@secondlayer/cli 3.0.0 → 3.1.1

package/README.md

@@ -0,0 +1,128 @@
+# @secondlayer/cli
+
+The Secondlayer CLI — one binary for dedicated Stacks indexing, real-time
+subgraphs, and per-tenant hosting lifecycle.
+
+```bash
+bun add -g @secondlayer/cli
+sl --version
+```
+
+## Quickstart
+
+```bash
+sl login                         # magic-link auth, session cached at ~/.secondlayer/session.json
+sl project create my-app         # scaffold a project
+sl project use my-app            # bind cwd to the project (writes ./.secondlayer/project)
+sl instance create --plan launch # provision dedicated Postgres + API + processor
+sl subgraphs deploy ./x.ts       # deploy to your instance
+```
+
+## Command surface
+
+### Auth (top-level)
+
+| Command | What it does |
+|---|---|
+| `sl login` | Magic-link email → 6-digit code → writes session to `~/.secondlayer/session.json` |
+| `sl logout` | Revokes the session and clears the local file |
+| `sl whoami` | Prints account, active project, instance URL, trial days left |
+
+### Project
+
+Projects are the unit that binds a working directory to a dedicated instance.
+Binding is **per-directory** — `.secondlayer/project` in cwd takes precedence
+over the global default at `~/.secondlayer/config.json:defaultProject`. The
+walk-up stops at `.git` (never crosses repos).
+
+| Command | What it does |
+|---|---|
+| `sl project create [name]` | Scaffold a new project on the platform |
+| `sl project list` | List all projects for the account |
+| `sl project use <slug>` | Write `./.secondlayer/project` — binds cwd to that project |
+| `sl project current` | Prints the resolved slug + the file it was read from |
+
+### Instance (dedicated hosting)
+
+One instance per project. The platform API spawns a dedicated `sl-pg-{slug}`,
+`sl-api-{slug}`, and `sl-proc-{slug}` container set on the hosting side.
+
+| Command | What it does |
+|---|---|
+| `sl instance create --plan <launch\|grow\|scale>` | Provision containers. Boxed reveal of `serviceKey` + `anonKey` (shown once). |
+| `sl instance info` | Plan, status, resource usage, trial days left |
+| `sl instance resize --plan <...>` | Recreate containers with new CPU/memory (~30s downtime) |
+| `sl instance suspend` / `resume` | Stop/start containers, volume preserved |
+| `sl instance keys rotate [--service\|--anon\|--both]` | Bump JWT gen, recreate API container, mint replacement key(s) |
+| `sl instance delete` | Typed-slug confirm, hard teardown |
+| `sl instance db` | Print `ssh -L` command + `DATABASE_URL` for tunneled Postgres access |
+| `sl instance db add-key <path>` | Upload an SSH pubkey to the bastion |
+| `sl instance db revoke-key` | Revoke your bastion access |
+
+### Subgraphs (tenant-scoped)
+
+All tenant-scoped commands auto-mint a 5-minute ephemeral service JWT per
+invocation. No long-lived key on disk.
+
+| Command | What it does |
+|---|---|
+| `sl subgraphs new <name>` | Scaffold a subgraph definition file |
+| `sl subgraphs deploy <file>` | Deploy to the active instance |
+| `sl subgraphs dev <file>` | Watch + hot-redeploy |
+| `sl subgraphs list` | List deployed subgraphs |
+| `sl subgraphs status <name>` | Indexing progress, row counts, gaps |
+| `sl subgraphs query <name> <table>` | Query a subgraph table with filters, sort, pagination |
+| `sl subgraphs reindex <name>` | Drop + re-process from the tip backwards |
+| `sl subgraphs backfill <name>` | Fill a specific block range |
+| `sl subgraphs stop <name>` | Pause processing |
+| `sl subgraphs gaps <name>` | List missing block ranges |
+| `sl subgraphs delete <name>` | Drop the subgraph + its schema |
+| `sl subgraphs scaffold <SP...::contract>` | Generate a starter subgraph from a deployed contract |
+| `sl subgraphs generate <name>` | Regenerate TS types for an existing subgraph |
+
+### Local dev + OSS
+
+| Command | What it does |
+|---|---|
+| `sl local start/stop/restart/status/logs` | Manage the local Docker stack |
+| `sl local node setup/start/stop/...` | Manage the local Stacks node |
+| `sl stack start/stop/restart` | Alias for `sl local` |
+| `sl db blocks/txs/events/gaps/reset/resync` | Inspect the local source DB |
+
+### Other
+
+| Command | What it does |
+|---|---|
+| `sl generate [files...]` (aliases: `gen`, `codegen`) | Generate TS interfaces from Clarity contracts |
+| `sl init` | Scaffold `secondlayer.config.ts` |
+| `sl doctor` | Session + project + instance reachability + trial status check |
+| `sl status` | Platform/instance health |
+| `sl account profile` | Update display name / bio / slug |
+| `sl config show/set/reset/clear` | Inspect or reset local config |
+
+## Environment variables
+
+| Var | Purpose |
+|---|---|
+| `SL_API_URL` | Bypass platform resolution — point at an OSS or internal API directly |
+| `SL_SERVICE_KEY` | Service key when using env-var bypass |
+| `SL_PLATFORM_API_URL` | Override the platform API base (default `https://api.secondlayer.tools`) |
+| `STACKS_NETWORK` | Override via `--network <local\|testnet\|mainnet>` |
+| `HIRO_API_KEY` | Used by `sl generate` for remote contract fetches |
+
+## Error codes
+
+Every tenant-scoped failure surfaces a typed code and an action hint:
+
+| Code | CLI hint |
+|---|---|
+| `SESSION_EXPIRED` | `Session expired. Run: sl login` |
+| `TRIAL_EXPIRED` | `Your trial expired. Run: sl instance resize --plan <...> and add payment` |
+| `TENANT_SUSPENDED` | `Instance is suspended. Run: sl instance resume` |
+| `NO_ACTIVE_PROJECT` | `No project selected. Run: sl project use <slug>` |
+| `NO_TENANT_FOR_PROJECT` | `Project has no instance. Run: sl instance create --plan launch` |
+| `KEY_ROTATED` | Handled transparently — `http.ts` re-mints and retries once |
+
+## License
+
+MIT

package/dist/cli.js

@@ -32410,7 +32410,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "3.0.0",
+  version: "3.1.1",
   description: "CLI for subgraphs and blockchain indexing on Stacks",
   type: "module",
   bin: {
@@ -32431,7 +32431,8 @@ var package_default = {
   },
   files: [
     "dist",
-    "templates"
+    "templates",
+    "README.md"
   ],
   scripts: {
     build: "bunup",
@@ -32452,8 +32453,8 @@ var package_default = {
   dependencies: {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.3.0",
-    "@secondlayer/sdk": "^1.0.1",
-    "@secondlayer/shared": "^2.0.0",
+    "@secondlayer/sdk": "^2.0.0",
+    "@secondlayer/shared": "^2.1.0",
     "@secondlayer/stacks": "^0.3.0",
     "@secondlayer/subgraphs": "^0.11.8",
     "@secondlayer/workflows": "^1.1.0",
@@ -32521,20 +32522,6 @@ function withErrorHandling(fn, options) {
     }
   };
 }
-async function assertOk(res) {
-  if (res.ok)
-    return;
-  const body = await res.text();
-  try {
-    const parsed = JSON.parse(body);
-    if (typeof parsed.error === "string" && parsed.error)
-      throw new Error(parsed.error);
-  } catch (e) {
-    if (e instanceof Error && e.message !== body)
-      throw e;
-  }
-  throw new Error(`HTTP ${res.status}`);
-}
 async function getTenantClient() {
   const { apiUrl, ephemeralKey } = await resolveActiveTenant();
   return new SecondLayer({ baseUrl: apiUrl, apiKey: ephemeralKey });
@@ -32569,51 +32556,12 @@ async function querySubgraphTableCount(name, table, params = {}) {
 async function getSubgraphGaps(name, opts) {
   return (await getTenantClient()).subgraphs.gaps(name, opts);
 }
-async function publishSubgraphApi(name, opts) {
-  const { apiUrl, ephemeralKey } = await resolveActiveTenant();
-  const res = await fetch(`${apiUrl}/api/subgraphs/${name}/publish`, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      authorization: `Bearer ${ephemeralKey}`
-    },
-    body: JSON.stringify(opts ?? {})
-  });
-  await assertOk(res);
-  return res.json();
-}
-async function unpublishSubgraphApi(name) {
-  const { apiUrl, ephemeralKey } = await resolveActiveTenant();
-  const res = await fetch(`${apiUrl}/api/subgraphs/${name}/unpublish`, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      authorization: `Bearer ${ephemeralKey}`
-    },
-    body: JSON.stringify({})
-  });
-  await assertOk(res);
-  return res.json();
-}
 async function getAccountProfile() {
   return httpPlatform("/api/accounts/me");
 }
 async function updateAccountProfile(data) {
   return httpPlatform("/api/accounts/me", { method: "PATCH", body: data });
 }
-async function getPlatformClient() {
-  const base = process.env.SL_PLATFORM_API_URL ?? "https://api.secondlayer.tools";
-  return new SecondLayer({ baseUrl: base });
-}
-async function browseMarketplace(opts = {}) {
-  return (await getPlatformClient()).marketplace.browse(opts);
-}
-async function getMarketplaceSubgraph(name) {
-  return (await getPlatformClient()).marketplace.get(name);
-}
-async function forkMarketplaceSubgraph(name, newName) {
-  return (await getPlatformClient()).marketplace.fork(name, newName);
-}
 
 // src/commands/account.ts
 init_output();
@@ -34103,37 +34051,6 @@ ${rows.length} row(s)`));
       handleApiError(err, "delete subgraph");
     }
   });
-  subgraphs.command("publish <name>").description("Publish a subgraph to the marketplace").option("--tags <tags>", "Tags (comma-separated, max 5)").option("--description <desc>", "Public description (max 500 chars)").option("--json", "Output as JSON").action(async (name, options2) => {
-    try {
-      const opts = {};
-      if (options2.tags) {
-        opts.tags = options2.tags.split(",").map((t) => t.trim());
-      }
-      if (options2.description) {
-        opts.description = options2.description;
-      }
-      const result = await publishSubgraphApi(name, opts);
-      if (options2.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-      }
-      success(result.message);
-    } catch (err) {
-      handleApiError(err, "publish subgraph");
-    }
-  });
-  subgraphs.command("unpublish <name>").description("Remove a subgraph from the marketplace").option("--json", "Output as JSON").action(async (name, options2) => {
-    try {
-      const result = await unpublishSubgraphApi(name);
-      if (options2.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-      }
-      success(result.message);
-    } catch (err) {
-      handleApiError(err, "unpublish subgraph");
-    }
-  });
   subgraphs.command("scaffold <contractAddress>").description("Scaffold a defineSubgraph() file from a contract ABI").option("-o, --output <path>", "Output file path (required)").option("--api-key <key>", "Hiro API key").action(async (contractAddress, options2) => {
     try {
       if (!options2.output) {
@@ -34981,89 +34898,6 @@ function formatLogLine3(service, line) {
   }
   return `${prefix} ${line}`;
 }
-// src/commands/marketplace.ts
-init_output();
-function registerMarketplaceCommand(program2) {
-  const marketplace = program2.command("marketplace").alias("mp").description("Browse the public subgraph marketplace");
-  marketplace.command("browse").description("List public subgraphs").option("--tags <tags>", "Filter by tags (comma-separated)").option("--search <query>", "Search by name or description").option("--sort <field>", "Sort by: recent, popular, name", "recent").option("--limit <n>", "Max results", "20").option("--json", "Output as JSON").action(async (options2) => {
-    try {
-      const result = await browseMarketplace({
-        tags: options2.tags ? options2.tags.split(",").map((t) => t.trim()) : undefined,
-        search: options2.search,
-        sort: options2.sort,
-        limit: Number.parseInt(options2.limit ?? "20", 10)
-      });
-      if (options2.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-      }
-      if (result.data.length === 0) {
-        console.log(dim("No public subgraphs found"));
-        return;
-      }
-      const rows = result.data.map((s) => [
-        s.name,
-        s.creator?.displayName ?? s.creator?.slug ?? dim("—"),
-        (s.tags ?? []).join(", ") || dim("—"),
-        s.status
-      ]);
-      console.log(formatTable(["Name", "Creator", "Tags", "Status"], rows));
-      console.log(dim(`
-${result.meta.total} subgraph(s) total`));
-    } catch (err) {
-      handleApiError(err, "browse marketplace");
-    }
-  });
-  marketplace.command("view <name>").description("View a public subgraph's details").option("--json", "Output as JSON").action(async (name, options2) => {
-    try {
-      const detail = await getMarketplaceSubgraph(name);
-      if (options2.json) {
-        console.log(JSON.stringify(detail, null, 2));
-        return;
-      }
-      console.log(formatKeyValue([
-        ["Name", detail.name],
-        ["Description", detail.description ?? dim("—")],
-        [
-          "Creator",
-          detail.creator?.displayName ?? detail.creator?.slug ?? dim("—")
-        ],
-        ["Status", detail.status],
-        ["Version", detail.version],
-        ["Tags", (detail.tags ?? []).join(", ") || dim("—")],
-        ["Tables", detail.tables?.join(", ") ?? dim("—")],
-        ["Start Block", String(detail.startBlock)],
-        ["Last Processed", String(detail.lastProcessedBlock)],
-        ["Queries (7d)", String(detail.usage?.totalQueries7d ?? 0)],
-        ["Queries (30d)", String(detail.usage?.totalQueries30d ?? 0)],
-        ["Created", detail.createdAt]
-      ]));
-      if (detail.tableSchemas) {
-        console.log(dim(`
-Endpoints:`));
-        for (const [table, schema] of Object.entries(detail.tableSchemas)) {
-          console.log(`  ${cyan(table)} — ${schema.rowCount} rows — ${schema.endpoint}`);
-        }
-      }
-    } catch (err) {
-      handleApiError(err, "view subgraph");
-    }
-  });
-  marketplace.command("fork <name>").description("Fork a public subgraph into your account").option("--name <newName>", "Name for the forked subgraph").option("--json", "Output as JSON").action(async (name, options2) => {
-    try {
-      const result = await forkMarketplaceSubgraph(name, options2.name);
-      if (options2.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-      }
-      success(`Forked ${result.forkedFrom} as ${result.name}`);
-      console.log(dim(`Subgraph ID: ${result.subgraphId}`));
-      console.log(dim("Indexing will start automatically from the source's start block."));
-    } catch (err) {
-      handleApiError(err, "fork subgraph");
-    }
-  });
-}
 // src/commands/whoami.ts
 init_config();
 init_http();
@@ -35355,6 +35189,62 @@ function registerInstanceCommand(program2) {
       handleInstanceError(err, "rotate keys");
     }
   });
+  const db = instance.command("db").description("Get a DATABASE_URL for direct Postgres access (via SSH tunnel)");
+  db.command("info", { isDefault: true }).description("Print SSH tunnel command + DATABASE_URL for the instance").action(async () => {
+    guardOssMode();
+    try {
+      const res = await httpPlatform("/api/tenants/me/db-access");
+      console.log("");
+      console.log(dim("1. Upload your public key (one time):"));
+      console.log(dim("   sl instance db add-key ~/.ssh/id_ed25519.pub"));
+      console.log("");
+      console.log(dim("2. Open the SSH tunnel in a separate terminal:"));
+      console.log(green(`   ${res.sshCommand}`));
+      console.log("");
+      console.log(dim("3. Use this DATABASE_URL while the tunnel is open:"));
+      console.log(green(`   ${res.databaseUrl}`));
+      console.log("");
+    } catch (err) {
+      handleInstanceError(err, "fetch db access info");
+    }
+  });
+  db.command("add-key <path>").description("Upload an SSH public key to the bastion for this instance").action(async (path) => {
+    guardOssMode();
+    let publicKey;
+    try {
+      publicKey = (await Bun.file(path).text()).trim();
+    } catch (err) {
+      error(`Could not read ${path}: ${err instanceof Error ? err.message : String(err)}`);
+      process.exit(1);
+    }
+    if (!publicKey) {
+      error(`${path} is empty`);
+      process.exit(1);
+    }
+    try {
+      await httpPlatform("/api/tenants/me/db-access/key", { method: "POST", body: { publicKey } });
+      success("Bastion key installed. You can now open the SSH tunnel.");
+    } catch (err) {
+      handleInstanceError(err, "upload bastion key");
+    }
+  });
+  db.command("revoke-key").description("Revoke bastion access for this instance").option("-y, --yes", "Skip confirmation").action(async (opts) => {
+    guardOssMode();
+    if (!opts.yes) {
+      const ok = await confirm4({
+        message: "Revoke bastion access for this instance?",
+        default: false
+      });
+      if (!ok)
+        return;
+    }
+    try {
+      await httpPlatform("/api/tenants/me/db-access/key", { method: "DELETE" });
+      success("Bastion access revoked.");
+    } catch (err) {
+      handleInstanceError(err, "revoke bastion key");
+    }
+  });
 }
 function guardOssMode() {
   if (isOssMode()) {
@@ -35550,7 +35440,6 @@ registerWhoamiCommand(program);
 registerProjectCommand(program);
 registerInstanceCommand(program);
 registerSubgraphsCommand(program);
-registerMarketplaceCommand(program);
 registerStatusCommand(program);
 registerStackCommand(program);
 registerDbCommand(program);
@@ -35560,5 +35449,5 @@ registerLocalCommand(program);
 registerAccountCommand(program);
 program.parse();
 
-//# debugId=E8F09B3E58038C8F64756E2164756E21
+//# debugId=93095DDF734A3A2E64756E2164756E21
 //# sourceMappingURL=cli.js.map