uC99D \uBC29\uC2DD\uC744 \uC120\uD0DD\uD558\uC138\uC694:${colors.reset}`);
-    log(`  ${colors.cyan}1${colors.reset}) Secret Key \uC9C1\uC811 \uC785\uB825 (cb_sk_...)`);
-    log(`  ${colors.cyan}2${colors.reset}) \uBE0C\uB77C\uC6B0\uC800 \uB85C\uADF8\uC778\uC73C\uB85C \uC790\uB3D9 \uBC1C\uAE09
-`);
-    const authChoice = await prompt(
-      `${colors.blue}?${colors.reset} \uC120\uD0DD (1/2): `
-    );
-    if (authChoice === "2") {
-      try {
-        secretKey = await browserAuthFlow();
-      } catch (err) {
-        error(`\uB124\uD2B8\uC6CC\uD06C \uC624\uB958: ${err instanceof Error ? err.message : err}`);
-        info(
-          "\uC778\uD130\uB137 \uC5F0\uACB0\uC744 \uD655\uC778\uD558\uAC70\uB098, Secret Key \uC9C1\uC811 \uC785\uB825(\uC635\uC158 1)\uC744 \uC2DC\uB3C4\uD558\uC138\uC694"
-        );
-        process.exit(1);
-      }
-    } else {
-      log(
-        `${colors.dim}Secret Key (cb_sk_): \uCF58\uC194 > \uD504\uB85C\uD544 > \uC2DC\uD06C\uB9BF \uD0A4 \uD0ED\uC5D0\uC11C \uBC1C\uAE09${colors.reset}
-`
-      );
-      secretKey = await promptSecret(
-        `${colors.blue}?${colors.reset} Secret Key: `
-      );
-      if (!secretKey) {
-        error("Secret Key\uB294 \uD544\uC218\uC785\uB2C8\uB2E4");
-        process.exit(1);
-      }
-      if (secretKey.startsWith("cb_pk_")) {
-        error("Public Key\uAC00 \uC544\uB2CC Secret Key(cb_sk_)\uB97C \uC785\uB825\uD558\uC138\uC694");
-        info(
-          "Secret Key\uB294 \uCF58\uC194 > \uD504\uB85C\uD544 > \uC2DC\uD06C\uB9BF \uD0A4 \uD0ED\uC5D0\uC11C \uC0DD\uC131\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4"
-        );
-        process.exit(1);
-      }
-      if (!secretKey.startsWith("cb_sk_")) {
-        error(
-          "\uC720\uD6A8\uD558\uC9C0 \uC54A\uC740 \uD0A4 \uD615\uC2DD\uC785\uB2C8\uB2E4. cb_sk_\uB85C \uC2DC\uC791\uD558\uB294 Secret Key\uB97C \uC785\uB825\uD558\uC138\uC694"
-        );
-        process.exit(1);
-      }
-    }
+    secretKey = await promptForSecretKey(baseUrl);
   }
   let appId = "";
   let publicKey = "";
@@ -1304,7 +1319,7 @@ ${colors.dim}\uC778\uC99D \uBC29\uC2DD\uC744 \uC120\uD0DD\uD558\uC138\uC694:${co
   const issuePublicKey = async (targetAppId) => {
     info("Public Key \uC0DD\uC131 \uC911...");
     const newKeyRes = await makeRequest(
-      `${DEFAULT_BASE_URL}/v1/public/cli/apps/${targetAppId}/public-keys`,
+      `${baseUrl}/v1/public/cli/apps/${targetAppId}/public-keys`,
       "POST",
       { "X-Public-Key": secretKey },
       JSON.stringify({})
@@ -1319,14 +1334,26 @@ ${colors.dim}\uC778\uC99D \uBC29\uC2DD\uC744 \uC120\uD0DD\uD558\uC138\uC694:${co
   };
   try {
     info("\uC571 \uBAA9\uB85D \uC870\uD68C \uC911...");
-    const appsRes = await makeRequest(
-      `${DEFAULT_BASE_URL}/v1/public/cli/apps`,
-      "GET",
-      { "X-Public-Key": secretKey }
-    );
+    let appsRes = await fetchAppsWithSecretKey(baseUrl, secretKey);
     if (appsRes.status === 401) {
-      error("Secret Key\uAC00 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uCF58\uC194\uC5D0\uC11C \uD0A4\uB97C \uD655\uC778\uD558\uC138\uC694");
-      process.exit(1);
+      warn("\uC800\uC7A5\uB41C Secret Key\uAC00 \uB354 \uC774\uC0C1 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 (\uB9CC\uB8CC \uB610\uB294 \uCDE8\uC18C)");
+      if (nonInteractive) {
+        error(
+          "\uC0C8 Secret Key\uB97C --secret-key cb_sk_... \uB610\uB294 CONNECTBASE_SECRET_KEY \uB85C \uC804\uB2EC\uD558\uC138\uC694"
+        );
+        process.exit(1);
+      }
+      info("\uC0C8 Secret Key\uB85C \uB2E4\uC2DC \uC778\uC99D\uD569\uB2C8\uB2E4");
+      secretKey = await promptForSecretKey(baseUrl);
+      appsRes = await fetchAppsWithSecretKey(baseUrl, secretKey);
+      if (appsRes.status === 401) {
+        error(
+          "\uC0C8\uB85C \uBC1B\uC740 Secret Key\uB3C4 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4. \uCF58\uC194 > \uD504\uB85C\uD544 > \uC2DC\uD06C\uB9BF \uD0A4 \uD0ED\uC5D0\uC11C \uD0A4 \uC0C1\uD0DC\uB97C \uD655\uC778\uD558\uC138\uC694"
+        );
+        process.exit(1);
+      }
+      saveSecretKeyToRc(secretKey, cwd);
+      success("\uC0C8 Secret Key\uB97C .connectbaserc\uC5D0 \uC800\uC7A5\uD588\uC2B5\uB2C8\uB2E4");
     }
     if (appsRes.status !== 200) {
       throw new Error(`HTTP ${appsRes.status}`);
@@ -1376,7 +1403,7 @@ ${colors.blue}?${colors.reset} \uC120\uD0DD (\uBC88\uD638): `
       ) || projectName;
       info("\uC571 \uC0DD\uC131 \uC911...");
       const createRes = await makeRequest(
-        `${DEFAULT_BASE_URL}/v1/public/cli/apps`,
+        `${baseUrl}/v1/public/cli/apps`,
         "POST",
         { "X-Public-Key": secretKey },
         JSON.stringify({ name: appName })
@@ -1431,7 +1458,7 @@ ${colors.blue}?${colors.reset} \uC120\uD0DD (\uBC88\uD638): `
     try {
       info("\uC6F9 \uC2A4\uD1A0\uB9AC\uC9C0 \uC870\uD68C \uC911...");
       const listRes = await makeRequest(
-        `${DEFAULT_BASE_URL}/v1/public/storages/webs`,
+        `${baseUrl}/v1/public/storages/webs`,
         "GET",
         {
           "X-Public-Key": publicKeyForSdk,
@@ -1473,7 +1500,7 @@ ${colors.blue}?${colors.reset} \uC120\uD0DD (\uBC88\uD638): `
           ) || projectName;
           info("\uC6F9 \uC2A4\uD1A0\uB9AC\uC9C0 \uC0DD\uC131 \uC911...");
           const createRes = await makeRequest(
-            `${DEFAULT_BASE_URL}/v1/public/storages/webs`,
+            `${baseUrl}/v1/public/storages/webs`,
             "POST",
             {
               "X-Public-Key": publicKeyForSdk,
@@ -1529,12 +1556,17 @@ ${colors.blue}?${colors.reset} \uC120\uD0DD (\uBC88\uD638): `
 `);
   success(".connectbaserc \uC0DD\uC131 \uC644\uB8CC");
   addToGitignore(".connectbaserc");
-  addDeployScript(deployDir);
-  await setupClaudeCode(secretKey, projectRoot);
+  const { needsInstall } = addDeployScript(deployDir);
+  await setupClaudeCode(secretKey, projectRoot, baseUrl);
   log(`
 ${colors.green}\uCD08\uAE30\uD654 \uC644\uB8CC!${colors.reset}
 `);
   log(`${colors.dim}\uBC30\uD3EC\uD558\uB824\uBA74:${colors.reset}`);
+  if (needsInstall) {
+    log(
+      `  ${colors.cyan}npm install${colors.reset}   ${colors.dim}# connectbase-client (CLI \uD3EC\uD568) \uC124\uCE58${colors.reset}`
+    );
+  }
   log(`  ${colors.cyan}npm run deploy${colors.reset}`);
   log(`
 ${colors.dim}Claude Code\uC5D0\uC11C MCP\uAC00 \uC790\uB3D9 \uC5F0\uACB0\uB429\uB2C8\uB2E4${colors.reset}
@@ -1589,31 +1621,46 @@ function addDeployScript(deployDir) {
   const pkgPath = path2.join(process.cwd(), "package.json");
   if (!fs2.existsSync(pkgPath)) {
     warn("package.json\uC744 \uCC3E\uC744 \uC218 \uC5C6\uC5B4 deploy \uC2A4\uD06C\uB9BD\uD2B8\uB97C \uCD94\uAC00\uD558\uC9C0 \uC54A\uC558\uC2B5\uB2C8\uB2E4");
-    return;
+    return { needsInstall: false };
   }
   try {
     const pkg = JSON.parse(fs2.readFileSync(pkgPath, "utf-8"));
     if (!pkg.scripts) pkg.scripts = {};
+    const declared = (name) => Boolean(pkg.dependencies?.[name] || pkg.devDependencies?.[name]);
+    let needsInstall = false;
+    if (!declared("connectbase-client")) {
+      if (!pkg.devDependencies) pkg.devDependencies = {};
+      pkg.devDependencies["connectbase-client"] = VERSION === "0.0.0" ? "latest" : `^${VERSION}`;
+      needsInstall = true;
+    }
     if (pkg.scripts.deploy) {
       info(
         `package.json\uC5D0 \uC774\uBBF8 deploy \uC2A4\uD06C\uB9BD\uD2B8\uAC00 \uC788\uC2B5\uB2C8\uB2E4: "${pkg.scripts.deploy}"`
       );
-      return;
+    } else {
+      const deployCmd = `connectbase deploy ${deployDir}`;
+      pkg.scripts.deploy = pkg.scripts.build ? `npm run build && ${deployCmd}` : deployCmd;
+      success("package.json\uC5D0 deploy \uC2A4\uD06C\uB9BD\uD2B8 \uCD94\uAC00 \uC644\uB8CC");
     }
-    const deployCmd = `connectbase deploy ${deployDir}`;
-    pkg.scripts.deploy = pkg.scripts.build ? `${pkg.scripts.build} && ${deployCmd}` : deployCmd;
     fs2.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}
 `);
-    success(`package.json\uC5D0 deploy \uC2A4\uD06C\uB9BD\uD2B8 \uCD94\uAC00 \uC644\uB8CC`);
+    if (needsInstall) {
+      success(
+        `package.json devDependencies\uC5D0 connectbase-client@${pkg.devDependencies["connectbase-client"]} \uCD94\uAC00 \uC644\uB8CC`
+      );
+    }
+    return { needsInstall };
   } catch {
     warn("package.json \uC218\uC815\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4");
+    return { needsInstall: false };
   }
 }
 function getGitRoot() {
   try {
     const { execSync } = require("child_process");
     return execSync("git rev-parse --show-toplevel", {
-      encoding: "utf-8"
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"]
     }).trim();
   } catch {
     return null;
@@ -1715,6 +1762,7 @@ var LEGACY_DOC_FILES = [
 ];
 async function downloadDocs(baseDir, opts = {}) {
   const quiet = opts.quiet === true;
+  const baseUrl = opts.baseUrl || DEFAULT_BASE_URL;
   if (!baseDir) {
     baseDir = getProjectRoot();
   }
@@ -1736,7 +1784,7 @@ async function downloadDocs(baseDir, opts = {}) {
   if (!quiet) info("SDK \uAC1C\uBC1C \uAC00\uC774\uB4DC \uB2E4\uC6B4\uB85C\uB4DC \uC911...");
   try {
     const res = await makeRequest(
-      `${DEFAULT_BASE_URL}/v1/storages/webs/claude-md?template=rules&format=sections`,
+      `${baseUrl}/v1/storages/webs/claude-md?template=rules&format=sections`,
       "GET",
       {}
     );
@@ -1769,7 +1817,7 @@ async function downloadDocs(baseDir, opts = {}) {
       }
       return "unchanged";
     }
-    const stamp = `<!-- generated by connectbase-cli v${VERSION} (${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}) \u2014 \uC790\uB3D9 \uC0DD\uC131 \uD30C\uC77C\uC785\uB2C8\uB2E4. \uC9C1\uC811 \uC218\uC815\uD558\uC9C0 \uB9D0\uACE0 'npx connectbase update'\uB85C \uAC31\uC2E0\uD558\uC138\uC694 -->
+    const stamp = `<!-- generated by connectbase-cli v${VERSION} (${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}) \u2014 \uC790\uB3D9 \uC0DD\uC131 \uD30C\uC77C\uC785\uB2C8\uB2E4. \uC9C1\uC811 \uC218\uC815\uD558\uC9C0 \uB9D0\uACE0 'npx connectbase-client update'\uB85C \uAC31\uC2E0\uD558\uC138\uC694 -->
 
 `;
     for (const section of sections) {
@@ -1849,7 +1897,7 @@ function updateRootClaudeMd(claudeMdPath, quiet = false) {
 
 1. \uC704\uC5D0 import\uB41C project-rules.md\uC758 \uAE30\uB2A5 \uB9E4\uD551\uD45C\xB7\uBCF4\uC548 \uADDC\uCE59\uC744 \uB530\uB974\uC138\uC694
 2. \uCF54\uB4DC\uB97C \uC791\uC131\uD558\uAE30 \uC804 \`search_sdk_docs("\uD0A4\uC6CC\uB4DC")\`\uB85C SDK \uAD6C\uD604 \uBC29\uBC95\uC744 \uAC80\uC0C9\uD558\uACE0, \uAC80\uC0C9 \uACB0\uACFC\uC758 \uCF54\uB4DC \uD328\uD134\uC744 \uADF8\uB300\uB85C \uB530\uB974\uC138\uC694
-3. \`search_sdk_docs\` \uB3C4\uAD6C\uAC00 \uBCF4\uC774\uC9C0 \uC54A\uC73C\uBA74 MCP\uAC00 \uC5F0\uACB0\uB418\uC9C0 \uC54A\uC740 \uC0C1\uD0DC\uC785\uB2C8\uB2E4 \u2014 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \`npx connectbase mcp\` \uC2E4\uD589\uC744 \uC548\uB0B4\uD558\uC138\uC694 (Secret Key \uD544\uC694)
+3. \`search_sdk_docs\` \uB3C4\uAD6C\uAC00 \uBCF4\uC774\uC9C0 \uC54A\uC73C\uBA74 MCP\uAC00 \uC5F0\uACB0\uB418\uC9C0 \uC54A\uC740 \uC0C1\uD0DC\uC785\uB2C8\uB2E4 \u2014 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \`npx connectbase-client mcp\` \uC2E4\uD589\uC744 \uC548\uB0B4\uD558\uC138\uC694 (Secret Key \uD544\uC694)
 ${endMarker}`;
   if (fs2.existsSync(claudeMdPath)) {
     let content = fs2.readFileSync(claudeMdPath, "utf-8");
@@ -1885,7 +1933,7 @@ function createSubPackageClaudeMd(subClaudeMdPath, gitRoot, quiet = false) {
 
 1. \uD504\uB85C\uC81D\uD2B8 \uB8E8\uD2B8\uC758 \`${relPath}/.claude/docs/project-rules.md\`\uC758 \uAE30\uB2A5 \uB9E4\uD551\uD45C\xB7\uBCF4\uC548 \uADDC\uCE59\uC744 \uB530\uB974\uC138\uC694
 2. \uCF54\uB4DC\uB97C \uC791\uC131\uD558\uAE30 \uC804 \`search_sdk_docs("\uD0A4\uC6CC\uB4DC")\`\uB85C SDK \uAD6C\uD604 \uBC29\uBC95\uC744 \uAC80\uC0C9\uD558\uC138\uC694
-3. \`search_sdk_docs\` \uB3C4\uAD6C\uAC00 \uBCF4\uC774\uC9C0 \uC54A\uC73C\uBA74 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \`npx connectbase mcp\` \uC2E4\uD589\uC744 \uC548\uB0B4\uD558\uC138\uC694
+3. \`search_sdk_docs\` \uB3C4\uAD6C\uAC00 \uBCF4\uC774\uC9C0 \uC54A\uC73C\uBA74 \uC0AC\uC6A9\uC790\uC5D0\uAC8C \`npx connectbase-client mcp\` \uC2E4\uD589\uC744 \uC548\uB0B4\uD558\uC138\uC694
 ${endMarker}`;
   if (fs2.existsSync(subClaudeMdPath)) {
     let content = fs2.readFileSync(subClaudeMdPath, "utf-8");
@@ -1913,7 +1961,7 @@ ${subBlock}
   }
   if (!quiet) success(`\uC11C\uBE0C \uD328\uD0A4\uC9C0 CLAUDE.md \uC0DD\uC131 \uC644\uB8CC: ${subClaudeMdPath}`);
 }
-async function setupMcp(secretKey) {
+async function setupMcp(secretKey, baseUrl = DEFAULT_BASE_URL) {
   const gitRoot = getGitRoot();
   const root = gitRoot || process.cwd();
   const monorepo = detectMonorepo(root);
@@ -1924,51 +1972,31 @@ async function setupMcp(secretKey) {
     }
   }
   const mcpConfigPath = path2.join(root, ".mcp.json");
+  if (secretKey) {
+    const check = await fetchAppsWithSecretKey(baseUrl, secretKey).catch(
+      () => null
+    );
+    if (check?.status === 401) {
+      warn("\uC800\uC7A5\uB41C Secret Key\uAC00 \uB354 \uC774\uC0C1 \uC720\uD6A8\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 (\uB9CC\uB8CC \uB610\uB294 \uCDE8\uC18C)");
+      secretKey = "";
+    }
+  }
   if (!secretKey) {
     if (!process.stdin.isTTY) {
-      error("Secret Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4 (\uBE44\uB300\uD654\uD615 \uD658\uACBD)");
+      error("\uC720\uD6A8\uD55C Secret Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4 (\uBE44\uB300\uD654\uD615 \uD658\uACBD)");
       log(`${colors.dim}\uB2E4\uC74C \uC911 \uD558\uB098\uB85C \uD0A4\uB97C \uC804\uB2EC\uD558\uC138\uC694:${colors.reset}`);
       log(
-        `  ${colors.cyan}npx connectbase mcp --secret-key cb_sk_...${colors.reset}`
+        `  ${colors.cyan}npx connectbase-client mcp --secret-key cb_sk_...${colors.reset}`
       );
       log(
-        `  ${colors.cyan}CONNECTBASE_SECRET_KEY=cb_sk_... npx connectbase mcp${colors.reset}`
+        `  ${colors.cyan}CONNECTBASE_SECRET_KEY=cb_sk_... npx connectbase-client mcp${colors.reset}`
       );
       process.exit(1);
     }
-    log(`
-${colors.dim}\uC778\uC99D \uBC29\uC2DD\uC744 \uC120\uD0DD\uD558\uC138\uC694:${colors.reset}`);
-    log(`  ${colors.cyan}1${colors.reset}) Secret Key \uC9C1\uC811 \uC785\uB825 (cb_sk_...)`);
-    log(`  ${colors.cyan}2${colors.reset}) \uBE0C\uB77C\uC6B0\uC800 \uB85C\uADF8\uC778\uC73C\uB85C \uC790\uB3D9 \uBC1C\uAE09
-`);
-    const authChoice = await prompt(
-      `${colors.blue}?${colors.reset} \uC120\uD0DD (1/2): `
-    );
-    if (authChoice === "2") {
-      try {
-        secretKey = await browserAuthFlow();
-        const skRcPath = path2.join(process.cwd(), ".connectbaserc");
-        let rcData = {};
-        if (fs2.existsSync(skRcPath)) {
-          try {
-            rcData = JSON.parse(fs2.readFileSync(skRcPath, "utf-8"));
-          } catch {
-          }
-        }
-        rcData.secretKey = secretKey;
-        fs2.writeFileSync(skRcPath, `${JSON.stringify(rcData, null, 2)}
-`);
-        addToGitignore(".connectbaserc", root);
-        success("Secret Key \uBC1C\uAE09 \uBC0F \uC800\uC7A5 \uC644\uB8CC");
-      } catch (err) {
-        error(`\uC778\uC99D \uC2E4\uD328: ${err instanceof Error ? err.message : err}`);
-        process.exit(1);
-      }
-    } else {
-      secretKey = await promptSecret(
-        `${colors.blue}?${colors.reset} Secret Key: `
-      );
-    }
+    secretKey = await promptForSecretKey(baseUrl);
+    saveSecretKeyToRc(secretKey);
+    addToGitignore(".connectbaserc", root);
+    success("Secret Key\uB97C .connectbaserc\uC5D0 \uC800\uC7A5\uD588\uC2B5\uB2C8\uB2E4");
   }
   const mcpEntry = {
     type: "http",
@@ -2007,10 +2035,10 @@ ${colors.dim}\uC778\uC99D \uBC29\uC2DD\uC744 \uC120\uD0DD\uD558\uC138\uC694:${co
 ${colors.dim}Claude Code\uC5D0\uC11C ConnectBase MCP \uB3C4\uAD6C\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.${colors.reset}`
   );
 }
-async function setupClaudeCode(secretKey, projectRoot) {
+async function setupClaudeCode(secretKey, projectRoot, baseUrl = DEFAULT_BASE_URL) {
   const root = projectRoot || getProjectRoot();
-  await downloadDocs(root);
-  await setupMcp(secretKey);
+  await downloadDocs(root, { baseUrl });
+  await setupMcp(secretKey, baseUrl);
 }
 async function fetchLatestVersion(packageName) {
   try {
@@ -2118,7 +2146,7 @@ ${colors.cyan}ConnectBase Update${colors.reset}
   if (!opts.skipDocs) {
     log("");
     info("SDK \uBB38\uC11C \uC5C5\uB370\uC774\uD2B8 \uC911...");
-    await downloadDocs(projectRoot);
+    await downloadDocs(projectRoot, { baseUrl: config.baseUrl });
   }
   if (!opts.skipMcp) {
     log("");
@@ -2203,15 +2231,15 @@ function setupMonorepoRoot(projectRoot, monorepo) {
     if (!pkg.scripts) pkg.scripts = {};
     let changed = false;
     if (!pkg.scripts["cb:update"]) {
-      pkg.scripts["cb:update"] = "npx connectbase update";
+      pkg.scripts["cb:update"] = "npx connectbase-client update";
       changed = true;
     }
     if (!pkg.scripts["cb:docs"]) {
-      pkg.scripts["cb:docs"] = "npx connectbase docs";
+      pkg.scripts["cb:docs"] = "npx connectbase-client docs";
       changed = true;
     }
     if (!pkg.scripts["cb:mcp"]) {
-      pkg.scripts["cb:mcp"] = "npx connectbase mcp";
+      pkg.scripts["cb:mcp"] = "npx connectbase-client mcp";
       changed = true;
     }
     if (changed) {
@@ -3403,7 +3431,7 @@ function showHelp() {
 ${colors.cyan}connectbase${colors.reset} - Connect Base SDK & CLI
 
 ${colors.yellow}\uC0AC\uC6A9\uBC95:${colors.reset}
-  npx connectbase <command> [options]
+  npx connectbase-client <command> [options]
 
 ${colors.yellow}\uBA85\uB839\uC5B4:${colors.reset}
   init                  \uD504\uB85C\uC81D\uD2B8 \uCD08\uAE30\uD654 (\uC571 \uC0DD\uC131, MCP \uC124\uC815, SDK \uBB38\uC11C \uB2E4\uC6B4\uB85C\uB4DC)
@@ -3451,36 +3479,36 @@ ${colors.yellow}\uC635\uC158:${colors.reset}
 
 ${colors.yellow}\uBE60\uB978 \uC2DC\uC791:${colors.reset}
   ${colors.dim}# 1. \uCD08\uAE30\uD654 (\uCD5C\uCD08 1\uD68C)${colors.reset}
-  npx connectbase init
+  npx connectbase-client init
 
   ${colors.dim}# 1-1. \uBE44\uB300\uD654\uD615 \uCD08\uAE30\uD654 (CI/AI \uC5D0\uC774\uC804\uD2B8)${colors.reset}
-  npx connectbase init --yes --secret-key cb_sk_...
+  npx connectbase-client init --yes --secret-key cb_sk_...
 
   ${colors.dim}# 2. SDK \uC804\uCCB4 \uC5C5\uB370\uC774\uD2B8 (\uBC84\uC804 \uCCB4\uD06C + \uBB38\uC11C + MCP)${colors.reset}
-  npx connectbase update
+  npx connectbase-client update
 
   ${colors.dim}# 2-1. \uBAA8\uB178\uB808\uD3EC \uB8E8\uD2B8\uC5D0 \uD3B8\uC758 \uC2A4\uD06C\uB9BD\uD2B8 \uC124\uCE58${colors.reset}
-  npx connectbase update --setup-root
+  npx connectbase-client update --setup-root
 
   ${colors.dim}# 3. SDK \uBB38\uC11C\uB9CC \uC5C5\uB370\uC774\uD2B8${colors.reset}
-  npx connectbase docs
+  npx connectbase-client docs
 
   ${colors.dim}# 4. MCP \uC11C\uBC84 \uC124\uC815${colors.reset}
-  npx connectbase mcp
+  npx connectbase-client mcp
 
   ${colors.dim}# 4. Prod \uBC30\uD3EC${colors.reset}
   npm run deploy
 
   ${colors.dim}# 4-1. QA \uC6CC\uD06C\uD50C\uB85C\uC6B0 (\uC2E0\uADDC \uC2A4\uD1A0\uB9AC\uC9C0 \uAE30\uBCF8 promote_mode=manual)${colors.reset}
-  npx connectbase deploy ./dist   ${colors.dim}# QA \uD658\uACBD\uC5D0\uB9CC \uBC30\uD3EC${colors.reset}
-  npx connectbase releases        ${colors.dim}# \uBC30\uD3EC \uC774\uB825 \uD655\uC778${colors.reset}
-  npx connectbase promote         ${colors.dim}# QA \uAC80\uC99D \uD6C4 production \uBC18\uC601${colors.reset}
+  npx connectbase-client deploy ./dist   ${colors.dim}# QA \uD658\uACBD\uC5D0\uB9CC \uBC30\uD3EC${colors.reset}
+  npx connectbase-client releases        ${colors.dim}# \uBC30\uD3EC \uC774\uB825 \uD655\uC778${colors.reset}
+  npx connectbase-client promote         ${colors.dim}# QA \uAC80\uC99D \uD6C4 production \uBC18\uC601${colors.reset}
 
   ${colors.dim}# 5. \uD130\uB110 (\uAE30\uBCF8)${colors.reset}
-  npx connectbase tunnel 3000
+  npx connectbase-client tunnel 3000
 
   ${colors.dim}# 6. \uD130\uB110 (GPU \uC11C\uBC84 \uB4F1 \uAE34 \uC751\uB2F5 \uC2DC)${colors.reset}
-  npx connectbase tunnel 7860 --timeout 300 --max-body 50
+  npx connectbase-client tunnel 7860 --timeout 300 --max-body 50
 
 ${colors.yellow}\uD658\uACBD\uBCC0\uC218:${colors.reset}
   CONNECTBASE_PUBLIC_KEY    Public Key (cb_pk_*)
@@ -3594,20 +3622,20 @@ async function main() {
       setupRoot: parsed.options.setupRoot === "true"
     });
   } else if (parsed.command === "docs") {
-    await downloadDocs();
+    await downloadDocs(void 0, { baseUrl: config.baseUrl });
   } else if (parsed.command === "mcp") {
-    await setupMcp(config.secretKey);
+    await setupMcp(config.secretKey, config.baseUrl);
   } else if (parsed.command === "deploy") {
     const directory = parsed.args[0] || fileConfig.deployDir || ".";
     if (!config.publicKey) {
       error(
-        'Public Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -k \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
+        'Public Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase-client init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -k \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
       );
       process.exit(1);
     }
     if (!config.storageId) {
       error(
-        '\uC2A4\uD1A0\uB9AC\uC9C0 ID\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -s \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
+        '\uC2A4\uD1A0\uB9AC\uC9C0 ID\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase-client init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -s \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
       );
       process.exit(1);
     }
@@ -3628,7 +3656,10 @@ async function main() {
         if (fs2.existsSync(
           path2.join(docsRoot, ".claude", "docs", DOCS_MANIFEST_FILE)
         )) {
-          const refreshed = await downloadDocs(docsRoot, { quiet: true });
+          const refreshed = await downloadDocs(docsRoot, {
+            quiet: true,
+            baseUrl: config.baseUrl
+          });
           if (refreshed === "updated") {
             info("SDK \uBB38\uC11C\uAC00 \uC0C8 \uBC84\uC804\uC73C\uB85C \uAC31\uC2E0\uB418\uC5C8\uC2B5\uB2C8\uB2E4 (.claude/docs/)");
           }
@@ -3639,13 +3670,13 @@ async function main() {
   } else if (parsed.command === "promote" || parsed.command === "releases") {
     if (!config.publicKey) {
       error(
-        'Public Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -k \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
+        'Public Key\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase-client init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -k \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
       );
       process.exit(1);
     }
     if (!config.storageId) {
       error(
-        '\uC2A4\uD1A0\uB9AC\uC9C0 ID\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -s \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
+        '\uC2A4\uD1A0\uB9AC\uC9C0 ID\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. "npx connectbase-client init"\uC73C\uB85C \uC124\uC815\uD558\uAC70\uB098 -s \uC635\uC158\uC744 \uC0AC\uC6A9\uD558\uC138\uC694'
       );
       process.exit(1);
     }
@@ -3657,7 +3688,7 @@ async function main() {
   } else if (parsed.command === "tunnel") {
     const portStr = parsed.args[0];
     if (!portStr) {
-      error("\uD3EC\uD2B8 \uBC88\uD638\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. \uC608: npx connectbase tunnel 8084");
+      error("\uD3EC\uD2B8 \uBC88\uD638\uAC00 \uD544\uC694\uD569\uB2C8\uB2E4. \uC608: npx connectbase-client tunnel 8084");
       process.exit(1);
     }
     const port = parseInt(portStr, 10);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "connectbase-client",
-	"version": "6.2.0",
+	"version": "6.3.0",
 	"description": "Connect Base JavaScript/TypeScript SDK for browser and Node.js",
 	"repository": {
 		"type": "git",