Sim auth

[ivpusic]

Add dune sim auth command for persisting a Sim API key via --api-key flag, DUNE_SIM_API_KEY env var, or interactive prompt. Wires up the sim command tree with SimClient, evm/svm parent commands, and registers sim in the root CLI.

[ivpusic]

• Add svm transactions command with signature extraction and block time formatting #39
• Add svm balances command with SimClient wiring #38
• Add evm defi-positions command for DeFi portfolio positions #37
• Add evm token-holders command with token address as positional arg #36
• Add evm token-info command for token metadata and pricing #35
• Add evm collectibles command for NFT listings with spam filtering #34
• Add evm transactions command and fix OpenAPI spec gaps across all EVM commands #33
• EVM activity #31
• Sim evm stablecoins #30
• Get balance #29
• Sim evm balances #28
• Supported chains #27
• Sim auth #26 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[cursor]

PR Summary

Medium Risk
Adds a new authentication path and persists an additional API key in the shared CLI config, which could impact config compatibility and key-handling behavior. Also introduces a new HTTP client and command wiring, so failures would primarily affect the new sim command tree.

Overview
Adds a new top-level dune sim command group, registered in cli/root.go, with evm and svm placeholder subcommands and a PersistentPreRunE that resolves a Sim API key and injects a SimClient into the command context.

Introduces dune sim auth to persist sim_api_key into ~/.config/dune/config.yaml (from --api-key, DUNE_SIM_API_KEY, or an interactive prompt), extends authconfig.Config to store SimAPIKey, and adds cmdutil helpers (SetSimClient/SimClientFromCmd) plus tests covering key sources and preserving existing config fields.

^{Written by Cursor Bugbot for commit 3ec8d83. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Sim's PersistentPreRunE overrides root's, breaking telemetry tracking
  • Added cmdutil.SetStartTime call at the beginning of simPreRun to ensure start time is tracked for all sim subcommands.

Or push these changes by commenting:

@cursor push 6d2c3c3b2c

Preview (6d2c3c3b2c)

diff --git a/cmd/sim/sim.go b/cmd/sim/sim.go
--- a/cmd/sim/sim.go
+++ b/cmd/sim/sim.go
@@ -4,6 +4,7 @@
 	"fmt"
 	"os"
 	"strings"
+	"time"
 
 	"github.com/spf13/cobra"
 
@@ -43,6 +44,8 @@
 // simPreRun resolves the Sim API key and stores a SimClient in the command context.
 // Commands annotated with "skipSimAuth": "true" bypass this step.
 func simPreRun(cmd *cobra.Command, _ []string) error {
+	cmdutil.SetStartTime(cmd, time.Now())
+
 	// Allow commands like `sim auth` to skip sim client creation.
 	if cmd.Annotations["skipSimAuth"] == "true" {
 		return nil

Comment @cursor review or bugbot run to trigger another review on this PR

[cursor]

Sim's PersistentPreRunE overrides root's, breaking telemetry tracking

Medium Severity

The sim command defines its own PersistentPreRunE, which in cobra (without EnableTraverseRunHooks) completely replaces the root command's PersistentPreRunE for all sim subcommands. The root's hook calls cmdutil.SetStartTime, which the root's PersistentPostRunE depends on for duration tracking. Since SetStartTime is never called for sim subcommands, StartTimeFromCmd returns a zero time.Time, causing time.Since(start) to produce a wildly incorrect duration sent to telemetry. The existing cmd/auth avoids this by using only the skipAuth annotation without defining its own PersistentPreRunE.

Additional Locations (2)

• cli/root.go#L44-L50
• cli/root.go#L81-L97