@flowapt/flowiq-cli 0.10.0 → 0.12.0

package/src/commands/links.js

@@ -7,7 +7,9 @@
 //
 //   flowiq links shorten <org> --url <u> [--url <u2>…] --campaign "Spring Promotion"
 //   flowiq links shorten <org> --file ./message.txt --campaign X --content ViewMore --domain linklnk.io
-//   flowiq links list <org> [--campaign X] [--limit 25]
+//   flowiq links shorten <org> --url <u> --slug spring-sale --commit     (readable code)
+//   flowiq links list <org> [--campaign X] [--code abc123] [--to /collections/x] [--limit 25] [--all]
+//   flowiq links repoint <org> <code> --to <url> [--commit]            (move a live code)
 //
 // NAMING — you do not have to get the tag right yourself. The house convention
 // is `Date_Campaign` (`9Sep_SpringPromotion`: the date the broadcast GOES OUT,
@@ -114,11 +116,13 @@ export async function shorten(orgId, opts = {}) {
       campaign,
       content,
       domain: opts.domain,
+      slug: opts.slug,
       dry_run: dryRun,
       confirm_new_campaign: !!opts.newCampaign,
     });
   } catch (e) {
     console.error(`Shorten failed: ${e.message}`);
+    if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`);
     process.exit(1);
   }
 
@@ -127,7 +131,7 @@ export async function shorten(orgId, opts = {}) {
   const utm = resp.utm
     ? `utm_source=${resp.utm.source} · utm_medium=${resp.utm.medium} · utm_campaign=${resp.utm.campaign} · utm_content=${resp.utm.content}`
     : "no UTM tags (plain short link)";
-  console.log(`${resp.organization_name} · ${resp.domain}`);
+  console.log(`${resp.organization_name} · ${resp.domain}${resp.slug ? ` · slug ${resp.slug}` : ""}`);
   console.log(`${utm}\n`);
   if (resp.campaign_conflicts?.length) {
     const c = resp.campaign_conflicts[0];
@@ -169,30 +173,69 @@ export async function shorten(orgId, opts = {}) {
 
 export async function list(orgId, opts = {}) {
   requireOrg(orgId);
-  let resp;
-  try {
-    resp = await http.post("links", {
-      organization_id: orgId,
-      action: "list",
-      campaign: opts.campaign,
-      limit: opts.limit,
-    });
-  } catch (e) {
-    console.error(`List failed: ${e.message}`);
-    process.exit(1);
+  // --all walks every page (500 a call) so a whole campaign or a whole org can
+  // be exported; without it the first page is the answer and has_more says so.
+  const pageSize = opts.all ? 500 : (opts.limit ? Number(opts.limit) : 25);
+  const links = [];
+  let offset = 0, resp, hasMore = false;
+  for (;;) {
+    try {
+      resp = await http.post("links", {
+        organization_id: orgId,
+        action: "list",
+        campaign: opts.campaign,
+        code: opts.code,
+        to: opts.to,
+        limit: pageSize,
+        offset,
+      });
+    } catch (e) {
+      console.error(`List failed: ${e.message}`);
+      process.exit(1);
+    }
+    links.push(...(resp.links || []));
+    hasMore = !!resp.has_more;
+    if (!opts.all || !hasMore || !(resp.links || []).length) break;
+    offset += (resp.links || []).length;
+    if (offset > 50000) break;
   }
 
-  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (opts.json) { console.log(JSON.stringify({ ...resp, count: links.length, links, has_more: hasMore }, null, 2)); return; }
 
-  if (!resp.links.length) {
-    console.log(opts.campaign ? `No links on ${resp.organization_name} for campaign "${opts.campaign}".` : `No links on ${resp.organization_name}.`);
+  const what = [opts.campaign && `campaign "${opts.campaign}"`, opts.code && `code "${opts.code}"`, opts.to && `destination containing "${opts.to}"`].filter(Boolean).join(", ");
+  if (!links.length) {
+    console.log(what ? `No links on ${resp.organization_name} for ${what}.` : `No links on ${resp.organization_name}.`);
     return;
   }
   const pad = (s, n) => String(s ?? "").padEnd(n);
-  console.log(`${pad("CODE", 10)}${pad("CLICKS", 8)}${pad("CREATED", 12)}URL`);
-  for (const l of resp.links) {
+  const codeW = Math.min(50, Math.max(10, ...links.map((l) => String(l.code || "").length + 2)));
+  console.log(`${pad("CODE", codeW)}${pad("CLICKS", 8)}${pad("CREATED", 12)}URL`);
+  for (const l of links) {
     const day = String(l.created_at || "").slice(0, 10);
-    console.log(`${pad(l.code, 10)}${pad(l.clicks ?? 0, 8)}${pad(day, 12)}${l.full_url}`);
+    console.log(`${pad(l.code, codeW)}${pad(l.clicks ?? 0, 8)}${pad(day, 12)}${l.full_url}${l.is_active === false ? "  (inactive)" : ""}${l.per_message ? "  (per-message)" : ""}`);
+  }
+  console.log(`\n${links.length} link(s)${what ? ` · ${what}` : ""}${hasMore ? ` · more exist (--all, or --limit up to 500)` : ""}`);
+}
+
+// `flowiq links repoint <org> <code> --to <url> [--commit]` — move where a
+// live code sends people. The code stays in every message that carries it.
+export async function repoint(orgId, code, opts = {}) {
+  requireOrg(orgId);
+  if (!code) { console.error("Error: pass the short code, e.g. flowiq links repoint <org> VVSSh2 --to https://…"); process.exit(1); }
+  if (!opts.to) { console.error("Error: --to <url> is required (the new destination page)."); process.exit(1); }
+  let resp;
+  try {
+    resp = await http.post("links", { organization_id: orgId, action: "repoint", code, url: opts.to, dry_run: !opts.commit, confirm: !!opts.commit });
+  } catch (e) {
+    console.error(`Repoint failed: ${e.message}`);
+    if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`);
+    process.exit(1);
   }
-  console.log(`\n${resp.count} link(s)${opts.campaign ? ` · campaign "${opts.campaign}"` : ""}`);
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name} · ${resp.code} (${resp.clicks ?? 0} clicks${resp.is_active === false ? ", inactive" : ""})`);
+  console.log(`  from: ${resp.from}`);
+  console.log(`  to:   ${resp.to}`);
+  if (resp.unchanged) { console.log("\nAlready points there — nothing to do."); return; }
+  if (resp.dry_run) console.log("\nDRY RUN — nothing changed. Add --commit to repoint.");
+  else console.log(`\n✓ repointed. Undo: flowiq links repoint ${orgId} ${resp.code} --to '${resp.from}' --commit`);
 }

package/src/commands/members.js

@@ -0,0 +1,108 @@
+// `flowiq members list|add|role|rename|remove` + `flowiq users lookup` — an
+// org's people and one user across orgs (server: api/cli/members.js).
+
+import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const pad = (s, n) => String(s ?? "").padEnd(n);
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
+const requireOrg = (v) => { if (!UUID_RE.test(v || "")) { console.error(`Error: "${v}" is not a valid organization UUID.`); process.exit(1); } };
+const who = (v) => (UUID_RE.test(v || "") ? { user_id: v } : { email: v });
+
+export async function list(orgId, opts = {}) {
+  requireOrg(orgId);
+  let resp;
+  try { resp = await http.get("members", { organization_id: orgId }); } catch (e) { fail("List failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name}: ${resp.count} member(s)${resp.pending_invitations.length ? ` · ${resp.pending_invitations.length} pending invitation(s)` : ""}`);
+  console.log("");
+  console.log(`  ${pad("ROLE", 7)} ${pad("NAME", 24)} ${pad("EMAIL", 34)} ${pad("LAST SIGN-IN", 18)} SINCE`);
+  const order = { admin: 0, member: 1, viewer: 2 };
+  for (const m of [...resp.members].sort((a, b) => (order[a.role] ?? 9) - (order[b.role] ?? 9) || String(a.full_name || "").localeCompare(String(b.full_name || "")))) {
+    const flags = [m.is_owner && "owner", m.status !== "active" && m.status, m.view_only && "view-only", m.account_missing && "NO ACCOUNT", m.profile_deleted && "profile deleted"].filter(Boolean).join(", ");
+    console.log(`  ${pad(m.role, 7)} ${pad((m.full_name || "—").slice(0, 24), 24)} ${pad((m.email || "?").slice(0, 34), 34)} ${pad(m.last_sign_in_at ? fmtSast(m.last_sign_in_at) : "never", 18)} ${String(m.since || "").slice(0, 10)}${flags ? `  (${flags})` : ""}`);
+  }
+  for (const i of resp.pending_invitations) console.log(`  ${pad("invite", 7)} ${pad("—", 24)} ${pad(i.email, 34)} ${pad("pending", 18)} ${String(i.created_at || "").slice(0, 10)}  (${i.role})`);
+  console.log(`\nflowiq members add ${orgId} <email> --role member · role ${orgId} <email> admin|member|viewer · remove ${orgId} <email> --confirm`);
+}
+
+export async function add(orgId, emailOrId, opts = {}) {
+  requireOrg(orgId);
+  if (!emailOrId) { console.error("Error: pass the person's email (they must already have an account)."); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "add", organization_id: orgId, ...who(emailOrId), role: opts.role || "member" }); } catch (e) { fail("Add failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(resp.note); return; }
+  console.log(`✓ ${resp.email} is now a ${resp.role}${resp.reactivated ? " again" : ""}. Undo: flowiq members remove ${orgId} ${resp.email} --confirm`);
+}
+
+// `flowiq members invite <org> <email> [--role member]` — the app's door for
+// someone with no account: an invitations row they are shown at sign-up.
+export async function invite(orgId, email, opts = {}) {
+  requireOrg(orgId);
+  if (!email) { console.error("Error: flowiq members invite <org> <email> [--role member]"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "invite", organization_id: orgId, email, role: opts.role || "member", dry_run: !!opts.dryRun }); } catch (e) { fail("Invite failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.dry_run) { console.log(`Would invite ${resp.would_insert.email} to ${resp.organization_name} as ${resp.would_insert.role}.`); return; }
+  if (resp.unchanged) { console.log(resp.note); return; }
+  console.log(`✓ invited ${resp.email} as ${resp.role} (invitation ${resp.invitation_id}).\n  ${resp.note}.`);
+}
+
+export async function role(orgId, emailOrId, newRole, opts = {}) {
+  requireOrg(orgId);
+  if (!emailOrId || !newRole) { console.error("Error: flowiq members role <org> <email> admin|member|viewer"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "role", organization_id: orgId, ...who(emailOrId), role: newRole }); } catch (e) { fail("Role change failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(`Already ${resp.role}.`); return; }
+  console.log(`✓ ${resp.email}: ${resp.from} → ${resp.to}. Undo: flowiq members role ${orgId} ${resp.email} ${resp.from}`);
+}
+
+export async function rename(emailOrId, name, opts = {}) {
+  if (!emailOrId || !name) { console.error("Error: flowiq members rename <email> \"Full Name\""); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "rename", ...who(emailOrId), full_name: name }); } catch (e) { fail("Rename failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ ${resp.email}: "${resp.from ?? ""}" → "${resp.to}" (profiles.full_name, shown in every org they belong to)`);
+}
+
+export async function remove(orgId, emailOrId, opts = {}) {
+  requireOrg(orgId);
+  if (!emailOrId) { console.error("Error: flowiq members remove <org> <email> --confirm"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("members", { action: "remove", organization_id: orgId, ...who(emailOrId), confirm: !!opts.confirm }); } catch (e) { fail("Remove failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.dry_run) { console.log(`Would remove ${resp.email} (${resp.role}${resp.is_owner ? ", OWNER" : ""}) from this org. Add --confirm.`); return; }
+  console.log(`✓ removed ${resp.email} (${resp.role}). Undo: flowiq members add ${orgId} ${resp.email} --role ${resp.role}`);
+}
+
+// `flowiq users lookup <email>` — the account behind an address, across orgs.
+export async function lookup(email, opts = {}) {
+  if (!email) { console.error("Error: flowiq users lookup <email>"); process.exit(1); }
+  let resp;
+  try { resp = await http.get("members", { email }); }
+  catch (e) {
+    if (e.status === 404 || /No account/.test(e.message)) {
+      console.log(`No account for ${email}.`);
+      const inv = e.body?.invitations || [];
+      if (inv.length) { console.log(`  invitations:`); for (const i of inv) console.log(`    ${i.status.padEnd(9)} ${i.role.padEnd(7)} org ${i.organization_id} ${String(i.created_at).slice(0, 10)}`); }
+      else console.log("  no invitation on record either — they were never invited, or were invited under another address.");
+      return;
+    }
+    fail("Lookup failed", e);
+  }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const u = resp.user;
+  console.log(`${u.email}  ${u.id}${resp.super_admin ? "  (Flowapt super admin)" : ""}`);
+  console.log(`  name:          ${resp.full_name ?? "(no profile name)"}${resp.profile_deleted ? "  (profile deleted)" : ""}`);
+  console.log(`  signs in with: ${u.providers.join(", ")}${u.email_confirmed_at ? "" : "  (email NOT confirmed)"}${u.banned_until ? `  BANNED until ${u.banned_until}` : ""}`);
+  console.log(`  created:       ${fmtSast(u.created_at)} SAST · last sign-in ${u.last_sign_in_at ? `${fmtSast(u.last_sign_in_at)} SAST` : "never"}`);
+  if (!resp.organizations.length) console.log("  organizations: none");
+  else {
+    console.log(`  organizations: ${resp.organizations.length}`);
+    for (const o of resp.organizations) console.log(`    ${pad(o.role, 7)} ${pad((o.organization_name || o.organization_id).slice(0, 30), 30)} ${o.organization_id}${o.status !== "active" ? `  (${o.status})` : ""}${o.inactive ? "  (org inactive)" : ""}`);
+  }
+  console.log(`\n  Password-reset emails are sent by Supabase Auth and are not recorded here; a stuck login is usually a wrong provider (Google vs password) or an unconfirmed email.`);
+}

package/src/commands/messages.js

@@ -77,6 +77,72 @@ export async function pull(contactId, opts = {}) {
     const noStatus = out.filter((m) => m.whatsapp_message_id && m.message_status == null && !m.sent_receipt_received && !m.delivered_receipt_received && !m.read_receipt_received).length;
     console.log(`  delivery:       ${out.length} outbound WhatsApp · ${delivered} delivered/read · ${failed} failed · ${noStatus} with NO status at all${noStatus ? "  ⚠ accepted by Meta, never confirmed (flowiq messages failures <org>)" : ""}`);
   }
+  // Who sent each bot row: the agent, a broadcast, or an automation (the
+  // notification_* columns are in the JSON; this names them so "was 'Hey MRS'
+  // the agent or the order confirmation?" is answered here, not in SQL).
+  const sources = {};
+  for (const m of rows.filter((x) => String(x.sender_type || "").startsWith("bot-"))) sources[sentBy(m)] = (sources[sentBy(m)] || 0) + 1;
+  const keys = Object.keys(sources);
+  if (keys.length) console.log(`  sent by:        ${keys.sort().map((k) => `${k} ${sources[k]}`).join(" · ")}`);
+}
+
+export function sentBy(m) {
+  if (m.broadcast_id) return "broadcast";
+  if (m.notification_template) return `automation: ${m.notification_template}${m.notification_event ? ` (${m.notification_event})` : ""}`;
+  if (m.notification_rule_id) return `rule ${String(m.notification_rule_id).slice(0, 8)}`;
+  if (m.notification_event) return `automation (${m.notification_event})`;
+  return "agent";
+}
+
+// `flowiq messages purge <org> --subject-regex <re> | --text <s> | --sender-type a,b [--since] [--before] --confirm`
+// Org-wide delete by pattern (the 71 Lego auto-replies across 69 contacts).
+export async function purge(orgId, opts = {}) {
+  requireOrg(orgId);
+  const senderTypes = opts.senderType ? String(opts.senderType).split(",").map((s) => s.trim()).filter(Boolean) : undefined;
+  if (!opts.subjectRegex && !opts.text && !senderTypes) { console.error("Error: give at least one of --subject-regex, --text, --sender-type."); process.exit(1); }
+  const body = { action: "delete", organization_id: orgId, subject_regex: opts.subjectRegex, text: opts.text, sender_types: senderTypes, since: opts.since, before: opts.before };
+  let preview;
+  try { preview = await http.post("messages", { ...body, dry_run: true }); } catch (e) { fail("Purge failed", e); }
+  if (opts.json && !opts.confirm) { console.log(JSON.stringify(preview, null, 2)); return; }
+  console.log(`${preview.organization_name}: ${preview.count} message(s) across ${preview.contacts} contact(s) match${preview.capped ? " (capped at 5,000 a run; re-run for the rest)" : ""}`);
+  for (const [k, v] of Object.entries(preview.by_sender).sort()) console.log(`    ${pad(k, 18)} ${v}`);
+  if (preview.top_subjects.length) { console.log("  subjects:"); for (const s of preview.top_subjects) console.log(`    ${String(s.n).padStart(5)} × ${s.subject}`); }
+  if (preview.oldest) console.log(`  from ${fmtSast(preview.oldest)} to ${fmtSast(preview.newest)} SAST`);
+  for (const c of preview.sample_contacts.slice(0, 8)) console.log(`    ${String(c.n).padStart(5)} × ${c.contact?.full_name ?? ""} ${c.contact?.whatsapp_id ?? ""} (${c.contact_id})`);
+  if (!preview.count) return;
+  if (!opts.confirm) { console.log(`\nDRY RUN — nothing deleted. Add --confirm to delete (you will be asked to type the organization id).`); return; }
+  const readline = await import("node:readline");
+  const typed = await new Promise((resolve) => { const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); rl.question(`This cannot be undone. Type the organization id (${orgId}) to delete ${preview.count} message(s): `, (a) => { rl.close(); resolve(a.trim()); }); });
+  if (typed !== orgId) { console.log("Mismatch — aborted, nothing deleted."); process.exit(0); }
+  let resp;
+  try { resp = await http.post("messages", { ...body, dry_run: false, confirm: true }); } catch (e) { fail("Purge failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ deleted ${resp.deleted} message(s) across ${resp.contacts} contact(s). The audit row keeps ids, types and times (flowiq audit --endpoint messages).`);
+  if (resp.error) console.error(`  ⚠ ${resp.error}`);
+}
+
+// `flowiq messages delete <contact_id> [--before 30d] [--sender-type a,b] --confirm`
+export async function remove(contactId, opts = {}) {
+  if (!UUID_RE.test(contactId)) { console.error(`Error: "${contactId}" is not a valid contact UUID.`); process.exit(1); }
+  const senderTypes = opts.senderType ? String(opts.senderType).split(",").map((s) => s.trim()).filter(Boolean) : undefined;
+  let preview;
+  try { preview = await http.post("messages", { action: "delete", contact_id: contactId, before: opts.before, sender_types: senderTypes, dry_run: true }); }
+  catch (e) { fail("Delete failed", e); }
+  if (opts.json && !opts.confirm) { console.log(JSON.stringify(preview, null, 2)); return; }
+  console.log(`${preview.contact_name || "(no name)"} ${preview.contact_whatsapp_id || ""} on ${preview.organization_name}: ${preview.count} message(s)${preview.before ? ` older than ${fmtSast(preview.before)} SAST` : ""}${senderTypes ? ` of type ${senderTypes.join(", ")}` : ""}`);
+  for (const [k, v] of Object.entries(preview.by_sender).sort()) console.log(`    ${pad(k, 18)} ${v}`);
+  if (preview.oldest) console.log(`  from ${fmtSast(preview.oldest)} to ${fmtSast(preview.newest)} SAST`);
+  if (!preview.count) return;
+  if (!opts.confirm) { console.log(`\nDRY RUN — nothing deleted. Add --confirm to delete (you will be asked to type the contact id).`); return; }
+  const readline = await import("node:readline");
+  const typed = await new Promise((resolve) => { const rl = readline.createInterface({ input: process.stdin, output: process.stdout }); rl.question(`This cannot be undone. Type the contact id (${contactId}) to delete ${preview.count} message(s): `, (a) => { rl.close(); resolve(a.trim()); }); });
+  if (typed !== contactId) { console.log("Mismatch — aborted, nothing deleted."); process.exit(0); }
+  let resp;
+  try { resp = await http.post("messages", { action: "delete", contact_id: contactId, before: opts.before, sender_types: senderTypes, dry_run: false, confirm: true }); }
+  catch (e) { fail("Delete failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ deleted ${resp.deleted} message(s). The audit row keeps their ids, types and times (flowiq audit --endpoint messages).`);
+  if (resp.error) console.error(`  ⚠ ${resp.error}`);
 }
 
 function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
@@ -98,12 +164,12 @@ export async function search(orgId, textParts, opts = {}) {
   const text = (Array.isArray(textParts) ? textParts.join(" ") : String(textParts ?? "")).trim();
   if (text.length < 2) { console.error("Error: give at least 2 characters to search for."); process.exit(1); }
   let resp;
-  try { resp = await http.get("messages", { organization_id: orgId, search: text, since: opts.since, until: opts.until, sender_type: opts.senderType, include_templates: opts.includeTemplates ? "1" : undefined, limit: opts.limit }); }
+  try { resp = await http.get("messages", { organization_id: orgId, search: text, since: opts.since, until: opts.until, sender_type: opts.senderType, include_templates: opts.includeTemplates ? "1" : undefined, tool_calls: opts.toolCalls ? "1" : undefined, limit: opts.limit }); }
   catch (e) { fail("Search failed", e); }
   if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
-  console.log(`${resp.organization_name}: ${resp.count} message(s) containing "${text}" since ${fmtSast(resp.since)} SAST${resp.capped ? ` (capped at ${resp.limit}; narrow with --since / --sender-type)` : ""}${opts.includeTemplates ? "" : " (template sends excluded; --include-templates)"}`);
+  console.log(`${resp.organization_name}: ${resp.count} ${opts.toolCalls ? "tool call(s) whose request or response contains" : "message(s) containing"} "${text}" since ${fmtSast(resp.since)} SAST${resp.capped ? ` (capped at ${resp.limit}; narrow with --since / --sender-type)` : ""}${opts.includeTemplates || opts.toolCalls ? "" : " (template sends excluded; --include-templates)"}`);
   for (const r of resp.rows) {
-    console.log(`  ${pad(fmtSast(r.created_at), 17)} ${pad(r.sender_type, 16)} ${pad((r.contact?.full_name || r.contact?.whatsapp_id || r.contact_id || "").slice(0, 22), 22)} ${snippetAround(r.message, text)}`);
+    console.log(`  ${pad(fmtSast(r.created_at), 17)} ${pad(opts.toolCalls ? (r.tool_name ?? "tool") : r.sender_type, 16)} ${pad((r.contact?.full_name || r.contact?.whatsapp_id || r.contact_id || "").slice(0, 22), 22)} ${opts.toolCalls ? String(r.message).replace(/\s+/g, " ").slice(0, 160) : snippetAround(r.message, text)}`);
   }
   if (resp.rows.length) console.log(`\n  contact ids: flowiq messages search … --json | jq '.rows[].contact_id'  ·  full chat: flowiq messages pull <contact_id>`);
 }

package/src/commands/notes.js

@@ -0,0 +1,63 @@
+// `flowiq steer list|add|clear <contact_id>` + `flowiq notes list|add
+// <contact_id>` — the internal rows in a contact's chat (server: api/cli/notes.js).
+
+import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
+const requireContact = (v) => { if (!UUID_RE.test(v || "")) { console.error(`Error: "${v}" is not a valid contact UUID.`); process.exit(1); } };
+
+async function listKind(contactId, kind, opts) {
+  requireContact(contactId);
+  let resp;
+  try { resp = await http.get("notes", { contact_id: contactId, kind, limit: opts.limit }); } catch (e) { fail("List failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const label = kind === "notes" ? "internal note" : "steer";
+  console.log(`${resp.contact_name || "(no name)"} ${resp.contact_whatsapp_id || ""} on ${resp.organization_name}: ${resp.count} ${label}(s)${kind === "steers" ? ` · AI ${resp.bot_status === false ? "OFF" : "on"}${resp.steer_messages_flag ? "" : " · steer_messages flag off (inbox hides the control; vert still applies rows)"}` : ""}`);
+  for (const r of resp.rows) {
+    const head = kind === "notes" ? `${r.author ?? "?"}` : `${r.mode}${r.mode === "once" ? (r.consumed ? ", consumed" : ", pending") : ""}`;
+    console.log(`\n  ${fmtSast(r.created_at)} SAST · ${head}${kind === "steers" && !r.active ? " · inactive" : ""}\n  ${r.id}\n    ${String(r.text).split("\n").join("\n    ")}`);
+  }
+  if (kind === "steers" && resp.rows.some((r) => r.active)) console.log(`\n  Remove: flowiq steer clear ${contactId} [--id <id>] --confirm`);
+}
+
+export const steerList = (contactId, opts = {}) => listKind(contactId, "steers", opts);
+export const notesList = (contactId, opts = {}) => listKind(contactId, "notes", opts);
+
+export async function steerAdd(contactId, textParts, opts = {}) {
+  requireContact(contactId);
+  const text = (Array.isArray(textParts) ? textParts.join(" ") : String(textParts ?? "")).trim();
+  if (!text) { console.error("Error: flowiq steer add <contact_id> \"instruction for the agent\" [--once]"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("notes", { action: "add_steer", contact_id: contactId, text, mode: opts.once ? "once" : "persistent" }); } catch (e) { fail("Steer failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ ${resp.mode === "once" ? "one-shot" : "ongoing"} steer added (${resp.id}) as ${resp.author}. ${resp.mode === "once" ? "The agent applies it on the next reply, then it is spent." : "The agent applies it on EVERY reply until: flowiq steer clear " + contactId + " --id " + resp.id + " --confirm"}`);
+  for (const w of resp.warnings || []) console.error(`  ⚠ ${w}`);
+}
+
+export async function steerClear(contactId, opts = {}) {
+  requireContact(contactId);
+  const ids = opts.id ? [].concat(opts.id) : undefined;
+  let resp;
+  try { resp = await http.post("notes", { action: "clear_steers", contact_id: contactId, steer_ids: ids, confirm: !!opts.confirm }); } catch (e) { fail("Clear failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.dry_run) {
+    if (!resp.count) { console.log("No steers to remove."); return; }
+    console.log(`Would delete ${resp.count} steer(s):`);
+    for (const s of resp.steers) console.log(`  ${s.id}  ${s.mode}${s.consumed ? " (consumed)" : ""}  ${String(s.text).slice(0, 80)}`);
+    console.log("Add --confirm to delete (the texts are kept in the audit row).");
+    return;
+  }
+  console.log(`✓ deleted ${resp.deleted} steer(s).`);
+}
+
+export async function notesAdd(contactId, textParts, opts = {}) {
+  requireContact(contactId);
+  const text = (Array.isArray(textParts) ? textParts.join(" ") : String(textParts ?? "")).trim();
+  if (!text) { console.error("Error: flowiq notes add <contact_id> \"note for the team\""); process.exit(1); }
+  let resp;
+  try { resp = await http.post("notes", { action: "add_note", contact_id: contactId, text }); } catch (e) { fail("Note failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ internal note added (${resp.id}) as ${resp.author}; it shows on the Customer panel, never to the customer.`);
+}

package/src/commands/org.js

@@ -13,31 +13,78 @@ const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/
 export async function list(search, opts = {}) {
   let resp;
   try {
-    resp = await http.get("org", { list: "1", search: search || undefined });
+    resp = await http.get("org", { list: "1", search: search || undefined, number: opts.number || undefined });
   } catch (e) {
     console.error(`Lookup failed: ${e.message}`);
+    if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`);
     process.exit(1);
   }
   if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
 
-  const orgs = (resp.orgs || []).filter((o) => (opts.all ? true : !o.inactive));
+  // A number lookup shows parked orgs too: the number is the question.
+  const orgs = (resp.orgs || []).filter((o) => (opts.all || opts.number ? true : !o.inactive));
   if (!orgs.length) {
-    console.log(search ? `No organizations match "${search}".` : "No organizations found.");
+    console.log(opts.number ? `No organization has WhatsApp number / phone id / WABA ${opts.number}.` : search ? `No organizations match "${search}".` : "No organizations found.");
     return;
   }
   const pad = (s, n) => String(s ?? "").padEnd(n);
   const nameW = Math.min(34, Math.max(4, ...orgs.map((o) => (o.name || "").length)));
-  console.log(`${pad("NAME", nameW)}  ${pad("ID", 36)}  ${pad("PLATFORM", 9)}STORE`);
+  const byNumber = !!opts.number;
+  console.log(`${pad("NAME", nameW)}  ${pad("ID", 36)}  ${byNumber ? `${pad("NUMBER", 16)}${pad("PHONE ID", 18)}${pad("WABA", 18)}` : `${pad("PLATFORM", 9)}STORE`}`);
   for (const o of orgs) {
     console.log(
       `${pad((o.name || "").slice(0, nameW), nameW)}  ${pad(o.id, 36)}  ` +
-      `${pad(o.platform || "—", 9)}${o.store || ""}${o.inactive ? "  (inactive)" : ""}`
+      (byNumber
+        ? `${pad(o.phone_number || "—", 16)}${pad(o.phone_id || "—", 18)}${pad(o.waba_id || "—", 18)}`
+        : `${pad(o.platform || "—", 9)}${o.store || ""}`) +
+      `${o.inactive ? "  (inactive)" : ""}`
     );
   }
   const hidden = (resp.orgs || []).length - orgs.length;
   console.log(`\n${orgs.length} organization(s)${hidden ? ` · ${hidden} inactive hidden (--all to show)` : ""}`);
 }
 
+// `flowiq org agent <org> on|off [--commit] [--yes]` — the agent master switch
+// (organizations.wati_webhook_status). Off = no customer gets the AI. On with
+// vert.active:false + an allowlist = test mode. On with vert.active true =
+// live for everyone, which is the shape that needs --yes.
+export async function agentSwitch(orgId, state, opts = {}) {
+  requireOrg(orgId);
+  const s = String(state || "").toLowerCase();
+  if (!["on", "off"].includes(s)) { console.error('Error: pass "on" or "off", e.g. flowiq org agent <org> off --commit'); process.exit(1); }
+  let resp;
+  try { resp = await http.post("org", { action: "agent_switch", organization_id: orgId, enabled: s === "on", dry_run: !opts.commit, confirm: !!opts.yes }); }
+  catch (e) { fail("Switch failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name} — agent master switch`);
+  console.log(`  now:      ${resp.from ? "ON" : "OFF"} · vert.active ${resp.vert_active ?? "unset"}${resp.allowed_whatsapp_ids?.length ? ` · allowlist ${resp.allowed_whatsapp_ids.join(", ")}` : ""} · active agent ${resp.active_whatsapp_agent ?? "NONE"}`);
+  if (resp.unchanged) { console.log(`  already ${resp.to ? "ON" : "OFF"} — nothing to do.`); return; }
+  console.log(`  ${resp.dry_run ? "would set" : "✓ set"}: ${resp.to ? "ON" : "OFF"} → ${resp.mode}`);
+  if (resp.dry_run) {
+    console.log(`\nDRY RUN — add --commit to switch${resp.needs_confirm ? ", and --yes because this makes the agent LIVE for every customer (set vert.allowed_whatsapp_ids + vert.active false first for a test mode)" : ""}.`);
+  } else {
+    console.log(`\nUndo: flowiq org agent ${orgId} ${resp.from ? "on" : "off"} --commit${resp.from ? " --yes" : ""}`);
+  }
+}
+
+// `flowiq org park <org> [--unpark] --confirm` — organizations.inactive.
+export async function park(orgId, opts = {}) {
+  requireOrg(orgId);
+  let resp;
+  try { resp = await http.post("org", { action: "park", organization_id: orgId, inactive: !opts.unpark, confirm: !!opts.confirm }); }
+  catch (e) { fail("Park failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(`${resp.organization_name} is already ${resp.inactive ? "parked (inactive)" : "active"}.`); return; }
+  const verb = opts.unpark ? "unpark" : "park";
+  if (resp.dry_run) {
+    console.log(`Would ${verb} ${resp.organization_name} (inactive ${resp.from} → ${resp.to}).${resp.master_switch && !opts.unpark ? " Its agent master switch is still ON — parking hides the org from censuses and crons, it does not switch the agent off (flowiq org agent <org> off --commit)." : ""}`);
+    console.log("Add --confirm to write.");
+    return;
+  }
+  console.log(`✓ ${verb}ed ${resp.organization_name} (inactive ${resp.from} → ${resp.to}).${resp.master_switch && !opts.unpark ? " ⚠ agent master switch still ON." : ""}`);
+  console.log(`Undo: flowiq org park ${orgId}${opts.unpark ? "" : " --unpark"} --confirm`);
+}
+
 export async function info(orgId, opts = {}) {
   if (!UUID_RE.test(orgId)) {
     console.error(`Error: "${orgId}" is not a valid organization UUID.`);
@@ -150,8 +197,9 @@ export async function whatsapp(orgId, opts = {}) {
     console.log(`${resp.checked} Meta number(s) checked at Meta, ${resp.unhealthy} with a problem (${resp.skipped_not_meta_or_unconnected} org(s) skipped: not Meta or not connected)`);
     const pad = (s, n) => String(s ?? "").padEnd(n);
     console.log("");
-    console.log(`  ${pad("ORG", 30)} ${pad("NUMBER", 18)} ${pad("STATUS", 12)} ${pad("QUALITY", 9)} ${pad("TIER", 12)} PROBLEMS`);
-    for (const o of [...resp.orgs].sort((a, b) => Number(a.healthy) - Number(b.healthy))) console.log(`  ${pad(o.name.slice(0, 30), 30)} ${pad(o.phone_number, 18)} ${pad(o.status ?? "?", 12)} ${pad(o.quality ?? "?", 9)} ${pad(o.tier ?? "?", 12)} ${(o.problems || []).join("; ")}`);
+    console.log(`  ${pad("ORG", 30)} ${pad("NUMBER", 18)} ${pad("STATUS", 12)} ${pad("QUALITY", 9)} ${pad("LIMIT", 14)} PROBLEMS`);
+    for (const o of [...resp.orgs].sort((a, b) => Number(a.healthy) - Number(b.healthy))) console.log(`  ${pad(o.name.slice(0, 30), 30)} ${pad(o.phone_number, 18)} ${pad(o.status ?? "?", 12)} ${pad(o.quality ?? "?", 9)} ${pad(o.tier ?? "—", 14)} ${(o.problems || []).join("; ")}${o.notes?.length ? `${o.problems?.length ? " · " : ""}info: ${o.notes.join("; ")}` : ""}`);
+    console.log(`\n  LIMIT = the business portfolio's messaging limit (Meta sets it per portfolio now; the per-number tier field is deprecated). "—" = Meta returned neither field for this number.`);
     return;
   }
   const resp = await view(orgId, "whatsapp");
@@ -162,11 +210,11 @@ export async function whatsapp(orgId, opts = {}) {
   const p = w.phone || {};
   console.log(`  number:      ${p.display_phone_number ?? "?"} · "${p.verified_name ?? "?"}" · phone ${w.phone_id} · WABA ${w.waba_id ?? "?"}`);
   console.log(`  status:      ${p.status ?? "?"} · platform ${p.platform_type ?? "?"} · account mode ${p.account_mode ?? "?"}`);
-  console.log(`  quality:     ${p.quality_rating ?? "?"} · limit tier ${p.messaging_limit_tier ?? "?"}${p.throughput?.level ? ` · throughput ${p.throughput.level}` : ""}`);
+  console.log(`  quality:     ${p.quality_rating ?? "?"} · messaging limit ${w.messaging_limit ?? "not returned"}${w.messaging_limit_source ? ` (${w.messaging_limit_source})` : ""}${p.throughput?.level ? ` · throughput ${p.throughput.level}` : ""}`);
   console.log(`  name:        ${p.name_status ?? "?"}${p.new_name_status && p.new_name_status !== "NONE" ? ` · pending "${p.new_display_name}" (${p.new_name_status})` : ""} · OBA ${yn(p.is_official_business_account)} · code verification ${p.code_verification_status ?? "?"}`);
   console.log(`  webhooks:    ${Array.isArray(w.subscribed_apps) ? (w.subscribed_apps.length ? w.subscribed_apps.join(", ") : "NO app subscribed") : w.subscribed_apps ?? "?"}`);
   if (w.waba && !w.waba.error) console.log(`  waba:        ${w.waba.name ?? ""} · review ${w.waba.account_review_status ?? "?"} · ${w.waba.ownership_type ?? ""}`);
-  console.log(`  ${w.healthy ? "✓ healthy" : `✗ ${w.problems.join("; ")}`}`);
+  console.log(`  ${w.healthy ? "✓ healthy" : `✗ ${w.problems.join("; ")}`}${w.notes?.length ? `  (info: ${w.notes.join("; ")})` : ""}`);
 }
 
 export async function health(orgId, opts = {}) {
@@ -175,8 +223,10 @@ export async function health(orgId, opts = {}) {
   const h = resp.health;
   console.log(`${resp.organization_name} — is the agent ready?  ${h.ready ? "✓ yes" : `✗ ${h.problems.length} problem(s)`}`);
   for (const p of h.problems) console.log(`  ✗ ${p}`);
+  for (const w of h.warnings || []) console.log(`  ⚠ ${w}`);
   console.log(`  switch:      master ${h.master_switch ? "ON" : "OFF"} · vert.active ${yn(h.vert_active)}${h.allowed_whatsapp_ids ? ` (only ${h.allowed_whatsapp_ids})` : ""} · provider ${h.provider}${h.coexistence ? ` · ${h.coexistence}` : ""}${h.phone_number ? ` · ${h.phone_number}` : ""}`);
-  console.log(`  keys:        OpenAI ${h.keys.openai.state}${h.keys.openai.detail ? ` (${h.keys.openai.detail})` : ""} · Claude ${h.keys.anthropic_present ? "present" : "none"}`);
+  const spare = h.keys.openai_spare;
+  console.log(`  keys:        OpenAI ${h.keys.openai.state}${h.keys.openai.detail ? ` (${h.keys.openai.detail})` : ""}${spare ? ` · spare ${spare.state}${spare.detail ? ` (${spare.detail})` : ""}` : ""} · Claude ${h.keys.anthropic_present ? "present" : "none"}`);
   console.log(`  agent:       ${h.agent ? `${h.agent.name} · ${h.agent.prompt_chars.toLocaleString()} prompt chars · prompt ${h.agent.use_settings_prompt === false ? "OFF" : "on"} · ${h.agent.model ?? "house model"} · product_lookup ${yn(h.agent.product_lookup)} · tickets ${yn(h.agent.ticket_tool_status)}` : "NONE"}`);
   console.log(`  catalogue:   ${h.catalogue.products} product rows · ${h.catalogue.embedded} with embeddings${h.catalogue.last_sync ? ` · last sync ${when(h.catalogue.last_sync.created_at)} ${h.catalogue.last_sync.success === false ? "FAILED" : "ok"} (+${h.catalogue.last_sync.added ?? 0} ~${h.catalogue.last_sync.updated ?? 0} -${h.catalogue.last_sync.deleted ?? 0})` : " · no sync recorded"}`);
   const s = h.store;
@@ -187,6 +237,22 @@ export async function health(orgId, opts = {}) {
 
 export async function automations(orgId, opts = {}) {
   requireOrg(orgId);
+  // --set <type> --template <name> / --body k=v,… / --buttons k=v,…: repoint
+  // one type at a new template version or fix its param mapping.
+  if (opts.set) {
+    const parseMap = (v, flag) => { if (v === undefined) return undefined; if (v === "none" || v === "null") return null; const out = {}; for (const pair of String(v).split(",").map((s) => s.trim()).filter(Boolean)) { const i = pair.indexOf("="); if (i < 1) { console.error(`Error: ${flag} takes param1=full_name,param2=order_number (got "${pair}")`); process.exit(1); } out[pair.slice(0, i).trim()] = pair.slice(i + 1).trim(); } return out; };
+    const body = { action: "automations_set", organization_id: orgId, type: opts.set, template_name: opts.template, body_parameters: parseMap(opts.body, "--body"), button_parameters: parseMap(opts.buttons, "--buttons"), dry_run: !opts.commit };
+    if (body.template_name === undefined && body.body_parameters === undefined && body.button_parameters === undefined) { console.error("Error: with --set <type> pass --template <name>, --body k=v,… and/or --buttons k=v,… (\"none\" clears a mapping)."); process.exit(1); }
+    let resp;
+    try { resp = await http.post("org", body); } catch (e) { fail("Set failed", e); }
+    if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+    if (resp.unchanged) { console.log(`${opts.set}: nothing to change (template ${resp.current?.template_name ?? "none"}, mapping ${JSON.stringify(resp.current?.meta_parameter_mapping ?? null)}).`); return; }
+    console.log(`${resp.organization_name} · ${resp.type}:`);
+    for (const c of resp.changes) console.log(`  ${c}`);
+    if (resp.warning) console.log(`  ⚠ ${resp.warning}`);
+    console.log(resp.dry_run ? "\nDRY RUN — add --commit to write." : "\n✓ written (the next order event sends with these values).");
+    return;
+  }
   if (opts.enable || opts.disable) {
     const type = opts.enable || opts.disable;
     let resp;
@@ -208,6 +274,7 @@ export async function automations(orgId, opts = {}) {
     if (t.warning) console.log(`      ⚠ ${t.warning}`);
   }
   console.log(`\nflowiq org automations ${orgId} --enable <type> | --disable <type> [--commit]  (the whole feature: --enable/--disable with no type)`);
+  console.log(`flowiq org automations ${orgId} --set <type> --template <name> --body param1=full_name,param2=order_number --buttons param1=short_code [--commit]`);
 }
 
 export async function abandoned(orgId, opts = {}) {

package/src/commands/plans.js

@@ -230,6 +230,56 @@ export async function show(planId, opts = {}) {
   console.log(`\nChange status: flowiq plans status ${p.id} --to <status> [--comment "..."] [--commit]`);
 }
 
+// `flowiq plans create <org> --topic … --type utility|marketing --date YYYY-MM-DD [--time HH:MM] …`
+// Files a plan on the client's Planning board (the MCP submit_plan row). Staff
+// are exempt from the client lead time. Dry run unless --commit.
+export function parseButton(spec) {
+  // type:text[=value]  e.g. quick_reply:VIEW MORE · url:CLICK HERE=https://x · phone:Call us=+27… · copy_code:SAVE10
+  const m = /^(quick_reply|url|phone|copy_code):(.*)$/.exec(String(spec).trim());
+  if (!m) { console.error(`Error: --button must be type:text[=value] (got "${spec}"); types quick_reply | url | phone | copy_code`); process.exit(1); }
+  const [, type, rest] = m;
+  if (type === "copy_code") return { type, code: rest.trim() };
+  const eq = rest.indexOf("=");
+  const text = (eq >= 0 ? rest.slice(0, eq) : rest).trim();
+  const value = eq >= 0 ? rest.slice(eq + 1).trim() : "";
+  if (type === "url") return { type, text, url: value };
+  if (type === "phone") return { type, text, phone_number: value };
+  return { type, text };
+}
+
+export async function create(orgId, opts = {}) {
+  if (!UUID_RE.test(orgId || "")) { console.error(`Error: "${orgId}" is not a valid organization UUID.`); process.exit(1); }
+  const buttons = (opts.button || []).map(parseButton);
+  for (const f of opts.reply || []) {
+    const i = f.indexOf("=");
+    if (i < 1) { console.error(`Error: --reply must be <button text>=<follow-up message> (got "${f}")`); process.exit(1); }
+    const b = buttons.find((x) => x.type === "quick_reply" && x.text.toLowerCase() === f.slice(0, i).trim().toLowerCase());
+    if (!b) { console.error(`Error: --reply names "${f.slice(0, i).trim()}" but no quick_reply button has that text`); process.exit(1); }
+    b.follow_up = f.slice(i + 1).trim();
+  }
+  const body = {
+    action: "create", organization_id: orgId, topic: opts.topic, type: opts.type, scheduled_date: opts.date, scheduled_time: opts.time,
+    product_focus: opts.product, audience: opts.audience, line_1: opts.line1, line_2: opts.line2, follow_up_message: opts.followUp, landing_page_url: opts.landing,
+    message: opts.message, buttons: buttons.length ? buttons : undefined, graphic_brief: opts.graphic, media_url: opts.media, save_as_draft: !!opts.draft, dry_run: !opts.commit,
+  };
+  let resp;
+  try { resp = await http.post("plans", body); }
+  catch (e) {
+    console.error(`Create failed: ${e.message}`);
+    for (const p of e.body?.problems || []) console.error(`  - ${p}`);
+    process.exit(1);
+  }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name}: "${resp.topic}" (${resp.type}) · ${resp.send} · audience: ${resp.audience} · files as ${resp.files_as}`);
+  console.log(`  copy:    ${String(resp.copy).replace(/\n/g, "\n           ")}`);
+  if (resp.buttons?.length) console.log(`  buttons: ${resp.buttons.map((b) => `${b.type}:${b.text ?? b.code}${b.url ? `=${b.url}` : ""}`).join(" · ")}`);
+  if (resp.follow_ups && Object.keys(resp.follow_ups).length) console.log(`  follow-ups: ${JSON.stringify(resp.follow_ups)}`);
+  console.log(`  graphic: ${resp.graphic}`);
+  for (const n of resp.notes || []) console.log(`  ⚠ ${n}`);
+  if (resp.dry_run) { console.log("\nDRY RUN — nothing filed. Add --commit to file it on the Planning board."); return; }
+  console.log(`\n✓ filed plan ${resp.plan_id} (${resp.status}). ${resp.alert?.note ?? ""}\n  flowiq plans show ${resp.plan_id}`);
+}
+
 export async function status(planId, opts = {}) {
   if (!UUID_RE.test(planId)) {
     console.error(`Error: "${planId}" is not a valid plan UUID (get it from \`flowiq plans list\`).`);