@secondlayer/cli 10.2.1 → 10.3.0

package/README.md

@@ -10,51 +10,27 @@ sl --version
 
 ## Auth
 
-Two ways to authenticate:
+Default API is `http://127.0.0.1:3800`. Override with `SL_API_URL`.
 
-- **Interactive (`sl login`)** — magic-link email → 6-digit code → session
-  written to `~/.secondlayer/session.json`. Used for day-to-day CLI work.
-- **Machine / CI** — set `SL_API_KEY` to an API key created in the platform
-  console at https://secondlayer.tools/platform/api-keys. Keys are prefixed
-  `sk-sl_`. For a persisted headless login: `echo "$SL_API_KEY" | sl login --with-token`.
+Writes against a published bind use `INSTANCE_TOKEN` from `sl init` as
+`SL_API_KEY`. Loopback reads need no token.
 
 ```bash
-# interactive
-sl login
-
-# machine / CI
-export SL_API_KEY=sk-sl_xxxxxxxx
+export SL_API_URL=http://127.0.0.1:3800
+export SL_API_KEY=<INSTANCE_TOKEN>
 ```
 
-`sl whoami` shows the active account, the effective API URL, and the credential
-source (and exits non-zero when not logged in). The global `--api-key` /
-`--api-url` flags (and `SL_API_KEY` / `SL_API_URL`) apply to every command.
-
-During open beta, reads are public (no key needed) — for subgraphs that means
-**public** subgraphs only (managed deploys default public; BYO deploys and all
-pre-existing subgraphs are private, readable with your key). Writes — deploying,
-publishing, or managing subgraphs and subscriptions — require a session or an
-`sk-sl_` key.
-
 ## Quickstart
 
 ```bash
 bun add -g @secondlayer/cli
-sl login
-sl projects create my-app
-sl projects use my-app
+sl init --network mainnet
+sl start --print
+# docker compose -f docker/oss/docker-compose.yml up -d
 
-# scaffold + deploy a subgraph from a deployed contract
 sl subgraphs scaffold SP1234ABCD.my-contract -o subgraphs/my-contract.ts
 sl subgraphs deploy subgraphs/my-contract.ts --start-block <recent-block>
 sl subgraphs query my-contract <table> --sort _block_height --order desc
-
-# wire a webhook receiver
-sl subscriptions create my-hook \
-  --runtime node \
-  --subgraph my-contract \
-  --table <table> \
-  --url https://<receiver-host>/webhook
 ```
 
 `sl subgraphs scaffold` writes the definition file, creates/updates
@@ -75,27 +51,6 @@ No account. Writes `.env.local`, restores history, prints the Stacks observer st
 | `sl verify [all\|raw\|decode:<name>\|subgraph:<name>] --against <manifest> [--quick\|--deep\|--anchor]` | Compare local data to a signed archive. Default target `raw`. Exit `0` clean, `1` diverged, `2` unanchored |
 | `sl repair --against <archive> [--apply]` | Plan (default) or apply an archive repair |
 
-### Auth & project
-
-| Command | What it does |
-|---|---|
-| `sl login` / `sl logout` | Start or revoke a session |
-| `sl whoami` | Print account, credential source, and active project |
-| `sl keys create --product streams [--name <name>]` | Mint a scoped `streams`/`index` read key; prints the `sk-sl_` key **once**. Needs an account key in `SL_API_KEY` |
-| `sl projects create [name]` | Create a project |
-| `sl projects list` | List projects |
-| `sl projects use <slug>` | Bind cwd to a project (writes `./.secondlayer/project`) |
-| `sl projects get` | Show resolved project + source file |
-| `sl projects delete <slug>` (alias `rm`) | Delete a project (`-y` to skip confirm) |
-
-Project binding is per-directory: `.secondlayer/project` in cwd takes
-precedence over `~/.secondlayer/config.json:defaultProject`. The walk-up stops
-at `.git`.
-
-**Key products:** an `account` key (dashboard default) grants both `streams:read`
-and `index:read` and is the only key that can mint; `streams`/`index` keys are
-scoped reads and cannot mint (403). Minted keys inherit your plan's tier.
-
 ### Subgraphs
 
 | Command | What it does |
@@ -153,19 +108,17 @@ deliveries/...) operates on both kinds.
 | Command | What it does |
 |---|---|
 | `sl contracts generate [files...]` (alias `gen`) | Generate TS interfaces from Clarity contracts |
-| `sl context` | Print a headless orientation snapshot — account, Streams + Index tips, your subgraphs, subscriptions, and in-flight reindex operations. CLI counterpart to the MCP `secondlayer://context` resource |
+| `sl context` | Instance snapshot — Streams + Index tips, subgraphs, subscriptions |
 | `sl doctor` / `sl status` | Reachability + health checks |
-| `sl account get` / `sl account update` | Show or update display name / bio / slug |
-| `sl account billing` | Show plan, subscription, trial, discounts |
 | `sl config get/set/reset/delete` | Inspect or reset local config |
 
 ## Environment variables
 
 | Var | Purpose |
 |---|---|
-| `SL_API_KEY` | An `sk-sl_` API key (or session token) for machine/CI use; bypasses platform resolution |
-| `SL_API_URL` | Point at an OSS or internal API directly, bypassing the platform |
-| `SL_PLATFORM_API_URL` | Override the platform API base (default `https://api.secondlayer.tools`) |
+| `SL_API_KEY` | `INSTANCE_TOKEN` from `sl init` for writes. Loopback reads need no token |
+| `SL_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
+| `SL_PLATFORM_API_URL` | Alias of `SL_API_URL` |
 | `STACKS_NETWORK` | Default network (also via `--network <local\|testnet\|mainnet>`) |
 | `HIRO_API_KEY` | Used by `sl contracts generate` for remote contract fetches |
 

package/dist/cli.js

@@ -2580,7 +2580,7 @@ function isOssMode() {
     return true;
   }
 }
-var LOCAL_API_URL = "http://127.0.0.1:3800";
+var LOCAL_API_URL = "http://127.0.0.1:3800", ARCHIVE_OPS_API_URL = "https://api.secondlayer.tools";
 var init_resolve_auth = __esm(() => {
   init_session();
 });
@@ -2629,9 +2629,28 @@ async function httpPlatform(path2, opts = {}) {
 async function httpPlatformAnon(path2, opts = {}) {
   return request(`${resolveApiUrl()}${path2}`, opts);
 }
+function resolveArchiveOpsUrl() {
+  return (process.env.SL_CREDITS_API_URL ?? ARCHIVE_OPS_API_URL).replace(/\/+$/, "");
+}
+async function httpArchiveOpsAnon(path2, opts = {}) {
+  return request(`${resolveArchiveOpsUrl()}${path2}`, opts);
+}
+async function httpArchiveOps(path2, opts = {}) {
+  const envKey = resolveEnvKey();
+  const session = envKey ? null : await readSession();
+  const bearer = envKey ?? session?.token;
+  if (!bearer) {
+    throw new CliHttpError(401, "SESSION_EXPIRED", { error: "Not logged in" }, "Not logged in — run `SL_API_URL=https://api.secondlayer.tools sl login`");
+  }
+  return request(`${resolveArchiveOpsUrl()}${path2}`, {
+    ...opts,
+    bearer
+  });
+}
 var CliHttpError, REQUEST_TIMEOUT_MS = 30000;
 var init_http = __esm(() => {
   init_resolve_auth();
+  init_session();
   CliHttpError = class CliHttpError extends Error {
     status;
     code;
@@ -34787,7 +34806,7 @@ init_esm();
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "10.2.1",
+  version: "10.3.0",
   repository: {
     type: "git",
     url: "git+https://github.com/ryanwaits/secondlayer.git",
@@ -34831,7 +34850,7 @@ var package_default = {
     "@secondlayer/bundler": "^0.5.0",
     "@secondlayer/scaffold": "^1.5.1",
     "@secondlayer/sdk": "^6.54.0",
-    "@secondlayer/shared": "^7.11.0",
+    "@secondlayer/shared": "^7.11.1",
     "@secondlayer/stacks": "^3.3.1",
     "@secondlayer/subgraphs": "^3.26.4",
     esbuild: "^0.27.4",
@@ -34874,15 +34893,13 @@ async function runBillingStatus(json) {
   output({ json, data: res, human: () => renderBillingStatus(res) });
 }
 function addBillingCommand(parent) {
-  parent.command("billing").description("Show your plan, Stripe subscription, trial, and discounts").option("--json", "Output as JSON").action((options) => runBillingStatus(options.json));
+  parent.command("billing").description("Show archive credit balance (hidden; use sl credits)").option("--json", "Output as JSON").action((options) => runBillingStatus(options.json));
 }
 function renderBillingStatus(res) {
   if (!res.subscription) {
     console.log(formatKeyValue([
-      ["Plan", "Free"],
-      ["Reads", dim("10 req/s · last ~24h window")],
-      ["Subgraphs", dim("upgrade to deploy / go private")],
-      ["Upgrade", dim("https://secondlayer.tools/platform/billing")]
+      ["Credits", dim("sl credits balance")],
+      ["Buy", dim("sl credits buy --email you@example.com --pack 25")]
     ]));
     return;
   }
@@ -34980,6 +34997,115 @@ function registerAccountCommand(program2) {
     action: "update profile"
   }));
 }
+// src/commands/credits.ts
+init_http();
+init_output();
+var PACKS = [10, 25, 50, 100];
+function parsePack(raw) {
+  const n = Number(raw);
+  if (!PACKS.includes(n)) {
+    error(`--pack must be one of ${PACKS.join(", ")}`);
+    process.exit(1);
+  }
+  return n;
+}
+async function runBuy(opts) {
+  const email = opts.email.trim().toLowerCase();
+  if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+    error("--email must be a valid address");
+    process.exit(1);
+  }
+  const amount = parsePack(opts.pack);
+  let res;
+  try {
+    res = await httpArchiveOpsAnon("/api/public/credits/checkout", { method: "POST", body: { email, amount } });
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  output({
+    json: opts.json,
+    data: res,
+    human: () => {
+      success(`Checkout for $${amount} → ${email}`);
+      console.log(res.url);
+      console.log(dim("After payment: SL_API_URL=https://api.secondlayer.tools sl login && sl credits balance"));
+    }
+  });
+}
+async function runBalance(opts) {
+  let res;
+  try {
+    res = await httpArchiveOps("/api/billing/status");
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  const micros = BigInt(res.creditsUsdMicros ?? "0");
+  const usd = Number(micros) / 1e6;
+  output({
+    json: opts.json,
+    data: { creditsUsd: usd, creditsUsdMicros: micros.toString() },
+    human: () => {
+      const refill = res.refill;
+      console.log(formatKeyValue([
+        ["Balance", `$${usd.toFixed(2)}`],
+        [
+          "Refill",
+          refill?.belowUsd != null ? `on — below $${refill.belowUsd} buy $${refill.packUsd}` : dim("off")
+        ],
+        ["Buy", dim("sl credits buy --email you@example.com --pack 25")]
+      ]));
+    }
+  });
+}
+function registerCreditsCommand(program2) {
+  const credits = program2.command("credits").description("Buy and check archive credits");
+  credits.command("buy").description("Open a one-time Stripe checkout for archive credits").requiredOption("--email <email>", "Receipt email; becomes the account").option("--pack <usd>", `One of ${PACKS.join(", ")}`, "25").option("--json", "Output as JSON").action((opts) => runBuy(opts));
+  credits.command("balance").description("Show prepaid archive credit balance").option("--json", "Output as JSON").action((opts) => runBalance(opts));
+  credits.command("refill").description("Opt-in auto-refill when the balance drops under a threshold").option("--below <usd>", "Trigger when balance is under this USD amount").option("--pack <usd>", `Pack to buy (${PACKS.join(", ")})`, "25").option("--off", "Turn auto-refill off").option("--json", "Output as JSON").action((opts) => runRefill(opts));
+}
+async function runRefill(opts) {
+  if (!opts.off && opts.below === undefined) {
+    await runBalance(opts);
+    return;
+  }
+  const body = opts.off ? { belowUsd: null } : { belowUsd: Number(opts.below), packUsd: parsePack(opts.pack) };
+  if (!opts.off && (!Number.isFinite(body.belowUsd) || (body.belowUsd ?? 0) < 1)) {
+    error("--below must be at least 1");
+    process.exit(1);
+  }
+  let res;
+  try {
+    res = await httpArchiveOps("/api/billing/refill", {
+      method: "POST",
+      body
+    });
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  output({
+    json: opts.json,
+    data: res,
+    human: () => {
+      if (res.belowUsd == null) {
+        success("Auto-refill off");
+        return;
+      }
+      success(`Auto-refill on — below $${res.belowUsd} buy $${res.packUsd}`);
+    }
+  });
+}
 
 // src/commands/index.ts
 init_codegen();
@@ -39833,9 +39959,10 @@ registerContextCommand(program);
 registerVerifyCommand(program);
 registerRepairCommand(program);
 program.commandsGroup("Account:");
+registerCreditsCommand(program);
 registerAccountCommand(program);
 registerKeysCommand(program);
 program.parse();
 
-//# debugId=60FAFC7C2FFCA95764756E2164756E21
+//# debugId=F9D9C4C9412258E564756E2164756E21
 //# sourceMappingURL=cli.js.map