@secondlayer/cli 5.1.5 → 5.2.0

package/dist/cli.js

@@ -2518,64 +2518,106 @@ var init_session = __esm(() => {
   SESSION_PATH = join(SESSION_DIR, "session.json");
 });
 
-// src/lib/http.ts
-async function request(url, opts) {
-  const headers = {
-    "content-type": "application/json",
-    ...opts.headers ?? {}
-  };
-  if (opts.bearer)
-    headers.authorization = `Bearer ${opts.bearer}`;
-  const res = await fetch(url, {
-    method: opts.method ?? "GET",
-    headers,
-    body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
-    signal: AbortSignal.timeout(opts.timeoutMs ?? REQUEST_TIMEOUT_MS)
-  });
-  if (!res.ok) {
-    let body = {};
-    try {
-      body = await res.json();
-    } catch {
-      body = { error: await res.text().catch(() => "") };
-    }
-    const code = body.code ?? (res.status === 401 ? "SESSION_EXPIRED" : res.status === 404 ? "NOT_FOUND" : `HTTP_${res.status}`);
-    const message = body.message ?? body.error ?? `HTTP ${res.status}`;
-    throw new CliHttpError(res.status, code, body, message);
+// src/lib/resolve-tenant.ts
+async function resolveActiveTenant(_opts = {}) {
+  const envUrl = process.env.SL_API_URL;
+  const envKey = process.env.SL_SERVICE_KEY;
+  if (envUrl && envKey) {
+    return { apiUrl: envUrl, ephemeralKey: envKey, fromEnv: true };
   }
-  if (res.status === 204)
-    return;
-  return await res.json();
-}
-async function httpPlatform(path2, opts = {}) {
   const session = await readSession();
   if (!session) {
-    throw new CliHttpError(401, "SESSION_EXPIRED", { error: "Not logged in" }, "Not logged in — run `sl login`");
+    const err = new Error("Not logged in — run `sl login`");
+    err.code = "SESSION_EXPIRED";
+    throw err;
   }
-  return request(`${PLATFORM_API_URL}${path2}`, {
-    ...opts,
-    bearer: session.token
-  });
+  return {
+    apiUrl: PLATFORM_API_URL2,
+    ephemeralKey: session.token,
+    fromEnv: false
+  };
 }
-async function httpPlatformAnon(path2, opts = {}) {
-  return request(`${PLATFORM_API_URL}${path2}`, opts);
+function isOssMode() {
+  return !!process.env.SL_API_URL && !process.env.SL_SERVICE_KEY;
 }
-var CliHttpError, PLATFORM_API_URL, REQUEST_TIMEOUT_MS = 30000;
-var init_http = __esm(() => {
+var PLATFORM_API_URL2;
+var init_resolve_tenant = __esm(() => {
   init_session();
-  CliHttpError = class CliHttpError extends Error {
-    status;
-    code;
-    body;
-    name = "CliHttpError";
-    constructor(status, code, body, message) {
-      super(message);
-      this.status = status;
-      this.code = code;
-      this.body = body;
-    }
+  PLATFORM_API_URL2 = process.env.SL_PLATFORM_API_URL ?? "https://api.secondlayer.tools";
+});
+
+// src/lib/output.ts
+function red(text) {
+  return `${colors.red}${text}${colors.reset}`;
+}
+function green(text) {
+  return `${colors.green}${text}${colors.reset}`;
+}
+function yellow(text) {
+  return `${colors.yellow}${text}${colors.reset}`;
+}
+function blue(text) {
+  return `${colors.blue}${text}${colors.reset}`;
+}
+function magenta(text) {
+  return `${colors.magenta}${text}${colors.reset}`;
+}
+function cyan(text) {
+  return `${colors.cyan}${text}${colors.reset}`;
+}
+function dim(text) {
+  return `${colors.dim}${text}${colors.reset}`;
+}
+function success(message) {
+  console.log(green(`✓ ${message}`));
+}
+function error(message) {
+  const text = message.trim() || "Command failed.";
+  console.error(red(`✗ ${text}`));
+}
+function warn(message) {
+  console.log(yellow(`⚠ ${message}`));
+}
+function info(message) {
+  console.log(blue(`ℹ ${message}`));
+}
+function stripAnsi(text) {
+  return text.replace(ANSI_ESCAPE_PATTERN, "");
+}
+function formatTable(headers, rows) {
+  const widths = headers.map((h, i) => {
+    const colValues = [h, ...rows.map((r) => r[i] || "")];
+    return Math.max(...colValues.map((v) => stripAnsi(v).length));
+  });
+  const headerRow = headers.map((h, i) => h.padEnd(widths[i] ?? 0)).join("  ");
+  const separator = widths.map((w) => "-".repeat(w)).join("  ");
+  const dataRows = rows.map((row) => row.map((cell, i) => {
+    const width = widths[i] ?? 0;
+    const padding = width - stripAnsi(cell).length;
+    return cell + " ".repeat(Math.max(0, padding));
+  }).join("  "));
+  return [headerRow, separator, ...dataRows].join(`
+`);
+}
+function formatKeyValue(pairs) {
+  const maxKeyLen = Math.max(...pairs.map(([k]) => k.length));
+  return pairs.map(([key, value]) => `${dim(key.padEnd(maxKeyLen))}  ${value}`).join(`
+`);
+}
+var colors, ANSI_ESCAPE_PATTERN;
+var init_output = __esm(() => {
+  colors = {
+    reset: "\x1B[0m",
+    red: "\x1B[31m",
+    green: "\x1B[32m",
+    yellow: "\x1B[33m",
+    blue: "\x1B[34m",
+    magenta: "\x1B[35m",
+    cyan: "\x1B[36m",
+    dim: "\x1B[2m",
+    bold: "\x1B[1m"
   };
-  PLATFORM_API_URL = process.env.SL_PLATFORM_API_URL ?? "https://api.secondlayer.tools";
+  ANSI_ESCAPE_PATTERN = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
 });
 
 // src/lib/fs.ts
@@ -2688,7 +2730,7 @@ async function loadConfig() {
       const raw = await readJsonFile(CONFIG_PATH);
       const migrated = migrateConfig(raw);
       config = ConfigSchema.parse(migrated);
-    } catch (error) {
+    } catch (error2) {
       console.error("Warning: Invalid config file, using defaults");
       config = { ...DEFAULT_CONFIG };
     }
@@ -2844,167 +2886,6 @@ var init_config = __esm(() => {
   };
 });
 
-// src/lib/project-file.ts
-import { existsSync } from "node:fs";
-import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
-import { homedir as homedir3 } from "node:os";
-import { dirname as dirname2, join as join3, parse as parsePath, resolve } from "node:path";
-import { z as z3 } from "zod/v4";
-async function readActiveProject(cwd, globalDefault) {
-  let dir = resolve(cwd);
-  const home = resolve(homedir3());
-  const fsRoot = parsePath(dir).root;
-  while (true) {
-    const candidate = join3(dir, DIRNAME, FILENAME);
-    if (existsSync(candidate)) {
-      try {
-        const raw = await readFile3(candidate, "utf8");
-        const parsed = ProjectFileSchema.parse(JSON.parse(raw));
-        return { slug: parsed.slug, resolvedFrom: candidate };
-      } catch {}
-    }
-    if (existsSync(join3(dir, ".git")))
-      break;
-    if (dir === home || dir === fsRoot)
-      break;
-    const parent = dirname2(dir);
-    if (parent === dir)
-      break;
-    dir = parent;
-  }
-  if (globalDefault) {
-    return {
-      slug: globalDefault,
-      resolvedFrom: join3(homedir3(), ".secondlayer", "config.json")
-    };
-  }
-  return null;
-}
-async function writeActiveProject(slug, cwd) {
-  const dir = join3(resolve(cwd), DIRNAME);
-  await mkdir3(dir, { recursive: true });
-  const file = join3(dir, FILENAME);
-  await writeFile3(file, `${JSON.stringify({ slug }, null, 2)}
-`, "utf8");
-  return file;
-}
-var ProjectFileSchema, FILENAME = "project", DIRNAME = ".secondlayer";
-var init_project_file = __esm(() => {
-  ProjectFileSchema = z3.object({
-    slug: z3.string().min(1)
-  });
-});
-
-// src/lib/resolve-tenant.ts
-async function resolveActiveTenant(opts = {}) {
-  const envUrl = process.env.SL_API_URL;
-  const envKey = process.env.SL_SERVICE_KEY;
-  if (envUrl && envKey) {
-    return { apiUrl: envUrl, ephemeralKey: envKey, fromEnv: true };
-  }
-  opts.tenant;
-  try {
-    const res = await httpPlatform("/api/tenants/me/keys/mint-ephemeral", { method: "POST" });
-    return {
-      apiUrl: res.apiUrl,
-      ephemeralKey: res.serviceKey,
-      fromEnv: false
-    };
-  } catch (err) {
-    if (err instanceof CliHttpError) {
-      if (err.status === 404) {
-        const config = await loadConfig();
-        const active = await readActiveProject(process.cwd(), config.defaultProject);
-        const hint = active ? `Run 'sl instance create --plan launch' to provision for project ${active.slug}` : "Run 'sl project create <name>' then 'sl instance create --plan launch'";
-        throw new CliHttpError(404, "NO_TENANT_FOR_PROJECT", { error: hint }, hint);
-      }
-    }
-    throw err;
-  }
-}
-function isOssMode() {
-  return !!process.env.SL_API_URL && !process.env.SL_SERVICE_KEY;
-}
-var init_resolve_tenant = __esm(() => {
-  init_config();
-  init_http();
-  init_project_file();
-});
-
-// src/lib/output.ts
-function red(text) {
-  return `${colors.red}${text}${colors.reset}`;
-}
-function green(text) {
-  return `${colors.green}${text}${colors.reset}`;
-}
-function yellow(text) {
-  return `${colors.yellow}${text}${colors.reset}`;
-}
-function blue(text) {
-  return `${colors.blue}${text}${colors.reset}`;
-}
-function magenta(text) {
-  return `${colors.magenta}${text}${colors.reset}`;
-}
-function cyan(text) {
-  return `${colors.cyan}${text}${colors.reset}`;
-}
-function dim(text) {
-  return `${colors.dim}${text}${colors.reset}`;
-}
-function success(message) {
-  console.log(green(`✓ ${message}`));
-}
-function error(message) {
-  const text = message.trim() || "Command failed.";
-  console.error(red(`✗ ${text}`));
-}
-function warn(message) {
-  console.log(yellow(`⚠ ${message}`));
-}
-function info(message) {
-  console.log(blue(`ℹ ${message}`));
-}
-function stripAnsi(text) {
-  return text.replace(ANSI_ESCAPE_PATTERN, "");
-}
-function formatTable(headers, rows) {
-  const widths = headers.map((h, i) => {
-    const colValues = [h, ...rows.map((r) => r[i] || "")];
-    return Math.max(...colValues.map((v) => stripAnsi(v).length));
-  });
-  const headerRow = headers.map((h, i) => h.padEnd(widths[i] ?? 0)).join("  ");
-  const separator = widths.map((w) => "-".repeat(w)).join("  ");
-  const dataRows = rows.map((row) => row.map((cell, i) => {
-    const width = widths[i] ?? 0;
-    const padding = width - stripAnsi(cell).length;
-    return cell + " ".repeat(Math.max(0, padding));
-  }).join("  "));
-  return [headerRow, separator, ...dataRows].join(`
-`);
-}
-function formatKeyValue(pairs) {
-  const maxKeyLen = Math.max(...pairs.map(([k]) => k.length));
-  return pairs.map(([key, value]) => `${dim(key.padEnd(maxKeyLen))}  ${value}`).join(`
-`);
-}
-var colors, ANSI_ESCAPE_PATTERN;
-var init_output = __esm(() => {
-  colors = {
-    reset: "\x1B[0m",
-    red: "\x1B[31m",
-    green: "\x1B[32m",
-    yellow: "\x1B[33m",
-    blue: "\x1B[34m",
-    magenta: "\x1B[35m",
-    cyan: "\x1B[36m",
-    dim: "\x1B[2m",
-    bold: "\x1B[1m"
-  };
-  ANSI_ESCAPE_PATTERN = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
-});
-
 // src/lib/docker.ts
 async function isDockerAvailable() {
   try {
@@ -3063,9 +2944,9 @@ var init_query = __esm(() => {
   CLOSE = {};
   Query = class Query extends Promise {
     constructor(strings, args, handler, canceller, options = {}) {
-      let resolve2, reject;
+      let resolve, reject;
       super((a, b) => {
-        resolve2 = a;
+        resolve = a;
         reject = b;
       });
       this.tagged = Array.isArray(strings.raw);
@@ -3076,7 +2957,7 @@ var init_query = __esm(() => {
       this.options = options;
       this.state = null;
       this.statement = null;
-      this.resolve = (x) => (this.active = false, resolve2(x));
+      this.resolve = (x) => (this.active = false, resolve(x));
       this.reject = (x) => (this.active = false, reject(x));
       this.active = false;
       this.cancelled = null;
@@ -3124,12 +3005,12 @@ var init_query = __esm(() => {
             if (this.executed && !this.active)
               return { done: true };
             prev && prev();
-            const promise = new Promise((resolve2, reject) => {
+            const promise = new Promise((resolve, reject) => {
               this.cursorFn = (value) => {
-                resolve2({ value, done: false });
+                resolve({ value, done: false });
                 return new Promise((r) => prev = r);
               };
-              this.resolve = () => (this.active = false, resolve2({ done: true }));
+              this.resolve = () => (this.active = false, resolve({ done: true }));
               this.reject = (x) => (this.active = false, reject(x));
             });
             this.execute();
@@ -3683,12 +3564,12 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
     x.on("drain", drain);
     return x;
   }
-  async function cancel({ pid, secret }, resolve2, reject) {
+  async function cancel({ pid, secret }, resolve, reject) {
     try {
       cancelMessage = bytes_default().i32(16).i32(80877102).i32(pid).i32(secret).end(16);
       await connect();
       socket.once("error", reject);
-      socket.once("close", resolve2);
+      socket.once("close", resolve);
     } catch (error3) {
       reject(error3);
     }
@@ -4561,7 +4442,7 @@ var noop2 = () => {};
 // ../../node_modules/postgres/src/large.js
 import Stream2 from "stream";
 function largeObject(sql, oid, mode = 131072 | 262144) {
-  return new Promise(async (resolve2, reject) => {
+  return new Promise(async (resolve, reject) => {
     await sql.begin(async (sql2) => {
       let finish;
       !oid && ([{ oid }] = await sql2`select lo_creat(-1) as oid`);
@@ -4587,7 +4468,7 @@ function largeObject(sql, oid, mode = 131072 | 262144) {
           ) seek
         `
       };
-      resolve2(lo);
+      resolve(lo);
       return new Promise(async (r) => finish = r);
       async function readable({
         highWaterMark = 2048 * 8,
@@ -4747,8 +4628,8 @@ function Postgres(a, b2) {
   }
   async function reserve() {
     const queue = queue_default();
-    const c = open.length ? open.shift() : await new Promise((resolve2, reject) => {
-      const query = { reserve: resolve2, reject };
+    const c = open.length ? open.shift() : await new Promise((resolve, reject) => {
+      const query = { reserve: resolve, reject };
       queries.push(query);
       closed.length && connect(closed.shift(), query);
     });
@@ -4785,9 +4666,9 @@ function Postgres(a, b2) {
       let uncaughtError, result;
       name && await sql2`savepoint ${sql2(name)}`;
       try {
-        result = await new Promise((resolve2, reject) => {
+        result = await new Promise((resolve, reject) => {
           const x = fn2(sql2);
-          Promise.resolve(Array.isArray(x) ? Promise.all(x) : x).then(resolve2, reject);
+          Promise.resolve(Array.isArray(x) ? Promise.all(x) : x).then(resolve, reject);
         });
         if (uncaughtError)
           throw uncaughtError;
@@ -4844,8 +4725,8 @@ function Postgres(a, b2) {
     return c.execute(query) ? move(c, busy) : move(c, full);
   }
   function cancel(query) {
-    return new Promise((resolve2, reject) => {
-      query.state ? query.active ? connection_default(options).cancel(query.state, resolve2, reject) : query.cancelled = { resolve: resolve2, reject } : (queries.remove(query), query.cancelled = true, query.reject(Errors.generic("57014", "canceling statement due to user request")), resolve2());
+    return new Promise((resolve, reject) => {
+      query.state ? query.active ? connection_default(options).cancel(query.state, resolve, reject) : query.cancelled = { resolve, reject } : (queries.remove(query), query.cancelled = true, query.reject(Errors.generic("57014", "canceling statement due to user request")), resolve());
     });
   }
   async function end({ timeout = null } = {}) {
@@ -4861,11 +4742,11 @@ function Postgres(a, b2) {
   async function close() {
     await Promise.all(connections.map((c) => c.end()));
   }
-  async function destroy(resolve2) {
+  async function destroy(resolve) {
     await Promise.all(connections.map((c) => c.terminate()));
     while (queries.length)
       queries.shift().reject(Errors.connection("CONNECTION_DESTROYED", options));
-    resolve2();
+    resolve();
   }
   function connect(c, query) {
     move(c, connecting);
@@ -5049,13 +4930,13 @@ __export(exports_dev_state, {
   clearLogs: () => clearLogs,
   clearDevState: () => clearDevState
 });
-import { homedir as homedir5 } from "node:os";
-import { join as join6 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+import { join as join5 } from "node:path";
 function getLogsDir() {
   return LOGS_DIR;
 }
 function getLogFile(service) {
-  return join6(LOGS_DIR, `${service}.log`);
+  return join5(LOGS_DIR, `${service}.log`);
 }
 async function ensureDirs() {
   await Bun.$`mkdir -p ${STATE_DIR}`.quiet();
@@ -5112,9 +4993,9 @@ async function isDevRunning() {
 }
 var STATE_DIR, DEV_STATE_PATH, LOGS_DIR;
 var init_dev_state = __esm(() => {
-  STATE_DIR = join6(homedir5(), ".secondlayer");
-  DEV_STATE_PATH = join6(STATE_DIR, "dev.json");
-  LOGS_DIR = join6(STATE_DIR, "logs");
+  STATE_DIR = join5(homedir4(), ".secondlayer");
+  DEV_STATE_PATH = join5(STATE_DIR, "dev.json");
+  LOGS_DIR = join5(STATE_DIR, "logs");
 });
 
 // src/utils/abi-compat.ts
@@ -5783,9 +5664,9 @@ var init_dist = __esm(() => {
 class PCancelable {
   static fn(userFunction) {
     return (...arguments_) => {
-      return new PCancelable((resolve3, reject, onCancel) => {
+      return new PCancelable((resolve2, reject, onCancel) => {
         arguments_.push(onCancel);
-        userFunction(...arguments_).then(resolve3, reject);
+        userFunction(...arguments_).then(resolve2, reject);
       });
     };
   }
@@ -5794,12 +5675,12 @@ class PCancelable {
     this._isPending = true;
     this._isCanceled = false;
     this._rejectOnCancel = true;
-    this._promise = new Promise((resolve3, reject) => {
+    this._promise = new Promise((resolve2, reject) => {
       this._reject = reject;
       const onResolve = (value) => {
         if (!this._isCanceled || !onCancel.shouldReject) {
           this._isPending = false;
-          resolve3(value);
+          resolve2(value);
         }
       };
       const onReject = (error2) => {
@@ -6443,7 +6324,7 @@ var require_get_stream = __commonJS((exports, module) => {
     };
     const { maxBuffer } = options;
     const stream2 = bufferStream(options);
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve2, reject) => {
       const rejectPromise = (error2) => {
         if (error2 && stream2.getBufferedLength() <= BufferConstants.MAX_LENGTH) {
           error2.bufferedData = stream2.getBufferedValue();
@@ -6453,7 +6334,7 @@ var require_get_stream = __commonJS((exports, module) => {
       (async () => {
         try {
           await streamPipelinePromisified(inputStream, stream2);
-          resolve3();
+          resolve2();
         } catch (error2) {
           rejectPromise(error2);
         }
@@ -7355,11 +7236,11 @@ class CacheableRequest {
         madeRequest = true;
         let requestErrored = false;
         let requestErrorCallback = () => {};
-        const requestErrorPromise = new Promise((resolve3) => {
+        const requestErrorPromise = new Promise((resolve2) => {
           requestErrorCallback = () => {
             if (!requestErrored) {
               requestErrored = true;
-              resolve3();
+              resolve2();
             }
           };
         });
@@ -7369,8 +7250,8 @@ class CacheableRequest {
             const revalidatedPolicy = import_http_cache_semantics.default.fromObject(revalidate.cachePolicy).revalidatedPolicy(options_, response);
             if (!revalidatedPolicy.modified) {
               response.resume();
-              await new Promise((resolve3) => {
-                response.once("end", resolve3);
+              await new Promise((resolve2) => {
+                response.once("end", resolve2);
               });
               const headers = convertHeaders(revalidatedPolicy.policy.responseHeaders());
               response = new Response({ statusCode: revalidate.statusCode, headers, body: revalidate.body, url: revalidate.url });
@@ -7390,8 +7271,8 @@ class CacheableRequest {
                 const bodyPromise = import_get_stream.default.buffer(response);
                 await Promise.race([
                   requestErrorPromise,
-                  new Promise((resolve3) => response.once("end", resolve3)),
-                  new Promise((resolve3) => response.once("close", resolve3))
+                  new Promise((resolve2) => response.once("end", resolve2)),
+                  new Promise((resolve2) => response.once("close", resolve2))
                 ]);
                 const body = await bodyPromise;
                 let value = {
@@ -7722,7 +7603,7 @@ var require_get_stream2 = __commonJS((exports, module) => {
     };
     const { maxBuffer } = options;
     const stream3 = bufferStream(options);
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve2, reject) => {
       const rejectPromise = (error2) => {
         if (error2 && stream3.getBufferedLength() <= BufferConstants.MAX_LENGTH) {
           error2.bufferedData = stream3.getBufferedValue();
@@ -7732,7 +7613,7 @@ var require_get_stream2 = __commonJS((exports, module) => {
       (async () => {
         try {
           await streamPipelinePromisified(inputStream, stream3);
-          resolve3();
+          resolve2();
         } catch (error2) {
           rejectPromise(error2);
         }
@@ -8918,12 +8799,12 @@ var require_agent = __commonJS((exports, module) => {
       }
     }
     getSession(origin, options, listeners) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         if (Array.isArray(listeners) && listeners.length > 0) {
           listeners = [...listeners];
-          resolve3();
+          resolve2();
         } else {
-          listeners = [{ resolve: resolve3, reject }];
+          listeners = [{ resolve: resolve2, reject }];
         }
         try {
           if (typeof origin === "string") {
@@ -9202,14 +9083,14 @@ var require_agent = __commonJS((exports, module) => {
       });
     }
     request(origin, options, headers, streamOptions) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         this.getSession(origin, options, [{
           reject,
           resolve: (session) => {
             try {
               const stream2 = session.request(headers, streamOptions);
               delayAsyncDestroy(stream2);
-              resolve3(stream2);
+              resolve2(stream2);
             } catch (error2) {
               reject(error2);
             }
@@ -9930,7 +9811,7 @@ var require_client_request = __commonJS((exports, module) => {
 // ../../node_modules/resolve-alpn/index.js
 var require_resolve_alpn = __commonJS((exports, module) => {
   var tls2 = __require("tls");
-  module.exports = (options = {}, connect = tls2.connect) => new Promise((resolve3, reject) => {
+  module.exports = (options = {}, connect = tls2.connect) => new Promise((resolve2, reject) => {
     let timeout = false;
     let socket;
     const callback = async () => {
@@ -9938,14 +9819,14 @@ var require_resolve_alpn = __commonJS((exports, module) => {
       socket.off("timeout", onTimeout);
       socket.off("error", reject);
       if (options.resolveSocket) {
-        resolve3({ alpnProtocol: socket.alpnProtocol, socket, timeout });
+        resolve2({ alpnProtocol: socket.alpnProtocol, socket, timeout });
         if (timeout) {
           await Promise.resolve();
           socket.emit("timeout");
         }
       } else {
         socket.destroy();
-        resolve3({ alpnProtocol: socket.alpnProtocol, timeout });
+        resolve2({ alpnProtocol: socket.alpnProtocol, timeout });
       }
     };
     const onTimeout = async () => {
@@ -10348,11 +10229,11 @@ var require_h2_over_h2 = __commonJS((exports, module) => {
   var { globalAgent } = require_agent();
   var Http2OverHttpX = require_h2_over_hx();
   var getAuthorizationHeaders = require_get_auth_headers();
-  var getStatusCode = (stream2) => new Promise((resolve3, reject) => {
+  var getStatusCode = (stream2) => new Promise((resolve2, reject) => {
     stream2.once("error", reject);
     stream2.once("response", (headers) => {
       stream2.off("error", reject);
-      resolve3(headers[":status"]);
+      resolve2(headers[":status"]);
     });
   });
 
@@ -10379,11 +10260,11 @@ var require_h2_over_h1 = __commonJS((exports, module) => {
   var https = __require("https");
   var Http2OverHttpX = require_h2_over_hx();
   var getAuthorizationHeaders = require_get_auth_headers();
-  var getStream2 = (request2) => new Promise((resolve3, reject) => {
+  var getStream2 = (request2) => new Promise((resolve2, reject) => {
     const onConnect = (response, socket, head) => {
       socket.unshift(head);
       request2.off("error", reject);
-      resolve3([socket, response.statusCode, response.statusMessage]);
+      resolve2([socket, response.statusCode, response.statusMessage]);
     };
     request2.once("error", reject);
     request2.once("connect", onConnect);
@@ -12008,11 +11889,11 @@ var init_core = __esm(() => {
             return;
           }
           if (backoff2) {
-            await new Promise((resolve3) => {
-              const timeout = setTimeout(resolve3, backoff2);
+            await new Promise((resolve2) => {
+              const timeout = setTimeout(resolve2, backoff2);
               this._stopRetry = () => {
                 clearTimeout(timeout);
-                resolve3();
+                resolve2();
               };
             });
             if (this.destroyed) {
@@ -12388,13 +12269,13 @@ var init_core = __esm(() => {
       this.emit("request", request2);
     }
     async _asyncWrite(chunk) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         super.write(chunk, (error2) => {
           if (error2) {
             reject(error2);
             return;
           }
-          resolve3();
+          resolve2();
         });
       });
     }
@@ -12454,7 +12335,7 @@ var init_core = __esm(() => {
       }
     }
     async _createCacheableRequest(url, options) {
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve2, reject) => {
         Object.assign(options, urlToOptions(url));
         let request2;
         const cacheRequest = cacheableStore.get(options.cache)(options, async (response) => {
@@ -12469,12 +12350,12 @@ var init_core = __esm(() => {
             fix();
             (await request2).emit("cacheableResponse", response);
           }
-          resolve3(response);
+          resolve2(response);
         });
         cacheRequest.once("error", reject);
         cacheRequest.once("request", async (requestOrPromise) => {
           request2 = requestOrPromise;
-          resolve3(request2);
+          resolve2(request2);
         });
       });
     }
@@ -12652,7 +12533,7 @@ function asPromise(firstRequest) {
   let globalResponse;
   let normalizedOptions;
   const emitter = new EventEmitter2;
-  const promise = new PCancelable((resolve3, reject, onCancel) => {
+  const promise = new PCancelable((resolve2, reject, onCancel) => {
     onCancel(() => {
       globalRequest.destroy();
     });
@@ -12709,7 +12590,7 @@ function asPromise(firstRequest) {
           return;
         }
         request2.destroy();
-        resolve3(request2.options.resolveBodyOnly ? response.body : response);
+        resolve2(request2.options.resolveBodyOnly ? response.body : response);
       });
       const onError = (error2) => {
         if (promise.isCanceled) {
@@ -12719,7 +12600,7 @@ function asPromise(firstRequest) {
         if (error2 instanceof HTTPError && !options.throwHttpErrors) {
           const { response } = error2;
           request2.destroy();
-          resolve3(request2.options.resolveBodyOnly ? response.body : response);
+          resolve2(request2.options.resolveBodyOnly ? response.body : response);
           return;
         }
         reject(error2);
@@ -12792,8 +12673,8 @@ var init_as_promise = __esm(() => {
 });
 
 // ../../node_modules/got/dist/source/create.js
-var delay = async (ms) => new Promise((resolve3) => {
-  setTimeout(resolve3, ms);
+var delay = async (ms) => new Promise((resolve2) => {
+  setTimeout(resolve2, ms);
 }), isGotInstance = (value) => dist_default.function_(value), aliases, create = (defaults) => {
   defaults = {
     options: new Options(undefined, undefined, defaults.options),
@@ -13467,11 +13348,11 @@ var init_manager = __esm(() => {
 });
 
 // src/services/indexer.ts
-import { dirname as dirname5, resolve as resolve4 } from "node:path";
+import { dirname as dirname4, resolve as resolve3 } from "node:path";
 async function startIndexer(options2) {
   const port = options2.port ?? 3700;
-  const rootDir = dirname5(dirname5(dirname5(dirname5(import.meta.dir))));
-  const indexerPath = resolve4(rootDir, "packages/indexer/src/index.ts");
+  const rootDir = dirname4(dirname4(dirname4(dirname4(import.meta.dir))));
+  const indexerPath = resolve3(rootDir, "packages/indexer/src/index.ts");
   await serviceManager.start(SERVICE_NAME, ["bun", "run", "--watch", indexerPath], {
     port,
     env: {
@@ -13487,10 +13368,10 @@ var init_indexer = __esm(() => {
 });
 
 // src/services/worker.ts
-import { dirname as dirname6, resolve as resolve5 } from "node:path";
+import { dirname as dirname5, resolve as resolve4 } from "node:path";
 async function startWorker(options2) {
-  const rootDir = dirname6(dirname6(dirname6(dirname6(import.meta.dir))));
-  const workerPath = resolve5(rootDir, "packages/worker/src/index.ts");
+  const rootDir = dirname5(dirname5(dirname5(dirname5(import.meta.dir))));
+  const workerPath = resolve4(rootDir, "packages/worker/src/index.ts");
   await serviceManager.start(SERVICE_NAME2, ["bun", "run", "--watch", workerPath], {
     onStdout: options2.onLog,
     onStderr: options2.onLog
@@ -13502,11 +13383,11 @@ var init_worker = __esm(() => {
 });
 
 // src/services/api.ts
-import { dirname as dirname7, resolve as resolve6 } from "node:path";
+import { dirname as dirname6, resolve as resolve5 } from "node:path";
 async function startApi(options2) {
   const port = options2.port ?? 3800;
-  const rootDir = dirname7(dirname7(dirname7(dirname7(import.meta.dir))));
-  const apiPath = resolve6(rootDir, "packages/api/src/index.ts");
+  const rootDir = dirname6(dirname6(dirname6(dirname6(import.meta.dir))));
+  const apiPath = resolve5(rootDir, "packages/api/src/index.ts");
   await serviceManager.start(SERVICE_NAME3, ["bun", "run", "--watch", apiPath], {
     port,
     env: {
@@ -13522,10 +13403,10 @@ var init_api2 = __esm(() => {
 });
 
 // src/services/subgraph-processor.ts
-import { dirname as dirname8, resolve as resolve7 } from "node:path";
+import { dirname as dirname7, resolve as resolve6 } from "node:path";
 async function startSubgraphProcessor(options2) {
-  const rootDir = dirname8(dirname8(dirname8(dirname8(import.meta.dir))));
-  const servicePath = resolve7(rootDir, "packages/subgraphs/src/service.ts");
+  const rootDir = dirname7(dirname7(dirname7(dirname7(import.meta.dir))));
+  const servicePath = resolve6(rootDir, "packages/subgraphs/src/service.ts");
   await serviceManager.start(SERVICE_NAME4, ["bun", "run", "--watch", servicePath], {
     env: {
       SUBGRAPH_CONCURRENCY: String(options2.concurrency ?? 5)
@@ -13560,7 +13441,7 @@ __export(exports_dev_impl, {
   isDevAlreadyRunning: () => isDevAlreadyRunning
 });
 import { mkdirSync as mkdirSync3 } from "node:fs";
-import { dirname as dirname9, join as join8, resolve as resolve8 } from "node:path";
+import { dirname as dirname8, join as join7, resolve as resolve7 } from "node:path";
 async function isDevAlreadyRunning() {
   if (await isDevRunning()) {
     const running = await getRunningServices();
@@ -13638,10 +13519,10 @@ async function runBackground(options2) {
     startedAt: new Date().toISOString()
   };
   try {
-    const packagesDir = dirname9(dirname9(dirname9(dirname9(import.meta.dir))));
+    const packagesDir = dirname8(dirname8(dirname8(dirname8(import.meta.dir))));
     const env = { DATABASE_URL: databaseUrl, DEV_MODE: "true" };
     const apiLogFile = getLogFile("api");
-    const apiProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/api/src/index.ts")], {
+    const apiProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/api/src/index.ts")], {
       env: { ...process.env, ...env, PORT: String(apiPort) },
       stdout: Bun.file(apiLogFile),
       stderr: Bun.file(apiLogFile)
@@ -13654,7 +13535,7 @@ async function runBackground(options2) {
     };
     console.log(green("  ✓ API"), dim(`http://localhost:${apiPort}`));
     const indexerLogFile = getLogFile("indexer");
-    const indexerProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/indexer/src/index.ts")], {
+    const indexerProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/indexer/src/index.ts")], {
       env: { ...process.env, ...env, PORT: String(indexerPort) },
       stdout: Bun.file(indexerLogFile),
       stderr: Bun.file(indexerLogFile)
@@ -13668,7 +13549,7 @@ async function runBackground(options2) {
     console.log(green("  ✓ Indexer"), dim(`http://localhost:${indexerPort}`));
     if (options2.worker) {
       const workerLogFile = getLogFile("worker");
-      const workerProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/worker/src/index.ts")], {
+      const workerProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/worker/src/index.ts")], {
         env: { ...process.env, ...env },
         stdout: Bun.file(workerLogFile),
         stderr: Bun.file(workerLogFile)
@@ -13686,7 +13567,7 @@ async function runBackground(options2) {
       const subgraphsProc = Bun.spawn([
         "bun",
         "run",
-        resolve8(packagesDir, "packages/subgraphs/src/service.ts")
+        resolve7(packagesDir, "packages/subgraphs/src/service.ts")
       ], {
         env: { ...process.env, ...env },
         stdout: Bun.file(subgraphsLogFile),
@@ -13988,7 +13869,7 @@ async function restartDev() {
   await clearDevState();
   await clearLogs();
   const config = await loadConfig();
-  const packagesDir = dirname9(dirname9(dirname9(dirname9(import.meta.dir))));
+  const packagesDir = dirname8(dirname8(dirname8(dirname8(import.meta.dir))));
   const env = state.env;
   const newState = {
     services: {},
@@ -13998,7 +13879,7 @@ async function restartDev() {
   };
   const apiPort = config.ports.api;
   const apiLogFile = getLogFile("api");
-  const apiProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/api/src/index.ts")], {
+  const apiProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/api/src/index.ts")], {
     env: { ...process.env, ...env, PORT: String(apiPort) },
     stdout: Bun.file(apiLogFile),
     stderr: Bun.file(apiLogFile)
@@ -14012,7 +13893,7 @@ async function restartDev() {
   console.log(green("  ✓ API"), dim(`http://localhost:${apiPort}`));
   const indexerPort = config.ports.indexer;
   const indexerLogFile = getLogFile("indexer");
-  const indexerProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/indexer/src/index.ts")], {
+  const indexerProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/indexer/src/index.ts")], {
     env: { ...process.env, ...env, PORT: String(indexerPort) },
     stdout: Bun.file(indexerLogFile),
     stderr: Bun.file(indexerLogFile)
@@ -14026,7 +13907,7 @@ async function restartDev() {
   console.log(green("  ✓ Indexer"), dim(`http://localhost:${indexerPort}`));
   if (state.services.worker) {
     const workerLogFile = getLogFile("worker");
-    const workerProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/worker/src/index.ts")], {
+    const workerProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/worker/src/index.ts")], {
       env: { ...process.env, ...env },
       stdout: Bun.file(workerLogFile),
       stderr: Bun.file(workerLogFile)
@@ -14041,7 +13922,7 @@ async function restartDev() {
   }
   if (state.services.subgraphs) {
     const subgraphsLogFile = getLogFile("subgraphs");
-    const subgraphsProc = Bun.spawn(["bun", "run", resolve8(packagesDir, "packages/subgraphs/src/service.ts")], {
+    const subgraphsProc = Bun.spawn(["bun", "run", resolve7(packagesDir, "packages/subgraphs/src/service.ts")], {
       env: { ...process.env, ...env },
       stdout: Bun.file(subgraphsLogFile),
       stderr: Bun.file(subgraphsLogFile)
@@ -14169,7 +14050,7 @@ async function ensureDevPostgres(dataDir) {
   if (check.stdout.toString().trim()) {
     return false;
   }
-  const pgDataDir = join8(dataDir, "postgres");
+  const pgDataDir = join7(dataDir, "postgres");
   mkdirSync3(pgDataDir, { recursive: true });
   const stopped = await Bun.$`docker ps -aq -f name=secondlayer-dev-postgres`.quiet().nothrow();
   if (stopped.stdout.toString().trim()) {
@@ -14185,8 +14066,8 @@ async function ensureDevPostgres(dataDir) {
   throw new Error("PostgreSQL failed to start");
 }
 async function runMigrations(databaseUrl) {
-  const packagesDir = dirname9(dirname9(dirname9(dirname9(import.meta.dir))));
-  const migrateScript = resolve8(packagesDir, "packages/shared/src/db/migrate.ts");
+  const packagesDir = dirname8(dirname8(dirname8(dirname8(import.meta.dir))));
+  const migrateScript = resolve7(packagesDir, "packages/shared/src/db/migrate.ts");
   const result = await Bun.$`DATABASE_URL=${databaseUrl} bun run ${migrateScript}`.quiet().nothrow();
   if (result.exitCode !== 0) {
     throw new Error(`Migration failed: ${result.stderr.toString()}`);
@@ -32443,7 +32324,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "5.1.5",
+  version: "5.2.0",
   description: "CLI for subgraphs and blockchain indexing on Stacks",
   type: "module",
   bin: {
@@ -32486,8 +32367,8 @@ var package_default = {
   dependencies: {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.3.5",
-    "@secondlayer/sdk": "^3.5.4",
-    "@secondlayer/shared": "^6.3.2",
+    "@secondlayer/sdk": "^3.6.0",
+    "@secondlayer/shared": "^6.3.4",
     "@secondlayer/stacks": "^2.2.0",
     "@secondlayer/subgraphs": "^2.0.0",
     "@biomejs/js-api": "^0.7.0",
@@ -32511,23 +32392,75 @@ var package_default = {
 };
 
 // src/lib/api-client.ts
-init_http();
-init_resolve_tenant();
 import { ApiError, SecondLayer } from "@secondlayer/sdk";
+
+// src/lib/http.ts
+init_session();
+
+class CliHttpError extends Error {
+  status;
+  code;
+  body;
+  name = "CliHttpError";
+  constructor(status, code, body, message) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.body = body;
+  }
+}
+var PLATFORM_API_URL = process.env.SL_PLATFORM_API_URL ?? "https://api.secondlayer.tools";
+var REQUEST_TIMEOUT_MS = 30000;
+async function request(url, opts) {
+  const headers = {
+    "content-type": "application/json",
+    ...opts.headers ?? {}
+  };
+  if (opts.bearer)
+    headers.authorization = `Bearer ${opts.bearer}`;
+  const res = await fetch(url, {
+    method: opts.method ?? "GET",
+    headers,
+    body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+    signal: AbortSignal.timeout(opts.timeoutMs ?? REQUEST_TIMEOUT_MS)
+  });
+  if (!res.ok) {
+    let body = {};
+    try {
+      body = await res.json();
+    } catch {
+      body = { error: await res.text().catch(() => "") };
+    }
+    const code = body.code ?? (res.status === 401 ? "SESSION_EXPIRED" : res.status === 404 ? "NOT_FOUND" : `HTTP_${res.status}`);
+    const message = body.message ?? body.error ?? `HTTP ${res.status}`;
+    throw new CliHttpError(res.status, code, body, message);
+  }
+  if (res.status === 204)
+    return;
+  return await res.json();
+}
+async function httpPlatform(path2, opts = {}) {
+  const session = await readSession();
+  if (!session) {
+    throw new CliHttpError(401, "SESSION_EXPIRED", { error: "Not logged in" }, "Not logged in — run `sl login`");
+  }
+  return request(`${PLATFORM_API_URL}${path2}`, {
+    ...opts,
+    bearer: session.token
+  });
+}
+async function httpPlatformAnon(path2, opts = {}) {
+  return request(`${PLATFORM_API_URL}${path2}`, opts);
+}
+
+// src/lib/api-client.ts
+init_resolve_tenant();
 function handleApiError(err, action) {
   if (err instanceof CliHttpError) {
     if (err.code === "SESSION_EXPIRED") {
       console.error("Session expired. Run: sl login");
       process.exit(1);
     }
-    if (err.code === "TENANT_SUSPENDED") {
-      console.error("Tenant is suspended. Run: sl instance resume");
-      process.exit(1);
-    }
-    if (err.code === "NO_TENANT_FOR_PROJECT") {
-      console.error(err.message);
-      process.exit(1);
-    }
   }
   if (err instanceof ApiError && err.status === 401) {
     console.error("Authentication required. Run: sl login");
@@ -32549,48 +32482,48 @@ function withErrorHandling(fn, options) {
     }
   };
 }
-async function getTenantClient() {
+async function getPlatformClient() {
   const { apiUrl, ephemeralKey } = await resolveActiveTenant();
-  return new SecondLayer({ tenantBaseUrl: apiUrl, apiKey: ephemeralKey });
+  return new SecondLayer({ baseUrl: apiUrl, apiKey: ephemeralKey });
 }
 async function listSubgraphsApi() {
-  return (await getTenantClient()).subgraphs.list();
+  return (await getPlatformClient()).subgraphs.list();
 }
 async function getSubgraphApi(name) {
-  return (await getTenantClient()).subgraphs.get(name);
+  return (await getPlatformClient()).subgraphs.get(name);
 }
 async function getSubgraphOpenApi(name, options) {
-  return (await getTenantClient()).subgraphs.openapi(name, options);
+  return (await getPlatformClient()).subgraphs.openapi(name, options);
 }
 async function getSubgraphAgentSchema(name, options) {
-  return (await getTenantClient()).subgraphs.schema(name, options);
+  return (await getPlatformClient()).subgraphs.schema(name, options);
 }
 async function getSubgraphMarkdown(name, options) {
-  return (await getTenantClient()).subgraphs.markdown(name, options);
+  return (await getPlatformClient()).subgraphs.markdown(name, options);
 }
 async function reindexSubgraphApi(name, options) {
-  return (await getTenantClient()).subgraphs.reindex(name, options);
+  return (await getPlatformClient()).subgraphs.reindex(name, options);
 }
 async function backfillSubgraphApi(name, options) {
-  return (await getTenantClient()).subgraphs.backfill(name, options);
+  return (await getPlatformClient()).subgraphs.backfill(name, options);
 }
 async function stopSubgraphApi(name) {
-  return (await getTenantClient()).subgraphs.stop(name);
+  return (await getPlatformClient()).subgraphs.stop(name);
 }
 async function deleteSubgraphApi(name, options) {
-  return (await getTenantClient()).subgraphs.delete(name, options);
+  return (await getPlatformClient()).subgraphs.delete(name, options);
 }
 async function deploySubgraphApi(data) {
-  return (await getTenantClient()).subgraphs.deploy(data);
+  return (await getPlatformClient()).subgraphs.deploy(data);
 }
 async function querySubgraphTable(name, table, params = {}) {
-  return (await getTenantClient()).subgraphs.queryTable(name, table, params);
+  return (await getPlatformClient()).subgraphs.queryTable(name, table, params);
 }
 async function querySubgraphTableCount(name, table, params = {}) {
-  return (await getTenantClient()).subgraphs.queryTableCount(name, table, params);
+  return (await getPlatformClient()).subgraphs.queryTableCount(name, table, params);
 }
 async function getSubgraphGaps(name, opts) {
-  return (await getTenantClient()).subgraphs.gaps(name, opts);
+  return (await getPlatformClient()).subgraphs.gaps(name, opts);
 }
 async function getAccountProfile() {
   return httpPlatform("/api/accounts/me");
@@ -32641,7 +32574,6 @@ function registerAccountCommand(program2) {
   }, { action: "manage profile" }));
 }
 // src/commands/billing.ts
-init_http();
 init_output();
 function registerBillingCommand(program2) {
   const billing = program2.command("billing").description("Inspect billing state");
@@ -32704,8 +32636,8 @@ init_config();
 
 // src/lib/detect.ts
 init_docker();
-import { homedir as homedir4 } from "node:os";
-import { join as join4 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { join as join3 } from "node:path";
 var STACKS_CONTAINER_PATTERNS = [
   "stacks-blockchain",
   "stacks-node",
@@ -32773,8 +32705,8 @@ async function findDockerComposeRoot(startPath) {
   let current = startPath;
   while (current && current !== "/") {
     try {
-      const composeYml = Bun.file(join4(current, "docker-compose.yml"));
-      const composeYaml = Bun.file(join4(current, "docker-compose.yaml"));
+      const composeYml = Bun.file(join3(current, "docker-compose.yml"));
+      const composeYaml = Bun.file(join3(current, "docker-compose.yaml"));
       if (await composeYml.exists() || await composeYaml.exists()) {
         return current;
       }
@@ -32821,9 +32753,9 @@ var SEARCH_PATTERNS = [
   "/Volumes/stacks-node",
   "/Volumes/*/stacks-blockchain-docker",
   "/Volumes/*/stacks-node",
-  `${homedir4()}/stacks-blockchain-docker`,
-  `${homedir4()}/stacks-node`,
-  `${homedir4()}/stacks-*`,
+  `${homedir3()}/stacks-blockchain-docker`,
+  `${homedir3()}/stacks-node`,
+  `${homedir3()}/stacks-*`,
   "/opt/stacks-blockchain-docker",
   "/opt/stacks-node",
   "/opt/stacks-*"
@@ -32870,8 +32802,8 @@ async function isValidStacksNodeDir(path2) {
     return true;
   }
   try {
-    const composeYml = Bun.file(join4(path2, "docker-compose.yml"));
-    const composeYaml = Bun.file(join4(path2, "docker-compose.yaml"));
+    const composeYml = Bun.file(join3(path2, "docker-compose.yml"));
+    const composeYaml = Bun.file(join3(path2, "docker-compose.yaml"));
     const hasCompose = await composeYml.exists() || await composeYaml.exists();
     if (!hasCompose) {
       return false;
@@ -32884,7 +32816,7 @@ async function isValidStacksNodeDir(path2) {
   }
 }
 async function detectNetworkFromFilesystem(path2) {
-  const envFile = Bun.file(join4(path2, ".env"));
+  const envFile = Bun.file(join3(path2, ".env"));
   if (await envFile.exists()) {
     try {
       const content = await envFile.text();
@@ -32896,12 +32828,12 @@ async function detectNetworkFromFilesystem(path2) {
       }
     } catch {}
   }
-  const testnetConfig = Bun.file(join4(path2, "configurations/testnet"));
-  const mainnetConfig = Bun.file(join4(path2, "configurations/mainnet"));
-  const activeConfig = Bun.file(join4(path2, "configurations/active"));
+  const testnetConfig = Bun.file(join3(path2, "configurations/testnet"));
+  const mainnetConfig = Bun.file(join3(path2, "configurations/mainnet"));
+  const activeConfig = Bun.file(join3(path2, "configurations/active"));
   if (await activeConfig.exists()) {
     try {
-      const result = await Bun.$`readlink ${join4(path2, "configurations/active")}`.quiet().nothrow();
+      const result = await Bun.$`readlink ${join3(path2, "configurations/active")}`.quiet().nothrow();
       const link = result.stdout.toString().trim();
       if (link.includes("testnet"))
         return "testnet";
@@ -32914,7 +32846,7 @@ async function detectNetworkFromFilesystem(path2) {
 }
 async function isComposeProjectRunning(path2) {
   try {
-    const result = await Bun.$`docker compose -f ${join4(path2, "docker-compose.yml")} ps -q`.quiet().nothrow();
+    const result = await Bun.$`docker compose -f ${join3(path2, "docker-compose.yml")} ps -q`.quiet().nothrow();
     return result.exitCode === 0 && result.stdout.toString().trim().length > 0;
   } catch {
     return false;
@@ -33066,14 +32998,14 @@ async function validateDatabaseConnection(url) {
 // src/commands/create.ts
 import {
   copyFileSync,
-  existsSync as existsSync2,
+  existsSync,
   mkdirSync,
   readFileSync,
   readdirSync,
   statSync,
   writeFileSync
 } from "node:fs";
-import { dirname as dirname3, join as join5, relative, resolve as resolve2 } from "node:path";
+import { dirname as dirname2, join as join4, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { input, select as select2 } from "@inquirer/prompts";
 import { SecondLayer as SecondLayer2 } from "@secondlayer/sdk";
@@ -33175,21 +33107,21 @@ var FORMAT_BY_RUNTIME = {
   node: "standard-webhooks"
 };
 function templatesRoot() {
-  const here = dirname3(fileURLToPath(import.meta.url));
-  const candidateDist = resolve2(here, "..", "templates", "subscriptions");
-  if (existsSync2(candidateDist))
+  const here = dirname2(fileURLToPath(import.meta.url));
+  const candidateDist = resolve(here, "..", "templates", "subscriptions");
+  if (existsSync(candidateDist))
     return candidateDist;
-  return resolve2(here, "..", "..", "templates", "subscriptions");
+  return resolve(here, "..", "..", "templates", "subscriptions");
 }
 function copyTemplate(src, dest, vars) {
-  if (!existsSync2(src)) {
+  if (!existsSync(src)) {
     throw new Error(`template dir missing: ${src}`);
   }
   mkdirSync(dest, { recursive: true });
   const entries = readdirSync(src);
   for (const entry of entries) {
-    const from = join5(src, entry);
-    const to = join5(dest, entry);
+    const from = join4(src, entry);
+    const to = join4(dest, entry);
     const st = statSync(from);
     if (st.isDirectory()) {
       copyTemplate(from, to, vars);
@@ -33254,13 +33186,13 @@ async function createSubscription(name, opts) {
     }
   }
   const eventName = `${subgraph}.${table}.created`;
-  const targetDir = resolve2(process.cwd(), name);
-  if (existsSync2(targetDir)) {
+  const targetDir = resolve(process.cwd(), name);
+  if (existsSync(targetDir)) {
     error(`Directory already exists: ${relative(process.cwd(), targetDir)}`);
     process.exit(1);
   }
   const tplRoot = templatesRoot();
-  const tplDir = join5(tplRoot, runtime);
+  const tplDir = join4(tplRoot, runtime);
   info(`Scaffolding ${blue(runtime)} template at ${blue(targetDir)}`);
   copyTemplate(tplDir, targetDir, {
     NAME: name,
@@ -33292,12 +33224,12 @@ async function createSubscription(name, opts) {
     }
   }
   if (signingSecret) {
-    const envTarget = join5(targetDir, ".env");
-    const envExample = join5(targetDir, ".env.example");
-    if (existsSync2(envExample) && !existsSync2(envTarget)) {
+    const envTarget = join4(targetDir, ".env");
+    const envExample = join4(targetDir, ".env.example");
+    if (existsSync(envExample) && !existsSync(envTarget)) {
       copyFileSync(envExample, envTarget);
     }
-    if (existsSync2(envTarget)) {
+    if (existsSync(envTarget)) {
       const cur = readFileSync(envTarget, "utf8");
       const next = cur.replace(/^SIGNING_SECRET=.*/m, `SIGNING_SECRET=${signingSecret}`);
       writeFileSync(envTarget, next.includes("SIGNING_SECRET=") ? next : `${cur}
@@ -33358,7 +33290,6 @@ function registerCreateCommand(program2) {
 }
 // src/commands/status.ts
 init_config();
-init_http();
 init_output();
 function registerStatusCommand(program2) {
   program2.command("status").description("Show system status").option("--json", "Output as JSON").action(async (options) => {
@@ -34389,13 +34320,13 @@ async function resyncDatabase(skipConfirm, backfill) {
 // src/commands/subgraphs.ts
 import { spawn } from "node:child_process";
 import {
-  existsSync as existsSync3,
+  existsSync as existsSync2,
   mkdirSync as mkdirSync2,
   readFileSync as readFileSync2,
   watch,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname4, join as join7, resolve as resolve3 } from "node:path";
+import { dirname as dirname3, join as join6, resolve as resolve2 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { confirm as confirm3 } from "@inquirer/prompts";
 
@@ -34603,10 +34534,9 @@ init_fs();
 init_output();
 
 // src/commands/login.ts
-init_http();
+import { input as input2 } from "@inquirer/prompts";
 init_output();
 init_session();
-import { input as input2 } from "@inquirer/prompts";
 async function runLoginFlow() {
   const email = await input2({
     message: "Email",
@@ -34646,7 +34576,7 @@ async function runLoginFlow() {
       expiresAt
     });
     success(`Logged in as ${verified.account.email}`);
-    await printPostLoginHints();
+    info(dim("Run 'sl whoami' to see your account status."));
   } catch (err) {
     if (err instanceof CliHttpError) {
       error(err.message);
@@ -34656,38 +34586,6 @@ async function runLoginFlow() {
     process.exit(1);
   }
 }
-async function printPostLoginHints() {
-  let hasTenant = false;
-  try {
-    const tenant = await httpPlatform("/api/tenants/me");
-    hasTenant = Boolean(tenant.tenant?.apiUrl);
-  } catch (err) {
-    if (!(err instanceof CliHttpError && err.status === 404)) {
-      info(dim("Run 'sl whoami' to see your account status."));
-      return;
-    }
-  }
-  if (hasTenant) {
-    info(dim("Run 'sl whoami' to see your account status."));
-    return;
-  }
-  console.log();
-  info("First time? Here's the path to your first query:");
-  console.log();
-  console.log(dim("  1. ") + cyan("sl project create my-app"));
-  console.log(dim("     ") + dim("# scopes your data and routing — pick any name"));
-  console.log();
-  console.log(dim("  2. ") + cyan("sl instance create --plan launch"));
-  console.log(dim("     ") + dim("# $99/mo · 2 vCPU / 6GB · run `sl --help` for other plans"));
-  console.log();
-  console.log(dim("  3. ") + cyan("sl subgraphs new my-watcher --template sip-010-balances"));
-  console.log(dim("     ") + dim("# five templates ship with the CLI"));
-  console.log();
-  console.log(dim("  4. ") + cyan("sl subgraphs deploy subgraphs/my-watcher.ts"));
-  console.log(dim("     ") + dim("# six seconds, backfill auto-starts"));
-  console.log();
-  info(dim("Run `sl whoami` at any time to see where you are in the flow."));
-}
 function registerLoginCommand(program2) {
   program2.command("login").description("Log in to Secondlayer (magic-link email)").action(runLoginFlow);
 }
@@ -35110,9 +35008,9 @@ async function writeOrPrintSubgraphSpec(spec, format, output) {
     process.stdout.write(text);
     return;
   }
-  const outPath = resolve3(output);
-  const dir = resolve3(outPath, "..");
-  if (!existsSync3(dir))
+  const outPath = resolve2(output);
+  const dir = resolve2(outPath, "..");
+  if (!existsSync2(dir))
     mkdirSync2(dir, { recursive: true });
   await writeTextFile(outPath, text);
   success(`Created ${outPath}`);
@@ -35175,13 +35073,13 @@ function createLocalSubgraphDetail(input3) {
   };
 }
 function readCliSubgraphsDependency() {
-  const here = dirname4(fileURLToPath2(import.meta.url));
+  const here = dirname3(fileURLToPath2(import.meta.url));
   const candidates = [
-    resolve3(here, "..", "..", "package.json"),
-    resolve3(here, "..", "package.json")
+    resolve2(here, "..", "..", "package.json"),
+    resolve2(here, "..", "package.json")
   ];
   for (const candidate of candidates) {
-    if (!existsSync3(candidate))
+    if (!existsSync2(candidate))
       continue;
     const pkg = JSON.parse(readFileSync2(candidate, "utf8"));
     const dep = pkg.dependencies?.["@secondlayer/subgraphs"];
@@ -35191,9 +35089,9 @@ function readCliSubgraphsDependency() {
   return "^1.3.2";
 }
 function ensureScaffoldPackageJson(dir) {
-  const packagePath = join7(dir, "package.json");
+  const packagePath = join6(dir, "package.json");
   const subgraphsDep = readCliSubgraphsDependency();
-  if (!existsSync3(packagePath)) {
+  if (!existsSync2(packagePath)) {
     writeFileSync2(packagePath, `${JSON.stringify({
       type: "module",
       dependencies: {
@@ -35317,13 +35215,13 @@ ${SUBGRAPH_TEMPLATE_SLUGS.map((s) => `  ${s.padEnd(20)} ${SUBGRAPH_TEMPLATE_DESC
 `)}`);
       process.exit(1);
     }
-    const dir = resolve3("subgraphs");
-    const filePath = resolve3(dir, `${name}.ts`);
-    if (existsSync3(filePath)) {
+    const dir = resolve2("subgraphs");
+    const filePath = resolve2(dir, `${name}.ts`);
+    if (existsSync2(filePath)) {
       error(`File already exists: ${filePath}`);
       process.exit(1);
     }
-    if (!existsSync3(dir)) {
+    if (!existsSync2(dir)) {
       mkdirSync2(dir, { recursive: true });
     }
     const content = generateSubgraphTemplate(name, slug);
@@ -35336,8 +35234,8 @@ ${SUBGRAPH_TEMPLATE_SLUGS.map((s) => `  ${s.padEnd(20)} ${SUBGRAPH_TEMPLATE_DESC
   });
   subgraphs.command("dev <file>").description("Watch a subgraph file and auto-redeploy on change").action(async (file) => {
     await requireLocalNetwork();
-    const absPath = resolve3(file);
-    if (!existsSync3(absPath)) {
+    const absPath = resolve2(file);
+    if (!existsSync2(absPath)) {
       error(`File not found: ${absPath}`);
       process.exit(1);
     }
@@ -35397,7 +35295,7 @@ Stopped watching.`);
   });
   subgraphs.command("deploy <file>").description("Deploy a subgraph definition file").option("--version <semver>", "Explicit version (default: auto-increment patch)").option("--start-block <n>", "Override the subgraph definition startBlock for this deploy").option("--dry-run", "Validate and preview deploy without writing changes").option("--preview", "Alias for --dry-run").option("--force", "Skip confirmation prompt for reindex operations").action(async (file, options2) => {
     try {
-      const absPath = resolve3(file);
+      const absPath = resolve2(file);
       const config = await loadConfig();
       if (config.network !== "local") {
         await requireAuth();
@@ -35415,8 +35313,8 @@ Stopped watching.`);
       const validated = validateSubgraphDefinition(effectiveDef);
       if (config.network !== "local") {
         info(`${dryRun ? "Bundling for remote deploy dry run" : "Bundling for remote deploy"} (${config.network})...`);
-        const { readFile: readFile4 } = await import("node:fs/promises");
-        const source = await readFile4(absPath, "utf8");
+        const { readFile: readFile3 } = await import("node:fs/promises");
+        const source = await readFile3(absPath, "utf8");
         const { bundleSubgraphCode } = await import("@secondlayer/bundler");
         const bundled = await bundleSubgraphCode(source);
         const handlerCode = bundled.handlerCode;
@@ -35608,12 +35506,12 @@ Table endpoints:`));
   subgraphs.command("inspect <file>").description("Output API documentation for a local subgraph file").option("--format <format>", "Output format: openapi, agent, markdown", "agent").option("-o, --output <path>", "Write output to a file").option("--server <url>", "Override the server URL in generated docs").action(async (file, options2) => {
     try {
       const format = parseSubgraphSpecFormat(options2.format);
-      const absPath = resolve3(file);
-      if (!existsSync3(absPath)) {
+      const absPath = resolve2(file);
+      if (!existsSync2(absPath)) {
         error(`File not found: ${absPath}`);
         process.exit(1);
       }
-      const { readFile: readFile4 } = await import("node:fs/promises");
+      const { readFile: readFile3 } = await import("node:fs/promises");
       const { bundleSubgraphCode } = await import("@secondlayer/bundler");
       const { generateSubgraphSQL } = await import("@secondlayer/subgraphs");
       const {
@@ -35621,7 +35519,7 @@ Table endpoints:`));
         generateSubgraphMarkdown,
         generateSubgraphOpenApi
       } = await import("@secondlayer/shared/subgraphs/spec");
-      const source = await readFile4(absPath, "utf8");
+      const source = await readFile3(absPath, "utf8");
       const bundled = await bundleSubgraphCode(source);
       const { hash } = generateSubgraphSQL({
         name: bundled.name,
@@ -35798,7 +35696,7 @@ ${rows.length} row(s)`));
         error("--output <path> is required");
         process.exit(1);
       }
-      const outPath = resolve3(options2.output);
+      const outPath = resolve2(options2.output);
       const network = inferNetwork(contractAddress) ?? "mainnet";
       const apiKey = options2.apiKey ?? process.env.STACKS_NODE_API_KEY ?? process.env.HIRO_API_KEY;
       const client = new StacksApiClient(network, apiKey);
@@ -35810,8 +35708,8 @@ ${rows.length} row(s)`));
         contractId: contractAddress,
         functions: abi.functions
       });
-      const dir = resolve3(outPath, "..");
-      if (!existsSync3(dir))
+      const dir = resolve2(outPath, "..");
+      if (!existsSync2(dir))
         mkdirSync2(dir, { recursive: true });
       await writeTextFile(outPath, content);
       ensureScaffoldPackageJson(dir);
@@ -35840,13 +35738,13 @@ ${rows.length} row(s)`));
         error("--output <path> is required");
         process.exit(1);
       }
-      const outPath = resolve3(options2.output);
+      const outPath = resolve2(options2.output);
       info(`Fetching subgraph metadata for "${subgraphName}"...`);
       const subgraphDetail = await getSubgraphApi(subgraphName);
       info("Generating typed client...");
       const content = await generateSubgraphConsumer(subgraphName, subgraphDetail);
-      const dir = resolve3(outPath, "..");
-      if (!existsSync3(dir))
+      const dir = resolve2(outPath, "..");
+      if (!existsSync2(dir))
         mkdirSync2(dir, { recursive: true });
       await writeTextFile(outPath, content);
       success(`Created ${outPath}`);
@@ -36323,7 +36221,6 @@ async function checkHealth() {
 }
 
 // src/commands/doctor.ts
-init_http();
 init_network();
 init_output();
 function registerDoctorCommand(program2) {
@@ -36803,9 +36700,59 @@ function formatLogLine3(service, line) {
 }
 // src/commands/whoami.ts
 init_config();
-init_http();
 init_output();
-init_project_file();
+
+// src/lib/project-file.ts
+import { existsSync as existsSync3 } from "node:fs";
+import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname9, join as join8, parse as parsePath, resolve as resolve8 } from "node:path";
+import { z as z3 } from "zod/v4";
+var ProjectFileSchema = z3.object({
+  slug: z3.string().min(1)
+});
+var FILENAME = "project";
+var DIRNAME = ".secondlayer";
+async function readActiveProject(cwd, globalDefault) {
+  let dir = resolve8(cwd);
+  const home = resolve8(homedir5());
+  const fsRoot = parsePath(dir).root;
+  while (true) {
+    const candidate = join8(dir, DIRNAME, FILENAME);
+    if (existsSync3(candidate)) {
+      try {
+        const raw = await readFile3(candidate, "utf8");
+        const parsed = ProjectFileSchema.parse(JSON.parse(raw));
+        return { slug: parsed.slug, resolvedFrom: candidate };
+      } catch {}
+    }
+    if (existsSync3(join8(dir, ".git")))
+      break;
+    if (dir === home || dir === fsRoot)
+      break;
+    const parent = dirname9(dir);
+    if (parent === dir)
+      break;
+    dir = parent;
+  }
+  if (globalDefault) {
+    return {
+      slug: globalDefault,
+      resolvedFrom: join8(homedir5(), ".secondlayer", "config.json")
+    };
+  }
+  return null;
+}
+async function writeActiveProject(slug, cwd) {
+  const dir = join8(resolve8(cwd), DIRNAME);
+  await mkdir3(dir, { recursive: true });
+  const file = join8(dir, FILENAME);
+  await writeFile3(file, `${JSON.stringify({ slug }, null, 2)}
+`, "utf8");
+  return file;
+}
+
+// src/commands/whoami.ts
 init_session();
 function registerWhoamiCommand(program2) {
   program2.command("whoami").description("Show current authenticated account + active project + tenant").action(async () => {
@@ -36851,7 +36798,6 @@ function registerWhoamiCommand(program2) {
   });
 }
 // src/commands/logout.ts
-init_http();
 init_output();
 init_session();
 function registerLogoutCommand(program2) {
@@ -36874,11 +36820,9 @@ function registerLogoutCommand(program2) {
 }
 // src/commands/instance.ts
 init_config();
-init_http();
+import { confirm as confirm5, input as input4, select as select4 } from "@inquirer/prompts";
 init_output();
-init_project_file();
 init_resolve_tenant();
-import { confirm as confirm5, input as input4, select as select4 } from "@inquirer/prompts";
 var INSTANCE_CREATE_TIMEOUT_MS = 180000;
 function registerInstanceCommand(program2) {
   const instance = program2.command("instance").description("Manage your dedicated Secondlayer instance");
@@ -37257,10 +37201,8 @@ function handleInstanceError(err, action) {
 }
 // src/commands/project.ts
 init_config();
-init_http();
-init_output();
-init_project_file();
 import { input as input5 } from "@inquirer/prompts";
+init_output();
 function registerProjectCommand(program2) {
   const project = program2.command("project").description("Manage Secondlayer projects");
   project.command("create [name]").description("Create a new project").option("--slug <slug>", "Project URL identifier").action(async (nameArg, options2 = {}) => {
@@ -37402,5 +37344,5 @@ registerAccountCommand(program);
 registerBillingCommand(program);
 program.parse();
 
-//# debugId=7BAF23F53752FABB64756E2164756E21
+//# debugId=9232228B9119962364756E2164756E21
 //# sourceMappingURL=cli.js.map