@velaro/cli 1.4.59 → 1.4.61

package/bin/velaro.js

@@ -75,6 +75,7 @@ import { subscriptionCommand }      from '../lib/commands/subscription.js';
 import { supportCommand }           from '../lib/commands/support.js';
 import { routingCommand }           from '../lib/commands/routing.js';
 import { diagnosticsCommand }       from '../lib/commands/diagnostics.js';
+import { aiSpendCommand }           from '../lib/commands/ai-spend.js';
 import { emailInboxCommand }        from '../lib/commands/email-inbox.js';
 import { callbackCommand }          from '../lib/commands/callback.js';
 import { caseCommand }              from '../lib/commands/case.js';
@@ -173,6 +174,7 @@ await yargs(hideBin(process.argv))
   .command({ command: 'support', desc: 'Staff SupportTools actions on a site (superadmin only)', builder: supportCommand, handler: () => {} })
   .command(routingCommand)
   .command(diagnosticsCommand)
+  .command(aiSpendCommand)
   .command(emailInboxCommand)
   .command(callbackCommand)
   .command(caseCommand)

package/lib/commands/ai-spend.js

@@ -0,0 +1,71 @@
+import { get, post } from '../api.js';
+
+const usd = (n) => `$${Number(n ?? 0).toFixed(2)}`;
+
+function fmtPT(ts) {
+  if (!ts) return '-';
+  return new Date(ts).toLocaleString('en-US', { timeZone: 'America/Los_Angeles', dateStyle: 'short', timeStyle: 'short' }) + ' PT';
+}
+
+const reportCommand = {
+  command: 'report',
+  describe: 'AI spend by environment (prod/staging), site, model and key source (superadmin only)',
+  builder: (y) => y
+    .option('env',  { type: 'string', default: 'both', choices: ['both', 'prod', 'staging'] })
+    .option('days', { type: 'number', default: 7 })
+    .option('json', { type: 'boolean', default: false }),
+  handler: async (argv) => {
+    const to = new Date();
+    const from = new Date(to.getTime() - argv.days * 86400000);
+    const r = await get(`SuperAdmin/AiSpend/Report?env=${argv.env}&from=${encodeURIComponent(from.toISOString())}&to=${encodeURIComponent(to.toISOString())}`);
+    if (argv.json) { console.log(JSON.stringify(r, null, 2)); return; }
+    console.log(`AI spend ${fmtPT(r.from)} to ${fmtPT(r.to)} (breaker trips: not available)`);
+    for (const e of r.environments ?? []) {
+      if (!e.available) { console.log(`\n[${e.environment}] unavailable: ${e.error}`); continue; }
+      const c = e.current;
+      console.log(`\n[${e.environment}] ${usd(c.totalEstimatedCostUsd)} / ${c.totalCalls} calls (prev ${usd(e.previous?.totalEstimatedCostUsd)}), cache read ${(e.cacheReadRatio * 100).toFixed(1)}%, QA ${e.qaSharePercent}%`);
+      (c.bySite ?? []).slice(0, 10).forEach(s => console.log(`  site ${s.siteId}: ${usd(s.estimatedCostUsd)} (${s.calls} calls)`));
+      (e.anomalies ?? []).forEach(a => console.log(`  ANOMALY site ${a.siteId}: ${a.kind} ${a.detail}`));
+    }
+  },
+};
+
+const reconcileCommand = {
+  command: 'reconcile',
+  describe: 'Record a provider console total and compare to logged spend',
+  builder: (y) => y
+    .option('env',       { type: 'string', default: 'prod', choices: ['both', 'prod', 'staging'] })
+    .option('days',      { type: 'number', default: 7 })
+    .option('provider',  { type: 'string', default: 'Anthropic' })
+    .option('key',       { type: 'string', describe: 'key bucket: platform, copilot, byok (omit for provider total)' })
+    .option('entered',   { type: 'number', demandOption: true, describe: 'console total in USD' })
+    .option('threshold', { type: 'number', default: 25 })
+    .option('notes',     { type: 'string' }),
+  handler: async (argv) => {
+    const to = new Date();
+    const from = new Date(to.getTime() - argv.days * 86400000);
+    const r = await post('SuperAdmin/AiSpend/Reconciliations', {
+      periodStartUtc: from.toISOString(), periodEndUtc: to.toISOString(), environment: argv.env,
+      provider: argv.provider, keyLabel: argv.key ?? null, enteredUsd: argv.entered, thresholdUsd: argv.threshold, notes: argv.notes ?? null,
+    });
+    console.log(`logged ${usd(r.loggedUsd)} vs console ${usd(r.enteredUsd)}: gap ${usd(r.gapUsd)} (${r.gapPercent ?? 'n/a'}%)${r.unloggedSpendFlagged ? '  FLAG: unlogged spend' : ''}`);
+  },
+};
+
+const historyCommand = {
+  command: 'history',
+  describe: 'List saved reconciliations',
+  builder: (y) => y,
+  handler: async () => {
+    const rows = await get('SuperAdmin/AiSpend/Reconciliations?take=50');
+    for (const r of rows) console.log(`${fmtPT(r.createdUtc)}  ${r.environment}  ${r.provider}${r.keyLabel ? '/' + r.keyLabel : ''}  logged ${usd(r.loggedUsd)}  console ${usd(r.enteredUsd)}  gap ${usd(r.gapUsd)}${r.unloggedSpendFlagged ? '  FLAG' : ''}`);
+  },
+};
+
+export const aiSpendCommand = {
+  command: 'ai-spend <subcommand>',
+  describe: 'AI spend report and provider reconciliation (superadmin only)',
+  builder: (y) => y.command(reportCommand).command(reconcileCommand).command(historyCommand)
+    .demandCommand(1, 'Specify a subcommand: report, reconcile, history').strict(),
+  handler: () => {},
+};

package/lib/commands/netsuite.js

@@ -54,6 +54,36 @@ async function generateHandler(argv) {
   printUrls(urls);
 }
 
+// velaro netsuite m2m init|save|verify - OAuth 2.0 Client Credentials (machine-to-machine).
+// Backend: NetSuiteAuthController POST NetSuite/M2M/Init | Save | Verify (velaro-messaging).
+function printChecks(res) {
+  const checks = Array.isArray(res?.checks) ? res.checks : [];
+  console.log(`\n${BOLD}NetSuite M2M verification${RST}`);
+  for (const c of checks) {
+    console.log(`  ${c.ok ? 'PASS' : 'FAIL'} ${c.name}${c.ok ? '' : ` - ${c.reason || c.reasonCode || 'failed'}`}`);
+    if (!c.ok && c.howToFix) console.log(`      ${DIM}How to fix: ${c.howToFix}${RST}`);
+  }
+  console.log('');
+}
+
+async function m2mInitHandler(argv) {
+  const res = await messagingPost('/NetSuite/M2M/Init', { id: argv.config ?? null, company: argv.company, displayName: argv.name });
+  console.log(`\n${BOLD}Velaro public certificate${RST} (config ${res.id ?? argv.config ?? 'new'})`);
+  console.log('Upload in NetSuite: Setup > Integration > Manage Authentication > OAuth 2.0 Client Credentials (M2M) Setup');
+  console.log(res.certificatePem ?? '(no certificate returned)');
+  if (Array.isArray(res.steps)) res.steps.forEach((st, i) => console.log(`  ${i + 1}. ${st}`));
+  console.log('');
+}
+
+async function m2mSaveHandler(argv) {
+  await messagingPost('/NetSuite/M2M/Save', { id: Number(argv.configId), clientId: argv.clientId, certificateId: argv.certificateId });
+  console.log(`\n  ${GRN}Saved.${RST} Run "velaro netsuite m2m verify ${argv.configId}".\n`);
+}
+
+async function m2mVerifyHandler(argv) {
+  printChecks(await messagingPost('/NetSuite/M2M/Verify', { id: Number(argv.configId) }));
+}
+
 export const netsuiteCommand = {
   command:  'netsuite <subcommand>',
   describe: 'NetSuite integration setup (click-to-dial / CTI)',
@@ -81,6 +111,31 @@ export const netsuiteCommand = {
         .strict(),
       handler: () => {},
     })
+    .command({
+      command:  'm2m <action>',
+      describe: 'NetSuite machine-to-machine (OAuth 2.0 Client Credentials) setup',
+      builder: yy => yy
+        .command({
+          command: 'init',
+          describe: 'Generate the Velaro public certificate to upload into NetSuite',
+          builder: a => a.option('config', { type: 'number' }).option('company', { type: 'string' }).option('name', { type: 'string' }),
+          handler: m2mInitHandler,
+        })
+        .command({
+          command: 'save <configId>',
+          describe: 'Store the Client ID and Certificate ID from NetSuite',
+          builder: a => a.option('client-id', { type: 'string', demandOption: true }).option('certificate-id', { type: 'string', demandOption: true }),
+          handler: argv => m2mSaveHandler({ configId: argv.configId, clientId: argv['client-id'], certificateId: argv['certificate-id'] }),
+        })
+        .command({
+          command: 'verify <configId>',
+          describe: 'Run the per-check verification (token, REST, customer read)',
+          handler: m2mVerifyHandler,
+        })
+        .demandCommand(1, 'Specify an m2m action: init, save, or verify.')
+        .strict(),
+      handler: () => {},
+    })
     .demandCommand(1, 'Specify a netsuite subcommand.')
     .strict(),
   handler: () => {},

package/lib/commands/scraper.js

@@ -18,10 +18,21 @@ async function usage(argv) {
   for (const note of u.notes ?? []) console.log(`  Note: ${note}`);
 }
 
+async function verifyToken(argv) {
+  const t = await request('GET', 'ScraperJobs/VerifyToken');
+  if (argv.json) { console.log(JSON.stringify(t, null, 2)); return; }
+  console.log('\nScraper verification (give this to your web host to allowlist our crawler)');
+  console.log(`  Header:     ${t.header_name}: ${t.header_value}`);
+  console.log(`  Scraper IP: ${t.scraper_ip}`);
+  if (t.instructions) console.log(`\n${t.instructions}`);
+}
+
 export function scraperCommand(yargs) {
   return yargs
     .command('usage', 'Show scraper/upload/chunk usage for a site (staff only)', (y) => y
       .option('site', { type: 'number', demandOption: true, describe: 'Target site id' })
       .option('json', { type: 'boolean', describe: 'Print raw JSON' }), (a) => usage(a))
-    .demandCommand(1, 'Specify a subcommand: usage');
+    .command('verify-token', 'Show your scraper verification header + IP for web-host allowlisting', (y) => y
+      .option('json', { type: 'boolean', describe: 'Print raw JSON' }), (a) => verifyToken(a))
+    .demandCommand(1, 'Specify a subcommand: usage, verify-token');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/cli",
-  "version": "1.4.59",
+  "version": "1.4.61",
   "description": "Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.",
   "type": "module",
   "bin": {