tileflow 0.1.0-alpha.1 → 0.1.0-alpha.2

package/README.md

@@ -490,6 +490,11 @@ npx tileflow status --map-id map_AbCdEfGhIjKlMnOp
 npx tileflow logout
 ```
 
+Changing or resetting the hosted account password revokes saved personal CLI sessions. The next
+account or hosted command stops with a clear message and asks you to run `tileflow login` again.
+Project API and CI keys are independent project credentials and are not removed by a personal
+password change.
+
 The dashboard creates the Map and browser-access policy before repository setup. Keep that exact
 Map ID in the deploy action. If the config contains several maps, select the authored map explicitly:
 

package/dist/index.js

@@ -64,6 +64,7 @@ import { chmod, mkdir, open, readFile, rename, unlink } from "fs/promises";
 import { homedir } from "os";
 import { dirname, resolve } from "path";
 import { z } from "zod";
+var rejectedAccountSessionMessage = "The saved Tileflow account session is no longer valid. Run tileflow login to authorize this machine again.";
 var maximumAuthFileBytes = 1024 * 1024;
 var maximumOrigins = 16;
 var accountSchema = z.object({
@@ -2018,7 +2019,10 @@ async function validateAccountSession(session, options = {}) {
     options
   );
   if (!response.ok) {
-    return { error: `Account session validation failed (${response.status}).`, ok: false };
+    return {
+      error: response.status === 401 ? rejectedAccountSessionMessage : `Account session validation failed (${response.status}).`,
+      ok: false
+    };
   }
   const body = asRecord(response.body);
   const account = asRecord(body.account);
@@ -2110,7 +2114,10 @@ async function requestProjectCapability(session, project, scopes, options = {})
     };
   }
   if (!response.ok) {
-    return { error: `Project capability request failed (${response.status}).`, ok: false };
+    return {
+      error: response.status === 401 ? rejectedAccountSessionMessage : `Project capability request failed (${response.status}).`,
+      ok: false
+    };
   }
   const body = asRecord(response.body);
   if (!response.json || typeof body.capability !== "string" || !body.capability.startsWith("tf_cap_") || body.capability.length > 8192 || body.reference !== project || !validIsoDate(body.expiresAt) || !Array.isArray(body.scopes) || body.scopes.join("\0") !== [...scopes].sort().join("\0")) {
@@ -3661,7 +3668,7 @@ async function accountRequest(session, path, init) {
   }
   return response.ok ? { body: response.body, ok: true, status: response.status } : {
     body: response.body,
-    error: `Request failed (${response.status}).`,
+    error: response.status === 401 ? rejectedAccountSessionMessage : `Request failed (${response.status}).`,
     ok: false,
     status: response.status
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tileflow",
-  "version": "0.1.0-alpha.1",
+  "version": "0.1.0-alpha.2",
   "license": "Apache-2.0",
   "description": "CLI-only tools for Tileflow config, capture, visual testing, and deploy.",
   "type": "module",