@secondlayer/cli 10.0.0 → 10.1.0

package/README.md

@@ -62,6 +62,18 @@ sl subscriptions create my-hook \
 
 ## Commands
 
+### Local runtime
+
+No account. Writes `.env.local`, restores history, prints the Stacks observer stanza.
+
+| Command | What it does |
+|---|---|
+| `sl init [--network mainnet\|testnet\|devnet] [--api-url <url>] [--force]` | Write `.env.local` (token, secrets key, webhook signing key). Idempotent |
+| `sl bootstrap --against <manifest> [--to-block <n>] [--public-key <pem>] [-y] [--json]` | Restore chain history from a verified archive into an empty database. Exit `0` restored, `1` diverged, `2` refused |
+| `sl observer [--mode indexer\|signer-shared] [--endpoint host:port] [--recovery journal\|archive] [--network …]` | Print the `[[events_observer]]` stanza. Signer-shared requires `--recovery` |
+| `sl verify [all\|raw\|decode:<name>\|subgraph:<name>] --against <manifest> [--quick\|--deep\|--anchor]` | Compare local data to a signed archive. Default target `raw`. Exit `0` clean, `1` diverged, `2` unanchored |
+| `sl repair --against <archive> [--apply]` | Plan (default) or apply an archive repair |
+
 ### Auth & project
 
 | Command | What it does |
@@ -90,10 +102,10 @@ scoped reads and cannot mint (403). Minted keys inherit your plan's tier.
 | `sl subgraphs create <name>` | Scaffold a definition file |
 | `sl subgraphs scaffold <SP...::contract> [-o <path>] [--no-install]` | Generate a subgraph from a deployed contract |
 | `sl subgraphs deploy <file> [--start-block <n>] [--visibility public\|private]` | Deploy; `--start-block` overrides the definition. Managed deploys default `public`, BYO default `private` |
-| `sl subgraphs publish <name>` / `unpublish <name>` | Flip visibility; publish claims the global public name (409 `PUBLIC_NAME_TAKEN` if claimed) |
+| `sl subgraphs list` | List deployments (`ls` alias) |
 | `sl subgraphs dev <file>` | Watch + hot-redeploy |
 | `sl subgraphs query <name> <table>` | Query a table with filters, sort, pagination |
-| `sl subgraphs list` / `status <name>` / `gaps <name>` | Inspect deployments |
+| `sl subgraphs status <name>` / `gaps <name>` | Inspect a deployment |
 | `sl subgraphs spec <nameOrFile> [--format openapi\|agent\|markdown]` | Export API docs for a deployed subgraph or a local definition file |
 | `sl subgraphs deploy <file> --database-url <url>` | BYO: write the subgraph's rows to your own Postgres |
 | `sl subgraphs codegen <file> --target prisma\|drizzle [-o <path>]` | Generate an ORM schema for the subgraph's tables (BYO DB) |
@@ -141,9 +153,6 @@ deliveries/...) operates on both kinds.
 |---|---|
 | `sl contracts generate [files...]` (alias `gen`) | Generate TS interfaces from Clarity contracts |
 | `sl context` | Print a headless orientation snapshot — account, Streams + Index tips, your subgraphs, subscriptions, and in-flight reindex operations. CLI counterpart to the MCP `secondlayer://context` resource |
-| `sl init` | Write `.env.local` (token, secrets key, webhook signing key) |
-| `sl bootstrap` | Restore chain history from a verified archive |
-| `sl observer` | Print the Stacks `events_observer` stanza |
 | `sl doctor` / `sl status` | Reachability + health checks |
 | `sl account get` / `sl account update` | Show or update display name / bio / slug |
 | `sl account billing` | Show plan, subscription, trial, discounts |

package/dist/cli.js

@@ -34784,7 +34784,7 @@ init_esm();
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "10.0.0",
+  version: "10.1.0",
   repository: {
     type: "git",
     url: "git+https://github.com/ryanwaits/secondlayer.git",
@@ -34825,10 +34825,10 @@ var package_default = {
     "@biomejs/wasm-nodejs": "^1.9.0",
     "@dsnp/parquetjs": "^1.8.8",
     "@inquirer/prompts": "^8.2.0",
-    "@secondlayer/bundler": "^0.4.1",
+    "@secondlayer/bundler": "^0.5.0",
     "@secondlayer/scaffold": "^1.5.1",
     "@secondlayer/sdk": "^6.51.0",
-    "@secondlayer/shared": "^7.9.0",
+    "@secondlayer/shared": "^7.10.0",
     "@secondlayer/stacks": "^3.3.1",
     "@secondlayer/subgraphs": "^3.26.4",
     esbuild: "^0.27.4",
@@ -38738,6 +38738,11 @@ import {
   comparePartitionSemanticDigests,
   computePartitionSemanticDigest
 } from "@secondlayer/shared/archive/semantic-digest-builder";
+import {
+  datasetMatchesTarget,
+  parseVerifyTarget,
+  reportVerify
+} from "@secondlayer/shared/coverage";
 import { getDb as getDb2 } from "@secondlayer/shared/db";
 
 // src/lib/archive-reference.ts
@@ -38881,17 +38886,21 @@ function statusLabel(status2) {
   return yellow("missing");
 }
 function registerVerifyCommand(program2) {
-  program2.command("verify").description("Compare local chain data against a signed archive (read-only; nothing is uploaded)").requiredOption("--against <manifest>", "archive manifest: an https URL or a local file path").option("--from-block <n>", "first height to check").option("--to-block <n>", "last height to check").option("--counts", "also compare transaction/event row counts (slower)").option("--semantic", "also recompute per-partition semantic digests locally and compare (slow: full re-stream)").option("--public-key <pem>", "pin the signing key instead of fetching it").option("--insecure", "skip the manifest signature check (not recommended)").option("--json", "Output as JSON").addHelpText("after", `
+  program2.command("verify").description("Compare local chain data against a signed archive (read-only; nothing is uploaded)").argument("[target]", "all | raw | decode:<name> | subgraph:<name>", "raw").option("--quick", "coverage/identity only (default)").option("--deep", "include semantic / scratch replay where available").option("--anchor", "require a verified archive signature").requiredOption("--against <manifest>", "archive manifest: an https URL or a local file path").option("--from-block <n>", "first height to check").option("--to-block <n>", "last height to check").option("--counts", "also compare transaction/event row counts (slower)").option("--semantic", "also recompute per-partition semantic digests locally and compare (slow: full re-stream)").option("--public-key <pem>", "pin the signing key instead of fetching it").option("--insecure", "skip the manifest signature check (not recommended)").option("--json", "Output as JSON").addHelpText("after", `
 Examples:
   $ sl verify --against https://archive.secondlayer.tools/.../snapshots/<digest>.json
-  $ sl verify --against ./snapshot.json --from-block 8000000 --to-block 8499999
-  $ sl verify --against ./snapshot.json --counts --json
+  $ sl verify raw --against ./snapshot.json --from-block 8000000 --to-block 8499999
+  $ sl verify all --against ./snapshot.json --json
+  $ sl verify decode:ft_transfer --against ./snapshot.json --quick
+  $ sl verify subgraph:sbtc --against ./snapshot.json --deep
 
 Exit codes:
   0  local data matches the archive
   1  divergence found (divergent ranges are listed)
-  2  unanchored — reference unavailable or unverifiable`).action(async (opts) => {
+  2  unanchored — reference unavailable or unverifiable`).action(async (targetArg, opts) => {
     try {
+      const target = parseVerifyTarget(targetArg);
+      const mode = opts.deep ? "deep" : opts.anchor ? "anchor" : "quick";
       const fromBlock = opts.fromBlock === undefined ? undefined : parseHeight2(opts.fromBlock, "--from-block");
       const toBlock = opts.toBlock === undefined ? undefined : parseHeight2(opts.toBlock, "--to-block");
       if (fromBlock !== undefined && toBlock !== undefined && toBlock < fromBlock) {
@@ -38907,6 +38916,12 @@ Exit codes:
         output({
           json: opts.json,
           data: {
+            ...reportVerify({
+              target,
+              mode,
+              anchored: false,
+              detail: signature.reason
+            }),
             status: "unanchored",
             reference: origin,
             reason: signature.reason
@@ -38916,6 +38931,8 @@ Exit codes:
         process.exit(VERIFY_EXIT.UNANCHORED);
       }
       const reference = (manifest.range_digests ?? []).filter((d2) => {
+        if (!datasetMatchesTarget(d2.dataset, target))
+          return false;
         if (fromBlock !== undefined && d2.to_block < fromBlock)
           return false;
         if (toBlock !== undefined && d2.from_block > toBlock)
@@ -38963,13 +38980,15 @@ Exit codes:
       }
       const semanticChecks = [];
       const referenceSemantic = (manifest.partition_semantic_digests ?? []).filter((d2) => {
+        if (!datasetMatchesTarget(d2.dataset, target))
+          return false;
         if (fromBlock !== undefined && d2.to_block < fromBlock)
           return false;
         if (toBlock !== undefined && d2.from_block > toBlock)
           return false;
         return true;
       });
-      if (opts.semantic) {
+      if (opts.semantic || opts.deep) {
         if (referenceSemantic.length === 0) {
           warn("Reference publishes no semantic digests; --semantic had nothing to compare.");
         } else {
@@ -39001,8 +39020,14 @@ Exit codes:
         }))
       ];
       const diverged = all2.filter((c4) => c4.status !== "match");
+      const verdict = reportVerify({
+        target,
+        mode,
+        diverged: diverged.length > 0
+      });
       const report = {
-        status: diverged.length === 0 ? "clean" : "diverged",
+        ...verdict,
+        status: verdict.status,
         reference: origin,
         signature_verified: signature.verified,
         ranges_checked: all2.length,
@@ -39838,5 +39863,5 @@ registerAccountCommand(program);
 registerKeysCommand(program);
 program.parse();
 
-//# debugId=8F8395688EA7983464756E2164756E21
+//# debugId=43937D51F562F20264756E2164756E21
 //# sourceMappingURL=cli.js.map