@secondlayer/cli 12.0.0 → 12.1.0

package/README.md

@@ -181,8 +181,8 @@ const supply = await token.vars.totalSupply.get()
 ## Frozen commands
 
 Local-dev periphery: still functional, hidden from `secondlayer --help`, no further
-investment — may be removed in a future major. The hosted dev loop
-(`secondlayer subgraphs create/deploy`) is the supported path.
+investment — may be removed in a future major. `secondlayer subgraphs
+create/deploy` against your own instance is the supported path.
 
 - `secondlayer local up/down/start/stop/restart/status/logs` — local stack + dev services
 - `secondlayer local node ...` — local Stacks node management

package/dist/cli.js

@@ -34320,14 +34320,14 @@ init_esm();
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "12.0.0",
+  version: "12.1.0",
+  description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
     url: "git+https://github.com/ryanwaits/secondlayer.git",
     directory: "packages/cli"
   },
   homepage: "https://github.com/ryanwaits/secondlayer/tree/main/packages/cli#readme",
-  description: "CLI for subgraphs and blockchain indexing on Stacks",
   type: "module",
   bin: {
     secondlayer: "./dist/cli.js",
@@ -34363,10 +34363,10 @@ var package_default = {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.5.1",
     "@secondlayer/scaffold": "^1.5.4",
-    "@secondlayer/sdk": "^8.0.0",
-    "@secondlayer/shared": "^9.0.0",
+    "@secondlayer/sdk": "^8.0.1",
+    "@secondlayer/shared": "^10.0.0",
     "@secondlayer/stacks": "^4.0.0",
-    "@secondlayer/subgraphs": "^4.0.1",
+    "@secondlayer/subgraphs": "^4.0.2",
     esbuild: "^0.27.4",
     "smol-toml": "^1.6.1",
     zod: "^4.3.6"
@@ -39006,19 +39006,91 @@ Exit codes:
 function registerBootstrapCommand(program2) {
   attachBootstrapCommand(program2.command("bootstrap").description("Restore chain history from a verified archive instead of syncing from genesis"));
 }
+// src/commands/uninstall.ts
+init_output();
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "node:fs";
+import { join as join17, resolve as resolve13 } from "node:path";
+import { planUninstall, uninstallCommand } from "@secondlayer/shared/runtime";
+var UNINSTALL_EXIT = { OK: 0, FAILED: 1, REFUSED: 2 };
+var DEFAULT_COMPOSE = "docker/oss/docker-compose.yml";
+function bundleHasKeys(bundleDir) {
+  const manifest = join17(bundleDir, "manifest.json");
+  if (!existsSync8(manifest))
+    return false;
+  try {
+    const parsed = JSON.parse(readFileSync7(manifest, "utf8"));
+    return parsed.secrets != null;
+  } catch {
+    return false;
+  }
+}
+function registerUninstallCommand(program2) {
+  program2.command("uninstall").description("Stop the stack; the index, chainstate, and keys survive").option("--compose <file>", "compose file to tear down", DEFAULT_COMPOSE).option("--purge", "also destroy the volumes (wipes the index)").option("--yes", "confirm a purge").option("--backup <dir>", "a bundle proving the keys exist elsewhere (required to purge)").option("--apply", "actually run it (default is a dry run)").option("--json", "Output as JSON").action(async (opts) => {
+    const dataDir = process.env.DATA_DIR ?? "./data";
+    const secretsPresent = !!process.env.SECONDLAYER_SECRETS_KEY || existsSync8(resolve13(process.cwd(), ".env.local"));
+    const keysBackedUp = opts.backup ? bundleHasKeys(resolve13(opts.backup)) : false;
+    const decision = planUninstall({
+      purge: opts.purge === true,
+      confirmed: opts.yes === true,
+      keysBackedUp,
+      secretsPresent,
+      dataDir
+    });
+    if (!decision.ok) {
+      printError(decision.reason);
+      process.exit(UNINSTALL_EXIT.REFUSED);
+    }
+    const cmd = uninstallCommand(decision.plan, opts.compose);
+    if (!opts.apply) {
+      output({
+        json: opts.json,
+        data: { dryRun: true, plan: decision.plan, command: cmd },
+        human: () => {
+          note("dry run — nothing removed. Pass --apply to proceed.");
+          note(`would run: docker ${cmd.join(" ")}`);
+          for (const p2 of decision.plan.preserves) {
+            note(`preserved · ${p2.what}: ${p2.detail}`);
+          }
+          for (const d2 of decision.plan.destroys) {
+            warn(`DESTROYED · volume ${d2}`);
+          }
+        }
+      });
+      return;
+    }
+    const res = spawnSync3("docker", cmd, { stdio: "inherit" });
+    if ((res.status ?? 1) !== 0) {
+      printError(`docker ${cmd.join(" ")} exited ${res.status}`);
+      process.exit(UNINSTALL_EXIT.FAILED);
+    }
+    output({
+      json: opts.json,
+      data: { removed: true, plan: decision.plan },
+      human: () => {
+        success("stack removed");
+        for (const w2 of decision.warnings)
+          warn(w2);
+        for (const p2 of decision.plan.preserves) {
+          note(`preserved · ${p2.what}: ${p2.detail}`);
+        }
+      }
+    });
+  });
+}
 // src/commands/backup.ts
 init_output();
 import { createHash as createHash4 } from "node:crypto";
 import {
   chmodSync,
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   mkdirSync as mkdirSync6,
-  readFileSync as readFileSync7,
+  readFileSync as readFileSync8,
   statSync as statSync3,
   writeFileSync as writeFileSync7
 } from "node:fs";
-import { join as join17, resolve as resolve13 } from "node:path";
-import { getDb as getDb5, sql as sql4 } from "@secondlayer/shared/db";
+import { join as join18, resolve as resolve14 } from "node:path";
+import { closeDb, getDb as getDb5, sql as sql4 } from "@secondlayer/shared/db";
 import {
   decryptBundle,
   encryptBundle,
@@ -39044,7 +39116,7 @@ function readSecretsKey() {
   return key ? key : undefined;
 }
 function sha256File(path11) {
-  return createHash4("sha256").update(readFileSync7(path11)).digest("hex");
+  return createHash4("sha256").update(readFileSync8(path11)).digest("hex");
 }
 async function readScope() {
   const db = getDb5();
@@ -39076,6 +39148,7 @@ function attachBackupCommand(cmd) {
   return cmd.requiredOption("--out <dir>", "directory to write the bundle into").option("--passphrase <passphrase>", "encrypt bundled secrets (or set SECONDLAYER_BACKUP_PASSPHRASE)").option("--no-secrets", "omit keys; the bundle restores data only").option("--json", "Output as JSON").action(async (opts) => {
     try {
       await runBackup(opts);
+      await closeDb();
     } catch (error2) {
       printError(error2 instanceof Error ? error2.message : String(error2));
       process.exit(BACKUP_EXIT.FAILED);
@@ -39104,10 +39177,10 @@ async function runBackup(opts) {
     printError(plan.reason);
     process.exit(BACKUP_EXIT.REFUSED);
   }
-  const outDir = resolve13(opts.out);
+  const outDir = resolve14(opts.out);
   mkdirSync6(outDir, { recursive: true });
   console.error("dumping database…");
-  const dumpPath = join17(outDir, DB_FILE);
+  const dumpPath = join18(outDir, DB_FILE);
   const dump = await runProcess(["pg_dump", "-Fc", "--no-owner", "--no-acl", "-f", dumpPath, databaseUrl], "pg_dump");
   if (!dump.ok) {
     printError(dump.stderr);
@@ -39126,7 +39199,7 @@ async function runBackup(opts) {
     const lines2 = SECRET_ENV_KEYS.filter((k2) => process.env[k2]).map((k2) => `${k2}=${process.env[k2]}`);
     const sealed = encryptBundle(lines2.join(`
 `), passphrase);
-    const secretsPath = join17(outDir, SECRETS_FILE);
+    const secretsPath = join18(outDir, SECRETS_FILE);
     writeFileSync7(secretsPath, sealed);
     chmodSync(secretsPath, 384);
     manifest.secrets = {
@@ -39135,7 +39208,7 @@ async function runBackup(opts) {
       canary: sealKeyCanary(secretsKey)
     };
   }
-  writeFileSync7(join17(outDir, MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
+  writeFileSync7(join18(outDir, MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
 `);
   output({
     json: opts.json,
@@ -39155,6 +39228,7 @@ function attachRestoreCommand(cmd) {
   return cmd.requiredOption("--from <dir>", "bundle directory to restore from").option("--passphrase <passphrase>", "decrypt bundled secrets (or set SECONDLAYER_BACKUP_PASSPHRASE)").option("--apply", "actually restore (default is a dry run)").option("--force", "restore over a database that already holds chain data").option("--json", "Output as JSON").action(async (opts) => {
     try {
       await runRestore(opts);
+      await closeDb();
     } catch (error2) {
       printError(error2 instanceof Error ? error2.message : String(error2));
       process.exit(BACKUP_EXIT.FAILED);
@@ -39163,14 +39237,14 @@ function attachRestoreCommand(cmd) {
 }
 async function runRestore(opts) {
   const databaseUrl = requireDatabaseUrl();
-  const dir = resolve13(opts.from);
-  const manifestPath = join17(dir, MANIFEST_FILE);
-  if (!existsSync8(manifestPath)) {
+  const dir = resolve14(opts.from);
+  const manifestPath = join18(dir, MANIFEST_FILE);
+  if (!existsSync9(manifestPath)) {
     printError(`no ${MANIFEST_FILE} in ${dir}`);
     process.exit(BACKUP_EXIT.REFUSED);
   }
-  const manifest = JSON.parse(readFileSync7(manifestPath, "utf8"));
-  const dumpPath = join17(dir, manifest.db?.file ?? DB_FILE);
+  const manifest = JSON.parse(readFileSync8(manifestPath, "utf8"));
+  const dumpPath = join18(dir, manifest.db?.file ?? DB_FILE);
   if (manifest.db && sha256File(dumpPath) !== manifest.db.sha256) {
     printError("the database dump does not match the digest in the manifest; this bundle is corrupt or truncated");
     process.exit(BACKUP_EXIT.REFUSED);
@@ -39184,7 +39258,7 @@ async function runRestore(opts) {
       process.exit(BACKUP_EXIT.REFUSED);
     }
     try {
-      const env2 = decryptBundle(readFileSync7(join17(dir, manifest.secrets.file)), passphrase);
+      const env2 = decryptBundle(readFileSync8(join18(dir, manifest.secrets.file)), passphrase);
       bundleKey = env2.split(`
 `).find((l2) => l2.startsWith("SECONDLAYER_SECRETS_KEY="))?.slice("SECONDLAYER_SECRETS_KEY=".length).trim();
     } catch {
@@ -39263,8 +39337,8 @@ function registerRestoreCommand(program2) {
 }
 // src/lib/instance-init.ts
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync8 } from "node:fs";
-import { resolve as resolve14 } from "node:path";
+import { existsSync as existsSync10, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "node:fs";
+import { resolve as resolve15 } from "node:path";
 import { generateEd25519KeyPair } from "@secondlayer/shared/crypto/ed25519";
 import { INSTANCE_NETWORKS } from "@secondlayer/shared/db/queries/instance";
 var INSTANCE_ENV_FILE = ".env.local";
@@ -39298,9 +39372,9 @@ function unescapeEnvValue(raw) {
 `).replace(/\\"/g, '"').replace(/\\\\/g, "\\");
 }
 function readEnvValue(envPath, key) {
-  if (!existsSync9(envPath))
+  if (!existsSync10(envPath))
     return null;
-  const match = readFileSync8(envPath, "utf8").match(new RegExp(`^${key}=(.*)$`, "m"));
+  const match = readFileSync9(envPath, "utf8").match(new RegExp(`^${key}=(.*)$`, "m"));
   return match ? unescapeEnvValue(match[1]) : null;
 }
 function buildInstanceEnv(input4) {
@@ -39343,12 +39417,12 @@ function renderInstanceEnv(env2) {
 `);
 }
 function writeInstanceEnv(cwd, env2, file = INSTANCE_ENV_FILE) {
-  const path11 = resolve14(cwd, file);
+  const path11 = resolve15(cwd, file);
   writeFileSync8(path11, renderInstanceEnv(env2), { mode: 384 });
   return path11;
 }
 function loadExistingInstanceEnv(cwd, file = INSTANCE_ENV_FILE) {
-  const path11 = resolve14(cwd, file);
+  const path11 = resolve15(cwd, file);
   return {
     INSTANCE_TOKEN: readEnvValue(path11, "INSTANCE_TOKEN"),
     SECONDLAYER_SECRETS_KEY: readEnvValue(path11, "SECONDLAYER_SECRETS_KEY"),
@@ -39502,7 +39576,7 @@ function registerStartCommand(program2) {
 }
 // src/cli.ts
 var { version } = package_default;
-program.name("secondlayer").alias("sl").description("Secondlayer CLI — self-hosted Stacks data runtime").version(version).option("--network <network>", "Override network (local, testnet, mainnet)").option("--api-key <key>", "API credential (overrides SL_API_KEY)").option("--api-url <url>", "API endpoint (overrides SL_API_URL)").showSuggestionAfterError(true).showHelpAfterError("(run `secondlayer --help` to see available commands)");
+program.name("secondlayer").alias("sl").description("Secondlayer CLI — run a Stacks index on your own hardware").version(version).option("--network <network>", "Override network (local, testnet, mainnet)").option("--api-key <key>", "API credential (overrides SL_API_KEY)").option("--api-url <url>", "API endpoint (overrides SL_API_URL)").showSuggestionAfterError(true).showHelpAfterError("(run `secondlayer --help` to see available commands)");
 program.hook("preAction", (thisCommand) => {
   const { network, apiKey, apiUrl } = thisCommand.opts();
   if (network)
@@ -39516,7 +39590,7 @@ program.addHelpText("after", `
 Quickstart:
   $ secondlayer init --network mainnet
   $ secondlayer bootstrap --against <manifest>
-  $ secondlayer subgraphs create my-watcher --template sip-010-balances
+  $ secondlayer subgraphs create my-watcher --from-contract SP....my-contract
   $ secondlayer subgraphs deploy subgraphs/my-watcher.ts
 `);
 program.commandsGroup("Getting started:");
@@ -39528,7 +39602,7 @@ registerConsoleCommand(program);
 registerLoginCommand(program);
 registerLogoutCommand(program);
 registerWhoamiCommand(program);
-program.commandsGroup("Data products:");
+program.commandsGroup("Your data:");
 registerSubgraphsCommand(program);
 registerSubscriptionsCommand(program);
 registerStreamsCommand(program);
@@ -39560,9 +39634,10 @@ registerVerifyCommand(program);
 registerRepairCommand(program);
 registerBackupCommand(program);
 registerRestoreCommand(program);
-program.commandsGroup("Account:");
+registerUninstallCommand(program);
+program.commandsGroup("Archive:");
 registerCreditsCommand(program);
 program.parse();
 
-//# debugId=D0F621CCA5D6F2E664756E2164756E21
+//# debugId=135579D3DFB23FDC64756E2164756E21
 //# sourceMappingURL=cli.js.map