@veilio-inc/cli 0.5.4 → 0.6.1

package/README.md

@@ -44,9 +44,14 @@ veilio maps list                # ids, scope and symbol counts for everything in
 veilio maps pull <id>           # decrypt locally, write second — never a partial write
 veilio maps push [name]         # upload the local map under a new Cloud name
 veilio maps push --team [name]  # publish it as the team's shared map instead
+veilio maps update <id>         # replace a Cloud map's entries with the local map's, in place
 veilio maps rm <id>             # remove a map from Cloud
+veilio projects                 # the projects your team works in; * marks the one in use
+veilio projects use <name>      # work in that project (kept with the sign-in)
 veilio team unlock              # open the team key with your vault passphrase (kept 7 days)
 veilio team lock                # remove the unlocked team key from this machine
+veilio vault unlock             # keep the personal-maps key here (7 days), for the MCP server
+veilio vault lock               # remove it from this machine
 veilio rules pull               # fetch your custom rules; scrub then applies them offline
 veilio logout                   # revokes server-side, then removes the local credential
 ```
@@ -61,16 +66,52 @@ derives the key here, on your machine — the passphrase and the key never
 leave it. A team map is sealed under the team key, which the server cannot
 read either; `veilio team unlock` opens it here with your vault passphrase.
 
-**Creating and removing a shared map are here; replacing one is not.** There is
-no `maps update --team`, and that is a decision rather than a gap. Replacing the
-contents of a map teammates already rely on changes what their placeholders
-mean after they have sent text using them — the old meaning is what their
-`restore` still needs, and nothing in a shared map records which version a given
-piece of text was masked under. Publish a new map and remove the old one when
-you are sure nobody is still restoring against it. Cloud does have a route that
-rewrites a team map's contents, used by key rotation to re-seal the same pairs
-under a new key; it exists for that one purpose and does not change what any
-placeholder means.
+**Updating a map in place.** `veilio maps update <id>` replaces a Cloud map's
+entries with the local map's and keeps its id, name and project, so refreshing a
+map never leaves a second copy behind. Before anything is sent it refuses, and
+says why:
+
+- an update that would **drop entries** the Cloud map holds (a placeholder the
+  local map lacks, or gives another name), with the count, unless you pass
+  `--allow-drop` - text masked under the old meaning still depends on it;
+- for a team map, a placeholder that **another team map** gives a different
+  name - publishing it would leave it unrestorable for every member;
+- a **teammate's map** - only its publisher updates or removes it.
+
+The server refuses the rest: a team that owes a key change, and a map that
+changed in Cloud since it was read (two writers never silently overwrite each
+other). A team map is sealed with the team's current key; a personal map with
+the personal-maps key.
+
+**Projects.** A team map belongs to one project. `veilio projects use <name>`
+chooses the one this sign-in works in: listing, pushing, updating and
+`scrub --team` then use that project's team maps only, and the MCP server uses
+the same choice. With none chosen, team maps of every project are used.
+
+**`VEILIO_PROJECT`.** Set to a project's name or id, it overrides the stored
+choice for that process only, and is never written down. That is what a CI job
+needs: a runner starts clean, with no `projects use` behind it.
+
+```sh
+VEILIO_PROJECT=billing veilio scrub src/ledger.ts
+```
+
+The order is `VEILIO_PROJECT`, then the stored choice, then none. An empty
+value counts as unset. A value that names no project your team works in, or a
+name two projects share, is refused, naming the value: nothing falls back to
+the stored choice or the default, and `scrub` and `restore` refuse rather than
+number from the local map. Lines that name the project say so, as in "team maps
+of project billing (from VEILIO_PROJECT)". `veilio projects` marks the one the
+variable picked, and `veilio projects use` still stores a choice, but warns that
+the variable overrides it in that shell. Signed out, it changes nothing.
+
+**The personal-maps key.** `veilio vault unlock` asks for the vault passphrase
+once and keeps, on this machine, only a key that opens personal maps - not the
+passphrase, not the vault key, which also unlocks your team keys. The first time,
+it creates that key and stores it in Cloud wrapped under your vault key, where
+the server cannot read it; it also re-seals older personal maps under it. Then
+`maps pull`, `push` and `update` - and the MCP server - open personal maps
+without a passphrase. Without it, the CLI asks for the passphrase as before.
 
 Custom rules (whitelist and replace, set in the web app) are applied by
 `scrub` from a local copy that `veilio rules pull` writes to
@@ -78,9 +119,11 @@ Custom rules (whitelist and replace, set in the web app) are applied by
 offline - and says on every run how many rules it applied and how old the copy
 is. Pull again after the rules change; `logout` removes the copy.
 
-Three files, all `0600`, all under `~/.veilio/`: `credential.json` (the session,
-removed by `logout`), `rules.json` (the rules copy) and `team-keys.json` (the
-keys `team unlock` opened, kept seven days).
+Four files, all `0600`, all under `~/.veilio/`: `credential.json` (the session
+and the chosen project, removed by `logout`), `rules.json` (the rules copy),
+`team-keys.json` (the keys `team unlock` opened, kept seven days) and
+`personal-maps-key.json` (the key `vault unlock` opened, kept seven days). `logout`
+removes all of them.
 
 ### Scrubbing with the team's numbering
 
@@ -116,8 +159,8 @@ with the real names:
 - **The counts are this project's.** "Restored 8 of 9" is measured against your
   own map, not against a team namespace of four hundred entries.
 
-The map commands are clients of `GET /api/maps`, `GET /api/maps/:id` and
-`POST /api/maps` — the exact same routes the browser uses, behind the exact
+The map commands are clients of `GET /api/maps`, `GET /api/maps/:id`,
+`POST /api/maps` and `PATCH /api/maps/:id` — the exact same routes the browser uses, behind the exact
 same entitlement check. There is no CLI-shaped API and nothing here can reach
 a plan feature the web app couldn't.
 
@@ -134,6 +177,10 @@ a plan feature the web app couldn't.
                         nothing and exit 1 if a placeholder would be left
     --keep-docs         restore: keep JSDoc blocks the model wrote
 -f, --force             Allow a map write that would drop existing entries
+    --days <n>          vault unlock, team unlock: keep the key for n days
+                        (1 to 30; 7 by default)
+    --allow-drop        maps update: allow dropping entries the Cloud map has
+                        and the local map does not
     --device            login: sign in through a browser instead of typing a
                         password here. Required for an SSO-bound account, and
                         used automatically when the instance asks for a CAPTCHA

package/dist/args.d.ts

@@ -1,6 +1,6 @@
 import { type LanguageOption } from '@veilio-inc/engine';
 import type { SecretPolicy } from '@veilio-inc/engine';
-export type Command = 'scrub' | 'restore' | 'scan' | 'map' | 'login' | 'logout' | 'whoami' | 'maps' | 'team' | 'rules' | 'help' | 'version';
+export type Command = 'scrub' | 'restore' | 'scan' | 'map' | 'login' | 'logout' | 'whoami' | 'maps' | 'team' | 'vault' | 'projects' | 'rules' | 'help' | 'version';
 export interface ParsedArgs {
     command: Command;
     /** Positional file paths. Empty means read stdin (or, for `scan`, error). */
@@ -49,7 +49,14 @@ export interface ParsedArgs {
      * reads like they are the same thing. `maps <verb>` keeps the cloud surface
      * visibly separate from the offline one.
      */
-    mapsAction: 'list' | 'pull' | 'push' | 'rm' | null;
+    mapsAction: 'list' | 'pull' | 'push' | 'update' | 'rm' | null;
+    /**
+     * `maps update --allow-drop`: let an update remove entries the Cloud map
+     * holds and the local map does not (spec 052 FR-005). Its own flag rather
+     * than `--force`, which already means "overwrite the LOCAL map" on a pull:
+     * one word for two opposite directions is how somebody loses the wrong copy.
+     */
+    allowDrop: boolean;
     /**
      * `team unlock` / `team lock`.
      *
@@ -58,6 +65,17 @@ export interface ParsedArgs {
      * keys rather than the account or the local store.
      */
     teamAction: 'unlock' | 'lock' | null;
+    /**
+     * `vault unlock` / `vault lock` (spec 052): the personal-maps key, kept on
+     * this machine so personal maps open without a passphrase - for the MCP
+     * server above all. `vault`, not `team`: it is the account's own key.
+     */
+    vaultAction: 'unlock' | 'lock' | null;
+    /** `vault unlock --days N`, `team unlock --days N`: how long the unlock
+     *  lasts. Null: the default, 7 days. */
+    days: number | null;
+    /** `projects` (or `projects list`) and `projects use <name|id>`. */
+    projectsAction: 'list' | 'use' | null;
     /** `rules pull`. */
     rulesAction: 'pull' | null;
     /**

package/dist/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,OAAO,GACf,OAAO,GACP,SAAS,GACT,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,CAAA;AAEb,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,YAAY,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAA;IACjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,qDAAqD;IACrD,KAAK,EAAE,OAAO,CAAA;IACd,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAA;IACf,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;IACd;;;;;;;OAOG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;;;;OAOG;IACH,IAAI,EAAE,OAAO,CAAA;IACb;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAElD;;;;;;OAMG;IACH,UAAU,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;IACpC,oBAAoB;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAE1B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAiBxC;;;;;GAKG;AACH,eAAO,MAAM,cAAc,cAOzB,CAAA;AAWF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAkK7D"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,OAAO,GACf,OAAO,GACP,SAAS,GACT,MAAM,GACN,KAAK,GACL,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,MAAM,GACN,OAAO,GACP,UAAU,GACV,OAAO,GACP,MAAM,GACN,SAAS,CAAA;AAEb,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,QAAQ,EAAE,cAAc,CAAA;IACxB,OAAO,EAAE,YAAY,CAAA;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAA;IACjB,uCAAuC;IACvC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,sCAAsC;IACtC,IAAI,EAAE,OAAO,CAAA;IACb,qDAAqD;IACrD,KAAK,EAAE,OAAO,CAAA;IACd,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,6DAA6D;IAC7D,MAAM,EAAE,OAAO,CAAA;IACf,wCAAwC;IACxC,QAAQ,EAAE,OAAO,CAAA;IACjB,iEAAiE;IACjE,KAAK,EAAE,OAAO,CAAA;IACd;;;;;;;OAOG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;;;;OAOG;IACH,IAAI,EAAE,OAAO,CAAA;IACb;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAA;IAC7D;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAA;IAElB;;;;;;OAMG;IACH,UAAU,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;IACpC;;;;OAIG;IACH,WAAW,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAA;IACrC;4CACwC;IACxC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,oEAAoE;IACpE,cAAc,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAAA;IACrC,oBAAoB;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAE1B;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAmBxC;;;;;GAKG;AACH,eAAO,MAAM,cAAc,cASzB,CAAA;AAWF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAiN7D"}

package/dist/args.js

@@ -14,6 +14,8 @@ const COMMANDS = new Set([
     'whoami',
     'maps',
     'team',
+    'vault',
+    'projects',
     'rules',
     'help',
     'version',
@@ -30,6 +32,8 @@ export const CLOUD_COMMANDS = new Set([
     'whoami',
     'maps',
     'team',
+    'vault',
+    'projects',
     'rules',
 ]);
 const SECRET_POLICIES = new Set(['redact', 'warn', 'off']);
@@ -58,7 +62,11 @@ export function parseArgs(argv) {
         device: false,
         instance: null,
         mapsAction: null,
+        allowDrop: false,
         teamAction: null,
+        vaultAction: null,
+        projectsAction: null,
+        days: null,
         rulesAction: null,
     };
     if (argv.length === 0)
@@ -76,8 +84,12 @@ export function parseArgs(argv) {
         if (parsed.command === 'maps') {
             const verb = argv[1];
             if (verb !== undefined && !verb.startsWith('-')) {
-                if (verb !== 'list' && verb !== 'pull' && verb !== 'push' && verb !== 'rm') {
-                    throw new UsageError(`unknown maps action "${verb}" — expected list, pull, push or rm`);
+                if (verb !== 'list' &&
+                    verb !== 'pull' &&
+                    verb !== 'push' &&
+                    verb !== 'update' &&
+                    verb !== 'rm') {
+                    throw new UsageError(`unknown maps action "${verb}" — expected list, pull, push, update or rm`);
                 }
                 parsed.mapsAction = verb;
                 i = 2;
@@ -93,6 +105,26 @@ export function parseArgs(argv) {
                 i = 2;
             }
         }
+        if (parsed.command === 'vault') {
+            const verb = argv[1];
+            if (verb !== undefined && !verb.startsWith('-')) {
+                if (verb !== 'unlock' && verb !== 'lock') {
+                    throw new UsageError(`unknown vault action "${verb}" — expected unlock or lock`);
+                }
+                parsed.vaultAction = verb;
+                i = 2;
+            }
+        }
+        if (parsed.command === 'projects') {
+            const verb = argv[1];
+            if (verb !== undefined && !verb.startsWith('-')) {
+                if (verb !== 'list' && verb !== 'use') {
+                    throw new UsageError(`unknown projects action "${verb}" — expected list or use`);
+                }
+                parsed.projectsAction = verb;
+                i = 2;
+            }
+        }
         if (parsed.command === 'rules') {
             const verb = argv[1];
             if (verb !== undefined && !verb.startsWith('-')) {
@@ -157,16 +189,29 @@ export function parseArgs(argv) {
             case '--keep-docs':
                 parsed.keepDocs = true;
                 break;
-            case '-f':
             case '--team':
                 parsed.team = true;
                 break;
             case '--device':
                 parsed.device = true;
                 break;
+            case '-f':
             case '--force':
                 parsed.force = true;
                 break;
+            case '--days': {
+                const value = requireValue(arg, argv[++i]);
+                // Whole days, and not for ever: what is kept is key material, and a
+                // forgotten unlock should run out on its own.
+                if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > 30) {
+                    throw new UsageError(`--days must be a whole number from 1 to 30 (got "${value}")`);
+                }
+                parsed.days = Number(value);
+                break;
+            }
+            case '--allow-drop':
+                parsed.allowDrop = true;
+                break;
             case '--instance': {
                 const value = requireValue(arg, argv[++i]);
                 // Parsed here rather than at use, so a typo is a usage error before any

package/dist/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAsC,MAAM,oBAAoB,CAAA;AAwFlF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU;IAChC,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAU;IAC7C,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;CACR,CAAC,CAAA;AACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAE/D,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;KAClB,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAgB,CAAA;QACjC,CAAC,GAAG,CAAC,CAAA;QAEL,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC3E,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,qCAAqC,CAAC,CAAA;gBACzF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzC,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,6BAA6B,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,MAAM,IAAI,UAAU,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAAA;gBACxE,CAAC;gBACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;gBACzB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;gBACvB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;gBAC1B,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAClB,qBAAqB,KAAK,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAA0B,CAAA;gBAC5C,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAqB,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAAC,gDAAgD,KAAK,IAAI,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAqB,CAAA;gBACtC,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,aAAa;gBAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,wEAAwE;gBACxE,2DAA2D;gBAC3D,IAAI,GAAQ,CAAA;gBACZ,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,UAAU,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,IAAI,UAAU,CAClB,kCAAkC,KAAK,2CAA2C;wBAChF,wFAAwF,CAC3F,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACvB,MAAK;YACP,CAAC;YACD;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAsC,MAAM,oBAAoB,CAAA;AA4GlF,MAAM,OAAO,UAAW,SAAQ,KAAK;CAAG;AAExC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAU;IAChC,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,MAAM;IACN,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAU;IAC7C,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;CACR,CAAC,CAAA;AACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AAE/D,SAAS,YAAY,CAAC,IAAY,EAAE,KAAyB;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,IAAI;QACpB,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,IAAI;KAClB,CAAA;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAEpC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAgB,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,GAAG,CAAC,CAAA;QACpD,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAgB,CAAA;QACjC,CAAC,GAAG,CAAC,CAAA;QAEL,4EAA4E;QAC5E,uEAAuE;QACvE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IACE,IAAI,KAAK,MAAM;oBACf,IAAI,KAAK,MAAM;oBACf,IAAI,KAAK,MAAM;oBACf,IAAI,KAAK,QAAQ;oBACjB,IAAI,KAAK,IAAI,EACb,CAAC;oBACD,MAAM,IAAI,UAAU,CAClB,wBAAwB,IAAI,6CAA6C,CAC1E,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzC,MAAM,IAAI,UAAU,CAAC,wBAAwB,IAAI,6BAA6B,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,UAAU,GAAG,IAAI,CAAA;gBACxB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzC,MAAM,IAAI,UAAU,CAAC,yBAAyB,IAAI,6BAA6B,CAAC,CAAA;gBAClF,CAAC;gBACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;gBACzB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;oBACtC,MAAM,IAAI,UAAU,CAAC,4BAA4B,IAAI,0BAA0B,CAAC,CAAA;gBAClF,CAAC;gBACD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAA;gBAC5B,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;oBACpB,MAAM,IAAI,UAAU,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAAA;gBACxE,CAAC;gBACD,MAAM,CAAC,WAAW,GAAG,IAAI,CAAA;gBACzB,CAAC,GAAG,CAAC,CAAA;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,MAAM,CAAC,OAAO,GAAG,MAAM,CAAA;gBACvB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,WAAW;gBACd,MAAM,CAAC,OAAO,GAAG,SAAS,CAAA;gBAC1B,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,UAAU,CAClB,qBAAqB,KAAK,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAA0B,CAAA;gBAC5C,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAqB,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,UAAU,CAAC,gDAAgD,KAAK,IAAI,CAAC,CAAA;gBACjF,CAAC;gBACD,MAAM,CAAC,OAAO,GAAG,KAAqB,CAAA;gBACtC,MAAK;YACP,CAAC;YACD,KAAK,IAAI,CAAC;YACV,KAAK,OAAO;gBACV,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC7C,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,aAAa;gBAChB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,MAAK;YACP,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAA;gBAClB,MAAK;YACP,KAAK,UAAU;gBACb,MAAM,CAAC,MAAM,GAAG,IAAI,CAAA;gBACpB,MAAK;YACP,KAAK,IAAI,CAAC;YACV,KAAK,SAAS;gBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAA;gBACnB,MAAK;YACP,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,oEAAoE;gBACpE,8CAA8C;gBAC9C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;oBACpE,MAAM,IAAI,UAAU,CAAC,oDAAoD,KAAK,IAAI,CAAC,CAAA;gBACrF,CAAC;gBACD,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC3B,MAAK;YACP,CAAC;YACD,KAAK,cAAc;gBACjB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAA;gBACvB,MAAK;YACP,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC1C,wEAAwE;gBACxE,2DAA2D;gBAC3D,IAAI,GAAQ,CAAA;gBACZ,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,UAAU,CAAC,kCAAkC,KAAK,IAAI,CAAC,CAAA;gBACnE,CAAC;gBACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,IAAI,UAAU,CAClB,kCAAkC,KAAK,2CAA2C;wBAChF,wFAAwF,CAC3F,CAAA;gBACH,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAA;gBACvB,MAAK;YACP,CAAC;YACD;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAAC,iBAAiB,GAAG,GAAG,CAAC,CAAA;gBAC/C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/client/index.d.ts

@@ -0,0 +1,9 @@
+export { setClientIdentity, clientIdentity, type ClientIdentity } from '../cloud.js';
+export * from './wording.js';
+export * from './maps.js';
+export * from './keys.js';
+export * from './projects.js';
+export * from './status.js';
+export * from './project-scope.js';
+export { personalMapsKeyExpiry, personalMapsKeyPath, readPersonalMapsKey, removePersonalMapsKey, } from './personal-maps-key.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AACpF,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wBAAwB,CAAA"}

package/dist/client/index.js

@@ -0,0 +1,13 @@
+// `@veilio-inc/cli/client`: the Cloud operations the CLI's commands and the MCP
+// server's map tools share (spec 052 §3). One implementation of every rule and
+// one table of words for every refusal, so the two clients cannot drift apart.
+// Nothing here prints; every operation answers an `Outcome`.
+export { setClientIdentity, clientIdentity } from '../cloud.js';
+export * from './wording.js';
+export * from './maps.js';
+export * from './keys.js';
+export * from './projects.js';
+export * from './status.js';
+export * from './project-scope.js';
+export { personalMapsKeyExpiry, personalMapsKeyPath, readPersonalMapsKey, removePersonalMapsKey, } from './personal-maps-key.js';
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,6DAA6D;AAE7D,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AACpF,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,wBAAwB,CAAA"}

package/dist/client/keys.d.ts

@@ -0,0 +1,22 @@
+import { type Outcome } from './wording.js';
+import type { ClientContext } from './maps.js';
+export interface VaultUnlocked {
+    path: string;
+    expiresAt: string;
+    /** This unlock made the account's personal-maps key (the first one). */
+    created: boolean;
+    /** Older personal maps re-sealed under it now. */
+    resealed: number;
+    /** Ones that could not be, by id and name, with the reason. */
+    failed: {
+        id: string;
+        name: string;
+        reason: string;
+    }[];
+}
+export declare function vaultUnlock(ctx: ClientContext, opts?: {
+    days?: number;
+}): Promise<Outcome<VaultUnlocked>>;
+/** Remove the personal-maps key from this machine. Whether there was one. */
+export declare function vaultLock(ctx: ClientContext): boolean;
+//# sourceMappingURL=keys.d.ts.map

package/dist/client/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/client/keys.ts"],"names":[],"mappings":"AA2CA,OAAO,EAAiC,KAAK,OAAO,EAAE,MAAM,cAAc,CAAA;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAE9C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAA;IAChB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;IAChB,+DAA+D;IAC/D,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACvD;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3B,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAsEjC;AAyED,6EAA6E;AAC7E,wBAAgB,SAAS,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAErD"}

package/dist/client/keys.js

@@ -0,0 +1,170 @@
+// `veilio vault unlock` and `vault lock`: the personal-maps key on this machine
+// (spec 052 FR-011, research §1 and §8).
+//
+// Unlock asks for the passphrase ONCE, derives the vault key in memory, and
+// uses it for exactly two things before it is dropped:
+//
+//   1. to unwrap the account's personal-maps key - or, the first time, to wrap
+//      a new one for the server to keep;
+//   2. to re-seal the account's older personal maps, still under the vault
+//      key, under the personal-maps key - the only moment a terminal holds both.
+//
+// Then only the personal-maps key is written, 0600, with an expiry. The vault
+// key is non-extractable and is never written anywhere; the passphrase is not
+// either. A passphrase-less process - the MCP server - can then open personal
+// maps, and nothing else the vault protects.
+import { decryptMapFromVault, encryptMapForVault, parseVaultEnvelope, toBase64, } from '@veilio-inc/engine';
+import { CloudError, getMap, getPersonalMapsKeyWrap, listMaps, putPersonalMapsKeyWrap, updateMapContent, } from '../cloud.js';
+import { readCredential } from '../credential.js';
+import { expiryFrom } from '../team-unlock.js';
+import { importPersonalMapsKey, newPersonalMapsKey, personalMapsKeyPath, removePersonalMapsKey, unwrapPersonalMapsKey, wrapPersonalMapsKey, writePersonalMapsKey, } from './personal-maps-key.js';
+import { vaultKeyFor } from './vault-key.js';
+import { refuse, refusalFromCloudError } from './wording.js';
+export async function vaultUnlock(ctx, opts = {}) {
+    const credential = readCredential(ctx.home);
+    if (!credential)
+        return refuse('not_signed_in');
+    if (!ctx.passphrase)
+        return refuse('no_passphrase');
+    const fail = (err) => ({
+        ok: false,
+        refusal: refusalFromCloudError(err, { project: credential.project }),
+    });
+    const derived = await vaultKeyFor(credential, ctx.passphrase);
+    if (!derived.ok)
+        return derived;
+    const vaultKey = derived.value;
+    let raw;
+    let created = false;
+    try {
+        const held = (await getPersonalMapsKeyWrap(credential)).wrapped;
+        if (typeof held === 'string' && held !== '') {
+            const opened = await unwrapped(vaultKey, held);
+            if (!opened)
+                return refuse('pmk_unopenable');
+            raw = opened;
+        }
+        else {
+            const fresh = newPersonalMapsKey();
+            try {
+                await putPersonalMapsKeyWrap(credential, await wrapPersonalMapsKey(vaultKey, fresh));
+                raw = fresh;
+                created = true;
+            }
+            catch (err) {
+                // Another client - a browser tab, a second terminal - stored one
+                // between our read and our write. Its key wins: maps may already be
+                // sealed under it, and replacing it is exactly what the server's 409
+                // exists to stop. Ours was never used for anything.
+                if (!(err instanceof CloudError && err.status === 409))
+                    return fail(err);
+                // Two 409s, told apart by code. One is an account with no keypair
+                // yet: there is no race to recover from, only a step in the web app.
+                if (err.body?.code === 'keys_not_set_up')
+                    return refuse('keys_not_set_up');
+                const theirs = (await getPersonalMapsKeyWrap(credential)).wrapped;
+                const opened = typeof theirs === 'string' ? await unwrapped(vaultKey, theirs) : null;
+                if (!opened)
+                    return refuse('pmk_unopenable');
+                raw = opened;
+            }
+        }
+    }
+    catch (err) {
+        return fail(err);
+    }
+    const expiresAt = expiryFrom(new Date(), opts.days);
+    writePersonalMapsKey({
+        v: 1,
+        instance: credential.instance,
+        account: credential.account,
+        expiresAt,
+        key: toBase64(raw),
+    }, ctx.home);
+    const pmk = await importPersonalMapsKey(raw);
+    const resealing = await reseal(credential, vaultKey, pmk);
+    return {
+        ok: true,
+        value: {
+            path: personalMapsKeyPath(ctx.home),
+            expiresAt,
+            created,
+            resealed: resealing.resealed,
+            failed: resealing.failed,
+        },
+    };
+}
+async function unwrapped(vaultKey, wrapped) {
+    try {
+        return await unwrapPersonalMapsKey(vaultKey, wrapped);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Re-seal every personal map still under the vault key, while it is in hand.
+ *
+ * One at a time, each with the version it read, so a map changed meanwhile is
+ * reported rather than overwritten. A failure stops nothing else: each map
+ * that did not move is named, and running unlock again picks it up.
+ */
+async function reseal(credential, vaultKey, pmk) {
+    const failed = [];
+    let resealed = 0;
+    let personal;
+    try {
+        personal = (await listMaps(credential)).personalMaps.filter((m) => m.scope === 'personal');
+    }
+    catch (err) {
+        return {
+            resealed,
+            failed: [
+                {
+                    id: '-',
+                    name: 'the list of maps',
+                    reason: err instanceof Error ? err.message : String(err),
+                },
+            ],
+        };
+    }
+    for (const summary of personal) {
+        try {
+            const full = await getMap(credential, summary.id);
+            if (typeof full.map_data !== 'string')
+                throw new Error('not an encrypted envelope');
+            const envelope = parseVaultEnvelope(full.map_data);
+            try {
+                await decryptMapFromVault(pmk, envelope);
+                continue; // already under the personal-maps key
+            }
+            catch {
+                // under the vault key, or damaged: the next step says which
+            }
+            const map = await decryptMapFromVault(vaultKey, envelope);
+            await updateMapContent(credential, summary.id, {
+                map_data: JSON.stringify(await encryptMapForVault(pmk, map)),
+                identifier_count: Object.keys(map).length,
+                if_updated_at: full.updated_at,
+            });
+            resealed++;
+        }
+        catch (err) {
+            failed.push({
+                id: summary.id,
+                name: summary.name,
+                reason: err instanceof CloudError && err.status === 409
+                    ? 'it changed in Cloud while this ran'
+                    : err instanceof Error
+                        ? err.message
+                        : String(err),
+            });
+        }
+    }
+    return { resealed, failed };
+}
+/** Remove the personal-maps key from this machine. Whether there was one. */
+export function vaultLock(ctx) {
+    return removePersonalMapsKey(ctx.home);
+}
+//# sourceMappingURL=keys.js.map

package/dist/client/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/client/keys.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,yCAAyC;AACzC,EAAE;AACF,4EAA4E;AAC5E,uDAAuD;AACvD,EAAE;AACF,+EAA+E;AAC/E,yCAAyC;AACzC,2EAA2E;AAC3E,iFAAiF;AACjF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6CAA6C;AAE7C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,GAET,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,UAAU,EACV,MAAM,EACN,sBAAsB,EACtB,QAAQ,EACR,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,cAAc,EAAmB,MAAM,kBAAkB,CAAA;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAgB,MAAM,cAAc,CAAA;AAc1E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAkB,EAClB,OAA0B,EAAE;IAE5B,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAA;IAC/C,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,KAAc;QAClB,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC;KACrE,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAA;IAC7D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAA;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAA;IAE9B,IAAI,GAAe,CAAA;IACnB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAA;QAC/D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAC9C,IAAI,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAA;YAC5C,GAAG,GAAG,MAAM,CAAA;QACd,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;YAClC,IAAI,CAAC;gBACH,MAAM,sBAAsB,CAAC,UAAU,EAAE,MAAM,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;gBACpF,GAAG,GAAG,KAAK,CAAA;gBACX,OAAO,GAAG,IAAI,CAAA;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,oEAAoE;gBACpE,qEAAqE;gBACrE,oDAAoD;gBACpD,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;gBACxE,kEAAkE;gBAClE,qEAAqE;gBACrE,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,iBAAiB;oBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAA;gBAC1E,MAAM,MAAM,GAAG,CAAC,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAA;gBACjE,MAAM,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBACpF,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAA;gBAC5C,GAAG,GAAG,MAAM,CAAA;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,oBAAoB,CAClB;QACE,CAAC,EAAE,CAAC;QACJ,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,SAAS;QACT,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC;KACnB,EACD,GAAG,CAAC,IAAI,CACT,CAAA;IAED,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;IACzD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,IAAI,EAAE,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YACnC,SAAS;YACT,OAAO;YACP,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;SACzB;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAuB,EAAE,OAAe;IAC/D,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,MAAM,CACnB,UAAsB,EACtB,QAAuB,EACvB,GAAkB;IAElB,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAA;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ;YACR,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,GAAG;oBACP,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACzD;aACF;SACF,CAAA;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;YACjD,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;YACnF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAClD,IAAI,CAAC;gBACH,MAAM,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;gBACxC,SAAQ,CAAC,sCAAsC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YACzD,MAAM,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE;gBAC7C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5D,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;gBACzC,aAAa,EAAE,IAAI,CAAC,UAAU;aAC/B,CAAC,CAAA;YACF,QAAQ,EAAE,CAAA;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EACJ,GAAG,YAAY,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAC7C,CAAC,CAAC,oCAAoC;oBACtC,CAAC,CAAC,GAAG,YAAY,KAAK;wBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;wBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACpB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,GAAkB;IAC1C,OAAO,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACxC,CAAC"}