tileflow 0.1.0-alpha.0 → 0.1.0-alpha.2

package/README.md

@@ -68,12 +68,18 @@ explicitly with `--out`:
 npx tileflow build --out public/tileflow
 ```
 
-Named hosted sources with `local` archives are for preview and capture. `tileflow build` rejects
-them instead of copying user data into production output. Publish managed data explicitly with
-`tileset publish`, or provide the production dataset through an application-owned source.
+Named hosted sources with `local` archives are for account-free validation, development, preview,
+and capture. `tileflow build` rejects them instead of copying, publishing, or taking ownership of
+user data. For production, either publish managed data explicitly with `tileset publish` or serve
+it from infrastructure owned by the application. A local declaration never selects either path
+implicitly.
+
 Preview, capture, and the React/Vue/Svelte adapters register Tileflow's local PMTiles protocol
 before MapLibre reads the compiled Style. Its URL is stable by logical tileset ID; physical local
-snapshot generations do not change Style or Capture identity.
+snapshot generations do not change Style identity. Standalone Capture retains one snapshot for the
+render. Application Capture uses the application's server; Tileflow's local handler provides
+immutable, ETag-guarded PMTiles reads, but does not freeze every local dataset for the complete
+screenshot window.
 
 Build is local and credential-free. Hosted compatibility is a separate
 `tileflow validate --target hosted` preflight. Primary map data must remain Tileflow World; named
@@ -484,6 +490,11 @@ npx tileflow status --map-id map_AbCdEfGhIjKlMnOp
 npx tileflow logout
 ```
 
+Changing or resetting the hosted account password revokes saved personal CLI sessions. The next
+account or hosted command stops with a clear message and asks you to run `tileflow login` again.
+Project API and CI keys are independent project credentials and are not removed by a personal
+password change.
+
 The dashboard creates the Map and browser-access policy before repository setup. Keep that exact
 Map ID in the deploy action. If the config contains several maps, select the authored map explicitly:
 

package/dist/index.js

@@ -64,6 +64,7 @@ import { chmod, mkdir, open, readFile, rename, unlink } from "fs/promises";
 import { homedir } from "os";
 import { dirname, resolve } from "path";
 import { z } from "zod";
+var rejectedAccountSessionMessage = "The saved Tileflow account session is no longer valid. Run tileflow login to authorize this machine again.";
 var maximumAuthFileBytes = 1024 * 1024;
 var maximumOrigins = 16;
 var accountSchema = z.object({
@@ -2018,7 +2019,10 @@ async function validateAccountSession(session, options = {}) {
     options
   );
   if (!response.ok) {
-    return { error: `Account session validation failed (${response.status}).`, ok: false };
+    return {
+      error: response.status === 401 ? rejectedAccountSessionMessage : `Account session validation failed (${response.status}).`,
+      ok: false
+    };
   }
   const body = asRecord(response.body);
   const account = asRecord(body.account);
@@ -2110,7 +2114,10 @@ async function requestProjectCapability(session, project, scopes, options = {})
     };
   }
   if (!response.ok) {
-    return { error: `Project capability request failed (${response.status}).`, ok: false };
+    return {
+      error: response.status === 401 ? rejectedAccountSessionMessage : `Project capability request failed (${response.status}).`,
+      ok: false
+    };
   }
   const body = asRecord(response.body);
   if (!response.json || typeof body.capability !== "string" || !body.capability.startsWith("tf_cap_") || body.capability.length > 8192 || body.reference !== project || !validIsoDate(body.expiresAt) || !Array.isArray(body.scopes) || body.scopes.join("\0") !== [...scopes].sort().join("\0")) {
@@ -3661,7 +3668,7 @@ async function accountRequest(session, path, init) {
   }
   return response.ok ? { body: response.body, ok: true, status: response.status } : {
     body: response.body,
-    error: `Request failed (${response.status}).`,
+    error: response.status === 401 ? rejectedAccountSessionMessage : `Request failed (${response.status}).`,
     ok: false,
     status: response.status
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tileflow",
-  "version": "0.1.0-alpha.0",
+  "version": "0.1.0-alpha.2",
   "license": "Apache-2.0",
   "description": "CLI-only tools for Tileflow config, capture, visual testing, and deploy.",
   "type": "module",
@@ -38,9 +38,9 @@
   },
   "dependencies": {
     "@hono/node-server": "2.0.10",
-    "@tileflow/capture": ">=0.1.0-alpha.19 <0.1.0-beta.0",
-    "@tileflow/core": ">=0.1.0-alpha.22 <0.1.0-beta.0",
-    "@tileflow/dev": ">=0.1.0-alpha.20 <0.1.0-beta.0",
+    "@tileflow/capture": ">=0.1.0-alpha.20 <0.1.0-beta.0",
+    "@tileflow/core": ">=0.1.0-alpha.23 <0.1.0-beta.0",
+    "@tileflow/dev": ">=0.1.0-alpha.21 <0.1.0-beta.0",
     "@tileflow/maps": ">=0.1.0-alpha.1 <0.1.0-beta.0",
     "hono": "4.12.34",
     "commander": "^15.0.0",