@secondlayer/sdk 6.54.0 → 6.54.1

package/README.md

@@ -14,25 +14,14 @@ bun add @secondlayer/sdk
 import { SecondLayer } from "@secondlayer/sdk";
 
 const sl = new SecondLayer({
-  apiKey: "sk-sl_...",                          // or `sl login` session token
-  baseUrl: "https://api.secondlayer.tools",     // default
+  apiKey: process.env.INSTANCE_TOKEN, // from sl init; omit on loopback
+  // default baseUrl: http://127.0.0.1:3800  (or SL_API_URL)
 });
 ```
 
-`sl.contracts`, `sl.index`, and `sl.subgraphs` reads are anonymous
-— no key needed (`sl.index` rejects free-tier keys — Build+ for keyed access).
-**`sl.streams` reads require a bearer token** (`apiKey`) and resolve a per-tier tenant; a
-publicly-known free-tier token exists but a bearer is always required. Writes
-require an `sk-sl_` API key, created in the platform console at
-https://secondlayer.tools/platform/api-keys. (Public Streams bulk dumps —
-`client.dumps`, `events.replay` — need no key.)
-
-**API keys.** Each `sk-sl_` key has a `product`. An **`account`** key (dashboard
-default) grants both `streams:read` and `index:read` and is the only key that can
-mint new keys; **`streams`** / **`index`** keys are scoped, read-only, and cannot
-mint. Mint scoped keys programmatically with `sl.apiKeys.create({ product })`
-(needs an account/owner key) — the returned `key` is shown once and inherits your
-plan's tier.
+Reads hit your instance. Writes use `INSTANCE_TOKEN` from `sl init` when the
+API is bound beyond loopback. Public archive dumps (`client.dumps`) need no
+instance key.
 
 ## Mental model
 
@@ -43,14 +32,14 @@ Everything is indexing — the question is how much of the indexer you run:
   with the checkpointed `consume()` loop (automatic reorg rewind), `walk()`
   sweeps, and resumable cursors on every page.
 - `sl.subgraphs` — deploy your own indexer (one `defineSubgraph()` file via the
-  CLI), then read your hosted tables here. We run the loop.
+  CLI), then read the tables on this instance.
 - `sl.streams` — the raw ordered event firehose Index itself is built on, with
   a checkpointed `consume()` and dumps `replay()` for building from zero.
 - `sl.contracts` — find deployed contracts by trait (SIP-009/010/013).
 
 ## Streams
 
-Typed HTTP client for the raw event firehose. Reads require a bearer token (`apiKey`).
+Typed HTTP client for the raw event firehose. Loopback reads need no key.
 
 ```typescript
 const tip = await sl.streams.tip();
@@ -73,7 +62,7 @@ console.log({ tip, firstCursor: page.events[0]?.cursor });
 import { createStreamsClient } from "@secondlayer/sdk";
 
 const streams = createStreamsClient({
-  apiKey: process.env.SL_API_KEY!, // sk-sl_... — required for reads
+  // apiKey: process.env.INSTANCE_TOKEN, // when the API is bound beyond loopback
   // verify: true,                 // verify ed25519 X-Signature on every read
   //                               // (auto-fetches the public key; { publicKey } pins a PEM)
   // dumpsBaseUrl: process.env.SL_STREAMS_DUMPS_URL, // required to use client.dumps
@@ -289,7 +278,7 @@ client-side and trusts nothing the API returned.
 import { verifyTransactionProof, fetchRewardSet } from "@secondlayer/sdk";
 
 const proof = await fetch(
-  `https://api.secondlayer.tools/v1/index/transactions/${txid}/proof`,
+  `http://127.0.0.1:3800/v1/index/transactions/${txid}/proof`,
 ).then((r) => r.json());
 
 const result = verifyTransactionProof(proof); // anchored + consensus (embedded set)
@@ -531,8 +520,8 @@ few hundredths of a cent per request from a Stacks wallet. Payment is **gasless*
 (you sign; we sponsor the STX fee) and uses standard **x402 v2** on `stacks:1`.
 Supported assets: **sBTC** (default), **USDCx**, **STX**.
 
-> Keyed (`sk-sl_`) requests bypass x402 and bill through your plan — x402 is for
-> accountless callers.
+> Keyed (`INSTANCE_TOKEN`) requests skip x402. The rail is for accountless
+> callers on an instance that has it enabled.
 
 Drop-in `fetch` that pays on `402` automatically:
 
@@ -547,7 +536,7 @@ const x402fetch = withX402(fetch, {
 });
 
 const res = await x402fetch(
-  "https://api.secondlayer.tools/v1/index/events?event_type=ft_transfer",
+  "http://127.0.0.1:3800/v1/index/events?event_type=ft_transfer",
 );
 const data = await res.json();
 readX402Receipt(res); // { success, txid, payer, network } | null
@@ -558,7 +547,7 @@ Or a small client returning `{ data, payment }`:
 ```typescript
 import { createX402Client } from "@secondlayer/sdk";
 
-const sl = createX402Client({ account, baseUrl: "https://api.secondlayer.tools" });
+const sl = createX402Client({ account }); // baseUrl defaults to http://127.0.0.1:3800
 const { data, payment } = await sl.get("/v1/index/events", {
   query: { event_type: "ft_transfer" },
 });

package/dist/index.d.ts

@@ -4,7 +4,7 @@ import { SubgraphAgentSchema, SubgraphSpecOptions } from "@secondlayer/shared/su
 import { InferSubgraphClient } from "@secondlayer/subgraphs";
 type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 interface SecondLayerOptions {
-	/** Base URL of the Secondlayer platform API (trailing slashes are stripped). */
+	/** Base URL of the instance API (trailing slashes are stripped). */
 	baseUrl: string;
 	/** Bearer token for authenticated requests. */
 	apiKey?: string;
@@ -3287,11 +3287,12 @@ type X402Fetch = (input: string | URL, init?: RequestInit) => Promise<Response>;
 *
 * @example
 * const x402fetch = withX402(fetch, { account });
-* const res = await x402fetch("https://api.secondlayer.tools/v1/index/events?event_type=ft_transfer");
+* const res = await x402fetch("http://127.0.0.1:3800/v1/index/events?event_type=ft_transfer");
 */
 declare function withX402(baseFetch: typeof fetch, opts: WithX402Options): X402Fetch;
 type X402ClientOptions = WithX402Options & {
-	baseUrl: string;
+	/** Instance API. Defaults to {@link resolveBaseUrl}. */
+	baseUrl?: string;
 	/** Override the underlying fetch (tests). */
 	fetch?: typeof fetch;
 };
@@ -3314,7 +3315,7 @@ type X402Client = {
 * parsed JSON plus the settlement receipt.
 *
 * @example
-* const sl = createX402Client({ account, baseUrl: "https://api.secondlayer.tools" });
+* const sl = createX402Client({ account, baseUrl: "http://127.0.0.1:3800" });
 * const { data, payment } = await sl.get("/v1/index/events", { query: { event_type: "ft_transfer" } });
 */
 declare function createX402Client(opts: X402ClientOptions): X402Client;

package/dist/index.js

@@ -2548,7 +2548,7 @@ function withX402(baseFetch, opts) {
 }
 function createX402Client(opts) {
   const f = withX402(opts.fetch ?? fetch, opts);
-  const base = opts.baseUrl.replace(/\/$/, "");
+  const base = resolveBaseUrl(opts.baseUrl);
   async function request(method, path, o = {}) {
     const qs = o.query ? `?${new URLSearchParams(o.query).toString()}` : "";
     const init = { method };
@@ -2846,5 +2846,5 @@ export {
   ApiError
 };
 
-//# debugId=B183756F9B14B2E364756E2164756E21
+//# debugId=00B669DC4969C3BE64756E2164756E21
 //# sourceMappingURL=index.js.map