@velaro/cli 0.2.0 → 0.4.0

package/lib/commands/mcp-key.js

@@ -1,63 +1,152 @@
-import { get, post, del } from '../api.js';
-import { runCommand }      from '../run.js';
-
-export const mcpKeyCommand = {
-  command:  'mcp-key <subcommand>',
-  describe: 'Manage MCP API keys (vel_live_* keys for AI skill access)',
-  builder:  (yargs) =>
-    yargs
-      .command(mcpKeyListCommand)
-      .command(mcpKeyCreateCommand)
-      .command(mcpKeyRevokeCommand)
-      .demandCommand(1, 'Specify a subcommand: list, create, revoke'),
-  handler: () => {},
-};
-
-const mcpKeyListCommand = {
-  command:  'list',
-  describe: 'List MCP API keys for your site',
-  handler:  runCommand(async () => {
-    const keys = await get('/McpApiKeys');
-    if (!keys?.length) { console.log('No MCP keys found.'); return; }
-    console.log(`Found ${keys.length} key(s):\n`);
-    for (const k of keys) {
-      const used = k.lastUsedAt ? new Date(k.lastUsedAt).toLocaleDateString() : 'never';
-      console.log(`  [${k.id}] ${k.label}  prefix=${k.keyPrefix}  ${k.isActive ? 'active' : 'revoked'}  last used=${used}`);
-    }
-  }),
-};
-
-const mcpKeyCreateCommand = {
-  command:  'create',
-  describe: 'Create a new MCP API key',
-  builder:  (y) =>
-    y
-      .option('label', {
-        describe:     'Human-readable label (e.g. "Claude Code")',
-        type:         'string',
-        demandOption: true,
-      })
-      .option('expires', {
-        describe: 'Expiry date in ISO 8601 format (e.g. 2027-01-01)',
-        type:     'string',
-      }),
-
-  handler: runCommand(async (argv) => {
-    const payload = { label: argv.label };
-    if (argv.expires) payload.expiresAt = new Date(argv.expires).toISOString();
-
-    const result = await post('/McpApiKeys', payload);
-    console.log(`MCP key created for: ${result.label}`);
-    console.log(`\n  Key: ${result.rawKey}`);
-    console.log(`\n  ${result.warning ?? 'Copy this key now — it will not be shown again.'}`);
-  }),
-};
-
-const mcpKeyRevokeCommand = {
-  command:  'revoke <id>',
-  describe: 'Revoke an MCP API key by ID',
-  handler:  runCommand(async (argv) => {
-    await del(`/McpApiKeys/${argv.id}`);
-    console.log(`Key ${argv.id} revoked.`);
-  }),
-};
+import fs   from 'fs';
+import path from 'path';
+import os   from 'os';
+import { get, post, del } from '../api.js';
+import { runCommand }      from '../run.js';
+
+export const mcpKeyCommand = {
+  command:  'mcp-key <subcommand>',
+  describe: 'Manage MCP API keys (vel_live_* keys for AI skill access)',
+  builder:  (yargs) =>
+    yargs
+      .command(mcpKeyListCommand)
+      .command(mcpKeyCreateCommand)
+      .command(mcpKeyRevokeCommand)
+      .command(mcpKeyRotateCommand)
+      .command(mcpKeyInstallCommand)
+      .demandCommand(1, 'Specify a subcommand: list, create, revoke, rotate, install'),
+  handler: () => {},
+};
+
+const mcpKeyListCommand = {
+  command:  'list',
+  describe: 'List MCP API keys for your site',
+  handler:  runCommand(async () => {
+    const keys = await get('/McpApiKeys');
+    if (!keys?.length) { console.log('No MCP keys found.'); return; }
+    console.log(`Found ${keys.length} key(s):\n`);
+    for (const k of keys) {
+      const used    = k.lastUsedAt ? new Date(k.lastUsedAt).toLocaleDateString() : 'never';
+      const expires = k.expiresAt  ? `  expires ${new Date(k.expiresAt).toLocaleDateString()}` : '';
+      console.log(`  [${k.id}] ${k.label}  prefix=${k.keyPrefix}  ${k.isActive ? 'active' : 'revoked'}  last used=${used}${expires}`);
+    }
+  }),
+};
+
+const mcpKeyCreateCommand = {
+  command:  'create',
+  describe: 'Create a new MCP API key',
+  builder:  (y) =>
+    y
+      .option('label', {
+        describe:     'Human-readable label (e.g. "Claude Code")',
+        type:         'string',
+        demandOption: true,
+      })
+      .option('expires', {
+        describe: 'Expiry date in ISO 8601 format (e.g. 2027-01-01)',
+        type:     'string',
+      }),
+
+  handler: runCommand(async (argv) => {
+    const payload = { label: argv.label };
+    if (argv.expires) payload.expiresAt = new Date(argv.expires).toISOString();
+
+    const result = await post('/McpApiKeys', payload);
+    console.log(`MCP key created: ${result.label}`);
+    console.log(`\n  Key: ${result.rawKey}`);
+    console.log(`\n  ${result.warning ?? 'Copy this key now — it will not be shown again.'}`);
+  }),
+};
+
+const mcpKeyRevokeCommand = {
+  command:  'revoke <id>',
+  describe: 'Revoke an MCP API key by ID',
+  handler:  runCommand(async (argv) => {
+    await del(`/McpApiKeys/${argv.id}`);
+    console.log(`Key ${argv.id} revoked.`);
+  }),
+};
+
+const mcpKeyInstallCommand = {
+  command:  'install',
+  describe: 'Create an MCP key and write it to ~/.claude/settings.json automatically',
+  builder:  (y) =>
+    y
+      .option('label', {
+        describe: 'Label for the key',
+        type:     'string',
+        default:  'Claude Code',
+      })
+      .option('api', {
+        describe: 'Velaro API base URL (defaults to production)',
+        type:     'string',
+      }),
+
+  handler: runCommand(async (argv) => {
+    const payload = { label: argv.label };
+    const result  = await post('/McpApiKeys', payload);
+    const rawKey  = result.rawKey;
+
+    // Write to ~/.claude/settings.json
+    const settingsPath = path.join(os.homedir(), '.claude', 'settings.json');
+    let settings = {};
+    if (fs.existsSync(settingsPath)) {
+      try { settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8')); } catch {}
+    }
+
+    const apiBase = argv.api || 'https://api-admin-us-east.velaro.com';
+    settings.mcpServers = settings.mcpServers || {};
+    settings.mcpServers.velaro = {
+      command: 'npx',
+      args:    ['-y', '@velaro/mcp-server'],
+      env:     {
+        VELARO_MCP_KEY:   rawKey,
+        VELARO_ADMIN_API: apiBase,
+      },
+    };
+
+    fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2));
+
+    console.log(`✅ MCP key created: ${result.label}  (${result.keyPrefix}...)`);
+    console.log(`✅ Written to: ${settingsPath}`);
+    console.log(`\nRestart Claude Code to pick up the new MCP server.`);
+    console.log(`\nTo verify: run 'velaro mcp-key list' or check Settings → Developer → MCP Keys in the admin portal.`);
+  }),
+};
+
+const mcpKeyRotateCommand = {
+  command:  'rotate <id>',
+  describe: 'Revoke an existing key and issue a replacement in one step',
+  builder:  (y) =>
+    y
+      .positional('id', { type: 'number', describe: 'ID of the key to revoke (get it from mcp-key list)' })
+      .option('label', {
+        describe: 'Label for the replacement key (defaults to the old key\'s label)',
+        type:     'string',
+      })
+      .option('expires', {
+        describe: 'Expiry date for the new key in ISO 8601 format (e.g. 2027-01-01)',
+        type:     'string',
+      }),
+
+  handler: runCommand(async (argv) => {
+    const keys = await get('/McpApiKeys');
+    const old  = keys?.find(k => k.id === argv.id);
+    if (!old) throw new Error(`Key ID ${argv.id} not found. Run 'velaro mcp-key list' to see your keys.`);
+
+    const label = argv.label || old.label;
+
+    await del(`/McpApiKeys/${argv.id}`);
+    console.log(`Revoked:  [${argv.id}] ${old.label} (${old.keyPrefix}...)`);
+
+    const payload = { label };
+    if (argv.expires) payload.expiresAt = new Date(argv.expires).toISOString();
+    const result = await post('/McpApiKeys', payload);
+
+    console.log(`Replaced: [${result.id}] ${result.label}`);
+    console.log(`\n  New key: ${result.rawKey}`);
+    console.log(`\n  ${result.warning ?? 'Copy this key now — it will not be shown again.'}`);
+  }),
+};

package/lib/commands/rule.js

@@ -1,85 +1,85 @@
-import { get, post, del } from '../api.js';
-import { requireFeature }  from '../subscription.js';
-import { runCommand }      from '../run.js';
-
-export const ruleCommand = {
-  command:  'rule <subcommand>',
-  describe: 'Manage routing rules',
-  builder:  (yargs) =>
-    yargs
-      .command(ruleListCommand)
-      .command(ruleCreateCommand)
-      .command(ruleDeleteCommand)
-      .demandCommand(1, 'Specify a subcommand: list, create, delete'),
-  handler: () => {},
-};
-
-// ── list ───────────────────────────────────────────────────────────────────────
-
-const ruleListCommand = {
-  command:  'list',
-  describe: 'List all routing rules',
-  handler:  runCommand(async () => {
-    await requireFeature('enableWorkflowRules', 'Routing Rules');
-
-    const rules = await get('/Rules/List');
-    if (!rules?.length) { console.log('No routing rules found.'); return; }
-
-    const sorted = [...rules].sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
-    const idW    = Math.max(...sorted.map(r => String(r.id).length + 2));
-    const priW   = Math.max('pri'.length, ...sorted.map(r => String(r.priority ?? 0).length));
-    const nameW  = Math.max('name'.length, ...sorted.map(r => (r.name ?? r.trigger ?? '—').length));
-
-    console.log(`\n${'id'.padStart(idW)}  ${'pri'.padEnd(priW)}  ${'name'.padEnd(nameW)}  trigger`);
-    console.log(`${'-'.repeat(idW)}  ${'-'.repeat(priW)}  ${'-'.repeat(nameW)}  -------`);
-    for (const r of sorted) {
-      const id   = `[${r.id}]`.padStart(idW);
-      const pri  = String(r.priority ?? 0).padEnd(priW);
-      const name = (r.name ?? r.trigger ?? '—').padEnd(nameW);
-      console.log(`${id}  ${pri}  ${name}  ${r.trigger ?? '—'}`);
-    }
-    console.log(`\n${sorted.length} rule(s)`);
-  }),
-};
-
-// ── create ─────────────────────────────────────────────────────────────────────
-
-const ruleCreateCommand = {
-  command:  'create',
-  describe: 'Create a routing rule',
-  builder:  (y) =>
-    y
-      .option('name',       { type: 'string', demandOption: true, describe: 'Rule name' })
-      .option('trigger',    { type: 'string', demandOption: true, describe: 'Trigger type (e.g. pageUrl, country)' })
-      .option('value',      { type: 'string', demandOption: true, describe: 'Trigger value to match' })
-      .option('team-id',    { type: 'number', demandOption: true, describe: 'Team ID to route to' })
-      .option('priority',   { type: 'number', default: 0,         describe: 'Rule priority (lower = higher priority)' }),
-
-  handler: runCommand(async (argv) => {
-    await requireFeature('enableWorkflowRules', 'Routing Rules');
-
-    const result = await post('/Rules', {
-      name:      argv.name,
-      trigger:   argv.trigger,
-      value:     argv.value,
-      teamId:    argv['team-id'],
-      priority:  argv.priority,
-      isEnabled: true,
-    });
-
-    console.log(`Rule created: [${result.id}] ${result.name}`);
-  }),
-};
-
-// ── delete ─────────────────────────────────────────────────────────────────────
-
-const ruleDeleteCommand = {
-  command:  'delete <id>',
-  describe: 'Delete a routing rule',
-  builder:  (y) => y.positional('id', { type: 'number', describe: 'Rule ID' }),
-  handler:  runCommand(async (argv) => {
-    await requireFeature('enableWorkflowRules', 'Routing Rules');
-    await del(`/Rules/${argv.id}`);
-    console.log(`Rule ${argv.id} deleted.`);
-  }),
-};
+import { get, post, del } from '../api.js';
+import { requireFeature }  from '../subscription.js';
+import { runCommand }      from '../run.js';
+
+export const ruleCommand = {
+  command:  'rule <subcommand>',
+  describe: 'Manage routing rules',
+  builder:  (yargs) =>
+    yargs
+      .command(ruleListCommand)
+      .command(ruleCreateCommand)
+      .command(ruleDeleteCommand)
+      .demandCommand(1, 'Specify a subcommand: list, create, delete'),
+  handler: () => {},
+};
+
+// ── list ───────────────────────────────────────────────────────────────────────
+
+const ruleListCommand = {
+  command:  'list',
+  describe: 'List all routing rules',
+  handler:  runCommand(async () => {
+    await requireFeature('enableWorkflowRules', 'Routing Rules');
+
+    const rules = await get('/Rules/List');
+    if (!rules?.length) { console.log('No routing rules found.'); return; }
+
+    const sorted = [...rules].sort((a, b) => (a.priority ?? 0) - (b.priority ?? 0));
+    const idW    = Math.max(...sorted.map(r => String(r.id).length + 2));
+    const priW   = Math.max('pri'.length, ...sorted.map(r => String(r.priority ?? 0).length));
+    const nameW  = Math.max('name'.length, ...sorted.map(r => (r.name ?? r.trigger ?? '—').length));
+
+    console.log(`\n${'id'.padStart(idW)}  ${'pri'.padEnd(priW)}  ${'name'.padEnd(nameW)}  trigger`);
+    console.log(`${'-'.repeat(idW)}  ${'-'.repeat(priW)}  ${'-'.repeat(nameW)}  -------`);
+    for (const r of sorted) {
+      const id   = `[${r.id}]`.padStart(idW);
+      const pri  = String(r.priority ?? 0).padEnd(priW);
+      const name = (r.name ?? r.trigger ?? '—').padEnd(nameW);
+      console.log(`${id}  ${pri}  ${name}  ${r.trigger ?? '—'}`);
+    }
+    console.log(`\n${sorted.length} rule(s)`);
+  }),
+};
+
+// ── create ─────────────────────────────────────────────────────────────────────
+
+const ruleCreateCommand = {
+  command:  'create',
+  describe: 'Create a routing rule',
+  builder:  (y) =>
+    y
+      .option('name',       { type: 'string', demandOption: true, describe: 'Rule name' })
+      .option('trigger',    { type: 'string', demandOption: true, describe: 'Trigger type (e.g. pageUrl, country)' })
+      .option('value',      { type: 'string', demandOption: true, describe: 'Trigger value to match' })
+      .option('team-id',    { type: 'number', demandOption: true, describe: 'Team ID to route to' })
+      .option('priority',   { type: 'number', default: 0,         describe: 'Rule priority (lower = higher priority)' }),
+
+  handler: runCommand(async (argv) => {
+    await requireFeature('enableWorkflowRules', 'Routing Rules');
+
+    const result = await post('/Rules', {
+      name:      argv.name,
+      trigger:   argv.trigger,
+      value:     argv.value,
+      teamId:    argv['team-id'],
+      priority:  argv.priority,
+      isEnabled: true,
+    });
+
+    console.log(`Rule created: [${result.id}] ${result.name}`);
+  }),
+};
+
+// ── delete ─────────────────────────────────────────────────────────────────────
+
+const ruleDeleteCommand = {
+  command:  'delete <id>',
+  describe: 'Delete a routing rule',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Rule ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableWorkflowRules', 'Routing Rules');
+    await del(`/Rules/${argv.id}`);
+    console.log(`Rule ${argv.id} deleted.`);
+  }),
+};

package/lib/commands/workflow.js

@@ -1,98 +1,98 @@
-import { get, post }      from '../api.js';
-import { requireFeature } from '../subscription.js';
-import { runCommand }     from '../run.js';
-
-export const workflowCommand = {
-  command:  'workflow <subcommand>',
-  describe: 'Manage automation workflows',
-  builder:  (yargs) =>
-    yargs
-      .command(workflowListCommand)
-      .command(workflowGetCommand)
-      .command(workflowEnableCommand)
-      .command(workflowDisableCommand)
-      .demandCommand(1, 'Specify a subcommand: list, get, enable, disable'),
-  handler: () => {},
-};
-
-// ── list ───────────────────────────────────────────────────────────────────────
-
-const workflowListCommand = {
-  command:  'list',
-  describe: 'List all workflows',
-  handler:  runCommand(async () => {
-    await requireFeature('enableAutomation', 'Workflows');
-
-    const workflows = await get('/Workflows/List');
-    const rows = (workflows ?? []).filter(w => !w.isTemplate);
-
-    if (!rows.length) { console.log('No workflows found.'); return; }
-
-    const idW      = Math.max(...rows.map(w => String(w.id).length + 2));
-    const triggerW = Math.max('trigger'.length, ...rows.map(w => (w.triggerType ?? '—').length));
-
-    console.log(`\n${'id'.padStart(idW)}  status    ${'trigger'.padEnd(triggerW)}  name`);
-    console.log(`${'-'.repeat(idW)}  --------  ${'-'.repeat(triggerW)}  ----`);
-    for (const w of rows) {
-      const id      = `[${w.id}]`.padStart(idW);
-      const status  = w.enabled ? 'enabled ' : 'disabled';
-      const trigger = (w.triggerType ?? '—').padEnd(triggerW);
-      console.log(`${id}  ${status}  ${trigger}  ${w.name}`);
-    }
-    console.log(`\n${rows.length} workflow(s)`);
-  }),
-};
-
-// ── get ────────────────────────────────────────────────────────────────────────
-
-const workflowGetCommand = {
-  command:  'get <id>',
-  describe: 'Show workflow details',
-  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
-  handler:  runCommand(async (argv) => {
-    await requireFeature('enableAutomation', 'Workflows');
-
-    const w = await get(`/Workflows/${argv.id}`);
-    if (!w) { console.error(`Workflow ${argv.id} not found.`); process.exit(1); }
-
-    console.log(`\n[${w.id}] ${w.name}`);
-    console.log(`  Status:  ${w.enabled ? 'enabled' : 'disabled'}`);
-    console.log(`  Trigger: ${w.triggerType ?? '—'}`);
-    if (w.nodes?.length) {
-      console.log(`  Nodes:   ${w.nodes.length}`);
-    }
-  }),
-};
-
-// ── enable / disable ──────────────────────────────────────────────────────────
-
-const workflowEnableCommand = {
-  command:  'enable <id>',
-  describe: 'Enable a workflow',
-  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
-  handler:  runCommand(async (argv) => {
-    await requireFeature('enableAutomation', 'Workflows');
-    await post(`/Workflows/toggle/${argv.id}`, null);
-    console.log(`Workflow ${argv.id} enabled.`);
-  }),
-};
-
-const workflowDisableCommand = {
-  command:  'disable <id>',
-  describe: 'Disable a workflow',
-  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
-  handler:  runCommand(async (argv) => {
-    await requireFeature('enableAutomation', 'Workflows');
-
-    const w = await get(`/Workflows/${argv.id}`);
-    if (!w) { console.error(`Workflow ${argv.id} not found.`); process.exit(1); }
-
-    if (!w.enabled) {
-      console.log(`Workflow ${argv.id} is already disabled.`);
-      return;
-    }
-
-    await post(`/Workflows/toggle/${argv.id}`, null);
-    console.log(`Workflow ${argv.id} disabled.`);
-  }),
-};
+import { get, post }      from '../api.js';
+import { requireFeature } from '../subscription.js';
+import { runCommand }     from '../run.js';
+
+export const workflowCommand = {
+  command:  'workflow <subcommand>',
+  describe: 'Manage automation workflows',
+  builder:  (yargs) =>
+    yargs
+      .command(workflowListCommand)
+      .command(workflowGetCommand)
+      .command(workflowEnableCommand)
+      .command(workflowDisableCommand)
+      .demandCommand(1, 'Specify a subcommand: list, get, enable, disable'),
+  handler: () => {},
+};
+
+// ── list ───────────────────────────────────────────────────────────────────────
+
+const workflowListCommand = {
+  command:  'list',
+  describe: 'List all workflows',
+  handler:  runCommand(async () => {
+    await requireFeature('enableAutomation', 'Workflows');
+
+    const workflows = await get('/Workflows/List');
+    const rows = (workflows ?? []).filter(w => !w.isTemplate);
+
+    if (!rows.length) { console.log('No workflows found.'); return; }
+
+    const idW      = Math.max(...rows.map(w => String(w.id).length + 2));
+    const triggerW = Math.max('trigger'.length, ...rows.map(w => (w.triggerType ?? '—').length));
+
+    console.log(`\n${'id'.padStart(idW)}  status    ${'trigger'.padEnd(triggerW)}  name`);
+    console.log(`${'-'.repeat(idW)}  --------  ${'-'.repeat(triggerW)}  ----`);
+    for (const w of rows) {
+      const id      = `[${w.id}]`.padStart(idW);
+      const status  = w.enabled ? 'enabled ' : 'disabled';
+      const trigger = (w.triggerType ?? '—').padEnd(triggerW);
+      console.log(`${id}  ${status}  ${trigger}  ${w.name}`);
+    }
+    console.log(`\n${rows.length} workflow(s)`);
+  }),
+};
+
+// ── get ────────────────────────────────────────────────────────────────────────
+
+const workflowGetCommand = {
+  command:  'get <id>',
+  describe: 'Show workflow details',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableAutomation', 'Workflows');
+
+    const w = await get(`/Workflows/${argv.id}`);
+    if (!w) { console.error(`Workflow ${argv.id} not found.`); process.exit(1); }
+
+    console.log(`\n[${w.id}] ${w.name}`);
+    console.log(`  Status:  ${w.enabled ? 'enabled' : 'disabled'}`);
+    console.log(`  Trigger: ${w.triggerType ?? '—'}`);
+    if (w.nodes?.length) {
+      console.log(`  Nodes:   ${w.nodes.length}`);
+    }
+  }),
+};
+
+// ── enable / disable ──────────────────────────────────────────────────────────
+
+const workflowEnableCommand = {
+  command:  'enable <id>',
+  describe: 'Enable a workflow',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableAutomation', 'Workflows');
+    await post(`/Workflows/toggle/${argv.id}`, null);
+    console.log(`Workflow ${argv.id} enabled.`);
+  }),
+};
+
+const workflowDisableCommand = {
+  command:  'disable <id>',
+  describe: 'Disable a workflow',
+  builder:  (y) => y.positional('id', { type: 'number', describe: 'Workflow ID' }),
+  handler:  runCommand(async (argv) => {
+    await requireFeature('enableAutomation', 'Workflows');
+
+    const w = await get(`/Workflows/${argv.id}`);
+    if (!w) { console.error(`Workflow ${argv.id} not found.`); process.exit(1); }
+
+    if (!w.enabled) {
+      console.log(`Workflow ${argv.id} is already disabled.`);
+      return;
+    }
+
+    await post(`/Workflows/toggle/${argv.id}`, null);
+    console.log(`Workflow ${argv.id} disabled.`);
+  }),
+};

package/lib/config.js

@@ -5,7 +5,9 @@ import { readFileSync, writeFileSync, mkdirSync } from 'fs';
 const CONFIG_DIR  = join(homedir(), '.velaro');
 const CONFIG_FILE = join(CONFIG_DIR, 'config.json');
 
-export const DEFAULT_API_BASE   = process.env.VELARO_API_BASE   || 'https://messaging.velaro.com';
+// Production API URL — update when production messaging API is deployed.
+// messaging.velaro.com is the chat widget host (Azure SWA), not the API.
+export const DEFAULT_API_BASE  = process.env.VELARO_API_BASE   || 'https://velaro-messaging-api-staging.azurewebsites.net';
 export const STAGING_API_BASE  = process.env.VELARO_STAGING_API || 'https://velaro-messaging-api-staging.azurewebsites.net';
 
 export function readConfig() {

package/lib/oauth.js

@@ -22,7 +22,8 @@
  */
 
 const TENANT_ID  = '61de45b3-458d-49a5-913c-501247a6fe4f';
-const AUTHORITY  = `https://login.microsoftonline.com/${TENANT_ID}`;
+// CIAM tenant uses login.velaro.com, not login.microsoftonline.com
+const AUTHORITY  = `https://login.velaro.com/${TENANT_ID}`;
 const CLIENT_ID  = process.env.VELARO_CLI_CLIENT_ID || 'c0fdce54-e9b4-4427-a021-b2605855ff8b';
 
 const SCOPE = [

package/lib/run.js

@@ -1,8 +1,13 @@
-/** Wraps a yargs command handler with consistent error reporting. */
+import { track } from './track.js';
+
+/** Wraps a yargs command handler with consistent error reporting and usage tracking. */
 export function runCommand(fn) {
   return async (argv) => {
     try {
       await fn(argv);
+      // Fire-and-forget tracking after successful command — never awaited, never blocks
+      const action = argv._.join('.') || 'unknown';
+      track(action);
     } catch (err) {
       console.error(`Error: ${err.message}`);
       process.exit(1);