@veilio-inc/cli 0.2.0 → 0.3.1

package/LICENSE

@@ -1,6 +1,6 @@
 # Veilio Community License
 
-_Version 1.0 · Effective 2026-08-08_
+_Version 1.1 · Effective 2026-09-25_
 
 **Copyright © 2026 Veilio**
 
@@ -10,7 +10,8 @@ _Version 1.0 · Effective 2026-08-08_
 > The one thing you may not do without written permission is sell Veilio itself:
 > reselling it, white-labeling it, or running it as a hosted service for other
 > people. Contributions are welcome. For a commercial or redistribution license,
-> email `hello@veilio.dev`.
+> email `hello@veilio.dev`. Veilio is not licensed for use in or from Russia or
+> Belarus, or by sanctioned persons (Section 5A).
 
 ---
 
@@ -48,11 +49,17 @@ For the purposes of this License:
 
 **"Competing Product"** means a commercially offered product or service whose primary purpose and core functionality substantially overlap with the Software or Cloud Edition.
 
+**"Applicable Sanctions"** means any economic, financial, trade or other restrictive measures applicable to Veilio or the relevant transaction under the laws of the European Union or the Republic of Poland, including applicable asset-freezing and prohibition-on-making-available measures, and any other sanctions or trade restrictions that are legally binding on Veilio.
+
+**"Restricted Person"** means any natural or legal person, entity or body that: (a) is designated or otherwise subject to restrictive measures under Applicable Sanctions, (b) is directly or indirectly owned or controlled by such a person, entity or body, (c) acts on behalf of or at the direction of such a person, entity or body; or (d) is otherwise a person to whom Veilio is prohibited under Applicable Sanctions from providing the Software, funds or economic resources.
+
+**"Restricted Territory"** means the Russian Federation and the Republic of Belarus.
+
 ---
 
 ## 3. Permissions
 
-Subject to the restrictions in this License, you are granted a worldwide, royalty-free, non-exclusive license to:
+Subject to the restrictions in this License, including Section 5A, you are granted a worldwide, royalty-free, non-exclusive license to:
 
 * use the Software for personal purposes;
 * use the Software for internal commercial purposes;
@@ -114,6 +121,24 @@ Requests for written permission may be sent to `hello@veilio.dev`.
 
 ---
 
+## 5A. Restricted Territories and Sanctions
+
+**5A.1.** No license or other right to the Software is granted to:
+
+* persons or entities incorporated, registered, established or headquartered in a Restricted Territory;
+* natural persons whose principal place of business or ordinary residence is in a Restricted Territory; or
+* Restricted Persons.
+
+**5A.2.** You must not access or use the Software from a Restricted Territory, make the Software available to any person located in a Restricted Territory, or use the Software directly or indirectly for the benefit of a Restricted Person or a person or entity incorporated, registered, established or headquartered in a Restricted Territory.
+
+**5A.3.** By using the Software, you represent and warrant, both when you first use it and throughout your use of it, that you are not a Restricted Person and do not fall within any of the territorial restrictions set out in this Section.
+
+**5A.4.** You must not use an intermediary, affiliate, nominee, proxy, VPN or other arrangement for the purpose of circumventing the restrictions set out in this Section or Applicable Sanctions.
+
+**5A.5.** Any breach of this Section is a material violation of this License and terminates your rights under it (Section 14). Veilio does not grant written permission for exceptions to this Section.
+
+---
+
 ## 6. Cloud Edition
 
 The Cloud Edition is the official commercial hosted offering of the project.
@@ -218,7 +243,7 @@ TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE AUTHORS
 
 ## 14. Termination
 
-Your rights under this License terminate automatically if you materially violate its terms.
+Your rights under this License terminate automatically if you materially violate its terms. Any breach of Section 5A is a material violation.
 
 Upon termination, you must cease the activities that are prohibited by this License.
 
@@ -244,5 +269,5 @@ Each version will be identified by a version number. Unless explicitly stated ot
 
 **Project:** Veilio
 **Copyright:** © 2026 Veilio
-**License:** Veilio Community License, Version 1.0
+**License:** Veilio Community License, Version 1.1
 **Contact:** `hello@veilio.dev`

package/README.md

@@ -8,6 +8,8 @@ pbpaste | veilio restore                 # bring the answer back
 git diff --cached | veilio scan          # refuse to commit a live key
 ```
 
+Full guide - terminal, Cloud sign-in, and connecting AI assistants (Claude Code, Claude Desktop, Xcode, Cursor, VS Code): [docs/USING-THE-CLI-AND-MCP.md](../../docs/USING-THE-CLI-AND-MCP.md).
+
 ## Install
 
 ```bash
@@ -32,17 +34,15 @@ behavior; it only unlocks the four commands below that name Cloud explicitly.
 
 ## Cloud sync (Individual plan and above)
 
-> **None of this is in `0.1.0`, which is what npm currently has.** These
-> commands are merged here and ship with the next release; until then they run
-> from a clone — `npm run build:packages`, then
-> `node packages/cli/dist/index.js --help`.
-
 ```bash
-veilio login                    # prompts for email/password; --instance for self-hosted
+veilio login                    # email, password, and the authentication code if 2FA is on
 veilio whoami                   # who you're signed in as, no request made
 veilio maps list                # ids, scope and symbol counts for everything in Cloud
 veilio maps pull <id>           # decrypt locally, write second — never a partial write
 veilio maps push <name>         # upload the local map under a new Cloud name
+veilio team unlock              # open the team key with your vault passphrase (kept 7 days)
+veilio team lock                # remove the unlocked team key from this machine
+veilio rules pull               # fetch your custom rules; scrub then applies them offline
 veilio logout                   # revokes server-side, then removes the local credential
 ```
 
@@ -53,10 +53,16 @@ accepted the sign-in. `0600` is the floor, not the final answer — the OS
 keychain is a stronger option and a planned follow-up. A personal map is
 zero-knowledge: pulling or pushing one prompts for the vault passphrase and
 derives the key here, on your machine — the passphrase and the key never
-leave it. A team map arrives already open, because the server can read those
-(stated in the privacy policy) and there is nothing local left to decrypt.
+leave it. A team map is sealed under the team key, which the server cannot
+read either; `veilio team unlock` opens it here with your vault passphrase.
+
+Custom rules (whitelist and replace, set in the web app) are applied by
+`scrub` from a local copy that `veilio rules pull` writes to
+`~/.veilio/rules.json` (`0600`). `scrub` never fetches them itself - it stays
+offline - and says on every run how many rules it applied and how old the copy
+is. Pull again after the rules change; `logout` removes the copy.
 
-Every one of these six is a client of `GET /api/maps`, `GET /api/maps/:id` and
+The map commands are clients of `GET /api/maps`, `GET /api/maps/:id` and
 `POST /api/maps` — the exact same routes the browser uses, behind the exact
 same entitlement check. There is no CLI-shaped API and nothing here can reach
 a plan feature the web app couldn't.
@@ -113,13 +119,14 @@ Redacted credentials are **not** in the map. `restore` cannot bring them back, b
     sarif: veilio.sarif # optional: upload to code scanning
 ```
 
-**This example does not work yet, and needs two things that do not exist.** The
-`@v0.1.0` ref is a git tag on this repository — the only tags here are
-`engine-v*`, cut by semantic-release for the engine — and the Action's own script
-runs `npx --yes @veilio-inc/cli@<version>`, which needs the package on npm.
-Publishing supplies the second; the first is a tag someone has to cut, and note
-that `v*.*.*` is also what triggers the Community Edition release workflow, so
-the two are not independent.
+**This example does not work yet, and needs a tag that does not exist.** The
+`@v0.1.0` ref is a git tag on this repository, and the tags here are `engine-v*`
+(cut by semantic-release for the engine) and `@veilio-inc/cli@*` /
+`@veilio-inc/mcp@*` (cut by Changesets when the tools release) — neither shape
+matches. The Action's own script runs `npx --yes @veilio-inc/cli@<version>`,
+which is satisfied now that the CLI is published; what is left is a `v*.*.*` tag
+someone has to cut, and note that `v*.*.*` is also what triggers the Community
+Edition release workflow, so the two are not independent.
 
 Scans the **pull-request diff** by default, not the whole tree. A repo adopting
 this mid-life almost always has a historical finding somewhere; blocking every PR

package/dist/args.d.ts

@@ -1,6 +1,6 @@
 import { type LanguageOption } from '@veilio-inc/engine';
 import type { SecretPolicy } from '@veilio-inc/engine';
-export type Command = 'scrub' | 'restore' | 'scan' | 'map' | 'login' | 'logout' | 'whoami' | 'maps' | 'help' | 'version';
+export type Command = 'scrub' | 'restore' | 'scan' | 'map' | 'login' | 'logout' | 'whoami' | 'maps' | 'team' | 'rules' | 'help' | 'version';
 export interface ParsedArgs {
     command: Command;
     /** Positional file paths. Empty means read stdin (or, for `scan`, error). */
@@ -32,6 +32,16 @@ export interface ParsedArgs {
      * visibly separate from the offline one.
      */
     mapsAction: 'list' | 'pull' | 'push' | null;
+    /**
+     * `team unlock` / `team lock`.
+     *
+     * A subcommand for the same reason `maps` is one: `veilio unlock` alone would
+     * not say what it unlocks, and what it unlocks is specifically the team's
+     * keys rather than the account or the local store.
+     */
+    teamAction: 'unlock' | 'lock' | null;
+    /** `rules pull`. */
+    rulesAction: 'pull' | null;
     /**
      * Base URL of the Veilio instance to sign in to. Null means the public Cloud.
      *

package/dist/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,OAAO,GACjB,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;AAEpG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,YAAY,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAA;IACjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,qDAAqD;IACrD,KAAK,EAAE,OAAO,CAAA;IACd,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAA;IACf,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;IACd;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAE3C;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAexC;;;;;GAKG;AACH,eAAO,MAAM,cAAc,cAA0D,CAAA;AAWrF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAkI7D"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,OAAO,GACf,OAAO,GACP,SAAS,GACT,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,CAAA;AAEb,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,YAAY,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAA;IACjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,qDAAqD;IACrD,KAAK,EAAE,OAAO,CAAA;IACd,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAA;IACf,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;IACd;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAE3C;;;;;;OAMG;IACH,UAAU,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;IACpC,oBAAoB;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAE1B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAiBxC;;;;;GAKG;AACH,eAAO,MAAM,cAAc,cAOzB,CAAA;AAWF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CA0J7D"}

package/dist/args.js

@@ -13,6 +13,8 @@ const COMMANDS = new Set([
     'logout',
     'whoami',
     'maps',
+    'team',
+    'rules',
     'help',
     'version',
 ]);
@@ -22,7 +24,14 @@ const COMMANDS = new Set([
  * command without deciding which side of the line it falls on is a compile
  * error rather than an accident.
  */
-export const CLOUD_COMMANDS = new Set(['login', 'logout', 'whoami', 'maps']);
+export const CLOUD_COMMANDS = new Set([
+    'login',
+    'logout',
+    'whoami',
+    'maps',
+    'team',
+    'rules',
+]);
 const SECRET_POLICIES = new Set(['redact', 'warn', 'off']);
 const LANGUAGE_VALUES = new Set([...LANGUAGES, 'auto']);
 function requireValue(flag, value) {
@@ -47,6 +56,8 @@ export function parseArgs(argv) {
         force: false,
         instance: null,
         mapsAction: null,
+        teamAction: null,
+        rulesAction: null,
     };
     if (argv.length === 0)
         return parsed;
@@ -70,6 +81,26 @@ export function parseArgs(argv) {
                 i = 2;
             }
         }
+        if (parsed.command === 'team') {
+            const verb = argv[1];
+            if (verb !== undefined && !verb.startsWith('-')) {
+                if (verb !== 'unlock' && verb !== 'lock') {
+                    throw new UsageError(`unknown team action "${verb}" — expected unlock or lock`);
+                }
+                parsed.teamAction = verb;
+                i = 2;
+            }
+        }
+        if (parsed.command === 'rules') {
+            const verb = argv[1];
+            if (verb !== undefined && !verb.startsWith('-')) {
+                if (verb !== 'pull') {
+                    throw new UsageError(`unknown rules action "${verb}" — expected pull`);
+                }
+                parsed.rulesAction = verb;
+                i = 2;
+            }
+        }
     }
     for (; i < argv.length; i++) {
         const arg = argv[i];

package/dist/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAsC,MAAM,oBAAoB,CAAA;AAgDlF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU;IAChC,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;AACrF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAE/D,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;KACjB,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAgB,CAAA;QACjC,CAAC,GAAG,CAAC,CAAA;QAEL,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC1D,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,iCAAiC,CAAC,CAAA;gBACrF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;gBACvB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;gBAC1B,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAClB,qBAAqB,KAAK,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAA0B,CAAA;gBAC5C,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAqB,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAAC,gDAAgD,KAAK,IAAI,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAqB,CAAA;gBACtC,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,aAAa;gBAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,wEAAwE;gBACxE,2DAA2D;gBAC3D,IAAI,GAAQ,CAAA;gBACZ,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,UAAU,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,IAAI,UAAU,CAClB,kCAAkC,KAAK,2CAA2C;wBAChF,wFAAwF,CAC3F,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACvB,MAAK;YACP,CAAC;YACD;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAsC,MAAM,oBAAoB,CAAA;AAsElF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU;IAChC,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAU;IAC7C,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAA;AACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAE/D,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;KAClB,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAgB,CAAA;QACjC,CAAC,GAAG,CAAC,CAAA;QAEL,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC1D,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,iCAAiC,CAAC,CAAA;gBACrF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzC,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,6BAA6B,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,MAAM,IAAI,UAAU,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAAA;gBACxE,CAAC;gBACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;gBACzB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;gBACvB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;gBAC1B,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAClB,qBAAqB,KAAK,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAA0B,CAAA;gBAC5C,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAqB,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAAC,gDAAgD,KAAK,IAAI,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAqB,CAAA;gBACtC,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,aAAa;gBAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,wEAAwE;gBACxE,2DAA2D;gBAC3D,IAAI,GAAQ,CAAA;gBACZ,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,UAAU,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,IAAI,UAAU,CAClB,kCAAkC,KAAK,2CAA2C;wBAChF,wFAAwF,CAC3F,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACvB,MAAK;YACP,CAAC;YACD;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/cloud-commands.d.ts

@@ -1,3 +1,4 @@
+import { type TeamLayer } from '@veilio-inc/engine';
 import { type Io } from './commands.js';
 /**
  * Sign in, and store the credential only if the account can actually use it.
@@ -67,4 +68,33 @@ export declare function runMapsPull(id: string | null, mapPath: string, io: Io,
 }): Promise<number>;
 /** Upload the local map. Same endpoint, same quotas, same validation. */
 export declare function runMapsPush(name: string | null, mapPath: string, io: Io): Promise<number>;
+/**
+ * Fetch the account's custom rules so `veilio scrub` can apply them offline.
+ *
+ * Merged here, in the web app's order, so every later scrub applies exactly
+ * what the browser would. A plan without custom rules REMOVES any cache left
+ * from before: rules the account can no longer use must not go on shaping
+ * its output. Any other failure keeps the cache and says so.
+ */
+export declare function runRulesPull(io: Io): Promise<number>;
+/**
+ * Unlock this team's keys for processes that cannot ask for a passphrase.
+ *
+ * The MCP server starts inside a coding agent with no terminal attached, so the
+ * keys it needs have to be put on disk by a run like this one, where a person
+ * is present to type the passphrase. See `team-unlock.ts` for what is stored
+ * and why it is the team key rather than the vault key.
+ */
+export declare function runTeamUnlock(io: Io, days?: number): Promise<number>;
+/** Remove the unlocked team keys. */
+export declare function runTeamLock(io: Io): number;
+/**
+ * The team's maps for `veilio restore` (spec 028), handed to the local command
+ * as a callback so that command stays unlinked from the network. Signed out:
+ * no request, no layer - a local restore, as before.
+ */
+export declare function teamLayerFor(home: string | undefined, missing: readonly string[]): Promise<{
+    team: TeamLayer | null;
+    note: string | null;
+}>;
 //# sourceMappingURL=cloud-commands.d.ts.map

package/dist/cloud-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-commands.d.ts","sourceRoot":"","sources":["../src/cloud-commands.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAuB,KAAK,EAAE,EAAE,MAAM,eAAe,CAAA;AAW5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA+C/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgDvD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAQxC;AAyDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,EACjB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,EAAE,EACN,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,CAgGjB;AAED,yEAAyE;AACzE,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE/F"}
+{"version":3,"file":"cloud-commands.d.ts","sourceRoot":"","sources":["../src/cloud-commands.ts"],"names":[],"mappings":"AAuBA,OAAO,EAeL,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAA;AAa3B,OAAO,EAAuB,KAAK,EAAE,EAAE,MAAM,eAAe,CAAA;AAc5D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA2E/E;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgFvD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAQxC;AAyDD;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBzD;AA+CD;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,MAAM,GAAG,IAAI,EACjB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,EAAE,EACN,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,CA+GjB;AAED,yEAAyE;AACzE,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE/F;AAcD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqC1D;AAID;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmH1E;AAED,qCAAqC;AACrC,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAgB1C;AAID;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAO1D"}

package/dist/cloud-commands.js

@@ -6,10 +6,13 @@
 // with no account touches nothing (FR-002). Putting these here is what keeps
 // that walk meaningful instead of something to be deleted the moment it becomes
 // inconvenient.
-import { CloudError, createMap, getMap, getVault, listMaps, request, } from './cloud.js';
-import { checkVaultVerifier, decryptMapFromVault, deriveVaultKey, encryptMapForVault, fromBase64, parseVaultEnvelope, } from '@veilio-inc/engine';
+import { CloudError, createMap, getMap, getVault, getUserKeys, getTeamKeyWraps, listMaps, listRules, request, } from './cloud.js';
+import { checkVaultVerifier, decryptMapFromVault, deriveVaultKey, unwrapPrivateKey, unwrapTeamKey, exportTeamKey, encryptMapForVault, fromBase64, parseVaultEnvelope, importTeamKey, decryptTeamMapWithAny, } from '@veilio-inc/engine';
 import { loadMap, loadRemote, saveMap } from './store.js';
+import { resolveTeamNamespace, teamLayerNote } from './team-namespace.js';
+import { readTeamUnlock, removeTeamUnlock, writeTeamUnlock, teamUnlockPath, expiryFrom, } from './team-unlock.js';
 import { readCredential, removeCredential, writeCredential } from './credential.js';
+import { mergeRules, removeRules, rulesPath, writeRules } from './rules.js';
 import { EXIT_ERROR, EXIT_OK } from './commands.js';
 import { DEFAULT_INSTANCE } from './cloud.js';
 /** The endpoint a sign-in is checked against. See `runLogin`. */
@@ -61,6 +64,32 @@ export async function runLogin(instance, io) {
     catch (err) {
         return reportLoginFailure(err, io);
     }
+    // A second factor. The token that came back is a challenge, not a session:
+    // storing it made every later command fail, and the failure read as a wrong
+    // password (found on staging, 2026-09-26). Ask for the code and complete the
+    // sign-in the way the web app does.
+    if (session.secondFactorRequired === true) {
+        const code = (await requirePrompt(io, 'Authentication code (or a recovery code): ')).trim();
+        if (code === '') {
+            io.stderr('veilio: no authentication code given\n');
+            return EXIT_ERROR;
+        }
+        try {
+            session = await request('/api/auth/2fa/verify', {
+                credential: { token: session.token, account, instance: base },
+                method: 'POST',
+                body: { code },
+            });
+        }
+        catch (err) {
+            if (err instanceof CloudError && err.kind === 'unauthenticated') {
+                io.stderr('veilio: that authentication code was not accepted, or it expired. ' +
+                    'Run `veilio login` again with a fresh code.\n');
+                return EXIT_ERROR;
+            }
+            return reportLoginFailure(err, io);
+        }
+    }
     if (typeof session.token !== 'string' || session.token === '') {
         // A 200 with no token is not a sign-in. Writing an empty credential here
         // would produce a "signed in" state that fails on every use.
@@ -104,7 +133,14 @@ export async function runLogout(io) {
         if (err instanceof CloudError && err.kind === 'unauthenticated') {
             // Already revoked, or expired. The server-side state is what logout
             // wanted, so finishing the job locally is correct rather than an error.
+            //
+            // "Locally" has to include the team keys. They outlive the session that
+            // fetched them — a revoked token stops working, an unlocked team key goes
+            // on opening the team's maps — so leaving them here would be the one
+            // branch where signing out quietly kept the more dangerous half.
             try {
+                removeTeamUnlock(io.home);
+                removeRules(io.home);
                 removeCredential(io.home);
             }
             catch (removeErr) {
@@ -121,6 +157,28 @@ export async function runLogout(io) {
             'To end the session now, sign out from the web app.\n');
         return EXIT_ERROR;
     }
+    // Before the credential, because this is key material rather than a token
+    // the server has already revoked. Signing out while the team's keys stay
+    // readable on disk is exactly the gap between what a person believes they
+    // gave up and what is still there.
+    try {
+        removeTeamUnlock(io.home);
+    }
+    catch (err) {
+        io.stderr(`veilio: the session was revoked, but the unlocked team keys could not be removed ` +
+            `(${err instanceof Error ? err.message : String(err)}). Delete ${teamUnlockPath(io.home)} by hand.\n`);
+        return EXIT_ERROR;
+    }
+    // The rules are the account's too, and a whitelist among them keeps names
+    // readable: they go with the session rather than outliving it.
+    try {
+        removeRules(io.home);
+    }
+    catch (err) {
+        io.stderr(`veilio: the session was revoked, but the cached custom rules could not be removed ` +
+            `(${err instanceof Error ? err.message : String(err)}). Delete ${rulesPath(io.home)} by hand.\n`);
+        return EXIT_ERROR;
+    }
     try {
         removeCredential(io.home);
     }
@@ -229,6 +287,41 @@ export async function runMapsList(io) {
     }
     return EXIT_OK;
 }
+/**
+ * Open a team map with the team keys `veilio team unlock` stored.
+ *
+ * The same keys the MCP server reads, for the same reason: this machine may
+ * have nobody present to type a vault passphrase, and the team key - not the
+ * vault key - is what a team map is sealed under. Reports and returns null
+ * when it cannot, so the caller writes nothing.
+ */
+async function openTeamEnvelope(credential, mapData, io) {
+    const unlock = readTeamUnlock({ instance: credential.instance, account: credential.account }, io.home);
+    if (!unlock || unlock.keys.length === 0) {
+        io.stderr('veilio: that is a team map, and no team key is unlocked on this machine. ' +
+            'Run `veilio team unlock` first. Nothing was written.\n');
+        return null;
+    }
+    const keys = [];
+    for (const stored of unlock.keys) {
+        try {
+            keys.push({ version: stored.version, key: await importTeamKey(stored.key) });
+        }
+        catch {
+            // A damaged entry; the others may still open the map.
+            continue;
+        }
+    }
+    try {
+        return await decryptTeamMapWithAny(keys, JSON.parse(mapData));
+    }
+    catch (err) {
+        io.stderr(`veilio: that team map could not be opened with the unlocked team keys — ` +
+            `${err instanceof Error ? err.message : String(err)}. ` +
+            'If the team key was rotated since, run `veilio team unlock` again. Nothing was written.\n');
+        return null;
+    }
+}
 /**
  * Pull a map into the local store: decrypt FIRST, write second.
  *
@@ -256,11 +349,27 @@ export async function runMapsPull(id, mapPath, io, options = {}) {
     catch (err) {
         return reportCloudFailure(err, io);
     }
-    // A team map arrives already open — the server can read those, and says so in
-    // the privacy policy. Only a client envelope is ours to decrypt.
-    let map;
+    // Every map is an envelope the server cannot open: a personal map under the
+    // vault key, a team map under the team key. Which one is written on the
+    // envelope itself.
     if (typeof remote.map_data !== 'string') {
-        map = remote.map_data;
+        io.stderr('veilio: that map is not an encrypted envelope, so it was not written.\n');
+        return EXIT_ERROR;
+    }
+    let envelope;
+    try {
+        envelope = JSON.parse(remote.map_data);
+    }
+    catch {
+        io.stderr('veilio: that map is not an encrypted envelope, so it was not written.\n');
+        return EXIT_ERROR;
+    }
+    let map;
+    if (envelope.alg === 'AES-256-GCM-TEAM') {
+        const opened = await openTeamEnvelope(credential, remote.map_data, io);
+        if (!opened)
+            return EXIT_ERROR;
+        map = opened;
     }
     else {
         let vault;
@@ -391,4 +500,173 @@ function notSignedIn(io) {
 function reportCloudFailure(err, io) {
     return reportLoginFailure(err, io);
 }
+// ─── rules: pull ──────────────────────────────────────────────────────────────
+/**
+ * Fetch the account's custom rules so `veilio scrub` can apply them offline.
+ *
+ * Merged here, in the web app's order, so every later scrub applies exactly
+ * what the browser would. A plan without custom rules REMOVES any cache left
+ * from before: rules the account can no longer use must not go on shaping
+ * its output. Any other failure keeps the cache and says so.
+ */
+export async function runRulesPull(io) {
+    const credential = readCredential(io.home);
+    if (!credential)
+        return notSignedIn(io);
+    let fetched;
+    try {
+        fetched = await listRules(credential);
+    }
+    catch (err) {
+        if (err instanceof CloudError && err.kind === 'unentitled') {
+            const removed = removeRules(io.home);
+            io.stderr(`veilio: this account's plan does not include custom rules${removed ? ' - the cached rules were removed' : ''}.\n`);
+            return EXIT_ERROR;
+        }
+        return reportCloudFailure(err, io);
+    }
+    const personal = fetched.rules ?? [];
+    const team = fetched.teamRules ?? [];
+    const rules = mergeRules(personal, team);
+    writeRules({
+        instance: credential.instance,
+        account: credential.account,
+        pulledAt: new Date().toISOString(),
+        rules,
+    }, io.home);
+    const skipped = personal.length + team.length - rules.length;
+    io.stdout(`Pulled ${rules.length} custom rule${rules.length === 1 ? '' : 's'} ` +
+        `(${personal.length} personal, ${team.length} team${skipped > 0 ? `, ${skipped} disabled and skipped` : ''}). ` +
+        '`veilio scrub` applies them.\n');
+    return EXIT_OK;
+}
+// ─── team: unlock, lock ──────────────────────────────────────────────────────
+/**
+ * Unlock this team's keys for processes that cannot ask for a passphrase.
+ *
+ * The MCP server starts inside a coding agent with no terminal attached, so the
+ * keys it needs have to be put on disk by a run like this one, where a person
+ * is present to type the passphrase. See `team-unlock.ts` for what is stored
+ * and why it is the team key rather than the vault key.
+ */
+export async function runTeamUnlock(io, days) {
+    const credential = readCredential(io.home);
+    if (!credential) {
+        io.stderr('veilio: not signed in. Run `veilio login` first.\n');
+        return EXIT_ERROR;
+    }
+    try {
+        const list = await listMaps(credential);
+        const teamId = list.team?.id;
+        if (!teamId) {
+            io.stderr('veilio: this account is not in a team, so there are no team keys to unlock. ' +
+                'Shared placeholders are a Team-plan feature.\n');
+            return EXIT_ERROR;
+        }
+        const mine = await getUserKeys(credential);
+        if (!mine.initialized) {
+            io.stderr('veilio: this account has no keypair yet. Open the web app once — that is where a ' +
+                'keypair is created and where a teammate grants you the team key.\n');
+            return EXIT_ERROR;
+        }
+        const { wraps } = await getTeamKeyWraps(credential, teamId);
+        if (wraps.length === 0) {
+            io.stderr('veilio: no teammate has granted you the team key yet. Ask someone already in the ' +
+                'team to open the web app, which is what performs the grant.\n');
+            return EXIT_ERROR;
+        }
+        const vault = await getVault(credential);
+        if (!vault.initialized) {
+            io.stderr('veilio: this account has no vault, so there is no key to unwrap anything with. ' +
+                'Create one in the web app first.\n');
+            return EXIT_ERROR;
+        }
+        const passphrase = io.password ? await io.password('Vault passphrase: ') : '';
+        if (passphrase === '') {
+            io.stderr('veilio: no passphrase given\n');
+            return EXIT_ERROR;
+        }
+        const vaultKey = await deriveVaultKey(passphrase, fromBase64(vault.salt), vault.kdf ? { name: 'PBKDF2-SHA256', iterations: vault.kdf.iterations } : undefined);
+        // Named as a wrong passphrase here rather than surfacing later as an
+        // authentication-tag failure that reads like corruption.
+        if (!(await checkVaultVerifier(vaultKey, vault.verifier))) {
+            io.stderr('veilio: that vault passphrase is not right. Nothing was written.\n');
+            return EXIT_ERROR;
+        }
+        const privateKey = await unwrapPrivateKey(vaultKey, mine.privateKeyEncrypted);
+        const keys = [];
+        for (const wrap of wraps) {
+            try {
+                const teamKey = await unwrapTeamKey(wrap.wrapped_key, privateKey, {
+                    teamId,
+                    version: wrap.version,
+                    myPublicKey: mine.publicKey,
+                });
+                keys.push({ version: wrap.version, key: await exportTeamKey(teamKey) });
+            }
+            catch {
+                // A wrap this account cannot open — from a granter whose key has since
+                // changed, most likely. Skipped rather than fatal: another version may
+                // still open most of the team's maps, and none opening is reported below.
+                continue;
+            }
+        }
+        if (keys.length === 0) {
+            io.stderr('veilio: none of the team key wraps held for this account could be opened. ' +
+                'Ask a teammate to grant access again from the web app.\n');
+            return EXIT_ERROR;
+        }
+        const now = new Date();
+        const expiresAt = expiryFrom(now, days);
+        writeTeamUnlock({
+            v: 1,
+            instance: credential.instance,
+            account: credential.account,
+            teamId,
+            expiresAt,
+            keys,
+        }, io.home);
+        const versions = keys.map((k) => `v${k.version}`).join(', ');
+        io.stdout(`Unlocked ${keys.length === 1 ? 'the team key' : 'team keys'} (${versions}) until ` +
+            `${expiresAt}.\n` +
+            `Stored in ${teamUnlockPath(io.home)}, readable only by you. ` +
+            `Run \`veilio team lock\` to remove them.\n`);
+        return EXIT_OK;
+    }
+    catch (err) {
+        return reportCloudFailure(err, io);
+    }
+}
+/** Remove the unlocked team keys. */
+export function runTeamLock(io) {
+    try {
+        if (!removeTeamUnlock(io.home)) {
+            io.stdout('No team keys were unlocked.\n');
+            return EXIT_OK;
+        }
+    }
+    catch (err) {
+        io.stderr(`veilio: the unlocked team keys could not be removed ` +
+            `(${err instanceof Error ? err.message : String(err)}). ` +
+            `Delete ${teamUnlockPath(io.home)} by hand.\n`);
+        return EXIT_ERROR;
+    }
+    io.stdout('Team keys locked.\n');
+    return EXIT_OK;
+}
+// ─── restore: the team layer ────────────────────────────────────────────────
+/**
+ * The team's maps for `veilio restore` (spec 028), handed to the local command
+ * as a callback so that command stays unlinked from the network. Signed out:
+ * no request, no layer - a local restore, as before.
+ */
+export async function teamLayerFor(home, missing) {
+    // Signed out, the resolver answers 'local' without a request. At most 5 s: a
+    // hung instance must not stall a `... | veilio restore > file` pipeline.
+    const found = await resolveTeamNamespace(home, { deadlineMs: RESTORE_CLOUD_WAIT_MS });
+    if (found.status === 'team' && found.conflictDetection)
+        return { team: found.analysis, note: null };
+    return { team: null, note: teamLayerNote(found, missing) };
+}
+const RESTORE_CLOUD_WAIT_MS = 5000;
 //# sourceMappingURL=cloud-commands.js.map