@secondlayer/cli 21.0.0 → 21.1.0

package/README.md

@@ -82,7 +82,7 @@ No account. Writes `.env.local`, restores history, prints the Stacks observer st
 | `secondlayer init [--network mainnet\|testnet\|devnet] [--api-url <url>] [--force]` | Write `.env.local` (token, secrets key, webhook signing key). `--network` and `--api-url` are the global flags. Idempotent |
 | `secondlayer bootstrap --against <manifest> [--from-block <n>] [--to-block <n>] [--verify all\|blocks] [--public-key <pem>] [-y] [--json]` | Restore chain history from a verified archive into an empty database. A run that died mid-way resumes per dataset on re-run. After the load, digests for blocks, transactions, and events are checked over the restored range (`--verify blocks` skips the child datasets and the minutes they cost). Partition fetches retry three times with backoff on resets, timeouts, 429 (honoring `Retry-After`) and 5xx; a link that stays down exits `1` with a re-run hint, and the re-run resumes. Exit `0` restored, `1` diverged or interrupted, `2` refused |
 | `secondlayer observer [--mode indexer\|signer-shared] [--endpoint host:port] [--network …]` | Print the `[[events_observer]]` stanza. Signer-shared skips retries; a missed block stays a gap until `repair` |
-| `secondlayer verify [all\|raw\|decode:<name>\|subgraph:<name>] --against <manifest> [--quick\|--deep\|--anchor]` | Compare local data to a signed archive. Default target `raw`. Exit `0` clean, `1` diverged, `2` unanchored |
+| `secondlayer verify [all\|raw] --against <manifest> [--quick\|--deep\|--anchor]` | Compare local data to a signed archive. Default target `raw`. Exit `0` clean, `1` diverged, `2` unanchored |
 | `secondlayer verify block <height\|index_block_hash> [--node <url>] [--checkpoint <file>] [--rows] [--json]` | Prove one Stacks block from the checkpoint built into this release: Bitcoin headers, burn block, signer set, signatures, state root, state diff, and with `--rows` the indexed rows. Blocks below the checkpoint are tied to it by hash (parent links or one MARF proof) instead of signatures. Nothing else is trusted; proofs come from the API, or a node with `--node`. Exit `0` proven, `1` a link is broken, `2` could not check |
 | `secondlayer repair --against <archive> [--apply] [-y]` | Plan (default) or apply an archive repair. A fixed block is rewritten with its transactions and events from the archive; when the reference has no child partition for a height, the block is rewritten alone, the height is named with a `bootstrap --from-block H --to-block H` remedy, and the exit is `1`. Partition fetches retry like `bootstrap`; a link that stays down exits `1` with a re-run hint, and heights already repaired are kept |
 

package/dist/cli.js

@@ -29020,6 +29020,33 @@ function sourcesNeedingAbi(sources) {
   }
   return out;
 }
+function sourcesNamingState(sources) {
+  if (!sources || typeof sources !== "object")
+    return [];
+  const out = [];
+  for (const [name, raw] of Object.entries(sources)) {
+    const src = raw;
+    if (typeof src?.contractId !== "string" || src.contractId.includes("*") || src.trait !== undefined) {
+      continue;
+    }
+    if ((src.type === "map_set" || src.type === "map_insert" || src.type === "map_delete") && typeof src.map === "string") {
+      out.push({
+        name,
+        contractId: src.contractId,
+        kind: "map",
+        stateName: src.map
+      });
+    } else if (src.type === "var_set" && typeof src.varName === "string") {
+      out.push({
+        name,
+        contractId: src.contractId,
+        kind: "var",
+        stateName: src.varName
+      });
+    }
+  }
+  return out;
+}
 async function withDerivedAbis(source, client = new StacksApiClient) {
   let sources;
   try {
@@ -29028,16 +29055,22 @@ async function withDerivedAbis(source, client = new StacksApiClient) {
     return { source, abis: {} };
   }
   const needed = sourcesNeedingAbi(sources);
-  if (needed.length === 0)
+  const stateSources = sourcesNamingState(sources);
+  if (needed.length === 0 && stateSources.length === 0) {
     return { source, abis: {} };
+  }
   const byContract = new Map;
   const abis = {};
-  for (const { name, contractId } of needed) {
+  const interfaceOf = (contractId) => {
     let pending = byContract.get(contractId);
     if (!pending) {
       pending = client.getContractInfo(contractId).then(normalizeAbi3);
       byContract.set(contractId, pending);
     }
+    return pending;
+  };
+  for (const { name, contractId } of needed) {
+    const pending = interfaceOf(contractId);
     try {
       abis[name] = await pending;
     } catch (err) {
@@ -29045,6 +29078,19 @@ async function withDerivedAbis(source, client = new StacksApiClient) {
       throw new Error(`Could not fetch the abi for source "${name}" (${contractId}): ${reason}. Pass abi on the source instead (normalizeAbi() from @secondlayer/stacks/clarity).`);
     }
   }
+  for (const { name, contractId, kind, stateName } of stateSources) {
+    let contract;
+    try {
+      contract = await interfaceOf(contractId);
+    } catch {
+      continue;
+    }
+    const defined = ((kind === "map" ? contract.maps : contract.variables) ?? []).map((entry) => entry.name);
+    if (!defined.includes(stateName)) {
+      const noun = kind === "map" ? "map" : "variable";
+      throw new Error(`Source "${name}" reads ${noun} "${stateName}", which ${contractId} does not define. Its ${noun}s: ${defined.join(", ") || "none"}.`);
+    }
+  }
   return { source: injectSourceAbis(source, abis), abis };
 }
 var init_derive_abi = __esm(() => {
@@ -29423,7 +29469,7 @@ var init_git_status = () => {};
 
 // ../../node_modules/typescript/lib/typescript.js
 var require_typescript = __commonJS(function(exports, module) {
-  var __dirname = "/Users/ryan/projects/secondlayer-release/node_modules/typescript/lib", __filename = "/Users/ryan/projects/secondlayer-release/node_modules/typescript/lib/typescript.js";
+  var __dirname = "/private/tmp/claude-501/-Users-ryan-projects-secondlayer/f3803aac-4d84-4ad1-b9ab-de61be6a7179/scratchpad/rel/node_modules/typescript/lib", __filename = "/private/tmp/claude-501/-Users-ryan-projects-secondlayer/f3803aac-4d84-4ad1-b9ab-de61be6a7179/scratchpad/rel/node_modules/typescript/lib/typescript.js";
   /*! *****************************************************************************
   Copyright (c) Microsoft Corporation. All rights reserved.
   Licensed under the Apache License, Version 2.0 (the "License"); you may not use
@@ -202646,7 +202692,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "21.0.0",
+  version: "21.1.0",
   description: "Run a Stacks index on your own hardware — set it up, restore verified history, and keep it current.",
   repository: {
     type: "git",
@@ -202687,9 +202733,9 @@ var package_default = {
     "@secondlayer/scaffold": "^1.6.2",
     "@secondlayer/sdk": "^15.0.3",
     "@secondlayer/shared": "^13.0.0",
-    "@secondlayer/stacks": "^6.2.2",
-    "@secondlayer/subgraphs": "^7.0.4",
-    "@secondlayer/verify": "^0.5.4",
+    "@secondlayer/stacks": "^6.3.0",
+    "@secondlayer/subgraphs": "^7.1.0",
+    "@secondlayer/verify": "^0.6.0",
     esbuild: "^0.28.2",
     "smol-toml": "^1.9.1",
     zod: "^4.3.6"
@@ -204523,13 +204569,12 @@ function statusLabel(status) {
   return yellow("missing");
 }
 function attachVerifyCommand(cmd) {
-  return cmd.argument("[target]", "all | raw | decode:<name> | subgraph:<name>", "raw").option("--quick", "coverage/identity only (default)").option("--deep", "include semantic / scratch replay where available").option("--anchor", "require a verified archive signature").option("--against <manifest>", "archive manifest: an https URL or a local file path (required)").option("--from-block <n>", "first height to check").option("--to-block <n>", "last height to check").option("--counts", "also compare transaction/event row counts (slower)").option("--semantic", "also recompute per-partition semantic digests locally and compare (slow: full re-stream)").option("--public-key <pem>", "pin a signing key; default is the archive key built into this release").option("--insecure", "skip the manifest signature check (not recommended)").option("--json", "Output as JSON").addHelpText("after", `
+  return cmd.argument("[target]", "all | raw (decode:<name> and subgraph:<name> have no archive digests yet)", "raw").option("--quick", "coverage/identity only (default)").option("--deep", "include semantic / scratch replay where available").option("--anchor", "require a verified archive signature").option("--against <manifest>", "archive manifest: an https URL or a local file path (required)").option("--from-block <n>", "first height to check").option("--to-block <n>", "last height to check").option("--counts", "also compare transaction/event row counts (slower)").option("--semantic", "also recompute per-partition semantic digests locally and compare (slow: full re-stream)").option("--public-key <pem>", "pin a signing key; default is the archive key built into this release").option("--insecure", "skip the manifest signature check (not recommended)").option("--json", "Output as JSON").addHelpText("after", `
 Examples:
   $ secondlayer verify --against https://archive.secondlayer.tools/.../snapshots/<digest>.json
   $ secondlayer verify raw --against ./snapshot.json --from-block 8000000 --to-block 8499999
   $ secondlayer verify all --against ./snapshot.json --json
-  $ secondlayer verify decode:ft_transfer --against ./snapshot.json --quick
-  $ secondlayer verify subgraph:sbtc --against ./snapshot.json --deep
+  $ secondlayer verify subgraph <name> --replay
 
 Exit codes:
   0  local data matches the archive
@@ -204577,9 +204622,28 @@ Exit codes:
         });
         process.exit(VERIFY_EXIT.UNANCHORED);
       }
-      const reference = (manifest.range_digests ?? []).filter((d) => {
-        if (!datasetMatchesTarget(d.dataset, target))
-          return false;
+      const unanchoredJson = (detail) => output({
+        json: opts.json,
+        data: {
+          ...reportVerify({ target, mode, anchored: false, detail }),
+          status: "unanchored",
+          reference: origin,
+          reason: detail
+        },
+        human: () => {}
+      });
+      const published = (manifest.range_digests ?? []).filter((d) => datasetMatchesTarget(d.dataset, target));
+      if (published.length === 0) {
+        const label = target.kind === "decode" ? `decode:${target.name}` : target.kind === "subgraph" ? `subgraph:${target.name}` : target.kind;
+        const datasets = [
+          ...new Set((manifest.range_digests ?? []).map((d) => d.dataset))
+        ].sort();
+        const hint = target.kind === "decode" ? "Check the events decoders read from with: secondlayer verify raw --against <manifest>" : target.kind === "subgraph" ? "Recompute a state subgraph's rows with: secondlayer verify subgraph <name> --replay" : "Check the manifest you passed to --against.";
+        printError(`This archive publishes no digests for ${label}. It has: ${datasets.join(", ") || "none"}.`, { hint });
+        unanchoredJson("no digests");
+        process.exit(VERIFY_EXIT.UNANCHORED);
+      }
+      const reference = published.filter((d) => {
         if (fromBlock !== undefined && d.to_block < fromBlock)
           return false;
         if (toBlock !== undefined && d.from_block > toBlock)
@@ -204590,6 +204654,7 @@ Exit codes:
         printError("The reference publishes no digests for that range.", {
           hint: "Check --from-block/--to-block against the manifest's coverage."
         });
+        unanchoredJson("no digests for that range");
         process.exit(VERIFY_EXIT.UNANCHORED);
       }
       const db = getDb3();
@@ -208409,5 +208474,5 @@ registerCreditsCommand(program);
 registerArchiveCommand(program);
 program.parse();
 
-//# debugId=C5F366E55CEA893F64756E2164756E21
+//# debugId=36A335C6FBC2D29F64756E2164756E21
 //# sourceMappingURL=cli.js.map