diff --git a/CHANGELOG.md b/CHANGELOG.md
index 60fef50..2d283e8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.2.0-next.7
+
+Adds per-user API keys (Base44 convention): the gateway's `/users/me` lazily
+mints and returns a personal `api_key` for the signed-in end user.
+
+- `BoolUser.apiKey?: string` — typed access to the key.
+- `auth.rotateApiKey()` — rotates the key; the old one stops working
+  immediately. Surfaces a 503 if keys aren't configured on the deployment.
+
+External callers send the key as the `api_key` header and act exactly as
+that user — same per-user RLS scoping as in the app. Pairs with a gateway-side
+change that accepts `api_key` and stamps `sub` accordingly.
+
 ## 0.2.0-next.6
 
 Combines the entities data layer (next.0–next.4) with the auth fail-safe fix
diff --git a/package.json b/package.json
index 4440a4f..d015f1d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "bool-sdk",
-  "version": "0.2.0-next.6",
+  "version": "0.2.0-next.7",
   "description": "Client SDK for apps built on Bool — gateway data access, end-user auth, and the React auth layer.",
   "type": "module",
   "main": "./dist/index.js",