@dcl/sdk-commands 7.31.1-40962203448.commit-c68a75f → 7.31.1-41498712919.commit-5e4cada

package/dist/commands/scene-insights/sign-in.js

@@ -0,0 +1,125 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSession = getSession;
+exports.isLinkerOrigin = isLinkerOrigin;
+exports.setSignInRoutes = setSignInRoutes;
+const fp_future_1 = __importDefault(require("fp-future"));
+const signature_validation_1 = require("./signature-validation");
+const error_1 = require("../../logic/error");
+const routes_1 = require("../../linker-dapp/routes");
+const run_dapp_1 = require("../../run-dapp");
+const session_1 = require("./session");
+const session_store_1 = require("./session-store");
+/**
+ * Gets a session to sign requests with, in order:
+ * 1. `DCL_PRIVATE_KEY`, signed locally and never saved;
+ * 2. the saved session, while it is valid (unless `forceNew`);
+ * 3. a new browser signature through the linker dApp, which is then saved.
+ *
+ * @throws CliError `SCENE_INSIGHTS_SESSION_REQUIRED` when it would have to open the browser but
+ *   nobody is there to sign (an agent or script): `scene-insights login` has to be run first.
+ * @throws CliError `SCENE_INSIGHTS_UNSAFE_SESSION_FILE` when git tracks the session file, before
+ *   asking for a signature.
+ */
+async function getSession(components, label, options) {
+    if (process.env.DCL_PRIVATE_KEY) {
+        return { session: (0, session_1.createSessionFromPrivateKey)(process.env.DCL_PRIVATE_KEY), source: 'private-key' };
+    }
+    const provider = (0, signature_validation_1.createInsightsProvider)(options.targetUrl);
+    if (!options.forceNew) {
+        const saved = await (0, session_store_1.loadSession)(components, options.file, Date.now(), provider);
+        if (saved)
+            return { session: saved.session, source: 'saved' };
+        if (!options.interactive) {
+            throw new error_1.CliError('SCENE_INSIGHTS_SESSION_REQUIRED', 'No signed-in session. Ask the user to run "sdk-commands scene-insights login" (it opens the browser to sign once, for 12 hours), or set DCL_PRIVATE_KEY');
+        }
+    }
+    // before the browser opens: nobody should sign a session that can't be saved
+    await (0, session_store_1.assertSessionFileIsNotTracked)(options.file);
+    const ephemeralIdentity = (0, session_1.createEphemeralIdentity)();
+    const expiration = new Date(Date.now() + session_1.SESSION_MINUTES * 60 * 1000);
+    const message = (0, session_1.getInsightsSessionMessage)(ephemeralIdentity.address, expiration);
+    const signed = (0, fp_future_1.default)();
+    // A browser callback can fail while runDapp is still starting; await signed below still propagates it.
+    void signed.catch(() => undefined);
+    const { router: commonRouter } = (0, routes_1.setRoutes)(components, {
+        rootCID: message,
+        baseParcel: label.parcel ?? '0,0',
+        parcels: [label.parcel ?? '0,0'],
+        skipValidations: true,
+        debug: !!process.env.DEBUG,
+        isWorld: !!label.world,
+        world: label.label,
+        targetUrl: options.targetUrl,
+        action: 'view-logs'
+    });
+    const router = setSignInRoutes(commonRouter, ephemeralIdentity.address, message, (chain) => signed.resolve(chain), provider, (error) => signed.reject(error));
+    components.logger.info(`Sign read-only access to logs, metrics and executions for the next ${session_1.SESSION_MINUTES / 60} hours`);
+    components.logger.info('This credential works across Insights environments sharing the insights service identifier where the wallet signatures verify on the configured network.');
+    const { program } = await (0, run_dapp_1.runDapp)(components, router, { ...options.linkOptions, uri: '/' });
+    let validated;
+    try {
+        validated = await signed;
+    }
+    finally {
+        // Cleanup must not replace a signature validation error.
+        await program.stop().catch(() => undefined);
+    }
+    const { authChain, scope } = validated;
+    expiration.setTime(Math.min(expiration.getTime(), scope.expiration));
+    await (0, session_store_1.saveSession)(components, options.file, ephemeralIdentity, expiration, authChain);
+    return { session: (0, session_1.createSessionFromChain)(ephemeralIdentity, expiration, authChain), source: 'signed' };
+}
+const LOOPBACK_HOSTNAMES = ['localhost', '127.0.0.1', '[::1]'];
+/**
+ * Whether a request comes from the linker dApp's own page. The browser sets Origin and Host, so
+ * another page open in it (or a rebinding domain) can't pass for the dApp.
+ */
+function isLinkerOrigin(origin, host) {
+    if (!origin || !host)
+        return false;
+    try {
+        const url = new URL(origin);
+        return url.host === host && LOOPBACK_HOSTNAMES.includes(url.hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The linker dApp posts `view-logs` signatures to `/api/logs`. Only its own page is accepted: any
+ * other page could sign the message with its own wallet and sign the CLI in as that address.
+ */
+function setSignInRoutes(router, ephemeralAddress, message, onSigned, provider, onError) {
+    router.post('/api/logs', async (ctx) => {
+        if (!isLinkerOrigin(ctx.request.headers.get('origin'), ctx.request.headers.get('host'))) {
+            return { status: 403, body: { success: false, error: 'Sign from the page the CLI opened on localhost' } };
+        }
+        const value = (await ctx.request.json());
+        try {
+            if (!value.address || !Array.isArray(value.authChain)) {
+                throw new error_1.CliError('SCENE_INSIGHTS_INVALID_SIGNATURE', 'The wallet did not sign the insights session');
+            }
+            const delegation = await (0, session_1.delegationFromLinkerChain)(value.authChain, ephemeralAddress, message, Date.now(), provider);
+            // answer the dApp before its server is stopped
+            setTimeout(() => onSigned(delegation), 100);
+            return { body: { success: true } };
+        }
+        catch (e) {
+            if (e instanceof error_1.CliError &&
+                (e.name === 'SCENE_INSIGHTS_UNAVAILABLE' || e.name === 'SCENE_INSIGHTS_INVALID_ARGUMENT')) {
+                setTimeout(() => onError?.(e), 100);
+                return {
+                    status: e.name === 'SCENE_INSIGHTS_UNAVAILABLE' ? 503 : 400,
+                    body: { success: false, error: e.message }
+                };
+            }
+            return { status: 400, body: { success: false, error: e.message } };
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=sign-in.js.map

package/dist/commands/scene-insights/sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-in.js","sourceRoot":"","sources":["../../../src/commands/scene-insights/sign-in.ts"],"names":[],"mappings":";;;;;AAqDA,gCAwEC;AAQD,wCAQC;AAMD,0CA0CC;AA7LD,0DAA8B;AAE9B,iEAA+D;AAI/D,6CAA4C;AAC5C,qDAAoE;AACpE,6CAAqD;AACrD,uCASkB;AAClB,mDAAyF;AAuBzF;;;;;;;;;;GAUG;AACI,KAAK,UAAU,UAAU,CAC9B,UAAqE,EACrE,KAAkB,EAClB,OAAuB;IAEvB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QAChC,OAAO,EAAE,OAAO,EAAE,IAAA,qCAA2B,EAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAA;IACrG,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,6CAAsB,EAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,IAAA,2BAAW,EAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC/E,IAAI,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAE7D,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,gBAAQ,CAChB,iCAAiC,EACjC,yJAAyJ,CAC1J,CAAA;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,IAAA,6CAA6B,EAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD,MAAM,iBAAiB,GAAG,IAAA,iCAAuB,GAAE,CAAA;IACnD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,yBAAe,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,IAAA,mCAAyB,EAAC,iBAAiB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAEhF,MAAM,MAAM,GAAG,IAAA,mBAAM,GAA+B,CAAA;IACpD,uGAAuG;IACvG,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,kBAAS,EAAC,UAAU,EAAE;QACrD,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;QACjC,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC;QAChC,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK;QAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,WAAW;KACpB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,eAAe,CAC5B,YAAY,EACZ,iBAAiB,CAAC,OAAO,EACzB,OAAO,EACP,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAChC,QAAQ,EACR,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAChC,CAAA;IAED,UAAU,CAAC,MAAM,CAAC,IAAI,CACpB,sEAAsE,yBAAe,GAAG,EAAE,QAAQ,CACnG,CAAA;IACD,UAAU,CAAC,MAAM,CAAC,IAAI,CACpB,0JAA0J,CAC3J,CAAA;IACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,kBAAO,EAAC,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IAE3F,IAAI,SAAsC,CAAA;IAC1C,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAA;IAC1B,CAAC;YAAS,CAAC;QACT,yDAAyD;QACzD,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,SAAS,CAAA;IACtC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IACpE,MAAM,IAAA,2BAAW,EAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;IACrF,OAAO,EAAE,OAAO,EAAE,IAAA,gCAAsB,EAAC,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AACxG,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAA;AAE9D;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAqB,EAAE,IAAmB;IACvE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC3B,OAAO,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAC7B,MAAsB,EACtB,gBAAwB,EACxB,OAAe,EACf,QAA2D,EAC3D,QAA4B,EAC5B,OAAgC;IAEhC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACxF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,EAAE,CAAA;QAC3G,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAmB,CAAA;QAC1D,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,gBAAQ,CAAC,kCAAkC,EAAE,8CAA8C,CAAC,CAAA;YACxG,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAA,mCAAyB,EAChD,KAAK,CAAC,SAAS,EACf,gBAAgB,EAChB,OAAO,EACP,IAAI,CAAC,GAAG,EAAE,EACV,QAAQ,CACT,CAAA;YACD,+CAA+C;YAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAA;YAC3C,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAA;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IACE,CAAC,YAAY,gBAAQ;gBACrB,CAAC,CAAC,CAAC,IAAI,KAAK,4BAA4B,IAAI,CAAC,CAAC,IAAI,KAAK,iCAAiC,CAAC,EACzF,CAAC;gBACD,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;gBACnC,OAAO;oBACL,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAC3D,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;iBAC3C,CAAA;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,CAAA;QAC/E,CAAC;IACH,CAAC,CAAC,CAAA;IACF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/commands/scene-insights/signature-validation.d.ts

@@ -0,0 +1,6 @@
+import { AuthChain, Authenticator } from '@dcl/crypto';
+import { AuthChainProvider } from '@dcl/crypto-middleware';
+/** Select RPC from trusted CLI configuration, never from the wallet response. */
+export declare function createInsightsProvider(target: string): AuthChainProvider;
+/** Validate a saved or newly signed delegation without unbounded RPC fallback work. */
+export declare function validateInsightsSignature(expected: string, chain: AuthChain, now?: number, provider?: AuthChainProvider): ReturnType<typeof Authenticator.validateSignature>;

package/dist/commands/scene-insights/signature-validation.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createInsightsProvider = createInsightsProvider;
+exports.validateInsightsSignature = validateInsightsSignature;
+const crypto_1 = require("@dcl/crypto");
+const crypto_middleware_1 = require("@dcl/crypto-middleware");
+const error_1 = require("../../logic/error");
+/** Select RPC from trusted CLI configuration, never from the wallet response. */
+function createInsightsProvider(target) {
+    let provider;
+    return {
+        sendAsync(payload, callback, signal) {
+            if (!provider) {
+                const hostname = new URL(target).hostname;
+                const network = hostname === 'decentraland.zone' || hostname.endsWith('.decentraland.zone')
+                    ? 'sepolia'
+                    : hostname === 'decentraland.org' || hostname.endsWith('.decentraland.org')
+                        ? 'mainnet'
+                        : undefined;
+                const url = network
+                    ? `https://rpc.decentraland.org/${network}?project=sdk-commands`
+                    : process.env.DCL_SCENE_INSIGHTS_RPC_URL;
+                if (!url) {
+                    callback(new error_1.CliError('SCENE_INSIGHTS_INVALID_ARGUMENT', 'Set DCL_SCENE_INSIGHTS_RPC_URL for contract wallets on a custom Insights target'));
+                    return;
+                }
+                try {
+                    provider = (0, crypto_middleware_1.createSignatureRpcProvider)(url);
+                }
+                catch {
+                    callback(new error_1.CliError('SCENE_INSIGHTS_INVALID_ARGUMENT', 'DCL_SCENE_INSIGHTS_RPC_URL must be an HTTP(S) URL without user information'));
+                    return;
+                }
+            }
+            provider.sendAsync(payload, callback, signal);
+        }
+    };
+}
+/** Validate a saved or newly signed delegation without unbounded RPC fallback work. */
+async function validateInsightsSignature(expected, chain, now = Date.now(), provider) {
+    if (chain.length < 2 || chain.length > 10)
+        return { ok: false, message: 'Invalid auth chain length' };
+    const controller = new AbortController();
+    let rejectValidation = () => undefined;
+    let invalidate = () => undefined;
+    const interrupted = new Promise((resolve, reject) => {
+        invalidate = resolve;
+        rejectValidation = reject;
+    });
+    const interrupt = (error) => {
+        if (!controller.signal.aborted) {
+            rejectValidation(error);
+            controller.abort();
+        }
+        return error;
+    };
+    let calls = 0;
+    const bounded = provider && {
+        sendAsync(payload, callback) {
+            if (controller.signal.aborted) {
+                callback(new Error('Signature validation stopped'));
+                return;
+            }
+            if (++calls > 16) {
+                const message = 'Signature validation exceeded its RPC budget';
+                invalidate({ ok: false, message });
+                controller.abort();
+                callback(new Error(message));
+                return;
+            }
+            try {
+                provider.sendAsync(payload, (error, response) => {
+                    if (error) {
+                        callback(interrupt(error instanceof error_1.CliError
+                            ? error
+                            : new error_1.CliError('SCENE_INSIGHTS_UNAVAILABLE', 'Contract-wallet signature verification unavailable; retry shortly')));
+                    }
+                    else {
+                        callback(null, response);
+                    }
+                }, controller.signal);
+            }
+            catch {
+                callback(interrupt(new error_1.CliError('SCENE_INSIGHTS_UNAVAILABLE', 'Contract-wallet signature verification unavailable; retry shortly')));
+            }
+        }
+    };
+    const timer = setTimeout(() => interrupt(new error_1.CliError('SCENE_INSIGHTS_UNAVAILABLE', 'Contract-wallet signature verification timed out; retry shortly')), 15000);
+    try {
+        return await Promise.race([
+            crypto_1.Authenticator.validateSignature(expected, chain, bounded ?? null, now, { service: 'insights' }),
+            interrupted
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+        controller.abort();
+    }
+}
+//# sourceMappingURL=signature-validation.js.map

package/dist/commands/scene-insights/signature-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-validation.js","sourceRoot":"","sources":["../../../src/commands/scene-insights/signature-validation.ts"],"names":[],"mappings":";;AAKA,wDAuCC;AAGD,8DAoFC;AAnID,wCAAwE;AACxE,8DAAsF;AACtF,6CAA4C;AAE5C,iFAAiF;AACjF,SAAgB,sBAAsB,CAAC,MAAc;IACnD,IAAI,QAAuC,CAAA;IAC3C,OAAO;QACL,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM;YACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAA;gBACzC,MAAM,OAAO,GACX,QAAQ,KAAK,mBAAmB,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC;oBACzE,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;wBACzE,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAA;gBACjB,MAAM,GAAG,GAAG,OAAO;oBACjB,CAAC,CAAC,gCAAgC,OAAO,uBAAuB;oBAChE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAA;gBAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,QAAQ,CACN,IAAI,gBAAQ,CACV,iCAAiC,EACjC,iFAAiF,CAClF,CACF,CAAA;oBACD,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAA,8CAA0B,EAAC,GAAG,CAAC,CAAA;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CACN,IAAI,gBAAQ,CACV,iCAAiC,EACjC,4EAA4E,CAC7E,CACF,CAAA;oBACD,OAAM;gBACR,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC/C,CAAC;KACF,CAAA;AACH,CAAC;AAED,uFAAuF;AAChF,KAAK,UAAU,yBAAyB,CAC7C,QAAgB,EAChB,KAAgB,EAChB,MAAc,IAAI,CAAC,GAAG,EAAE,EACxB,QAA4B;IAE5B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAA;IACrG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,gBAAgB,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAA;IAC9D,IAAI,UAAU,GAAuC,GAAG,EAAE,CAAC,SAAS,CAAA;IACpE,MAAM,WAAW,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpE,UAAU,GAAG,OAAO,CAAA;QACpB,gBAAgB,GAAG,MAAM,CAAA;IAC3B,CAAC,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,CAAC,KAAY,EAAE,EAAE;QACjC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,gBAAgB,CAAC,KAAK,CAAC,CAAA;YACvB,UAAU,CAAC,KAAK,EAAE,CAAA;QACpB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IACD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,OAAO,GAAkC,QAAQ,IAAI;QACzD,SAAS,CAAC,OAAO,EAAE,QAAQ;YACzB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA;gBACnD,OAAM;YACR,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,EAAE,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,8CAA8C,CAAA;gBAC9D,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;gBAClC,UAAU,CAAC,KAAK,EAAE,CAAA;gBAClB,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;gBAC5B,OAAM;YACR,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CAAC,SAAS,CAChB,OAAO,EACP,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;oBAClB,IAAI,KAAK,EAAE,CAAC;wBACV,QAAQ,CACN,SAAS,CACP,KAAK,YAAY,gBAAQ;4BACvB,CAAC,CAAC,KAAK;4BACP,CAAC,CAAC,IAAI,gBAAQ,CACV,4BAA4B,EAC5B,mEAAmE,CACpE,CACN,CACF,CAAA;oBACH,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;oBAC1B,CAAC;gBACH,CAAC,EACD,UAAU,CAAC,MAAM,CAClB,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CACN,SAAS,CACP,IAAI,gBAAQ,CACV,4BAA4B,EAC5B,mEAAmE,CACpE,CACF,CACF,CAAA;YACH,CAAC;QACH,CAAC;KACF,CAAA;IACD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,SAAS,CACP,IAAI,gBAAQ,CAAC,4BAA4B,EAAE,iEAAiE,CAAC,CAC9G,EACH,KAAM,CACP,CAAA;IACD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,sBAAa,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;YAC/F,WAAW;SACZ,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC"}

package/dist/commands/scene-insights/types.d.ts

@@ -0,0 +1,61 @@
+export interface LogEntry {
+    id: string;
+    timestamp: string;
+    level: 'debug' | 'info' | 'warn' | 'error';
+    source: 'scene' | 'engine' | 'stderr' | 'unknown';
+    executionId: string;
+    entityId: string;
+    message: string;
+    truncated: boolean;
+}
+export interface LogSearchResult {
+    sceneKey: string;
+    logs: LogEntry[];
+    nextCursor: string | null;
+    retentionStart: string;
+}
+export interface Execution {
+    executionId: string;
+    entityId: string;
+    firstSeen: string;
+    lastSeen: string;
+    instanceId: string;
+    logLines: number;
+}
+export interface ExecutionsResult {
+    sceneKey: string;
+    executions: Execution[];
+    retentionStart: string;
+}
+export interface MetricName {
+    name: string;
+    type: 'gauge' | 'sum';
+    unit: string;
+}
+export interface MetricNamesResult {
+    sceneKey: string;
+    from: string;
+    to: string;
+    metrics: MetricName[];
+}
+export interface GaugePoint {
+    t: string;
+    avg: number | null;
+    max: number | null;
+}
+export interface SumPoint {
+    t: string;
+    sum: number | null;
+    rate: number | null;
+}
+export interface MetricSeries {
+    sceneKey: string;
+    metric: string;
+    type: 'gauge' | 'sum' | null;
+    unit: string;
+    rateUnit?: string;
+    stepSeconds: number;
+    from: string;
+    to: string;
+    points: Array<GaugePoint | SumPoint>;
+}

package/dist/commands/scene-insights/types.js

@@ -0,0 +1,4 @@
+"use strict";
+// Response shapes of multiplayer-scenes-insights-service (its docs/openapi.yaml).
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/commands/scene-insights/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/commands/scene-insights/types.ts"],"names":[],"mappings":";AAAA,kFAAkF"}

package/dist/commands/sdk-server-logs/index.d.ts

@@ -0,0 +1,24 @@
+import { Result } from 'arg';
+import { CliComponents } from '../../components';
+interface Options {
+    args: Result<typeof args>;
+    components: CliComponents;
+}
+export declare const args: {
+    '--help': BooleanConstructor;
+    '-h': string;
+    '--dir': StringConstructor;
+    '--world': StringConstructor;
+    '-w': string;
+    '--position': StringConstructor;
+    '--target': StringConstructor;
+    '-t': string;
+    '--port': NumberConstructor;
+    '-p': string;
+    '--https': BooleanConstructor;
+    '--no-browser': BooleanConstructor;
+    '-b': string;
+};
+export declare function help(options: Options): void;
+export declare function main(options: Options): Promise<void>;
+export {};

package/dist/commands/sdk-server-logs/index.js

@@ -0,0 +1,313 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.args = void 0;
+exports.help = help;
+exports.main = main;
+const path_1 = require("path");
+const fp_future_1 = __importDefault(require("fp-future"));
+const crypto_1 = require("@dcl/crypto");
+const crypto_2 = require("@dcl/crypto/dist/crypto");
+const eth_connect_1 = require("eth-connect");
+const args_1 = require("../../logic/args");
+const error_1 = require("../../logic/error");
+const beautiful_logs_1 = require("../../logic/beautiful-logs");
+const account_1 = require("../../logic/account");
+const auth_chain_headers_1 = require("../../logic/auth-chain-headers");
+const routes_1 = require("../../linker-dapp/routes");
+const run_dapp_1 = require("../../run-dapp");
+const workspace_validations_1 = require("../../logic/workspace-validations");
+const scene_validations_1 = require("../../logic/scene-validations");
+exports.args = (0, args_1.declareArgs)({
+    '--help': Boolean,
+    '-h': '--help',
+    '--dir': String,
+    '--world': String,
+    '-w': '--world',
+    '--position': String,
+    '--target': String,
+    '-t': '--target',
+    '--port': Number,
+    '-p': '--port',
+    '--https': Boolean,
+    '--no-browser': Boolean,
+    '-b': '--no-browser'
+});
+const DEFAULT_SERVER = 'https://multiplayer-server.decentraland.org';
+function help(options) {
+    options.components.logger.log(`
+  Usage: 'sdk-commands sdk-server-logs [options]'
+    Streams real-time logs from the multiplayer server.
+    Runs from any directory when --world and/or --position are provided.
+    Falls back to scene.json (worldConfiguration.name) when neither is passed.
+
+    Options:
+      -h, --help                Displays complete help
+      -w, --world       [name]  World name. When omitted, --position targets Genesis City.
+      --position        [x,y]   Parcel coordinates. Optional for worlds (selects a scene
+                                in a multi-scene world). Required for Genesis City.
+      -t, --target      [URL]   Target multiplayer server URL (default: ${DEFAULT_SERVER})
+      --dir             [path]  Path to the project directory (used with scene.json fallback)
+      -p, --port        [port]  Select a custom port for the linker dApp
+      -b, --no-browser          Do not open a new browser window
+      --https                   Use HTTPS for the linker dApp
+
+    Examples:
+    - View logs using the world in the current scene.json:
+      $ sdk-commands sdk-server-logs
+
+    - View logs for a world from any directory:
+      $ sdk-commands sdk-server-logs --world myworld.dcl.eth
+
+    - View logs for a specific scene in a multi-scene world:
+      $ sdk-commands sdk-server-logs --world myworld.dcl.eth --position 10,10
+
+    - View logs for a Genesis City scene (use =value form for negative coords):
+      $ sdk-commands sdk-server-logs --position=-125,-96
+
+    - Connect to a custom server:
+      $ sdk-commands sdk-server-logs --world myworld --target https://multiplayer-server.decentraland.zone
+
+    - Use private key for authentication (no browser):
+      $ DCL_PRIVATE_KEY=0x... sdk-commands sdk-server-logs --world myworld
+`);
+}
+function setServerLogsRoutes(router, components, awaitResponse, signCallback) {
+    const { logger } = components;
+    const resolveLinkerPromise = () => setTimeout(() => awaitResponse.resolve(), 100);
+    const rejectLinkerPromise = (e) => setTimeout(() => awaitResponse.reject(e), 100);
+    router.post('/api/logs', async (ctx) => {
+        const value = (await ctx.request.json());
+        if (!value.address || !value.authChain) {
+            const errorMessage = `Invalid payload: ${Object.keys(value).join(' - ')}`;
+            logger.error(errorMessage);
+            resolveLinkerPromise();
+            return { status: 400, body: { success: false, error: errorMessage } };
+        }
+        try {
+            await signCallback(value);
+            resolveLinkerPromise();
+            return { body: { success: true } };
+        }
+        catch (e) {
+            rejectLinkerPromise(e);
+            return { status: 400, body: { success: false, error: e.message } };
+        }
+    });
+    return router;
+}
+async function getAddressAndSignature(components, awaitResponse, payload, displayLabel, targetUrl, linkOptions, signCallback) {
+    // If DCL_PRIVATE_KEY is set, sign directly without the linker dapp
+    if (process.env.DCL_PRIVATE_KEY) {
+        const wallet = (0, account_1.createWallet)(process.env.DCL_PRIVATE_KEY);
+        const authChain = crypto_1.Authenticator.createSimpleAuthChain(payload, wallet.address, (0, crypto_2.ethSign)((0, eth_connect_1.hexToBytes)(wallet.privateKey), payload));
+        const linkerResponse = { authChain, address: wallet.address };
+        await signCallback(linkerResponse);
+        awaitResponse.resolve();
+        return {};
+    }
+    // Use linker dapp for signing - pass the payload as the rootCID
+    const { router: commonRouter } = (0, routes_1.setRoutes)(components, {
+        rootCID: payload,
+        baseParcel: '0,0',
+        parcels: ['0,0'],
+        skipValidations: true,
+        debug: !!process.env.DEBUG,
+        isWorld: true,
+        world: displayLabel,
+        targetUrl,
+        action: 'view-logs'
+    });
+    const router = setServerLogsRoutes(commonRouter, components, awaitResponse, signCallback);
+    components.logger.info('You need to sign to access server logs');
+    const { program } = await (0, run_dapp_1.runDapp)(components, router, { ...linkOptions, uri: `/` });
+    return { program };
+}
+async function streamLogs(components, logsUrl, authHeaders) {
+    const { logger, fetch: fetchComponent } = components;
+    logger.info('\nConnecting to server logs...');
+    try {
+        const response = await fetchComponent.fetch(logsUrl, {
+            method: 'GET',
+            headers: {
+                ...authHeaders,
+                Accept: 'text/event-stream'
+            }
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Server returned ${response.status}: ${errorText}`);
+        }
+        const contentType = response.headers.get('content-type') || '';
+        if (!contentType.includes('text/event-stream') && !contentType.includes('application/stream')) {
+            throw new Error('Server does not support SSE streaming');
+        }
+        logger.info('Streaming logs in real-time (press CTRL+C to stop)');
+        if (response.body) {
+            const decoder = new TextDecoder();
+            let buffer = '';
+            for await (const chunk of response.body) {
+                buffer += decoder.decode(chunk, { stream: true });
+                const lines = buffer.split('\n');
+                buffer = lines.pop() || '';
+                for (const line of lines) {
+                    if (line.trim()) {
+                        formatAndPrintLog(logger, line);
+                    }
+                }
+            }
+        }
+        logger.info('\n======================= End Scene Logs =======================');
+    }
+    catch (e) {
+        (0, beautiful_logs_1.printError)(logger, 'Failed to stream logs:', e);
+        process.exit(1);
+    }
+}
+function formatAndPrintLog(logger, log) {
+    // If log is a string, try to parse as JSON
+    let logObj = log;
+    if (typeof log === 'string') {
+        try {
+            logObj = JSON.parse(log);
+        }
+        catch {
+            // If not JSON, just print the string
+            logger.log(log);
+            return;
+        }
+    }
+    // Extract common log fields
+    const timestamp = logObj.timestamp || logObj.time || new Date().toISOString();
+    const level = (logObj.level || logObj.severity || 'INFO').toUpperCase();
+    const message = logObj.message || logObj.msg || JSON.stringify(logObj);
+    // Format timestamp
+    const date = new Date(timestamp);
+    const formattedTime = date.toISOString().replace('T', ' ').substring(0, 19);
+    // Format the log message with timestamp
+    const formattedMessage = `[${formattedTime}] [${level}] ${message}`;
+    // Map log levels to logger methods
+    const normalizedLevel = level.toLowerCase();
+    switch (normalizedLevel) {
+        case 'error':
+            logger.error(formattedMessage);
+            break;
+        case 'warn':
+        case 'warning':
+            logger.warn(formattedMessage);
+            break;
+        case 'debug':
+            logger.debug(formattedMessage);
+            break;
+        case 'info':
+        case 'trace':
+        default:
+            logger.info(formattedMessage);
+            break;
+    }
+    // If there are additional fields, print them
+    const additionalFields = Object.keys(logObj).filter((key) => !['timestamp', 'time', 'level', 'severity', 'message', 'msg'].includes(key));
+    if (additionalFields.length > 0) {
+        const additional = {};
+        additionalFields.forEach((key) => {
+            additional[key] = logObj[key];
+        });
+        logger.log(`  ${JSON.stringify(additional)}`);
+    }
+}
+function normalizePosition(raw) {
+    const match = raw.trim().match(/^(-?\d+)\s*,\s*(-?\d+)$/);
+    if (!match) {
+        throw new error_1.CliError('SERVER_LOGS_INVALID_POSITION', `Invalid --position "${raw}"; expected "x,y" with integer coordinates`);
+    }
+    return `${parseInt(match[1], 10)},${parseInt(match[2], 10)}`;
+}
+/**
+ * Build the HTTP request shape for the multiplayer-server `/logs` endpoint.
+ *
+ * Every call targets the same `/logs` route; the server picks the scene from
+ * the signed metadata:
+ *   - worlds  → `sceneId: "<world>.dcl.eth"` (+ `parcel` for multi-scene worlds)
+ *   - Genesis → `parcel: "x,y"` only
+ *
+ * `parcel` and `realmName` are always set. `realmName` defaults to `"main"` for
+ * Genesis, matching the convention used by other signed-fetch emitters
+ * (hammurabi worker, unity explorer, kernel).
+ */
+function buildLogsRequest(baseURL, world, position) {
+    const metadata = JSON.stringify({
+        parcel: position ?? '0,0',
+        realmName: world ? `${world}.dcl.eth` : 'main',
+        ...(world && { sceneId: `${world}.dcl.eth` })
+    });
+    return {
+        logsUrl: `${baseURL}/logs`,
+        pathname: '/logs',
+        metadata
+    };
+}
+async function main(options) {
+    const { logger } = options.components;
+    const projectRoot = (0, path_1.resolve)(process.cwd(), options.args['--dir'] || '.');
+    const positionArg = options.args['--position'];
+    const worldArg = options.args['--world'];
+    const position = positionArg ? normalizePosition(positionArg) : undefined;
+    let world;
+    if (worldArg) {
+        world = worldArg.replace(/\.dcl\.eth$/i, '');
+    }
+    else if (!position) {
+        // no --world nor --position: fall back to scene.json in the current directory
+        await (0, workspace_validations_1.getValidWorkspace)(options.components, projectRoot);
+        const sceneJson = await (0, scene_validations_1.getValidSceneJson)(options.components, projectRoot);
+        const worldName = sceneJson.worldConfiguration?.name;
+        if (!worldName) {
+            throw new error_1.CliError('SERVER_LOGS_MISSING_WORLD', 'Provide --world (with optional --position) for worlds, or --position alone for Genesis City scenes. ' +
+                'Alternatively, run from a project whose scene.json defines worldConfiguration.name.');
+        }
+        world = worldName.replace(/\.dcl\.eth$/i, '');
+    }
+    const displayLabel = world
+        ? position
+            ? `${world}.dcl.eth ${position}`
+            : `${world}.dcl.eth`
+        : `Genesis City ${position}`;
+    logger.info(`Viewing logs for ${displayLabel}`);
+    const baseURL = options.args['--target'] || DEFAULT_SERVER;
+    const { logsUrl, pathname, metadata } = buildLogsRequest(baseURL, world, position);
+    // Linker dApp options
+    const linkerPort = options.args['--port'];
+    const openBrowser = !options.args['--no-browser'];
+    const isHttps = !!options.args['--https'];
+    const linkOptions = { linkerPort, openBrowser, isHttps };
+    const awaitResponse = (0, fp_future_1.default)();
+    const timestamp = String(Date.now());
+    // Build the payload to sign: method:path:timestamp:metadata
+    const payload = ['get', pathname, timestamp, metadata].join(':').toLowerCase();
+    let authHeaders = {};
+    const { program } = await getAddressAndSignature(options.components, awaitResponse, payload, displayLabel, baseURL, linkOptions, async (linkerResponse) => {
+        authHeaders = (0, auth_chain_headers_1.createAuthChainHeaders)(linkerResponse.authChain, timestamp, metadata);
+    });
+    try {
+        await awaitResponse;
+        logger.info('Authentication successful!');
+        // Close the browser window
+        if (program) {
+            await program.stop();
+        }
+        // Start streaming logs
+        await streamLogs(options.components, logsUrl, authHeaders);
+    }
+    catch (e) {
+        (0, beautiful_logs_1.printError)(logger, 'Failed to authenticate:', e);
+        throw e;
+    }
+    finally {
+        if (program) {
+            void program.stop();
+        }
+    }
+}
+//# sourceMappingURL=index.js.map