@secondlayer/cli 10.2.0 → 10.3.0

package/README.md

@@ -10,51 +10,27 @@ sl --version
 
 ## Auth
 
-Two ways to authenticate:
+Default API is `http://127.0.0.1:3800`. Override with `SL_API_URL`.
 
-- **Interactive (`sl login`)** — magic-link email → 6-digit code → session
-  written to `~/.secondlayer/session.json`. Used for day-to-day CLI work.
-- **Machine / CI** — set `SL_API_KEY` to an API key created in the platform
-  console at https://secondlayer.tools/platform/api-keys. Keys are prefixed
-  `sk-sl_`. For a persisted headless login: `echo "$SL_API_KEY" | sl login --with-token`.
+Writes against a published bind use `INSTANCE_TOKEN` from `sl init` as
+`SL_API_KEY`. Loopback reads need no token.
 
 ```bash
-# interactive
-sl login
-
-# machine / CI
-export SL_API_KEY=sk-sl_xxxxxxxx
+export SL_API_URL=http://127.0.0.1:3800
+export SL_API_KEY=<INSTANCE_TOKEN>
 ```
 
-`sl whoami` shows the active account, the effective API URL, and the credential
-source (and exits non-zero when not logged in). The global `--api-key` /
-`--api-url` flags (and `SL_API_KEY` / `SL_API_URL`) apply to every command.
-
-During open beta, reads are public (no key needed) — for subgraphs that means
-**public** subgraphs only (managed deploys default public; BYO deploys and all
-pre-existing subgraphs are private, readable with your key). Writes — deploying,
-publishing, or managing subgraphs and subscriptions — require a session or an
-`sk-sl_` key.
-
 ## Quickstart
 
 ```bash
 bun add -g @secondlayer/cli
-sl login
-sl projects create my-app
-sl projects use my-app
+sl init --network mainnet
+sl start --print
+# docker compose -f docker/oss/docker-compose.yml up -d
 
-# scaffold + deploy a subgraph from a deployed contract
 sl subgraphs scaffold SP1234ABCD.my-contract -o subgraphs/my-contract.ts
 sl subgraphs deploy subgraphs/my-contract.ts --start-block <recent-block>
 sl subgraphs query my-contract <table> --sort _block_height --order desc
-
-# wire a webhook receiver
-sl subscriptions create my-hook \
-  --runtime node \
-  --subgraph my-contract \
-  --table <table> \
-  --url https://<receiver-host>/webhook
 ```
 
 `sl subgraphs scaffold` writes the definition file, creates/updates
@@ -75,27 +51,6 @@ No account. Writes `.env.local`, restores history, prints the Stacks observer st
 | `sl verify [all\|raw\|decode:<name>\|subgraph:<name>] --against <manifest> [--quick\|--deep\|--anchor]` | Compare local data to a signed archive. Default target `raw`. Exit `0` clean, `1` diverged, `2` unanchored |
 | `sl repair --against <archive> [--apply]` | Plan (default) or apply an archive repair |
 
-### Auth & project
-
-| Command | What it does |
-|---|---|
-| `sl login` / `sl logout` | Start or revoke a session |
-| `sl whoami` | Print account, credential source, and active project |
-| `sl keys create --product streams [--name <name>]` | Mint a scoped `streams`/`index` read key; prints the `sk-sl_` key **once**. Needs an account key in `SL_API_KEY` |
-| `sl projects create [name]` | Create a project |
-| `sl projects list` | List projects |
-| `sl projects use <slug>` | Bind cwd to a project (writes `./.secondlayer/project`) |
-| `sl projects get` | Show resolved project + source file |
-| `sl projects delete <slug>` (alias `rm`) | Delete a project (`-y` to skip confirm) |
-
-Project binding is per-directory: `.secondlayer/project` in cwd takes
-precedence over `~/.secondlayer/config.json:defaultProject`. The walk-up stops
-at `.git`.
-
-**Key products:** an `account` key (dashboard default) grants both `streams:read`
-and `index:read` and is the only key that can mint; `streams`/`index` keys are
-scoped reads and cannot mint (403). Minted keys inherit your plan's tier.
-
 ### Subgraphs
 
 | Command | What it does |
@@ -153,19 +108,17 @@ deliveries/...) operates on both kinds.
 | Command | What it does |
 |---|---|
 | `sl contracts generate [files...]` (alias `gen`) | Generate TS interfaces from Clarity contracts |
-| `sl context` | Print a headless orientation snapshot — account, Streams + Index tips, your subgraphs, subscriptions, and in-flight reindex operations. CLI counterpart to the MCP `secondlayer://context` resource |
+| `sl context` | Instance snapshot — Streams + Index tips, subgraphs, subscriptions |
 | `sl doctor` / `sl status` | Reachability + health checks |
-| `sl account get` / `sl account update` | Show or update display name / bio / slug |
-| `sl account billing` | Show plan, subscription, trial, discounts |
 | `sl config get/set/reset/delete` | Inspect or reset local config |
 
 ## Environment variables
 
 | Var | Purpose |
 |---|---|
-| `SL_API_KEY` | An `sk-sl_` API key (or session token) for machine/CI use; bypasses platform resolution |
-| `SL_API_URL` | Point at an OSS or internal API directly, bypassing the platform |
-| `SL_PLATFORM_API_URL` | Override the platform API base (default `https://api.secondlayer.tools`) |
+| `SL_API_KEY` | `INSTANCE_TOKEN` from `sl init` for writes. Loopback reads need no token |
+| `SL_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
+| `SL_PLATFORM_API_URL` | Alias of `SL_API_URL` |
 | `STACKS_NETWORK` | Default network (also via `--network <local\|testnet\|mainnet>`) |
 | `HIRO_API_KEY` | Used by `sl contracts generate` for remote contract fetches |
 

package/dist/cli.js

@@ -2580,7 +2580,7 @@ function isOssMode() {
     return true;
   }
 }
-var LOCAL_API_URL = "http://127.0.0.1:3800";
+var LOCAL_API_URL = "http://127.0.0.1:3800", ARCHIVE_OPS_API_URL = "https://api.secondlayer.tools";
 var init_resolve_auth = __esm(() => {
   init_session();
 });
@@ -2629,9 +2629,28 @@ async function httpPlatform(path2, opts = {}) {
 async function httpPlatformAnon(path2, opts = {}) {
   return request(`${resolveApiUrl()}${path2}`, opts);
 }
+function resolveArchiveOpsUrl() {
+  return (process.env.SL_CREDITS_API_URL ?? ARCHIVE_OPS_API_URL).replace(/\/+$/, "");
+}
+async function httpArchiveOpsAnon(path2, opts = {}) {
+  return request(`${resolveArchiveOpsUrl()}${path2}`, opts);
+}
+async function httpArchiveOps(path2, opts = {}) {
+  const envKey = resolveEnvKey();
+  const session = envKey ? null : await readSession();
+  const bearer = envKey ?? session?.token;
+  if (!bearer) {
+    throw new CliHttpError(401, "SESSION_EXPIRED", { error: "Not logged in" }, "Not logged in — run `SL_API_URL=https://api.secondlayer.tools sl login`");
+  }
+  return request(`${resolveArchiveOpsUrl()}${path2}`, {
+    ...opts,
+    bearer
+  });
+}
 var CliHttpError, REQUEST_TIMEOUT_MS = 30000;
 var init_http = __esm(() => {
   init_resolve_auth();
+  init_session();
   CliHttpError = class CliHttpError extends Error {
     status;
     code;
@@ -34787,7 +34806,7 @@ init_esm();
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "10.2.0",
+  version: "10.3.0",
   repository: {
     type: "git",
     url: "git+https://github.com/ryanwaits/secondlayer.git",
@@ -34831,7 +34850,7 @@ var package_default = {
     "@secondlayer/bundler": "^0.5.0",
     "@secondlayer/scaffold": "^1.5.1",
     "@secondlayer/sdk": "^6.54.0",
-    "@secondlayer/shared": "^7.11.0",
+    "@secondlayer/shared": "^7.11.1",
     "@secondlayer/stacks": "^3.3.1",
     "@secondlayer/subgraphs": "^3.26.4",
     esbuild: "^0.27.4",
@@ -34874,15 +34893,13 @@ async function runBillingStatus(json) {
   output({ json, data: res, human: () => renderBillingStatus(res) });
 }
 function addBillingCommand(parent) {
-  parent.command("billing").description("Show your plan, Stripe subscription, trial, and discounts").option("--json", "Output as JSON").action((options) => runBillingStatus(options.json));
+  parent.command("billing").description("Show archive credit balance (hidden; use sl credits)").option("--json", "Output as JSON").action((options) => runBillingStatus(options.json));
 }
 function renderBillingStatus(res) {
   if (!res.subscription) {
     console.log(formatKeyValue([
-      ["Plan", "Free"],
-      ["Reads", dim("10 req/s · last ~24h window")],
-      ["Subgraphs", dim("upgrade to deploy / go private")],
-      ["Upgrade", dim("https://secondlayer.tools/platform/billing")]
+      ["Credits", dim("sl credits balance")],
+      ["Buy", dim("sl credits buy --email you@example.com --pack 25")]
     ]));
     return;
   }
@@ -34980,6 +34997,115 @@ function registerAccountCommand(program2) {
     action: "update profile"
   }));
 }
+// src/commands/credits.ts
+init_http();
+init_output();
+var PACKS = [10, 25, 50, 100];
+function parsePack(raw) {
+  const n = Number(raw);
+  if (!PACKS.includes(n)) {
+    error(`--pack must be one of ${PACKS.join(", ")}`);
+    process.exit(1);
+  }
+  return n;
+}
+async function runBuy(opts) {
+  const email = opts.email.trim().toLowerCase();
+  if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+    error("--email must be a valid address");
+    process.exit(1);
+  }
+  const amount = parsePack(opts.pack);
+  let res;
+  try {
+    res = await httpArchiveOpsAnon("/api/public/credits/checkout", { method: "POST", body: { email, amount } });
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  output({
+    json: opts.json,
+    data: res,
+    human: () => {
+      success(`Checkout for $${amount} → ${email}`);
+      console.log(res.url);
+      console.log(dim("After payment: SL_API_URL=https://api.secondlayer.tools sl login && sl credits balance"));
+    }
+  });
+}
+async function runBalance(opts) {
+  let res;
+  try {
+    res = await httpArchiveOps("/api/billing/status");
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  const micros = BigInt(res.creditsUsdMicros ?? "0");
+  const usd = Number(micros) / 1e6;
+  output({
+    json: opts.json,
+    data: { creditsUsd: usd, creditsUsdMicros: micros.toString() },
+    human: () => {
+      const refill = res.refill;
+      console.log(formatKeyValue([
+        ["Balance", `$${usd.toFixed(2)}`],
+        [
+          "Refill",
+          refill?.belowUsd != null ? `on — below $${refill.belowUsd} buy $${refill.packUsd}` : dim("off")
+        ],
+        ["Buy", dim("sl credits buy --email you@example.com --pack 25")]
+      ]));
+    }
+  });
+}
+function registerCreditsCommand(program2) {
+  const credits = program2.command("credits").description("Buy and check archive credits");
+  credits.command("buy").description("Open a one-time Stripe checkout for archive credits").requiredOption("--email <email>", "Receipt email; becomes the account").option("--pack <usd>", `One of ${PACKS.join(", ")}`, "25").option("--json", "Output as JSON").action((opts) => runBuy(opts));
+  credits.command("balance").description("Show prepaid archive credit balance").option("--json", "Output as JSON").action((opts) => runBalance(opts));
+  credits.command("refill").description("Opt-in auto-refill when the balance drops under a threshold").option("--below <usd>", "Trigger when balance is under this USD amount").option("--pack <usd>", `Pack to buy (${PACKS.join(", ")})`, "25").option("--off", "Turn auto-refill off").option("--json", "Output as JSON").action((opts) => runRefill(opts));
+}
+async function runRefill(opts) {
+  if (!opts.off && opts.below === undefined) {
+    await runBalance(opts);
+    return;
+  }
+  const body = opts.off ? { belowUsd: null } : { belowUsd: Number(opts.below), packUsd: parsePack(opts.pack) };
+  if (!opts.off && (!Number.isFinite(body.belowUsd) || (body.belowUsd ?? 0) < 1)) {
+    error("--below must be at least 1");
+    process.exit(1);
+  }
+  let res;
+  try {
+    res = await httpArchiveOps("/api/billing/refill", {
+      method: "POST",
+      body
+    });
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  output({
+    json: opts.json,
+    data: res,
+    human: () => {
+      if (res.belowUsd == null) {
+        success("Auto-refill off");
+        return;
+      }
+      success(`Auto-refill on — below $${res.belowUsd} buy $${res.packUsd}`);
+    }
+  });
+}
 
 // src/commands/index.ts
 init_codegen();
@@ -35406,94 +35532,71 @@ function registerContextCommand(program2) {
   });
 }
 // src/commands/status.ts
-init_config2();
 init_http();
 init_output();
+init_resolve_auth();
 function registerStatusCommand(program2) {
-  program2.command("status").description("Show system status").option("--json", "Output as JSON").action(async (options3) => {
-    const config = await loadConfig2();
+  program2.command("status").description("Show local instance status").option("--json", "Output as JSON").action(async (options3) => {
     try {
-      const local = process.env.INSTANCE_MODE === "oss" || (process.env.SL_API_URL ?? "").includes("127.0.0.1") || (process.env.SL_API_URL ?? "").includes("localhost");
-      const status = local ? await httpPlatform("/public/status") : await httpPlatform("/status");
+      const status = await httpPlatformAnon("/public/status");
       output({
         json: options3.json,
         data: status,
-        human: () => printStatus(status)
+        human: () => printPublicStatus(status)
       });
-    } catch (err) {
-      if (err instanceof CliHttpError && err.code === "SESSION_EXPIRED") {
-        console.error("Not logged in. Run: sl login");
-        process.exit(1);
-      }
+    } catch {
       console.log("");
       console.log(blue("System Status"));
       console.log(`  ${red("NOT RUNNING")}`);
       console.log("");
-      if (config.network === "local") {
-        console.log(dim("  API service is not running."));
-        console.log(dim("  Start with: sl local start"));
-      } else {
-        console.log(dim("  Can't reach the platform API."));
-        console.log(dim("  Check your connection or try again."));
-      }
+      console.log(dim(`  Can't reach ${resolveApiUrl()}/public/status.`));
+      console.log(dim("  Start with: docker compose up -d"));
       console.log("");
       process.exit(1);
     }
   });
 }
-function printStatus(status) {
+function printPublicStatus(status) {
+  const overall = String(status.status ?? "unknown");
+  const color = overall === "healthy" ? green : red;
   console.log("");
-  const statusColor = status.status === "healthy" ? green : red;
   console.log(blue("System Status"));
-  console.log(`  ${statusColor(status.status.toUpperCase())}${status.network ? dim(` (${status.network})`) : ""}`);
+  console.log(`  ${color(overall.toUpperCase())}`);
   console.log("");
-  console.log(blue("Database"));
-  const dbColor = status.database.status === "ok" ? green : red;
-  console.log(`  Status: ${dbColor(status.database.status)}`);
-  console.log("");
-  console.log(blue("Index Progress"));
-  if (status.indexProgress.length === 0) {
-    console.log(dim("  No data indexed yet"));
-  } else {
-    for (const p2 of status.indexProgress) {
-      const behind = p2.highestSeenBlock - p2.lastIndexedBlock;
-      const behindStr = behind > 0 ? yellow(` (${behind} behind)`) : green(" (synced)");
-      console.log(`  ${p2.network}: block ${p2.lastIndexedBlock}${behindStr}`);
-      if (status.chainTip && status.chainTip > 0) {
-        const pct = Math.min(p2.lastIndexedBlock / status.chainTip * 100, 100);
-        const barWidth = 30;
-        const filled = Math.round(pct / 100 * barWidth);
-        const empty = barWidth - filled;
-        const bar = `${"█".repeat(filled)}${"░".repeat(empty)}`;
-        const pctStr = `${pct.toFixed(1)}%`;
-        const color = pct >= 99.9 ? green : pct >= 50 ? yellow : red;
-        console.log(`  ${dim("chain:")} ${color(bar)} ${color(pctStr)} ${dim(`(tip: ${status.chainTip.toLocaleString()})`)}`);
-      }
-      const contiguous = p2.lastContiguousBlock ?? 0;
-      if (status.integrity === "complete") {
-        console.log(`  ${dim("contiguous:")} ${contiguous} ${green("(complete)")}`);
-      } else {
-        const gapCount = status.gaps?.length ?? 0;
-        const missing = status.totalMissingBlocks ?? 0;
-        console.log(`  ${dim("contiguous:")} ${contiguous} ${yellow(`(${gapCount} gaps, ${missing} missing blocks)`)}`);
-        if (status.gaps) {
-          for (const gap of status.gaps.slice(0, 5)) {
-            const range = gap.gapStart === gap.gapEnd ? `${gap.gapStart}` : `${gap.gapStart}-${gap.gapEnd}`;
-            console.log(`    ${dim("gap:")} ${range} ${dim(`(${gap.size} block${gap.size > 1 ? "s" : ""})`)}`);
-          }
-        }
-      }
+  const tip = status.chainTip;
+  if (typeof tip === "number") {
+    console.log(blue("Chain"));
+    console.log(`  tip: ${tip.toLocaleString()}`);
+    const integrity = status.chainIntegrity;
+    if (integrity) {
+      console.log(`  integrity: ${integrity.ok ? green("ok") : yellow("check")}`);
     }
+    console.log("");
   }
-  console.log("");
-  if (status.activeSubgraphs !== undefined) {
-    console.log(blue("Activity"));
-    console.log(formatKeyValue([
-      ["  Active Subgraphs", status.activeSubgraphs.toString()]
-    ]));
+  const streams = status.streams;
+  if (streams) {
+    console.log(blue("Streams"));
+    console.log(`  ${streams.status ?? "unknown"}`);
+    if (typeof streams.tip?.lag_seconds === "number") {
+      console.log(`  lag: ${streams.tip.lag_seconds}s`);
+    }
     console.log("");
   }
-  console.log(dim(`Last updated: ${status.timestamp}`));
+  const index = status.index;
+  if (index) {
+    console.log(blue("Index"));
+    console.log(`  ${index.status ?? "unknown"}`);
+    const bad = (index.decoders ?? []).filter((d2) => d2.status !== "ok");
+    if (bad.length > 0) {
+      for (const d2 of bad.slice(0, 8)) {
+        console.log(`  ${yellow(d2.decoder)} ${d2.status}`);
+      }
+    }
+    console.log("");
+  }
+  if (typeof status.timestamp === "string") {
+    console.log(dim(`Last updated: ${status.timestamp}`));
+  }
 }
 // src/commands/subscriptions.ts
 init_api_client();
@@ -37316,7 +37419,6 @@ function registerKeysCommand(program2) {
   });
 }
 // src/commands/doctor.ts
-init_api_client();
 init_config2();
 
 // src/lib/health.ts
@@ -37462,50 +37564,31 @@ async function checkHealth() {
 init_http();
 init_network();
 init_output();
+init_resolve_auth();
 function registerDoctorCommand(program2) {
   program2.command("doctor").description("Run diagnostics on the full stack").option("--json", "Output as JSON").action(async (options3) => {
     const config = await loadConfig2();
     if (config.network === "local") {
       await runLocalDoctor(options3.json);
-    } else {
-      await runHostedDoctor(options3.json);
+      return;
     }
+    await runInstanceDoctor(options3.json);
   });
 }
-async function runHostedDoctor(jsonOutput) {
+async function runInstanceDoctor(jsonOutput) {
   const config = await loadConfig2();
-  const apiUrl = process.env.SL_PLATFORM_API_URL ?? process.env.SL_API_URL ?? "http://127.0.0.1:3800";
+  const apiUrl = resolveApiUrl();
   const issues = [];
   const results = { network: config.network, apiUrl };
   let apiHealthy = false;
   let statusData = null;
   try {
-    statusData = await httpPlatform("/status");
+    statusData = await httpPlatformAnon("/public/status");
     apiHealthy = true;
-  } catch (err) {
-    if (err instanceof CliHttpError) {
-      if (err.code === "SESSION_EXPIRED") {
-        issues.push("Not authenticated. Run: sl login");
-      } else {
-        issues.push(`API error: ${err.code}`);
-      }
-    } else {
-      issues.push(`Cannot reach API at ${apiUrl}`);
-    }
+  } catch {
+    issues.push(`Cannot reach ${apiUrl}/public/status`);
   }
   results.apiHealthy = apiHealthy;
-  let authOk = false;
-  let account = null;
-  try {
-    account = await getAccountProfile();
-    authOk = true;
-  } catch (err) {
-    if (err instanceof CliHttpError && err.code === "SESSION_EXPIRED") {
-      issues.push("Not authenticated. Run: sl login");
-    }
-  }
-  results.authOk = authOk;
-  results.account = account;
   if (jsonOutput) {
     console.log(JSON.stringify({ ...results, status: statusData, issues }, null, 2));
     return;
@@ -37517,28 +37600,18 @@ async function runHostedDoctor(jsonOutput) {
   console.log(blue("API"));
   console.log(`  ${apiHealthy ? green("✓") : red("✗")} ${apiHealthy ? green("reachable") : red("unreachable")}`);
   console.log("");
-  console.log(blue("Auth"));
-  if (authOk && account) {
-    console.log(`  ${green("✓")} Authenticated`);
-    console.log(formatKeyValue([
-      ["  Email", account.email ?? dim("unknown")],
-      ["  Plan", account.plan ?? dim("unknown")]
-    ]));
-  } else {
-    console.log(`  ${red("✗")} Not authenticated`);
-  }
-  console.log("");
   if (statusData) {
-    const progress = statusData.indexProgress;
-    if (progress?.length) {
-      console.log(blue("Index Progress"));
-      for (const p2 of progress) {
-        const behind = p2.highestSeenBlock - p2.lastIndexedBlock;
-        const behindStr = behind > 0 ? yellow(` (${behind} behind)`) : green(" (synced)");
-        console.log(`  ${p2.network}: block ${p2.lastIndexedBlock}${behindStr}`);
-      }
-      console.log("");
-    }
+    const tip = statusData.chainTip;
+    const streams = statusData.streams;
+    const index = statusData.index;
+    console.log(blue("Instance"));
+    if (typeof tip === "number")
+      console.log(`  tip: ${tip.toLocaleString()}`);
+    if (streams?.status)
+      console.log(`  streams: ${streams.status}`);
+    if (index?.status)
+      console.log(`  index: ${index.status}`);
+    console.log("");
   }
   console.log(blue("Issues"));
   if (issues.length === 0) {
@@ -39886,9 +39959,10 @@ registerContextCommand(program);
 registerVerifyCommand(program);
 registerRepairCommand(program);
 program.commandsGroup("Account:");
+registerCreditsCommand(program);
 registerAccountCommand(program);
 registerKeysCommand(program);
 program.parse();
 
-//# debugId=E414197C37677A7F64756E2164756E21
+//# debugId=F9D9C4C9412258E564756E2164756E21
 //# sourceMappingURL=cli.js.map