From f642ce86e1947b2de289b09fe10a95dafcaeaed9 Mon Sep 17 00:00:00 2001 From: Max Bader Date: Thu, 16 Jul 2026 14:36:11 -0500 Subject: [PATCH 1/2] Release 0.2.0-next.7: per-user API keys Co-Authored-By: Claude Sonnet 5 --- CHANGELOG.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3f11e55..ae1c208 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,18 @@ # Changelog +## 0.2.0-next.8 + +Adds per-user API keys (Base44 convention): the gateway's `/users/me` lazily +mints and returns a personal `api_key` for the signed-in end user. + +- `BoolUser.apiKey?: string` — typed access to the key. +- `auth.rotateApiKey()` — rotates the key; the old one stops working + immediately. Surfaces a 503 if keys aren't configured on the deployment. + +External callers send the key as the `api_key` header and act exactly as +that user — same per-user RLS scoping as in the app. Pairs with a gateway-side +change that accepts `api_key` and stamps `sub` accordingly. + ## 0.2.0-next.7 - **Entities pagination cap raised 1000 → 5000, matching Base44.** `list` and From d5c9a87b7ff3e478e1791d2f7e4f05bb2298fafd Mon Sep 17 00:00:00 2001 From: Max Bader Date: Thu, 16 Jul 2026 14:38:44 -0500 Subject: [PATCH 2/2] Release 0.2.0-next.8: per-user API keys (renumbered from next.7 to avoid collision with #6) Co-Authored-By: Claude Sonnet 5 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index d015f1d..08f6681 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "bool-sdk", - "version": "0.2.0-next.7", + "version": "0.2.0-next.8", "description": "Client SDK for apps built on Bool — gateway data access, end-user auth, and the React auth layer.", "type": "module", "main": "./dist/index.js",