# BaseCLF

BaseCLF is auto-REST plus real row-level security for Cloudflare D1, deployed into your own Cloudflare account with one command. The client library is `baseclf-js`; identity is a bearer JWT and no token means the anon role. There is no anonymous key.

- [Documentation](/docs/index.md)
- [Quickstart](/docs/quickstart.md)
- [Policy DSL](/docs/policies.md)
- [Compatibility](/docs/compatibility.md)

Studio opens on fixture data. Connecting a deployment makes every screen read that deployment for real: Simulator, Policies, Tables, Auth, Storage, and Health. Storage shows the configured rules rather than the objects, and says why: a directory belongs to a caller, and Studio holds a Cloudflare credential rather than an identity. The Auth screen reports configuration only: identity tables are reserved names and no surface reads them. The Health screen reports the checks the deployment can run on itself, and says plainly that usage numbers are recorded against your Cloudflare account rather than drawing a chart with nothing behind it. The commands and API behavior in the documentation match the shipped engine.