@flowapt/flowiq-cli 0.10.0 → 0.11.0

package/README.md

@@ -2148,7 +2148,7 @@ flowiq rules disable <rule_id>
 ### Org views — `flowiq org channels|whatsapp|health|automations|abandoned` (0.10.0)
 
 ```bash
-flowiq org channels <org>          # WhatsApp (provider, master switch), Messenger, Instagram, TikTok, email, Meta Ads, Zernio
+flowiq org channels <org>          # WhatsApp (provider, master switch), Messenger, Instagram, TikTok, email, Meta Ads (FlowIQ app or Zernio route), Zernio
 flowiq org channels --all          # census across every active org
 flowiq org whatsapp <org>          # the number's health straight from Meta: status, quality, tier, name status, webhook subscription
 flowiq org whatsapp --all          # every Meta org, unhealthy first
@@ -2160,7 +2160,13 @@ flowiq org abandoned <org> --disable 2 --commit
 ```
 
 `health` probes the org's OpenAI key with a one-token embedding, so an
-exhausted or invalid key shows as such rather than "present".
+exhausted or invalid key shows as such rather than "present". It probes the
+spare key (`feature_flags.spare_openai_key`) too: the agent, product search and
+both product syncs fall back to it, so a dead primary with a working spare is a
+`⚠` warning, not a problem (1 Oct 2026). The webhook count covers both hosts our
+Shopify webhooks use (`auth.flowiq.live` and the older `supabase.co`); before
+1 Oct 2026 it counted `supabase.co` only and read 0 on every org registered by
+`flowiq webhooks push`.
 
 ### Messages, org-wide — `flowiq messages search|failures|stats` (0.10.0)
 
@@ -2182,6 +2188,73 @@ flowiq messages stats <org> --since 6m
   (`cli_message_volume_summary`): template = broadcast_id, JSON payload, or no
   customer message in the preceding 24 h.
 
+### Members · users · steers · notes · products (0.11.0)
+
+Batch F of the request list. Three new topics, plus a long tail of verbs on
+existing ones (next section).
+
+```bash
+flowiq members list <org>                              # role · name · email · last sign-in · pending invitations
+flowiq members add <org> <email> --role member         # an EXISTING account (no account → invite from the app)
+flowiq members role <org> <email> admin|member|viewer  # the last admin cannot be demoted
+flowiq members rename <email> "Full Name"              # profiles.full_name, shown in every org
+flowiq members remove <org> <email> --confirm          # owner + last admin refused
+flowiq users lookup <email>                            # sign-in method, confirmation, last sign-in, every org + role
+flowiq steer list <contact_id> · steer add <contact_id> "Offer the 10% code" [--once] · steer clear <contact_id> [--id <id>] --confirm
+flowiq notes list <contact_id> · notes add <contact_id> "Vet to CS: …"
+flowiq products status <org> · products search <org> "whey protein" · products reconcile <org> --confirm
+```
+
+- **`steer`** is the inbox's supervisor instruction: vert injects every
+  unconsumed steer into the agent's history. An ongoing steer applies to EVERY
+  reply until it is deleted, and the inbox has no delete, which is why
+  `steer clear` exists (dry-run; the texts stay in the audit row).
+- **`products search`** calls the agent's own `fuzzy_match_products` RPC with
+  the agent's threshold (0.15), so "what does the agent find for X?" is answered
+  without a test send. `products status` counts rows with no embedding (the
+  agent cannot find those by meaning) and shows the last syncs; `reconcile`
+  queues the org on `products-reconcile-scheduler` (re-sync + re-embed).
+- **`members add` takes an existing account only.** Someone who has never
+  signed up goes through the app's invite flow (an invitation row + email);
+  the CLI says so rather than minting a login.
+
+### The 0.11.0 long tail (verbs added to existing topics)
+
+```bash
+flowiq links shorten <org> --url <u> --slug spring-sale --commit     # readable code; a taken slug falls back and says so
+flowiq links list <org> --code <code> | --to /collections/x | --all  # one code · by destination · every page (500 a call)
+flowiq links repoint <org> <code> --to <url> --commit                # move a live code (clicks + messages keep it)
+flowiq org list --number 27609751832                                 # the org behind a WhatsApp number / phone id / WABA
+flowiq org agent <org> on|off --commit [--yes]                       # the master switch; ON for everyone needs --yes
+flowiq org park <org> [--unpark] --confirm                           # organizations.inactive
+flowiq org flags set <org> product-tag-notes @notes.json             # {tag: sentence}; instagram_comments.* are objects now
+flowiq agent flags [--tool product_lookup] [--model luna]            # every active agent's model + tool gates
+flowiq tag ids <org> --ids-file ids.txt --tag vip --commit           # one tag on an explicit id list
+flowiq tag holders <org> vip [--all] [--csv]                         # who carries a tag
+flowiq tag field <org> --field whatsapp_id --any 27794975464 --exact # whole value, not a substring
+flowiq tag remove <org> vip --contacts a,b --confirm                 # only those contacts lose it
+flowiq prompts push <slug> --dry-run                                 # added / removed / changed sections, nothing written
+flowiq bc scheduled list <org> --detail                              # the queued send's body / button values + header
+flowiq templates show <org> <name>                                   # falls back to Meta when FlowIQ has no row
+flowiq templates attempts <org> --name x                             # + Meta's status / category history ("CATEGORY MOVED")
+flowiq test send <org> "hi" --tools --sender "Sofia"                # tool arguments + results; renames a synthetic test contact
+flowiq messages pull <contact_id>                                    # footer: sent by agent / broadcast / automation: <template>
+flowiq messages delete <contact_id> [--before 30d] [--sender-type tool-call] --confirm
+```
+
+- **`seg apply` sends one request per 4,000 ids** (the server already split its
+  DB calls; one request still timed out on 18k), and a failure names the chunk;
+  re-running is idempotent. **`seg plan --start-index N`** writes
+  `<slug>-from-NN.json` instead of overwriting the earlier plan (the record of
+  who got the earlier batches); an applied plan file is never overwritten.
+- **`bc send` audit rows and the `[CLI]` email now carry the audience** (python
+  reports no count on a real fire; the server counts the tag's broadcast-safe
+  contacts itself).
+- **`org agent`** is `organizations.wati_webhook_status`. Off = no customer gets
+  the AI. On with `vert.active false` + `vert.allowed_whatsapp_ids` = test mode.
+  On with `vert.active` not false = live for every customer, which needs
+  `--yes`; the command prints which of the three it would produce.
+
 ### Guide — `flowiq guide`
 
 Read the bundled docs in the terminal — no digging through node_modules.

package/TEAM-GUIDE.md

@@ -145,10 +145,22 @@ When you see it, run `npm i -g @flowapt/flowiq-cli` — a stale version also mea
 | How many messages did an org send last month, free-form vs template? | `flowiq messages stats <org_id> --since 6m` |
 | Is a client's WhatsApp number healthy / connected / rate-limited? | `flowiq org whatsapp <org_id>` (straight from Meta); every org: `flowiq org whatsapp --all` |
 | Which channels are connected (Messenger, Instagram, email…)? | `flowiq org channels <org_id>`; every org: `flowiq org channels --all` |
-| Is this client's agent ready to switch on? | `flowiq org health <org_id>` (master switch, keys probed, prompt, catalogue, webhooks, order sync, traffic) |
+| Is this client's agent ready to switch on? | `flowiq org health <org_id>` (master switch, keys probed incl. the spare key, prompt, catalogue, webhooks, order sync, traffic; ⚠ lines are warnings, ✗ lines block) |
 | What automated messages / flows / rules does an org have armed? | `flowiq org automations <org_id>` · `flowiq flows list <org_id>` (+ `flows status` for failures) · `flowiq rules list <org_id>` (+ `rules results <rule_id>`) · `flowiq org abandoned <org_id>` |
 | See what the team has asked the CLI to do | `flowiq gaps list` (open, most-hit first) · `flowiq gaps list --mine` · `flowiq gaps show <number>` · in the app: Changelog → **CLI requests** |
 | Close a request (Matt / Gidon) | `flowiq gaps status <number> --to done --fixed-in 0.9.8 --note "what shipped"` — emails everyone who reported or hit it |
+| Who is on a client's account, and give someone access | `flowiq members list <org_id>` · `flowiq members add <org_id> <email> --role member` (they must already have an account; otherwise invite from the app) · `flowiq members role <org_id> <email> admin` |
+| "I can't log in" / which orgs is this person on? | `flowiq users lookup <email>`: sign-in method, email confirmed or not, last sign-in, every org and role |
+| Tell the agent how to handle ONE customer, or stop an ongoing steer | `flowiq steer add <contact_id> "Offer the 10% code once"` (`--once` for the next reply only) · `flowiq steer list <contact_id>` · `flowiq steer clear <contact_id> --confirm` |
+| Leave a note for the team on a contact | `flowiq notes add <contact_id> "Vet to CS: …"` |
+| The agent cannot find a product the store has | `flowiq products search <org_id> "<what the customer typed>"` (the agent's own match) · `flowiq products status <org_id>` (rows with no embedding) · `flowiq products reconcile <org_id> --confirm` |
+| Which org owns this WhatsApp number? | `flowiq org list --number 27609751832` |
+| Switch an org's agent off (or on) for every customer | `flowiq org agent <org_id> off --commit` · back on: `flowiq org agent <org_id> on --commit --yes` (test mode first: `org flags set <org> vert.allowed_whatsapp_ids <numbers>` + `vert.active false`) |
+| A short link points at the wrong page | `flowiq links list <org_id> --code <code>` to see it · `flowiq links repoint <org_id> <code> --to <url> --commit` |
+| Check a prompt edit before it goes live | `flowiq prompts push <slug> --dry-run` — added / removed / changed sections against the live agent |
+| Tag a list of contact ids, or see who carries a tag | `flowiq tag ids <org_id> --ids-file ids.txt --tag vip --commit` · `flowiq tag holders <org_id> vip --csv` |
+| Why did the agent answer that? | `flowiq test send <org_id> "<the question>" --tools` shows each tool's arguments and result |
+| Was that message the agent, a broadcast or an automation? | `flowiq messages pull <contact_id>` ends with a "sent by" line per source |
 > **Publishing the CLI (maintainers only):** publish from a clean clone, never
 > from your working tree — `npm publish` packs whatever is on disk. A
 > `prepublishOnly` check now stops you if `cli/` differs from `origin/main`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowapt/flowiq-cli",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Command-line tool for FlowIQ staff: round-trip agent prompts, questionnaires, fine-tuning, pin-board tasks, webhooks, templates, agent-updates, chat exports, and live agent testing without ever touching service-role credentials.",
   "type": "module",
   "bin": {

package/src/batch-f.test.mjs

@@ -0,0 +1,63 @@
+// node --test src/batch-f.test.mjs — pure helpers behind the 0.11.0 topics.
+import test from "node:test";
+import assert from "node:assert/strict";
+import { diffSections } from "./commands/prompts.js";
+import { sentBy } from "./commands/messages.js";
+process.env.VITE_SUPABASE_URL ||= "https://example.supabase.co";
+process.env.SUPABASE_SERVICE_ROLE ||= "test-key";
+const reg = await import("../../api/_shared/feature-flag-registry.js");
+
+test("diffSections reports added / removed / changed by id and ignores untouched sections", () => {
+  const live = [
+    { id: "a", title: "Main", content: "hello" },
+    { id: "b", title: "Hours", content: "9-5", hidden: false },
+    { id: "c", title: "Old", content: "gone" },
+  ];
+  const local = [
+    { id: "a", title: "Main", content: "hello" },
+    { id: "b", title: "Hours", content: "9-6", hidden: true, channels: ["web"] },
+    { id: "d", title: "New", content: "x".repeat(12) },
+  ];
+  const d = diffSections(live, local);
+  assert.deepEqual(d.added, [{ title: "New", chars: 12 }]);
+  assert.deepEqual(d.removed, [{ title: "Old", chars: 4 }]);
+  assert.equal(d.changed.length, 1);
+  assert.equal(d.changed[0].title, "Hours");
+  assert.match(d.changed[0].what.join("; "), /content 3 → 3 chars; hidden false → true; channels "all" → \["web"\]/);
+  assert.equal(d.unchanged, false);
+  assert.equal(diffSections(live, live).unchanged, true);
+});
+
+test("diffSections notices a pure reorder", () => {
+  const live = [{ id: "a", title: "A", content: "1" }, { id: "b", title: "B", content: "2" }];
+  const d = diffSections(live, [live[1], live[0]]);
+  assert.equal(d.reordered, true);
+  assert.equal(d.unchanged, false);
+});
+
+test("sentBy labels broadcast, automation, rule and agent rows", () => {
+  assert.equal(sentBy({ broadcast_id: "x" }), "broadcast");
+  assert.equal(sentBy({ notification_template: "order_confirm_v1", notification_event: "orders/paid" }), "automation: order_confirm_v1 (orders/paid)");
+  assert.equal(sentBy({ notification_rule_id: "38f20704-aaaa-bbbb-cccc-dddddddddddd" }), "rule 38f20704");
+  assert.equal(sentBy({ sender_type: "bot-whatsapp" }), "agent");
+});
+
+test("product-tag-notes validator takes a {tag: sentence} map and refuses empties", () => {
+  const spec = reg.FLAG_REGISTRY["product-tag-notes"];
+  assert.deepEqual(reg.validateFlagValue(spec, '{"Free2024":" Ships free. "}'), { value: { Free2024: "Ships free." } });
+  assert.match(reg.validateFlagValue(spec, { Free2024: "" }).error, /non-empty sentence/);
+  assert.match(reg.validateFlagValue(spec, {}).error, /empty/);
+  assert.match(reg.validateFlagValue(spec, "true").error, /must be an object/);
+});
+
+test("instagram_comments legs are objects with a bounded message", () => {
+  const leg = reg.FLAG_REGISTRY["instagram_comments.private_reply"];
+  assert.equal(leg.type, "object");
+  assert.match(reg.validateFlagValue(leg, "true").error, /must be an object/);
+  assert.deepEqual(reg.validateFlagValue(leg, { enabled: true, message: " hi " }), { value: { enabled: true, message: "hi" } });
+  assert.match(reg.validateFlagValue(leg, { enabled: true }).error, /message is empty/);
+  assert.match(reg.validateFlagValue(leg, { enabled: true, message: "x".repeat(1001) }).error, /over 1000/);
+  const whole = reg.FLAG_REGISTRY["instagram_comments"];
+  assert.deepEqual(reg.validateFlagValue(whole, { enabled: true, ads_only: false, public_reply: { enabled: false } }), { value: { enabled: true, ads_only: false, public_reply: { enabled: false } } });
+  assert.match(reg.validateFlagValue(whole, { bogus: 1 }).error, /not a known key/);
+});

package/src/commands/agent-test.js

@@ -72,10 +72,22 @@ function checkExpectations(turn, replyText) {
   return results;
 }
 
-function printTurn(sc, t, userText, r, checks) {
+function printTurn(sc, t, userText, r, checks, opts = {}) {
   if (t === 0) console.log(`\n━━ ${sc.tq ? sc.tq + " · " : ""}${sc.title || sc.id} ━━`);
   console.log(`\n  🧑 ${userText}`);
   if (r.tool_calls?.length) console.log(`  ⚙  tools: ${r.tool_calls.join(", ")}`);
+  // --tools: what each tool was asked and what it answered (the tool-call rows
+  // vert writes). Without it a wrong answer could not be traced to the tool
+  // result that produced it.
+  if (opts.tools && r.tool_details?.length) {
+    for (const d of r.tool_details) {
+      console.log(`     ⚙ ${d.tool_name}${d.duration_ms != null ? ` (${d.duration_ms} ms)` : ""}${d.error ? `  ERROR ${d.error}` : ""}`);
+      if (d.request != null) console.log(`       in:  ${String(d.request).split("\n").join("\n            ")}`);
+      if (d.response != null) console.log(`       out: ${String(d.response).split("\n").join("\n            ")}`);
+    }
+  } else if (opts.tools && r.tool_calls?.length) {
+    console.log(`     (tool arguments / results are not stored for this org: switch on feature flag tool_logging, or the API predates 1 Oct 2026)`);
+  }
   if (r.reply) console.log(`  🤖 ${r.reply.split("\n").join("\n     ")}`);
   else console.log(`  ⚠  no reply — status=${r.status}${r.raw?.error ? " (" + r.raw.error + ")" : ""}`);
   for (const c of checks || []) {
@@ -103,7 +115,7 @@ export async function send(orgId, messageParts, opts = {}) {
   printWarnings(r);
   if (opts.clear && r.previous_memory_cutoff !== undefined) console.log(`# cleared first; previous memory_cutoff: ${r.previous_memory_cutoff ?? "(none)"}`);
   console.log(`# org=${r.org?.name} agent=${r.agent?.name}${r.agent?.is_active ? " (active)" : " (override)"} contact=${r.contact?.id}`);
-  printTurn({ title: "send", tq: "" }, 0, message, r, []);
+  printTurn({ title: "send", tq: "" }, 0, message, r, [], { tools: !!opts.tools });
 }
 
 async function runPack(orgId, pack, opts) {
@@ -128,7 +140,7 @@ async function runPack(orgId, pack, opts) {
       }
       const checks = checkExpectations(turn, r.reply);
       scResult.turns.push({ ...r, checks });
-      if (!opts.json) printTurn(sc, t, turn.text, r, checks);
+      if (!opts.json) printTurn(sc, t, turn.text, r, checks, { tools: !!opts.tools });
     }
     results.push(scResult);
   }

package/src/commands/agents.js

@@ -32,6 +32,37 @@ export async function list(orgId, opts = {}) {
   console.log("\n★ = active agent. Pass any id as --agent <id> to prompts/questionnaires/fine-tuning/agent config.");
 }
 
+// `flowiq agent flags [--tool product_lookup] [--model x] [--all] [--json]` —
+// every active org's active agent: model, reasoning, prompt switch and the
+// tool gates, one row per org. Filters narrow to the orgs that matter.
+export async function flags(opts = {}) {
+  let resp;
+  try { resp = await http.get("agents", { census: "flags", all: opts.all ? "1" : undefined }); }
+  catch (e) { console.error(`Census failed: ${e.message}`); process.exit(1); }
+  let rows = resp.agents || [];
+  if (opts.tool) {
+    const [k, v] = String(opts.tool).split("=");
+    const want = v === undefined ? true : !["false", "0", "off", "no"].includes(v.toLowerCase());
+    rows = rows.filter((r) => !r.missing && (r.tools?.[k] === want || (want === false && r.tools?.[k] === undefined)));
+  }
+  if (opts.model) rows = rows.filter((r) => String(r.model || "").includes(opts.model));
+  if (opts.json) { console.log(JSON.stringify({ ...resp, count: rows.length, agents: rows }, null, 2)); return; }
+  const pad = (s, n) => String(s ?? "").padEnd(n);
+  const short = { product_lookup: "lookup", ticket_tool_status: "tickets", postal_code_tool_status: "postal", restock_tool: "restock", view_cart_tool: "cart", block_tool_status: "block", email_request_tool: "email-req", shopify_products_web_chat: "web-products", woo_order_build: "woo-order", woo_tip_field: "woo-tip", woo_order_note_field: "woo-note", collapse_product_variants: "collapse", silent_option: "silent" };
+  console.log(`${rows.length} active agent(s)${opts.tool ? ` with ${opts.tool}` : ""}${opts.model ? ` on model ~${opts.model}` : ""}`);
+  console.log("");
+  console.log(`  ${pad("ORG", 26)} ${pad("AGENT", 18)} ${pad("MODEL", 20)} ${pad("REASON", 7)} ${pad("PROMPT", 9)} ${pad("SW", 3)} TOOLS ON`);
+  for (const r of rows) {
+    if (r.missing) { console.log(`  ${pad(r.organization_name.slice(0, 26), 26)} ⚠ active_whatsapp_agent ${r.agent_id} does not exist`); continue; }
+    const on = Object.entries(r.tools || {}).filter(([, v]) => v).map(([k]) => short[k] || k);
+    if (r.discount) on.push("discount");
+    if (r.custom_tools) on.push(`${r.custom_tools} custom`);
+    if (r.disabled_base_tools?.length) on.push(`-${r.disabled_base_tools.join(",-")}`);
+    console.log(`  ${pad(r.organization_name.slice(0, 26), 26)} ${pad(String(r.agent_name || "").slice(0, 18), 18)} ${pad(r.model || "house", 20)} ${pad(r.reasoning_effort || "—", 7)} ${pad(`${r.prompt_chars.toLocaleString()}${r.use_settings_prompt ? "" : " OFF"}`, 9)} ${pad(r.master_switch ? "on" : "OFF", 3)} ${on.join(" ") || "—"}`);
+  }
+  console.log(`\n  SW = agent master switch · PROMPT = chars (OFF = use_settings_prompt false) · columns: ${(resp.tool_columns || []).map((k) => `${short[k] || k}=${k}`).join(", ")}`);
+}
+
 export async function create(orgId, opts = {}) {
   if (!UUID_RE.test(orgId)) {
     console.error(`Error: "${orgId}" is not a valid organization UUID.`);

package/src/commands/broadcast.js

@@ -1815,6 +1815,15 @@ export async function scheduledList(orgId, opts = {}) {
     console.log(`    template ${s.template_name ?? "?"} → tag ${s.tag ?? "?"} · ${s.engine} · via ${s.source}${s.scheduled_by ? ` (${s.scheduled_by})` : ""}`);
     if (s.audience_at_schedule != null) console.log(`    ~${s.audience_at_schedule} recipients at schedule time`);
     if (s.reply_routing) console.log(`    replies → ${describeRouting(s.reply_routing)}`);
+    if (opts.detail) {
+      const bp = s.body_parameters && Object.keys(s.body_parameters).length ? s.body_parameters : null;
+      const bt = s.button_parameters && Object.keys(s.button_parameters).length ? s.button_parameters : null;
+      console.log(`    body:    ${bp ? Object.entries(bp).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join("  ") : "(no body values)"}`);
+      if (bt) console.log(`    buttons: ${Object.entries(bt).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join("  ")}`);
+      if (s.header_media) console.log(`    header:  ${typeof s.header_media === "string" ? s.header_media : JSON.stringify(s.header_media)}`);
+      if (s.card_overrides != null) console.log(`    cards:   ${s.card_overrides} card override(s)`);
+      if (!bp && !bt && !s.header_media && s.engine !== "python") console.log(`    (a node-engine row carries its values inside the request; --json shows them)`);
+    }
     if (s.processed_at) console.log(`    fired ${fmtSast(s.processed_at)} SAST${s.broadcast_id ? ` · broadcastId ${s.broadcast_id}` : ""}`);
     if (s.error_message) console.log(`    error: ${s.error_message}`);
   }

package/src/commands/links.js

@@ -7,7 +7,9 @@
 //
 //   flowiq links shorten <org> --url <u> [--url <u2>…] --campaign "Spring Promotion"
 //   flowiq links shorten <org> --file ./message.txt --campaign X --content ViewMore --domain linklnk.io
-//   flowiq links list <org> [--campaign X] [--limit 25]
+//   flowiq links shorten <org> --url <u> --slug spring-sale --commit     (readable code)
+//   flowiq links list <org> [--campaign X] [--code abc123] [--to /collections/x] [--limit 25] [--all]
+//   flowiq links repoint <org> <code> --to <url> [--commit]            (move a live code)
 //
 // NAMING — you do not have to get the tag right yourself. The house convention
 // is `Date_Campaign` (`9Sep_SpringPromotion`: the date the broadcast GOES OUT,
@@ -114,11 +116,13 @@ export async function shorten(orgId, opts = {}) {
       campaign,
       content,
       domain: opts.domain,
+      slug: opts.slug,
       dry_run: dryRun,
       confirm_new_campaign: !!opts.newCampaign,
     });
   } catch (e) {
     console.error(`Shorten failed: ${e.message}`);
+    if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`);
     process.exit(1);
   }
 
@@ -127,7 +131,7 @@ export async function shorten(orgId, opts = {}) {
   const utm = resp.utm
     ? `utm_source=${resp.utm.source} · utm_medium=${resp.utm.medium} · utm_campaign=${resp.utm.campaign} · utm_content=${resp.utm.content}`
     : "no UTM tags (plain short link)";
-  console.log(`${resp.organization_name} · ${resp.domain}`);
+  console.log(`${resp.organization_name} · ${resp.domain}${resp.slug ? ` · slug ${resp.slug}` : ""}`);
   console.log(`${utm}\n`);
   if (resp.campaign_conflicts?.length) {
     const c = resp.campaign_conflicts[0];
@@ -169,30 +173,69 @@ export async function shorten(orgId, opts = {}) {
 
 export async function list(orgId, opts = {}) {
   requireOrg(orgId);
-  let resp;
-  try {
-    resp = await http.post("links", {
-      organization_id: orgId,
-      action: "list",
-      campaign: opts.campaign,
-      limit: opts.limit,
-    });
-  } catch (e) {
-    console.error(`List failed: ${e.message}`);
-    process.exit(1);
+  // --all walks every page (500 a call) so a whole campaign or a whole org can
+  // be exported; without it the first page is the answer and has_more says so.
+  const pageSize = opts.all ? 500 : (opts.limit ? Number(opts.limit) : 25);
+  const links = [];
+  let offset = 0, resp, hasMore = false;
+  for (;;) {
+    try {
+      resp = await http.post("links", {
+        organization_id: orgId,
+        action: "list",
+        campaign: opts.campaign,
+        code: opts.code,
+        to: opts.to,
+        limit: pageSize,
+        offset,
+      });
+    } catch (e) {
+      console.error(`List failed: ${e.message}`);
+      process.exit(1);
+    }
+    links.push(...(resp.links || []));
+    hasMore = !!resp.has_more;
+    if (!opts.all || !hasMore || !(resp.links || []).length) break;
+    offset += (resp.links || []).length;
+    if (offset > 50000) break;
   }
 
-  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (opts.json) { console.log(JSON.stringify({ ...resp, count: links.length, links, has_more: hasMore }, null, 2)); return; }
 
-  if (!resp.links.length) {
-    console.log(opts.campaign ? `No links on ${resp.organization_name} for campaign "${opts.campaign}".` : `No links on ${resp.organization_name}.`);
+  const what = [opts.campaign && `campaign "${opts.campaign}"`, opts.code && `code "${opts.code}"`, opts.to && `destination containing "${opts.to}"`].filter(Boolean).join(", ");
+  if (!links.length) {
+    console.log(what ? `No links on ${resp.organization_name} for ${what}.` : `No links on ${resp.organization_name}.`);
     return;
   }
   const pad = (s, n) => String(s ?? "").padEnd(n);
-  console.log(`${pad("CODE", 10)}${pad("CLICKS", 8)}${pad("CREATED", 12)}URL`);
-  for (const l of resp.links) {
+  const codeW = Math.min(50, Math.max(10, ...links.map((l) => String(l.code || "").length + 2)));
+  console.log(`${pad("CODE", codeW)}${pad("CLICKS", 8)}${pad("CREATED", 12)}URL`);
+  for (const l of links) {
     const day = String(l.created_at || "").slice(0, 10);
-    console.log(`${pad(l.code, 10)}${pad(l.clicks ?? 0, 8)}${pad(day, 12)}${l.full_url}`);
+    console.log(`${pad(l.code, codeW)}${pad(l.clicks ?? 0, 8)}${pad(day, 12)}${l.full_url}${l.is_active === false ? "  (inactive)" : ""}${l.per_message ? "  (per-message)" : ""}`);
+  }
+  console.log(`\n${links.length} link(s)${what ? ` · ${what}` : ""}${hasMore ? ` · more exist (--all, or --limit up to 500)` : ""}`);
+}
+
+// `flowiq links repoint <org> <code> --to <url> [--commit]` — move where a
+// live code sends people. The code stays in every message that carries it.
+export async function repoint(orgId, code, opts = {}) {
+  requireOrg(orgId);
+  if (!code) { console.error("Error: pass the short code, e.g. flowiq links repoint <org> VVSSh2 --to https://…"); process.exit(1); }
+  if (!opts.to) { console.error("Error: --to <url> is required (the new destination page)."); process.exit(1); }
+  let resp;
+  try {
+    resp = await http.post("links", { organization_id: orgId, action: "repoint", code, url: opts.to, dry_run: !opts.commit, confirm: !!opts.commit });
+  } catch (e) {
+    console.error(`Repoint failed: ${e.message}`);
+    if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`);
+    process.exit(1);
   }
-  console.log(`\n${resp.count} link(s)${opts.campaign ? ` · campaign "${opts.campaign}"` : ""}`);
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name} · ${resp.code} (${resp.clicks ?? 0} clicks${resp.is_active === false ? ", inactive" : ""})`);
+  console.log(`  from: ${resp.from}`);
+  console.log(`  to:   ${resp.to}`);
+  if (resp.unchanged) { console.log("\nAlready points there — nothing to do."); return; }
+  if (resp.dry_run) console.log("\nDRY RUN — nothing changed. Add --commit to repoint.");
+  else console.log(`\n✓ repointed. Undo: flowiq links repoint ${orgId} ${resp.code} --to '${resp.from}' --commit`);
 }

package/src/commands/members.js

@@ -0,0 +1,95 @@
+// `flowiq members list|add|role|rename|remove` + `flowiq users lookup` — an
+// org's people and one user across orgs (server: api/cli/members.js).
+
+import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const pad = (s, n) => String(s ?? "").padEnd(n);
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
+const requireOrg = (v) => { if (!UUID_RE.test(v || "")) { console.error(`Error: "${v}" is not a valid organization UUID.`); process.exit(1); } };
+const who = (v) => (UUID_RE.test(v || "") ? { user_id: v } : { email: v });
+
+export async function list(orgId, opts = {}) {
+  requireOrg(orgId);
+  let resp;
+  try { resp = await http.get("members", { organization_id: orgId }); } catch (e) { fail("List failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name}: ${resp.count} member(s)${resp.pending_invitations.length ? ` · ${resp.pending_invitations.length} pending invitation(s)` : ""}`);
+  console.log("");
+  console.log(`  ${pad("ROLE", 7)} ${pad("NAME", 24)} ${pad("EMAIL", 34)} ${pad("LAST SIGN-IN", 18)} SINCE`);
+  const order = { admin: 0, member: 1, viewer: 2 };
+  for (const m of [...resp.members].sort((a, b) => (order[a.role] ?? 9) - (order[b.role] ?? 9) || String(a.full_name || "").localeCompare(String(b.full_name || "")))) {
+    const flags = [m.is_owner && "owner", m.status !== "active" && m.status, m.view_only && "view-only", m.account_missing && "NO ACCOUNT", m.profile_deleted && "profile deleted"].filter(Boolean).join(", ");
+    console.log(`  ${pad(m.role, 7)} ${pad((m.full_name || "—").slice(0, 24), 24)} ${pad((m.email || "?").slice(0, 34), 34)} ${pad(m.last_sign_in_at ? fmtSast(m.last_sign_in_at) : "never", 18)} ${String(m.since || "").slice(0, 10)}${flags ? `  (${flags})` : ""}`);
+  }
+  for (const i of resp.pending_invitations) console.log(`  ${pad("invite", 7)} ${pad("—", 24)} ${pad(i.email, 34)} ${pad("pending", 18)} ${String(i.created_at || "").slice(0, 10)}  (${i.role})`);
+  console.log(`\nflowiq members add ${orgId} <email> --role member · role ${orgId} <email> admin|member|viewer · remove ${orgId} <email> --confirm`);
+}
+
+export async function add(orgId, emailOrId, opts = {}) {
+  requireOrg(orgId);
+  if (!emailOrId) { console.error("Error: pass the person's email (they must already have an account)."); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "add", organization_id: orgId, ...who(emailOrId), role: opts.role || "member" }); } catch (e) { fail("Add failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(resp.note); return; }
+  console.log(`✓ ${resp.email} is now a ${resp.role}${resp.reactivated ? " again" : ""}. Undo: flowiq members remove ${orgId} ${resp.email} --confirm`);
+}
+
+export async function role(orgId, emailOrId, newRole, opts = {}) {
+  requireOrg(orgId);
+  if (!emailOrId || !newRole) { console.error("Error: flowiq members role <org> <email> admin|member|viewer"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "role", organization_id: orgId, ...who(emailOrId), role: newRole }); } catch (e) { fail("Role change failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(`Already ${resp.role}.`); return; }
+  console.log(`✓ ${resp.email}: ${resp.from} → ${resp.to}. Undo: flowiq members role ${orgId} ${resp.email} ${resp.from}`);
+}
+
+export async function rename(emailOrId, name, opts = {}) {
+  if (!emailOrId || !name) { console.error("Error: flowiq members rename <email> \"Full Name\""); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "rename", ...who(emailOrId), full_name: name }); } catch (e) { fail("Rename failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ ${resp.email}: "${resp.from ?? ""}" → "${resp.to}" (profiles.full_name, shown in every org they belong to)`);
+}
+
+export async function remove(orgId, emailOrId, opts = {}) {
+  requireOrg(orgId);
+  if (!emailOrId) { console.error("Error: flowiq members remove <org> <email> --confirm"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "remove", organization_id: orgId, ...who(emailOrId), confirm: !!opts.confirm }); } catch (e) { fail("Remove failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.dry_run) { console.log(`Would remove ${resp.email} (${resp.role}${resp.is_owner ? ", OWNER" : ""}) from this org. Add --confirm.`); return; }
+  console.log(`✓ removed ${resp.email} (${resp.role}). Undo: flowiq members add ${orgId} ${resp.email} --role ${resp.role}`);
+}
+
+// `flowiq users lookup <email>` — the account behind an address, across orgs.
+export async function lookup(email, opts = {}) {
+  if (!email) { console.error("Error: flowiq users lookup <email>"); process.exit(1); }
+  let resp;
+  try { resp = await http.get("members", { email }); }
+  catch (e) {
+    if (e.status === 404 || /No account/.test(e.message)) {
+      console.log(`No account for ${email}.`);
+      const inv = e.body?.invitations || [];
+      if (inv.length) { console.log(`  invitations:`); for (const i of inv) console.log(`    ${i.status.padEnd(9)} ${i.role.padEnd(7)} org ${i.organization_id} ${String(i.created_at).slice(0, 10)}`); }
+      else console.log("  no invitation on record either — they were never invited, or were invited under another address.");
+      return;
+    }
+    fail("Lookup failed", e);
+  }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const u = resp.user;
+  console.log(`${u.email}  ${u.id}${resp.super_admin ? "  (Flowapt super admin)" : ""}`);
+  console.log(`  name:          ${resp.full_name ?? "(no profile name)"}${resp.profile_deleted ? "  (profile deleted)" : ""}`);
+  console.log(`  signs in with: ${u.providers.join(", ")}${u.email_confirmed_at ? "" : "  (email NOT confirmed)"}${u.banned_until ? `  BANNED until ${u.banned_until}` : ""}`);
+  console.log(`  created:       ${fmtSast(u.created_at)} SAST · last sign-in ${u.last_sign_in_at ? `${fmtSast(u.last_sign_in_at)} SAST` : "never"}`);
+  if (!resp.organizations.length) console.log("  organizations: none");
+  else {
+    console.log(`  organizations: ${resp.organizations.length}`);
+    for (const o of resp.organizations) console.log(`    ${pad(o.role, 7)} ${pad((o.organization_name || o.organization_id).slice(0, 30), 30)} ${o.organization_id}${o.status !== "active" ? `  (${o.status})` : ""}${o.inactive ? "  (org inactive)" : ""}`);
+  }
+  console.log(`\n  Password-reset emails are sent by Supabase Auth and are not recorded here; a stuck login is usually a wrong provider (Google vs password) or an unconfirmed email.`);
+}

package/src/commands/messages.js

@@ -77,6 +77,45 @@ export async function pull(contactId, opts = {}) {
     const noStatus = out.filter((m) => m.whatsapp_message_id && m.message_status == null && !m.sent_receipt_received && !m.delivered_receipt_received && !m.read_receipt_received).length;
     console.log(`  delivery:       ${out.length} outbound WhatsApp · ${delivered} delivered/read · ${failed} failed · ${noStatus} with NO status at all${noStatus ? "  ⚠ accepted by Meta, never confirmed (flowiq messages failures <org>)" : ""}`);
   }
+  // Who sent each bot row: the agent, a broadcast, or an automation (the
+  // notification_* columns are in the JSON; this names them so "was 'Hey MRS'
+  // the agent or the order confirmation?" is answered here, not in SQL).
+  const sources = {};
+  for (const m of rows.filter((x) => String(x.sender_type || "").startsWith("bot-"))) sources[sentBy(m)] = (sources[sentBy(m)] || 0) + 1;
+  const keys = Object.keys(sources);
+  if (keys.length) console.log(`  sent by:        ${keys.sort().map((k) => `${k} ${sources[k]}`).join(" · ")}`);
+}
+
+export function sentBy(m) {
+  if (m.broadcast_id) return "broadcast";
+  if (m.notification_template) return `automation: ${m.notification_template}${m.notification_event ? ` (${m.notification_event})` : ""}`;
+  if (m.notification_rule_id) return `rule ${String(m.notification_rule_id).slice(0, 8)}`;
+  if (m.notification_event) return `automation (${m.notification_event})`;
+  return "agent";
+}
+
+// `flowiq messages delete <contact_id> [--before 30d] [--sender-type a,b] --confirm`
+export async function remove(contactId, opts = {}) {
+  if (!UUID_RE.test(contactId)) { console.error(`Error: "${contactId}" is not a valid contact UUID.`); process.exit(1); }
+  const senderTypes = opts.senderType ? String(opts.senderType).split(",").map((s) => s.trim()).filter(Boolean) : undefined;
+  let preview;
+  try { preview = await http.post("messages", { action: "delete", contact_id: contactId, before: opts.before, sender_types: senderTypes, dry_run: true }); }
+  catch (e) { fail("Delete failed", e); }
+  if (opts.json && !opts.confirm) { console.log(JSON.stringify(preview, null, 2)); return; }
+  console.log(`${preview.contact_name || "(no name)"} ${preview.contact_whatsapp_id || ""} on ${preview.organization_name}: ${preview.count} message(s)${preview.before ? ` older than ${fmtSast(preview.before)} SAST` : ""}${senderTypes ? ` of type ${senderTypes.join(", ")}` : ""}`);
+  for (const [k, v] of Object.entries(preview.by_sender).sort()) console.log(`    ${pad(k, 18)} ${v}`);
+  if (preview.oldest) console.log(`  from ${fmtSast(preview.oldest)} to ${fmtSast(preview.newest)} SAST`);
+  if (!preview.count) return;
+  if (!opts.confirm) { console.log(`\nDRY RUN — nothing deleted. Add --confirm to delete (you will be asked to type the contact id).`); return; }
+  const readline = await import("node:readline");
+  const typed = await new Promise((resolve) => { const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); rl.question(`This cannot be undone. Type the contact id (${contactId}) to delete ${preview.count} message(s): `, (a) => { rl.close(); resolve(a.trim()); }); });
+  if (typed !== contactId) { console.log("Mismatch — aborted, nothing deleted."); process.exit(0); }
+  let resp;
+  try { resp = await http.post("messages", { action: "delete", contact_id: contactId, before: opts.before, sender_types: senderTypes, dry_run: false, confirm: true }); }
+  catch (e) { fail("Delete failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ deleted ${resp.deleted} message(s). The audit row keeps their ids, types and times (flowiq audit --endpoint messages).`);
+  if (resp.error) console.error(`  ⚠ ${resp.error}`);
 }
 
 function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }