@rosthq/cli 0.5.20 → 0.5.21

package/dist/index.js

@@ -42384,7 +42384,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-06-21.10",
+    version: "2026-06-21.11",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -42820,7 +42820,7 @@ The signed-in app exposes the same Skill command surface under **Skills** in the
 | \`{{cli}} runner list|status|work-orders|revoke\` | \`runner.list\`, \`runner.status\`, \`work_order.list\`, \`runner.revoke\` | Inspect runners and work orders; revoke a runner. | Tenant | \`{{cli}} runner list --json\` |
 | \`{{cli}} notification settings|test|errors\` | \`notification.settings.get\`, \`notification.test\`, \`notification.list_errors\` | Read notification settings, send a test, and list failed deliveries with linked product error source, seat id, and run id when available. | Tenant | \`{{cli}} notification errors --limit 10 --json\` |
 | \`{{cli}} integration list|readiness|status|test\` | \`integration.list\`, \`integration.readiness\`, \`integration.status\`, \`integration.test\` | List connector metadata, read the setup-readiness checklist, read one connector's health, and run the provider-specific connection test without exposing credentials. | Tenant | \`{{cli}} integration readiness --provider google --json\` |
-| \`{{cli}} settings get|update\` | \`settings.get\`, \`settings.update\` | Read tenant settings; update budget caps. | Tenant | \`{{cli}} settings get --json\` |
+| \`{{cli}} settings get|update|product-learning\` | \`settings.get\`, \`settings.update\`, \`settings.product_learning.get\`, \`settings.product_learning.update\` | Read tenant settings, update budget caps, and read or update product-learning participation. Product-learning updates stop at human confirmation in non-interactive CLI/MCP sessions. | Tenant / Tenant-admin for updates | \`{{cli}} settings product-learning get --json\`; \`{{cli}} settings product-learning update --mode disabled --json\` |
 | \`{{cli}} member invite|update|remove\` | \`member.invite\`, \`member.update\`, \`member.remove\` | Manage tenant members. | Tenant | \`{{cli}} member invite --email ops@example.com --role member\` |
 | \`{{cli}} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show\` | \`agent_template.list\`, \`agent.create_from_template\`, \`agent.create_custom\`, \`agent_setup.get\`, \`agent_setup.update\`, \`agent.configure_tools\`, \`agent.run_dry_run\`, \`agent.go_live\`, \`agent.status\`, \`agent.run_now\`, \`agent.fleet_digest\`, \`agent.get_run\`, \`agent.show_markdown\` | Run the full agent setup and operation flow: list templates, create a draft from a template or guided custom answers (with \`--model\` and \`--effort\`), read or answer setup state, connect or decline tools, dry-run, go live, run on demand, capture the fleet-health digest, read one run's transcript/error diagnostics, and show a markdown readout. Human CLI dry-runs print the rehearsal transcript and, when present, the per-tool preview labels (\`Would run\`, \`Blocked\`, \`Escalated\`) before go-live. Create and go-live stop at human gates; the dry-run is ungated by human approval but requires a signed manifest first. | Tenant and seat | \`{{cli}} agent fleet-digest --json\` |
 | \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, credential requirement, access policy, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
@@ -42984,6 +42984,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_update_tenant_settings\` | \`settings.update\` | Update tenant AI budget caps. | Tenant | Call with \`soft_cap_usd\` or \`hard_cap_usd\`; expect human confirmation. |
 | \`rost_get_sync_brief_scope\` | \`settings.sync_brief_scope.get\` | Read the tenant's Sync Brief scope (company_wide or per_cluster). | Tenant | Call with \`{}\`. |
 | \`rost_update_sync_brief_scope\` | \`settings.sync_brief_scope.update\` | Set the tenant's Sync Brief scope (company_wide or per_cluster). | Tenant-admin | Owner-only; call with \`{"sync_brief_scope":"company_wide"}\` or \`{"sync_brief_scope":"per_cluster"}\`. |
+| \`rost_get_product_learning_policy\` | \`settings.product_learning.get\` | Read whether product/page/recommendation analytics are allowed. | Tenant | Call with \`{}\`; audit/security logs are always enabled. |
+| \`rost_update_product_learning_policy\` | \`settings.product_learning.update\` | Set product-learning mode. | Tenant-admin | Human-gated; call with \`{"mode":"enabled"}\`, \`{"mode":"disabled"}\`, or \`{"mode":"enterprise_contract"}\`. |
 | \`rost_list_signals\` | \`signal.list\` | List measurables with their latest reading and on/off-track state. | Seat or tenant-admin | Call with \`{}\` to find measurable ids. |
 | \`rost_get_signal\` | \`signal.get\` | Read a measurable with its full reading history. | Seat or tenant-admin | Call with \`{"measurable_id":"<id>"}\`. |
 | \`rost_confirm_signal_reading\` | \`signal.confirm_reading\` | Confirm an unconfirmed reading as human-verified. | Seat or tenant-admin | Humans confirm; call with \`{"reading_id":"<id>"}\`. |
@@ -43829,11 +43831,11 @@ Stop before: approving a Charter, signing a manifest, connecting a tool or crede
     order: 72,
     title: "Settings guide",
     summary: "How to use Settings as the control plane for company access, channels, providers, tokens, and operating defaults.",
-    version: "2026-06-21.1",
+    version: "2026-06-21.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
-    relatedCommandIds: ["onboarding.create_invite", "mcp_token.create", "mcp_token.revoke", "mcp_token.list", "integration.list", "integration.readiness", "integration.status", "integration.test", "settings.get", "settings.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update"],
+    relatedCommandIds: ["onboarding.create_invite", "mcp_token.create", "mcp_token.revoke", "mcp_token.list", "integration.list", "integration.readiness", "integration.status", "integration.test", "settings.get", "settings.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.product_learning.get", "settings.product_learning.update"],
     legal: { publicRisk: "low", notes: ["{{brand}}-native settings guidance."] },
     sources: [
       {
@@ -43860,6 +43862,7 @@ Start with members and invites, then provider and channel connections, then MCP
 - Connected machines (the paired Runners that run scheduled local work orders).
 - Stored credentials (vault references only) and tool access approvals.
 - Operating defaults, including Sync Brief scope.
+- Product-learning participation for bounded product analytics.
 
 Settings lifecycle timestamps are display metadata for tokens, connected machines, integrations, and stored credentials. They may be emitted by the database as either timestamp values or strings, but Settings renders them as safe labels rather than treating timestamp formatting failures as page-level failures.
 
@@ -43875,6 +43878,16 @@ Reconnects keep historical rows for audit, but provider status in Settings, CLI,
 
 The weekly Sync Brief compiles either company-wide or per cluster. Company-wide is one brief covering the whole company and is the default for a new company. Per cluster compiles one brief per cluster, scoped to each cluster's seats; pick it when clusters run their own weekly sync. Per cluster falls back to a single company-wide brief when the company has no clusters, so the rhythm never produces zero briefs. The owner sets this at onboarding and can change it later in Settings.
 
+## Product learning
+
+Product-learning participation controls whether {{brand}} may record product/page/recommendation analytics for this tenant. It does not disable security logs, audit logs, error logs, events, tool-call guard records, or other operational records required to run and secure the service.
+
+- \`enabled\` allows bounded product analytics for feature quality, defaults, templates, recommendations, safety checks, and reliability.
+- \`disabled\` blocks generic product/page/recommendation analytics for the tenant.
+- \`enterprise_contract\` blocks generic product-learning writes until contract-specific handling exists.
+
+Read the policy with \`settings.product_learning.get\` (CLI: \`{{cli}} settings product-learning get\`). Change it with \`settings.product_learning.update\` (CLI: \`{{cli}} settings product-learning update --mode disabled\`). Analytics ingestion code should call the shared product-learning policy helper instead of reading \`tenants.settings\` directly.
+
 ## Inference budget
 
 Agents that run on {{brand}}-managed inference draw against a tenant inference budget with a hard cap. A new company starts with a hard cap of $0, so a managed-inference run is blocked until the cap is raised. When a run hits the cap it stops with a typed budget error that names the fix; raise the cap before agents can run again.
@@ -46488,12 +46501,33 @@ function integrationUsage(bin) {
   ${bin} integration test --provider <name>`;
 }
 var settingsWrapper = (context, args) => dispatch(context, "settings", args, {
+  "product-learning": (ctx, rest) => dispatch(ctx, "settings product-learning", rest, {
+    get: (innerCtx, innerRest) => {
+      const parsed = parseFlags(innerRest);
+      return execute(innerCtx, parsed, "settings.product_learning.get", {}, (output) => {
+        const policy = asRecord(asRecord(output).product_learning);
+        return `product_learning ${field(policy, "mode")}  product_analytics_enabled=${field(policy, "product_analytics_enabled")}  security_audit_logs_enabled=${field(policy, "security_audit_logs_enabled")}`;
+      });
+    },
+    update: (innerCtx, innerRest) => {
+      const parsed = parseFlags(innerRest);
+      const mode = optionalValue(parsed, "mode");
+      if (mode !== "enabled" && mode !== "disabled" && mode !== "enterprise_contract") {
+        throw new UsageError("Provide --mode enabled|disabled|enterprise_contract.");
+      }
+      return execute(innerCtx, parsed, "settings.product_learning.update", { mode }, (output) => {
+        const policy = asRecord(asRecord(output).product_learning);
+        return `Updated product-learning policy to ${field(policy, "mode")} (product_analytics_enabled=${field(policy, "product_analytics_enabled")}).`;
+      });
+    }
+  }, settingsUsage(ctx.binName)),
   get: (ctx, rest) => {
     const parsed = parseFlags(rest);
     return execute(ctx, parsed, "settings.get", {}, (output) => {
       const record2 = asRecord(output);
       const spend = asRecord(record2.spend);
-      return `tenant ${field(record2, "tenant_id")}  plan=${field(record2, "plan")}  status=${field(record2, "status")}  spend=$${field(spend, "spend_usd")}  has_anthropic_key=${field(record2, "has_anthropic_key")}`;
+      const policy = asRecord(record2.product_learning);
+      return `tenant ${field(record2, "tenant_id")}  plan=${field(record2, "plan")}  status=${field(record2, "status")}  spend=$${field(spend, "spend_usd")}  has_anthropic_key=${field(record2, "has_anthropic_key")}  product_learning=${field(policy, "mode")}`;
     });
   },
   update: (ctx, rest) => {
@@ -46512,9 +46546,11 @@ var settingsWrapper = (context, args) => dispatch(context, "settings", args, {
   }
 }, settingsUsage(context.binName));
 function settingsUsage(bin) {
-  return `Usage: ${bin} settings get|update [--json]
+  return `Usage: ${bin} settings get|update|product-learning [--json]
   ${bin} settings get
-  ${bin} settings update [--soft-cap-usd <n>] [--hard-cap-usd <n>]`;
+  ${bin} settings update [--soft-cap-usd <n>] [--hard-cap-usd <n>]
+  ${bin} settings product-learning get
+  ${bin} settings product-learning update --mode enabled|disabled|enterprise_contract`;
 }
 var memberWrapper = (context, args) => dispatch(context, "member", args, {
   invite: (ctx, rest) => {
@@ -47164,7 +47200,7 @@ function operationUsageLines(bin) {
     `${bin} sync brief|compile|complete`,
     `${bin} runner list|status|work-orders|revoke`,
     `${bin} notification settings|test|errors`,
-    `${bin} settings get|update`,
+    `${bin} settings get|update|product-learning`,
     `${bin} member invite|update|remove`,
     `${bin} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show`,
     `${bin} tools list`,