@secondlayer/cli 19.4.3 → 20.0.1

package/dist/cli.js

@@ -29360,11 +29360,10 @@ function parseFilterArg(input) {
     return {
       field,
       operator,
-      value,
-      explicitOperator: true
+      value
     };
   }
-  return { field: key, operator: "eq", value, explicitOperator: false };
+  return { field: key, operator: "eq", value };
 }
 function parseFilterArgs(args) {
   return (args ?? []).map(parseFilterArg);
@@ -29377,25 +29376,6 @@ function parseQueryFilters(args) {
   }
   return Object.keys(filters).length > 0 ? filters : undefined;
 }
-function parseWebhookFilter(args) {
-  const filters = {};
-  const seenFields = new Set;
-  for (const filter of parseFilterArgs(args)) {
-    if (filter.operator === "like") {
-      throw new Error(`Webhook filters do not support ".like". Supported operators: ${FILTER_OPERATORS.join(", ")}.`);
-    }
-    if (seenFields.has(filter.field)) {
-      throw new Error(`Webhook filters support one condition per field; got multiple filters for "${filter.field}".`);
-    }
-    seenFields.add(filter.field);
-    if (!filter.explicitOperator || filter.operator === "eq") {
-      filters[filter.field] = filter.value;
-    } else {
-      filters[filter.field] = { [filter.operator]: filter.value };
-    }
-  }
-  return Object.keys(filters).length > 0 ? filters : undefined;
-}
 var FILTER_OPERATORS, QUERY_ONLY_OPERATORS, ALL_OPERATORS, ALL_OPERATOR_LABELS;
 var init_filter_params = __esm(() => {
   FILTER_OPERATORS = ["eq", "neq", "gt", "gte", "lt", "lte"];
@@ -29443,7 +29423,7 @@ var init_git_status = () => {};
 
 // ../../node_modules/typescript/lib/typescript.js
 var require_typescript = __commonJS(function(exports, module) {
-  var __dirname = "/Users/ryan/projects/secondlayer/.claude/worktrees/agent-af556fe64d015cdf5/node_modules/typescript/lib", __filename = "/Users/ryan/projects/secondlayer/.claude/worktrees/agent-af556fe64d015cdf5/node_modules/typescript/lib/typescript.js";
+  var __dirname = "/Users/ryan/projects/secondlayer/node_modules/typescript/lib", __filename = "/Users/ryan/projects/secondlayer/node_modules/typescript/lib/typescript.js";
   /*! *****************************************************************************
   Copyright (c) Microsoft Corporation. All rights reserved.
   Licensed under the Apache License, Version 2.0 (the "License"); you may not use
@@ -198809,11 +198789,6 @@ import {
   deriveVerification as deriveVerification2,
   isDeterminismViolation
 } from "@secondlayer/subgraphs/verification";
-function webhookHint(apiUrl, name, firstTable) {
-  if (!firstTable || isMerchantUrl(apiUrl))
-    return null;
-  return `secondlayer webhooks create ${name}-hook --subgraph ${name} --table ${firstTable} --url <your-endpoint>`;
-}
 async function loadSubgraphWithDepCheck(absPath) {
   try {
     return await import(absPath);
@@ -199604,9 +199579,6 @@ deploy does not backfill from genesis.`).action(async (file, options) => {
               info(`  Reindex:  ${denom} started in the background — check status in ~30s for an ETA`);
             }
             info(`  Watch:     secondlayer subgraphs status ${effectiveDef.name}`);
-            const hint = webhookHint(apiUrl, effectiveDef.name, firstTable);
-            if (hint)
-              info(`  Webhook:   ${hint}`);
           } catch {}
         };
         if (result.action === "unchanged") {
@@ -200273,7 +200245,6 @@ var init_subgraphs2 = __esm(() => {
   init_subgraphs();
   init_api_client();
   init_derive_abi();
-  init_api_url();
   init_config2();
   init_filter_params();
   init_fs();
@@ -202507,7 +202478,7 @@ var init_src = __esm(() => {
 
 // src/lib/dev-state.ts
 import { homedir as homedir4 } from "node:os";
-import { join as join13 } from "node:path";
+import { join as join12 } from "node:path";
 function getLogsDir() {
   return LOGS_DIR;
 }
@@ -202532,9 +202503,9 @@ function isProcessRunning(pid) {
 }
 var STATE_DIR, DEV_STATE_PATH, LOGS_DIR;
 var init_dev_state = __esm(() => {
-  STATE_DIR = join13(homedir4(), ".secondlayer");
-  DEV_STATE_PATH = join13(STATE_DIR, "dev.json");
-  LOGS_DIR = join13(STATE_DIR, "logs");
+  STATE_DIR = join12(homedir4(), ".secondlayer");
+  DEV_STATE_PATH = join12(STATE_DIR, "dev.json");
+  LOGS_DIR = join12(STATE_DIR, "logs");
 });
 
 // ../../node_modules/commander/index.js
@@ -202598,7 +202569,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "19.4.3",
+  version: "20.0.1",
   description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
@@ -202619,7 +202590,7 @@ var package_default = {
       import: "./dist/index.js"
     }
   },
-  files: ["dist", "templates", "README.md"],
+  files: ["dist", "README.md"],
   scripts: {
     build: "bunup",
     dev: "bunup --watch",
@@ -202635,15 +202606,15 @@ var package_default = {
     "@biomejs/wasm-nodejs": "^1.9.0",
     "@dsnp/parquetjs": "~1.8.8",
     "@inquirer/prompts": "^8.2.0",
-    "@secondlayer/bundler": "^0.7.0",
-    "@secondlayer/scaffold": "^1.6.1",
-    "@secondlayer/sdk": "^14.5.1",
-    "@secondlayer/shared": "^11.24.1",
+    "@secondlayer/bundler": "^0.7.1",
+    "@secondlayer/scaffold": "^1.6.2",
+    "@secondlayer/sdk": "^15.0.0",
+    "@secondlayer/shared": "^12.0.0",
     "@secondlayer/stacks": "^6.2.0",
-    "@secondlayer/subgraphs": "^6.6.2",
-    "@secondlayer/verify": "^0.4.0",
+    "@secondlayer/subgraphs": "^7.0.1",
+    "@secondlayer/verify": "^0.5.0",
     esbuild: "^0.28.2",
-    "smol-toml": "^1.8.0",
+    "smol-toml": "^1.9.1",
     zod: "^4.3.6"
   },
   peerDependencies: {
@@ -204080,24 +204051,12 @@ init_resolve_auth();
 import { readFile as readFile3 } from "node:fs/promises";
 import {
   BlockVerifier,
+  LINKS,
   MAINNET_CHECKPOINT,
   NodeRpcProofSource,
   SecondlayerProofSource,
-  parseNakamotoHeader,
-  unhex
+  describeLinks
 } from "@secondlayer/verify";
-var LINKS = [
-  { step: "ancestry", label: "ancestry" },
-  { step: "block", label: "block" },
-  { step: "bitcoin", label: "bitcoin" },
-  { step: "burn", label: "burn" },
-  { step: "signer-set", label: "cycle" },
-  { step: "signatures", label: "signatures" },
-  { step: "txs", label: "txs" },
-  { step: "witness", label: "state root" },
-  { step: "names", label: "diff" },
-  { step: "rows", label: "rows" }
-];
 var LABEL_WIDTH = Math.max(...LINKS.map((l) => l.label.length));
 var n = (v) => v.toLocaleString("en-US");
 function parseBlockRef(raw) {
@@ -204151,81 +204110,20 @@ function prepareSource(src) {
     };
   return out;
 }
-function linkDetail(step, r, cp) {
-  switch (step) {
-    case "ancestry": {
-      const a = r.ancestry;
-      if (!a)
-        return "";
-      const checkpoint = parseNakamotoHeader(unhex(cp.stacks.header));
-      const start = a.fromHeight === Number(checkpoint.chainLength) ? `the checkpoint ${n(a.fromHeight)}` : `block ${n(a.fromHeight)}`;
-      return a.via === "marf" ? `${n(r.height ?? 0)} proven in the state of ${start} (one MARF proof)` : `${n(r.height ?? 0)} reached from ${start} by parent links`;
-    }
-    case "block":
-      return `${n(r.height ?? 0)}  ${r.blockId}`;
-    case "bitcoin":
-      return `headers ${n(cp.bitcoin.height)}..${n(r.burnHeight ?? 0)}, proof-of-work and retargets checked`;
-    case "burn":
-      return `height ${n(r.burnHeight ?? 0)}  ${r.bitcoinBlockHash}`;
-    case "signer-set":
-      return r.cycle === cp.stacks.cycle ? `${r.cycle}, the checkpoint's own signer set` : `${r.cycle}, signer set proven forward from checkpoint cycle ${cp.stacks.cycle}`;
-    case "signatures":
-      return `${n(r.signerWeight ?? 0n)} / ${n(r.totalWeight ?? 0n)} weight signed, threshold ${n(r.threshold ?? 0n)}`;
-    case "txs":
-      return `${n(r.transactions?.length ?? 0)} transactions match the tx merkle root`;
-    case "witness":
-      return `${r.stateRoot} matches the witness`;
-    case "names": {
-      const d = r.diff;
-      if (!d)
-        return "";
-      const named = d.writes.filter((w) => w.named).length;
-      const written = named ? `${d.writes.length} written (${named} named, ${d.writes.length - named} unnamed)` : `${d.writes.length} written (unnamed)`;
-      return `${written}, ${d.carried.length} carried, ${d.internal.length} internal`;
-    }
-    case "rows":
-      return `${n(r.rowsChecked ?? 0)} vm_events rows match the diff`;
-  }
-}
-function notNeeded(step, r) {
-  if (!r.ancestry)
-    return false;
-  if (step === "bitcoin" || step === "burn")
-    return r.burnHeight === undefined;
-  return step === "signer-set" || step === "signatures";
-}
 function report(r, cp, rows) {
-  const first = r.failures[0];
-  const broken = first ? LINKS.findIndex((l) => l.step === first.step) : LINKS.length;
-  for (const [i, link] of LINKS.entries()) {
-    const label = link.label.padEnd(LABEL_WIDTH);
-    const failure = r.failures.find((f) => f.step === link.step);
-    if (link.step === "ancestry" && !failure && !r.ancestry)
-      continue;
-    if (failure)
-      writeData(`${red("✗")} ${label}  ${failure.message}`);
-    else if (link.step === "rows" && !rows)
-      writeData(dim(`· ${label}  not checked (pass --rows)`));
-    else if (i > broken)
-      writeData(dim(`· ${label}  not checked: an earlier link is broken`));
-    else if (notNeeded(link.step, r))
-      writeData(dim(`· ${label}  not needed: the block is hash-chained to the checkpoint`));
-    else if (link.step === "rows" && r.rowsChecked === undefined)
-      writeData(dim(`· ${label}  not checked: the source serves no indexed rows`));
-    else if (link.step === "txs" && r.transactions === undefined)
-      writeData(dim(`· ${label}  not checked: no transaction bytes (epoch 2.x, or the source served the header only)`));
+  const { lines, verdict } = describeLinks(r, cp, { rows });
+  for (const line of lines) {
+    const label = line.label.padEnd(LABEL_WIDTH);
+    if (line.status === "failed")
+      writeData(`${red("✗")} ${label}  ${line.detail}`);
+    else if (line.status === "skipped")
+      writeData(dim(`· ${label}  ${line.detail}`));
     else
-      writeData(`${green("✓")} ${label}  ${linkDetail(link.step, r, cp)}`);
+      writeData(`${green("✓")} ${label}  ${line.detail}`);
   }
   for (const line of r.notes)
     note(`  note: ${line}`);
-  if (!first) {
-    const from = n(parseNakamotoHeader(unhex(cp.stacks.header)).chainLength);
-    writeData(green(`✓ Block ${n(r.height ?? 0)} is proven. Trusted: only the checkpoint (Stacks ${from}, Bitcoin ${n(cp.bitcoin.height)}).`));
-    return;
-  }
-  const label = LINKS[broken]?.label ?? first.step;
-  writeData(red(first.code === "unavailable" ? `✗ Could not check the ${label} link: the source could not serve it.` : `✗ Not proven: the ${label} link is broken.`));
+  writeData(verdict.ok ? green(`✓ ${verdict.text}`) : red(`✗ ${verdict.text}`));
 }
 function verificationJson(r) {
   const { transactions, ...rest } = r;
@@ -204309,8 +204207,8 @@ import {
 } from "@secondlayer/subgraphs/verify";
 import {
   MAINNET_CHECKPOINT as MAINNET_CHECKPOINT2,
-  parseNakamotoHeader as parseNakamotoHeader2,
-  unhex as unhex2
+  parseNakamotoHeader,
+  unhex
 } from "@secondlayer/verify";
 var LINKS2 = [
   { step: "pin", label: "pin" },
@@ -204335,13 +204233,13 @@ function parseHeight2(raw, flag) {
     throw new InputError(`${flag} must be a block height, got "${raw}"`);
   return Number(raw);
 }
-async function readTable(fetchRows, name, table) {
+async function readTable(fetchRows, name, table, pageSize = PAGE) {
   const out = [];
   let cursor;
   for (;; ) {
     const page = await fetchRows(name, table, cursor);
     out.push(...page.rows);
-    if (!page.next_cursor || page.rows.length === 0)
+    if (!page.next_cursor || page.rows.length < pageSize)
       return out;
     cursor = page.next_cursor;
   }
@@ -204398,7 +204296,7 @@ function report2(r, from, to) {
     return VERIFY_EXIT.UNANCHORED;
   }
   const cp = MAINNET_CHECKPOINT2;
-  const stacks = n2(Number(parseNakamotoHeader2(unhex2(cp.stacks.header)).chainLength));
+  const stacks = n2(Number(parseNakamotoHeader(unhex(cp.stacks.header)).chainLength));
   writeData(green(`✓ ${r.name} ${n2(from)}..${n2(to)} recomputed from proven inputs. Trusted: only the checkpoint (Stacks ${stacks}, Bitcoin ${n2(cp.bitcoin.height)}).`));
   writeData(dim(`  unproven, so not compared: ${[...r.unproven, "rows compare declared columns and _block_height only"].join("; ")}`));
   return VERIFY_EXIT.CLEAN;
@@ -205574,84 +205472,19 @@ function printPublicStatus(status, diagnosis) {
 }
 // src/commands/webhooks.ts
 init_api_client();
-init_filter_params();
 init_output();
 init_resolve_auth();
 import { buildDoctorReport, isSuccessDelivery } from "@secondlayer/sdk";
 import { sign } from "@secondlayer/shared/crypto/standard-webhooks";
 
-// src/lib/webhook-validation.ts
-import {
-  validateWebhookFilterForTable
-} from "@secondlayer/shared/schemas/webhooks";
-async function validateWebhookTargetFromApi(client, input) {
-  const subgraph = await client.subgraphs.status(input.subgraphName);
-  const errors = validateWebhookFilterForTable({
-    subgraphName: input.subgraphName,
-    tableName: input.tableName,
-    filter: input.filter,
-    tables: subgraph.tables
-  });
-  if (errors.length > 0) {
-    throw new Error(errors.join(`
-`));
-  }
-}
-
 // src/commands/create.ts
-init_filter_params();
 init_output();
 init_resolve_auth();
-import {
-  chmodSync,
-  copyFileSync,
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync3,
-  readFileSync as readFileSync5,
-  readdirSync,
-  statSync as statSync2,
-  writeFileSync as writeFileSync4
-} from "node:fs";
-import { dirname as dirname6, join as join9, relative as relative2, resolve as resolve7 } from "node:path";
-import { fileURLToPath as fileURLToPath4 } from "node:url";
-import { input, select as select3 } from "@inquirer/prompts";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { SecondLayer as SecondLayer4 } from "@secondlayer/sdk";
 import {
   ChainTriggerSchema
 } from "@secondlayer/shared/schemas/webhooks";
-var RUNTIMES = ["inngest", "trigger", "cloudflare", "node"];
-var FORMAT_BY_RUNTIME = {
-  inngest: "inngest",
-  trigger: "trigger",
-  cloudflare: "cloudflare",
-  node: "standard-webhooks"
-};
-function templatesRoot() {
-  const here = dirname6(fileURLToPath4(import.meta.url));
-  const candidateDist = resolve7(here, "..", "templates", "webhooks");
-  if (existsSync5(candidateDist))
-    return candidateDist;
-  return resolve7(here, "..", "..", "templates", "webhooks");
-}
-function copyTemplate(src, dest, vars) {
-  if (!existsSync5(src)) {
-    throw new Error(`template dir missing: ${src}`);
-  }
-  mkdirSync3(dest, { recursive: true });
-  const entries = readdirSync(src);
-  for (const entry of entries) {
-    const from = join9(src, entry);
-    const to = join9(dest, entry);
-    const st = statSync2(from);
-    if (st.isDirectory()) {
-      copyTemplate(from, to, vars);
-    } else {
-      const raw = readFileSync5(from, "utf8");
-      const rendered = raw.replace(/\{\{([A-Z_]+)\}\}/g, (match, key) => vars[key] ?? match);
-      writeFileSync4(to, rendered);
-    }
-  }
-}
 function parseTriggersInput(opts) {
   const raw = [];
   if (opts.triggersFile) {
@@ -205684,53 +205517,6 @@ function parseTriggersInput(opts) {
     return result.data;
   });
 }
-function resolveRuntime(opts) {
-  if (opts.runtime)
-    return opts.runtime;
-  const scripted = opts.subgraph !== undefined || opts.table !== undefined || opts.url !== undefined || opts.scaffold === false;
-  return scripted ? "node" : undefined;
-}
-function requireTtyFor(flag) {
-  if (process.stdin.isTTY)
-    return;
-  error(`${flag} is required when stdin is not a TTY (no prompt can run). Pass it, or run from a terminal.`);
-  process.exit(1);
-}
-async function promptFor(_name, opts) {
-  let runtime = resolveRuntime(opts);
-  if (runtime === undefined) {
-    requireTtyFor("--runtime");
-    runtime = await select3({
-      message: "Runtime?",
-      choices: RUNTIMES.map((r) => ({ name: r, value: r }))
-    });
-  }
-  let subgraph = opts.subgraph;
-  if (subgraph === undefined) {
-    requireTtyFor("--subgraph");
-    subgraph = await input({
-      message: "Subgraph name (must already be deployed):",
-      validate: (v) => v.trim().length > 0 ? true : "required"
-    });
-  }
-  let table = opts.table;
-  if (table === undefined) {
-    requireTtyFor("--table");
-    table = await input({
-      message: "Table to subscribe to:",
-      validate: (v) => v.trim().length > 0 ? true : "required"
-    });
-  }
-  let url = opts.url;
-  if (url === undefined) {
-    requireTtyFor("--url");
-    url = await input({
-      message: runtime === "inngest" ? "Inngest event endpoint URL (e.g. https://inn.gs/e/<KEY> or http://localhost:8288/e/<KEY>):" : runtime === "trigger" ? "Trigger.dev task URL (e.g. https://api.trigger.dev/api/v1/tasks/<TASK_ID>/trigger):" : runtime === "cloudflare" ? "Cloudflare Workflows instances URL:" : "Your HTTP receiver URL (e.g. https://yourapp.example/webhook):",
-      validate: (v) => v.startsWith("http://") || v.startsWith("https://") ? true : "must be http(s) URL"
-    });
-  }
-  return { runtime, subgraph, table, url };
-}
 function buildWebhookAuthConfig(authToken) {
   if (authToken === undefined)
     return;
@@ -205740,139 +205526,9 @@ function buildWebhookAuthConfig(authToken) {
   }
   return { authType: "bearer", token };
 }
-function writeSigningSecretEnv(targetDir, signingSecret) {
-  const envTarget = join9(targetDir, ".env");
-  const envExample = join9(targetDir, ".env.example");
-  if (existsSync5(envExample) && !existsSync5(envTarget)) {
-    copyFileSync(envExample, envTarget);
-    chmodSync(envTarget, 384);
-  }
-  if (!existsSync5(envTarget)) {
-    writeFileSync4(envTarget, `SIGNING_SECRET=${signingSecret}
-`, {
-      mode: 384
-    });
-  } else {
-    const cur = readFileSync5(envTarget, "utf8");
-    writeFileSync4(envTarget, cur.match(/^SIGNING_SECRET=/m) ? cur.replace(/^SIGNING_SECRET=.*/m, `SIGNING_SECRET=${signingSecret}`) : `${cur}
-SIGNING_SECRET=${signingSecret}
-`, { mode: 384 });
-    chmodSync(envTarget, 384);
-  }
-  return envTarget;
-}
-async function createWebhook(name, opts) {
-  if (opts.runtime && !RUNTIMES.includes(opts.runtime)) {
-    error(`Unknown --runtime "${opts.runtime}". Valid: ${RUNTIMES.join(", ")}`);
-    process.exit(1);
-  }
-  const { runtime, subgraph, table, url } = await promptFor(name, opts);
-  let filter;
-  let authConfig;
-  try {
-    filter = parseWebhookFilter(opts.filter);
-    authConfig = buildWebhookAuthConfig(opts.authToken);
-  } catch (err) {
-    error(err instanceof Error ? err.message : String(err));
-    process.exit(1);
-  }
-  let sl = null;
-  if (!opts.skipApi) {
-    try {
-      sl = await getWebhookClient();
-      await validateWebhookTargetFromApi(sl, {
-        subgraphName: subgraph,
-        tableName: table,
-        filter
-      });
-    } catch (err) {
-      error(err instanceof Error ? err.message : String(err));
-      process.exit(1);
-    }
-  }
-  const eventName = `${subgraph}.${table}.created`;
-  const targetDir = resolve7(process.cwd(), name);
-  if (opts.scaffold !== false) {
-    if (existsSync5(targetDir)) {
-      error(`Directory already exists: ${relative2(process.cwd(), targetDir)}`);
-      process.exit(1);
-    }
-    const tplRoot = templatesRoot();
-    const tplDir = join9(tplRoot, runtime);
-    info(`Scaffolding ${blue(runtime)} template at ${blue(targetDir)}`);
-    copyTemplate(tplDir, targetDir, {
-      NAME: name,
-      EVENT_NAME: eventName,
-      TASK_ID: `${subgraph}-${table}`
-    });
-  }
-  let signingSecret = null;
-  let provisioningFailed = false;
-  if (!opts.skipApi) {
-    try {
-      if (!sl)
-        sl = await getWebhookClient();
-      const res = await sl.webhooks.create({
-        name,
-        subgraphName: subgraph,
-        tableName: table,
-        url,
-        format: FORMAT_BY_RUNTIME[runtime],
-        runtime,
-        ...filter ? { filter } : {},
-        ...authConfig ? { authConfig } : {}
-      });
-      signingSecret = res.signingSecret;
-      success(`Webhook provisioned: ${blue(res.webhook.id)}`);
-    } catch (err) {
-      provisioningFailed = true;
-      warn(`Webhook provisioning failed: ${err instanceof Error ? err.message : String(err)}`);
-      info("Template copied, but the webhook was not created. Fix the API error, remove the template directory, and rerun.");
-    }
-  }
-  let webhookStatus;
-  if (sl) {
-    try {
-      const list = await sl.webhooks.list();
-      const rows = list.data ?? [];
-      const created = rows.find((s) => s.name === name);
-      webhookStatus = created?.status;
-    } catch {}
-  }
-  if (signingSecret && opts.scaffold !== false) {
-    const envTarget = writeSigningSecretEnv(targetDir, signingSecret);
-    success(`Signing secret written to ${relative2(process.cwd(), envTarget)}`);
-  } else if (signingSecret && opts.scaffold === false) {
-    info(`Signing secret (store securely): ${signingSecret}`);
-  }
-  console.log();
-  if (provisioningFailed) {
-    error("Webhook was not created.");
-    process.exit(1);
-  }
-  const pausedLine = webhookStatus === "paused" ? `Webhook is paused. Resume:
-  secondlayer webhooks resume ${name}
-  ` : "";
-  const runHint = opts.scaffold === false ? `View deliveries:
-  secondlayer webhooks get ${name}` : `cd ${name}
-  bun install
-  bun run dev`;
-  success(`Done. Next:
-  ${pausedLine}${runHint}`);
-}
 async function createChainWebhook(name, opts) {
-  for (const [flag, value] of [
-    ["--subgraph", opts.subgraph],
-    ["--table", opts.table],
-    ["--runtime", opts.runtime]
-  ]) {
-    if (value !== undefined) {
-      error(`${flag} is not valid with --trigger/--triggers-file (chain mode)`);
-      process.exit(1);
-    }
-  }
   if (!opts.url) {
-    error("--url is required when creating a chain webhook");
+    error("--url is required");
     process.exit(1);
   }
   let triggers;
@@ -205897,7 +205553,7 @@ async function createChainWebhook(name, opts) {
     });
     webhookId = res.webhook.id;
     signingSecret = res.signingSecret;
-    success(`Chain webhook provisioned: ${blue(webhookId)}`);
+    success(`Webhook provisioned: ${blue(webhookId)}`);
   } catch (err) {
     error(`Webhook provisioning failed: ${err instanceof Error ? err.message : String(err)}`);
     process.exit(1);
@@ -205912,24 +205568,11 @@ async function getWebhookClient() {
   const { apiUrl, ephemeralKey } = await resolveHostedAuth();
   return new SecondLayer4({ baseUrl: apiUrl, apiKey: ephemeralKey });
 }
-function addWebhookScaffold(parent, commandSpec, opts) {
-  parent.command(commandSpec).description(opts.description).option("-r, --runtime <runtime>", "inngest | trigger | cloudflare | node (default: node once -s/-t/-u or --no-scaffold is given; prompts only in a terminal with no flags)").option("-s, --subgraph <name>", "Subgraph to subscribe to").option("-t, --table <name>", "Table to subscribe to").option("-u, --url <url>", "Webhook URL").option("--auth-token <token>", "Bearer token for receiver API auth; a flag lands in shell history and ps, so set it in the receiver's env and pass it here only for a throwaway token").option("--filter <kv...>", "Filter as key=value (supports .eq/.neq/.gt/.gte/.lt/.lte suffixes)").option("--trigger <json...>", `Chain-webhook trigger as JSON (repeatable), e.g. '{"type":"sbtc_deposit"}'`).option("--triggers-file <path>", "Chain-webhook triggers as a JSON array file").option("--format <format>", "Chain mode delivery format (default standard-webhooks)").option("--skip-api", "Copy template only, don't call the API").option("--no-scaffold", "Skip the local runtime template directory (webhook-only setups)").addHelpText("after", `
-Examples:
-  $ ${opts.examplePrefix} my-sub -s my-graph -t transfers -u https://example.com/webhook
-  $ ${opts.examplePrefix} my-sub -s my-graph -t balances -r inngest --filter amount.gte=1000
-  $ ${opts.examplePrefix} my-hook -u https://example.com/webhook --trigger '{"type":"sbtc_deposit"}'`).action(async (name, options) => {
-    if (options.trigger?.length || options.triggersFile) {
-      await createChainWebhook(name, options);
-      return;
-    }
-    await createWebhook(name, options);
-  });
-}
 function addWebhooksCreateCommand(parent) {
-  addWebhookScaffold(parent, "create <name>", {
-    description: "Create a webhook receiver for a runtime",
-    examplePrefix: "secondlayer webhooks create"
-  });
+  parent.command("create <name>").description("Create a webhook on raw chain events").option("-u, --url <url>", "Webhook URL").option("--auth-token <token>", "Bearer token for receiver API auth; a flag lands in shell history and ps, so set it in the receiver's env and pass it here only for a throwaway token").option("--trigger <json...>", `Chain trigger as JSON (repeatable), e.g. '{"type":"sbtc_deposit"}'`).option("--triggers-file <path>", "Chain triggers as a JSON array file").option("--format <format>", "Delivery format (default standard-webhooks)").addHelpText("after", `
+Examples:
+  $ secondlayer webhooks create my-hook -u https://example.com/webhook --trigger '{"type":"sbtc_deposit"}'
+  $ secondlayer webhooks create my-hook -u https://example.com/webhook --triggers-file triggers.json`).action(createChainWebhook);
 }
 
 // src/commands/webhooks.ts
@@ -205999,17 +205642,6 @@ function buildWebhookUpdatePatch(options) {
   if (options.format) {
     patch.format = options.format;
   }
-  if (options.runtime !== undefined) {
-    patch.runtime = options.runtime === "none" || options.runtime === "null" ? null : options.runtime;
-  }
-  if (options.clearFilter)
-    patch.filter = {};
-  if (options.filter) {
-    if (options.clearFilter) {
-      throw new Error("Use either --filter or --clear-filter, not both");
-    }
-    patch.filter = parseWebhookFilter(options.filter) ?? {};
-  }
   const maxRetries = parseIntegerOption(options.maxRetries, "--max-retries", 0);
   if (maxRetries !== undefined)
     patch.maxRetries = maxRetries;
@@ -206025,11 +205657,8 @@ function buildWebhookUpdatePatch(options) {
   return patch;
 }
 function formatWebhookTarget(sub) {
-  if (sub.kind === "chain") {
-    const types = sub.triggers?.map((t) => t.type);
-    return types && types.length > 0 ? `chain.${types.join(",")}` : "chain";
-  }
-  return `${sub.subgraphName}.${sub.tableName}`;
+  const types = "triggers" in sub ? sub.triggers.map((t) => t.type) : [];
+  return types.length > 0 ? `chain.${types.join(",")}` : "chain";
 }
 function formatAuthLine(auth) {
   const scheme = auth.type === "bearer" ? auth.hasSecret ? "bearer token (set, hidden)" : "bearer (no token set)" : auth.type === "basic" ? auth.hasSecret ? "basic auth (set, hidden)" : "basic (no credentials set)" : "none";
@@ -206042,7 +205671,6 @@ function printWebhookDetail(sub) {
     ["Status", sub.status],
     ["Target", formatWebhookTarget(sub)],
     ["Format", sub.format],
-    ["Runtime", sub.runtime ?? "none"],
     ["URL", sub.url],
     ["Auth", formatAuthLine(sub.auth)],
     ["Last Delivery", sub.lastDeliveryAt ?? "none"],
@@ -206058,8 +205686,8 @@ function printWebhookDetail(sub) {
     ["Updated", sub.updatedAt]
   ]));
   console.log(dim(`
-Filter:`));
-  console.log(JSON.stringify(sub.filter, null, 2));
+Triggers:`));
+  console.log(JSON.stringify(sub.triggers, null, 2));
 }
 var DOCTOR_ISSUE_TITLES = {
   warning: "This webhook can't fire yet",
@@ -206067,8 +205695,6 @@ var DOCTOR_ISSUE_TITLES = {
   last_error: "The last delivery failed",
   circuit: "Your receiver is failing",
   dead_letters: "Some events exhausted every retry",
-  subgraph_gaps: "The linked subgraph has gaps",
-  subgraph_catching_up: "The linked subgraph is still catching up",
   no_deliveries: "No deliveries yet",
   receiver_rate_limited: "Your receiver is rate-limiting us",
   receiver_down: "Your receiver looks down",
@@ -206100,7 +205726,6 @@ function formatDoctorReport(report) {
       ["Status", sub.status],
       ["Target", formatWebhookTarget(sub)],
       ["Format", sub.format],
-      ["Runtime", sub.runtime ?? "none"],
       ["URL", sub.url],
       [
         "Circuit",
@@ -206126,24 +205751,6 @@ Delivery summary:`),
     ].join(`
 `)
   ];
-  if (report.subgraph) {
-    sections.push([
-      dim(`
-Linked subgraph:`),
-      formatKeyValue([
-        ["Name", report.subgraph.name],
-        ["Status", report.subgraph.status],
-        ["Sync", report.subgraph.syncStatus],
-        [
-          "Blocks",
-          `${report.subgraph.lastProcessedBlock} / ${report.subgraph.chainTip}`
-        ],
-        ["Integrity", report.subgraph.integrity],
-        ["Gaps", String(report.subgraph.gapCount)]
-      ])
-    ].join(`
-`));
-  }
   if (report.primary)
     sections.push(formatPrimaryInsight(report.primary));
   const primaryIndex = report.primary ? report.issues.indexOf(report.primary) : -1;
@@ -206159,35 +205766,6 @@ Next steps:`), ...rest.map((hint) => `  - ${hint}`)].join(`
 function printDoctorReport(report) {
   console.log(formatDoctorReport(report));
 }
-function syntheticValue(type) {
-  switch (type) {
-    case "uint":
-    case "int":
-      return "1000";
-    case "boolean":
-      return true;
-    case "timestamp":
-      return new Date(0).toISOString();
-    case "jsonb":
-      return {};
-    case "principal":
-      return "SP000000000000000000002Q6VF78";
-    default:
-      return "example";
-  }
-}
-function buildSyntheticRow(subgraph, tableName) {
-  const table = subgraph?.tables[tableName];
-  if (!table)
-    return { id: "example", value: "example" };
-  const row = {};
-  for (const [column, def] of Object.entries(table.columns)) {
-    if (column.startsWith("_"))
-      continue;
-    row[column] = syntheticValue(def.type);
-  }
-  return Object.keys(row).length > 0 ? row : { id: "example", value: "example" };
-}
 function resolveSigningSecret(options, env = process.env) {
   const secret = options.signingSecret ?? env.SIGNING_SECRET;
   if (!secret) {
@@ -206201,17 +205779,16 @@ function shellQuote(value) {
 function buildWebhookTestFixture(input) {
   const nowSeconds = input.nowSeconds ?? Math.floor(Date.now() / 1000);
   const sub = input.webhook;
-  const isChain = sub.kind === "chain";
-  const type = isChain ? `chain.${sub.triggers?.[0]?.type ?? "event"}.apply` : `${sub.subgraphName}.${sub.tableName}.created`;
-  const data = isChain ? {
+  const type = `chain.${sub.triggers[0]?.type ?? "event"}.apply`;
+  const data = {
     action: "apply",
     canonical: true,
     block_hash: "0xexampleblock",
     block_height: 0,
     tx_id: input.row.tx_id ?? "0xexampletransaction",
-    trigger: sub.triggers?.[0]?.type ?? "event",
+    trigger: sub.triggers[0]?.type ?? "event",
     event: input.row
-  } : input.row;
+  };
   const body = JSON.stringify({
     type,
     timestamp: new Date(nowSeconds * 1000).toISOString(),
@@ -206234,25 +205811,12 @@ function buildWebhookTestFixture(input) {
 `);
   return { body, headers, curl };
 }
-async function representativeRow(client, sub, subgraph) {
-  if (sub.kind === "chain" || !sub.subgraphName || !sub.tableName) {
-    return {
-      tx_id: "0xexampletransaction",
-      contract_id: "SP000000000000000000002Q6VF78.example",
-      ...sub.triggers?.[0]?.type === "contract_call" ? { function_name: "example-fn" } : {}
-    };
-  }
-  try {
-    const { rows } = await client.subgraphs.rows(sub.subgraphName, sub.tableName, {
-      sort: "_block_height",
-      order: "desc",
-      limit: 1
-    });
-    const row = rows[0];
-    if (row && typeof row === "object")
-      return row;
-  } catch {}
-  return buildSyntheticRow(subgraph, sub.tableName);
+function representativeRow(sub) {
+  return {
+    tx_id: "0xexampletransaction",
+    contract_id: "SP000000000000000000002Q6VF78.example",
+    ...sub.triggers[0]?.type === "contract_call" ? { function_name: "example-fn" } : {}
+  };
 }
 function printDeliveries(rows) {
   if (rows.length === 0) {
@@ -206329,22 +205893,14 @@ ${data.length} webhook(s) total`));
       handleApiError(err, "get webhook");
     }
   });
-  parent.command("update <idOrName>").description("Update webhook config").option("--name <name>", "Rename webhook").option("--url <url>", "Webhook URL").option("--auth-token <token>", "Set bearer token auth config; a flag lands in shell history and ps, so pass it here only for a throwaway token").option("--format <format>", "standard-webhooks | inngest | trigger | cloudflare | cloudevents | raw").option("--runtime <runtime>", "inngest | trigger | cloudflare | node | none").option("--filter <kv...>", "Filter as key=value (supports .eq/.neq/.gt/.gte/.lt/.lte suffixes)").option("--clear-filter", "Replace filter with {}").option("--max-retries <n>", "Maximum delivery retries").option("--timeout-ms <n>", "Delivery timeout in milliseconds").option("--concurrency <n>", "Per-webhook delivery concurrency").option("--json", "Output as JSON").addHelpText("after", `
+  parent.command("update <idOrName>").description("Update webhook config").option("--name <name>", "Rename webhook").option("--url <url>", "Webhook URL").option("--auth-token <token>", "Set bearer token auth config; a flag lands in shell history and ps, so pass it here only for a throwaway token").option("--format <format>", "standard-webhooks | inngest | trigger | cloudflare | cloudevents | raw").option("--max-retries <n>", "Maximum delivery retries").option("--timeout-ms <n>", "Delivery timeout in milliseconds").option("--concurrency <n>", "Per-webhook delivery concurrency").option("--json", "Output as JSON").addHelpText("after", `
 Examples:
   $ secondlayer webhooks update my-sub --url https://example.com/hook
-  $ secondlayer webhooks update my-sub --filter amount.gte=1000 --max-retries 5
-  $ secondlayer webhooks update my-sub --clear-filter`).action(async (idOrName, options) => {
+  $ secondlayer webhooks update my-sub --max-retries 5 --timeout-ms 20000`).action(async (idOrName, options) => {
     try {
       const client = await getWebhookClient();
       const patch = buildWebhookUpdatePatch(options);
-      const { id, detail } = await resolveWebhookRef(client, idOrName);
-      if (patch.filter !== undefined && detail.subgraphName && detail.tableName) {
-        await validateWebhookTargetFromApi(client, {
-          subgraphName: detail.subgraphName,
-          tableName: detail.tableName,
-          filter: patch.filter
-        });
-      }
+      const { id } = await resolveWebhookRef(client, idOrName);
       const updated = await client.webhooks.update(id, patch);
       if (options.json)
         printJson(updated);
@@ -206495,16 +206051,14 @@ Examples:
     try {
       const client = await getWebhookClient();
       const { id, detail } = await resolveWebhookRef(client, idOrName);
-      const [deliveries, dead, subgraph] = await Promise.allSettled([
+      const [deliveries, dead] = await Promise.allSettled([
         client.webhooks.deliveries(id),
-        client.webhooks.dead(id),
-        detail.subgraphName ? client.subgraphs.status(detail.subgraphName) : Promise.resolve(null)
+        client.webhooks.dead(id)
       ]);
       const report = buildDoctorReport({
         webhook: detail,
         deliveries: deliveries.status === "fulfilled" ? deliveries.value.data : [],
-        dead: dead.status === "fulfilled" ? dead.value.data : [],
-        subgraph: subgraph.status === "fulfilled" ? subgraph.value : null
+        dead: dead.status === "fulfilled" ? dead.value.data : []
       });
       if (options.json)
         printJson(report);
@@ -206519,8 +206073,7 @@ Examples:
       const signingSecret = resolveSigningSecret(options);
       const client = await getWebhookClient();
       const { detail } = await resolveWebhookRef(client, idOrName);
-      const subgraph = detail.subgraphName ? await client.subgraphs.status(detail.subgraphName).catch(() => null) : null;
-      const row = await representativeRow(client, detail, subgraph);
+      const row = representativeRow(detail);
       const fixture = buildWebhookTestFixture({
         webhook: detail,
         row,
@@ -206580,8 +206133,8 @@ function registerWebhooksCommand(program) {
 }
 // src/commands/devnet.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { existsSync as existsSync7, mkdirSync as mkdirSync4, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname8, join as join12 } from "node:path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname7, join as join11 } from "node:path";
 
 // src/lib/devnet-compose.ts
 var DEFAULT_IMAGE_OWNER = "ryanwaits";
@@ -206735,23 +206288,23 @@ volumes:
 }
 
 // src/lib/devnet-config.ts
-import { existsSync as existsSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname7, join as join10, parse as parsePath } from "node:path";
+import { existsSync as existsSync5, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname6, join as join9, parse as parsePath } from "node:path";
 import { parse as parseToml } from "smol-toml";
 var DEFAULT_INDEXER_OBSERVER = "host.docker.internal:3700";
 function findClarinetProject(startDir) {
   let dir = startDir;
   const { root } = parsePath(dir);
   while (true) {
-    if (existsSync6(join10(dir, "Clarinet.toml")))
+    if (existsSync5(join9(dir, "Clarinet.toml")))
       return dir;
     if (dir === root)
       return null;
-    dir = dirname7(dir);
+    dir = dirname6(dir);
   }
 }
 function ensureEventObserver(devnetTomlPath, endpoint = DEFAULT_INDEXER_OBSERVER) {
-  const exists = existsSync6(devnetTomlPath);
+  const exists = existsSync5(devnetTomlPath);
   const original = exists ? readFileSync6(devnetTomlPath, "utf8") : "";
   if (original.trim()) {
     const parsed = parseToml(original);
@@ -206766,7 +206319,7 @@ function ensureEventObserver(devnetTomlPath, endpoint = DEFAULT_INDEXER_OBSERVER
     const at = (arrayStart.index ?? 0) + arrayStart[0].length;
     const next = original.slice(at).trimStart().startsWith("]") ? entry : `${entry}, `;
     const patched = original.slice(0, at) + next + original.slice(at);
-    writeFileSync5(devnetTomlPath, patched);
+    writeFileSync4(devnetTomlPath, patched);
     return { status: "added" };
   }
   const header = original.match(/^\[devnet\]\s*$/m);
@@ -206774,7 +206327,7 @@ function ensureEventObserver(devnetTomlPath, endpoint = DEFAULT_INDEXER_OBSERVER
     const at = (header.index ?? 0) + header[0].length;
     const patched = `${original.slice(0, at)}
 stacks_node_events_observers = [${entry}]${original.slice(at)}`;
-    writeFileSync5(devnetTomlPath, patched);
+    writeFileSync4(devnetTomlPath, patched);
     return { status: "added" };
   }
   const prefix = original && !original.endsWith(`
@@ -206784,7 +206337,7 @@ stacks_node_events_observers = [${entry}]${original.slice(at)}`;
 ` : ""}[devnet]
 stacks_node_events_observers = [${entry}]
 `;
-  writeFileSync5(devnetTomlPath, block);
+  writeFileSync4(devnetTomlPath, block);
   return { status: exists ? "added" : "created" };
 }
 
@@ -206795,7 +206348,7 @@ init_resolve_auth();
 // src/commands/faucet.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { readFile as readFile5 } from "node:fs/promises";
-import { join as join11 } from "node:path";
+import { join as join10 } from "node:path";
 import { http as http3, createWalletClient } from "@secondlayer/stacks";
 import { mnemonicToAccount } from "@secondlayer/stacks/accounts";
 import { devnet } from "@secondlayer/stacks/chains";
@@ -206805,7 +206358,7 @@ init_output();
 var DUST_LIMIT_SATS = 546n;
 var DEFAULT_AMOUNT_SATS = 1000000n;
 async function readDeployerMnemonic(projectDir) {
-  const path = join11(projectDir, "settings", "Devnet.toml");
+  const path = join10(projectDir, "settings", "Devnet.toml");
   let raw;
   try {
     raw = await readFile5(path, "utf8");
@@ -206922,7 +206475,7 @@ is what makes minting possible without Bitcoin.`).action(async (opts) => {
 }
 
 // src/commands/devnet.ts
-var COMPOSE_REL = join12(".secondlayer", "docker-compose.yml");
+var COMPOSE_REL = join11(".secondlayer", "docker-compose.yml");
 function ensureDocker() {
   const probe = spawnSync3("docker", ["info"], { stdio: "ignore" });
   if (probe.error || probe.status !== 0) {
@@ -206967,7 +206520,7 @@ function registerDevnetCommand(program) {
 }
 function resolveProject(explicit) {
   if (explicit) {
-    if (!existsSync7(join12(explicit, "Clarinet.toml"))) {
+    if (!existsSync6(join11(explicit, "Clarinet.toml"))) {
       error(`No Clarinet.toml in ${explicit}`);
       process.exit(1);
     }
@@ -206983,8 +206536,8 @@ function resolveProject(explicit) {
 }
 async function connect(options) {
   const project = resolveProject(options.project);
-  const devnetToml = join12(project, "settings", "Devnet.toml");
-  mkdirSync4(dirname8(devnetToml), { recursive: true });
+  const devnetToml = join11(project, "settings", "Devnet.toml");
+  mkdirSync3(dirname7(devnetToml), { recursive: true });
   const result = ensureEventObserver(devnetToml, DEFAULT_INDEXER_OBSERVER);
   console.log(`${green("✓")} found Clarinet.toml`);
   if (result.status === "present") {
@@ -206993,9 +206546,9 @@ async function connect(options) {
     console.log(`${green("✓")} ${result.status === "created" ? "created" : "patched"} settings/Devnet.toml`);
     console.log(dim(`    + stacks_node_events_observers = ["${DEFAULT_INDEXER_OBSERVER}"]`));
   }
-  const composePath = join12(project, COMPOSE_REL);
-  mkdirSync4(dirname8(composePath), { recursive: true });
-  writeFileSync6(composePath, buildDevnetCompose({ owner: options.owner, imageTag: options.imageTag }));
+  const composePath = join11(project, COMPOSE_REL);
+  mkdirSync3(dirname7(composePath), { recursive: true });
+  writeFileSync5(composePath, buildDevnetCompose({ owner: options.owner, imageTag: options.imageTag }));
   console.log(`${green("✓")} wrote ${COMPOSE_REL}`);
   if (!options.up) {
     console.log(dim(`
@@ -207026,8 +206579,8 @@ Stop with: secondlayer devnet down`));
 }
 async function down(options) {
   const project = resolveProject(options.project);
-  const composePath = join12(project, COMPOSE_REL);
-  if (!existsSync7(composePath)) {
+  const composePath = join11(project, COMPOSE_REL);
+  if (!existsSync6(composePath)) {
     error(`No ${COMPOSE_REL} in ${project} — nothing to stop. Run \`secondlayer devnet connect\` first.`);
     process.exit(1);
   }
@@ -207041,8 +206594,8 @@ async function down(options) {
 }
 async function logs(service, options) {
   const project = resolveProject(options.project);
-  const composePath = join12(project, COMPOSE_REL);
-  if (!existsSync7(composePath)) {
+  const composePath = join11(project, COMPOSE_REL);
+  if (!existsSync6(composePath)) {
     error(`No ${COMPOSE_REL} in ${project} — run \`secondlayer devnet connect\` first.`);
     process.exit(1);
   }
@@ -207174,7 +206727,7 @@ init_output();
 init_resolve_auth();
 import { createHash as createHash5 } from "node:crypto";
 import { mkdir as mkdir3, open as open2, rename as rename2 } from "node:fs/promises";
-import { dirname as dirname9, isAbsolute, resolve as resolve8, sep as sep2 } from "node:path";
+import { dirname as dirname8, isAbsolute, resolve as resolve7, sep as sep2 } from "node:path";
 import { createStreamsClient } from "@secondlayer/sdk";
 import { STREAMS_EVENT_TYPES } from "@secondlayer/shared";
 var VALID_TYPES = STREAMS_EVENT_TYPES;
@@ -207197,12 +206750,12 @@ function dumpsClient(dumpsUrl) {
   });
 }
 function resolveDumpDest(to, filePath) {
-  const root = resolve8(to);
+  const root = resolve7(to);
   const segments = filePath.split(/[\\/]/);
   if (filePath.length === 0 || isAbsolute(filePath) || filePath.includes("\\") || segments.some((s) => s === "..")) {
     throw new Error(`refusing dump path "${filePath}": paths must be relative and stay under ${root}`);
   }
-  const dest = resolve8(root, filePath);
+  const dest = resolve7(root, filePath);
   if (!dest.startsWith(root + sep2)) {
     throw new Error(`refusing dump path "${filePath}": resolves outside ${root}`);
   }
@@ -207213,7 +206766,7 @@ async function downloadDumpTo(file, dest, fetchImpl, url) {
   if (!res.ok || !res.body) {
     throw new Error(`could not download dump ${file.path} (${res.status})`);
   }
-  await mkdir3(dirname9(dest), { recursive: true });
+  await mkdir3(dirname8(dest), { recursive: true });
   const part = `${dest}.part`;
   const hash = createHash5("sha256");
   let bytes = 0;
@@ -207897,10 +207450,10 @@ init_output();
 import { resolveApiKey as resolveApiKey4 } from "@secondlayer/sdk";
 
 // src/lib/project-file.ts
-import { existsSync as existsSync8 } from "node:fs";
+import { existsSync as existsSync7 } from "node:fs";
 import { mkdir as mkdir4, readFile as readFile6, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname10, join as join14, parse as parsePath2, resolve as resolve9 } from "node:path";
+import { dirname as dirname9, join as join13, parse as parsePath2, resolve as resolve8 } from "node:path";
 import { z as z4 } from "zod";
 var ProjectFileSchema = z4.object({
   slug: z4.string().min(1)
@@ -207908,23 +207461,23 @@ var ProjectFileSchema = z4.object({
 var FILENAME = "project";
 var DIRNAME = ".secondlayer";
 async function readActiveProject(cwd, globalDefault) {
-  let dir = resolve9(cwd);
-  const home = resolve9(homedir5());
+  let dir = resolve8(cwd);
+  const home = resolve8(homedir5());
   const fsRoot = parsePath2(dir).root;
   while (true) {
-    const candidate = join14(dir, DIRNAME, FILENAME);
-    if (existsSync8(candidate)) {
+    const candidate = join13(dir, DIRNAME, FILENAME);
+    if (existsSync7(candidate)) {
       try {
         const raw = await readFile6(candidate, "utf8");
         const parsed = ProjectFileSchema.parse(JSON.parse(raw));
         return { slug: parsed.slug, resolvedFrom: candidate };
       } catch {}
     }
-    if (existsSync8(join14(dir, ".git")))
+    if (existsSync7(join13(dir, ".git")))
       break;
     if (dir === home || dir === fsRoot)
       break;
-    const parent = dirname10(dir);
+    const parent = dirname9(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -207932,7 +207485,7 @@ async function readActiveProject(cwd, globalDefault) {
   if (globalDefault) {
     return {
       slug: globalDefault,
-      resolvedFrom: join14(homedir5(), ".secondlayer", "config.json")
+      resolvedFrom: join13(homedir5(), ".secondlayer", "config.json")
     };
   }
   return null;
@@ -208005,7 +207558,7 @@ init_api_url();
 init_http();
 init_output();
 init_session();
-import { confirm as confirm3, input as input2 } from "@inquirer/prompts";
+import { confirm as confirm3, input } from "@inquirer/prompts";
 function sessionExpiry() {
   return new Date(Date.now() + 90 * 24 * 60 * 60 * 1000).toISOString();
 }
@@ -208065,7 +207618,7 @@ async function runLoginFlow(options = {}) {
       }
     }
   }
-  const email = await input2({
+  const email = await input({
     message: "Email",
     validate: (v) => /^.+@.+\..+$/.test(v) ? true : "Invalid email"
   });
@@ -208086,7 +207639,7 @@ async function runLoginFlow(options = {}) {
     }
     process.exit(1);
   }
-  const code = await input2({
+  const code = await input({
     message: "Enter the 6-digit code",
     validate: (v) => /^\d{6}$/.test(v) ? true : "Expected 6 digits"
   });
@@ -208147,15 +207700,15 @@ function registerLogoutCommand(program) {
 }
 // src/commands/uninstall.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync8 } from "node:fs";
-import { join as join15, resolve as resolve11 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync8 } from "node:fs";
+import { join as join14, resolve as resolve10 } from "node:path";
 import { planUninstall, uninstallCommand } from "@secondlayer/shared/runtime";
 
 // src/lib/instance-init.ts
 init_output();
 import { randomBytes as randomBytes3 } from "node:crypto";
-import { existsSync as existsSync9, readFileSync as readFileSync7, writeFileSync as writeFileSync7 } from "node:fs";
-import { resolve as resolve10 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "node:fs";
+import { resolve as resolve9 } from "node:path";
 import { ARCHIVE_ROOT_PUBLIC_KEY_PEM } from "@secondlayer/shared/archive/root-key";
 import { generateEd25519KeyPair } from "@secondlayer/shared/crypto/ed25519";
 import { INSTANCE_NETWORKS } from "@secondlayer/shared/db/queries/instance";
@@ -208204,7 +207757,7 @@ function unescapeEnvValue(raw) {
 `).replace(/\\"/g, '"').replace(/\\\\/g, "\\");
 }
 function readEnvValue(envPath, key) {
-  if (!existsSync9(envPath))
+  if (!existsSync8(envPath))
     return null;
   const match = readFileSync7(envPath, "utf8").match(new RegExp(`^${key}=(.*)$`, "m"));
   return match ? unescapeEnvValue(match[1]) : null;
@@ -208252,12 +207805,12 @@ function renderInstanceEnv(env) {
 `);
 }
 function writeInstanceEnv(cwd, env, file = INSTANCE_ENV_FILE) {
-  const path = resolve10(cwd, file);
-  writeFileSync7(path, renderInstanceEnv(env), { mode: 384 });
+  const path = resolve9(cwd, file);
+  writeFileSync6(path, renderInstanceEnv(env), { mode: 384 });
   return path;
 }
 function loadExistingInstanceEnv(cwd, file = INSTANCE_ENV_FILE) {
-  const path = resolve10(cwd, file);
+  const path = resolve9(cwd, file);
   return {
     INSTANCE_TOKEN: readEnvValue(path, "INSTANCE_TOKEN"),
     SECONDLAYER_SECRETS_KEY: readEnvValue(path, "SECONDLAYER_SECRETS_KEY"),
@@ -208275,8 +207828,8 @@ init_resolve_auth();
 var UNINSTALL_EXIT = { OK: 0, FAILED: 1, REFUSED: 2 };
 var REPO_COMPOSE = "docker/oss/docker-compose.yml";
 function bundleHasKeys(bundleDir) {
-  const manifest = join15(bundleDir, "manifest.json");
-  if (!existsSync10(manifest))
+  const manifest = join14(bundleDir, "manifest.json");
+  if (!existsSync9(manifest))
     return false;
   try {
     const parsed = JSON.parse(readFileSync8(manifest, "utf8"));
@@ -208286,27 +207839,27 @@ function bundleHasKeys(bundleDir) {
   }
 }
 function resolveUninstallLayout(dir, composeOverride) {
-  const setupCompose = resolve11(dir, "docker-compose.yml");
-  const setupEnv = resolve11(dir, ".env");
-  const initEnv = resolve11(dir, ".env.local");
-  const secretsFile = [setupEnv, initEnv].find((file) => readEnvValue(file, "SECONDLAYER_SECRETS_KEY") !== null) ?? [setupEnv, initEnv].find((file) => existsSync10(file));
+  const setupCompose = resolve10(dir, "docker-compose.yml");
+  const setupEnv = resolve10(dir, ".env");
+  const initEnv = resolve10(dir, ".env.local");
+  const secretsFile = [setupEnv, initEnv].find((file) => readEnvValue(file, "SECONDLAYER_SECRETS_KEY") !== null) ?? [setupEnv, initEnv].find((file) => existsSync9(file));
   if (composeOverride) {
-    const composeFile = resolve11(dir, composeOverride);
-    const sibling = resolve11(composeFile, "..", ".env");
+    const composeFile = resolve10(dir, composeOverride);
+    const sibling = resolve10(composeFile, "..", ".env");
     return {
       composeFile,
-      envFile: existsSync10(sibling) ? sibling : undefined,
+      envFile: existsSync9(sibling) ? sibling : undefined,
       secretsFile
     };
   }
-  if (existsSync10(setupCompose)) {
+  if (existsSync9(setupCompose)) {
     return {
       composeFile: setupCompose,
-      envFile: existsSync10(setupEnv) ? setupEnv : undefined,
+      envFile: existsSync9(setupEnv) ? setupEnv : undefined,
       secretsFile
     };
   }
-  return { composeFile: resolve11(dir, REPO_COMPOSE), secretsFile };
+  return { composeFile: resolve10(dir, REPO_COMPOSE), secretsFile };
 }
 function composeDownArgs(plan, layout) {
   const base = uninstallCommand(plan, layout.composeFile);
@@ -208326,7 +207879,7 @@ function registerUninstallCommand(program) {
     const dataDir = process.env.DATA_DIR ?? "./data";
     const layout = resolveUninstallLayout(process.cwd(), opts.compose);
     const secretsPresent = !!process.env.SECONDLAYER_SECRETS_KEY || !!layout.secretsFile;
-    const keysBackedUp = opts.backup ? bundleHasKeys(resolve11(opts.backup)) : false;
+    const keysBackedUp = opts.backup ? bundleHasKeys(resolve10(opts.backup)) : false;
     const decision = planUninstall({
       purge: opts.purge === true,
       confirmed: opts.yes === true,
@@ -208399,14 +207952,14 @@ init_fs();
 init_output();
 init_resolve_auth();
 import {
-  chmodSync as chmodSync2,
-  existsSync as existsSync11,
-  mkdirSync as mkdirSync5,
+  chmodSync,
+  existsSync as existsSync10,
+  mkdirSync as mkdirSync4,
   readFileSync as readFileSync9,
-  statSync as statSync3,
-  writeFileSync as writeFileSync8
+  statSync as statSync2,
+  writeFileSync as writeFileSync7
 } from "node:fs";
-import { join as join16, resolve as resolve12 } from "node:path";
+import { join as join15, resolve as resolve11 } from "node:path";
 import { closeDb, getDb as getDb4, sql as sql2 } from "@secondlayer/shared/db";
 import {
   decryptBundle,
@@ -208555,10 +208108,10 @@ async function runBackup(opts) {
     printError(plan.reason);
     process.exit(BACKUP_EXIT.REFUSED);
   }
-  const outDir = resolve12(opts.out);
-  mkdirSync5(outDir, { recursive: true });
+  const outDir = resolve11(opts.out);
+  mkdirSync4(outDir, { recursive: true });
   console.error("dumping database…");
-  const dumpPath = join16(outDir, DB_FILE);
+  const dumpPath = join15(outDir, DB_FILE);
   const dumpCmd = pgDumpInvocation(databaseUrl, dumpPath);
   const dump = await runProcess(dumpCmd.cmd, "pg_dump", dumpCmd.env);
   if (!dump.ok) {
@@ -208570,7 +208123,7 @@ async function runBackup(opts) {
     db: {
       file: DB_FILE,
       sha256: await sha256File(dumpPath),
-      bytes: statSync3(dumpPath).size,
+      bytes: statSync2(dumpPath).size,
       format: "pg_dump-custom"
     }
   };
@@ -208578,16 +208131,16 @@ async function runBackup(opts) {
     const lines = SECRET_ENV_KEYS.filter((k) => process.env[k]).map((k) => `${k}=${process.env[k]}`);
     const sealed = encryptBundle(lines.join(`
 `), passphrase);
-    const secretsPath = join16(outDir, SECRETS_FILE);
-    writeFileSync8(secretsPath, sealed);
-    chmodSync2(secretsPath, 384);
+    const secretsPath = join15(outDir, SECRETS_FILE);
+    writeFileSync7(secretsPath, sealed);
+    chmodSync(secretsPath, 384);
     manifest.secrets = {
       file: SECRETS_FILE,
       encrypted: true,
       canary: sealKeyCanary(secretsKey)
     };
   }
-  writeFileSync8(join16(outDir, MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
+  writeFileSync7(join15(outDir, MANIFEST_FILE), `${JSON.stringify(manifest, null, 2)}
 `);
   output({
     json: opts.json,
@@ -208616,14 +208169,14 @@ function attachRestoreCommand(cmd) {
 }
 async function runRestore(opts) {
   const databaseUrl = requireDatabaseUrl();
-  const dir = resolve12(opts.from);
-  const manifestPath = join16(dir, MANIFEST_FILE);
-  if (!existsSync11(manifestPath)) {
+  const dir = resolve11(opts.from);
+  const manifestPath = join15(dir, MANIFEST_FILE);
+  if (!existsSync10(manifestPath)) {
     printError(`no ${MANIFEST_FILE} in ${dir}`);
     process.exit(BACKUP_EXIT.REFUSED);
   }
   const manifest = JSON.parse(readFileSync9(manifestPath, "utf8"));
-  const dumpPath = join16(dir, manifest.db?.file ?? DB_FILE);
+  const dumpPath = join15(dir, manifest.db?.file ?? DB_FILE);
   if (manifest.db && await sha256File(dumpPath) !== manifest.db.sha256) {
     printError("the database dump does not match the digest in the manifest; this bundle is corrupt or truncated");
     process.exit(BACKUP_EXIT.REFUSED);
@@ -208637,7 +208190,7 @@ async function runRestore(opts) {
       process.exit(BACKUP_EXIT.REFUSED);
     }
     try {
-      const env = decryptBundle(readFileSync9(join16(dir, manifest.secrets.file)), passphrase);
+      const env = decryptBundle(readFileSync9(join15(dir, manifest.secrets.file)), passphrase);
       bundleKey = env.split(`
 `).find((l) => l.startsWith("SECONDLAYER_SECRETS_KEY="))?.slice("SECONDLAYER_SECRETS_KEY=".length).trim();
     } catch {
@@ -208827,7 +208380,7 @@ init_resolve_auth();
 
 // src/lib/setup-prompts.ts
 import { resolve as resolvePath3 } from "node:path";
-import { confirm as confirm4, input as input3, select as select4 } from "@inquirer/prompts";
+import { confirm as confirm4, input as input2, select as select3 } from "@inquirer/prompts";
 
 // src/lib/oss-compose.ts
 function buildOssCompose(opts = {}) {
@@ -209005,10 +208558,10 @@ dbcache=4096
 // src/lib/setup-wizard.ts
 import { spawn as spawn3, spawnSync as spawnSync5 } from "node:child_process";
 import { randomBytes as randomBytes4 } from "node:crypto";
-import { existsSync as existsSync12 } from "node:fs";
+import { existsSync as existsSync11 } from "node:fs";
 import { writeFile as writeFile6 } from "node:fs/promises";
 import { createServer } from "node:net";
-import { join as join17, resolve as resolvePath2 } from "node:path";
+import { join as join16, resolve as resolvePath2 } from "node:path";
 import { closeDb as closeDb2, getRawClientFor } from "@secondlayer/shared/db";
 import { FLOORS, diskFloorGb } from "@secondlayer/shared/runtime";
 init_resolve_auth();
@@ -209108,8 +208661,8 @@ function randomHex(bytes) {
   return randomBytes4(bytes).toString("hex");
 }
 function resolveSecrets(config) {
-  const envPath = join17(config.dir, ".env");
-  const existing = config.force || !existsSync12(envPath) ? {} : readEnvFile(config.dir, envPath);
+  const envPath = join16(config.dir, ".env");
+  const existing = config.force || !existsSync11(envPath) ? {} : readEnvFile(config.dir, envPath);
   const instance = buildInstanceEnv({
     network: config.network,
     existing: {
@@ -209201,13 +208754,13 @@ function renderSetupEnv(config, secrets) {
 `);
 }
 async function writeSetupFiles(config, secrets) {
-  const composePath = join17(config.dir, "docker-compose.yml");
-  const envPath = join17(config.dir, ".env");
+  const composePath = join16(config.dir, "docker-compose.yml");
+  const envPath = join16(config.dir, ".env");
   await writeFile6(composePath, buildOssCompose({ owner: config.owner, imageTag: config.imageTag }));
   await writeFile6(envPath, renderSetupEnv(config, secrets), { mode: 384 });
   const result = { composePath, envPath };
   if (config.nodeMode === "full") {
-    const configTomlPath = join17(config.dir, "Config.toml");
+    const configTomlPath = join16(config.dir, "Config.toml");
     await writeFile6(configTomlPath, buildOssStacksConfigToml({
       network: config.network,
       bitcoinRpcPassword: secrets.bitcoinRpcPassword ?? ""
@@ -209215,7 +208768,7 @@ async function writeSetupFiles(config, secrets) {
     result.configTomlPath = configTomlPath;
   }
   if (config.nodeMode === "full") {
-    const bitcoinConfPath = join17(config.dir, "bitcoin.conf");
+    const bitcoinConfPath = join16(config.dir, "bitcoin.conf");
     await writeFile6(bitcoinConfPath, buildOssBitcoinConf({ rpcPassword: secrets.bitcoinRpcPassword ?? "" }));
     result.bitcoinConfPath = bitcoinConfPath;
   }
@@ -209593,7 +209146,7 @@ var NODE_MODE_DESCRIPTIONS = {
   full: "Bundled Stacks node + bitcoind."
 };
 async function promptSetupConfig(flags) {
-  const network = safeParse(flags.network, parseInstanceNetwork) ?? await select4({
+  const network = safeParse(flags.network, parseInstanceNetwork) ?? await select3({
     message: "Network",
     choices: [
       {
@@ -209613,7 +209166,7 @@ async function promptSetupConfig(flags) {
       }
     ]
   });
-  const nodeMode = safeParse(flags.nodeMode, parseSetupNodeMode) ?? await select4({
+  const nodeMode = safeParse(flags.nodeMode, parseSetupNodeMode) ?? await select3({
     message: "Node mode",
     choices: SETUP_NODE_MODES.map((mode) => {
       const floor = guardrailPreview(mode, network);
@@ -209627,7 +209180,7 @@ async function promptSetupConfig(flags) {
   let against = flags.against;
   let skipBootstrap = !!flags.skipBootstrap;
   if (!skipBootstrap && !against) {
-    const choice = await select4({
+    const choice = await select3({
       message: "Bootstrap from",
       choices: [
         {
@@ -209652,7 +209205,7 @@ async function promptSetupConfig(flags) {
     } else if (choice === "skip") {
       skipBootstrap = true;
     } else {
-      against = (await input3({
+      against = (await input2({
         message: "Manifest URL or local path",
         default: DEFAULT_ARCHIVE_MANIFEST
       })).trim();
@@ -209840,5 +209393,5 @@ registerCreditsCommand(program);
 registerArchiveCommand(program);
 program.parse();
 
-//# debugId=2DB2F04CDE6074B264756E2164756E21
+//# debugId=255DFF8A4862FC7D64756E2164756E21
 //# sourceMappingURL=cli.js.map