@velaro/cli 1.2.0 → 1.4.9

package/lib/commands/check.js

@@ -1,163 +1,163 @@
-/**
- * velaro check — full site health and configuration summary.
- *
- * Shows every feature area with:
- *   ✓  enabled and configured
- *   ⚠  enabled but nothing configured yet
- *   ✗  not on your plan
- */
-
-import { get }        from '../api.js';
-import { getSubscription } from '../subscription.js';
-import { runCommand } from '../run.js';
-
-const TICK  = '✓';
-const WARN  = '⚠';
-const CROSS = '✗';
-
-export const checkCommand = {
-  command:  'check',
-  describe: 'Show full site configuration and health summary',
-  handler:  runCommand(async () => {
-    const [sub, apiStatus] = await Promise.all([
-      getSubscription().catch(() => null),
-      get('/Status').catch(() => null),
-    ]);
-
-    if (!sub) {
-      console.error('Could not retrieve subscription. Check your login: velaro whoami');
-      process.exit(1);
-    }
-
-    const ok  = (msg) => console.log(`  ${TICK}  ${msg}`);
-    const warn = (msg) => console.log(`  ${WARN}  ${msg}`);
-    const off  = (msg) => console.log(`  ${CROSS}  ${msg}`);
-
-    console.log('\n── API Health ────────────────────────────────────────────────');
-    if (apiStatus) {
-      ok(`API reachable`);
-    } else {
-      warn('API did not respond to /Status');
-    }
-
-    // ── Deployments ─────────────────────────────────────────────────────────
-    console.log('\n── Deployments ───────────────────────────────────────────────');
-    try {
-      const [deps, teams] = await Promise.all([get('/Deployment'), get('/Teams/List')]);
-      const teamMap = Object.fromEntries((teams ?? []).map(t => [t.id, t.name]));
-      if (deps?.length) {
-        for (const d of deps) {
-          ok(`[${d.id}] "${d.displayName}"  →  team: ${teamMap[d.teamId] ?? `#${d.teamId}`}  (embed key: ${d.deploymentId})`);
-        }
-      } else {
-        warn('No deployments — create one in the admin UI to get your embed snippet.');
-      }
-    } catch { warn('Could not load deployments'); }
-
-    // ── AI Bots ──────────────────────────────────────────────────────────────
-    console.log('\n── AI Bots ───────────────────────────────────────────────────');
-    if (sub.enableAI) {
-      try {
-        const bots = await get('/AIConfiguration/list');
-        if (bots?.length) {
-          for (const b of bots) ok(`[${b.id}] "${b.name}"  model=${b.aiModel ?? 'default'}`);
-        } else {
-          warn('AI enabled but no bots configured. Run: velaro bot setup --name "My Bot"');
-        }
-      } catch { warn('Could not load bot list'); }
-    } else {
-      off('AI Bots — not on your plan  (upgrade at velaro.com/pricing)');
-    }
-
-    // ── Knowledge Base ───────────────────────────────────────────────────────
-    console.log('\n── Knowledge Base ────────────────────────────────────────────');
-    if (sub.enableKnowledgeBase) {
-      try {
-        const [qna, overrides] = await Promise.all([
-          get('/api/BotQnA').catch(() => []),
-          get('/Ticket/knowledge-overrides').catch(() => []),
-        ]);
-        ok(`${qna?.length ?? 0} Q&A pair(s)  ·  ${overrides?.length ?? 0} override(s)`);
-      } catch { warn('Could not load knowledge base'); }
-    } else {
-      off('Knowledge Base — not on your plan');
-    }
-
-    // ── Workflows ────────────────────────────────────────────────────────────
-    console.log('\n── Workflows ─────────────────────────────────────────────────');
-    if (sub.enableAutomation) {
-      try {
-        const workflows = (await get('/Workflows/List') ?? []).filter(w => !w.isTemplate);
-        const enabled   = workflows.filter(w => w.enabled).length;
-        const disabled  = workflows.length - enabled;
-        if (workflows.length) {
-          ok(`${workflows.length} workflow(s)  ·  ${enabled} enabled  ·  ${disabled} disabled`);
-          for (const w of workflows) {
-            const sym = w.enabled ? TICK : WARN;
-            console.log(`       ${sym}  [${w.id}] "${w.name}"  (${w.enabled ? 'on' : 'off'})`);
-          }
-        } else {
-          warn('Automation enabled but no workflows configured.');
-        }
-      } catch { warn('Could not load workflows'); }
-    } else {
-      off('Workflows — not on your plan');
-    }
-
-    // ── Routing Rules ────────────────────────────────────────────────────────
-    console.log('\n── Routing Rules ─────────────────────────────────────────────');
-    if (sub.enableWorkflowRules) {
-      try {
-        const rules = await get('/Rules/List');
-        if (rules?.length) {
-          ok(`${rules.length} routing rule(s) configured`);
-        } else {
-          warn('Routing rules enabled but none configured.');
-        }
-      } catch { warn('Could not load rules'); }
-    } else {
-      off('Routing Rules — not on your plan');
-    }
-
-    // ── Channels ─────────────────────────────────────────────────────────────
-    console.log('\n── Channels ──────────────────────────────────────────────────');
-    const channels = [
-      ['enableWeb',       'Web Chat'],
-      ['enableSms',       'SMS'],
-      ['enableEmail',     'Email'],
-      ['enableWhatsapp',  'WhatsApp'],
-      ['enableIvr',       'IVR / Voice'],
-      ['enableFacebook',  'Facebook Messenger'],
-      ['enableInstagram', 'Instagram'],
-      ['enableRcs',       'RCS'],
-    ];
-    for (const [flag, label] of channels) {
-      if (sub[flag]) ok(label); else off(`${label} — not on your plan`);
-    }
-
-    // ── IVR detail ───────────────────────────────────────────────────────────
-    if (sub.enableIvr) {
-      try {
-        const ivr = await get('/api/ivr/config');
-        if (ivr?.phoneNumber) {
-          console.log(`\n── IVR Config ────────────────────────────────────────────────`);
-          ok(`Phone: ${ivr.phoneNumber}`);
-          if (ivr.bridgeNumber) ok(`Bridge: ${ivr.bridgeNumber}`);
-          else warn('No bridge (transfer) number set — agents cannot receive transferred calls.');
-        }
-      } catch { /* IVR config is optional */ }
-    }
-
-    // ── Agents ───────────────────────────────────────────────────────────────
-    console.log('\n── Agents ────────────────────────────────────────────────────');
-    try {
-      const agents = await get('/Users/List');
-      const online  = (agents ?? []).filter(a => a.status === 'Available').length;
-      const away    = (agents ?? []).filter(a => a.status === 'Away').length;
-      const offline = (agents ?? []).length - online - away;
-      ok(`${agents?.length ?? 0} agent(s)  ·  ${online} online  ·  ${away} away  ·  ${offline} offline`);
-    } catch { warn('Could not load agents'); }
-
-    console.log('\n──────────────────────────────────────────────────────────────\n');
-  }),
-};
+/**
+ * velaro check — full site health and configuration summary.
+ *
+ * Shows every feature area with:
+ *   ✓  enabled and configured
+ *   ⚠  enabled but nothing configured yet
+ *   ✗  not on your plan
+ */
+
+import { get, messagingGet } from '../api.js';
+import { getSubscription } from '../subscription.js';
+import { runCommand } from '../run.js';
+
+const TICK  = '✓';
+const WARN  = '⚠';
+const CROSS = '✗';
+
+export const checkCommand = {
+  command:  'check',
+  describe: 'Show full site configuration and health summary',
+  handler:  runCommand(async () => {
+    const [sub, apiStatus] = await Promise.all([
+      getSubscription().catch(() => null),
+      get('/Status').catch(() => null),
+    ]);
+
+    if (!sub) {
+      console.error('Could not retrieve subscription. Check your login: velaro whoami');
+      process.exit(1);
+    }
+
+    const ok  = (msg) => console.log(`  ${TICK}  ${msg}`);
+    const warn = (msg) => console.log(`  ${WARN}  ${msg}`);
+    const off  = (msg) => console.log(`  ${CROSS}  ${msg}`);
+
+    console.log('\n── API Health ────────────────────────────────────────────────');
+    if (apiStatus) {
+      ok(`API reachable`);
+    } else {
+      warn('API did not respond to /Status');
+    }
+
+    // ── Deployments ─────────────────────────────────────────────────────────
+    console.log('\n── Deployments ───────────────────────────────────────────────');
+    try {
+      const [deps, teams] = await Promise.all([get('/Deployment'), get('/Teams/List')]);
+      const teamMap = Object.fromEntries((teams ?? []).map(t => [t.id, t.name]));
+      if (deps?.length) {
+        for (const d of deps) {
+          ok(`[${d.id}] "${d.displayName}"  →  team: ${teamMap[d.teamId] ?? `#${d.teamId}`}  (embed key: ${d.deploymentId})`);
+        }
+      } else {
+        warn('No deployments — create one in the admin UI to get your embed snippet.');
+      }
+    } catch { warn('Could not load deployments'); }
+
+    // ── AI Bots ──────────────────────────────────────────────────────────────
+    console.log('\n── AI Bots ───────────────────────────────────────────────────');
+    if (sub.enableAI) {
+      try {
+        const bots = await messagingGet('/AIConfiguration/list');
+        if (bots?.length) {
+          for (const b of bots) ok(`[${b.id}] "${b.name}"  model=${b.aiModel ?? 'default'}`);
+        } else {
+          warn('AI enabled but no bots configured. Run: velaro bot setup --name "My Bot"');
+        }
+      } catch { warn('Could not load bot list'); }
+    } else {
+      off('AI Bots — not on your plan  (upgrade at velaro.com/pricing)');
+    }
+
+    // ── Knowledge Base ───────────────────────────────────────────────────────
+    console.log('\n── Knowledge Base ────────────────────────────────────────────');
+    if (sub.enableKnowledgeBase) {
+      try {
+        const [qna, overrides] = await Promise.all([
+          messagingGet('/BotQnA').catch(() => []),
+          get('/Ticket/knowledge-overrides').catch(() => []),
+        ]);
+        ok(`${qna?.length ?? 0} Q&A pair(s)  ·  ${overrides?.length ?? 0} override(s)`);
+      } catch { warn('Could not load knowledge base'); }
+    } else {
+      off('Knowledge Base — not on your plan');
+    }
+
+    // ── Workflows ────────────────────────────────────────────────────────────
+    console.log('\n── Workflows ─────────────────────────────────────────────────');
+    if (sub.enableAutomation) {
+      try {
+        const workflows = (await get('/Workflows/List') ?? []).filter(w => !w.isTemplate);
+        const enabled   = workflows.filter(w => w.enabled).length;
+        const disabled  = workflows.length - enabled;
+        if (workflows.length) {
+          ok(`${workflows.length} workflow(s)  ·  ${enabled} enabled  ·  ${disabled} disabled`);
+          for (const w of workflows) {
+            const sym = w.enabled ? TICK : WARN;
+            console.log(`       ${sym}  [${w.id}] "${w.name}"  (${w.enabled ? 'on' : 'off'})`);
+          }
+        } else {
+          warn('Automation enabled but no workflows configured.');
+        }
+      } catch { warn('Could not load workflows'); }
+    } else {
+      off('Workflows — not on your plan');
+    }
+
+    // ── Routing Rules ────────────────────────────────────────────────────────
+    console.log('\n── Routing Rules ─────────────────────────────────────────────');
+    if (sub.enableWorkflowRules) {
+      try {
+        const rules = await get('/Rules/List');
+        if (rules?.length) {
+          ok(`${rules.length} routing rule(s) configured`);
+        } else {
+          warn('Routing rules enabled but none configured.');
+        }
+      } catch { warn('Could not load rules'); }
+    } else {
+      off('Routing Rules — not on your plan');
+    }
+
+    // ── Channels ─────────────────────────────────────────────────────────────
+    console.log('\n── Channels ──────────────────────────────────────────────────');
+    const channels = [
+      ['enableWeb',       'Web Chat'],
+      ['enableSms',       'SMS'],
+      ['enableEmail',     'Email'],
+      ['enableWhatsapp',  'WhatsApp'],
+      ['enableIvr',       'IVR / Voice'],
+      ['enableFacebook',  'Facebook Messenger'],
+      ['enableInstagram', 'Instagram'],
+      ['enableRcs',       'RCS'],
+    ];
+    for (const [flag, label] of channels) {
+      if (sub[flag]) ok(label); else off(`${label} — not on your plan`);
+    }
+
+    // ── IVR detail ───────────────────────────────────────────────────────────
+    if (sub.enableIvr) {
+      try {
+        const ivr = await get('/api/ivr/config');
+        if (ivr?.phoneNumber) {
+          console.log(`\n── IVR Config ────────────────────────────────────────────────`);
+          ok(`Phone: ${ivr.phoneNumber}`);
+          if (ivr.bridgeNumber) ok(`Bridge: ${ivr.bridgeNumber}`);
+          else warn('No bridge (transfer) number set — agents cannot receive transferred calls.');
+        }
+      } catch { /* IVR config is optional */ }
+    }
+
+    // ── Agents ───────────────────────────────────────────────────────────────
+    console.log('\n── Agents ────────────────────────────────────────────────────');
+    try {
+      const agents = await get('/Users/List');
+      const online  = (agents ?? []).filter(a => a.status === 'Available').length;
+      const away    = (agents ?? []).filter(a => a.status === 'Away').length;
+      const offline = (agents ?? []).length - online - away;
+      ok(`${agents?.length ?? 0} agent(s)  ·  ${online} online  ·  ${away} away  ·  ${offline} offline`);
+    } catch { warn('Could not load agents'); }
+
+    console.log('\n──────────────────────────────────────────────────────────────\n');
+  }),
+};

package/lib/commands/compliance.js

@@ -0,0 +1,229 @@
+import readline from 'readline';
+import { get, post } from '../api.js';
+import { runCommand } from '../run.js';
+
+export const complianceCommand = {
+  command:  'compliance [subcommand]',
+  describe: 'Compliance document signing — run with no args to see status and sign',
+  builder:  (yargs) =>
+    yargs
+      .command(complianceStatusCommand)
+      .command(complianceSignCommand)
+      .command(complianceSignaturesCommand)
+      .command(complianceAttestationCommand)
+      .command(complianceRedactionTestCommand)
+      .command(complianceRedactionStatusCommand)
+      .command(complianceRedactionEventsCommand),
+  // Default: no subcommand = run status (same as `velaro compliance status`)
+  handler: runCommand(async () => { await runStatus(); }),
+};
+
+// ── Shared status + sign flow ─────────────────────────────────────────────────
+
+async function runStatus({ autoSign = false } = {}) {
+  const docs = await get('/Compliance/documents');
+  if (!docs?.length) { console.log('No compliance documents found.'); return; }
+
+  const unsigned = docs.filter(d => !d.signed || d.documentChanged);
+  const signed   = docs.filter(d => d.signed && !d.documentChanged);
+
+  console.log('\n━━━ Velaro Compliance Status ━━━\n');
+
+  for (const d of signed) {
+    const signedAt = new Date(d.signedAt).toLocaleDateString('en-US', { timeZone: 'America/Los_Angeles', month: 'short', day: 'numeric', year: 'numeric' });
+    console.log(`✅  ${d.title}`);
+    console.log(`    Signed ${signedAt} by ${d.signerName}  (v${d.version})\n`);
+  }
+
+  if (!unsigned.length) {
+    console.log('All compliance documents are signed. Nothing to do.\n');
+    return;
+  }
+
+  console.log(`⚠️   ${unsigned.length} document${unsigned.length > 1 ? 's' : ''} need${unsigned.length === 1 ? 's' : ''} your signature:\n`);
+  for (const d of unsigned) {
+    const tag = d.documentChanged ? ' (document updated — re-sign)' : ' (unsigned)';
+    console.log(`  •  ${d.title}${tag}`);
+  }
+  console.log();
+
+  // Interactive: ask to sign each one now
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const ask = (q) => new Promise(resolve => rl.question(q, resolve));
+
+  // rl.close() must run even if ask()/an unexpected throw escapes below -- an open stdin
+  // handle keeps the event loop alive, so a stray exception used to hang the process forever
+  // instead of exiting (this got worse once run.js stopped calling process.exit(1) on error).
+  try {
+    for (const d of unsigned) {
+      const answer = await ask(`Sign "${d.title}" now as Alex Bloom <alex@velaro.com>? [Y/n] `);
+      if (!answer || answer.toLowerCase() === 'y') {
+        process.stdout.write('  Signing... ');
+        try {
+          const result = await post('/Compliance/sign', {
+            documentSlug: d.slug,
+            signerName:   'Alex Bloom',
+            signerEmail:  'alex@velaro.com',
+          });
+          console.log(`done ✅`);
+          console.log(`  ${result.legalAttestation.split('\n').slice(0, 5).join('\n  ')}\n`);
+        } catch (err) {
+          console.log(`failed ❌  ${err?.message ?? err}`);
+        }
+      } else {
+        console.log(`  Skipped.\n`);
+      }
+    }
+  } finally {
+    rl.close();
+  }
+
+  console.log('\nDone. Run `velaro compliance status` to confirm all signatures.\n');
+}
+
+// velaro compliance status — show status and offer to sign unsigned docs
+const complianceStatusCommand = {
+  command:  'status',
+  describe: 'Show compliance document signature status (and offer to sign unsigned docs)',
+  handler:  runCommand(async () => { await runStatus(); }),
+};
+
+// velaro compliance sign <slug> — sign a specific doc directly
+const complianceSignCommand = {
+  command:  'sign <slug>',
+  describe: 'Sign a specific compliance document (pci-saq-a | infosec-policy | irp)',
+  builder:  (y) => y
+    .positional('slug', { describe: 'Document slug', type: 'string' })
+    .option('name',  { type: 'string', describe: 'Signer name (default: Alex Bloom)' })
+    .option('email', { type: 'string', describe: 'Signer email (default: alex@velaro.com)' })
+    .option('notes', { type: 'string', describe: 'Optional note to attach to the signature' }),
+  handler: runCommand(async ({ slug, name, email, notes }) => {
+    console.log(`\nSigning: ${slug}...`);
+    const result = await post('/Compliance/sign', {
+      documentSlug: slug,
+      signerName:   name ?? 'Alex Bloom',
+      signerEmail:  email ?? 'alex@velaro.com',
+      notes,
+    });
+    console.log(`\n${result.message}`);
+    console.log('\n' + result.legalAttestation);
+  }),
+};
+
+// velaro compliance signatures — view audit log
+const complianceSignaturesCommand = {
+  command:  'signatures',
+  describe: 'View the full compliance signature audit log',
+  builder:  (y) => y
+    .option('slug', { type: 'string', describe: 'Filter by document slug' }),
+  handler: runCommand(async ({ slug }) => {
+    const sigs = await get(slug ? `/Compliance/signatures?slug=${slug}` : '/Compliance/signatures');
+    if (!sigs?.length) { console.log('No signatures on record.'); return; }
+    console.log(`\nCompliance Signatures (${sigs.length})\n${'─'.repeat(50)}`);
+    for (const s of sigs) {
+      const at = new Date(s.signedAt).toLocaleString('en-US', { timeZone: 'America/Los_Angeles' });
+      console.log(`\n[${s.id}] ${s.documentTitle}  v${s.version}`);
+      console.log(`  ${at} PT  ·  ${s.signerName} <${s.signerEmail}>`);
+      console.log(`  sha256: ${s.documentHash?.slice(0, 32)}...`);
+      if (s.notes) console.log(`  note: ${s.notes}`);
+    }
+    console.log();
+  }),
+};
+
+// velaro compliance redaction-test <text> — Compliance & Redaction Phase 4 (2026-08-06):
+// "why was this redacted?" sample tester, distinct subsystem (message-scrubber PII redaction)
+// from the PCI document signing commands above — same `compliance` prefix family per the
+// CLI+MCP parity rule's `feature_verb` naming convention, different resource underneath.
+const complianceRedactionTestCommand = {
+  command:  'redaction-test <text>',
+  describe: 'Test sample text against Velaro\'s message-redaction patterns and see why each pattern fired',
+  builder:  (y) => y
+    .positional('text', { describe: 'Sample text to test (wrap in quotes)', type: 'string' }),
+  handler: runCommand(async ({ text }) => {
+    const result = await post('/Scrubber/Test', { text });
+    console.log(`\nRedacted:\n  ${result.redactedText}\n`);
+    if (!result.matches?.length) {
+      console.log('No patterns matched.\n');
+      return;
+    }
+    console.log(`${result.matches.length} pattern(s) matched:\n`);
+    for (const m of result.matches) {
+      console.log(`  • ${m.patternName} (${m.isBuiltIn ? 'built-in' : 'custom'})`);
+      console.log(`    ${m.reason}\n`);
+    }
+    if (result.llmPassEnabled) {
+      console.log(`Note: ${result.llmNote}\n`);
+    }
+  }),
+};
+
+// velaro compliance redaction-status — Compliance & Redaction Phase 6 (2026-08-06): current
+// channel/group override settings for the site. Same distinct-subsystem note as
+// complianceRedactionTestCommand above — this is message-scrubber PII redaction, not PCI
+// document signing.
+const complianceRedactionStatusCommand = {
+  command:  'redaction-status',
+  describe: 'Show current channel/group PII-redaction override settings for this site',
+  handler:  runCommand(async () => {
+    const settings = await get('/ComplianceRedactionSettings');
+    if (!settings?.length) {
+      console.log('\nNo channel/group redaction overrides configured — every channel is using the site-wide default.\n');
+      return;
+    }
+    console.log(`\nCompliance Redaction Settings (${settings.length} override row(s))\n${'─'.repeat(50)}`);
+    for (const s of settings) {
+      const scope = s.groupId != null ? `Group #${s.groupId}` : 'Site default';
+      const channel = s.conversationSource || 'All channels';
+      console.log(`  [${s.id}] ${scope} · ${channel} → ${s.mode}`);
+    }
+    console.log();
+  }),
+};
+
+// velaro compliance redaction-events — Compliance & Redaction Phase 6 (2026-08-06): recent
+// audit log entries. Never prints the actual redacted value, only the pattern/hint metadata.
+const complianceRedactionEventsCommand = {
+  command:  'redaction-events',
+  describe: 'View the PII-redaction audit log (which pattern fired, on which conversation)',
+  builder:  (y) => y
+    .option('page',           { type: 'number', describe: 'Page number (default 1)' })
+    .option('page-size',      { type: 'number', describe: 'Rows per page, max 200 (default 50)' })
+    .option('pattern-name',   { type: 'string', describe: 'Filter by pattern name (partial match)' })
+    .option('conversation-id',{ type: 'string', describe: 'Filter by conversation ID' })
+    .option('direction',      { type: 'string', describe: 'Filter by direction (visitor | agent)' }),
+  handler: runCommand(async (argv) => {
+    const params = new URLSearchParams();
+    if (argv.page) params.set('page', argv.page);
+    if (argv['page-size']) params.set('pageSize', argv['page-size']);
+    if (argv['pattern-name']) params.set('patternName', argv['pattern-name']);
+    if (argv['conversation-id']) params.set('conversationId', argv['conversation-id']);
+    if (argv.direction) params.set('direction', argv.direction);
+    const qs = params.toString();
+    const result = await get(`/Scrubber/events${qs ? '?' + qs : ''}`);
+    if (!result?.events?.length) {
+      console.log(`\nNo redaction audit events found (page ${result?.page ?? 1}, total ${result?.total ?? 0}).\n`);
+      return;
+    }
+    console.log(`\nRedaction Audit Log — ${result.total} total, page ${result.page} (${result.events.length} rows)\n${'─'.repeat(50)}`);
+    for (const e of result.events) {
+      console.log(`\n[${e.id}] ${e.createdAt}`);
+      console.log(`  Pattern: ${e.patternName} (${e.isBuiltIn ? 'built-in' : 'custom'})  Direction: ${e.direction}`);
+      console.log(`  Conversation: ${e.conversationId}`);
+      if (e.messageHint) console.log(`  Hint: ${e.messageHint}`);
+    }
+    console.log();
+  }),
+};
+
+// velaro compliance attestation <slug> — print legal attestation
+const complianceAttestationCommand = {
+  command:  'attestation <slug>',
+  describe: 'Print the legal signature attestation for a document',
+  builder:  (y) => y
+    .positional('slug', { describe: 'Document slug', type: 'string' }),
+  handler: runCommand(async ({ slug }) => {
+    const result = await get(`/Compliance/attestation/${slug}`);
+    console.log('\n' + result.attestationText);
+  }),
+};