@arcadiasystems/morse-cli 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -4,6 +4,32 @@ All notable changes to `@arcadiasystems/morse-cli` are documented here. The
 format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.9.0] - 2026-09-10
+### Fixed (config state, found in a whole-package bug hunt)
+
+- **A one-off `--network` permanently rewrote the profile's stored network.** `updateActiveProfile` resolved the network the same way `resolveSettings` does (flag > env > stored > default) and then wrote the result back, even though the caller was only changing the account, publication or collection. So `morse --network testnet use --clear` against a mainnet profile left `"network": "testnet"` on disk, and every later command silently targeted the wrong chain with nothing said. Every active-state mutation was affected: `account import`, `account use`, `use`, `use --clear`, `publication create`, `publication delete`, `collection create`, `collection delete`. An existing profile now keeps its stored network; only a profile being created takes the resolved one. Flags and env vars are per-invocation overrides again, as `CLAUDE.md`'s precedence rule always said.
+- **`config add` on an existing profile destroyed every field it was not given.** It replaced the profile object instead of merging, so `config add default --network testnet` on a profile that had an `rpc`, `uploadRelay`, `account`, `publication` or `collection` silently dropped all of them. The command has always been documented as "create or **update**". It merges now.
+- **`config remove` deleted a profile with no confirmation.** Every other destructive command confirms and honours `--yes`; this one took no `GlobalOptions` at all, so there was not even a flag to skip. It deletes a profile plus its account, publication and collection links and can silently reassign the default, so it now says which profile and, when relevant, what the default becomes.
+- **Collection selection ignored which publication a collection belonged to.** `collection create` selected the new collection as active even when created under an explicit `-P` pointing at some other publication, pairing the active publication with a collection it does not contain. `collection delete` had the mirror bug, clearing a still-valid active collection whenever a same-named one was deleted from an unrelated publication. Collection names are scoped per publication, so both now check the publication too. The existing test asserted the old behaviour and passed vacuously, with no profile written; it has been given a real one and joined by cases for both mismatch directions.
+- `file register --public --recipient` is now refused, matching `file upload`. A public file is readable by anyone, so a recipient list on one is a contradiction rather than a no-op.
+- `--max-tip` help text says it only applies alongside `--upload-relay`.
+
+
+### Fixed
+
+- **`morse file list` works again, on every network.** It walked `suix_queryEvents` over JSON-RPC, which public Sui fullnodes have retired: they answer every JSON-RPC method with "Method not found". The command has been failing on testnet and mainnet alike unless the user passed `--indexer-url` at a source that still spoke the old protocol.
+
+  gRPC is the documented replacement for most Sui reads, but `@mysten/sui`'s gRPC client exposes no event API at all, so it could not be the answer here. Events now come from a Sui GraphQL endpoint, defaulting to the canonical Mysten one for the network. `--indexer-url` still overrides it and now means "a Sui GraphQL endpoint".
+
+  The querier is hand-rolled over `fetch` against one query with one cursor, rather than pulling in a GraphQL client, keeping the dependency surface as-is. A GraphQL error or a non-2xx response raises a network `CliError` (exit 5) rather than an empty page, because reporting "No files" for a broken endpoint is the worst available answer.
+
+  Verified live: a file uploaded to testnet appears in `file list` with no `--indexer-url`, `--hydrate` and `--json` both work against it, and deleting the file reconciles it back out of the listing.
+
+### Changed
+
+- `--indexer-url` now expects a Sui GraphQL endpoint rather than a `suix_queryEvents` JSON-RPC source. Anyone relying on the old flag against a JSON-RPC indexer needs a GraphQL one instead; the previous behaviour could not have been working against a public fullnode regardless.
+- Listing on localnet requires `--indexer-url`, since there is no canonical GraphQL endpoint for it. Previously it would have used the local RPC URL and failed.
+
 ## [0.8.0] - 2026-09-10
 
 Usability pass. Nothing is renamed or removed; every existing spelling keeps working.

package/README.md

@@ -6,7 +6,7 @@ content entries from your terminal, signing with a locally encrypted key.
 Content is stored on [Walrus](https://walrus.xyz); private entries are encrypted
 with [Seal](https://github.com/MystenLabs/seal).
 
-> Status: v0.8.0. Mainnet and testnet are both supported for public content;
+> Status: v0.9.0. Mainnet and testnet are both supported for public content;
 > the command surface is stable.
 >
 > **Encrypted commands are testnet-only.** `entry add-encrypted`, `entry
@@ -281,13 +281,13 @@ also returns the raw `sealIdPrefix` and `sealNonce` as hex, usable as `--prefix`
 
 `file list` reconstructs the file set from contract events. `RecipientFile`
 objects have no on-chain owner index for the shared case, so listing is
-event-derived, not a direct query. By default the command reads events via
-`suix_queryEvents` on the configured Sui RPC. That endpoint is **deprecated**
-(Mysten is sunsetting it), so listing may degrade or stop working on the public
-RPC over time; point `--indexer-url <url>` at any source that speaks
-`suix_queryEvents` (a self-hosted indexer, a third-party endpoint) to stay in
-control. Results are best-effort and eventually consistent (subject to indexer
-lag and retention). Summary rows omit `blobId`/`blobObjectId`; add `--hydrate`
+event-derived, not a direct query. The command reads events from a Sui GraphQL
+endpoint, defaulting to the canonical Mysten one for the network. It used to use
+`suix_queryEvents` over JSON-RPC, which public fullnodes have since retired;
+`@mysten/sui`'s gRPC client exposes no event API, so GraphQL is the transport
+that remains. Point `--indexer-url <url>` at a different GraphQL endpoint (a
+self-hosted indexer, a third-party endpoint) to stay in control. Results are
+best-effort and eventually consistent (subject to indexer lag and retention). Summary rows omit `blobId`/`blobObjectId`; add `--hydrate`
 to fetch the full record per file (one read each) when you need them.
 
 ## Output and scripting
@@ -348,9 +348,10 @@ to fetch the full record per file (one read each) when you need them.
   an operator, use the SDK directly for now.
 - `localnet` is accepted as a network but has no canonical deployment, so it
   fails at startup unless you point the SDK at your own package and registry.
-- `file list` walks a JSON-RPC event query that public Sui fullnodes have
-  retired, so it needs `--indexer-url` pointing at a source that serves the same
-  query. This affects testnet as well as mainnet.
+- `file list` reads events from a Sui GraphQL endpoint, defaulting to the
+  canonical one for the network. `--indexer-url` points it at a different
+  GraphQL endpoint. There is no canonical endpoint for localnet, so listing
+  there requires the flag.
 
 ## Command spellings
 

package/dist/index.js

@@ -148,7 +148,7 @@ import { Command } from "commander";
 // package.json
 var package_default = {
   name: "@arcadiasystems/morse-cli",
-  version: "0.8.0",
+  version: "0.9.0",
   description: "Command-line interface for the Morse decentralized CMS on Sui.",
   license: "MIT",
   type: "module",
@@ -203,7 +203,7 @@ var package_default = {
     prepublishOnly: "bun run check && bun run build"
   },
   dependencies: {
-    "@arcadiasystems/morse-sdk": "^0.7.0",
+    "@arcadiasystems/morse-sdk": "^0.8.0",
     "@mysten/seal": "1.1.3",
     "@mysten/sui": "2.16.2",
     "@mysten/walrus": "1.1.6",
@@ -220,7 +220,7 @@ var package_default = {
 var DEFAULT_MAX_TIP_MIST = 1e7;
 function buildProgram() {
   const program = new Command;
-  program.name("morse").description("Command-line interface for the Morse decentralized CMS on Sui.").version(package_default.version, "-V, --version", "Print the version and exit").option("--network <network>", "Sui network: mainnet, testnet, or localnet [env: MORSE_NETWORK]").option("-p, --profile <name>", "Config profile to use [env: MORSE_PROFILE]").option("--rpc <url>", "Override the Sui RPC URL [env: MORSE_RPC_URL]").option("--upload-relay <url|auto>", "Upload Walrus blobs through a relay instead of fanning out to every storage node; 'auto' picks the canonical relay for the network. Costs a tip per upload [env: MORSE_WALRUS_UPLOAD_RELAY]").option("--max-tip <mist>", `Cap the per-upload relay tip, in MIST (default: ${DEFAULT_MAX_TIP_MIST}) [env: MORSE_WALRUS_MAX_TIP]`).option("--json", "Output machine-readable JSON on stdout").option("-q, --quiet", "Suppress progress and informational output").option("-y, --yes", "Assume yes for confirmation prompts").option("--debug", "Print stack traces on error").enablePositionalOptions().showHelpAfterError().exitOverride();
+  program.name("morse").description("Command-line interface for the Morse decentralized CMS on Sui.").version(package_default.version, "-V, --version", "Print the version and exit").option("--network <network>", "Sui network: mainnet, testnet, or localnet [env: MORSE_NETWORK]").option("-p, --profile <name>", "Config profile to use [env: MORSE_PROFILE]").option("--rpc <url>", "Override the Sui RPC URL [env: MORSE_RPC_URL]").option("--upload-relay <url|auto>", "Upload Walrus blobs through a relay instead of fanning out to every storage node; 'auto' picks the canonical relay for the network. Costs a tip per upload [env: MORSE_WALRUS_UPLOAD_RELAY]").option("--max-tip <mist>", `Cap the per-upload relay tip, in MIST (default: ${DEFAULT_MAX_TIP_MIST}). Only applies with --upload-relay [env: MORSE_WALRUS_MAX_TIP]`).option("--json", "Output machine-readable JSON on stdout").option("-q, --quiet", "Suppress progress and informational output").option("-y, --yes", "Assume yes for confirmation prompts").option("--debug", "Print stack traces on error").enablePositionalOptions().showHelpAfterError().exitOverride();
   return program;
 }
 
@@ -559,7 +559,7 @@ async function updateActiveProfile(opts, patch, env = process.env) {
   const config = await loadConfig();
   const profileName = opts.profile ?? env.MORSE_PROFILE ?? config.defaultProfile;
   const existing = config.profiles[profileName];
-  const network = coerceNetwork(opts.network ?? env.MORSE_NETWORK ?? existing?.network ?? "testnet");
+  const network = existing?.network ?? coerceNetwork(opts.network ?? env.MORSE_NETWORK ?? "testnet");
   const merged = { ...existing, network, ...patch };
   const profiles = { ...config.profiles, [profileName]: merged };
   const defaultProfile = Object.keys(config.profiles).length === 0 ? profileName : config.defaultProfile;
@@ -988,7 +988,70 @@ import {
   RpcRecipientFilesReader
 } from "@arcadiasystems/morse-sdk";
 import { SuiGrpcClient } from "@mysten/sui/grpc";
-import { SuiJsonRpcClient } from "@mysten/sui/jsonRpc";
+
+// src/cli/graphql-events.ts
+function canonicalGraphqlUrl(network) {
+  if (network === "mainnet" || network === "testnet") {
+    return `https://graphql.${network}.sui.io/graphql`;
+  }
+  return;
+}
+var QUERY = `query Events($type: String!, $first: Int!, $after: String) {
+  events(filter: { type: $type }, first: $first, after: $after) {
+    pageInfo { hasNextPage endCursor }
+    nodes { timestamp contents { json type { repr } } }
+  }
+}`;
+
+class GraphqlEventQuerier {
+  #url;
+  #fetch;
+  constructor(url, fetchImpl = fetch) {
+    this.#url = url;
+    this.#fetch = fetchImpl;
+  }
+  async queryEvents(params) {
+    const body = JSON.stringify({
+      query: QUERY,
+      variables: {
+        type: params.query.MoveEventType,
+        first: params.limit ?? 50,
+        after: typeof params.cursor === "string" ? params.cursor : null
+      }
+    });
+    let response;
+    try {
+      response = await this.#fetch(this.#url, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body,
+        ...params.signal === undefined ? {} : { signal: params.signal }
+      });
+    } catch (cause) {
+      throw new CliError(`Could not reach the event source at ${this.#url}.`, ExitCode.Network, { cause });
+    }
+    if (!response.ok) {
+      throw new CliError(`Event source at ${this.#url} returned HTTP ${response.status}.`, ExitCode.Network);
+    }
+    const payload = await response.json();
+    if (payload.errors && payload.errors.length > 0) {
+      throw new CliError(`Event source rejected the query: ${payload.errors[0]?.message ?? "unknown error"}`, ExitCode.Network);
+    }
+    const events = payload.data?.events;
+    const nodes = events?.nodes ?? [];
+    return {
+      data: nodes.map((node) => ({
+        type: node.contents?.type?.repr ?? "",
+        parsedJson: node.contents?.json ?? {},
+        timestampMs: node.timestamp == null ? null : String(Date.parse(node.timestamp) || 0)
+      })),
+      hasNextPage: Boolean(events?.pageInfo?.hasNextPage),
+      nextCursor: events?.pageInfo?.endCursor ?? null
+    };
+  }
+}
+
+// src/cli/context.ts
 async function buildReadContext(command) {
   const opts = globalOptions(command);
   const output = outputFor(command);
@@ -1138,16 +1201,16 @@ async function buildFileListContext(command, opts = {}) {
   if (originPackageId === undefined) {
     throw new CliError("File listing is unavailable on this network: no recipientFileEventOriginPackageId in the config. Use testnet, or supply a config that sets it.", ExitCode.Usage);
   }
-  const events = new SuiJsonRpcClient({
-    network: base.settings.network,
-    url: opts.indexerUrl ?? base.config.rpcUrl
-  });
+  const indexerUrl = opts.indexerUrl ?? canonicalGraphqlUrl(base.settings.network);
+  if (indexerUrl === undefined) {
+    throw new CliError(`File listing has no canonical event source for ${base.settings.network}. Pass --indexer-url pointing at a Sui GraphQL endpoint.`, ExitCode.Usage);
+  }
   return {
     ...base,
     filesReader: RpcRecipientFilesReader.fromConfig(base.client, {
       packageId: base.config.packageId
     }),
-    events,
+    events: new GraphqlEventQuerier(indexerUrl),
     eventTypes: buildRecipientFileEventTypes(originPackageId)
   };
 }
@@ -1528,6 +1591,9 @@ async function runCollectionList(ctx, options) {
     collections: publication.collections
   });
 }
+function isActivePublication(ctx, target) {
+  return ctx.settings.publication === target;
+}
 async function runCollectionCreate(ctx, name, options, gopts) {
   const id = await resolvePublication(ctx, options.publication);
   const storageMode = coerceStorageMode(options.mode);
@@ -1543,8 +1609,11 @@ async function runCollectionCreate(ctx, name, options, gopts) {
     storageMode,
     signal: ctx.signal
   });
-  await updateActiveProfile(gopts, { collection: name });
-  ctx.output.result(`Created collection "${name}". Selected as the active collection. (tx: ${result.digest})`, result);
+  const selected = isActivePublication(ctx, id);
+  if (selected) {
+    await updateActiveProfile(gopts, { collection: name });
+  }
+  ctx.output.result(`Created collection "${name}".${selected ? " Selected as the active collection." : ""} (tx: ${result.digest})`, result);
 }
 async function runCollectionDelete(ctx, name, options, gopts) {
   const id = await resolvePublication(ctx, options.publication);
@@ -1566,7 +1635,7 @@ async function runCollectionDelete(ctx, name, options, gopts) {
     name,
     signal: ctx.signal
   });
-  if (ctx.settings.collection === name) {
+  if (ctx.settings.collection === name && isActivePublication(ctx, id)) {
     await updateActiveProfile(gopts, { collection: undefined });
   }
   ctx.output.result(`Deleted collection "${name}". (tx: ${result.digest})`, result);
@@ -1606,6 +1675,7 @@ async function runConfigAdd(output, name, options) {
   const profiles = {
     ...cfg.profiles,
     [name]: {
+      ...cfg.profiles[name],
       network,
       ...options.rpc === undefined ? {} : { rpc: options.rpc },
       ...options.uploadRelay === undefined ? {} : { uploadRelay: options.uploadRelay }
@@ -1627,11 +1697,19 @@ async function runConfigUse(output, name) {
   await saveConfig({ ...cfg, defaultProfile: name });
   output.result(`Default profile set to "${name}".`, { defaultProfile: name });
 }
-async function runConfigRemove(output, name) {
+async function runConfigRemove(output, name, gopts = {}, signal) {
   const cfg = await loadConfig();
   requireProfile(cfg, name);
   const { [name]: _removed, ...rest } = cfg.profiles;
   const defaultProfile = cfg.defaultProfile === name ? Object.keys(rest)[0] ?? "default" : cfg.defaultProfile;
+  const reassigns = cfg.defaultProfile === name && defaultProfile !== name;
+  const proceed = await confirm(`Delete profile "${name}"?${reassigns ? ` The default becomes "${defaultProfile}".` : ""}`, {
+    assumeYes: Boolean(gopts.yes),
+    ...signal === undefined ? {} : { signal }
+  });
+  if (!proceed) {
+    cancelled();
+  }
   await saveConfig({ ...cfg, profiles: rest, defaultProfile });
   output.result(`Removed profile "${name}".`, {
     removed: name,
@@ -1654,7 +1732,7 @@ function registerConfigCommands(program) {
     await runConfigUse(outputFor(command), name);
   });
   config.command("remove <name>").alias("delete").description("Delete a profile").action(async (name, _options, command) => {
-    await runConfigRemove(outputFor(command), name);
+    await runConfigRemove(outputFor(command), name, globalOptions(command), sigintSignal());
   });
 }
 function requireProfile(config, name) {
@@ -2129,6 +2207,9 @@ async function runFileRegister(ctx, options) {
     throw new UsageError("Pass --public or --encrypted, not both.");
   }
   const recipients = (options.recipient ?? []).map((r) => toSuiAddress4(r));
+  if (options.public && recipients.length > 0) {
+    throw new UsageError("--recipient applies to encrypted files; a public file is readable by anyone.");
+  }
   const blobId = toWalrusBlobId(options.blobId);
   const size = parseByteSize(options.size, "--size");
   const blobObjectId = options.blobObjectId === undefined ? undefined : toBlobObjectId(options.blobObjectId);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@arcadiasystems/morse-cli",
-	"version": "0.8.0",
+	"version": "0.9.0",
 	"description": "Command-line interface for the Morse decentralized CMS on Sui.",
 	"license": "MIT",
 	"type": "module",
@@ -55,7 +55,7 @@
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"dependencies": {
-		"@arcadiasystems/morse-sdk": "^0.7.0",
+		"@arcadiasystems/morse-sdk": "^0.8.0",
 		"@mysten/seal": "1.1.3",
 		"@mysten/sui": "2.16.2",
 		"@mysten/walrus": "1.1.6",