@secondlayer/cli 16.4.0 → 17.0.1

package/README.md

@@ -12,14 +12,14 @@ secondlayer --version
 
 ## Auth
 
-Default API is `http://127.0.0.1:3800`. Override with `SL_API_URL`.
+Default API is `http://127.0.0.1:3800`. Override with `SECONDLAYER_API_URL`.
 
 Writes against a published bind use `INSTANCE_TOKEN` from `secondlayer init`.
 Loopback reads need no token. Hosted API and archive credits use
 `SECONDLAYER_API_KEY` (`sk-sl_*`).
 
 ```bash
-export SL_API_URL=http://127.0.0.1:3800
+export SECONDLAYER_API_URL=http://127.0.0.1:3800
 export INSTANCE_TOKEN=<from secondlayer init>
 ```
 
@@ -190,9 +190,9 @@ operates on both kinds.
 | Var | Purpose |
 |---|---|
 | `INSTANCE_TOKEN` | From `secondlayer init` for writes. Loopback reads need no token |
-| `SECONDLAYER_API_KEY` | Hosted account key (`sk-sl_*`). `SL_API_KEY` is a one-release hosted fallback |
-| `SL_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
-| `SL_PLATFORM_API_URL` | Alias of `SL_API_URL` |
+| `SECONDLAYER_API_KEY` | Hosted account key (`sk-sl_*`) |
+| `SECONDLAYER_API_URL` | Instance API. Default `http://127.0.0.1:3800` |
+| `SL_PLATFORM_API_URL` | Alias of `SECONDLAYER_API_URL` |
 | `STACKS_NETWORK` | Default network (also via `--network <mainnet\|testnet\|devnet>`) |
 | `DATABASE_URL` | Postgres that `bootstrap`, `verify`, `repair`, and `backup` connect to. `secondlayer setup` writes it into `.env` pointing at the compose Postgres; unset, the shared dev URL `postgres://postgres:postgres@localhost:5432/secondlayer_dev` is used |
 | `HIRO_API_KEY` | Used by `secondlayer codegen contracts` for remote contract fetches |

package/dist/cli.js

@@ -2143,7 +2143,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
 
 // src/lib/api-url.ts
 function resolveApiUrl() {
-  return (process.env.SECONDLAYER_API_URL ?? process.env.SL_API_URL ?? process.env.SL_PLATFORM_API_URL ?? LOCAL_API_URL).replace(/\/+$/, "");
+  return (process.env.SECONDLAYER_API_URL ?? process.env.SL_PLATFORM_API_URL ?? LOCAL_API_URL).replace(/\/+$/, "");
 }
 function resolveArchiveOpsUrl() {
   return (process.env.SL_CREDITS_API_URL ?? ARCHIVE_OPS_API_URL).replace(/\/+$/, "");
@@ -2258,7 +2258,6 @@ function resolveEnvKey() {
 function applyApiKeyFlag(apiKey) {
   if (/^s[ks]-sl_/.test(apiKey)) {
     process.env.SECONDLAYER_API_KEY = apiKey;
-    process.env.SL_API_KEY = apiKey;
   } else {
     process.env.INSTANCE_TOKEN = apiKey;
   }
@@ -198407,13 +198406,13 @@ function indexReadFailure(err, ctx) {
     const credential = resolveApiKey3() ? "INSTANCE_TOKEN is set in this shell" : "no INSTANCE_TOKEN is set in this shell";
     return {
       message: `Index read rejected (HTTP ${status}) while ${where}.`,
-      hint: `${credential}. This read uses the same SL_API_URL + INSTANCE_TOKEN pair as \`secondlayer subgraphs deploy\` — confirm both point at the instance you deployed to (\`secondlayer status\`), then retry. ${offlineHint}`
+      hint: `${credential}. This read uses the same SECONDLAYER_API_URL + INSTANCE_TOKEN pair as \`secondlayer subgraphs deploy\` — confirm both point at the instance you deployed to (\`secondlayer status\`), then retry. ${offlineHint}`
     };
   }
   if (status === 404) {
     return {
       message: `Index read returned 404 while ${where}.`,
-      hint: `${ctx.apiUrl} answered but serves no /v1/index/events — check SL_API_URL points at a Secondlayer instance, not a Stacks node.`
+      hint: `${ctx.apiUrl} answered but serves no /v1/index/events — check SECONDLAYER_API_URL points at a Secondlayer instance, not a Stacks node.`
     };
   }
   if (status === 429) {
@@ -202496,7 +202495,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "16.4.0",
+  version: "17.0.1",
   description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
@@ -202535,8 +202534,8 @@ var package_default = {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.6.1",
     "@secondlayer/scaffold": "^1.6.1",
-    "@secondlayer/sdk": "^11.0.0",
-    "@secondlayer/shared": "^11.8.1",
+    "@secondlayer/sdk": "^12.1.0",
+    "@secondlayer/shared": "^11.10.1",
     "@secondlayer/stacks": "^6.1.0",
     "@secondlayer/subgraphs": "^6.1.0",
     esbuild: "^0.28.2",
@@ -204802,6 +204801,7 @@ init_api_client();
 init_filter_params();
 init_output();
 init_resolve_auth();
+import { buildDoctorReport, isSuccessDelivery } from "@secondlayer/sdk";
 import { sign } from "@secondlayer/shared/crypto/standard-webhooks";
 
 // src/lib/webhook-validation.ts
@@ -205180,9 +205180,6 @@ function truncate(value, max = 48) {
 function formatMaybeDate(value) {
   return value ? value.replace("T", " ").slice(0, 19) : dim("-");
 }
-function isSuccessDelivery(row) {
-  return row.statusCode !== null && row.statusCode >= 200 && row.statusCode < 300;
-}
 function printJson(value) {
   console.log(JSON.stringify(value, null, 2));
 }
@@ -205281,59 +205278,6 @@ Auth config:`));
     console.log(JSON.stringify(sub.authConfig, null, 2));
   }
 }
-function buildDoctorReport(input) {
-  const successful = input.deliveries.filter(isSuccessDelivery).length;
-  const failed = input.deliveries.length - successful;
-  const subgraph = input.subgraph ? {
-    name: input.subgraph.name,
-    status: input.subgraph.status,
-    syncStatus: input.subgraph.sync.status,
-    lastProcessedBlock: input.subgraph.sync.lastProcessedBlock,
-    chainTip: input.subgraph.sync.chainTip,
-    gapCount: input.subgraph.sync.gaps.count,
-    integrity: input.subgraph.sync.integrity
-  } : null;
-  const hints = [];
-  if (input.webhook.warning) {
-    hints.push(input.webhook.warning);
-  }
-  if (input.webhook.status === "paused") {
-    hints.push(`Resume when the receiver is healthy: secondlayer webhooks resume ${input.webhook.id}`);
-  }
-  if (input.webhook.lastError) {
-    hints.push("Run secondlayer webhooks test to reproduce the receiver request.");
-  }
-  if (input.webhook.circuitOpenedAt || input.webhook.circuitFailures > 0) {
-    hints.push("Circuit breaker has failures; inspect receiver logs and delivery status codes.");
-  }
-  if (input.dead.length > 0) {
-    hints.push(`Dead-letter rows exist; inspect with secondlayer webhooks dead ${input.webhook.id} and requeue selected rows.`);
-  }
-  if (subgraph?.gapCount && subgraph.gapCount > 0) {
-    hints.push(`Linked subgraph has gaps; run secondlayer subgraphs gaps ${input.webhook.subgraphName}.`);
-  }
-  if (subgraph?.syncStatus === "catching_up") {
-    hints.push("Linked subgraph is still catching up; new matching rows may arrive later.");
-  }
-  if (input.deliveries.length === 0) {
-    hints.push("No deliveries yet; confirm the table is receiving inserted rows that match the filter.");
-  }
-  if (hints.length === 0) {
-    hints.push("No immediate action needed.");
-  }
-  return {
-    webhook: input.webhook,
-    deliverySummary: {
-      total: input.deliveries.length,
-      successful,
-      failed,
-      last: input.deliveries[0] ?? null
-    },
-    deadCount: input.dead.length,
-    subgraph,
-    hints
-  };
-}
 function printDoctorReport(report) {
   const sub = report.webhook;
   console.log(formatKeyValue([
@@ -206164,7 +206108,7 @@ function dockerCompose(composePath, args) {
   });
   return res.status ?? 1;
 }
-var API_URL = process.env.SL_API_URL ?? "http://localhost:3800";
+var API_URL = resolveApiUrl();
 var INDEXER_URL = process.env.INDEXER_URL ?? "http://localhost:3700";
 var SERVICES = [
   "indexer",
@@ -206241,7 +206185,7 @@ ${bold("Secondlayer stack up")}`);
   console.log(`
 ${bold("Next:")}`);
   console.log(`  ${yellow("clarinet devnet start")}   ${dim("# auto-deploys + streams to the indexer")}`);
-  console.log(`  ${yellow(`SL_API_URL=http://localhost:3800 INSTANCE_TOKEN=${DEV_INSTANCE_TOKEN} secondlayer subgraphs deploy ./subgraph.ts`)}`);
+  console.log(`  ${yellow(`SECONDLAYER_API_URL=http://localhost:3800 INSTANCE_TOKEN=${DEV_INSTANCE_TOKEN} secondlayer subgraphs deploy ./subgraph.ts`)}`);
   console.log(dim(`
 The api is published on 127.0.0.1 only: /v1 reads need no credential.
 Writes (deploys, webhooks) send INSTANCE_TOKEN=${DEV_INSTANCE_TOKEN}.`));
@@ -206940,7 +206884,7 @@ async function runInstanceDoctor(jsonOutput) {
       detail: unreachableError ?? undefined,
       nextSteps: [
         "Start the instance from docker/oss: docker compose up -d",
-        `If it runs elsewhere, point the CLI at it: SL_API_URL=<url> (currently ${apiUrl})`
+        `If it runs elsewhere, point the CLI at it: SECONDLAYER_API_URL=<url> (currently ${apiUrl})`
       ]
     }
   ];
@@ -207432,14 +207376,12 @@ function readEnvValue(envPath, key) {
   return match ? unescapeEnvValue(match[1]) : null;
 }
 function buildInstanceEnv(input) {
-  const existingAlias = input.existing?.SL_API_KEY;
-  const aliasIsHex = existingAlias && !existingAlias.startsWith("sk-sl_") && !existingAlias.startsWith("ss-sl_");
-  const token = input.existing?.INSTANCE_TOKEN || (aliasIsHex ? existingAlias : undefined) || generateInstanceToken();
+  const token = input.existing?.INSTANCE_TOKEN || generateInstanceToken();
   const secrets = input.existing?.SECONDLAYER_SECRETS_KEY || generateSecretsKey();
   const signing = input.existing?.STREAMS_SIGNING_PRIVATE_KEY || input.existing?.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY || generateSigningPrivateKey();
-  const apiUrl = input.existing?.SECONDLAYER_API_URL || input.existing?.SL_API_URL || input.apiUrl || "http://127.0.0.1:3800";
+  const apiUrl = input.existing?.SECONDLAYER_API_URL || input.apiUrl || "http://127.0.0.1:3800";
   const archiveKey = input.existing?.ARCHIVE_SIGNING_PUBLIC_KEY || input.archivePublicKeyPem || ARCHIVE_ROOT_PUBLIC_KEY_PEM;
-  const hostedCandidate = input.existing?.SECONDLAYER_API_KEY || input.existing?.SL_API_KEY || undefined;
+  const hostedCandidate = input.existing?.SECONDLAYER_API_KEY || undefined;
   const hostedKey = hostedCandidate && isHostedAccountKey(hostedCandidate) ? hostedCandidate : undefined;
   return {
     INSTANCE_MODE: "oss",
@@ -207450,8 +207392,7 @@ function buildInstanceEnv(input) {
     SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY: signing,
     ALLOW_UNSIGNED_WEBHOOKS: "false",
     SECONDLAYER_API_URL: apiUrl,
-    SL_API_URL: apiUrl,
-    ...hostedKey ? { SECONDLAYER_API_KEY: hostedKey, SL_API_KEY: hostedKey } : {},
+    ...hostedKey ? { SECONDLAYER_API_KEY: hostedKey } : {},
     ARCHIVE_SIGNING_PUBLIC_KEY: archiveKey
   };
 }
@@ -207467,11 +207408,10 @@ function renderInstanceEnv(env) {
     `STREAMS_SIGNING_PRIVATE_KEY=${escapeEnvValue(env.STREAMS_SIGNING_PRIVATE_KEY)}`,
     `SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY=${escapeEnvValue(env.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY)}`,
     `ALLOW_UNSIGNED_WEBHOOKS=${env.ALLOW_UNSIGNED_WEBHOOKS}`,
-    `SECONDLAYER_API_URL=${env.SECONDLAYER_API_URL}`,
-    `SL_API_URL=${env.SL_API_URL}`
+    `SECONDLAYER_API_URL=${env.SECONDLAYER_API_URL}`
   ];
   if (env.SECONDLAYER_API_KEY) {
-    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${env.SECONDLAYER_API_KEY}`, `SL_API_KEY=${env.SL_API_KEY ?? env.SECONDLAYER_API_KEY}`);
+    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${env.SECONDLAYER_API_KEY}`);
   }
   lines.push("# Archive trust root: bootstrap, verify, and repair check manifests", "# against this key. Replace it to pin a different archive.", `ARCHIVE_SIGNING_PUBLIC_KEY=${escapeEnvValue(env.ARCHIVE_SIGNING_PUBLIC_KEY)}`, "");
   return lines.join(`
@@ -207490,9 +207430,7 @@ function loadExistingInstanceEnv(cwd, file = INSTANCE_ENV_FILE) {
     STREAMS_SIGNING_PRIVATE_KEY: readEnvValue(path, "STREAMS_SIGNING_PRIVATE_KEY"),
     SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY: readEnvValue(path, "SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY"),
     SECONDLAYER_API_URL: readEnvValue(path, "SECONDLAYER_API_URL"),
-    SL_API_URL: readEnvValue(path, "SL_API_URL"),
     SECONDLAYER_API_KEY: readEnvValue(path, "SECONDLAYER_API_KEY"),
-    SL_API_KEY: readEnvValue(path, "SL_API_KEY"),
     ARCHIVE_SIGNING_PUBLIC_KEY: readEnvValue(path, "ARCHIVE_SIGNING_PUBLIC_KEY")
   };
 }
@@ -207653,7 +207591,7 @@ var SECRET_ENV_KEYS = [
   "SECONDLAYER_SECRETS_KEY",
   "STREAMS_SIGNING_PRIVATE_KEY",
   "SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY",
-  "SL_API_KEY",
+  "SECONDLAYER_API_KEY",
   "ARCHIVE_SIGNING_PUBLIC_KEY"
 ];
 function readSecretsKey() {
@@ -207955,7 +207893,7 @@ flags (see \`secondlayer --help\`). Defaults: mainnet, http://127.0.0.1:3800.
     const env = buildInstanceEnv({
       network,
       existing,
-      apiUrl: process.env.SL_API_URL ?? DEFAULT_INIT_API_URL,
+      apiUrl: process.env.SECONDLAYER_API_URL ?? DEFAULT_INIT_API_URL,
       archivePublicKeyPem: await resolveArchivePublicKey({
         envPem: process.env.ARCHIVE_SIGNING_PUBLIC_KEY ?? process.env.STREAMS_SIGNING_PUBLIC_KEY,
         allowHostedApi: !isOssMode()
@@ -207965,7 +207903,7 @@ flags (see \`secondlayer --help\`). Defaults: mainnet, http://127.0.0.1:3800.
     success(`Wrote ${INSTANCE_ENV_FILE}`);
     note(formatKeyValue([
       ["network", env.STACKS_NETWORK],
-      ["api", env.SL_API_URL],
+      ["api", env.SECONDLAYER_API_URL],
       ["env", path]
     ]));
     note("Export these or pass --env-file to compose. Do not commit the file.");
@@ -208343,9 +208281,7 @@ function resolveSecrets(config) {
       STREAMS_SIGNING_PRIVATE_KEY: existing.STREAMS_SIGNING_PRIVATE_KEY,
       SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY: existing.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY,
       SECONDLAYER_API_URL: existing.SECONDLAYER_API_URL,
-      SL_API_URL: existing.SL_API_URL,
       SECONDLAYER_API_KEY: existing.SECONDLAYER_API_KEY,
-      SL_API_KEY: existing.SL_API_KEY,
       ARCHIVE_SIGNING_PUBLIC_KEY: existing.ARCHIVE_SIGNING_PUBLIC_KEY
     },
     apiUrl: `http://${normalizeLoopbackHost(config.apiPort)}`,
@@ -208414,11 +208350,10 @@ function renderSetupEnv(config, secrets) {
     `STREAMS_SIGNING_PRIVATE_KEY=${escapeEnvValue(i.STREAMS_SIGNING_PRIVATE_KEY)}`,
     `SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY=${escapeEnvValue(i.SECONDLAYER_WEBHOOK_SIGNING_PRIVATE_KEY)}`,
     `ALLOW_UNSIGNED_WEBHOOKS=${i.ALLOW_UNSIGNED_WEBHOOKS}`,
-    `SECONDLAYER_API_URL=${i.SECONDLAYER_API_URL}`,
-    `SL_API_URL=${i.SL_API_URL}`
+    `SECONDLAYER_API_URL=${i.SECONDLAYER_API_URL}`
   ];
   if (i.SECONDLAYER_API_KEY) {
-    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${i.SECONDLAYER_API_KEY}`, `SL_API_KEY=${i.SL_API_KEY ?? i.SECONDLAYER_API_KEY}`);
+    lines.push("# Hosted account key for archive credits (sk-sl_*).", `SECONDLAYER_API_KEY=${i.SECONDLAYER_API_KEY}`);
   }
   lines.push("# Archive trust root: bootstrap, verify, and repair check manifests", "# against this key. Replace it to pin a different archive.", `ARCHIVE_SIGNING_PUBLIC_KEY=${escapeEnvValue(i.ARCHIVE_SIGNING_PUBLIC_KEY)}`);
   if (config.nodeMode === "full") {
@@ -208537,7 +208472,7 @@ function cliEntry() {
 var CHILD_ENV_KEYS = [
   "DATABASE_URL",
   "ARCHIVE_SIGNING_PUBLIC_KEY",
-  "SL_API_URL",
+  "SECONDLAYER_API_URL",
   "INSTANCE_TOKEN"
 ];
 function buildChildEnv(envPath, base = process.env) {
@@ -209023,7 +208958,6 @@ program.hook("preAction", (thisCommand) => {
     applyApiKeyFlag(apiKey);
   if (apiUrl) {
     process.env.SECONDLAYER_API_URL = apiUrl;
-    process.env.SL_API_URL = apiUrl;
   }
 });
 program.addHelpText("after", `
@@ -209069,5 +209003,5 @@ registerCreditsCommand(program);
 registerArchiveCommand(program);
 program.parse();
 
-//# debugId=92A36ED6CC78319F64756E2164756E21
+//# debugId=AE6E7533FECA57AE64756E2164756E21
 //# sourceMappingURL=cli.js.map