@veilio-inc/cli 0.1.0 → 0.2.0

package/README.md

@@ -15,9 +15,11 @@ npm install -g @veilio-inc/cli     # or run it without installing:
 npx @veilio-inc/cli scrub src/billing.ts
 ```
 
-Requires Node 24 or newer. No account, no API key, and no network call on any of
-the commands below — `packages/cli/tests/purity.test.ts` traps the network
-globals and fails if one is ever introduced.
+Requires Node 24 or newer. No account, no API key, and no network call on
+`scrub`, `restore`, `scan` or `map` — `packages/cli/tests/purity.test.ts` and
+`offline.test.ts` walk the import graph and trap the network globals to keep it
+that way. Signing in is entirely optional and adds nothing to those commands'
+behavior; it only unlocks the four commands below that name Cloud explicitly.
 
 ## Commands
 
@@ -28,6 +30,37 @@ globals and fails if one is ever introduced.
 | `scan [files...]`    | Detect credentials only. Never rewrites. Exits 1 on findings.         |
 | `map`                | Show the symbol map (`--clear` to wipe it).                           |
 
+## Cloud sync (Individual plan and above)
+
+> **None of this is in `0.1.0`, which is what npm currently has.** These
+> commands are merged here and ship with the next release; until then they run
+> from a clone — `npm run build:packages`, then
+> `node packages/cli/dist/index.js --help`.
+
+```bash
+veilio login                    # prompts for email/password; --instance for self-hosted
+veilio whoami                   # who you're signed in as, no request made
+veilio maps list                # ids, scope and symbol counts for everything in Cloud
+veilio maps pull <id>           # decrypt locally, write second — never a partial write
+veilio maps push <name>         # upload the local map under a new Cloud name
+veilio logout                   # revokes server-side, then removes the local credential
+```
+
+The session token lives in a single file under your home directory
+(`~/.veilio/credential.json` on Linux/macOS, `%USERPROFILE%\.veilio\credential.json`
+on Windows), created at mode `0600` and never written until the server has
+accepted the sign-in. `0600` is the floor, not the final answer — the OS
+keychain is a stronger option and a planned follow-up. A personal map is
+zero-knowledge: pulling or pushing one prompts for the vault passphrase and
+derives the key here, on your machine — the passphrase and the key never
+leave it. A team map arrives already open, because the server can read those
+(stated in the privacy policy) and there is nothing local left to decrypt.
+
+Every one of these six is a client of `GET /api/maps`, `GET /api/maps/:id` and
+`POST /api/maps` — the exact same routes the browser uses, behind the exact
+same entitlement check. There is no CLI-shaped API and nothing here can reach
+a plan feature the web app couldn't.
+
 ## Options
 
 ```

package/dist/args.d.ts

@@ -1,6 +1,6 @@
 import { type LanguageOption } from '@veilio-inc/engine';
 import type { SecretPolicy } from '@veilio-inc/engine';
-export type Command = 'scrub' | 'restore' | 'scan' | 'map' | 'help' | 'version';
+export type Command = 'scrub' | 'restore' | 'scan' | 'map' | 'login' | 'logout' | 'whoami' | 'maps' | 'help' | 'version';
 export interface ParsedArgs {
     command: Command;
     /** Positional file paths. Empty means read stdin (or, for `scan`, error). */
@@ -23,8 +23,32 @@ export interface ParsedArgs {
     keepDocs: boolean;
     /** Allow a map write that would drop entries already on disk. */
     force: boolean;
+    /**
+     * `maps` subcommand: list, pull or push. Null when `maps` was given alone.
+     *
+     * A subcommand rather than three top-level commands, because `map` (singular,
+     * the local store) already exists and `veilio push` next to `veilio map`
+     * reads like they are the same thing. `maps <verb>` keeps the cloud surface
+     * visibly separate from the offline one.
+     */
+    mapsAction: 'list' | 'pull' | 'push' | null;
+    /**
+     * Base URL of the Veilio instance to sign in to. Null means the public Cloud.
+     *
+     * Only meaningful to `login`: once signed in, the instance is read back from
+     * the stored credential, so a later command cannot be pointed at a different
+     * host while still holding the first one's token.
+     */
+    instance: string | null;
 }
 export declare class UsageError extends Error {
 }
+/**
+ * The commands that reach the network. Named here so the split is one list
+ * rather than a condition repeated at each call site — and so that adding a
+ * command without deciding which side of the line it falls on is a compile
+ * error rather than an accident.
+ */
+export declare const CLOUD_COMMANDS: Set<Command>;
 export declare function parseArgs(argv: readonly string[]): ParsedArgs;
 //# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;AAE/E,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,YAAY,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAA;IACjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,qDAAqD;IACrD,KAAK,EAAE,OAAO,CAAA;IACd,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAA;IACf,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;CACf;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAaxC,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAgG7D"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,OAAO,GACjB,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;AAEpG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,YAAY,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAA;IACjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,qDAAqD;IACrD,KAAK,EAAE,OAAO,CAAA;IACd,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAA;IACf,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;IACd;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAE3C;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAexC;;;;;GAKG;AACH,eAAO,MAAM,cAAc,cAA0D,CAAA;AAWrF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAkI7D"}

package/dist/args.js

@@ -4,7 +4,25 @@
 import { LANGUAGES } from '@veilio-inc/engine';
 export class UsageError extends Error {
 }
-const COMMANDS = new Set(['scrub', 'restore', 'scan', 'map', 'help', 'version']);
+const COMMANDS = new Set([
+    'scrub',
+    'restore',
+    'scan',
+    'map',
+    'login',
+    'logout',
+    'whoami',
+    'maps',
+    'help',
+    'version',
+]);
+/**
+ * The commands that reach the network. Named here so the split is one list
+ * rather than a condition repeated at each call site — and so that adding a
+ * command without deciding which side of the line it falls on is a compile
+ * error rather than an accident.
+ */
+export const CLOUD_COMMANDS = new Set(['login', 'logout', 'whoami', 'maps']);
 const SECRET_POLICIES = new Set(['redact', 'warn', 'off']);
 const LANGUAGE_VALUES = new Set([...LANGUAGES, 'auto']);
 function requireValue(flag, value) {
@@ -27,6 +45,8 @@ export function parseArgs(argv) {
         strict: false,
         keepDocs: false,
         force: false,
+        instance: null,
+        mapsAction: null,
     };
     if (argv.length === 0)
         return parsed;
@@ -38,6 +58,18 @@ export function parseArgs(argv) {
         }
         parsed.command = first;
         i = 1;
+        // `maps` takes a verb. Read here rather than as a positional later, so that
+        // `veilio maps pull abc` does not treat `pull` as a file to anonymize.
+        if (parsed.command === 'maps') {
+            const verb = argv[1];
+            if (verb !== undefined && !verb.startsWith('-')) {
+                if (verb !== 'list' && verb !== 'pull' && verb !== 'push') {
+                    throw new UsageError(`unknown maps action "${verb}" — expected list, pull or push`);
+                }
+                parsed.mapsAction = verb;
+                i = 2;
+            }
+        }
     }
     for (; i < argv.length; i++) {
         const arg = argv[i];
@@ -96,6 +128,24 @@ export function parseArgs(argv) {
             case '--force':
                 parsed.force = true;
                 break;
+            case '--instance': {
+                const value = requireValue(arg, argv[++i]);
+                // Parsed here rather than at use, so a typo is a usage error before any
+                // password is typed rather than a confusing failure after.
+                let url;
+                try {
+                    url = new URL(value);
+                }
+                catch {
+                    throw new UsageError(`--instance must be a URL (got "${value}")`);
+                }
+                if (url.protocol !== 'https:' && url.hostname !== 'localhost') {
+                    throw new UsageError(`--instance must be https (got "${value}") — a password and a session token over ` +
+                        'plain http are readable by anything on the path. localhost is allowed for development.');
+                }
+                parsed.instance = value;
+                break;
+            }
             default:
                 if (arg.startsWith('-') && arg !== '-') {
                     throw new UsageError(`unknown flag "${arg}"`);

package/dist/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAsC,MAAM,oBAAoB,CAAA;AA6BlF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AACzF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAE/D,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;KACb,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAgB,CAAA;QACjC,CAAC,GAAG,CAAC,CAAA;IACP,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;gBACvB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;gBAC1B,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAClB,qBAAqB,KAAK,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAA0B,CAAA;gBAC5C,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAqB,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAAC,gDAAgD,KAAK,IAAI,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAqB,CAAA;gBACtC,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,aAAa;gBAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAsC,MAAM,oBAAoB,CAAA;AAgDlF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU;IAChC,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;AACrF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAE/D,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;KACjB,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAgB,CAAA;QACjC,CAAC,GAAG,CAAC,CAAA;QAEL,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC1D,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,iCAAiC,CAAC,CAAA;gBACrF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;gBACvB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;gBAC1B,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAClB,qBAAqB,KAAK,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAA0B,CAAA;gBAC5C,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAqB,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAAC,gDAAgD,KAAK,IAAI,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAqB,CAAA;gBACtC,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,aAAa;gBAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,wEAAwE;gBACxE,2DAA2D;gBAC3D,IAAI,GAAQ,CAAA;gBACZ,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,UAAU,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,IAAI,UAAU,CAClB,kCAAkC,KAAK,2CAA2C;wBAChF,wFAAwF,CAC3F,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACvB,MAAK;YACP,CAAC;YACD;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/cloud-commands.d.ts

@@ -0,0 +1,70 @@
+import { type Io } from './commands.js';
+/**
+ * Sign in, and store the credential only if the account can actually use it.
+ *
+ * Two requests, and the second one is the interesting one.
+ *
+ * `POST /api/auth/login` answers "is this the right password". It does NOT
+ * answer "does this plan include the terminal" — a free account signs in
+ * perfectly well, because signing in is how you reach the billing page. So a
+ * CLI that stopped after the first request would store a credential for an
+ * account that gets refused by every command that follows, and would report
+ * that refusal as though the sign-in had worked.
+ *
+ * The obvious shortcut is to read `user.plan` out of the login response and
+ * decide locally. That is exactly what FR-009 forbids: entitlement is the
+ * server's answer on each request, never the client's reading of a plan name.
+ * A copy of the rule shipped to other people's laptops is a second definition of
+ * it, and the one that goes stale first.
+ *
+ * So the second request asks the server a real question and lets it refuse. Only
+ * then is anything written — validate, then persist (Constitution IV). A
+ * credential written first and validated after leaves a file behind for an
+ * attempt that failed, and everything looks signed in until the first command
+ * that isn't.
+ */
+export declare function runLogin(instance: string | null, io: Io): Promise<number>;
+/**
+ * Sign out: revoke server-side, THEN remove the file.
+ *
+ * The order is the control. Removing the file first makes `logout` always look
+ * like it worked, while leaving a live session on the server that the user has
+ * been told is gone — and nothing anywhere reports that. So a failed revocation
+ * keeps the credential and says so, which is the loud failure rather than the
+ * quiet one (Constitution V).
+ */
+export declare function runLogout(io: Io): Promise<number>;
+/**
+ * Who is signed in, answered from disk.
+ *
+ * Makes no request, on purpose. Its job is "am I signed in", not "is Cloud up" —
+ * an answer that needs the network is useless at exactly the moment somebody is
+ * trying to work out why the network isn't working.
+ */
+export declare function runWhoami(io: Io): number;
+/**
+ * List what the account holds.
+ *
+ * Prints the id, because `pull` takes one. A name would be friendlier and is
+ * wrong: names are not unique, and picking "the first one that matches" is how
+ * somebody pulls a different map over the one they were using.
+ */
+export declare function runMapsList(io: Io): Promise<number>;
+/**
+ * Pull a map into the local store: decrypt FIRST, write second.
+ *
+ * The ordering is the control (Constitution IV). Writing before decrypting means
+ * a wrong passphrase leaves a half-built store behind — and the store is the one
+ * thing that can restore text already anonymized, so a partial write there is
+ * not an inconvenience, it is unrecoverable text.
+ *
+ * A personal map is opened HERE. The server holds the salt and a verifier and
+ * nothing else; the passphrase never leaves this machine, and there is no code
+ * path in this package that could send it.
+ */
+export declare function runMapsPull(id: string | null, mapPath: string, io: Io, options?: {
+    force?: boolean;
+}): Promise<number>;
+/** Upload the local map. Same endpoint, same quotas, same validation. */
+export declare function runMapsPush(name: string | null, mapPath: string, io: Io): Promise<number>;
+//# sourceMappingURL=cloud-commands.d.ts.map

package/dist/cloud-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-commands.d.ts","sourceRoot":"","sources":["../src/cloud-commands.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAuB,KAAK,EAAE,EAAE,MAAM,eAAe,CAAA;AAW5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgDvD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAQxC;AAyDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,EACjB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,EAAE,EACN,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,CAgGjB;AAED,yEAAyE;AACzE,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE/F"}

package/dist/cloud-commands.js

@@ -0,0 +1,394 @@
+// The commands that reach the network: login, logout, whoami.
+//
+// Deliberately NOT in commands.ts. That module is the local command path, and
+// `offline.test.ts` walks its import graph and fails if it can reach `cloud.ts`
+// — which is the structural half of the promise that `veilio scrub` on a laptop
+// with no account touches nothing (FR-002). Putting these here is what keeps
+// that walk meaningful instead of something to be deleted the moment it becomes
+// inconvenient.
+import { CloudError, createMap, getMap, getVault, listMaps, request, } from './cloud.js';
+import { checkVaultVerifier, decryptMapFromVault, deriveVaultKey, encryptMapForVault, fromBase64, parseVaultEnvelope, } from '@veilio-inc/engine';
+import { loadMap, loadRemote, saveMap } from './store.js';
+import { readCredential, removeCredential, writeCredential } from './credential.js';
+import { EXIT_ERROR, EXIT_OK } from './commands.js';
+import { DEFAULT_INSTANCE } from './cloud.js';
+/** The endpoint a sign-in is checked against. See `runLogin`. */
+const ENTITLED_PROBE = '/api/maps';
+/**
+ * Sign in, and store the credential only if the account can actually use it.
+ *
+ * Two requests, and the second one is the interesting one.
+ *
+ * `POST /api/auth/login` answers "is this the right password". It does NOT
+ * answer "does this plan include the terminal" — a free account signs in
+ * perfectly well, because signing in is how you reach the billing page. So a
+ * CLI that stopped after the first request would store a credential for an
+ * account that gets refused by every command that follows, and would report
+ * that refusal as though the sign-in had worked.
+ *
+ * The obvious shortcut is to read `user.plan` out of the login response and
+ * decide locally. That is exactly what FR-009 forbids: entitlement is the
+ * server's answer on each request, never the client's reading of a plan name.
+ * A copy of the rule shipped to other people's laptops is a second definition of
+ * it, and the one that goes stale first.
+ *
+ * So the second request asks the server a real question and lets it refuse. Only
+ * then is anything written — validate, then persist (Constitution IV). A
+ * credential written first and validated after leaves a file behind for an
+ * attempt that failed, and everything looks signed in until the first command
+ * that isn't.
+ */
+export async function runLogin(instance, io) {
+    const base = instance ?? DEFAULT_INSTANCE;
+    const account = (await requirePrompt(io, `Email for ${base}: `)).trim();
+    if (account === '') {
+        io.stderr('veilio: no email given\n');
+        return EXIT_ERROR;
+    }
+    const password = await requirePassword(io, 'Password: ');
+    if (password === '') {
+        io.stderr('veilio: no password given\n');
+        return EXIT_ERROR;
+    }
+    let session;
+    try {
+        session = await request('/api/auth/login', {
+            instance: base,
+            method: 'POST',
+            body: { email: account, password },
+        });
+    }
+    catch (err) {
+        return reportLoginFailure(err, io);
+    }
+    if (typeof session.token !== 'string' || session.token === '') {
+        // A 200 with no token is not a sign-in. Writing an empty credential here
+        // would produce a "signed in" state that fails on every use.
+        io.stderr(`veilio: ${base} accepted the sign-in but returned no session\n`);
+        return EXIT_ERROR;
+    }
+    const credential = {
+        token: session.token,
+        account: session.user?.email ?? account,
+        instance: base,
+    };
+    try {
+        await request(ENTITLED_PROBE, { credential });
+    }
+    catch (err) {
+        return reportLoginFailure(err, io);
+    }
+    writeCredential(credential, io.home);
+    io.stdout(`Signed in to ${base} as ${credential.account}\n`);
+    return EXIT_OK;
+}
+/**
+ * Sign out: revoke server-side, THEN remove the file.
+ *
+ * The order is the control. Removing the file first makes `logout` always look
+ * like it worked, while leaving a live session on the server that the user has
+ * been told is gone — and nothing anywhere reports that. So a failed revocation
+ * keeps the credential and says so, which is the loud failure rather than the
+ * quiet one (Constitution V).
+ */
+export async function runLogout(io) {
+    const credential = readCredential(io.home);
+    if (!credential) {
+        io.stdout('Not signed in.\n');
+        return EXIT_OK;
+    }
+    try {
+        await request('/api/auth/logout', { credential, method: 'POST', body: {} });
+    }
+    catch (err) {
+        if (err instanceof CloudError && err.kind === 'unauthenticated') {
+            // Already revoked, or expired. The server-side state is what logout
+            // wanted, so finishing the job locally is correct rather than an error.
+            try {
+                removeCredential(io.home);
+            }
+            catch (removeErr) {
+                io.stderr(`veilio: that session was already gone, but the credential file could not be removed ` +
+                    `(${removeErr instanceof Error ? removeErr.message : String(removeErr)}).\n`);
+                return EXIT_ERROR;
+            }
+            io.stdout('That session was already revoked or expired. Signed out locally.\n');
+            return EXIT_OK;
+        }
+        const detail = err instanceof Error ? err.message : String(err);
+        io.stderr(`veilio: could not revoke the session (${detail}).\n` +
+            'You are still signed in — the credential has been kept so you can try again. ' +
+            'To end the session now, sign out from the web app.\n');
+        return EXIT_ERROR;
+    }
+    try {
+        removeCredential(io.home);
+    }
+    catch (err) {
+        // The session IS revoked — that part worked. What failed is removing the
+        // local file, and saying "signed out" while a dead token sits on disk is a
+        // smaller lie than the reverse but still a lie.
+        io.stderr(`veilio: the session was revoked, but the credential file could not be removed ` +
+            `(${err instanceof Error ? err.message : String(err)}). Delete it by hand.\n`);
+        return EXIT_ERROR;
+    }
+    io.stdout(`Signed out of ${credential.instance}.\n`);
+    return EXIT_OK;
+}
+/**
+ * Who is signed in, answered from disk.
+ *
+ * Makes no request, on purpose. Its job is "am I signed in", not "is Cloud up" —
+ * an answer that needs the network is useless at exactly the moment somebody is
+ * trying to work out why the network isn't working.
+ */
+export function runWhoami(io) {
+    const credential = readCredential(io.home);
+    if (!credential) {
+        io.stdout('Not signed in. Run `veilio login` to connect a Veilio Cloud account.\n');
+        return EXIT_OK;
+    }
+    io.stdout(`${credential.account} on ${credential.instance}\n`);
+    return EXIT_OK;
+}
+/**
+ * Say which kind of refusal this was.
+ *
+ * FR-007: "wrong password" and "not on your plan" have different remedies and
+ * must never print the same thing. Sending someone to re-type a password that
+ * was correct is worse than saying nothing.
+ */
+function reportLoginFailure(err, io) {
+    if (err instanceof CloudError) {
+        switch (err.kind) {
+            case 'unauthenticated':
+                io.stderr('veilio: that email and password were not accepted.\n');
+                return EXIT_ERROR;
+            case 'unentitled':
+                io.stderr(`veilio: signed in, but this account’s plan does not include terminal access — ${err.message}\n` +
+                    'Your password is fine. Change the plan in the web app to use the CLI with Cloud.\n');
+                return EXIT_ERROR;
+            case 'suspended':
+                // A different refusal with a different remedy again, and the one that
+                // must not read as a billing problem: this account is under review, and
+                // buying a bigger plan changes nothing.
+                io.stderr(`veilio: ${err.message}\n` +
+                    'Export and deletion still work in the web app. Nothing else will until the review ends.\n');
+                return EXIT_ERROR;
+            case 'forbidden':
+                io.stderr(`veilio: ${err.message}\n`);
+                return EXIT_ERROR;
+            case 'unreachable':
+                io.stderr(`veilio: ${err.message}\n`);
+                return EXIT_ERROR;
+            case 'server':
+                io.stderr(`veilio: the instance reported an error — ${err.message}\n`);
+                return EXIT_ERROR;
+        }
+    }
+    io.stderr(`veilio: ${err instanceof Error ? err.message : String(err)}\n`);
+    return EXIT_ERROR;
+}
+async function requirePrompt(io, label) {
+    if (!io.prompt)
+        throw new Error('this build cannot read input interactively');
+    return io.prompt(label);
+}
+async function requirePassword(io, label) {
+    if (!io.password)
+        throw new Error('this build cannot read a password interactively');
+    return io.password(label);
+}
+// ─── maps: list, pull, push ──────────────────────────────────────────────────
+/**
+ * List what the account holds.
+ *
+ * Prints the id, because `pull` takes one. A name would be friendlier and is
+ * wrong: names are not unique, and picking "the first one that matches" is how
+ * somebody pulls a different map over the one they were using.
+ */
+export async function runMapsList(io) {
+    const credential = readCredential(io.home);
+    if (!credential)
+        return notSignedIn(io);
+    let list;
+    try {
+        list = await listMaps(credential);
+    }
+    catch (err) {
+        return reportCloudFailure(err, io);
+    }
+    const all = [...list.personalMaps, ...list.teamMaps];
+    if (all.length === 0) {
+        io.stdout('No maps in Cloud yet. `veilio maps push <name>` uploads the local one.\n');
+        return EXIT_OK;
+    }
+    for (const map of all) {
+        const count = map.identifier_count === null ? '?' : String(map.identifier_count);
+        io.stdout(`${map.id}  ${map.scope.padEnd(8)} ${count.padStart(5)} symbols  ${map.name}\n`);
+    }
+    return EXIT_OK;
+}
+/**
+ * Pull a map into the local store: decrypt FIRST, write second.
+ *
+ * The ordering is the control (Constitution IV). Writing before decrypting means
+ * a wrong passphrase leaves a half-built store behind — and the store is the one
+ * thing that can restore text already anonymized, so a partial write there is
+ * not an inconvenience, it is unrecoverable text.
+ *
+ * A personal map is opened HERE. The server holds the salt and a verifier and
+ * nothing else; the passphrase never leaves this machine, and there is no code
+ * path in this package that could send it.
+ */
+export async function runMapsPull(id, mapPath, io, options = {}) {
+    const credential = readCredential(io.home);
+    if (!credential)
+        return notSignedIn(io);
+    if (!id) {
+        io.stderr('veilio: which map? Run `veilio maps list` for the ids.\n');
+        return EXIT_ERROR;
+    }
+    let remote;
+    try {
+        remote = await getMap(credential, id);
+    }
+    catch (err) {
+        return reportCloudFailure(err, io);
+    }
+    // A team map arrives already open — the server can read those, and says so in
+    // the privacy policy. Only a client envelope is ours to decrypt.
+    let map;
+    if (typeof remote.map_data !== 'string') {
+        map = remote.map_data;
+    }
+    else {
+        let vault;
+        try {
+            vault = await getVault(credential);
+        }
+        catch (err) {
+            return reportCloudFailure(err, io);
+        }
+        if (!vault.initialized) {
+            // Stated plainly rather than surfaced as a decryption failure. There is
+            // nothing to try a passphrase against, and inviting one would be asking
+            // somebody to guess at a lock that does not exist.
+            io.stderr('veilio: this account has no vault, so there is no key for that map. ' +
+                'Create one in the web app first — it is the passphrase your maps are encrypted under.\n');
+            return EXIT_ERROR;
+        }
+        const passphrase = io.password ? await io.password('Vault passphrase: ') : '';
+        if (passphrase === '') {
+            io.stderr('veilio: no passphrase given\n');
+            return EXIT_ERROR;
+        }
+        const key = await deriveVaultKey(passphrase, fromBase64(vault.salt), vault.kdf ? { name: 'PBKDF2-SHA256', iterations: vault.kdf.iterations } : undefined);
+        // The verifier answers "is this the right passphrase" before anything is
+        // decrypted, so a wrong one is named as a wrong passphrase rather than
+        // surfacing as an authentication-tag failure that reads like corruption.
+        if (!(await checkVaultVerifier(key, vault.verifier))) {
+            io.stderr('veilio: that vault passphrase is not right. Nothing was written.\n');
+            return EXIT_ERROR;
+        }
+        try {
+            map = await decryptMapFromVault(key, parseVaultEnvelope(remote.map_data));
+        }
+        catch (err) {
+            io.stderr(`veilio: that map could not be opened — ${err instanceof Error ? err.message : String(err)}. ` +
+                'Nothing was written.\n');
+            return EXIT_ERROR;
+        }
+    }
+    // Only now is anything touched on disk.
+    const existing = loadRemote(mapPath);
+    const local = loadMap(mapPath);
+    const hasLocal = Object.keys(local).length > 0;
+    const diverged = hasLocal &&
+        existing !== undefined &&
+        existing.id === remote.id &&
+        existing.updatedAt !== remote.updated_at &&
+        JSON.stringify(local) !== JSON.stringify(map);
+    if (diverged && options.force !== true) {
+        // Reported, not resolved. Overwriting either side silently loses entries
+        // that some text out there still depends on.
+        io.stderr(`veilio: this map changed in Cloud (${existing.updatedAt} → ${remote.updated_at}) and ` +
+            'locally since it was pulled. Neither copy has been touched.\n' +
+            `Pass --force to overwrite the local copy, or export it first with \`veilio map --json\`.\n`);
+        return EXIT_ERROR;
+    }
+    const now = new Date().toISOString();
+    saveMap(mapPath, map, {
+        force: true,
+        remote: { id: remote.id, updatedAt: remote.updated_at, pulledAt: now },
+    });
+    io.stdout(`Pulled "${remote.name}" (${Object.keys(map).length} symbols) into ${mapPath}\n`);
+    return EXIT_OK;
+}
+/** Upload the local map. Same endpoint, same quotas, same validation. */
+export async function runMapsPush(name, mapPath, io) {
+    const credential = readCredential(io.home);
+    if (!credential)
+        return notSignedIn(io);
+    const map = loadMap(mapPath);
+    if (Object.keys(map).length === 0) {
+        io.stderr(`veilio: there is no local map at ${mapPath} to push.\n`);
+        return EXIT_ERROR;
+    }
+    let vault;
+    try {
+        vault = await getVault(credential);
+    }
+    catch (err) {
+        return reportCloudFailure(err, io);
+    }
+    if (!vault.initialized) {
+        io.stderr('veilio: this account has no vault, so there is no key to encrypt with. ' +
+            'Create one in the web app first.\n');
+        return EXIT_ERROR;
+    }
+    const passphrase = io.password ? await io.password('Vault passphrase: ') : '';
+    if (passphrase === '') {
+        io.stderr('veilio: no passphrase given\n');
+        return EXIT_ERROR;
+    }
+    const key = await deriveVaultKey(passphrase, fromBase64(vault.salt), vault.kdf ? { name: 'PBKDF2-SHA256', iterations: vault.kdf.iterations } : undefined);
+    if (!(await checkVaultVerifier(key, vault.verifier))) {
+        // Caught before anything is uploaded. Pushing under the wrong key would
+        // store a map the account can never open again.
+        io.stderr('veilio: that vault passphrase is not right. Nothing was uploaded.\n');
+        return EXIT_ERROR;
+    }
+    const envelope = await encryptMapForVault(key, map);
+    let created;
+    try {
+        created = await createMap(credential, {
+            name: name ?? 'from the terminal',
+            map_data: JSON.stringify(envelope),
+            identifier_count: Object.keys(map).length,
+            scope: 'personal',
+        });
+    }
+    catch (err) {
+        return reportCloudFailure(err, io);
+    }
+    saveMap(mapPath, map, {
+        force: true,
+        remote: {
+            id: created.id,
+            updatedAt: new Date().toISOString(),
+            pushedAt: new Date().toISOString(),
+        },
+    });
+    io.stdout(`Pushed ${Object.keys(map).length} symbols to Cloud as ${created.id}\n`);
+    return EXIT_OK;
+}
+function notSignedIn(io) {
+    io.stderr('veilio: not signed in. Run `veilio login` first.\n');
+    return EXIT_ERROR;
+}
+/** Same distinctions as a failed sign-in, minus the ones only login can hit. */
+function reportCloudFailure(err, io) {
+    return reportLoginFailure(err, io);
+}
+//# sourceMappingURL=cloud-commands.js.map