@secondlayer/cli 17.0.1 → 17.0.2

package/README.md

@@ -23,6 +23,22 @@ export SECONDLAYER_API_URL=http://127.0.0.1:3800
 export INSTANCE_TOKEN=<from secondlayer init>
 ```
 
+### Hosted commands (`webhooks`, `subgraphs`) — credential resolution order
+
+Against `api.secondlayer.tools`, `resolveHostedAuth()` tries these in order —
+the first one set wins:
+
+| Order | Source | Notes |
+|---|---|---|
+| 1 | `SECONDLAYER_API_KEY` (`sk-sl_*`) | Hosted account key |
+| 2 | `INSTANCE_TOKEN` / `--api-key` | Rarely set on the merchant host |
+| 3 | Saved session, `~/.secondlayer/session.json` | Written by `secondlayer login`, scoped per API URL, 0600 |
+| — | none of the above | Fails: `Not logged in — run secondlayer login` |
+
+A shell with no `SECONDLAYER_API_KEY` exported can still authenticate against
+the merchant host if this machine ran `secondlayer login` at some point — that's
+#3, a real (if easy to forget) credential, not a bug.
+
 ## Quickstart
 
 ```bash

package/dist/cli.js

@@ -202495,7 +202495,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "17.0.1",
+  version: "17.0.2",
   description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
@@ -202535,9 +202535,9 @@ var package_default = {
     "@secondlayer/bundler": "^0.6.1",
     "@secondlayer/scaffold": "^1.6.1",
     "@secondlayer/sdk": "^12.1.0",
-    "@secondlayer/shared": "^11.10.1",
+    "@secondlayer/shared": "^11.12.3",
     "@secondlayer/stacks": "^6.1.0",
-    "@secondlayer/subgraphs": "^6.1.0",
+    "@secondlayer/subgraphs": "^6.2.5",
     esbuild: "^0.28.2",
     "smol-toml": "^1.8.0",
     zod: "^4.3.6"
@@ -205248,12 +205248,19 @@ function buildWebhookUpdatePatch(options) {
   }
   return patch;
 }
+function formatWebhookTarget(sub) {
+  if (sub.kind === "chain") {
+    const types = sub.triggers?.map((t) => t.type);
+    return types && types.length > 0 ? `chain.${types.join(",")}` : "chain";
+  }
+  return `${sub.subgraphName}.${sub.tableName}`;
+}
 function printWebhookDetail(sub) {
   console.log(formatKeyValue([
     ["ID", sub.id],
     ["Name", sub.name],
     ["Status", sub.status],
-    ["Target", `${sub.subgraphName}.${sub.tableName}`],
+    ["Target", formatWebhookTarget(sub)],
     ["Format", sub.format],
     ["Runtime", sub.runtime ?? "none"],
     ["URL", sub.url],
@@ -205283,7 +205290,7 @@ function printDoctorReport(report) {
   console.log(formatKeyValue([
     ["Webhook", `${sub.name} (${sub.id})`],
     ["Status", sub.status],
-    ["Target", `${sub.subgraphName}.${sub.tableName}`],
+    ["Target", formatWebhookTarget(sub)],
     ["Format", sub.format],
     ["Runtime", sub.runtime ?? "none"],
     ["URL", sub.url],
@@ -205475,7 +205482,7 @@ function attachWebhookSubcommands(parent) {
         sub.name,
         sub.id,
         sub.status === "active" ? green(sub.status) : sub.status === "paused" ? yellow(sub.status) : redStatus(sub.status),
-        `${sub.subgraphName}.${sub.tableName}`,
+        formatWebhookTarget(sub),
         sub.format,
         formatMaybeDate(sub.lastSuccessAt)
       ])));
@@ -209003,5 +209010,5 @@ registerCreditsCommand(program);
 registerArchiveCommand(program);
 program.parse();
 
-//# debugId=AE6E7533FECA57AE64756E2164756E21
+//# debugId=3879CF2E258096FC64756E2164756E21
 //# sourceMappingURL=cli.js.map