@velaro/cli 0.1.2 → 0.3.0

package/lib/commands/mcp-key.js

@@ -1,63 +1,100 @@
-import { get, post, del } from '../api.js';
-import { runCommand }      from '../run.js';
-
-export const mcpKeyCommand = {
-  command:  'mcp-key <subcommand>',
-  describe: 'Manage MCP API keys (vel_live_* keys for AI skill access)',
-  builder:  (yargs) =>
-    yargs
-      .command(mcpKeyListCommand)
-      .command(mcpKeyCreateCommand)
-      .command(mcpKeyRevokeCommand)
-      .demandCommand(1, 'Specify a subcommand: list, create, revoke'),
-  handler: () => {},
-};
-
-const mcpKeyListCommand = {
-  command:  'list',
-  describe: 'List MCP API keys for your site',
-  handler:  runCommand(async () => {
-    const keys = await get('/McpApiKeys');
-    if (!keys?.length) { console.log('No MCP keys found.'); return; }
-    console.log(`Found ${keys.length} key(s):\n`);
-    for (const k of keys) {
-      const used = k.lastUsedAt ? new Date(k.lastUsedAt).toLocaleDateString() : 'never';
-      console.log(`  [${k.id}] ${k.label}  prefix=${k.keyPrefix}  ${k.isActive ? 'active' : 'revoked'}  last used=${used}`);
-    }
-  }),
-};
-
-const mcpKeyCreateCommand = {
-  command:  'create',
-  describe: 'Create a new MCP API key',
-  builder:  (y) =>
-    y
-      .option('label', {
-        describe:     'Human-readable label (e.g. "Claude Code")',
-        type:         'string',
-        demandOption: true,
-      })
-      .option('expires', {
-        describe: 'Expiry date in ISO 8601 format (e.g. 2027-01-01)',
-        type:     'string',
-      }),
-
-  handler: runCommand(async (argv) => {
-    const payload = { label: argv.label };
-    if (argv.expires) payload.expiresAt = new Date(argv.expires).toISOString();
-
-    const result = await post('/McpApiKeys', payload);
-    console.log(`MCP key created for: ${result.label}`);
-    console.log(`\n  Key: ${result.rawKey}`);
-    console.log(`\n  ${result.warning ?? 'Copy this key now — it will not be shown again.'}`);
-  }),
-};
-
-const mcpKeyRevokeCommand = {
-  command:  'revoke <id>',
-  describe: 'Revoke an MCP API key by ID',
-  handler:  runCommand(async (argv) => {
-    await del(`/McpApiKeys/${argv.id}`);
-    console.log(`Key ${argv.id} revoked.`);
-  }),
-};
+import { get, post, del } from '../api.js';
+import { runCommand }      from '../run.js';
+
+export const mcpKeyCommand = {
+  command:  'mcp-key <subcommand>',
+  describe: 'Manage MCP API keys (vel_live_* keys for AI skill access)',
+  builder:  (yargs) =>
+    yargs
+      .command(mcpKeyListCommand)
+      .command(mcpKeyCreateCommand)
+      .command(mcpKeyRevokeCommand)
+      .command(mcpKeyRotateCommand)
+      .demandCommand(1, 'Specify a subcommand: list, create, revoke, rotate'),
+  handler: () => {},
+};
+
+const mcpKeyListCommand = {
+  command:  'list',
+  describe: 'List MCP API keys for your site',
+  handler:  runCommand(async () => {
+    const keys = await get('/McpApiKeys');
+    if (!keys?.length) { console.log('No MCP keys found.'); return; }
+    console.log(`Found ${keys.length} key(s):\n`);
+    for (const k of keys) {
+      const used    = k.lastUsedAt ? new Date(k.lastUsedAt).toLocaleDateString() : 'never';
+      const expires = k.expiresAt  ? `  expires ${new Date(k.expiresAt).toLocaleDateString()}` : '';
+      console.log(`  [${k.id}] ${k.label}  prefix=${k.keyPrefix}  ${k.isActive ? 'active' : 'revoked'}  last used=${used}${expires}`);
+    }
+  }),
+};
+
+const mcpKeyCreateCommand = {
+  command:  'create',
+  describe: 'Create a new MCP API key',
+  builder:  (y) =>
+    y
+      .option('label', {
+        describe:     'Human-readable label (e.g. "Claude Code")',
+        type:         'string',
+        demandOption: true,
+      })
+      .option('expires', {
+        describe: 'Expiry date in ISO 8601 format (e.g. 2027-01-01)',
+        type:     'string',
+      }),
+
+  handler: runCommand(async (argv) => {
+    const payload = { label: argv.label };
+    if (argv.expires) payload.expiresAt = new Date(argv.expires).toISOString();
+
+    const result = await post('/McpApiKeys', payload);
+    console.log(`MCP key created: ${result.label}`);
+    console.log(`\n  Key: ${result.rawKey}`);
+    console.log(`\n  ${result.warning ?? 'Copy this key now — it will not be shown again.'}`);
+  }),
+};
+
+const mcpKeyRevokeCommand = {
+  command:  'revoke <id>',
+  describe: 'Revoke an MCP API key by ID',
+  handler:  runCommand(async (argv) => {
+    await del(`/McpApiKeys/${argv.id}`);
+    console.log(`Key ${argv.id} revoked.`);
+  }),
+};
+
+const mcpKeyRotateCommand = {
+  command:  'rotate <id>',
+  describe: 'Revoke an existing key and issue a replacement in one step',
+  builder:  (y) =>
+    y
+      .positional('id', { type: 'number', describe: 'ID of the key to revoke (get it from mcp-key list)' })
+      .option('label', {
+        describe: 'Label for the replacement key (defaults to the old key\'s label)',
+        type:     'string',
+      })
+      .option('expires', {
+        describe: 'Expiry date for the new key in ISO 8601 format (e.g. 2027-01-01)',
+        type:     'string',
+      }),
+
+  handler: runCommand(async (argv) => {
+    const keys = await get('/McpApiKeys');
+    const old  = keys?.find(k => k.id === argv.id);
+    if (!old) throw new Error(`Key ID ${argv.id} not found. Run 'velaro mcp-key list' to see your keys.`);
+
+    const label = argv.label || old.label;
+
+    await del(`/McpApiKeys/${argv.id}`);
+    console.log(`Revoked:  [${argv.id}] ${old.label} (${old.keyPrefix}...)`);
+
+    const payload = { label };
+    if (argv.expires) payload.expiresAt = new Date(argv.expires).toISOString();
+    const result = await post('/McpApiKeys', payload);
+
+    console.log(`Replaced: [${result.id}] ${result.label}`);
+    console.log(`\n  New key: ${result.rawKey}`);
+    console.log(`\n  ${result.warning ?? 'Copy this key now — it will not be shown again.'}`);
+  }),
+};

package/lib/commands/rule.js

@@ -1,28 +1,85 @@
-import { get }       from '../api.js';
-import { runCommand } from '../run.js';
-
-export const ruleCommand = {
-  command:  'rule <subcommand>',
-  describe: 'Manage routing rules',
-  builder:  (yargs) => yargs
-    .command({
-      command:  'list',
-      describe: 'List all routing rules',
-      handler:  runCommand(async () => {
-        const rules = await get('/Rules/List');
-        if (!rules.length) { console.log('No routing rules found.'); return; }
-
-        const sorted = [...rules].sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
-        const idW    = Math.max(...sorted.map(r => String(r.id).length + 2));
-
-        for (const r of sorted) {
-          const id      = `[${r.id}]`.padStart(idW);
-          const pri     = `priority ${r.priority ?? 0}`;
-          const trigger = r.trigger ?? '—';
-          console.log(`${id}  ${pri}  ${trigger}`);
-        }
-        console.log(`\n${sorted.length} rule(s)`);
-      }),
-    })
-    .demandCommand(1, 'Specify a subcommand: list'),
-};
+import { get, post, del } from '../api.js';
+import { requireFeature }  from '../subscription.js';
+import { runCommand }      from '../run.js';
+
+export const ruleCommand = {
+  command:  'rule <subcommand>',
+  describe: 'Manage routing rules',
+  builder:  (yargs) =>
+    yargs
+      .command(ruleListCommand)
+      .command(ruleCreateCommand)
+      .command(ruleDeleteCommand)
+      .demandCommand(1, 'Specify a subcommand: list, create, delete'),
+  handler: () => {},
+};
+
+// ── list ───────────────────────────────────────────────────────────────────────
+
+const ruleListCommand = {
+  command:  'list',
+  describe: 'List all routing rules',
+  handler:  runCommand(async () => {
+    await requireFeature('enableWorkflowRules', 'Routing Rules');
+
+    const rules = await get('/Rules/List');
+    if (!rules?.length) { console.log('No routing rules found.'); return; }
+
+    const sorted = [...rules].sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
+    const idW    = Math.max(...sorted.map(r => String(r.id).length + 2));
+    const priW   = Math.max('pri'.length, ...sorted.map(r => String(r.priority ?? 0).length));
+    const nameW  = Math.max('name'.length, ...sorted.map(r => (r.name ?? r.trigger ?? '—').length));
+
+    console.log(`\n${'id'.padStart(idW)}  ${'pri'.padEnd(priW)}  ${'name'.padEnd(nameW)}  trigger`);
+    console.log(`${'-'.repeat(idW)}  ${'-'.repeat(priW)}  ${'-'.repeat(nameW)}  -------`);
+    for (const r of sorted) {
+      const id   = `[${r.id}]`.padStart(idW);
+      const pri  = String(r.priority ?? 0).padEnd(priW);
+      const name = (r.name ?? r.trigger ?? '—').padEnd(nameW);
+      console.log(`${id}  ${pri}  ${name}  ${r.trigger ?? '—'}`);
+    }
+    console.log(`\n${sorted.length} rule(s)`);
+  }),
+};
+
+// ── create ─────────────────────────────────────────────────────────────────────
+
+const ruleCreateCommand = {
+  command:  'create',
+  describe: 'Create a routing rule',
+  builder:  (y) =>
+    y
+      .option('name',       { type: 'string', demandOption: true, describe: 'Rule name' })
+      .option('trigger',    { type: 'string', demandOption: true, describe: 'Trigger type (e.g. pageUrl, country)' })
+      .option('value',      { type: 'string', demandOption: true, describe: 'Trigger value to match' })
+      .option('team-id',    { type: 'number', demandOption: true, describe: 'Team ID to route to' })
+      .option('priority',   { type: 'number', default: 0,         describe: 'Rule priority (lower = higher priority)' }),
+
+  handler: runCommand(async (argv) => {
+    await requireFeature('enableWorkflowRules', 'Routing Rules');
+
+    const result = await post('/Rules', {
+      name:      argv.name,
+      trigger:   argv.trigger,
+      value:     argv.value,
+      teamId:    argv['team-id'],
+      priority:  argv.priority,
+      isEnabled: true,
+    });
+
+    console.log(`Rule created: [${result.id}] ${result.name}`);
+  }),
+};
+
+// ── delete ─────────────────────────────────────────────────────────────────────
+
+const ruleDeleteCommand = {
+  command:  'delete <id>',
+  describe: 'Delete a routing rule',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Rule ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableWorkflowRules', 'Routing Rules');
+    await del(`/Rules/${argv.id}`);
+    console.log(`Rule ${argv.id} deleted.`);
+  }),
+};

package/lib/commands/team.js

@@ -0,0 +1,144 @@
+import { get, post }  from '../api.js';
+import { runCommand } from '../run.js';
+
+export const teamCommand = {
+  command:  'team <subcommand>',
+  describe: 'View teams and manage widget placements (deployments)',
+  builder:  (yargs) =>
+    yargs
+      .command(teamListCommand)
+      .command(widgetListCommand)
+      .command(widgetRenameCommand)
+      .command(widgetAssignCommand)
+      .demandCommand(1, 'Specify a subcommand: list, widget'),
+  handler: () => {},
+};
+
+// ── team list ──────────────────────────────────────────────────────────────────
+// Shows teams and their widget placements inline — the mental model is:
+//   team = who handles conversations
+//   widget = which pages route to that team
+
+const teamListCommand = {
+  command:  'list',
+  describe: 'List teams and their widget placements',
+  handler:  runCommand(async () => {
+    const [teams, deployments] = await Promise.all([
+      get('/Teams/List'),
+      get('/Deployment'),
+    ]);
+
+    if (!teams?.length) {
+      console.log('No teams found.');
+      return;
+    }
+
+    // Group deployments by team
+    const byTeam = {};
+    for (const d of (deployments ?? [])) {
+      if (!byTeam[d.teamId]) byTeam[d.teamId] = [];
+      byTeam[d.teamId].push(d);
+    }
+
+    for (const t of teams) {
+      const widgets = byTeam[t.id] ?? [];
+      const routing = t.routingAction ? `  routing=${t.routingAction}` : '';
+      console.log(`\n[${t.id}] ${t.name}${routing}`);
+
+      if (widgets.length) {
+        for (const w of widgets) {
+          console.log(`     widget [${w.id}] "${w.displayName ?? 'unnamed'}"  key: ${w.deploymentId}`);
+        }
+      } else {
+        console.log(`     (no widgets assigned — conversations can reach this team via routing rules)`);
+      }
+    }
+
+    console.log(`\n${teams.length} team(s)  ·  ${(deployments ?? []).length} widget(s)`);
+    console.log('\nPaste a widget key into your page\'s embed snippet to route that page to its team.');
+  }),
+};
+
+// ── widget subcommands ─────────────────────────────────────────────────────────
+// "Widget" is the user-facing term. Internally these are deployments.
+// A widget is a snippet you paste on a page. The page routes to the widget's team.
+
+const widgetListCommand = {
+  command:  'widget list',
+  describe: 'List all widgets (embed snippets) and which team each routes to',
+  handler:  runCommand(async () => {
+    const [deployments, teams] = await Promise.all([
+      get('/Deployment'),
+      get('/Teams/List'),
+    ]);
+
+    if (!deployments?.length) {
+      console.log('No widgets found.');
+      console.log('\nCreate a widget in the Velaro admin under Deployments,');
+      console.log('then paste its embed snippet on the pages you want chat on.');
+      return;
+    }
+
+    const teamMap = Object.fromEntries((teams ?? []).map(t => [t.id, t.name]));
+    const rows    = deployments.map(d => ({
+      id:   `[${d.id}]`,
+      key:  d.deploymentId ?? '—',
+      team: teamMap[d.teamId] ?? `team ${d.teamId}`,
+      name: d.displayName ?? '(unnamed)',
+    }));
+
+    const idW   = Math.max(...rows.map(r => r.id.length));
+    const keyW  = Math.max('embed-key'.length, ...rows.map(r => r.key.length));
+    const teamW = Math.max('routes-to'.length, ...rows.map(r => r.team.length));
+
+    console.log(`\n${'id'.padStart(idW)}  ${'embed-key'.padEnd(keyW)}  ${'routes-to'.padEnd(teamW)}  name`);
+    console.log(`${'-'.repeat(idW)}  ${'-'.repeat(keyW)}  ${'-'.repeat(teamW)}  ----`);
+    for (const r of rows) {
+      console.log(`${r.id.padStart(idW)}  ${r.key.padEnd(keyW)}  ${r.team.padEnd(teamW)}  ${r.name}`);
+    }
+    console.log(`\n${rows.length} widget(s)`);
+  }),
+};
+
+const widgetRenameCommand = {
+  command:  'widget rename <id> <name>',
+  describe: 'Rename a widget',
+  builder:  (y) =>
+    y
+      .positional('id',   { type: 'number', describe: 'Widget ID' })
+      .positional('name', { type: 'string', describe: 'New name' }),
+  handler: runCommand(async (argv) => {
+    const dep = await get(`/Deployment/${argv.id}`);
+    if (!dep) { console.error(`Widget ${argv.id} not found.`); process.exit(1); }
+    await post('/Deployment', { ...dep, id: argv.id, displayName: argv.name });
+    console.log(`Widget ${argv.id} renamed to "${argv.name}".`);
+  }),
+};
+
+const widgetAssignCommand = {
+  command:  'widget assign <id> <team-id>',
+  describe: 'Point a widget at a different team (embed code stays the same)',
+  builder:  (y) =>
+    y
+      .positional('id',      { type: 'number', describe: 'Widget ID' })
+      .positional('team-id', { type: 'number', describe: 'Team ID to route to' }),
+  handler: runCommand(async (argv) => {
+    const [dep, teams] = await Promise.all([
+      get(`/Deployment/${argv.id}`),
+      get('/Teams/List'),
+    ]);
+
+    if (!dep) { console.error(`Widget ${argv.id} not found.`); process.exit(1); }
+
+    const team = (teams ?? []).find(t => t.id === argv['team-id']);
+    if (!team) {
+      console.error(`Team ${argv['team-id']} not found.`);
+      console.error('Run: velaro team list');
+      process.exit(1);
+    }
+
+    await post('/Deployment', { ...dep, id: argv.id, teamId: argv['team-id'] });
+    console.log(`Widget "${dep.displayName ?? dep.id}" now routes to team "${team.name}".`);
+    console.log('Your embed snippet is unchanged — no website edits needed.');
+  }),
+};

package/lib/commands/update.js

@@ -0,0 +1,47 @@
+import { execSync }    from 'child_process';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const { version: currentVersion } = require('../../package.json');
+
+const NPM_REGISTRY = 'https://registry.npmjs.org/@velaro/cli/latest';
+
+export const updateCommand = {
+  command:  'update',
+  describe: 'Update the Velaro CLI to the latest version',
+  handler:  async () => {
+    process.stdout.write('Checking for updates... ');
+
+    let latest;
+    try {
+      const res = await fetch(NPM_REGISTRY, { signal: AbortSignal.timeout(8000) });
+      const data = await res.json();
+      latest = data?.version;
+    } catch {
+      console.error('Could not reach npm registry. Check your connection and try again.');
+      process.exit(1);
+    }
+
+    if (!latest) {
+      console.error('Could not determine the latest version.');
+      process.exit(1);
+    }
+
+    if (latest === currentVersion) {
+      console.log(`already up to date (${currentVersion}).`);
+      return;
+    }
+
+    console.log(`${currentVersion} → ${latest}`);
+    console.log('Running: npm install -g @velaro/cli@latest\n');
+
+    try {
+      execSync('npm install -g @velaro/cli@latest', { stdio: 'inherit' });
+      console.log('\nUpdated successfully. Run velaro --version to confirm.');
+    } catch {
+      console.error('\nUpdate failed. Try running manually:');
+      console.error('  npm install -g @velaro/cli@latest');
+      process.exit(1);
+    }
+  },
+};

package/lib/commands/workflow.js

@@ -1,32 +1,98 @@
-import { get }       from '../api.js';
-import { runCommand } from '../run.js';
-
-export const workflowCommand = {
-  command:  'workflow <subcommand>',
-  describe: 'Manage workflows',
-  builder:  (yargs) => yargs
-    .command({
-      command:  'list',
-      describe: 'List all workflows',
-      handler:  runCommand(async () => {
-        const workflows = await get('/Workflows/List');
-        if (!workflows.length) { console.log('No workflows found.'); return; }
-
-        const rows = workflows.filter(w => !w.isTemplate).map(w => ({
-          id:      `[${w.id}]`,
-          status:  w.enabled ? 'enabled ' : 'disabled',
-          trigger: w.triggerType ?? '—',
-          name:    w.name,
-        }));
-
-        const idW      = Math.max(...rows.map(r => r.id.length));
-        const triggerW = Math.max(...rows.map(r => r.trigger.length));
-
-        for (const r of rows) {
-          console.log(`${r.id.padStart(idW)}  ${r.status}  ${r.trigger.padEnd(triggerW)}  ${r.name}`);
-        }
-        console.log(`\n${rows.length} workflow(s)`);
-      }),
-    })
-    .demandCommand(1, 'Specify a subcommand: list'),
-};
+import { get, post }      from '../api.js';
+import { requireFeature } from '../subscription.js';
+import { runCommand }     from '../run.js';
+
+export const workflowCommand = {
+  command:  'workflow <subcommand>',
+  describe: 'Manage automation workflows',
+  builder:  (yargs) =>
+    yargs
+      .command(workflowListCommand)
+      .command(workflowGetCommand)
+      .command(workflowEnableCommand)
+      .command(workflowDisableCommand)
+      .demandCommand(1, 'Specify a subcommand: list, get, enable, disable'),
+  handler: () => {},
+};
+
+// ── list ───────────────────────────────────────────────────────────────────────
+
+const workflowListCommand = {
+  command:  'list',
+  describe: 'List all workflows',
+  handler:  runCommand(async () => {
+    await requireFeature('enableAutomation', 'Workflows');
+
+    const workflows = await get('/Workflows/List');
+    const rows = (workflows ?? []).filter(w => !w.isTemplate);
+
+    if (!rows.length) { console.log('No workflows found.'); return; }
+
+    const idW      = Math.max(...rows.map(w => String(w.id).length + 2));
+    const triggerW = Math.max('trigger'.length, ...rows.map(w => (w.triggerType ?? '—').length));
+
+    console.log(`\n${'id'.padStart(idW)}  status    ${'trigger'.padEnd(triggerW)}  name`);
+    console.log(`${'-'.repeat(idW)}  --------  ${'-'.repeat(triggerW)}  ----`);
+    for (const w of rows) {
+      const id      = `[${w.id}]`.padStart(idW);
+      const status  = w.enabled ? 'enabled ' : 'disabled';
+      const trigger = (w.triggerType ?? '—').padEnd(triggerW);
+      console.log(`${id}  ${status}  ${trigger}  ${w.name}`);
+    }
+    console.log(`\n${rows.length} workflow(s)`);
+  }),
+};
+
+// ── get ────────────────────────────────────────────────────────────────────────
+
+const workflowGetCommand = {
+  command:  'get <id>',
+  describe: 'Show workflow details',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableAutomation', 'Workflows');
+
+    const w = await get(`/Workflows/${argv.id}`);
+    if (!w) { console.error(`Workflow ${argv.id} not found.`); process.exit(1); }
+
+    console.log(`\n[${w.id}] ${w.name}`);
+    console.log(`  Status:  ${w.enabled ? 'enabled' : 'disabled'}`);
+    console.log(`  Trigger: ${w.triggerType ?? '—'}`);
+    if (w.nodes?.length) {
+      console.log(`  Nodes:   ${w.nodes.length}`);
+    }
+  }),
+};
+
+// ── enable / disable ──────────────────────────────────────────────────────────
+
+const workflowEnableCommand = {
+  command:  'enable <id>',
+  describe: 'Enable a workflow',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableAutomation', 'Workflows');
+    await post(`/Workflows/toggle/${argv.id}`, null);
+    console.log(`Workflow ${argv.id} enabled.`);
+  }),
+};
+
+const workflowDisableCommand = {
+  command:  'disable <id>',
+  describe: 'Disable a workflow',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableAutomation', 'Workflows');
+
+    const w = await get(`/Workflows/${argv.id}`);
+    if (!w) { console.error(`Workflow ${argv.id} not found.`); process.exit(1); }
+
+    if (!w.enabled) {
+      console.log(`Workflow ${argv.id} is already disabled.`);
+      return;
+    }
+
+    await post(`/Workflows/toggle/${argv.id}`, null);
+    console.log(`Workflow ${argv.id} disabled.`);
+  }),
+};

package/lib/config.js

@@ -1,25 +1,28 @@
-import { homedir } from 'os';
-import { join }    from 'path';
-import { readFileSync, writeFileSync, mkdirSync } from 'fs';
-
-const CONFIG_DIR  = join(homedir(), '.velaro');
-const CONFIG_FILE = join(CONFIG_DIR, 'config.json');
-
-export const DEFAULT_API_BASE = process.env.VELARO_API_BASE || 'https://velaro-messaging-api-prod.azurewebsites.net';
-
-export function readConfig() {
-  try {
-    return JSON.parse(readFileSync(CONFIG_FILE, 'utf8'));
-  } catch {
-    return {};
-  }
-}
-
-export function writeConfig(data) {
-  mkdirSync(CONFIG_DIR, { recursive: true }); // no-op if already exists
-  writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
-}
-
-export function clearConfig() {
-  writeConfig({});
-}
+import { homedir } from 'os';
+import { join }    from 'path';
+import { readFileSync, writeFileSync, mkdirSync } from 'fs';
+
+const CONFIG_DIR  = join(homedir(), '.velaro');
+const CONFIG_FILE = join(CONFIG_DIR, 'config.json');
+
+// Production API URL — update when production messaging API is deployed.
+// messaging.velaro.com is the chat widget host (Azure SWA), not the API.
+export const DEFAULT_API_BASE  = process.env.VELARO_API_BASE   || 'https://velaro-messaging-api-staging.azurewebsites.net';
+export const STAGING_API_BASE  = process.env.VELARO_STAGING_API || 'https://velaro-messaging-api-staging.azurewebsites.net';
+
+export function readConfig() {
+  try {
+    return JSON.parse(readFileSync(CONFIG_FILE, 'utf8'));
+  } catch {
+    return {};
+  }
+}
+
+export function writeConfig(data) {
+  mkdirSync(CONFIG_DIR, { recursive: true }); // no-op if already exists
+  writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
+}
+
+export function clearConfig() {
+  writeConfig({});
+}