@velaro/cli 1.4.88 → 1.4.90

package/bin/velaro.js

@@ -44,6 +44,7 @@ import { reportCommand }       from '../lib/commands/report.js';
 import { scheduleAdherenceCommand } from '../lib/commands/schedule-adherence.js';
 import { reportSubscriptionCommand } from '../lib/commands/report-subscription.js';
 import { experienceImpactCommand } from '../lib/commands/experience-impact.js';
+import { enterpriseReportsCommand } from '../lib/commands/enterprise-reports.js';
 import { reportBackfillCommand } from '../lib/commands/report-backfill.js';
 import { staffCommand } from '../lib/commands/staff.js';
 import { reportExplainCommand } from '../lib/commands/report-explain.js';
@@ -54,6 +55,8 @@ import { skillRoutingCommand } from '../lib/commands/skill-routing.js';
 import { keywordIntelligenceCommand } from '../lib/commands/keyword-intelligence.js';
 import { aiFieldExtractionCommand } from '../lib/commands/ai-field-extraction.js';
 import { sentimentCommand, qualityCommand, chatIntelligenceThemesCommand } from '../lib/commands/quality-reports.js';
+import { cannedLearningCommand } from '../lib/commands/canned-learning.js';
+import { chatIntelligenceTopicsCommand } from '../lib/commands/chat-intelligence-topics.js';
 import { focusCommand }       from '../lib/commands/focus.js';
 import { triageCommand }      from '../lib/commands/triage.js';
 import { automationDraftCommand } from '../lib/commands/automation-draft.js';
@@ -68,6 +71,7 @@ import { outboundActivityCommand } from '../lib/commands/outbound-activity.js';
 import { klaviyoMigrationCommand } from '../lib/commands/klaviyo-migration.js';
 import { telephonyCommand }     from '../lib/commands/telephony.js';
 import { teamsPhoneCommand }    from '../lib/commands/teams-phone.js';
+import { zoomPhoneCommand }     from '../lib/commands/zoom-phone.js';
 import { teamsCommand }         from '../lib/commands/teams.js';
 import { slackCommand }         from '../lib/commands/slack.js';
 import { webflowCommand }        from '../lib/commands/webflow.js';
@@ -171,6 +175,7 @@ await yargs(hideBin(process.argv))
   .command(executiveInsightsCommand)
   .command(scheduleAdherenceCommand)
   .command(experienceImpactCommand)
+  .command(enterpriseReportsCommand)
   .command(reportSubscriptionCommand)
   .command(reportBackfillCommand)
   .command({ command: 'staff', desc: 'Velaro staff: cross-site tools (backfill)', builder: staffCommand, handler: () => {} })
@@ -182,6 +187,8 @@ await yargs(hideBin(process.argv))
   .command(sentimentCommand)
   .command(qualityCommand)
   .command(chatIntelligenceThemesCommand)
+  .command(cannedLearningCommand)
+  .command(chatIntelligenceTopicsCommand)
   .command(focusCommand)
   .command(triageCommand)
   .command(automationDraftCommand)
@@ -196,6 +203,7 @@ await yargs(hideBin(process.argv))
   .command(klaviyoMigrationCommand)
   .command(telephonyCommand)
   .command(teamsPhoneCommand)
+  .command(zoomPhoneCommand)
   .command(teamsCommand)
   .command(slackCommand)
   .command(webflowCommand)

package/lib/commands/activity.js

@@ -1,4 +1,4 @@
-import { get, getCredentials } from '../api.js';
+import { get, getCredentials, messagingGet } from '../api.js';
 
 // ── helpers ──────────────────────────────────────────────────────────────────
 
@@ -86,7 +86,20 @@ async function activityHandler(argv) {
   params.set('pageSize', String(Math.min(100, argv.pageSize ?? 25)));
 
   const qs   = params.toString();
-  const data = await get(`${path}${qs ? '?' + qs : ''}`);
+  let data;
+  if (argv.site) {
+    // Staff: read ANOTHER site's Activity Log (customer/test site) without logging in as it.
+    const sp = new URLSearchParams();
+    if (isSkills) sp.set('slug', 'AiTool');
+    else if (argv.slug) sp.set('slug', argv.slug);
+    if (argv.severity && argv.severity !== 'All') sp.set('severity', argv.severity);
+    if (argv.search) sp.set('search', argv.search);
+    sp.set('take', String(Math.min(200, argv.pageSize ?? 25)));
+    const r = await messagingGet(`/SupportTools/sites/${argv.site}/integration-logs?${sp.toString()}`);
+    data = { items: r?.items ?? [], total: r?.count ?? 0 };
+  } else {
+    data = await get(`${path}${qs ? '?' + qs : ''}`);
+  }
 
   if (!data?.items?.length) {
     console.log('\nNo activity log entries.');
@@ -124,6 +137,7 @@ export const activityCommand = {
       type: 'string',
     })
     .option('search',   { describe: 'Message search',               type: 'string' })
+    .option('site',     { describe: "Staff only: read this site's Activity Log instead of your own", type: 'number' })
     .option('page',     { describe: 'Page number',    default: 1,   type: 'number' })
     .option('pageSize', { describe: 'Results per page', default: 25, type: 'number' })
     .option('entityType', { describe: '[audit-trail] Filter to one entity type, e.g. Workflow', type: 'string' })

package/lib/commands/avatar.js

@@ -30,6 +30,9 @@ export const avatarCommand = {
         console.log(`  Enabled:       ${data.enabled ? 'yes' : 'no'}`);
         console.log(`  "Call me":     ${data.showCallMeOption ? 'yes' : 'no'}`);
         console.log(`  Callback window: ${data.callbackConfirmWindowMinutes} min`);
+        console.log(`  Display name:  ${data.displayName || '(AI)'}`);
+        console.log(`  Badge shown:   ${data.showBadge ? 'yes' : 'no'}`);
+        console.log(`  Size:          ${data.sizePx}px`);
         console.log(`  Max minutes/mo:   ${data.maxAvatarMinutesPerMonth ?? '(plan default)'}`);
         console.log(`  Max TTS chars/mo: ${data.maxAvatarTtsChars ?? '(plan default)'}\n`);
       }),
@@ -43,7 +46,10 @@ export const avatarCommand = {
         .option('bot',      { type: 'string', describe: 'Reserved for a future per-bot override (not yet implemented on this endpoint)' })
         .option('avatar-id',{ type: 'string', describe: 'Provider-specific avatar/face ID. Omit for provider default.' })
         .option('voice',    { type: 'string', describe: 'ElevenLabs voice ID override' })
-        .option('call-me',  { type: 'boolean', describe: 'Show the "Call me instead" option. Omit on a re-run to leave it untouched.' }),
+        .option('call-me',  { type: 'boolean', describe: 'Show the "Call me instead" option. Omit on a re-run to leave it untouched.' })
+        .option('display-name', { type: 'string', describe: 'Visitor-facing avatar name on the badge (e.g. Moshky). Empty string resets to "AI".' })
+        .option('show-badge',   { type: 'boolean', describe: 'Show the name badge over the avatar video.' })
+        .option('size',         { type: 'number', describe: 'Avatar panel max width in px (160-640). Default 360.' }),
       handler:  runCommand(async argv => {
         if (argv.bot) {
           console.log(`\nNote: --bot is not yet supported by this endpoint — this sets the SITE-level avatar config only. Use the admin UI's per-bot override toggle for bot-specific control.\n`);
@@ -56,6 +62,9 @@ export const avatarCommand = {
         if (argv['avatar-id'] !== undefined) body.avatarId = argv['avatar-id'];
         if (argv.voice !== undefined) body.voiceId = argv.voice;
         if (argv['call-me'] !== undefined) body.showCallMeOption = argv['call-me'];
+        if (argv['display-name'] !== undefined) body.displayName = argv['display-name'];
+        if (argv['show-badge'] !== undefined) body.showBadge = argv['show-badge'];
+        if (argv.size !== undefined) body.sizePx = argv.size;
         const data = await request('POST', `/Avatar/superadmin/config?siteId=${argv.site}`, body);
         if (!data.success) throw new Error(data.error || 'Configure failed');
         console.log(`\n✓ AI Video Avatar enabled for site ${argv.site}`);

package/lib/commands/billing.js

@@ -13,7 +13,7 @@ function fmtDate(iso) {
 // ── plan-status ───────────────────────────────────────────────────────────────
 
 async function planStatus() {
-  const s = await request('GET', '/BillingPayment/plan-status');
+  const s = await request('GET', '/api/BillingPayment/plan-status');
 
   console.log(`\nPlan Status — Site ${s.siteId}\n${'─'.repeat(50)}`);
 

package/lib/commands/canned-learning.js

@@ -0,0 +1,31 @@
+import { messagingGet, messagingPost } from '../api.js';
+import { runCommand } from '../run.js';
+
+const print = (data) => console.log(JSON.stringify(data, null, 2));
+
+// velaro canned-learning <list|generate|approve|reject|rollback|edits|record-edit>  (REST: messaging /CannedLearning/*)
+export const cannedLearningCommand = {
+  command: 'canned-learning <action> [id]',
+  describe: 'AI canned message learning: list/generate suggestions, approve/reject/rollback (human review)',
+  builder: (y) => y
+    .positional('action', { choices: ['list', 'generate', 'approve', 'reject', 'rollback', 'edits', 'record-edit'] })
+    .positional('id', { type: 'number' })
+    .option('state', { type: 'string', default: 'pending_review', describe: 'pending_review|approved|rejected|rolled_back|all' })
+    .option('text', { type: 'string', describe: 'approve: edited replacement text (defaults to the AI proposal)' })
+    .option('notes', { type: 'string', describe: 'rollback: reason' })
+    .option('final-text', { type: 'string', describe: 'record-edit: the text the agent actually sent (redacted server-side)' }),
+  handler: runCommand(async (a) => {
+    const base = '/CannedLearning';
+    if (a.action === 'list') return print(await messagingGet(`${base}/suggestions?state=${encodeURIComponent(a.state)}`));
+    if (a.action === 'generate') return print(await messagingPost(`${base}/generate`, {}));
+    if (a.action === 'edits') return print(await messagingGet(`${base}/edit-events`));
+    if (a.action === 'record-edit') {
+      if (a.id == null || !a.finalText) throw new Error('record-edit requires a canned response id and --final-text');
+      return print(await messagingPost(`${base}/edit-events`, { cannedResponseId: a.id, finalText: a.finalText }));
+    }
+    if (a.id == null) throw new Error(`${a.action} requires a suggestion id`);
+    if (a.action === 'approve') return print(await messagingPost(`${base}/suggestions/${a.id}/approve`, { editedText: a.text ?? null }));
+    if (a.action === 'reject') return print(await messagingPost(`${base}/suggestions/${a.id}/reject`, {}));
+    return print(await messagingPost(`${base}/suggestions/${a.id}/rollback`, { notes: a.notes ?? null }));
+  }),
+};

package/lib/commands/chat-intelligence-topics.js

@@ -0,0 +1,47 @@
+import { messagingGet, messagingPost, messagingPut } from '../api.js';
+import { runCommand } from '../run.js';
+
+const print = (data) => console.log(JSON.stringify(data, null, 2));
+const list = (v) => (v == null ? [] : String(v).split(',').map((s) => s.trim()).filter(Boolean));
+
+// velaro chat-topics <show|set|template|merge|rename|retire|group|group-suggestions|suggestions|accept|dismiss|
+//                     reclassify-estimate|reclassify|analysis-estimate|analysis|proposal>
+// REST: messaging /ChatIntelligenceTopics/*  (site comes from the CLI session, never an argument)
+export const chatIntelligenceTopicsCommand = {
+  command: 'chat-topics <action>',
+  describe: 'Chat Intelligence topics: edit the list, merge/rename/group (no AI cost), suggested topics, optional reclassify and analysis',
+  builder: (y) => y
+    .positional('action', { choices: ['show', 'set', 'template', 'merge', 'rename', 'retire', 'group', 'group-suggestions', 'suggestions', 'accept', 'dismiss', 'reclassify-estimate', 'reclassify', 'analysis-estimate', 'analysis', 'proposal'] })
+    .option('topics', { type: 'string', describe: 'set: comma-separated topic list' })
+    .option('industry', { type: 'string', describe: 'template: insurance|healthcare|retail|ecommerce|financial|saas|government|manufacturing' })
+    .option('from', { type: 'string', describe: 'merge/rename/retire/group: comma-separated topics' })
+    .option('to', { type: 'string', describe: 'merge/rename: target topic' })
+    .option('group', { type: 'string', describe: 'group: group name (empty clears)' })
+    .option('suggestion', { type: 'string', describe: 'accept/dismiss/merge a suggested topic' })
+    .option('scope', { type: 'string', default: 'other', describe: 'reclassify: other (default) or all' })
+    .option('days', { type: 'number', default: 90 })
+    .option('max', { type: 'number', describe: 'reclassify: cap (server hard cap 500)' })
+    .option('confirm', { type: 'boolean', default: false, describe: 'reclassify/analysis: required after reading the estimate' })
+    .option('id', { type: 'string', describe: 'proposal: proposal id' })
+    .option('accept', { type: 'boolean', default: true, describe: 'proposal: --no-accept rejects' }),
+  handler: runCommand(async (a) => {
+    const base = '/ChatIntelligenceTopics';
+    const ops = (op) => messagingPost(`${base}/mapping`, { ops: [{ op, from: list(a.from), to: a.to ?? null, group: a.group ?? null }] });
+    switch (a.action) {
+      case 'show': return print(await messagingGet(base));
+      case 'set': return print(await messagingPut(base, { topics: list(a.topics) }));
+      case 'template': return print(await messagingPost(`${base}/template`, { industry: a.industry }));
+      case 'merge': case 'rename': case 'retire': case 'group': return print(await ops(a.action));
+      case 'group-suggestions': return print(await messagingGet(`${base}/group-suggestions?days=${a.days}`));
+      case 'suggestions': return print(await messagingGet(`${base}/suggestions?days=${a.days}`));
+      case 'accept': return print(await messagingPost(`${base}/suggestions/resolve`, { suggestion: a.suggestion, action: a.to ? 'merge' : 'accept', target: a.to ?? null }));
+      case 'dismiss': return print(await messagingPost(`${base}/suggestions/resolve`, { suggestion: a.suggestion, action: 'dismiss' }));
+      case 'reclassify-estimate': return print(await messagingGet(`${base}/reclassify/estimate?scope=${a.scope}&days=${a.days}${a.max ? `&max=${a.max}` : ''}`));
+      case 'reclassify': return print(await messagingPost(`${base}/reclassify`, { scope: a.scope, days: a.days, max: a.max ?? null, confirm: a.confirm }));
+      case 'analysis-estimate': return print(await messagingGet(`${base}/analysis/estimate`));
+      case 'analysis': return print(a.confirm ? await messagingPost(`${base}/analysis`, { confirm: true }) : await messagingGet(`${base}/analysis`));
+      case 'proposal': return print(await messagingPost(`${base}/analysis/proposals`, { id: a.id, accept: a.accept }));
+      default: throw new Error(`Unknown action ${a.action}`);
+    }
+  }),
+};

package/lib/commands/email-inbox.js

@@ -1,4 +1,4 @@
-import { messagingGet, messagingPatch, messagingDel } from '../api.js';
+import { messagingGet, messagingPost, messagingPatch, messagingDel } from '../api.js';
 import { runCommand } from '../run.js';
 
 // ── velaro email-inbox ────────────────────────────────────────────────────────
@@ -10,6 +10,7 @@ import { runCommand } from '../run.js';
 //   GET    SupportTools/sites/{siteId}/email-inbox/{provider}/list
 //   GET    SupportTools/sites/{siteId}/email-inbox/gmail/config-status
 //   PATCH  SupportTools/sites/{siteId}/email-inbox/{provider}/{id}/team
+//   POST   SupportTools/sites/{siteId}/email-inbox/outlook/{id}/resubscribe
 //   DELETE SupportTools/sites/{siteId}/email-inbox/{provider}/{id}
 
 function providerOption(y) {
@@ -56,7 +57,15 @@ export const emailInboxCommand = {
         console.log(`\nGmail global config status:`);
         console.log(`  OAuth configured:   ${status.oauthConfigured ? 'yes' : 'no'}`);
         console.log(`  DWD configured:     ${status.dwdConfigured ? 'yes' : 'no'}`);
-        console.log(`  Pub/Sub configured: ${status.pubSubConfigured ? 'yes' : 'no'}\n`);
+        console.log(`  Pub/Sub configured: ${status.pubSubConfigured ? 'yes' : 'no'}`);
+        if (status.clientIdPrefix) console.log(`  Client ID prefix:   ${status.clientIdPrefix}...`);
+        if (status.credentialPair) console.log(`  Credential pair:    ${status.credentialPair}${status.credentialPair === 'PairValid' ? '' : '  <-- ' + (status.credentialPairDetail ?? '')}`);
+        if (status.redirectUri) console.log(`  Redirect URI:       ${status.redirectUri}`);
+        if (status.pubSubTopic) console.log(`  Pub/Sub topic:      ${status.pubSubTopic}`);
+        for (const d of status.duplicateKeys ?? []) {
+          console.log(`  DUPLICATE SETTING:  ${d.colonKey} and ${d.underscoreKey}${d.valuesDiffer ? ' with DIFFERENT values - delete the stale one' : ' (same value)'}`);
+        }
+        console.log('');
       }),
     })
     .command({
@@ -73,6 +82,19 @@ export const emailInboxCommand = {
           : `\n✓ Mailbox #${argv.id} (${argv.provider}) reassigned to team ${argv['team-id']}.\n`);
       }),
     })
+    .command({
+      command:  'resubscribe',
+      describe: 'Outlook only: (re)create the Microsoft Graph inbound-mail subscription for a mailbox (fixes connected-but-receives-nothing)',
+      builder:  y => y
+        .option('site', { type: 'number', demandOption: true, describe: 'Site ID' })
+        .option('id',   { type: 'number', demandOption: true, describe: 'Mailbox integration ID (from "list")' }),
+      handler:  runCommand(async argv => {
+        const r = await messagingPost(`/SupportTools/sites/${argv.site}/email-inbox/outlook/${argv.id}/resubscribe`, {});
+        console.log(r.created
+          ? `\n✓ Mailbox #${argv.id} subscribed (id ${r.graphSubscriptionId}, expires ${r.graphSubscriptionExpiresAt}).\n`
+          : `\n✗ Subscription NOT created. ${r.note ?? ''}\n  Run: velaro activity OutlookInbox --site ${argv.site} --severity Error\n`);
+      }),
+    })
     .command({
       command:  'disconnect',
       describe: 'Disconnect and remove a mailbox connection',
@@ -84,5 +106,5 @@ export const emailInboxCommand = {
         console.log(`\n✓ Mailbox #${argv.id} (${argv.provider}) disconnected from site ${argv.site}.\n`);
       }),
     })
-    .demandCommand(1, 'Specify a subcommand: list | status | set-team | disconnect'),
+    .demandCommand(1, 'Specify a subcommand: list | status | set-team | resubscribe | disconnect'),
 };

package/lib/commands/enterprise-reports.js

@@ -0,0 +1,44 @@
+import { messagingGet, messagingPost } from '../api.js';
+import { runCommand } from '../run.js';
+
+// -- velaro enterprise-reports ----------------------------------------------------
+// Backend: velaro-messaging /api/enterprise-reports/* (Enterprise Reports package: enterprise-internal, default OFF;
+// every endpoint returns 403 when the site does not hold that package item). Site scope comes from auth, never an argument.
+
+const REPORTS = {
+  'program-breakdown': 'Compare websites, teams, platforms, devices or entry pages',
+  'agent-scorecard': 'Per agent: outcomes, speed, AI score, reviewed score, sentiment impact',
+  'qa-coverage': 'Share of resolved chats AI-scored and supervisor-reviewed',
+  'coaching-queue': 'Low-scoring chats nobody has reviewed, per agent',
+  'sentiment-breakdown': 'Sentiment by website, team, agent or topic',
+  'topic-radar': 'Topics by volume, growth, transfer rate and handle time',
+  'weekly-brief': 'Preview the Monday brief sections',
+  'weekly-brief-send-test': 'Email this week\'s brief to the signed-in user',
+};
+
+export const enterpriseReportsCommand = {
+  command:  'enterprise-reports <report>',
+  describe: 'Enterprise Reports package (enterprise-internal): ' + Object.keys(REPORTS).join(' | '),
+  builder:  (y) => y
+    .positional('report', { type: 'string', choices: Object.keys(REPORTS), describe: 'Which report' })
+    .option('from', { type: 'string', describe: 'yyyy-MM-dd (default: 30 days ago)' })
+    .option('to', { type: 'string', describe: 'yyyy-MM-dd, inclusive (default: today)' })
+    .option('group-by', { type: 'string', describe: 'program-breakdown: website|team|platform|device|entrypage; sentiment-breakdown: website|team|agent|theme' })
+    .option('deployment-id', { type: 'number', describe: 'Narrow to one website' })
+    .option('team-id', { type: 'number', describe: 'Narrow to one team' })
+    .option('threshold', { type: 'number', describe: 'coaching-queue: queue chats scored below this (1-100)' })
+    .option('per-agent', { type: 'number', describe: 'coaching-queue: chats listed per agent' })
+    .option('limit', { type: 'number', describe: 'topic-radar: max topics' })
+    .option('days', { type: 'number', describe: 'weekly-brief: days to cover' }),
+  handler:  runCommand(async (argv) => {
+    if (argv.report === 'weekly-brief-send-test') {
+      console.log(JSON.stringify(await messagingPost('/api/enterprise-reports/weekly-brief/send-test', {}), null, 2));
+      return;
+    }
+    const qs = new URLSearchParams();
+    const map = { from: 'from', to: 'to', groupBy: 'groupBy', deploymentId: 'deploymentId', teamId: 'teamId', threshold: 'threshold', perAgent: 'perAgent', limit: 'limit', days: 'days' };
+    for (const [arg, key] of Object.entries(map)) if (argv[arg] != null && argv[arg] !== '') qs.set(key, String(argv[arg]));
+    const q = qs.toString();
+    console.log(JSON.stringify(await messagingGet(`/api/enterprise-reports/${argv.report}${q ? `?${q}` : ''}`), null, 2));
+  }),
+};

package/lib/commands/entitlement.js

@@ -24,6 +24,21 @@ async function getSite(args) {
   }
 }
 
+async function enterpriseReportsPackage(args) {
+  const q = args.site ? `?siteId=${args.site}` : '';
+  const pkg = await request('GET', `Entitlements/packages/enterprise-reports${q}`);
+  console.log(`
+${pkg.displayName} (${pkg.packageKey}) - plan ${pkg.plan}, default OFF${pkg.siteId ? `, site ${pkg.siteId}` : ''}
+`);
+  for (const it of pkg.items) {
+    const mark = pkg.siteId ? (it.enabled ? '[ON ] ' : '[off] ') : '';
+    console.log(`${mark}${it.ask}. ${it.title}`);
+    console.log(`     key: ${it.featureKey}; builds on: ${it.buildsOn.join(', ')}`);
+    console.log(`     ${it.summary}`);
+  }
+  console.log('');
+}
+
 async function listFeatures() {
   const features = await request('GET', 'Entitlements/features');
 
@@ -175,6 +190,9 @@ export function entitlementCommand(yargs) {
       .option('all',   { type: 'boolean', desc: 'Show disabled features too (default: enabled only)' })
     , a => getSite(a))
     .command('list-features', 'List all registered entitlement feature keys', () => {}, () => listFeatures())
+    .command('enterprise-reports', 'Show the Enterprise Reports package items (with --site, which are ON for that site)', y => y
+      .option('site', { type: 'number', desc: 'Site ID' })
+    , a => enterpriseReportsPackage(a))
     .command('set-override', 'Enable or disable a feature for a specific site (overrides plan)', y => y
       .option('site',   { type: 'number',  demandOption: true, desc: 'Site ID' })
       .option('key',    { type: 'string',  demandOption: true, desc: 'Feature key, e.g. EnableIvr' })
@@ -209,5 +227,5 @@ export function entitlementCommand(yargs) {
       .option('key',      { type: 'string',  demandOption: true, desc: 'Feature key, e.g. EnableIvr' })
       .option('rollback', { type: 'boolean', desc: 'Pass to roll back this flag to Subscription.cs (default: go live)' })
     , a => setCutover(a))
-    .demandCommand(1, 'Specify a subcommand: get | list-features | set-override | remove-override | seed | seed-plans | backfill | backfill-sap-tiers | backfill-legacy-write-tiers | reconcile | comp | set-lock | list-cutover | set-cutover');
+    .demandCommand(1, 'Specify a subcommand: get | list-features | enterprise-reports | set-override | remove-override | seed | seed-plans | backfill | backfill-sap-tiers | backfill-legacy-write-tiers | reconcile | comp | set-lock | list-cutover | set-cutover');
 }

package/lib/commands/executive-insights.js

@@ -1,5 +1,5 @@
 import { writeFileSync } from 'node:fs';
-import { messagingGet, messagingPost } from '../api.js';
+import { messagingGet, messagingPost, messagingRequestText } from '../api.js';
 import { runCommand } from '../run.js';
 
 // -- velaro executive-insights ---------------------------------------------------
@@ -27,7 +27,7 @@ const frictionCommand = {
   handler: runCommand(async (argv) => {
     const qs = rangeArgs(argv);
     qs.set('limit', String(argv.limit ?? 20));
-    const r = await messagingGet(`/executive-insights/friction-radar?${qs}`);
+    const r = await messagingGet(`/api/executive-insights/friction-radar?${qs}`);
     console.log(`Friction radar: ${r.conversationsScanned} conversations scanned${r.truncated ? ' (truncated)' : ''}`);
     for (const t of r.topics ?? []) {
       const growth = t.isNew ? 'new' : t.growthPct == null ? 'n/a' : `${t.growthPct}%`;
@@ -41,7 +41,7 @@ const briefCommand = {
   describe: 'Executive brief: volume, sentiment, QA, Experience Impact, rising keywords, top friction',
   builder: rangeOptions,
   handler: runCommand(async (argv) => {
-    const r = await messagingGet(`/executive-insights/brief?${rangeArgs(argv)}`);
+    const r = await messagingGet(`/api/executive-insights/brief?${rangeArgs(argv)}`);
     console.log(JSON.stringify(r.brief, null, 2));
   }),
 };
@@ -51,12 +51,14 @@ const exportCommand = {
   describe: 'CSV of conversations with sentiment, QA score, tag, escalations, handle time and keywords',
   builder: (y) => rangeOptions(y).option('out', { type: 'string', describe: 'Write the CSV to this file (default: stdout)' }),
   handler: runCommand(async (argv) => {
-    const r = await messagingGet(`/executive-insights/export?${rangeArgs(argv)}`);
+    // The endpoint is GET api/executive-insights/export.csv and answers text/csv, not JSON.
+    const csv = await messagingRequestText('GET', `/api/executive-insights/export.csv?${rangeArgs(argv)}`);
     if (argv.out) {
-      writeFileSync(argv.out, r.csv, 'utf8');
-      console.log(`Wrote ${r.rows} rows to ${argv.out}${r.truncated ? ' (truncated at the row cap)' : ''}`);
+      writeFileSync(argv.out, csv, 'utf8');
+      const rows = Math.max(csv.split('\n').filter((l) => l.trim().length > 0).length - 1, 0);
+      console.log(`Wrote ${rows} rows to ${argv.out}`);
     } else {
-      process.stdout.write(r.csv);
+      process.stdout.write(csv);
     }
   }),
 };

package/lib/commands/index.js

@@ -74,7 +74,12 @@ const listCommand = {
       ]);
 
       // Quota from subscription
-      const sub = await get('/Subscription/Get').catch(() => null);
+      // GET /Subscription lives on the MESSAGING api (the old admin /Subscription/Get never existed, and its
+      // .catch(() => null) hid that, so the quota line silently never rendered).
+      const sub = await messagingGet('/Subscription').catch((err) => {
+        console.error(`\x1b[33m⚠ Could not read subscription quota: ${err.message}\x1b[0m`);
+        return null;
+      });
       const chunkCap = sub?.maxIndexedChunkTotal ?? 0;
       const usedChunks = indexes.reduce((s, i) => s + (i.documentCount ?? 0), 0);
 
@@ -169,7 +174,10 @@ const reingestCommand = {
     const creds = await getCredentials();
 
     // Check quota before allowing reingest
-    const sub = await get('/Subscription/Get').catch(() => null);
+    const sub = await messagingGet('/Subscription').catch((err) => {
+      console.error(`\x1b[33m⚠ Could not read subscription quota (index quota pre-check skipped): ${err.message}\x1b[0m`);
+      return null;
+    });
     if (!isVelaroAdmin(creds) && sub?.maxIndexedChunkTotal > 0) {
       const indexes = await messagingGet('/AzureIndexes/List').catch(() => []);
       const usedChunks = indexes.reduce((s, i) => s + (i.documentCount ?? 0), 0);

package/lib/commands/ingest.js

@@ -1,4 +1,4 @@
-import { getCredentials, post } from '../api.js';
+import { getCredentials, messagingPost } from '../api.js';
 import { runCommand }           from '../run.js';
 
 export const ingestCommand = {
@@ -18,7 +18,8 @@ export const ingestCommand = {
 
     console.log(`Triggering ingestion for job ${argv['job-id']} on site ${creds.siteId}...`);
 
-    const result = await post('/AzureIndexes/IngestJobDirect', {
+    // AzureIndexesController (IngestJobDirect) lives on the MESSAGING api; the admin api has no such route.
+    const result = await messagingPost('/AzureIndexes/IngestJobDirect', {
       siteId: creds.siteId,
       jobId:  argv['job-id'],
     });

package/lib/commands/kb.js

@@ -122,7 +122,8 @@ const reindexCommand = {
       }
     } else {
       console.log("Reindexing your site's KB articles\u2026");
-      const result = await post('/KBSearchIndex/reindex', {});
+      // KBSearchIndexController is routed api/kb/search (the old /KBSearchIndex/reindex 404'd).
+      const result = await post('/api/kb/search/reindex', {});
       if (result.success === false) {
         console.error(`❌ Failed: ${result.message}`);
       } else {

package/lib/commands/recruiting.js

@@ -1,6 +1,7 @@
 import { writeFileSync } from 'fs';
 import { messagingGet, messagingPost, messagingPut, messagingDel, getCredentials } from '../api.js';
 import { runCommand } from '../run.js';
+import { applicationIdPath, buildApplySettingsBody, buildBotSettingsBody } from '../recruiting-apply.js';
 
 // -- velaro recruiting --------------------------------------------------------
 // CLI surface for the Recruiting Bot: job-feed sync (JSON/XML/RSS/Indeed/
@@ -16,6 +17,7 @@ import { runCommand } from '../run.js';
 //   GET    Recruiting/Jobs?search=&location=&department= -> jobListing[]
 //   DELETE Recruiting/Jobs/{id}                        -> { success }
 //   GET    Recruiting/Applications                     -> candidateApplication[]
+//   GET    Recruiting/Applications/AtsFailures; POST Recruiting/Applications/{id}/AtsRetry; PUT Recruiting/ApplySettings { publicApplyEnabled?, autoCreateCaseTypeId? }; GET Recruiting/Applications/{id}/Resume (binary)
 //   GET    Recruiting/Applications/ExportEeoc           -> text/csv (Professional tier+, EnableRecruitingBotEeoc)
 
 const BOLD = '\x1b[1m';
@@ -123,6 +125,56 @@ async function applicationsExportEeocHandler(argv) {
   console.log(`\n${GRN}OK${RST} EEOC export saved to ${outPath}\n`);
 }
 
+async function atsFailuresHandler() {
+  const rows = await messagingGet('/Recruiting/Applications/AtsFailures');
+  if (!Array.isArray(rows) || !rows.length) {
+    console.log('\n  No applications with pending or failed ATS write-back.\n');
+    return;
+  }
+  console.log(`\n${BOLD}ATS write-back queue${RST} (${rows.length})\n`);
+  for (const r of rows) {
+    console.log(`  ${DIM}#${r.id}${RST}  ${r.candidateName}  ${r.atsSyncStatus}  ${DIM}attempts=${r.atsSyncAttempts} next=${r.atsSyncNextRetryAt || '-'} ${r.atsSyncLastError || ''}${RST}`);
+  }
+  console.log('');
+}
+
+async function atsRetryHandler(argv) {
+  const r = await messagingPost(applicationIdPath(argv.applicationId, 'AtsRetry'), {});
+  console.log(`\n${GRN}OK${RST} Application ${r.id} ATS status: ${r.atsSyncStatus} (attempts ${r.atsSyncAttempts})${r.atsSyncLastError ? `  ${RED}${r.atsSyncLastError}${RST}` : ''}\n`);
+}
+
+async function botSettingsHandler(argv) {
+  const keys = ['pageContext', 'revealPostedDate', 'revealDescription', 'revealApplyLink', 'publicApply', 'applyMode', 'tone', 'maxResults', 'greeting'];
+  const given = Object.fromEntries(keys.filter((k) => argv[k] !== undefined).map((k) => [k, argv[k]]));
+  // No flags = show current settings.
+  const r = Object.keys(given).length ? await messagingPut('/Recruiting/BotSettings', buildBotSettingsBody(given)) : await messagingGet('/Recruiting/BotSettings');
+  console.log(`\n${GRN}OK${RST} Recruiting bot settings:\n${JSON.stringify(r, null, 2)}\n`);
+}
+
+async function applySettingsHandler(argv) {
+  const r = await messagingPut('/Recruiting/ApplySettings', buildApplySettingsBody({ publicApply: argv.publicApply, caseTypeId: argv.caseTypeId }));
+  console.log(`\n${GRN}OK${RST} Apply settings: publicApplyEnabled=${r.publicApplyEnabled}, autoCreateCaseTypeId=${r.autoCreateCaseTypeId ?? '(none)'}\n`);
+}
+
+// Resume is a binary download; fetch raw (messagingGet JSON-parses) with the same auth/site header.
+async function resumeDownloadHandler(argv) {
+  const creds = await getCredentials();
+  const res = await fetch(`${creds.messagingApiBase.replace(/\/+$/, '')}${applicationIdPath(argv.applicationId, 'Resume')}`, {
+    headers: {
+      Authorization: `Bearer ${creds.velaroToken}`,
+      ...(creds.siteId ? { 'vmsg-siteId': String(creds.siteId) } : {}),
+    },
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => '');
+    throw new Error(`GET Resume -> ${res.status}: ${text.slice(0, 300)}`);
+  }
+  const m = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(res.headers.get('content-disposition') || '');
+  const outPath = argv.out || (m ? decodeURIComponent(m[1]) : `resume-${argv.applicationId}`);
+  writeFileSync(outPath, Buffer.from(await res.arrayBuffer()));
+  console.log(`\n${GRN}OK${RST} Resume saved to ${outPath}\n`);
+}
+
 const syncCommand = {
   command:  'sync',
   describe: 'Manually trigger a Recruiting Bot job-feed sync for this site',
@@ -192,7 +244,43 @@ const applicationsCommand = {
       builder:  (y2) => y2.option('out', { describe: 'Output CSV file path (default: eeoc-export-<timestamp>.csv)', type: 'string' }),
       handler:  runCommand(applicationsExportEeocHandler),
     })
-    .demandCommand(1, 'Specify an applications subcommand: list | export-eeoc'),
+    .command({ command: 'ats-failures', describe: 'List applications whose ATS write-back is Pending/Failed/Abandoned', handler: runCommand(atsFailuresHandler) })
+    .command({
+      command:  'ats-retry <applicationId>',
+      describe: 'Retry the ATS write-back for one application now (resets attempts)',
+      builder:  (y2) => y2.positional('applicationId', { type: 'number' }),
+      handler:  runCommand(atsRetryHandler),
+    })
+    .command({
+      command:  'resume <applicationId>',
+      describe: 'Download an applicant resume',
+      builder:  (y2) => y2.positional('applicationId', { type: 'number' }).option('out', { describe: 'Output file path (default: original file name)', type: 'string' }),
+      handler:  runCommand(resumeDownloadHandler),
+    })
+    .command({
+      command:  'apply-settings',
+      describe: 'Set public apply form options (apply-if-present)',
+      builder:  (y2) => y2
+        .option('public-apply', { describe: 'Enable/disable the public apply endpoint for this site', type: 'boolean' })
+        .option('case-type-id', { describe: 'Case type to auto-create a case per application (0 clears)', type: 'number' }),
+      handler:  runCommand(applySettingsHandler),
+    })
+    .command({
+      command:  'bot-settings',
+      describe: 'Show or set what the recruiting bot reveals and how it behaves (omit flags to show)',
+      builder:  (y2) => y2
+        .option('page-context', { describe: 'Use the job from the host page (Velaro context call)', type: 'boolean' })
+        .option('reveal-posted-date', { describe: 'Let the bot share when a job was first listed', type: 'boolean' })
+        .option('reveal-description', { describe: 'Let the bot share the full job description', type: 'boolean' })
+        .option('reveal-apply-link', { describe: 'Let the bot share the listing link', type: 'boolean' })
+        .option('public-apply', { describe: 'Enable the public apply endpoint', type: 'boolean' })
+        .option('apply-mode', { describe: 'both | link | inproduct', type: 'string' })
+        .option('tone', { describe: 'friendly | professional | concise', type: 'string' })
+        .option('max-results', { describe: 'Most jobs per search (1-10)', type: 'number' })
+        .option('greeting', { describe: 'Opening greeting (500 chars max)', type: 'string' }),
+      handler:  runCommand(botSettingsHandler),
+    })
+    .demandCommand(1, 'Specify an applications subcommand: list | export-eeoc | ats-failures | ats-retry | resume | apply-settings | bot-settings'),
   handler: () => {},
 };
 

package/lib/commands/rule.js

@@ -1,4 +1,4 @@
-import { messagingGet as get, messagingPost as post, messagingDel as del } from '../api.js';
+import { messagingGet as get, messagingPost as post, messagingRequest } from '../api.js';
 import { requireFeature }  from '../subscription.js';
 import { runCommand }      from '../run.js';
 
@@ -79,7 +79,9 @@ const ruleDeleteCommand = {
   builder:  (y) => y.positional('id', { type: 'number', describe: 'Rule ID' }),
   handler:  runCommand(async (argv) => {
     await requireFeature('enableWorkflowRules', 'Routing Rules');
-    await del(`/Rules/${argv.id}`);
+    // RulesController.DeleteAsync is `[HttpDelete]` taking the rule in the BODY (DELETE /Rules {id}); there is no
+    // DELETE /Rules/{id} route (it 404'd). Verified live on staging 2026-10-12: DELETE /Rules {"id":N} -> 200.
+    await messagingRequest('DELETE', '/Rules', { id: argv.id });
     console.log(`Rule ${argv.id} deleted.`);
   }),
 };

package/lib/commands/zoom-phone.js

@@ -0,0 +1,67 @@
+/**
+ * velaro zoom-phone - Zoom Phone (SiteVoiceConfig ProviderSlug="zoom") screen-pop config
+ *
+ *   velaro zoom-phone status                                  Show provider, saved-secret flag and Zoom account_id
+ *   velaro zoom-phone set --account-id ... [--webhook-secret] Save the Zoom account_id (and optionally the webhook secret)
+ *
+ * Backend contract: VoiceController GET/POST voice/admin/config (velaro-messaging). Site is
+ * resolved server-side from the auth context. The Zoom account_id is what the app-level webhook
+ * (POST /ZoomPhoneWebhook) routes events by; without it every call event is dropped.
+ * Repeatable end-to-end proof: scripts/smoke-zoom-phone.sh.
+ */
+
+import { messagingGet, messagingPost } from '../api.js';
+
+const GRN = '\x1b[32m';
+const YEL = '\x1b[33m';
+const DIM = '\x1b[2m';
+const BOLD = '\x1b[1m';
+const RST = '\x1b[0m';
+
+async function statusHandler() {
+  const c = await messagingGet('/voice/admin/config');
+  if (!c?.configured) {
+    console.log(`\n${DIM}No voice provider configured for this site.${RST}\n`);
+    return;
+  }
+  console.log(`\n${BOLD}Voice provider${RST}: ${c.providerSlug}`);
+  if (c.providerSlug !== 'zoom') {
+    console.log(`  ${YEL}Zoom Phone is not the active provider; "set" will refuse unless you switch it in the admin UI.${RST}\n`);
+    return;
+  }
+  console.log(`  Zoom account_id:      ${c.zoomAccountId || `${YEL}(not set - call events are dropped)${RST}`}`);
+  console.log(`  Webhook secret saved: ${c.hasWebhookSecret ? `${GRN}yes${RST}` : `${DIM}no${RST}`}\n`);
+}
+
+async function setHandler(argv) {
+  if (!argv.accountId && !argv.webhookSecret) throw new Error('Pass --account-id and/or --webhook-secret.');
+  const current = await messagingGet('/voice/admin/config');
+  if (current?.configured && current.providerSlug && current.providerSlug !== 'zoom') {
+    throw new Error(`Site already uses voice provider "${current.providerSlug}". Switch providers in the admin UI (explicit, destructive) before configuring Zoom Phone.`);
+  }
+  await messagingPost('/voice/admin/config', {
+    providerSlug: 'zoom',
+    zoomAccountId: argv.accountId ? String(argv.accountId).trim() : undefined,
+    webhookSecret: argv.webhookSecret || undefined,
+  });
+  console.log(`\n${GRN}✓${RST} Zoom Phone settings saved.`);
+  await statusHandler();
+}
+
+export const zoomPhoneCommand = {
+  command: 'zoom-phone <subcommand>',
+  describe: 'Zoom Phone screen-pop configuration (account_id + webhook secret)',
+  builder: y => y
+    .command({ command: 'status', describe: 'Show the Zoom Phone configuration for this site', builder: yy => yy, handler: statusHandler })
+    .command({
+      command: 'set',
+      describe: 'Save the Zoom account_id and/or webhook secret (apply-if-present)',
+      builder: yy => yy
+        .option('account-id', { describe: 'Zoom account_id from a webhook payload or Account Profile (not the account number)', type: 'string' })
+        .option('webhook-secret', { describe: 'Secret token from the Zoom Event Subscription', type: 'string' }),
+      handler: setHandler,
+    })
+    .demandCommand(1, 'Specify a zoom-phone subcommand.')
+    .strict(),
+  handler: () => {},
+};

package/lib/messaging-routes.test.js

@@ -9,7 +9,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const dir = path.join(path.dirname(fileURLToPath(import.meta.url)), 'commands');
-const MESSAGING_ONLY = ['/Teams/List', '/Deployment', '/Users/List', '/Workflows/List', '/Rules', '/Ticket/knowledge-overrides', '/UserStatus/admin', '/api/ivr/config', '/WooCommerce/billing', '/WooCommerce/auth', '/diagnostics/test-magento'];
+const MESSAGING_ONLY = ['/Teams/List', '/Deployment', '/Users/List', '/Workflows/List', '/Rules', '/Ticket/knowledge-overrides', '/UserStatus/admin', '/api/ivr/config', '/WooCommerce/billing', '/WooCommerce/auth', '/diagnostics/test-magento', '/voice/admin'];
 
 test('messaging-only routes are never called through the admin api helpers', () => {
   const offenders = [];

package/lib/recruiting-apply.js

@@ -0,0 +1,53 @@
+// Pure helpers for the Recruiting public-apply / ATS write-back CLI commands.
+// Backend: velaro-messaging RecruitingController (Applications/AtsFailures, Applications/{id}/AtsRetry,
+// ApplySettings, Applications/{id}/Resume).
+
+export function applicationIdPath(id, suffix) {
+  const n = Number(id);
+  if (!Number.isInteger(n) || n <= 0) throw new Error('applicationId must be a positive integer.');
+  return `/Recruiting/Applications/${n}/${suffix}`;
+}
+
+// Apply-if-present body for PUT /Recruiting/ApplySettings. caseTypeId 0 clears the auto-case link.
+export function buildApplySettingsBody({ publicApply, caseTypeId } = {}) {
+  const body = {};
+  if (publicApply !== undefined) body.publicApplyEnabled = Boolean(publicApply);
+  if (caseTypeId !== undefined) {
+    const n = Number(caseTypeId);
+    if (!Number.isInteger(n) || n < 0) throw new Error('caseTypeId must be an integer >= 0 (0 clears).');
+    body.autoCreateCaseTypeId = n;
+  }
+  if (!Object.keys(body).length) throw new Error('Specify at least one of publicApply, caseTypeId.');
+  return body;
+}
+
+const APPLY_MODES = ['both', 'link', 'inproduct'];
+const TONES = ['friendly', 'professional', 'concise'];
+
+// Apply-if-present body for PUT /Recruiting/BotSettings (customer controls for the recruiting bot).
+export function buildBotSettingsBody(o = {}) {
+  const body = {};
+  const bools = { pageContext: 'pageContextEnabled', revealPostedDate: 'revealPostedDate', revealDescription: 'revealDescription', revealApplyLink: 'revealApplyLink', publicApply: 'publicApplyEnabled' };
+  for (const [k, field] of Object.entries(bools)) if (o[k] !== undefined) body[field] = Boolean(o[k]);
+  if (o.applyMode !== undefined) {
+    const m = String(o.applyMode).toLowerCase();
+    if (!APPLY_MODES.includes(m)) throw new Error(`applyMode must be one of: ${APPLY_MODES.join(', ')}.`);
+    body.applyMode = m;
+  }
+  if (o.tone !== undefined) {
+    const t = String(o.tone).toLowerCase();
+    if (!TONES.includes(t)) throw new Error(`tone must be one of: ${TONES.join(', ')}.`);
+    body.tone = t;
+  }
+  if (o.maxResults !== undefined) {
+    const n = Number(o.maxResults);
+    if (!Number.isInteger(n) || n < 1 || n > 10) throw new Error('maxResults must be an integer from 1 to 10.');
+    body.maxResults = n;
+  }
+  if (o.greeting !== undefined) {
+    if (String(o.greeting).length > 500) throw new Error('greeting must be 500 characters or fewer.');
+    body.greeting = String(o.greeting);
+  }
+  if (!Object.keys(body).length) throw new Error('Specify at least one bot setting.');
+  return body;
+}

package/lib/recruiting-apply.test.js

@@ -0,0 +1,28 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { applicationIdPath, buildApplySettingsBody, buildBotSettingsBody } from './recruiting-apply.js';
+
+test('application paths validate id', () => {
+  assert.equal(applicationIdPath(12, 'AtsRetry'), '/Recruiting/Applications/12/AtsRetry');
+  assert.equal(applicationIdPath('5', 'Resume'), '/Recruiting/Applications/5/Resume');
+  assert.throws(() => applicationIdPath('x', 'Resume'));
+  assert.throws(() => applicationIdPath(0, 'Resume'));
+});
+
+test('apply settings body is apply-if-present', () => {
+  assert.deepEqual(buildApplySettingsBody({ publicApply: true }), { publicApplyEnabled: true });
+  assert.deepEqual(buildApplySettingsBody({ caseTypeId: 0 }), { autoCreateCaseTypeId: 0 });
+  assert.deepEqual(buildApplySettingsBody({ publicApply: false, caseTypeId: 3 }), { publicApplyEnabled: false, autoCreateCaseTypeId: 3 });
+  assert.throws(() => buildApplySettingsBody({}));
+  assert.throws(() => buildApplySettingsBody({ caseTypeId: -1 }));
+});
+
+test('bot settings body is apply-if-present and validated', () => {
+  assert.deepEqual(buildBotSettingsBody({ revealPostedDate: false }), { revealPostedDate: false });
+  assert.deepEqual(buildBotSettingsBody({ applyMode: 'LINK', tone: 'Concise', maxResults: 3, pageContext: true, publicApply: false }), { pageContextEnabled: true, publicApplyEnabled: false, applyMode: 'link', tone: 'concise', maxResults: 3 });
+  assert.throws(() => buildBotSettingsBody({}));
+  assert.throws(() => buildBotSettingsBody({ applyMode: 'x' }));
+  assert.throws(() => buildBotSettingsBody({ tone: 'angry' }));
+  assert.throws(() => buildBotSettingsBody({ maxResults: 11 }));
+  assert.throws(() => buildBotSettingsBody({ greeting: 'g'.repeat(501) }));
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/cli",
-  "version": "1.4.88",
+  "version": "1.4.90",
   "description": "Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.",
   "type": "module",
   "bin": {