@velaro/cli 1.4.87 → 1.4.89

package/bin/velaro.js

@@ -44,6 +44,7 @@ import { reportCommand }       from '../lib/commands/report.js';
 import { scheduleAdherenceCommand } from '../lib/commands/schedule-adherence.js';
 import { reportSubscriptionCommand } from '../lib/commands/report-subscription.js';
 import { experienceImpactCommand } from '../lib/commands/experience-impact.js';
+import { enterpriseReportsCommand } from '../lib/commands/enterprise-reports.js';
 import { reportBackfillCommand } from '../lib/commands/report-backfill.js';
 import { staffCommand } from '../lib/commands/staff.js';
 import { reportExplainCommand } from '../lib/commands/report-explain.js';
@@ -54,6 +55,7 @@ import { skillRoutingCommand } from '../lib/commands/skill-routing.js';
 import { keywordIntelligenceCommand } from '../lib/commands/keyword-intelligence.js';
 import { aiFieldExtractionCommand } from '../lib/commands/ai-field-extraction.js';
 import { sentimentCommand, qualityCommand, chatIntelligenceThemesCommand } from '../lib/commands/quality-reports.js';
+import { cannedLearningCommand } from '../lib/commands/canned-learning.js';
 import { focusCommand }       from '../lib/commands/focus.js';
 import { triageCommand }      from '../lib/commands/triage.js';
 import { automationDraftCommand } from '../lib/commands/automation-draft.js';
@@ -68,6 +70,7 @@ import { outboundActivityCommand } from '../lib/commands/outbound-activity.js';
 import { klaviyoMigrationCommand } from '../lib/commands/klaviyo-migration.js';
 import { telephonyCommand }     from '../lib/commands/telephony.js';
 import { teamsPhoneCommand }    from '../lib/commands/teams-phone.js';
+import { zoomPhoneCommand }     from '../lib/commands/zoom-phone.js';
 import { teamsCommand }         from '../lib/commands/teams.js';
 import { slackCommand }         from '../lib/commands/slack.js';
 import { webflowCommand }        from '../lib/commands/webflow.js';
@@ -95,6 +98,7 @@ import { diagnosticsCommand }       from '../lib/commands/diagnostics.js';
 import { aiSpendCommand }           from '../lib/commands/ai-spend.js';
 import { statusPageCommand }        from '../lib/commands/status-page.js';
 import { statusNotifyCommand }      from '../lib/commands/status-notify.js';
+import { statusSlaCommand }         from '../lib/commands/status-sla.js';
 import { emailInboxCommand }        from '../lib/commands/email-inbox.js';
 import { callbackCommand }          from '../lib/commands/callback.js';
 import { caseCommand }              from '../lib/commands/case.js';
@@ -170,6 +174,7 @@ await yargs(hideBin(process.argv))
   .command(executiveInsightsCommand)
   .command(scheduleAdherenceCommand)
   .command(experienceImpactCommand)
+  .command(enterpriseReportsCommand)
   .command(reportSubscriptionCommand)
   .command(reportBackfillCommand)
   .command({ command: 'staff', desc: 'Velaro staff: cross-site tools (backfill)', builder: staffCommand, handler: () => {} })
@@ -181,6 +186,7 @@ await yargs(hideBin(process.argv))
   .command(sentimentCommand)
   .command(qualityCommand)
   .command(chatIntelligenceThemesCommand)
+  .command(cannedLearningCommand)
   .command(focusCommand)
   .command(triageCommand)
   .command(automationDraftCommand)
@@ -195,6 +201,7 @@ await yargs(hideBin(process.argv))
   .command(klaviyoMigrationCommand)
   .command(telephonyCommand)
   .command(teamsPhoneCommand)
+  .command(zoomPhoneCommand)
   .command(teamsCommand)
   .command(slackCommand)
   .command(webflowCommand)
@@ -222,6 +229,7 @@ await yargs(hideBin(process.argv))
   .command(aiSpendCommand)
   .command(statusPageCommand)
   .command(statusNotifyCommand)
+  .command(statusSlaCommand)
   .command(emailInboxCommand)
   .command(callbackCommand)
   .command(caseCommand)

package/lib/api.js

@@ -90,3 +90,18 @@ export const messagingPost  = (path, body) => messagingRequest('POST', path, bod
 export const messagingPut   = (path, body) => messagingRequest('PUT',  path, body);
 export const messagingPatch = (path, body) => messagingRequest('PATCH', path, body);
 export const messagingDel   = (path)       => messagingRequest('DELETE', path);
+
+// Same as messagingRequest but returns the raw response text (for CSV downloads).
+export async function messagingRequestText(method, path, envOverride) {
+  const creds = await getCredentials(envOverride);
+  const res = await fetch(joinUrl(creds.messagingApiBase, path), {
+    method,
+    headers: {
+      Authorization: `Bearer ${creds.velaroToken}`,
+      ...(creds.siteId ? { 'vmsg-siteId': String(creds.siteId) } : {}),
+    },
+  });
+  const text = await res.text();
+  if (!res.ok) throw new Error(`${method} ${path} -> ${res.status}${text ? `: ${text}` : ''}`);
+  return text;
+}

package/lib/commands/activity.js

@@ -1,4 +1,4 @@
-import { get, getCredentials } from '../api.js';
+import { get, getCredentials, messagingGet } from '../api.js';
 
 // ── helpers ──────────────────────────────────────────────────────────────────
 
@@ -86,7 +86,20 @@ async function activityHandler(argv) {
   params.set('pageSize', String(Math.min(100, argv.pageSize ?? 25)));
 
   const qs   = params.toString();
-  const data = await get(`${path}${qs ? '?' + qs : ''}`);
+  let data;
+  if (argv.site) {
+    // Staff: read ANOTHER site's Activity Log (customer/test site) without logging in as it.
+    const sp = new URLSearchParams();
+    if (isSkills) sp.set('slug', 'AiTool');
+    else if (argv.slug) sp.set('slug', argv.slug);
+    if (argv.severity && argv.severity !== 'All') sp.set('severity', argv.severity);
+    if (argv.search) sp.set('search', argv.search);
+    sp.set('take', String(Math.min(200, argv.pageSize ?? 25)));
+    const r = await messagingGet(`/SupportTools/sites/${argv.site}/integration-logs?${sp.toString()}`);
+    data = { items: r?.items ?? [], total: r?.count ?? 0 };
+  } else {
+    data = await get(`${path}${qs ? '?' + qs : ''}`);
+  }
 
   if (!data?.items?.length) {
     console.log('\nNo activity log entries.');
@@ -124,6 +137,7 @@ export const activityCommand = {
       type: 'string',
     })
     .option('search',   { describe: 'Message search',               type: 'string' })
+    .option('site',     { describe: "Staff only: read this site's Activity Log instead of your own", type: 'number' })
     .option('page',     { describe: 'Page number',    default: 1,   type: 'number' })
     .option('pageSize', { describe: 'Results per page', default: 25, type: 'number' })
     .option('entityType', { describe: '[audit-trail] Filter to one entity type, e.g. Workflow', type: 'string' })

package/lib/commands/avatar.js

@@ -30,6 +30,9 @@ export const avatarCommand = {
         console.log(`  Enabled:       ${data.enabled ? 'yes' : 'no'}`);
         console.log(`  "Call me":     ${data.showCallMeOption ? 'yes' : 'no'}`);
         console.log(`  Callback window: ${data.callbackConfirmWindowMinutes} min`);
+        console.log(`  Display name:  ${data.displayName || '(AI)'}`);
+        console.log(`  Badge shown:   ${data.showBadge ? 'yes' : 'no'}`);
+        console.log(`  Size:          ${data.sizePx}px`);
         console.log(`  Max minutes/mo:   ${data.maxAvatarMinutesPerMonth ?? '(plan default)'}`);
         console.log(`  Max TTS chars/mo: ${data.maxAvatarTtsChars ?? '(plan default)'}\n`);
       }),
@@ -43,7 +46,10 @@ export const avatarCommand = {
         .option('bot',      { type: 'string', describe: 'Reserved for a future per-bot override (not yet implemented on this endpoint)' })
         .option('avatar-id',{ type: 'string', describe: 'Provider-specific avatar/face ID. Omit for provider default.' })
         .option('voice',    { type: 'string', describe: 'ElevenLabs voice ID override' })
-        .option('call-me',  { type: 'boolean', describe: 'Show the "Call me instead" option. Omit on a re-run to leave it untouched.' }),
+        .option('call-me',  { type: 'boolean', describe: 'Show the "Call me instead" option. Omit on a re-run to leave it untouched.' })
+        .option('display-name', { type: 'string', describe: 'Visitor-facing avatar name on the badge (e.g. Moshky). Empty string resets to "AI".' })
+        .option('show-badge',   { type: 'boolean', describe: 'Show the name badge over the avatar video.' })
+        .option('size',         { type: 'number', describe: 'Avatar panel max width in px (160-640). Default 360.' }),
       handler:  runCommand(async argv => {
         if (argv.bot) {
           console.log(`\nNote: --bot is not yet supported by this endpoint — this sets the SITE-level avatar config only. Use the admin UI's per-bot override toggle for bot-specific control.\n`);
@@ -56,6 +62,9 @@ export const avatarCommand = {
         if (argv['avatar-id'] !== undefined) body.avatarId = argv['avatar-id'];
         if (argv.voice !== undefined) body.voiceId = argv.voice;
         if (argv['call-me'] !== undefined) body.showCallMeOption = argv['call-me'];
+        if (argv['display-name'] !== undefined) body.displayName = argv['display-name'];
+        if (argv['show-badge'] !== undefined) body.showBadge = argv['show-badge'];
+        if (argv.size !== undefined) body.sizePx = argv.size;
         const data = await request('POST', `/Avatar/superadmin/config?siteId=${argv.site}`, body);
         if (!data.success) throw new Error(data.error || 'Configure failed');
         console.log(`\n✓ AI Video Avatar enabled for site ${argv.site}`);

package/lib/commands/canned-learning.js

@@ -0,0 +1,31 @@
+import { messagingGet, messagingPost } from '../api.js';
+import { runCommand } from '../run.js';
+
+const print = (data) => console.log(JSON.stringify(data, null, 2));
+
+// velaro canned-learning <list|generate|approve|reject|rollback|edits|record-edit>  (REST: messaging /CannedLearning/*)
+export const cannedLearningCommand = {
+  command: 'canned-learning <action> [id]',
+  describe: 'AI canned message learning: list/generate suggestions, approve/reject/rollback (human review)',
+  builder: (y) => y
+    .positional('action', { choices: ['list', 'generate', 'approve', 'reject', 'rollback', 'edits', 'record-edit'] })
+    .positional('id', { type: 'number' })
+    .option('state', { type: 'string', default: 'pending_review', describe: 'pending_review|approved|rejected|rolled_back|all' })
+    .option('text', { type: 'string', describe: 'approve: edited replacement text (defaults to the AI proposal)' })
+    .option('notes', { type: 'string', describe: 'rollback: reason' })
+    .option('final-text', { type: 'string', describe: 'record-edit: the text the agent actually sent (redacted server-side)' }),
+  handler: runCommand(async (a) => {
+    const base = '/CannedLearning';
+    if (a.action === 'list') return print(await messagingGet(`${base}/suggestions?state=${encodeURIComponent(a.state)}`));
+    if (a.action === 'generate') return print(await messagingPost(`${base}/generate`, {}));
+    if (a.action === 'edits') return print(await messagingGet(`${base}/edit-events`));
+    if (a.action === 'record-edit') {
+      if (a.id == null || !a.finalText) throw new Error('record-edit requires a canned response id and --final-text');
+      return print(await messagingPost(`${base}/edit-events`, { cannedResponseId: a.id, finalText: a.finalText }));
+    }
+    if (a.id == null) throw new Error(`${a.action} requires a suggestion id`);
+    if (a.action === 'approve') return print(await messagingPost(`${base}/suggestions/${a.id}/approve`, { editedText: a.text ?? null }));
+    if (a.action === 'reject') return print(await messagingPost(`${base}/suggestions/${a.id}/reject`, {}));
+    return print(await messagingPost(`${base}/suggestions/${a.id}/rollback`, { notes: a.notes ?? null }));
+  }),
+};

package/lib/commands/email-inbox.js

@@ -1,4 +1,4 @@
-import { messagingGet, messagingPatch, messagingDel } from '../api.js';
+import { messagingGet, messagingPost, messagingPatch, messagingDel } from '../api.js';
 import { runCommand } from '../run.js';
 
 // ── velaro email-inbox ────────────────────────────────────────────────────────
@@ -10,6 +10,7 @@ import { runCommand } from '../run.js';
 //   GET    SupportTools/sites/{siteId}/email-inbox/{provider}/list
 //   GET    SupportTools/sites/{siteId}/email-inbox/gmail/config-status
 //   PATCH  SupportTools/sites/{siteId}/email-inbox/{provider}/{id}/team
+//   POST   SupportTools/sites/{siteId}/email-inbox/outlook/{id}/resubscribe
 //   DELETE SupportTools/sites/{siteId}/email-inbox/{provider}/{id}
 
 function providerOption(y) {
@@ -56,7 +57,15 @@ export const emailInboxCommand = {
         console.log(`\nGmail global config status:`);
         console.log(`  OAuth configured:   ${status.oauthConfigured ? 'yes' : 'no'}`);
         console.log(`  DWD configured:     ${status.dwdConfigured ? 'yes' : 'no'}`);
-        console.log(`  Pub/Sub configured: ${status.pubSubConfigured ? 'yes' : 'no'}\n`);
+        console.log(`  Pub/Sub configured: ${status.pubSubConfigured ? 'yes' : 'no'}`);
+        if (status.clientIdPrefix) console.log(`  Client ID prefix:   ${status.clientIdPrefix}...`);
+        if (status.credentialPair) console.log(`  Credential pair:    ${status.credentialPair}${status.credentialPair === 'PairValid' ? '' : '  <-- ' + (status.credentialPairDetail ?? '')}`);
+        if (status.redirectUri) console.log(`  Redirect URI:       ${status.redirectUri}`);
+        if (status.pubSubTopic) console.log(`  Pub/Sub topic:      ${status.pubSubTopic}`);
+        for (const d of status.duplicateKeys ?? []) {
+          console.log(`  DUPLICATE SETTING:  ${d.colonKey} and ${d.underscoreKey}${d.valuesDiffer ? ' with DIFFERENT values - delete the stale one' : ' (same value)'}`);
+        }
+        console.log('');
       }),
     })
     .command({
@@ -73,6 +82,19 @@ export const emailInboxCommand = {
           : `\n✓ Mailbox #${argv.id} (${argv.provider}) reassigned to team ${argv['team-id']}.\n`);
       }),
     })
+    .command({
+      command:  'resubscribe',
+      describe: 'Outlook only: (re)create the Microsoft Graph inbound-mail subscription for a mailbox (fixes connected-but-receives-nothing)',
+      builder:  y => y
+        .option('site', { type: 'number', demandOption: true, describe: 'Site ID' })
+        .option('id',   { type: 'number', demandOption: true, describe: 'Mailbox integration ID (from "list")' }),
+      handler:  runCommand(async argv => {
+        const r = await messagingPost(`/SupportTools/sites/${argv.site}/email-inbox/outlook/${argv.id}/resubscribe`, {});
+        console.log(r.created
+          ? `\n✓ Mailbox #${argv.id} subscribed (id ${r.graphSubscriptionId}, expires ${r.graphSubscriptionExpiresAt}).\n`
+          : `\n✗ Subscription NOT created. ${r.note ?? ''}\n  Run: velaro activity OutlookInbox --site ${argv.site} --severity Error\n`);
+      }),
+    })
     .command({
       command:  'disconnect',
       describe: 'Disconnect and remove a mailbox connection',
@@ -84,5 +106,5 @@ export const emailInboxCommand = {
         console.log(`\n✓ Mailbox #${argv.id} (${argv.provider}) disconnected from site ${argv.site}.\n`);
       }),
     })
-    .demandCommand(1, 'Specify a subcommand: list | status | set-team | disconnect'),
+    .demandCommand(1, 'Specify a subcommand: list | status | set-team | resubscribe | disconnect'),
 };

package/lib/commands/enterprise-reports.js

@@ -0,0 +1,44 @@
+import { messagingGet, messagingPost } from '../api.js';
+import { runCommand } from '../run.js';
+
+// -- velaro enterprise-reports ----------------------------------------------------
+// Backend: velaro-messaging /api/enterprise-reports/* (Enterprise Reports package: enterprise-internal, default OFF;
+// every endpoint returns 403 when the site does not hold that package item). Site scope comes from auth, never an argument.
+
+const REPORTS = {
+  'program-breakdown': 'Compare websites, teams, platforms, devices or entry pages',
+  'agent-scorecard': 'Per agent: outcomes, speed, AI score, reviewed score, sentiment impact',
+  'qa-coverage': 'Share of resolved chats AI-scored and supervisor-reviewed',
+  'coaching-queue': 'Low-scoring chats nobody has reviewed, per agent',
+  'sentiment-breakdown': 'Sentiment by website, team, agent or topic',
+  'topic-radar': 'Topics by volume, growth, transfer rate and handle time',
+  'weekly-brief': 'Preview the Monday brief sections',
+  'weekly-brief-send-test': 'Email this week\'s brief to the signed-in user',
+};
+
+export const enterpriseReportsCommand = {
+  command:  'enterprise-reports <report>',
+  describe: 'Enterprise Reports package (enterprise-internal): ' + Object.keys(REPORTS).join(' | '),
+  builder:  (y) => y
+    .positional('report', { type: 'string', choices: Object.keys(REPORTS), describe: 'Which report' })
+    .option('from', { type: 'string', describe: 'yyyy-MM-dd (default: 30 days ago)' })
+    .option('to', { type: 'string', describe: 'yyyy-MM-dd, inclusive (default: today)' })
+    .option('group-by', { type: 'string', describe: 'program-breakdown: website|team|platform|device|entrypage; sentiment-breakdown: website|team|agent|theme' })
+    .option('deployment-id', { type: 'number', describe: 'Narrow to one website' })
+    .option('team-id', { type: 'number', describe: 'Narrow to one team' })
+    .option('threshold', { type: 'number', describe: 'coaching-queue: queue chats scored below this (1-100)' })
+    .option('per-agent', { type: 'number', describe: 'coaching-queue: chats listed per agent' })
+    .option('limit', { type: 'number', describe: 'topic-radar: max topics' })
+    .option('days', { type: 'number', describe: 'weekly-brief: days to cover' }),
+  handler:  runCommand(async (argv) => {
+    if (argv.report === 'weekly-brief-send-test') {
+      console.log(JSON.stringify(await messagingPost('/api/enterprise-reports/weekly-brief/send-test', {}), null, 2));
+      return;
+    }
+    const qs = new URLSearchParams();
+    const map = { from: 'from', to: 'to', groupBy: 'groupBy', deploymentId: 'deploymentId', teamId: 'teamId', threshold: 'threshold', perAgent: 'perAgent', limit: 'limit', days: 'days' };
+    for (const [arg, key] of Object.entries(map)) if (argv[arg] != null && argv[arg] !== '') qs.set(key, String(argv[arg]));
+    const q = qs.toString();
+    console.log(JSON.stringify(await messagingGet(`/api/enterprise-reports/${argv.report}${q ? `?${q}` : ''}`), null, 2));
+  }),
+};

package/lib/commands/entitlement.js

@@ -24,6 +24,21 @@ async function getSite(args) {
   }
 }
 
+async function enterpriseReportsPackage(args) {
+  const q = args.site ? `?siteId=${args.site}` : '';
+  const pkg = await request('GET', `Entitlements/packages/enterprise-reports${q}`);
+  console.log(`
+${pkg.displayName} (${pkg.packageKey}) - plan ${pkg.plan}, default OFF${pkg.siteId ? `, site ${pkg.siteId}` : ''}
+`);
+  for (const it of pkg.items) {
+    const mark = pkg.siteId ? (it.enabled ? '[ON ] ' : '[off] ') : '';
+    console.log(`${mark}${it.ask}. ${it.title}`);
+    console.log(`     key: ${it.featureKey}; builds on: ${it.buildsOn.join(', ')}`);
+    console.log(`     ${it.summary}`);
+  }
+  console.log('');
+}
+
 async function listFeatures() {
   const features = await request('GET', 'Entitlements/features');
 
@@ -175,6 +190,9 @@ export function entitlementCommand(yargs) {
       .option('all',   { type: 'boolean', desc: 'Show disabled features too (default: enabled only)' })
     , a => getSite(a))
     .command('list-features', 'List all registered entitlement feature keys', () => {}, () => listFeatures())
+    .command('enterprise-reports', 'Show the Enterprise Reports package items (with --site, which are ON for that site)', y => y
+      .option('site', { type: 'number', desc: 'Site ID' })
+    , a => enterpriseReportsPackage(a))
     .command('set-override', 'Enable or disable a feature for a specific site (overrides plan)', y => y
       .option('site',   { type: 'number',  demandOption: true, desc: 'Site ID' })
       .option('key',    { type: 'string',  demandOption: true, desc: 'Feature key, e.g. EnableIvr' })
@@ -209,5 +227,5 @@ export function entitlementCommand(yargs) {
       .option('key',      { type: 'string',  demandOption: true, desc: 'Feature key, e.g. EnableIvr' })
       .option('rollback', { type: 'boolean', desc: 'Pass to roll back this flag to Subscription.cs (default: go live)' })
     , a => setCutover(a))
-    .demandCommand(1, 'Specify a subcommand: get | list-features | set-override | remove-override | seed | seed-plans | backfill | backfill-sap-tiers | backfill-legacy-write-tiers | reconcile | comp | set-lock | list-cutover | set-cutover');
+    .demandCommand(1, 'Specify a subcommand: get | list-features | enterprise-reports | set-override | remove-override | seed | seed-plans | backfill | backfill-sap-tiers | backfill-legacy-write-tiers | reconcile | comp | set-lock | list-cutover | set-cutover');
 }

package/lib/commands/status-sla.js

@@ -0,0 +1,47 @@
+import { writeFileSync } from 'node:fs';
+import { messagingRequest, messagingRequestText } from '../api.js';
+
+// Staff SLA report for the public status page (velaro-messaging SuperAdmin/status-sla).
+// Endpoint is live only after velaro-messaging PR 2223 is deployed.
+
+export function buildStatusSlaQuery(argv) {
+  const p = new URLSearchParams();
+  if (argv.from) p.set('from', argv.from);
+  if (argv.to) p.set('to', argv.to);
+  p.set('platform', argv.platform || 'v20');
+  if (argv.includeMaintenance) p.set('includeMaintenance', 'true');
+  if (argv.includeDeployments) p.set('includeDeployments', 'true');
+  if (argv.includeExcludedChecks) p.set('includeExcludedChecks', 'true');
+  if (argv.degradedDown) p.set('degradedCountsAsDown', 'true');
+  if (argv.slowMs !== undefined) p.set('slowResponseMs', String(argv.slowMs));
+  p.set('format', argv.csv ? 'csv' : 'json');
+  return p.toString();
+}
+
+export const statusSlaCommand = {
+  command: 'status-sla',
+  describe: 'SLA / uptime report for the status page, per component (staff only)',
+  builder: (y) => y
+    .option('from', { type: 'string', demandOption: true, describe: 'Start date (YYYY-MM-DD)' })
+    .option('to', { type: 'string', demandOption: true, describe: 'End date (YYYY-MM-DD)' })
+    .option('platform', { type: 'string', default: 'v20', choices: ['v20', 'v11'] })
+    .option('include-maintenance', { type: 'boolean', default: false, describe: 'Count scheduled maintenance as downtime' })
+    .option('include-deployments', { type: 'boolean', default: false, describe: 'Count deployment windows as downtime' })
+    .option('include-excluded-checks', { type: 'boolean', default: false })
+    .option('degraded-down', { type: 'boolean', default: false, describe: 'Degraded counts as down' })
+    .option('slow-ms', { type: 'number', describe: 'Responses slower than this many ms count as slow' })
+    .option('csv', { type: 'boolean', default: false, describe: 'CSV output (stdout, or --out file)' })
+    .option('out', { type: 'string', describe: 'Write CSV to this file' })
+    .option('staging', { type: 'boolean', default: false, describe: 'Use the staging messaging API' }),
+  handler: async (argv) => {
+    const path = `SuperAdmin/status-sla?${buildStatusSlaQuery(argv)}`;
+    const env = argv.staging ? 'staging' : undefined;
+    if (argv.csv) {
+      const csv = await messagingRequestText('GET', path, env);
+      if (argv.out) { writeFileSync(argv.out, csv); console.error(`Wrote ${argv.out}`); }
+      else process.stdout.write(csv);
+      return;
+    }
+    console.log(JSON.stringify(await messagingRequest('GET', path, undefined, env), null, 2));
+  },
+};

package/lib/commands/zoom-phone.js

@@ -0,0 +1,67 @@
+/**
+ * velaro zoom-phone - Zoom Phone (SiteVoiceConfig ProviderSlug="zoom") screen-pop config
+ *
+ *   velaro zoom-phone status                                  Show provider, saved-secret flag and Zoom account_id
+ *   velaro zoom-phone set --account-id ... [--webhook-secret] Save the Zoom account_id (and optionally the webhook secret)
+ *
+ * Backend contract: VoiceController GET/POST voice/admin/config (velaro-messaging). Site is
+ * resolved server-side from the auth context. The Zoom account_id is what the app-level webhook
+ * (POST /ZoomPhoneWebhook) routes events by; without it every call event is dropped.
+ * Repeatable end-to-end proof: scripts/smoke-zoom-phone.sh.
+ */
+
+import { messagingGet, messagingPost } from '../api.js';
+
+const GRN = '\x1b[32m';
+const YEL = '\x1b[33m';
+const DIM = '\x1b[2m';
+const BOLD = '\x1b[1m';
+const RST = '\x1b[0m';
+
+async function statusHandler() {
+  const c = await messagingGet('/voice/admin/config');
+  if (!c?.configured) {
+    console.log(`\n${DIM}No voice provider configured for this site.${RST}\n`);
+    return;
+  }
+  console.log(`\n${BOLD}Voice provider${RST}: ${c.providerSlug}`);
+  if (c.providerSlug !== 'zoom') {
+    console.log(`  ${YEL}Zoom Phone is not the active provider; "set" will refuse unless you switch it in the admin UI.${RST}\n`);
+    return;
+  }
+  console.log(`  Zoom account_id:      ${c.zoomAccountId || `${YEL}(not set - call events are dropped)${RST}`}`);
+  console.log(`  Webhook secret saved: ${c.hasWebhookSecret ? `${GRN}yes${RST}` : `${DIM}no${RST}`}\n`);
+}
+
+async function setHandler(argv) {
+  if (!argv.accountId && !argv.webhookSecret) throw new Error('Pass --account-id and/or --webhook-secret.');
+  const current = await messagingGet('/voice/admin/config');
+  if (current?.configured && current.providerSlug && current.providerSlug !== 'zoom') {
+    throw new Error(`Site already uses voice provider "${current.providerSlug}". Switch providers in the admin UI (explicit, destructive) before configuring Zoom Phone.`);
+  }
+  await messagingPost('/voice/admin/config', {
+    providerSlug: 'zoom',
+    zoomAccountId: argv.accountId ? String(argv.accountId).trim() : undefined,
+    webhookSecret: argv.webhookSecret || undefined,
+  });
+  console.log(`\n${GRN}✓${RST} Zoom Phone settings saved.`);
+  await statusHandler();
+}
+
+export const zoomPhoneCommand = {
+  command: 'zoom-phone <subcommand>',
+  describe: 'Zoom Phone screen-pop configuration (account_id + webhook secret)',
+  builder: y => y
+    .command({ command: 'status', describe: 'Show the Zoom Phone configuration for this site', builder: yy => yy, handler: statusHandler })
+    .command({
+      command: 'set',
+      describe: 'Save the Zoom account_id and/or webhook secret (apply-if-present)',
+      builder: yy => yy
+        .option('account-id', { describe: 'Zoom account_id from a webhook payload or Account Profile (not the account number)', type: 'string' })
+        .option('webhook-secret', { describe: 'Secret token from the Zoom Event Subscription', type: 'string' }),
+      handler: setHandler,
+    })
+    .demandCommand(1, 'Specify a zoom-phone subcommand.')
+    .strict(),
+  handler: () => {},
+};

package/lib/messaging-routes.test.js

@@ -9,7 +9,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const dir = path.join(path.dirname(fileURLToPath(import.meta.url)), 'commands');
-const MESSAGING_ONLY = ['/Teams/List', '/Deployment', '/Users/List', '/Workflows/List', '/Rules', '/Ticket/knowledge-overrides', '/UserStatus/admin', '/api/ivr/config', '/WooCommerce/billing', '/WooCommerce/auth', '/diagnostics/test-magento'];
+const MESSAGING_ONLY = ['/Teams/List', '/Deployment', '/Users/List', '/Workflows/List', '/Rules', '/Ticket/knowledge-overrides', '/UserStatus/admin', '/api/ivr/config', '/WooCommerce/billing', '/WooCommerce/auth', '/diagnostics/test-magento', '/voice/admin'];
 
 test('messaging-only routes are never called through the admin api helpers', () => {
   const offenders = [];

package/lib/status-sla.test.js

@@ -0,0 +1,23 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { buildStatusSlaQuery } from './commands/status-sla.js';
+
+test('status-sla query maps flags to endpoint params', () => {
+  const q = new URLSearchParams(buildStatusSlaQuery({
+    from: '2026-09-01', to: '2026-09-30', platform: 'v11', includeMaintenance: true,
+    degradedDown: true, slowMs: 1500, csv: true,
+  }));
+  assert.equal(q.get('from'), '2026-09-01');
+  assert.equal(q.get('platform'), 'v11');
+  assert.equal(q.get('includeMaintenance'), 'true');
+  assert.equal(q.get('degradedCountsAsDown'), 'true');
+  assert.equal(q.get('slowResponseMs'), '1500');
+  assert.equal(q.get('format'), 'csv');
+  assert.equal(q.get('includeDeployments'), null);
+});
+
+test('status-sla query defaults to v20 json', () => {
+  const q = new URLSearchParams(buildStatusSlaQuery({ from: 'a', to: 'b' }));
+  assert.equal(q.get('platform'), 'v20');
+  assert.equal(q.get('format'), 'json');
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/cli",
-  "version": "1.4.87",
+  "version": "1.4.89",
   "description": "Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.",
   "type": "module",
   "bin": {