@velaro/cli 1.4.89 → 1.4.90

package/bin/velaro.js

@@ -56,6 +56,7 @@ import { keywordIntelligenceCommand } from '../lib/commands/keyword-intelligence
 import { aiFieldExtractionCommand } from '../lib/commands/ai-field-extraction.js';
 import { sentimentCommand, qualityCommand, chatIntelligenceThemesCommand } from '../lib/commands/quality-reports.js';
 import { cannedLearningCommand } from '../lib/commands/canned-learning.js';
+import { chatIntelligenceTopicsCommand } from '../lib/commands/chat-intelligence-topics.js';
 import { focusCommand }       from '../lib/commands/focus.js';
 import { triageCommand }      from '../lib/commands/triage.js';
 import { automationDraftCommand } from '../lib/commands/automation-draft.js';
@@ -187,6 +188,7 @@ await yargs(hideBin(process.argv))
   .command(qualityCommand)
   .command(chatIntelligenceThemesCommand)
   .command(cannedLearningCommand)
+  .command(chatIntelligenceTopicsCommand)
   .command(focusCommand)
   .command(triageCommand)
   .command(automationDraftCommand)

package/lib/commands/billing.js

@@ -13,7 +13,7 @@ function fmtDate(iso) {
 // ── plan-status ───────────────────────────────────────────────────────────────
 
 async function planStatus() {
-  const s = await request('GET', '/BillingPayment/plan-status');
+  const s = await request('GET', '/api/BillingPayment/plan-status');
 
   console.log(`\nPlan Status — Site ${s.siteId}\n${'─'.repeat(50)}`);
 

package/lib/commands/chat-intelligence-topics.js

@@ -0,0 +1,47 @@
+import { messagingGet, messagingPost, messagingPut } from '../api.js';
+import { runCommand } from '../run.js';
+
+const print = (data) => console.log(JSON.stringify(data, null, 2));
+const list = (v) => (v == null ? [] : String(v).split(',').map((s) => s.trim()).filter(Boolean));
+
+// velaro chat-topics <show|set|template|merge|rename|retire|group|group-suggestions|suggestions|accept|dismiss|
+//                     reclassify-estimate|reclassify|analysis-estimate|analysis|proposal>
+// REST: messaging /ChatIntelligenceTopics/*  (site comes from the CLI session, never an argument)
+export const chatIntelligenceTopicsCommand = {
+  command: 'chat-topics <action>',
+  describe: 'Chat Intelligence topics: edit the list, merge/rename/group (no AI cost), suggested topics, optional reclassify and analysis',
+  builder: (y) => y
+    .positional('action', { choices: ['show', 'set', 'template', 'merge', 'rename', 'retire', 'group', 'group-suggestions', 'suggestions', 'accept', 'dismiss', 'reclassify-estimate', 'reclassify', 'analysis-estimate', 'analysis', 'proposal'] })
+    .option('topics', { type: 'string', describe: 'set: comma-separated topic list' })
+    .option('industry', { type: 'string', describe: 'template: insurance|healthcare|retail|ecommerce|financial|saas|government|manufacturing' })
+    .option('from', { type: 'string', describe: 'merge/rename/retire/group: comma-separated topics' })
+    .option('to', { type: 'string', describe: 'merge/rename: target topic' })
+    .option('group', { type: 'string', describe: 'group: group name (empty clears)' })
+    .option('suggestion', { type: 'string', describe: 'accept/dismiss/merge a suggested topic' })
+    .option('scope', { type: 'string', default: 'other', describe: 'reclassify: other (default) or all' })
+    .option('days', { type: 'number', default: 90 })
+    .option('max', { type: 'number', describe: 'reclassify: cap (server hard cap 500)' })
+    .option('confirm', { type: 'boolean', default: false, describe: 'reclassify/analysis: required after reading the estimate' })
+    .option('id', { type: 'string', describe: 'proposal: proposal id' })
+    .option('accept', { type: 'boolean', default: true, describe: 'proposal: --no-accept rejects' }),
+  handler: runCommand(async (a) => {
+    const base = '/ChatIntelligenceTopics';
+    const ops = (op) => messagingPost(`${base}/mapping`, { ops: [{ op, from: list(a.from), to: a.to ?? null, group: a.group ?? null }] });
+    switch (a.action) {
+      case 'show': return print(await messagingGet(base));
+      case 'set': return print(await messagingPut(base, { topics: list(a.topics) }));
+      case 'template': return print(await messagingPost(`${base}/template`, { industry: a.industry }));
+      case 'merge': case 'rename': case 'retire': case 'group': return print(await ops(a.action));
+      case 'group-suggestions': return print(await messagingGet(`${base}/group-suggestions?days=${a.days}`));
+      case 'suggestions': return print(await messagingGet(`${base}/suggestions?days=${a.days}`));
+      case 'accept': return print(await messagingPost(`${base}/suggestions/resolve`, { suggestion: a.suggestion, action: a.to ? 'merge' : 'accept', target: a.to ?? null }));
+      case 'dismiss': return print(await messagingPost(`${base}/suggestions/resolve`, { suggestion: a.suggestion, action: 'dismiss' }));
+      case 'reclassify-estimate': return print(await messagingGet(`${base}/reclassify/estimate?scope=${a.scope}&days=${a.days}${a.max ? `&max=${a.max}` : ''}`));
+      case 'reclassify': return print(await messagingPost(`${base}/reclassify`, { scope: a.scope, days: a.days, max: a.max ?? null, confirm: a.confirm }));
+      case 'analysis-estimate': return print(await messagingGet(`${base}/analysis/estimate`));
+      case 'analysis': return print(a.confirm ? await messagingPost(`${base}/analysis`, { confirm: true }) : await messagingGet(`${base}/analysis`));
+      case 'proposal': return print(await messagingPost(`${base}/analysis/proposals`, { id: a.id, accept: a.accept }));
+      default: throw new Error(`Unknown action ${a.action}`);
+    }
+  }),
+};

package/lib/commands/executive-insights.js

@@ -1,5 +1,5 @@
 import { writeFileSync } from 'node:fs';
-import { messagingGet, messagingPost } from '../api.js';
+import { messagingGet, messagingPost, messagingRequestText } from '../api.js';
 import { runCommand } from '../run.js';
 
 // -- velaro executive-insights ---------------------------------------------------
@@ -27,7 +27,7 @@ const frictionCommand = {
   handler: runCommand(async (argv) => {
     const qs = rangeArgs(argv);
     qs.set('limit', String(argv.limit ?? 20));
-    const r = await messagingGet(`/executive-insights/friction-radar?${qs}`);
+    const r = await messagingGet(`/api/executive-insights/friction-radar?${qs}`);
     console.log(`Friction radar: ${r.conversationsScanned} conversations scanned${r.truncated ? ' (truncated)' : ''}`);
     for (const t of r.topics ?? []) {
       const growth = t.isNew ? 'new' : t.growthPct == null ? 'n/a' : `${t.growthPct}%`;
@@ -41,7 +41,7 @@ const briefCommand = {
   describe: 'Executive brief: volume, sentiment, QA, Experience Impact, rising keywords, top friction',
   builder: rangeOptions,
   handler: runCommand(async (argv) => {
-    const r = await messagingGet(`/executive-insights/brief?${rangeArgs(argv)}`);
+    const r = await messagingGet(`/api/executive-insights/brief?${rangeArgs(argv)}`);
     console.log(JSON.stringify(r.brief, null, 2));
   }),
 };
@@ -51,12 +51,14 @@ const exportCommand = {
   describe: 'CSV of conversations with sentiment, QA score, tag, escalations, handle time and keywords',
   builder: (y) => rangeOptions(y).option('out', { type: 'string', describe: 'Write the CSV to this file (default: stdout)' }),
   handler: runCommand(async (argv) => {
-    const r = await messagingGet(`/executive-insights/export?${rangeArgs(argv)}`);
+    // The endpoint is GET api/executive-insights/export.csv and answers text/csv, not JSON.
+    const csv = await messagingRequestText('GET', `/api/executive-insights/export.csv?${rangeArgs(argv)}`);
     if (argv.out) {
-      writeFileSync(argv.out, r.csv, 'utf8');
-      console.log(`Wrote ${r.rows} rows to ${argv.out}${r.truncated ? ' (truncated at the row cap)' : ''}`);
+      writeFileSync(argv.out, csv, 'utf8');
+      const rows = Math.max(csv.split('\n').filter((l) => l.trim().length > 0).length - 1, 0);
+      console.log(`Wrote ${rows} rows to ${argv.out}`);
     } else {
-      process.stdout.write(r.csv);
+      process.stdout.write(csv);
     }
   }),
 };

package/lib/commands/index.js

@@ -74,7 +74,12 @@ const listCommand = {
       ]);
 
       // Quota from subscription
-      const sub = await get('/Subscription/Get').catch(() => null);
+      // GET /Subscription lives on the MESSAGING api (the old admin /Subscription/Get never existed, and its
+      // .catch(() => null) hid that, so the quota line silently never rendered).
+      const sub = await messagingGet('/Subscription').catch((err) => {
+        console.error(`\x1b[33m⚠ Could not read subscription quota: ${err.message}\x1b[0m`);
+        return null;
+      });
       const chunkCap = sub?.maxIndexedChunkTotal ?? 0;
       const usedChunks = indexes.reduce((s, i) => s + (i.documentCount ?? 0), 0);
 
@@ -169,7 +174,10 @@ const reingestCommand = {
     const creds = await getCredentials();
 
     // Check quota before allowing reingest
-    const sub = await get('/Subscription/Get').catch(() => null);
+    const sub = await messagingGet('/Subscription').catch((err) => {
+      console.error(`\x1b[33m⚠ Could not read subscription quota (index quota pre-check skipped): ${err.message}\x1b[0m`);
+      return null;
+    });
     if (!isVelaroAdmin(creds) && sub?.maxIndexedChunkTotal > 0) {
       const indexes = await messagingGet('/AzureIndexes/List').catch(() => []);
       const usedChunks = indexes.reduce((s, i) => s + (i.documentCount ?? 0), 0);

package/lib/commands/ingest.js

@@ -1,4 +1,4 @@
-import { getCredentials, post } from '../api.js';
+import { getCredentials, messagingPost } from '../api.js';
 import { runCommand }           from '../run.js';
 
 export const ingestCommand = {
@@ -18,7 +18,8 @@ export const ingestCommand = {
 
     console.log(`Triggering ingestion for job ${argv['job-id']} on site ${creds.siteId}...`);
 
-    const result = await post('/AzureIndexes/IngestJobDirect', {
+    // AzureIndexesController (IngestJobDirect) lives on the MESSAGING api; the admin api has no such route.
+    const result = await messagingPost('/AzureIndexes/IngestJobDirect', {
       siteId: creds.siteId,
       jobId:  argv['job-id'],
     });

package/lib/commands/kb.js

@@ -122,7 +122,8 @@ const reindexCommand = {
       }
     } else {
       console.log("Reindexing your site's KB articles\u2026");
-      const result = await post('/KBSearchIndex/reindex', {});
+      // KBSearchIndexController is routed api/kb/search (the old /KBSearchIndex/reindex 404'd).
+      const result = await post('/api/kb/search/reindex', {});
       if (result.success === false) {
         console.error(`❌ Failed: ${result.message}`);
       } else {

package/lib/commands/recruiting.js

@@ -1,6 +1,7 @@
 import { writeFileSync } from 'fs';
 import { messagingGet, messagingPost, messagingPut, messagingDel, getCredentials } from '../api.js';
 import { runCommand } from '../run.js';
+import { applicationIdPath, buildApplySettingsBody, buildBotSettingsBody } from '../recruiting-apply.js';
 
 // -- velaro recruiting --------------------------------------------------------
 // CLI surface for the Recruiting Bot: job-feed sync (JSON/XML/RSS/Indeed/
@@ -16,6 +17,7 @@ import { runCommand } from '../run.js';
 //   GET    Recruiting/Jobs?search=&location=&department= -> jobListing[]
 //   DELETE Recruiting/Jobs/{id}                        -> { success }
 //   GET    Recruiting/Applications                     -> candidateApplication[]
+//   GET    Recruiting/Applications/AtsFailures; POST Recruiting/Applications/{id}/AtsRetry; PUT Recruiting/ApplySettings { publicApplyEnabled?, autoCreateCaseTypeId? }; GET Recruiting/Applications/{id}/Resume (binary)
 //   GET    Recruiting/Applications/ExportEeoc           -> text/csv (Professional tier+, EnableRecruitingBotEeoc)
 
 const BOLD = '\x1b[1m';
@@ -123,6 +125,56 @@ async function applicationsExportEeocHandler(argv) {
   console.log(`\n${GRN}OK${RST} EEOC export saved to ${outPath}\n`);
 }
 
+async function atsFailuresHandler() {
+  const rows = await messagingGet('/Recruiting/Applications/AtsFailures');
+  if (!Array.isArray(rows) || !rows.length) {
+    console.log('\n  No applications with pending or failed ATS write-back.\n');
+    return;
+  }
+  console.log(`\n${BOLD}ATS write-back queue${RST} (${rows.length})\n`);
+  for (const r of rows) {
+    console.log(`  ${DIM}#${r.id}${RST}  ${r.candidateName}  ${r.atsSyncStatus}  ${DIM}attempts=${r.atsSyncAttempts} next=${r.atsSyncNextRetryAt || '-'} ${r.atsSyncLastError || ''}${RST}`);
+  }
+  console.log('');
+}
+
+async function atsRetryHandler(argv) {
+  const r = await messagingPost(applicationIdPath(argv.applicationId, 'AtsRetry'), {});
+  console.log(`\n${GRN}OK${RST} Application ${r.id} ATS status: ${r.atsSyncStatus} (attempts ${r.atsSyncAttempts})${r.atsSyncLastError ? `  ${RED}${r.atsSyncLastError}${RST}` : ''}\n`);
+}
+
+async function botSettingsHandler(argv) {
+  const keys = ['pageContext', 'revealPostedDate', 'revealDescription', 'revealApplyLink', 'publicApply', 'applyMode', 'tone', 'maxResults', 'greeting'];
+  const given = Object.fromEntries(keys.filter((k) => argv[k] !== undefined).map((k) => [k, argv[k]]));
+  // No flags = show current settings.
+  const r = Object.keys(given).length ? await messagingPut('/Recruiting/BotSettings', buildBotSettingsBody(given)) : await messagingGet('/Recruiting/BotSettings');
+  console.log(`\n${GRN}OK${RST} Recruiting bot settings:\n${JSON.stringify(r, null, 2)}\n`);
+}
+
+async function applySettingsHandler(argv) {
+  const r = await messagingPut('/Recruiting/ApplySettings', buildApplySettingsBody({ publicApply: argv.publicApply, caseTypeId: argv.caseTypeId }));
+  console.log(`\n${GRN}OK${RST} Apply settings: publicApplyEnabled=${r.publicApplyEnabled}, autoCreateCaseTypeId=${r.autoCreateCaseTypeId ?? '(none)'}\n`);
+}
+
+// Resume is a binary download; fetch raw (messagingGet JSON-parses) with the same auth/site header.
+async function resumeDownloadHandler(argv) {
+  const creds = await getCredentials();
+  const res = await fetch(`${creds.messagingApiBase.replace(/\/+$/, '')}${applicationIdPath(argv.applicationId, 'Resume')}`, {
+    headers: {
+      Authorization: `Bearer ${creds.velaroToken}`,
+      ...(creds.siteId ? { 'vmsg-siteId': String(creds.siteId) } : {}),
+    },
+  });
+  if (!res.ok) {
+    const text = await res.text().catch(() => '');
+    throw new Error(`GET Resume -> ${res.status}: ${text.slice(0, 300)}`);
+  }
+  const m = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(res.headers.get('content-disposition') || '');
+  const outPath = argv.out || (m ? decodeURIComponent(m[1]) : `resume-${argv.applicationId}`);
+  writeFileSync(outPath, Buffer.from(await res.arrayBuffer()));
+  console.log(`\n${GRN}OK${RST} Resume saved to ${outPath}\n`);
+}
+
 const syncCommand = {
   command:  'sync',
   describe: 'Manually trigger a Recruiting Bot job-feed sync for this site',
@@ -192,7 +244,43 @@ const applicationsCommand = {
       builder:  (y2) => y2.option('out', { describe: 'Output CSV file path (default: eeoc-export-<timestamp>.csv)', type: 'string' }),
       handler:  runCommand(applicationsExportEeocHandler),
     })
-    .demandCommand(1, 'Specify an applications subcommand: list | export-eeoc'),
+    .command({ command: 'ats-failures', describe: 'List applications whose ATS write-back is Pending/Failed/Abandoned', handler: runCommand(atsFailuresHandler) })
+    .command({
+      command:  'ats-retry <applicationId>',
+      describe: 'Retry the ATS write-back for one application now (resets attempts)',
+      builder:  (y2) => y2.positional('applicationId', { type: 'number' }),
+      handler:  runCommand(atsRetryHandler),
+    })
+    .command({
+      command:  'resume <applicationId>',
+      describe: 'Download an applicant resume',
+      builder:  (y2) => y2.positional('applicationId', { type: 'number' }).option('out', { describe: 'Output file path (default: original file name)', type: 'string' }),
+      handler:  runCommand(resumeDownloadHandler),
+    })
+    .command({
+      command:  'apply-settings',
+      describe: 'Set public apply form options (apply-if-present)',
+      builder:  (y2) => y2
+        .option('public-apply', { describe: 'Enable/disable the public apply endpoint for this site', type: 'boolean' })
+        .option('case-type-id', { describe: 'Case type to auto-create a case per application (0 clears)', type: 'number' }),
+      handler:  runCommand(applySettingsHandler),
+    })
+    .command({
+      command:  'bot-settings',
+      describe: 'Show or set what the recruiting bot reveals and how it behaves (omit flags to show)',
+      builder:  (y2) => y2
+        .option('page-context', { describe: 'Use the job from the host page (Velaro context call)', type: 'boolean' })
+        .option('reveal-posted-date', { describe: 'Let the bot share when a job was first listed', type: 'boolean' })
+        .option('reveal-description', { describe: 'Let the bot share the full job description', type: 'boolean' })
+        .option('reveal-apply-link', { describe: 'Let the bot share the listing link', type: 'boolean' })
+        .option('public-apply', { describe: 'Enable the public apply endpoint', type: 'boolean' })
+        .option('apply-mode', { describe: 'both | link | inproduct', type: 'string' })
+        .option('tone', { describe: 'friendly | professional | concise', type: 'string' })
+        .option('max-results', { describe: 'Most jobs per search (1-10)', type: 'number' })
+        .option('greeting', { describe: 'Opening greeting (500 chars max)', type: 'string' }),
+      handler:  runCommand(botSettingsHandler),
+    })
+    .demandCommand(1, 'Specify an applications subcommand: list | export-eeoc | ats-failures | ats-retry | resume | apply-settings | bot-settings'),
   handler: () => {},
 };
 

package/lib/commands/rule.js

@@ -1,4 +1,4 @@
-import { messagingGet as get, messagingPost as post, messagingDel as del } from '../api.js';
+import { messagingGet as get, messagingPost as post, messagingRequest } from '../api.js';
 import { requireFeature }  from '../subscription.js';
 import { runCommand }      from '../run.js';
 
@@ -79,7 +79,9 @@ const ruleDeleteCommand = {
   builder:  (y) => y.positional('id', { type: 'number', describe: 'Rule ID' }),
   handler:  runCommand(async (argv) => {
     await requireFeature('enableWorkflowRules', 'Routing Rules');
-    await del(`/Rules/${argv.id}`);
+    // RulesController.DeleteAsync is `[HttpDelete]` taking the rule in the BODY (DELETE /Rules {id}); there is no
+    // DELETE /Rules/{id} route (it 404'd). Verified live on staging 2026-10-12: DELETE /Rules {"id":N} -> 200.
+    await messagingRequest('DELETE', '/Rules', { id: argv.id });
     console.log(`Rule ${argv.id} deleted.`);
   }),
 };

package/lib/recruiting-apply.js

@@ -0,0 +1,53 @@
+// Pure helpers for the Recruiting public-apply / ATS write-back CLI commands.
+// Backend: velaro-messaging RecruitingController (Applications/AtsFailures, Applications/{id}/AtsRetry,
+// ApplySettings, Applications/{id}/Resume).
+
+export function applicationIdPath(id, suffix) {
+  const n = Number(id);
+  if (!Number.isInteger(n) || n <= 0) throw new Error('applicationId must be a positive integer.');
+  return `/Recruiting/Applications/${n}/${suffix}`;
+}
+
+// Apply-if-present body for PUT /Recruiting/ApplySettings. caseTypeId 0 clears the auto-case link.
+export function buildApplySettingsBody({ publicApply, caseTypeId } = {}) {
+  const body = {};
+  if (publicApply !== undefined) body.publicApplyEnabled = Boolean(publicApply);
+  if (caseTypeId !== undefined) {
+    const n = Number(caseTypeId);
+    if (!Number.isInteger(n) || n < 0) throw new Error('caseTypeId must be an integer >= 0 (0 clears).');
+    body.autoCreateCaseTypeId = n;
+  }
+  if (!Object.keys(body).length) throw new Error('Specify at least one of publicApply, caseTypeId.');
+  return body;
+}
+
+const APPLY_MODES = ['both', 'link', 'inproduct'];
+const TONES = ['friendly', 'professional', 'concise'];
+
+// Apply-if-present body for PUT /Recruiting/BotSettings (customer controls for the recruiting bot).
+export function buildBotSettingsBody(o = {}) {
+  const body = {};
+  const bools = { pageContext: 'pageContextEnabled', revealPostedDate: 'revealPostedDate', revealDescription: 'revealDescription', revealApplyLink: 'revealApplyLink', publicApply: 'publicApplyEnabled' };
+  for (const [k, field] of Object.entries(bools)) if (o[k] !== undefined) body[field] = Boolean(o[k]);
+  if (o.applyMode !== undefined) {
+    const m = String(o.applyMode).toLowerCase();
+    if (!APPLY_MODES.includes(m)) throw new Error(`applyMode must be one of: ${APPLY_MODES.join(', ')}.`);
+    body.applyMode = m;
+  }
+  if (o.tone !== undefined) {
+    const t = String(o.tone).toLowerCase();
+    if (!TONES.includes(t)) throw new Error(`tone must be one of: ${TONES.join(', ')}.`);
+    body.tone = t;
+  }
+  if (o.maxResults !== undefined) {
+    const n = Number(o.maxResults);
+    if (!Number.isInteger(n) || n < 1 || n > 10) throw new Error('maxResults must be an integer from 1 to 10.');
+    body.maxResults = n;
+  }
+  if (o.greeting !== undefined) {
+    if (String(o.greeting).length > 500) throw new Error('greeting must be 500 characters or fewer.');
+    body.greeting = String(o.greeting);
+  }
+  if (!Object.keys(body).length) throw new Error('Specify at least one bot setting.');
+  return body;
+}

package/lib/recruiting-apply.test.js

@@ -0,0 +1,28 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { applicationIdPath, buildApplySettingsBody, buildBotSettingsBody } from './recruiting-apply.js';
+
+test('application paths validate id', () => {
+  assert.equal(applicationIdPath(12, 'AtsRetry'), '/Recruiting/Applications/12/AtsRetry');
+  assert.equal(applicationIdPath('5', 'Resume'), '/Recruiting/Applications/5/Resume');
+  assert.throws(() => applicationIdPath('x', 'Resume'));
+  assert.throws(() => applicationIdPath(0, 'Resume'));
+});
+
+test('apply settings body is apply-if-present', () => {
+  assert.deepEqual(buildApplySettingsBody({ publicApply: true }), { publicApplyEnabled: true });
+  assert.deepEqual(buildApplySettingsBody({ caseTypeId: 0 }), { autoCreateCaseTypeId: 0 });
+  assert.deepEqual(buildApplySettingsBody({ publicApply: false, caseTypeId: 3 }), { publicApplyEnabled: false, autoCreateCaseTypeId: 3 });
+  assert.throws(() => buildApplySettingsBody({}));
+  assert.throws(() => buildApplySettingsBody({ caseTypeId: -1 }));
+});
+
+test('bot settings body is apply-if-present and validated', () => {
+  assert.deepEqual(buildBotSettingsBody({ revealPostedDate: false }), { revealPostedDate: false });
+  assert.deepEqual(buildBotSettingsBody({ applyMode: 'LINK', tone: 'Concise', maxResults: 3, pageContext: true, publicApply: false }), { pageContextEnabled: true, publicApplyEnabled: false, applyMode: 'link', tone: 'concise', maxResults: 3 });
+  assert.throws(() => buildBotSettingsBody({}));
+  assert.throws(() => buildBotSettingsBody({ applyMode: 'x' }));
+  assert.throws(() => buildBotSettingsBody({ tone: 'angry' }));
+  assert.throws(() => buildBotSettingsBody({ maxResults: 11 }));
+  assert.throws(() => buildBotSettingsBody({ greeting: 'g'.repeat(501) }));
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/cli",
-  "version": "1.4.89",
+  "version": "1.4.90",
   "description": "Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, MCP API keys, search indexes, and ops health.",
   "type": "module",
   "bin": {