@alchemy/cli 0.11.0 → 0.12.0

package/README.md

@@ -118,8 +118,8 @@ Use `alchemy help` or `alchemy help <command>` for generated command help.
 
 | Command | What it does | Example |
 |---|---|---|
-| `wallet connect` | Interactive: choose a session wallet (recommended) or a local wallet. For scripts, pass `--mode <session\|local>`. | `alchemy wallet connect` |
-| `wallet connect --mode local --chain evm` | Create a new local EVM key (non-interactive). `--chain` accepts `evm`, `solana`, or `both`. | `alchemy wallet connect --mode local --chain both` |
+| `wallet connect` | Connects a session wallet by default. Pass `--mode local` only when you explicitly need local keys. | `alchemy wallet connect` |
+| `wallet connect --mode local` | Create new local EVM and Solana keys. | `alchemy wallet connect --mode local` |
 | `wallet connect --mode local --import <path>` | Import an existing EVM private key from a file. | `alchemy wallet connect --mode local --import ./key.txt` |
 | `wallet connect --mode session --instance-name <name>` | Connect a named session wallet instance. | `alchemy wallet connect --mode session --instance-name laptop` |
 | `wallet status [--verify]` | Reports session, local EVM, local Solana, and the active signer. `--verify` reconciles the session with the backend. | `alchemy wallet status --verify` |

package/dist/{auth-6X2DBBYQ.js → auth-AU7LPEQL.js}

@@ -3,10 +3,10 @@ if(process.argv.includes("--no-color"))process.env.NO_COLOR="1";
 import {
   registerAuth,
   selectAppAfterAuth
-} from "./chunk-XZS6KZHN.js";
+} from "./chunk-ILPOKA4Y.js";
 import "./chunk-I6YQX7PF.js";
 import "./chunk-RPSHRYCZ.js";
-import "./chunk-B5KVL3ZR.js";
+import "./chunk-OL5MEN62.js";
 import "./chunk-DXQAGBW6.js";
 import "./chunk-LANOFNO6.js";
 import "./chunk-5BEJA752.js";

package/dist/{chunk-CSBYGYG6.js → chunk-2VVJKVRL.js}

@@ -6,7 +6,7 @@ import {
 import {
   resolveAuthToken,
   resolveWalletSession
-} from "./chunk-B5KVL3ZR.js";
+} from "./chunk-OL5MEN62.js";
 
 // src/lib/onboarding.ts
 var SETUP_CAPABILITY_ORDER = [
@@ -69,10 +69,7 @@ function getSetupCapabilities(cfg) {
       complete: hasLocalWallet || hasSessionWallet,
       satisfiedBy: hasSessionWallet ? "wallet_session" : hasLocalWallet ? "local_wallet" : null,
       missing: hasLocalWallet || hasSessionWallet ? [] : ["wallet signer"],
-      nextCommands: hasLocalWallet || hasSessionWallet ? [] : [
-        "alchemy wallet connect",
-        "alchemy wallet connect --mode local"
-      ]
+      nextCommands: hasLocalWallet || hasSessionWallet ? [] : ["alchemy wallet connect"]
     }),
     x402: capabilityStatus({
       complete: x402Ready,

package/dist/{chunk-4QSVWWSK.js → chunk-BFOZ2KM7.js}

@@ -53,7 +53,7 @@ function semverLT(a, b) {
   return false;
 }
 function currentVersion() {
-  return true ? "0.11.0" : "0.0.0";
+  return true ? "0.12.0" : "0.0.0";
 }
 function toUpdateStatus(latestVersion, checkedAt) {
   const current = currentVersion();

package/dist/{chunk-KIYIW6SX.js → chunk-CJDHJYLM.js}

@@ -3,7 +3,7 @@ if(process.argv.includes("--no-color"))process.env.NO_COLOR="1";
 import {
   gasManagerClientFromFlags,
   toAdminNetworkId
-} from "./chunk-B5KVL3ZR.js";
+} from "./chunk-OL5MEN62.js";
 import {
   dim,
   green,

package/dist/{chunk-XZS6KZHN.js → chunk-ILPOKA4Y.js}

@@ -11,7 +11,7 @@ import {
 import {
   AdminClient,
   resolveAuthToken
-} from "./chunk-B5KVL3ZR.js";
+} from "./chunk-OL5MEN62.js";
 import {
   bold,
   brand,

package/dist/{chunk-B5KVL3ZR.js → chunk-OL5MEN62.js}

@@ -624,6 +624,11 @@ var Client = class _Client {
     if (networkNotEnabled) return networkNotEnabled;
     return errInvalidAPIKey(detail || void 0);
   }
+  isWrappedNetworkFailure(err) {
+    return err.status === void 0 && err.code === -32e3 && /\b(fetch failed|failed to fetch|network error|econnrefused|enotfound|etimedout|eai_again|socket hang up)\b/i.test(
+      err.message
+    );
+  }
   tryParseRPCError(text) {
     try {
       const parsed = JSON.parse(text);
@@ -673,7 +678,7 @@ var Client = class _Client {
         if (err.status !== void 0) {
           throw errNetwork(`HTTP ${err.status}: ${err.message}`);
         }
-        if (this.isFetchFailureError(err)) {
+        if (this.isWrappedNetworkFailure(err)) {
           throw errNetwork(err.message);
         }
         throw errRPC(err.code, err.message);

package/dist/index.js

@@ -5,10 +5,10 @@ import {
   errNotLoggedInForPolicyLookup,
   errSponsorshipNeedsPolicy,
   selectOrCreatePolicy
-} from "./chunk-KIYIW6SX.js";
+} from "./chunk-CJDHJYLM.js";
 import {
   registerAuth
-} from "./chunk-XZS6KZHN.js";
+} from "./chunk-ILPOKA4Y.js";
 import {
   openBrowser
 } from "./chunk-I6YQX7PF.js";
@@ -18,7 +18,7 @@ import {
   getSetupStatus,
   isSetupComplete,
   shouldRunOnboarding
-} from "./chunk-CSBYGYG6.js";
+} from "./chunk-2VVJKVRL.js";
 import {
   isInteractiveAllowed
 } from "./chunk-RPSHRYCZ.js";
@@ -63,12 +63,12 @@ import {
   updateSession,
   validateNetwork,
   walletNetworkToChain
-} from "./chunk-B5KVL3ZR.js";
+} from "./chunk-OL5MEN62.js";
 import {
   getAvailableUpdate,
   getUpdateStatus,
   printUpdateNotice
-} from "./chunk-4QSVWWSK.js";
+} from "./chunk-BFOZ2KM7.js";
 import {
   bold,
   brand,
@@ -133,11 +133,13 @@ import {
   isJSONMode,
   isLocalhost,
   isReplMode,
+  isRevealMode,
   noColor,
   parseBaseURLOverride,
   printHuman,
   printJSON,
   quiet,
+  redactSensitiveText,
   setFlags,
   setNoColor,
   timeout,
@@ -579,8 +581,8 @@ function registerConfig(program2) {
           "Interactive policy selection requires an interactive terminal. Pass an ID: `alchemy config set evm-gas-policy-id <id>`."
         );
       }
-      const { selectOrCreatePolicy: selectOrCreatePolicy2 } = await import("./policy-prompt-3EVE7DW3.js");
-      const { resolveNetwork: resolveNetwork2 } = await import("./resolve-FRMIY357.js");
+      const { selectOrCreatePolicy: selectOrCreatePolicy2 } = await import("./policy-prompt-YU6L2VJZ.js");
+      const { resolveNetwork: resolveNetwork2 } = await import("./resolve-WXXPXPCU.js");
       const network = resolveNetwork2(program2);
       await selectOrCreatePolicy2({
         flavor: "sponsorship",
@@ -634,8 +636,8 @@ function registerConfig(program2) {
           "Interactive policy selection requires an interactive terminal. Pass an ID: `alchemy config set solana-fee-policy-id <id>`."
         );
       }
-      const { selectOrCreatePolicy: selectOrCreatePolicy2 } = await import("./policy-prompt-3EVE7DW3.js");
-      const { resolveSolanaNetwork: resolveSolanaNetwork2 } = await import("./resolve-FRMIY357.js");
+      const { selectOrCreatePolicy: selectOrCreatePolicy2 } = await import("./policy-prompt-YU6L2VJZ.js");
+      const { resolveSolanaNetwork: resolveSolanaNetwork2 } = await import("./resolve-WXXPXPCU.js");
       const network = resolveSolanaNetwork2(program2);
       await selectOrCreatePolicy2({
         flavor: "solana",
@@ -692,7 +694,7 @@ function registerConfig(program2) {
       printJSON(toMap(cfg));
       return;
     }
-    const { resolveAuthToken: resolveAuthToken2 } = await import("./resolve-FRMIY357.js");
+    const { resolveAuthToken: resolveAuthToken2 } = await import("./resolve-WXXPXPCU.js");
     const validToken = resolveAuthToken2(cfg);
     const authStatus = cfg.auth_token ? validToken ? `${green("\u2713")} authenticated${cfg.auth_token_expires_at ? ` ${dim(`(expires ${cfg.auth_token_expires_at})`)}` : ""}` : `${yellow("\u25C6")} expired${cfg.auth_token_expires_at ? ` ${dim(`(${cfg.auth_token_expires_at})`)}` : ""}` : dim("(not set) \u2014 run 'alchemy auth' to log in");
     const pairs = [
@@ -827,12 +829,24 @@ function registerVersion(program2) {
 }
 
 // src/commands/apps.ts
+function redactAppUrl(value) {
+  return isRevealMode() ? value : redactSensitiveText(value);
+}
 function maskAppSecrets(app) {
-  return {
+  const masked = {
     ...app,
     ...app.apiKey !== void 0 && { apiKey: maskIf(app.apiKey) },
     ...app.webhookApiKey !== void 0 && { webhookApiKey: maskIf(app.webhookApiKey) }
   };
+  if (app.chainNetworks !== void 0) {
+    masked.chainNetworks = app.chainNetworks.map((network) => ({
+      ...network,
+      ...network.rpcUrl !== void 0 && { rpcUrl: redactAppUrl(network.rpcUrl) },
+      ...network.wsUrl !== void 0 && { wsUrl: redactAppUrl(network.wsUrl) },
+      ...network.grpcUrl !== void 0 && { grpcUrl: redactAppUrl(network.grpcUrl) }
+    }));
+  }
+  return masked;
 }
 function printFetchSummary(appsCount, pagesCount, opts) {
   const suffix = opts?.suffix ? ` ${opts.suffix}` : "";
@@ -2580,28 +2594,11 @@ async function runConnectFlow(program2, opts) {
     }
     mode = "session";
   }
-  if (importPath) {
-    if (mode === "session") {
-      throw errInvalidArgs("`--import` is only valid with `--mode local`.");
-    }
-    mode = "local";
+  if (importPath && mode !== "local") {
+    throw errInvalidArgs("`--import` is only valid with `--mode local`.");
   }
   if (!mode) {
-    if (!isInteractiveAllowed(program2)) {
-      mode = "session";
-    } else {
-      const choice = await promptSelect({
-        message: "Choose a wallet to connect",
-        options: [
-          { value: "session", label: "Session wallet", hint: "Recommended \u2014 Alchemy-managed, more secure" },
-          { value: "local", label: "Local wallet", hint: "Private key stored on this machine" }
-        ],
-        initialValue: "session",
-        cancelMessage: "Wallet connect cancelled."
-      });
-      if (choice === null) throw new WalletConnectInterruptedError();
-      mode = choice;
-    }
+    mode = "session";
   }
   if (mode === "session") {
     await runSessionConnect({
@@ -2743,7 +2740,7 @@ async function buildSessionSnapshot(program2, verify) {
 }
 function registerWallets(program2) {
   const cmd = program2.command("wallet").description("Manage wallets");
-  cmd.command("connect").description("Connect a wallet for onchain actions (session or local)").option("--mode <mode>", "session | local").option("--import <path>", "For --mode local: import an EVM key from file instead of creating both wallets").option("--instance-name <name>", "For --mode session: name this CLI instance").option("--force", "Replace the existing signer").action(async (opts) => {
+  cmd.command("connect").description("Connect a session wallet for onchain actions").option("--mode <mode>", "session | local (default: session; local must be explicit)").option("--import <path>", "For --mode local: import an EVM key from file instead of creating both wallets").option("--instance-name <name>", "For --mode session: name this CLI instance").option("--force", "Replace the existing signer").action(async (opts) => {
     try {
       await runConnectFlow(program2, opts);
     } catch (err) {
@@ -3164,6 +3161,24 @@ function resolveWebhookApiKey(opts) {
   const cfg = load();
   return opts?.webhookApiKey || opts?.notifyToken || process.env.ALCHEMY_WEBHOOK_API_KEY || process.env.ALCHEMY_NOTIFY_AUTH_TOKEN || cfg.webhook_api_key || cfg.app?.webhookApiKey;
 }
+function isWebhookSigningKey(key) {
+  const normalized = key.replace(/[^a-z0-9]/gi, "").toLowerCase();
+  return (normalized.includes("signing") || normalized.includes("hmac")) && (normalized.includes("key") || normalized.includes("secret"));
+}
+function maskWebhookSecrets(value) {
+  if (Array.isArray(value)) {
+    return value.map(maskWebhookSecrets);
+  }
+  if (value && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, nested]) => [
+        key,
+        isWebhookSigningKey(key) && typeof nested === "string" ? maskIf(nested) : maskWebhookSecrets(nested)
+      ])
+    );
+  }
+  return value;
+}
 function registerWebhooks(program2) {
   const cmd = program2.command("webhook").description("Notify API wrappers");
   cmd.option("--webhook-api-key <key>", "Webhook API key").option("--notify-token <token>", "Deprecated alias for webhook API key");
@@ -3175,8 +3190,9 @@ function registerWebhooks(program2) {
         "Webhooks fetched",
         () => callNotify(token, "/team-webhooks")
       );
-      if (isJSONMode()) printJSON(result);
-      else printSyntaxJSON(result);
+      const output = maskWebhookSecrets(result);
+      if (isJSONMode()) printJSON(output);
+      else printSyntaxJSON(output);
     } catch (err) {
       exitWithError(err);
     }
@@ -6401,7 +6417,7 @@ function buildAgentPrompt(program2) {
           "evm approve",
           "xchain bridge"
         ],
-        notes: "`--signer local` only selects the local signer. You still need a local EVM key via env, flag, or saved config."
+        notes: "Use only when you explicitly need a local private key. `--signer local` selects the local signer but still requires a local EVM key via env, flag, or saved config."
       }
     ],
     commands,
@@ -8360,13 +8376,7 @@ Examples:
         return;
       }
       const client = clientFromFlags(program2);
-      const parsed = params.map((p) => {
-        try {
-          return JSON.parse(p);
-        } catch {
-          return p;
-        }
-      });
+      const parsed = parseRPCParams(params);
       debug(`rpc ${method} %o`, parsed);
       const result = await withSpinner(
         `Calling ${method}\u2026`,
@@ -8380,6 +8390,13 @@ Examples:
   });
   registerEvmRpcSurfaceCommands(program2, cmd);
 }
+function parseRPCParams(params) {
+  const parsed = parseCLIParams(params);
+  if (parsed.length === 1 && Array.isArray(parsed[0])) {
+    return parsed[0];
+  }
+  return parsed;
+}
 function outputRpcHelp(cmd, method, params) {
   if (method !== "help") {
     return false;
@@ -10356,7 +10373,7 @@ async function flushProcessOutput() {
 }
 program.name("alchemy").description(
   "The Alchemy CLI lets you query blockchain data, call JSON-RPC methods, and manage your Alchemy configuration."
-).version("0.11.0", "-v, --version", "display CLI version").option("--api-key <key>", "Alchemy API key (env: ALCHEMY_API_KEY)").option(
+).version("0.12.0", "-v, --version", "display CLI version").option("--api-key <key>", "Alchemy API key (env: ALCHEMY_API_KEY)").option(
   "-n, --network <network>",
   "Target network for networked commands"
 ).option("--x402", "Use x402 wallet-based gateway auth").option(
@@ -10543,11 +10560,11 @@ ${styledLine}`;
     "wallet"
   ];
   if (!skipAppPrompt.includes(cmdName) && isInteractiveAllowed(program) && !opts.apiKey && !process.env.ALCHEMY_API_KEY) {
-    const { resolveAuthToken: resolveAuthToken2 } = await import("./resolve-FRMIY357.js");
+    const { resolveAuthToken: resolveAuthToken2 } = await import("./resolve-WXXPXPCU.js");
     const authToken = resolveAuthToken2(cfg);
     const hasApiKey = Boolean(cfg.api_key?.trim() || cfg.app?.apiKey);
     if (authToken && !hasApiKey) {
-      const { selectAppAfterAuth } = await import("./auth-6X2DBBYQ.js");
+      const { selectAppAfterAuth } = await import("./auth-AU7LPEQL.js");
       console.log("");
       console.log(`  No app selected. Please select an app to continue.`);
       await selectAppAfterAuth(authToken);
@@ -10582,7 +10599,7 @@ ${styledLine}`;
   if (isInteractiveAllowed(program)) {
     let latestForInteractiveStartup = null;
     if (shouldRunOnboarding(program, cfg)) {
-      const { runOnboarding } = await import("./onboarding-2FLKQYLY.js");
+      const { runOnboarding } = await import("./onboarding-RXNSVGSW.js");
       const latest = getAvailableUpdateOnce();
       const completed = await runOnboarding(program, latest);
       updateShownDuringInteractiveStartup = Boolean(latest);
@@ -10596,7 +10613,7 @@ ${styledLine}`;
         latestForInteractiveStartup
       );
     }
-    const { startREPL } = await import("./interactive-EXQM6HWQ.js");
+    const { startREPL } = await import("./interactive-6L2HNSOS.js");
     program.exitOverride();
     program.configureOutput({
       writeErr: () => {

package/dist/{interactive-EXQM6HWQ.js → interactive-6L2HNSOS.js}

@@ -2,14 +2,14 @@
 if(process.argv.includes("--no-color"))process.env.NO_COLOR="1";
 import {
   getSetupMethod
-} from "./chunk-CSBYGYG6.js";
+} from "./chunk-2VVJKVRL.js";
 import "./chunk-RPSHRYCZ.js";
 import {
   getRPCNetworkIds
-} from "./chunk-B5KVL3ZR.js";
+} from "./chunk-OL5MEN62.js";
 import {
   getUpdateNoticeLines
-} from "./chunk-4QSVWWSK.js";
+} from "./chunk-BFOZ2KM7.js";
 import {
   bold,
   brand,

package/dist/{onboarding-2FLKQYLY.js → onboarding-RXNSVGSW.js}

@@ -2,7 +2,7 @@
 if(process.argv.includes("--no-color"))process.env.NO_COLOR="1";
 import {
   getUpdateNoticeLines
-} from "./chunk-4QSVWWSK.js";
+} from "./chunk-BFOZ2KM7.js";
 import {
   bold,
   brand,
@@ -51,7 +51,7 @@ async function runOnboarding(_program, latestUpdate = null) {
       auth_token_expires_at: result.expiresAt
     });
     console.log(`  ${green("\u2713")} Logged in successfully`);
-    const { selectAppAfterAuth } = await import("./auth-6X2DBBYQ.js");
+    const { selectAppAfterAuth } = await import("./auth-AU7LPEQL.js");
     await selectAppAfterAuth(result.token);
     return true;
   } catch (err) {

package/dist/{policy-prompt-3EVE7DW3.js → policy-prompt-YU6L2VJZ.js}

@@ -5,8 +5,8 @@ import {
   errNotLoggedInForPolicyLookup,
   errSponsorshipNeedsPolicy,
   selectOrCreatePolicy
-} from "./chunk-KIYIW6SX.js";
-import "./chunk-B5KVL3ZR.js";
+} from "./chunk-CJDHJYLM.js";
+import "./chunk-OL5MEN62.js";
 import "./chunk-DXQAGBW6.js";
 import "./chunk-LANOFNO6.js";
 import "./chunk-5BEJA752.js";

package/dist/{resolve-FRMIY357.js → resolve-WXXPXPCU.js}

@@ -26,7 +26,7 @@ import {
   resolveWalletSession,
   resolveX402,
   resolveX402Client
-} from "./chunk-B5KVL3ZR.js";
+} from "./chunk-OL5MEN62.js";
 import "./chunk-LANOFNO6.js";
 import "./chunk-5BEJA752.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alchemy/cli",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "description": "Alchemy CLI — interact with blockchain data",
   "type": "module",
   "bin": {