@secondlayer/cli 16.4.0 → 17.0.0

package/README.md

@@ -12,14 +12,14 @@ secondlayer --version
 
 ## Auth
 
-Default API is `http://127.0.0.1:3800`. Override with `SL_API_URL`.
+Default API is `http://127.0.0.1:3800`. Override with `SECONDLAYER_API_URL`.
 
 Writes against a published bind use `INSTANCE_TOKEN` from `secondlayer init`.
 Loopback reads need no token. Hosted API and archive credits use
 `SECONDLAYER_API_KEY` (`sk-sl_*`).
 
 ```bash
-export SL_API_URL=http://127.0.0.1:3800
+export SECONDLAYER_API_URL=http://127.0.0.1:3800
 export INSTANCE_TOKEN=<from secondlayer init>
 ```
 
@@ -190,9 +190,9 @@ operates on both kinds.
 | Var | Purpose |
 |---|---|
 | `INSTANCE_TOKEN` | From `secondlayer init` for writes. Loopback reads need no token |
-| `SECONDLAYER_API_KEY` | Hosted account key (`sk-sl_*`). `SL_API_KEY` is a one-release hosted fallback |
-| `SL_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
-| `SL_PLATFORM_API_URL` | Alias of `SL_API_URL` |
+| `SECONDLAYER_API_KEY` | Hosted account key (`sk-sl_*`) |
+| `SECONDLAYER_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
+| `SL_PLATFORM_API_URL` | Alias of `SECONDLAYER_API_URL` |
 | `STACKS_NETWORK` | Default network (also via `--network <mainnet\|testnet\|devnet>`) |
 | `DATABASE_URL` | Postgres that `bootstrap`, `verify`, `repair`, and `backup` connect to. `secondlayer setup` writes it into `.env` pointing at the compose Postgres; unset, the shared dev URL `postgres://postgres:postgres@localhost:5432/secondlayer_dev` is used |
 | `HIRO_API_KEY` | Used by `secondlayer codegen contracts` for remote contract fetches |

package/dist/cli.js

@@ -2143,7 +2143,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
 
 // src/lib/api-url.ts
 function resolveApiUrl() {
-  return (process.env.SECONDLAYER_API_URL ?? process.env.SL_API_URL ?? process.env.SL_PLATFORM_API_URL ?? LOCAL_API_URL).replace(/\/+$/, "");
+  return (process.env.SECONDLAYER_API_URL ?? process.env.SL_PLATFORM_API_URL ?? LOCAL_API_URL).replace(/\/+$/, "");
 }
 function resolveArchiveOpsUrl() {
   return (process.env.SL_CREDITS_API_URL ?? ARCHIVE_OPS_API_URL).replace(/\/+$/, "");
@@ -2258,7 +2258,6 @@ function resolveEnvKey() {
 function applyApiKeyFlag(apiKey) {
   if (/^s[ks]-sl_/.test(apiKey)) {
     process.env.SECONDLAYER_API_KEY = apiKey;
-    process.env.SL_API_KEY = apiKey;
   } else {
     process.env.INSTANCE_TOKEN = apiKey;
   }
@@ -198407,13 +198406,13 @@ function indexReadFailure(err, ctx) {
     const credential = resolveApiKey3() ? "INSTANCE_TOKEN is set in this shell" : "no INSTANCE_TOKEN is set in this shell";
     return {
       message: `Index read rejected (HTTP ${status}) while ${where}.`,
-      hint: `${credential}. This read uses the same SL_API_URL + INSTANCE_TOKEN pair as \`secondlayer subgraphs deploy\` — confirm both point at the instance you deployed to (\`secondlayer status\`), then retry. ${offlineHint}`
+      hint: `${credential}. This read uses the same SECONDLAYER_API_URL + INSTANCE_TOKEN pair as \`secondlayer subgraphs deploy\` — confirm both point at the instance you deployed to (\`secondlayer status\`), then retry. ${offlineHint}`
     };
   }
   if (status === 404) {
     return {
       message: `Index read returned 404 while ${where}.`,
-      hint: `${ctx.apiUrl} answered but serves no /v1/index/events — check SL_API_URL points at a Secondlayer instance, not a Stacks node.`
+      hint: `${ctx.apiUrl} answered but serves no /v1/index/events — check SECONDLAYER_API_URL points at a Secondlayer instance, not a Stacks node.`
     };
   }
   if (status === 429) {
@@ -202496,7 +202495,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "16.4.0",
+  version: "17.0.0",
   description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
@@ -202535,8 +202534,8 @@ var package_default = {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.6.1",
     "@secondlayer/scaffold": "^1.6.1",
-    "@secondlayer/sdk": "^11.0.0",
-    "@secondlayer/shared": "^11.8.1",
+    "@secondlayer/sdk": "^12.0.0",
+    "@secondlayer/shared": "^11.10.1",
     "@secondlayer/stacks": "^6.1.0",
     "@secondlayer/subgraphs": "^6.1.0",
     esbuild: "^0.28.2",
@@ -206164,7 +206163,7 @@ function dockerCompose(composePath, args) {
   });
   return res.status ?? 1;
 }
-var API_URL = process.env.SL_API_URL ?? "http://localhost:3800";
+var API_URL = resolveApiUrl();
 var INDEXER_URL = process.env.INDEXER_URL ?? "http://localhost:3700";
 var SERVICES = [
   "indexer",
@@ -206241,7 +206240,7 @@ ${bold("Secondlayer stack up")}`);
   console.log(`
 ${bold("Next:")}`);
   console.log(`  ${yellow("clarinet devnet start")}   ${dim("# auto-deploys + streams to the indexer")}`);
-  console.log(`  ${yellow(`SL_API_URL=http://localhost:3800 INSTANCE_TOKEN=${DEV_INSTANCE_TOKEN} secondlayer subgraphs deploy ./subgraph.ts`)}`);
+  console.log(`  ${yellow(`SECONDLAYER_API_URL=http://localhost:3800 INSTANCE_TOKEN=${DEV_INSTANCE_TOKEN} secondlayer subgraphs deploy ./subgraph.ts`)}`);
   console.log(dim(`
 The api is published on 127.0.0.1 only: /v1 reads need no credential.
 Writes (deploys, webhooks) send INSTANCE_TOKEN=${DEV_INSTANCE_TOKEN}.`));
@@ -206940,7 +206939,7 @@ async function runInstanceDoctor(jsonOutput) {
       detail: unreachableError ?? undefined,
       nextSteps: [
         "Start the instance from docker/oss: docker compose up -d",
-        `If it runs elsewhere, point the CLI at it: SL_API_URL=<url> (currently ${apiUrl})`
+        `If it runs elsewhere, point the CLI at it: SECONDLAYER_API_URL=<url> (currently ${apiUrl})`
       ]
     }
   ];
@@ -207432,14 +207431,12 @@ function readEnvValue(envPath, key) {
   return match ? unescapeEnvValue(match[1]) : null;
 }
 function buildInstanceEnv(input) {
-  const existingAlias = input.existing?.SL_API_KEY;
-  const aliasIsHex = existingAlias && !existingAlias.startsWith("sk-sl_") && !existingAlias.startsWith("ss-sl_");
-  const token = input.existing?.INSTANCE_TOKEN || (aliasIsHex ? existingAlias : undefined) || generateInstanceToken();
+  const token = input.existing?.INSTANCE_TOKEN || generateInstanceToken();
   const secrets = input.existing?.SECONDLAYER_SECRETS_KEY || generateSecretsKey();
   const signing = input.existing?.STREAMS_SIGNING_PRIVATE_KEY || input.existing?.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY || generateSigningPrivateKey();
-  const apiUrl = input.existing?.SECONDLAYER_API_URL || input.existing?.SL_API_URL || input.apiUrl || "http://127.0.0.1:3800";
+  const apiUrl = input.existing?.SECONDLAYER_API_URL || input.apiUrl || "http://127.0.0.1:3800";
   const archiveKey = input.existing?.ARCHIVE_SIGNING_PUBLIC_KEY || input.archivePublicKeyPem || ARCHIVE_ROOT_PUBLIC_KEY_PEM;
-  const hostedCandidate = input.existing?.SECONDLAYER_API_KEY || input.existing?.SL_API_KEY || undefined;
+  const hostedCandidate = input.existing?.SECONDLAYER_API_KEY || undefined;
   const hostedKey = hostedCandidate && isHostedAccountKey(hostedCandidate) ? hostedCandidate : undefined;
   return {
     INSTANCE_MODE: "oss",
@@ -207450,8 +207447,7 @@ function buildInstanceEnv(input) {
     SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY: signing,
     ALLOW_UNSIGNED_WEBHOOKS: "false",
     SECONDLAYER_API_URL: apiUrl,
-    SL_API_URL: apiUrl,
-    ...hostedKey ? { SECONDLAYER_API_KEY: hostedKey, SL_API_KEY: hostedKey } : {},
+    ...hostedKey ? { SECONDLAYER_API_KEY: hostedKey } : {},
     ARCHIVE_SIGNING_PUBLIC_KEY: archiveKey
   };
 }
@@ -207467,11 +207463,10 @@ function renderInstanceEnv(env) {
     `STREAMS_SIGNING_PRIVATE_KEY=${escapeEnvValue(env.STREAMS_SIGNING_PRIVATE_KEY)}`,
     `SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY=${escapeEnvValue(env.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY)}`,
     `ALLOW_UNSIGNED_WEBHOOKS=${env.ALLOW_UNSIGNED_WEBHOOKS}`,
-    `SECONDLAYER_API_URL=${env.SECONDLAYER_API_URL}`,
-    `SL_API_URL=${env.SL_API_URL}`
+    `SECONDLAYER_API_URL=${env.SECONDLAYER_API_URL}`
   ];
   if (env.SECONDLAYER_API_KEY) {
-    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${env.SECONDLAYER_API_KEY}`, `SL_API_KEY=${env.SL_API_KEY ?? env.SECONDLAYER_API_KEY}`);
+    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${env.SECONDLAYER_API_KEY}`);
   }
   lines.push("# Archive trust root: bootstrap, verify, and repair check manifests", "# against this key. Replace it to pin a different archive.", `ARCHIVE_SIGNING_PUBLIC_KEY=${escapeEnvValue(env.ARCHIVE_SIGNING_PUBLIC_KEY)}`, "");
   return lines.join(`
@@ -207490,9 +207485,7 @@ function loadExistingInstanceEnv(cwd, file = INSTANCE_ENV_FILE) {
     STREAMS_SIGNING_PRIVATE_KEY: readEnvValue(path, "STREAMS_SIGNING_PRIVATE_KEY"),
     SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY: readEnvValue(path, "SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY"),
     SECONDLAYER_API_URL: readEnvValue(path, "SECONDLAYER_API_URL"),
-    SL_API_URL: readEnvValue(path, "SL_API_URL"),
     SECONDLAYER_API_KEY: readEnvValue(path, "SECONDLAYER_API_KEY"),
-    SL_API_KEY: readEnvValue(path, "SL_API_KEY"),
     ARCHIVE_SIGNING_PUBLIC_KEY: readEnvValue(path, "ARCHIVE_SIGNING_PUBLIC_KEY")
   };
 }
@@ -207653,7 +207646,7 @@ var SECRET_ENV_KEYS = [
   "SECONDLAYER_SECRETS_KEY",
   "STREAMS_SIGNING_PRIVATE_KEY",
   "SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY",
-  "SL_API_KEY",
+  "SECONDLAYER_API_KEY",
   "ARCHIVE_SIGNING_PUBLIC_KEY"
 ];
 function readSecretsKey() {
@@ -207955,7 +207948,7 @@ flags (see \`secondlayer --help\`). Defaults: mainnet, http://127.0.0.1:3800.
     const env = buildInstanceEnv({
       network,
       existing,
-      apiUrl: process.env.SL_API_URL ?? DEFAULT_INIT_API_URL,
+      apiUrl: process.env.SECONDLAYER_API_URL ?? DEFAULT_INIT_API_URL,
       archivePublicKeyPem: await resolveArchivePublicKey({
         envPem: process.env.ARCHIVE_SIGNING_PUBLIC_KEY ?? process.env.STREAMS_SIGNING_PUBLIC_KEY,
         allowHostedApi: !isOssMode()
@@ -207965,7 +207958,7 @@ flags (see \`secondlayer --help\`). Defaults: mainnet, http://127.0.0.1:3800.
     success(`Wrote ${INSTANCE_ENV_FILE}`);
     note(formatKeyValue([
       ["network", env.STACKS_NETWORK],
-      ["api", env.SL_API_URL],
+      ["api", env.SECONDLAYER_API_URL],
       ["env", path]
     ]));
     note("Export these or pass --env-file to compose. Do not commit the file.");
@@ -208343,9 +208336,7 @@ function resolveSecrets(config) {
       STREAMS_SIGNING_PRIVATE_KEY: existing.STREAMS_SIGNING_PRIVATE_KEY,
       SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY: existing.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY,
       SECONDLAYER_API_URL: existing.SECONDLAYER_API_URL,
-      SL_API_URL: existing.SL_API_URL,
       SECONDLAYER_API_KEY: existing.SECONDLAYER_API_KEY,
-      SL_API_KEY: existing.SL_API_KEY,
       ARCHIVE_SIGNING_PUBLIC_KEY: existing.ARCHIVE_SIGNING_PUBLIC_KEY
     },
     apiUrl: `http://${normalizeLoopbackHost(config.apiPort)}`,
@@ -208414,11 +208405,10 @@ function renderSetupEnv(config, secrets) {
     `STREAMS_SIGNING_PRIVATE_KEY=${escapeEnvValue(i.STREAMS_SIGNING_PRIVATE_KEY)}`,
     `SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY=${escapeEnvValue(i.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY)}`,
     `ALLOW_UNSIGNED_WEBHOOKS=${i.ALLOW_UNSIGNED_WEBHOOKS}`,
-    `SECONDLAYER_API_URL=${i.SECONDLAYER_API_URL}`,
-    `SL_API_URL=${i.SL_API_URL}`
+    `SECONDLAYER_API_URL=${i.SECONDLAYER_API_URL}`
   ];
   if (i.SECONDLAYER_API_KEY) {
-    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${i.SECONDLAYER_API_KEY}`, `SL_API_KEY=${i.SL_API_KEY ?? i.SECONDLAYER_API_KEY}`);
+    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${i.SECONDLAYER_API_KEY}`);
   }
   lines.push("# Archive trust root: bootstrap, verify, and repair check manifests", "# against this key. Replace it to pin a different archive.", `ARCHIVE_SIGNING_PUBLIC_KEY=${escapeEnvValue(i.ARCHIVE_SIGNING_PUBLIC_KEY)}`);
   if (config.nodeMode === "full") {
@@ -208537,7 +208527,7 @@ function cliEntry() {
 var CHILD_ENV_KEYS = [
   "DATABASE_URL",
   "ARCHIVE_SIGNING_PUBLIC_KEY",
-  "SL_API_URL",
+  "SECONDLAYER_API_URL",
   "INSTANCE_TOKEN"
 ];
 function buildChildEnv(envPath, base = process.env) {
@@ -209023,7 +209013,6 @@ program.hook("preAction", (thisCommand) => {
     applyApiKeyFlag(apiKey);
   if (apiUrl) {
     process.env.SECONDLAYER_API_URL = apiUrl;
-    process.env.SL_API_URL = apiUrl;
   }
 });
 program.addHelpText("after", `
@@ -209069,5 +209058,5 @@ registerCreditsCommand(program);
 registerArchiveCommand(program);
 program.parse();
 
-//# debugId=92A36ED6CC78319F64756E2164756E21
+//# debugId=51F0AC96395CA7BC64756E2164756E21
 //# sourceMappingURL=cli.js.map