@secondlayer/cli 5.10.0 → 5.10.1

package/dist/cli.js

@@ -32324,7 +32324,7 @@ var {
 // package.json
 var package_default = {
   name: "@secondlayer/cli",
-  version: "5.10.0",
+  version: "5.10.1",
   repository: {
     type: "git",
     url: "git+https://github.com/ryanwaits/secondlayer.git",
@@ -32373,10 +32373,10 @@ var package_default = {
   dependencies: {
     "@inquirer/prompts": "^8.2.0",
     "@secondlayer/bundler": "^0.3.7",
-    "@secondlayer/sdk": "^5.7.0",
+    "@secondlayer/sdk": "^5.8.0",
     "@secondlayer/shared": "^6.10.0",
     "@secondlayer/stacks": "^2.3.0",
-    "@secondlayer/subgraphs": "^3.4.0",
+    "@secondlayer/subgraphs": "^3.5.0",
     "@biomejs/js-api": "^0.7.0",
     "@biomejs/wasm-nodejs": "^1.9.0",
     esbuild: "^0.19.0",
@@ -34449,6 +34449,7 @@ function buildDevnetCompose(opts = {}) {
   const apiImage = `ghcr.io/${owner}/secondlayer-api:${tag}`;
   const indexerImage = `ghcr.io/${owner}/secondlayer-indexer:${tag}`;
   const dbUrl = "postgres://secondlayer:secondlayer@postgres:5432/secondlayer";
+  const DEV_SECRETS_KEY = "deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef";
   return `# Generated by \`sl devnet connect\` — do not edit by hand.
 # Secondlayer app services for local clarinet devnet development.
 name: secondlayer-devnet
@@ -34487,6 +34488,11 @@ services:
       PORT: 3800
       NODE_ENV: production
       DATA_DIR: /data
+      # Shared across api + subgraph-processor so the secret the api encrypts
+      # (e.g. a subscription's signing secret) can be decrypted by the emitter.
+      # OSS auto-generates a per-process key when unset — that splits them.
+      # Local-dev fixed value; not a production secret.
+      SECONDLAYER_SECRETS_KEY: ${DEV_SECRETS_KEY}
     ports:
       - "${apiPort}:3800"
     volumes:
@@ -34549,6 +34555,11 @@ services:
       # index_progress under NETWORK.
       NETWORK: testnet
       STACKS_NETWORK: testnet
+      # The emitter blocks webhook delivery to private/loopback IPs by default.
+      # On a local devnet you deliver to your own localhost receiver, so allow it.
+      SECONDLAYER_ALLOW_PRIVATE_EGRESS: "true"
+      # Must match the api's key so the emitter can decrypt signing secrets.
+      SECONDLAYER_SECRETS_KEY: ${DEV_SECRETS_KEY}
     volumes:
       - subgraphs_data:/data/subgraphs
     depends_on:
@@ -37831,5 +37842,5 @@ registerAccountCommand(program);
 registerBillingCommand(program);
 program.parse();
 
-//# debugId=98906583902E571F64756E2164756E21
+//# debugId=7F4D9295EECF14D064756E2164756E21
 //# sourceMappingURL=cli.js.map