@secondlayer/cli 10.2.1 → 10.3.1

package/README.md

@@ -10,51 +10,27 @@ sl --version
 
 ## Auth
 
-Two ways to authenticate:
+Default API is `http://127.0.0.1:3800`. Override with `SL_API_URL`.
 
-- **Interactive (`sl login`)** — magic-link email → 6-digit code → session
-  written to `~/.secondlayer/session.json`. Used for day-to-day CLI work.
-- **Machine / CI** — set `SL_API_KEY` to an API key created in the platform
-  console at https://secondlayer.tools/platform/api-keys. Keys are prefixed
-  `sk-sl_`. For a persisted headless login: `echo "$SL_API_KEY" | sl login --with-token`.
+Writes against a published bind use `INSTANCE_TOKEN` from `sl init` as
+`SL_API_KEY`. Loopback reads need no token.
 
 ```bash
-# interactive
-sl login
-
-# machine / CI
-export SL_API_KEY=sk-sl_xxxxxxxx
+export SL_API_URL=http://127.0.0.1:3800
+export SL_API_KEY=<INSTANCE_TOKEN>
 ```
 
-`sl whoami` shows the active account, the effective API URL, and the credential
-source (and exits non-zero when not logged in). The global `--api-key` /
-`--api-url` flags (and `SL_API_KEY` / `SL_API_URL`) apply to every command.
-
-During open beta, reads are public (no key needed) — for subgraphs that means
-**public** subgraphs only (managed deploys default public; BYO deploys and all
-pre-existing subgraphs are private, readable with your key). Writes — deploying,
-publishing, or managing subgraphs and subscriptions — require a session or an
-`sk-sl_` key.
-
 ## Quickstart
 
 ```bash
 bun add -g @secondlayer/cli
-sl login
-sl projects create my-app
-sl projects use my-app
+sl init --network mainnet
+sl start --print
+# docker compose -f docker/oss/docker-compose.yml up -d
 
-# scaffold + deploy a subgraph from a deployed contract
 sl subgraphs scaffold SP1234ABCD.my-contract -o subgraphs/my-contract.ts
 sl subgraphs deploy subgraphs/my-contract.ts --start-block <recent-block>
 sl subgraphs query my-contract <table> --sort _block_height --order desc
-
-# wire a webhook receiver
-sl subscriptions create my-hook \
-  --runtime node \
-  --subgraph my-contract \
-  --table <table> \
-  --url https://<receiver-host>/webhook
 ```
 
 `sl subgraphs scaffold` writes the definition file, creates/updates
@@ -75,27 +51,6 @@ No account. Writes `.env.local`, restores history, prints the Stacks observer st
 | `sl verify [all\|raw\|decode:<name>\|subgraph:<name>] --against <manifest> [--quick\|--deep\|--anchor]` | Compare local data to a signed archive. Default target `raw`. Exit `0` clean, `1` diverged, `2` unanchored |
 | `sl repair --against <archive> [--apply]` | Plan (default) or apply an archive repair |
 
-### Auth & project
-
-| Command | What it does |
-|---|---|
-| `sl login` / `sl logout` | Start or revoke a session |
-| `sl whoami` | Print account, credential source, and active project |
-| `sl keys create --product streams [--name <name>]` | Mint a scoped `streams`/`index` read key; prints the `sk-sl_` key **once**. Needs an account key in `SL_API_KEY` |
-| `sl projects create [name]` | Create a project |
-| `sl projects list` | List projects |
-| `sl projects use <slug>` | Bind cwd to a project (writes `./.secondlayer/project`) |
-| `sl projects get` | Show resolved project + source file |
-| `sl projects delete <slug>` (alias `rm`) | Delete a project (`-y` to skip confirm) |
-
-Project binding is per-directory: `.secondlayer/project` in cwd takes
-precedence over `~/.secondlayer/config.json:defaultProject`. The walk-up stops
-at `.git`.
-
-**Key products:** an `account` key (dashboard default) grants both `streams:read`
-and `index:read` and is the only key that can mint; `streams`/`index` keys are
-scoped reads and cannot mint (403). Minted keys inherit your plan's tier.
-
 ### Subgraphs
 
 | Command | What it does |
@@ -126,7 +81,8 @@ Reads emit JSON to stdout (`--json` accepted across all read commands); `-o/--ou
 
 | Command | What it does |
 |---|---|
-| `sl subscriptions create <name> --runtime <inngest\|trigger\|cloudflare\|node> [--auth-token <token>] [--filter key=value]` | Scaffold a receiver wired to a new subscription |
+| `sl subscriptions create <name> --subgraph <name> --table <name> [--runtime <inngest\|trigger\|cloudflare\|node>] [--url <url>]` | Subgraph subscription (optional local receiver scaffold) |
+| `sl subscriptions create <name> --url <url> --trigger '<json>'` | Chain subscription (repeat `--trigger` or pass `--triggers-file`) |
 | `sl subscriptions list` / `get <id\|name>` | List or show config + delivery state |
 | `sl subscriptions update <id\|name> --url <url> [--filter key.gte=value]` | Patch URL, filter, format, retry, etc. |
 | `sl subscriptions pause/resume <id\|name>` | Stop or restart delivery |
@@ -140,32 +96,28 @@ Read/action commands support `--json`. Destructive commands prompt unless
 `-y` / `--yes`. Filters are schema-aware: unknown tables/columns, bad operators,
 and non-scalar columns are rejected before the API call.
 
-Subscriptions are polymorphic — **subgraph** (fires on a subgraph table's rows)
-or **chain** (fires on raw chain events with no subgraph). `sl subscriptions
-create` makes subgraph subscriptions only (via the `--subgraph`/`--table`
-flags). Create chain subscriptions — a webhook on a contract / event / function /
-trait — via the SDK, REST, or MCP with a `triggers` array. Every other
-`sl subscriptions` command (list/get/update/pause/resume/delete/doctor/test/
-deliveries/...) operates on both kinds.
+Subscriptions are **subgraph** (a table's rows) or **chain** (raw events, no
+subgraph). `sl subscriptions create` with `--subgraph`/`--table` makes the
+first. Pass `--trigger` or `--triggers-file` for the second. SDK, REST, and
+MCP take the same `triggers` array. Every other `sl subscriptions` command
+operates on both kinds.
 
 ### Other
 
 | Command | What it does |
 |---|---|
 | `sl contracts generate [files...]` (alias `gen`) | Generate TS interfaces from Clarity contracts |
-| `sl context` | Print a headless orientation snapshot — account, Streams + Index tips, your subgraphs, subscriptions, and in-flight reindex operations. CLI counterpart to the MCP `secondlayer://context` resource |
+| `sl context` | Instance snapshot — Streams + Index tips, subgraphs, subscriptions |
 | `sl doctor` / `sl status` | Reachability + health checks |
-| `sl account get` / `sl account update` | Show or update display name / bio / slug |
-| `sl account billing` | Show plan, subscription, trial, discounts |
 | `sl config get/set/reset/delete` | Inspect or reset local config |
 
 ## Environment variables
 
 | Var | Purpose |
 |---|---|
-| `SL_API_KEY` | An `sk-sl_` API key (or session token) for machine/CI use; bypasses platform resolution |
-| `SL_API_URL` | Point at an OSS or internal API directly, bypassing the platform |
-| `SL_PLATFORM_API_URL` | Override the platform API base (default `https://api.secondlayer.tools`) |
+| `SL_API_KEY` | `INSTANCE_TOKEN` from `sl init` for writes. Loopback reads need no token |
+| `SL_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
+| `SL_PLATFORM_API_URL` | Alias of `SL_API_URL` |
 | `STACKS_NETWORK` | Default network (also via `--network <local\|testnet\|mainnet>`) |
 | `HIRO_API_KEY` | Used by `sl contracts generate` for remote contract fetches |
 

package/dist/cli.js

@@ -2580,7 +2580,7 @@ function isOssMode() {
     return true;
   }
 }
-var LOCAL_API_URL = "http://127.0.0.1:3800";
+var LOCAL_API_URL = "http://127.0.0.1:3800", ARCHIVE_OPS_API_URL = "https://api.secondlayer.tools";
 var init_resolve_auth = __esm(() => {
   init_session();
 });
@@ -2629,9 +2629,28 @@ async function httpPlatform(path2, opts = {}) {
 async function httpPlatformAnon(path2, opts = {}) {
   return request(`${resolveApiUrl()}${path2}`, opts);
 }
+function resolveArchiveOpsUrl() {
+  return (process.env.SL_CREDITS_API_URL ?? ARCHIVE_OPS_API_URL).replace(/\/+$/, "");
+}
+async function httpArchiveOpsAnon(path2, opts = {}) {
+  return request(`${resolveArchiveOpsUrl()}${path2}`, opts);
+}
+async function httpArchiveOps(path2, opts = {}) {
+  const envKey = resolveEnvKey();
+  const session = envKey ? null : await readSession();
+  const bearer = envKey ?? session?.token;
+  if (!bearer) {
+    throw new CliHttpError(401, "SESSION_EXPIRED", { error: "Not logged in" }, "Not logged in — run `SL_API_URL=https://api.secondlayer.tools sl login`");
+  }
+  return request(`${resolveArchiveOpsUrl()}${path2}`, {
+    ...opts,
+    bearer
+  });
+}
 var CliHttpError, REQUEST_TIMEOUT_MS = 30000;
 var init_http = __esm(() => {
   init_resolve_auth();
+  init_session();
   CliHttpError = class CliHttpError extends Error {
     status;
     code;
@@ -29315,21 +29334,6 @@ var init_subgraph = __esm(() => {
   };
 });
 
-// src/utils/urls.ts
-function deriveBaseUrl(apiUrl) {
-  const override = process.env.SL_DASHBOARD_URL?.trim();
-  if (override)
-    return override.replace(/\/$/, "");
-  try {
-    const url = new URL(apiUrl);
-    url.hostname = url.hostname.replace(/^api\./, "");
-    url.pathname = "/";
-    return url.toString().replace(/\/$/, "");
-  } catch {
-    return apiUrl.replace(/\/$/, "");
-  }
-}
-
 // src/commands/subgraph-test.ts
 var exports_subgraph_test = {};
 __export(exports_subgraph_test, {
@@ -30265,10 +30269,8 @@ Stopped watching.`);
         const printDeployFooter = async () => {
           try {
             const { apiUrl } = await resolveAuth();
-            const baseUrl = deriveBaseUrl(apiUrl);
             const firstTable = Object.keys(effectiveDef.schema ?? {})[0];
             const isPublic = result.visibility === "public";
-            info(`  Dashboard: ${baseUrl}/platform/subgraphs/${effectiveDef.name}`);
             if (isPublic && firstTable) {
               info(`  Read:      ${apiUrl}/v1/subgraphs/${effectiveDef.name}/${firstTable}`);
               info(`  Share:     ${apiUrl}/v1/subgraphs/${effectiveDef.name} (public — no key needed)`);
@@ -34787,7 +34789,7 @@ init_esm();
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "10.2.1",
+  version: "10.3.1",
   repository: {
     type: "git",
     url: "git+https://github.com/ryanwaits/secondlayer.git",
@@ -34830,8 +34832,8 @@ var package_default = {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.5.0",
     "@secondlayer/scaffold": "^1.5.1",
-    "@secondlayer/sdk": "^6.54.0",
-    "@secondlayer/shared": "^7.11.0",
+    "@secondlayer/sdk": "^6.54.1",
+    "@secondlayer/shared": "^7.11.1",
     "@secondlayer/stacks": "^3.3.1",
     "@secondlayer/subgraphs": "^3.26.4",
     esbuild: "^0.27.4",
@@ -34874,15 +34876,13 @@ async function runBillingStatus(json) {
   output({ json, data: res, human: () => renderBillingStatus(res) });
 }
 function addBillingCommand(parent) {
-  parent.command("billing").description("Show your plan, Stripe subscription, trial, and discounts").option("--json", "Output as JSON").action((options) => runBillingStatus(options.json));
+  parent.command("billing").description("Show archive credit balance (hidden; use sl credits)").option("--json", "Output as JSON").action((options) => runBillingStatus(options.json));
 }
 function renderBillingStatus(res) {
   if (!res.subscription) {
     console.log(formatKeyValue([
-      ["Plan", "Free"],
-      ["Reads", dim("10 req/s · last ~24h window")],
-      ["Subgraphs", dim("upgrade to deploy / go private")],
-      ["Upgrade", dim("https://secondlayer.tools/platform/billing")]
+      ["Credits", dim("sl credits balance")],
+      ["Buy", dim("sl credits buy --email you@example.com --pack 25")]
     ]));
     return;
   }
@@ -34980,6 +34980,115 @@ function registerAccountCommand(program2) {
     action: "update profile"
   }));
 }
+// src/commands/credits.ts
+init_http();
+init_output();
+var PACKS = [10, 25, 50, 100];
+function parsePack(raw) {
+  const n = Number(raw);
+  if (!PACKS.includes(n)) {
+    error(`--pack must be one of ${PACKS.join(", ")}`);
+    process.exit(1);
+  }
+  return n;
+}
+async function runBuy(opts) {
+  const email = opts.email.trim().toLowerCase();
+  if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+    error("--email must be a valid address");
+    process.exit(1);
+  }
+  const amount = parsePack(opts.pack);
+  let res;
+  try {
+    res = await httpArchiveOpsAnon("/api/public/credits/checkout", { method: "POST", body: { email, amount } });
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  output({
+    json: opts.json,
+    data: res,
+    human: () => {
+      success(`Checkout for $${amount} → ${email}`);
+      console.log(res.url);
+      console.log(dim("After payment: SL_API_URL=https://api.secondlayer.tools sl login && sl credits balance"));
+    }
+  });
+}
+async function runBalance(opts) {
+  let res;
+  try {
+    res = await httpArchiveOps("/api/billing/status");
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  const micros = BigInt(res.creditsUsdMicros ?? "0");
+  const usd = Number(micros) / 1e6;
+  output({
+    json: opts.json,
+    data: { creditsUsd: usd, creditsUsdMicros: micros.toString() },
+    human: () => {
+      const refill = res.refill;
+      console.log(formatKeyValue([
+        ["Balance", `$${usd.toFixed(2)}`],
+        [
+          "Refill",
+          refill?.belowUsd != null ? `on — below $${refill.belowUsd} buy $${refill.packUsd}` : dim("off")
+        ],
+        ["Buy", dim("sl credits buy --email you@example.com --pack 25")]
+      ]));
+    }
+  });
+}
+function registerCreditsCommand(program2) {
+  const credits = program2.command("credits").description("Buy and check archive credits");
+  credits.command("buy").description("Open a one-time Stripe checkout for archive credits").requiredOption("--email <email>", "Receipt email; becomes the account").option("--pack <usd>", `One of ${PACKS.join(", ")}`, "25").option("--json", "Output as JSON").action((opts) => runBuy(opts));
+  credits.command("balance").description("Show prepaid archive credit balance").option("--json", "Output as JSON").action((opts) => runBalance(opts));
+  credits.command("refill").description("Opt-in auto-refill when the balance drops under a threshold").option("--below <usd>", "Trigger when balance is under this USD amount").option("--pack <usd>", `Pack to buy (${PACKS.join(", ")})`, "25").option("--off", "Turn auto-refill off").option("--json", "Output as JSON").action((opts) => runRefill(opts));
+}
+async function runRefill(opts) {
+  if (!opts.off && opts.below === undefined) {
+    await runBalance(opts);
+    return;
+  }
+  const body = opts.off ? { belowUsd: null } : { belowUsd: Number(opts.below), packUsd: parsePack(opts.pack) };
+  if (!opts.off && (!Number.isFinite(body.belowUsd) || (body.belowUsd ?? 0) < 1)) {
+    error("--below must be at least 1");
+    process.exit(1);
+  }
+  let res;
+  try {
+    res = await httpArchiveOps("/api/billing/refill", {
+      method: "POST",
+      body
+    });
+  } catch (err) {
+    if (err instanceof CliHttpError) {
+      error(err.message);
+      process.exit(1);
+    }
+    throw err;
+  }
+  output({
+    json: opts.json,
+    data: res,
+    human: () => {
+      if (res.belowUsd == null) {
+        success("Auto-refill off");
+        return;
+      }
+      success(`Auto-refill on — below $${res.belowUsd} buy $${res.packUsd}`);
+    }
+  });
+}
 
 // src/commands/index.ts
 init_codegen();
@@ -35676,17 +35785,15 @@ async function createSubscription(name, opts) {
     } catch (err) {
       provisioningFailed = true;
       warn(`Subscription provisioning failed: ${err instanceof Error ? err.message : String(err)}`);
-      info("Template copied, but the subscription was not created. Provision it in the dashboard, or remove the template directory and rerun this command after fixing the API error.");
+      info("Template copied, but the subscription was not created. Fix the API error, remove the template directory, and rerun.");
     }
   }
-  let subscriptionId;
   let subscriptionStatus;
   if (sl) {
     try {
       const list = await sl.subscriptions.list();
       const rows = list.data ?? [];
       const created = rows.find((s2) => s2.name === name);
-      subscriptionId = created?.id;
       subscriptionStatus = created?.status;
     } catch {}
   }
@@ -35714,14 +35821,6 @@ SIGNING_SECRET=${signingSecret}
     error("Subscription was not created.");
     process.exit(1);
   }
-  let dashboardLine = "";
-  try {
-    const { apiUrl } = await resolveAuth();
-    const base2 = deriveBaseUrl(apiUrl);
-    dashboardLine = subscriptionId ? `Dashboard: ${base2}/platform/subgraphs/${subgraph}/subscriptions/${subscriptionId}
-  ` : `Dashboard: ${base2}/platform/subgraphs/${subgraph}/subscriptions
-  `;
-  } catch {}
   const pausedLine = subscriptionStatus === "paused" ? `Subscription is paused. Resume:
   sl subscriptions resume ${name}
   ` : "";
@@ -35730,7 +35829,7 @@ SIGNING_SECRET=${signingSecret}
   bun install
   bun run dev`;
   success(`Done. Next:
-  ${dashboardLine}${pausedLine}${runHint}`);
+  ${pausedLine}${runHint}`);
 }
 async function createChainSubscription(name, opts) {
   for (const [flag, value] of [
@@ -35775,16 +35874,9 @@ async function createChainSubscription(name, opts) {
     process.exit(1);
   }
   info(`Signing secret (store securely): ${signingSecret}`);
-  let dashboardLine = "";
-  try {
-    const { apiUrl } = await resolveAuth();
-    const base2 = deriveBaseUrl(apiUrl);
-    dashboardLine = `Dashboard: ${base2}/platform/subscriptions/${subscriptionId}
-  `;
-  } catch {}
   console.log();
   success(`Done. Next:
-  ${dashboardLine}View deliveries:
+  View deliveries:
   sl subscriptions get ${name}`);
 }
 async function getSubscriptionClient() {
@@ -39833,9 +39925,10 @@ registerContextCommand(program);
 registerVerifyCommand(program);
 registerRepairCommand(program);
 program.commandsGroup("Account:");
+registerCreditsCommand(program);
 registerAccountCommand(program);
 registerKeysCommand(program);
 program.parse();
 
-//# debugId=60FAFC7C2FFCA95764756E2164756E21
+//# debugId=71DA8EB190B9ACCF64756E2164756E21
 //# sourceMappingURL=cli.js.map