Vellaci CLI

A single-file Node CLI (scripts/cli/vellaci.mjs, also runnable as pnpm vellaci) that wraps the public API with a scoped token.

vellaci auth --url https://www.vellaci.ch            # stores the token in ~/.config/vellaci/config.json (0600)
vellaci products list
vellaci sbom upload ./sbom.cdx.json --product edgegate-router --version 3.2.1 --wait
vellaci vulnerabilities list --status open --severity critical
vellaci incidents create --title "Update server anomaly" --severity high
vellaci status                                             # token, organisation, API health

Exit codes: 0 success, 1 API error, 2 usage error, 3 gate failure (--fail-on critical with sbom upload --wait). The CLI is deliberately small; use the API for anything else.