@flowapt/flowiq-cli 0.9.0 → 0.9.3

package/README.md

@@ -189,7 +189,8 @@ flowiq ct list
 - **Destructive pushes are blocked by default**: a push that removes a tool, disables one, or sends an empty `tools[]` (wiping everything) writes nothing and shows you exactly what it would strip — re-run with `--confirm` if intentional. Additive/no-op pushes are unaffected.
 - Server-side validation is strict: tool `name` (`^[a-zA-Z0-9_-]{1,64}$`, no duplicates or built-in collisions), non-empty `description`, `http(s)` `endpoint`, method `GET/POST/PUT/PATCH/DELETE`, scalar headers, object-typed `parameters`/`injected_parameters`, valid auth/channels, timeout and response caps. Recursive schemas support strict nested objects, typed arrays, enums and numeric/string/item limits. Unknown tool/schema keys are rejected before anything writes.
 - **`display_name` (optional, 10 Sep 2026):** the label the TEAM sees on the inbox tool-activity card (e.g. `Checked loyalty points`) — plain string, ≤80 chars, never sent to the AI. Leave it out and the card derives a label from the tool name.
-- **Warnings (non-blocking):** an object with properties but no required fields. Unknown `{{placeholder}}` values are hard errors; injected parameters may additionally reference a declared top-level model parameter. Known runtime values include `organization_id`, `contact_id`, `agent_id`, `contact_whatsapp_id`, `contact_full_name`, `whatsapp_message_id`, `text`, `unique_message_id`, `unix_timestamp`, `operation_idempotency_key`, `supabase_anon_key`, and `openai_api_key`.
+- **Warnings (non-blocking):** an object with properties but no required fields. Unknown `{{placeholder}}` values are hard errors; injected parameters may additionally reference a declared top-level model parameter. Known runtime values include `organization_id`, `contact_id`, `agent_id`, `contact_whatsapp_id`, `contact_full_name`, `whatsapp_message_id`, `text`, `unique_message_id`, `unix_timestamp`, `operation_idempotency_key`, `supabase_anon_key`, `flowmod_relay_secret`, `flowiq_queue_key`, and `openai_api_key`.
+- **Queue credential:** `{{flowiq_queue_key}}` is super-admin-only and resolves to the service key only as the bearer token of a call to FlowIQ's own `add-to-api-queue` (`https://zvhwjpeeapujvuudfdps.supabase.co/functions/v1/add-to-api-queue`). The queue refuses the public anon key since 22 Sep 2026, so a tool that schedules a send (FlowMod Org's `schedule_reminder` / `schedule_a_task`) uses this. Validation and runtime both reject it anywhere else: another endpoint, another auth type, a body, a header.
 - **Retailer gateway credential:** `{{retailer_tools_internal_key}}` is super-admin-only and resolves only as the `x-api-key` value for `https://express.chatcart.io/retailer-tools/*` (or loopback in local tests). Validation and runtime both reject putting it in a body or sending it to any other host.
 - `--agent` + filenames behave like `prompts`/`knowledge`; the file carries `agent_id`, so `push` targets the agent it was pulled from.
 
@@ -234,7 +235,14 @@ flowiq bc send <org_id> --tag <batch-tag> --template <name> --body param1="…"
 flowiq bc send … --at "2026-08-05 09:00" --needs-approval --commit  # park it for approval
 
 flowiq bc scheduled list <org_id>                   # open rows (pending + awaiting-approval)
-flowiq bc scheduled list <org_id> --all             # incl. fired / cancelled
+flowiq bc scheduled list <org_id> --all             # incl. fired / cancelled — an empty OPEN list now names what --all would show
+flowiq bc scheduled list <org_id> --status completed
+
+# SAVED SEND DRAFTS (v0.9.1) — the send dialog's stored configurations. A draft
+# is NOT scheduled and never fires on its own; before this it was invisible
+# outside the dashboard.
+flowiq bc drafts <org_id>                           # newest first
+flowiq bc drafts show <org_id> <draft_id>           # the whole stored config
 flowiq bc scheduled approve <org_id> <queue_id>     # 'request' → 'pending' (--at re-times it)
 flowiq bc scheduled cancel  <org_id> <queue_id> --confirm
 
@@ -1129,29 +1137,32 @@ the prompt rows directly).
 Common uses: edit a master-group's moderator prompt, or flip its reasoning
 effort via `config.reasoningEffort` (`none` / `low` / `medium` / `high`).
 
-### Group chats — `flowiq groups list|pull <name-or-jid>` (alias `grp`)
+### Group chats — ⛔ DEPRECATED (`flowiq groups`, alias `grp`)
 
-Read-only pull of **WhatsApp group** chat history (e.g. the `… x Flowapt`
-client comms groups) straight out of the FlowMod **Evolution** Postgres. This
-is the analogue of `messages pull`, but for a group instead of a contact, so
-you can pull a window and summarise it.
+**Evolution is retired (22 Sep 2026). Read a WhatsApp group chat with the
+WhatsApp MCP, not this command.** The flowapt Evolution instance logged out of
+WhatsApp on 29 Aug 2026 (`Instance.connectionStatus` = `close`, reason 401) and
+has stored nothing since, so this command answered from a frozen archive while
+looking current — on 22 Sep it reported the Johnson Fitness group's last
+message as 17 Aug while the group had traffic that morning.
 
-> ⚠️ Unlike every other command, this talks to a database **directly** (the
-> Evolution DB is not Supabase and not the `fiq_staff_…` API). To keep this
-> published package secret-free, the connection string comes from your shell
-> environment — set `FLOWMOD_EVO_DB_URL` (or the five `FLOWMOD_DB_*` vars the
-> `flowmod-copilot` edge fn uses) before running. No auth token is needed.
+```
+mcp__whatsapp-flowapt__list_chats    { query: "<group name>" }      → the JID
+mcp__whatsapp-flowapt__list_messages { chat_jid: "…@g.us", limit: 50 }
+mcp__whatsapp-flowmod__*             if the group is not on the flowapt line
+```
+
+Both verbs now **refuse unless `--archive` is passed**, because a stale read
+that looks complete is worse than an error. `--archive` prints the frozen data
+with a banner, and `groups list` shows the instance's connection state so the
+cut-off is visible:
 
 ```bash
 export FLOWMOD_EVO_DB_URL='postgres://user:pass@app.flowmod.ai:5555/flowiq-db'
 
-flowiq groups list                               # default instance: flowapt
-flowiq groups list --instance FlowMod            # the other connected instance
-
-flowiq groups pull "Phytoceutics x Flowapt" --last 7d
-flowiq groups pull "Zorora x Flowapt" --since 2026-06-24 --until "2026-06-25 12:00"
-flowiq grp pull 120363408455897717@g.us --last 48h   # or pass the group JID
-# writes ./.flowiq/groups/<instance>-<group-slug>.json + prints a timeline
+flowiq groups list --archive                     # frozen: 38 groups, all ending 28 Aug 2026
+flowiq groups pull "Zorora x Flowapt" --archive --since 2026-06-24 --until 2026-06-25
+# still writes ./.flowiq/groups/<instance>-<group-slug>.json
 ```
 
 - Group is matched by JID, exact name, or a unique case-insensitive substring
@@ -1179,23 +1190,30 @@ Editable fields: `name`, `description`, `status` (open / in_progress / done),
 null), `organizations[]`, `media[]`, `messages[]`, `created_by`. Array columns
 are full-replace within the row.
 
-### Client hours — `flowiq hours log|list|summary` (v0.5.0)
+### Client hours — `flowiq hours log|list|summary|package` (v0.5.0; packages v0.9.2)
 
-The client-hours ledger. Every org's package includes **10 hours of Flowapt
-work per calendar month**; every piece of client work gets logged against it —
-manually here, or automatically by Claude sessions. **The CLI is the only
-way to log hours:** the FlowIQ MCP's `log_client_hours` tool was removed on
-29 Aug 2026, because the MCP advertises every tool to every connection and a
-staff-only write does not belong on a client-facing surface. The MCP keeps
-`get_client_hours` (read). Clients see their own usage on the Client Console;
-the cross-org view lives in the super-admin Changelog dialog → Client hours.
+The client-hours ledger. Every piece of client work gets logged against the
+org's **monthly hours package** — manually here, or automatically by Claude
+sessions. **The CLI is the only way to log hours:** the FlowIQ MCP's
+`log_client_hours` tool was removed on 29 Aug 2026, because the MCP advertises
+every tool to every connection and a staff-only write does not belong on a
+client-facing surface. The MCP keeps `get_client_hours` (read, staff
+connections only). The Client Console card and the super-admin Changelog
+dialog → Client hours read the same figures.
 
 ```bash
 flowiq hours log <org_id> --hours 1.5 --desc "Rebuilt the abandoned-cart copy"   # fractions fine
 flowiq hours log <org_id> --minutes 45 --desc "Fixed template header" --date 2026-08-18
 flowiq hours list <org_id>                    # this month's entries + package standing
 flowiq hours list <org_id> --month 2026-07    # a past month
-flowiq hours summary                          # every org with logged work this month
+flowiq hours summary                          # every org with logged work or a package
+
+flowiq hours package show [<org_id>]          # every package, or the one an org is on
+flowiq hours package set <org_id> --hours 5 --notes "Order Form 12 Aug 2026"
+flowiq hours package set <pt> <es> <it> --hours 10 --name Barkyn   # ONE package SHARED by three orgs
+flowiq hours package set <org_id> --hours 0   # a plan with no hours included
+flowiq hours package clear <org_id>           # back to "no package on file"
+# add --dry-run to set / clear to see the change first
 ```
 
 - `log` takes exactly ONE of `--minutes <n>` (whole minutes) or `--hours <h>`
@@ -1204,10 +1222,25 @@ flowiq hours summary                          # every org with logged work this
 - `--by` overrides who did the work (default: your staff login email);
   `--date YYYY-MM-DD` backdates an entry (it counts toward THAT month);
   `--session` tags the session/task name.
-- `list` / `summary` default to the current month and print each org's usage
-  against the 10h package, flagging any org that has gone over.
-- Corrections (delete/edit) live in the Changelog → Client hours page, not the
-  CLI. Every `log` is audited.
+- **Packages (v0.9.2).** Each org has its own package, shares one with sibling
+  orgs, or has none on file. There is no default: an org with no package reads
+  "no package on file", never an implied 10h. A **shared** package is measured
+  on the time of ALL its orgs together (Barkyn Portugal + Spain + Italy draw on
+  one 10h), and every org on it shows the shared total. `0` hours is a real
+  plan (self-service, nothing included).
+- `package set` puts EXACTLY the orgs you name on one package. If they already
+  form exactly one package it is updated in place; otherwise they leave their
+  old packages (a package left empty is removed) and get a new one. The output
+  warns when orgs are left behind on the old package. `--name` defaults to the
+  org's name (or the names joined); `--notes` records where the figure comes
+  from.
+- **Only matt@flowapt.com and gidon@flowapt.com can set or clear a package**
+  (enforced on the server; other super admins get a 403, logged as a blocked
+  attempt). `package show` tells you whether you can.
+- `list` / `summary` default to the current month and flag any org, or shared
+  package, that has gone over.
+- Corrections (delete/edit) to entries live in the Changelog → Client hours
+  page, not the CLI. Every `log`, `package set` and `package clear` is audited.
 
 ### Client deck — `flowiq report deck status|build|narrate|generate|inputs|approve|unapprove|send|print|pull` (v0.6.5)
 
@@ -1225,7 +1258,7 @@ from flowiq@flowapt.com.
 flowiq report deck status <org_id> 2026-08                 # what exists, workflow status, what blocks approval
 flowiq report deck generate <org_id> 2026-08               # build the metrics (if missing) + write the copy
 flowiq report deck generate <org_id> 2026-08 --refresh --force   # rebuild everything
-flowiq report deck build <org_id> 2026-08 --refresh        # metrics only
+flowiq report deck build <org_id> 2026-08 --refresh        # metrics only; status then says "Copy is older than the numbers" until you narrate
 flowiq report deck narrate <org_id> 2026-08                # copy only (hand edits are kept)
 flowiq report deck inputs <org_id> 2026-08 --file inputs.json   # the super-admin input form
 flowiq report deck approve <org_id> 2026-08                # refused until every required input is present
@@ -1673,13 +1706,14 @@ flowiq agent config <organization_id> --use-settings-prompt --model gpt-5.6-luna
   --rename Zara --tool woo_order_build=true --tool view_cart_tool=true --discount true
 flowiq agent config <organization_id> --test-contact-number 27000000001 --test-contact-name "QA Bot"
 flowiq agent config <organization_id> --model gpt-5.6-luna --reasoning-effort high
+flowiq agent config <organization_id> --model claude-sonnet-5 --reasoning-effort medium   # Claude (needs the org's Claude key; warns if missing)
 flowiq agent config <organization_id> --disable-base-tool get_product_info
 flowiq agent config <organization_id> --enable-base-tool get_product_info
 ```
 
 Settable: `settings.use_settings_prompt`, `settings.model`,
-`settings.reasoning_effort` (`--reasoning-effort low|medium|high`, `""` clears it —
-pairs with reasoning models like `gpt-5.6-luna`), agent `--rename`,
+`settings.reasoning_effort` (`--reasoning-effort low|medium|high|xhigh|max`, `""` clears it —
+pairs with reasoning models like `gpt-5.6-luna`; `max` is Claude only), agent `--rename`,
 the tool-flag columns (`woo_order_build`, `woo_tip_field`, `woo_order_note_field`,
 `view_cart_tool`, `restock_tool`, `block_tool_status`, `postal_code_tool_status`,
 `shopify_products_web_chat`, `ticket_tool_status`, `product_lookup`,
@@ -1734,18 +1768,30 @@ number already maps to an existing contact, the command prints a `⚠` warning
 naming it. Pass `--test-contact-number ""` (empty) to clear the override — the
 harness then falls back to a synthetic per-agent `test_<agent_id>` contact.
 
-### Agent updates — `flowiq agent-updates pull|list|resolve` (alias `au`)
+### Agent updates — `flowiq agent-updates all|pull|list|resolve` (alias `au`)
 
-Pull an org's client-raised "change the agent" requests (`agent_updates`),
-each with the chat context around the triggering message + the linked contact
-(attachments downloaded locally) — then, once the fix is verified, resolve the
-ticket from the same terminal.
+Client-raised "change the agent" requests (`agent_updates`). **`all`** is the
+cross-org queue: every org in ONE call (about a second), grouped by org, no
+UUID needed. **`pull`** is the deep read for one org: each update with the chat
+context around the triggering message + the linked contact (attachments
+downloaded locally). Once a fix is verified, resolve the ticket from the same
+terminal.
 
 ```bash
+# every org at once (v0.9.3)
+flowiq au all                                          # open = pending + in_progress, grouped by org
+flowiq au all --status all --since 14d                 # everything raised in the last 14 days
+flowiq au all --priority urgent,high --summary         # just the per-org counts
+flowiq au all --search wallet --status all             # title OR description contains "wallet"
+flowiq au all --org <uuid>,<uuid> --context            # a few orgs, with the chat window around each trigger
+flowiq au all --json | jq '.updates[] | {org: .organization_name, title}'
+# → ./.flowiq/agent-updates/_all.<status>.json  (aliases: `au queue`, `au list-remote`)
+
+# one org in depth
 flowiq au pull <organization_id>                       # pending, with context
 flowiq au pull <organization_id> --status all --titles "EFT, bank"
 flowiq au pull <organization_id> --before 20 --after 10 --no-files
-# → ./.flowiq/agent-updates/<slug>.json + files/<update-id>/<attachment>
+# → ./.flowiq/agent-updates/<slug>.json (pending) or <slug>.<status>.json + files/<update-id>/<attachment>
 
 flowiq au resolve <update_id> --note "We updated the agent so it no longer …"
 flowiq au resolve <update_id> --status declined --internal "duplicate of …"
@@ -1757,6 +1803,20 @@ flowiq au resolve <update_id> --status declined --internal "duplicate of …"
   the LAST step, after a live test proves the fix. Don't resolve on hope.
 - An interactive confirm shows exactly what the client will read; `--yes`
   skips the confirm (but never the `--note` requirement).
+- `all` flags: `--status` (`open` default, or any of `pending,in_progress,
+  resolved,declined`, or `all`), `--since` / `--until` (`14d`, `12h`, `2w` or
+  `YYYY-MM-DD`, SAST day start), `--priority`, `--org` (repeatable),
+  `--titles`, `--search`, `--limit` (default 1000, max 5000; a ⚠ TRUNCATED
+  line says when more matched), `--context` (+ `--before/--after/--recent`),
+  `--files`, `--summary`, `--no-desc`, `--out`, `--json`. No context window and
+  no attachment download unless asked, which is what keeps it fast.
+- Every update (in `all` and `pull`) names the **agent that answers that
+  conversation**: the contact's binding, else the agent on the update, else the
+  org's active agent, with a ⚠ when it is not the active one, so a fix goes to
+  the right agent.
+- `pull` builds the context windows in parallel (v0.9.3), so `--status all` no
+  longer times out on orgs with long ticket histories, and `--no-files` really
+  skips downloads.
 
 ### Broadcast planning — `flowiq plans list|show|status` (alias `planning`) (v0.7.3)
 
@@ -1767,6 +1827,8 @@ and Flowapt reviews), from the terminal.
 flowiq plans list                                        # open plans across every ACTIVE client
 flowiq plans list --status pending_review                # waiting for Flowapt review
 flowiq plans list <organization_id> --status all --since 2026-09-01
+flowiq plans list --created-since 2026-09-22              # what clients submitted TODAY (v0.9.1)
+flowiq plans list --touched-since 2026-09-20              # anything edited or reviewed since
 flowiq plans show <plan_id>                              # copy, second message, buttons, creative, audience, notes
 flowiq plans show <plan_id> --json --out plan.json
 flowiq plans status <plan_id> --to approved              # dry run
@@ -1779,6 +1841,9 @@ flowiq plans status <plan_id> --to sent --commit
   `--status all` / a status / a comma list to widen or narrow, `--since` to
   filter by send date, `--include-inactive` for inactive orgs. The header
   shows the totals for every status, and each row prints the full plan id.
+  **`--created-since` / `--touched-since` (v0.9.1)** filter the ROW's own
+  timestamps instead of the send date (SAST day start) — "what did a client
+  submit today", "what has moved since Friday", which `--since` cannot answer.
 - **`show`** prints the plan the way the dialog does: message copy, the
   second message sent when a button is tapped, buttons with their URLs, the
   creative (file name + link), audience, template link, the response to the
@@ -1840,7 +1905,7 @@ version you have installed.
 | `FLOWIQ_API_URL` | `https://api.flowiq.live` | Override the API host (local dev, staging). |
 | `FLOWIQ_TOKEN` | (saved in `~/.config/flowiq/auth.json`) | Override the auth token, useful for CI. |
 | `FLOWIQ_NO_UPDATE_CHECK` | (unset) | Set to `1` to silence the "you're behind" update hint (also honours `NO_UPDATE_NOTIFIER=1` and any `CI` env). |
-| `FLOWMOD_EVO_DB_URL` | (none) | Full `postgres://` URL for `groups` (Evolution DB). Required for `groups`. |
+| `FLOWMOD_EVO_DB_URL` | (none) | Full `postgres://` URL for the DEPRECATED `groups --archive` (Evolution DB, frozen since 29 Aug 2026). Not needed for anything else. |
 | `FLOWMOD_DB_HOST/PORT/USER/PASS/NAME` | (none) | Alternative to `FLOWMOD_EVO_DB_URL` — assembled into a connection string. |
 
 ## Upgrading

package/TEAM-GUIDE.md

@@ -96,6 +96,7 @@ When you see it, run `npm i -g @flowapt/flowiq-cli` — a stale version also mea
 | **Find an org's ID** (needed by nearly every command) | `flowiq org list` — or `flowiq org list african` to filter |
 | See broadcast plans waiting for Flowapt review, across every client | `flowiq plans list --status pending_review`, then `flowiq plans show <plan_id>` for the copy, second message, buttons, creative and audience |
 | See one client's broadcast plans | `flowiq plans list <org_id>` (open plans) or `flowiq plans list <org_id> --status all --since 2026-09-01` |
+| "What did clients submit today?" | `flowiq plans list --created-since 2026-09-22` (v0.9.1) — `--since` filters the SEND date, `--created-since` / `--touched-since` filter when the plan itself was created or last changed |
 | Mark a broadcast plan approved, scheduled or sent | `flowiq plans status <plan_id> --to sent` (a dry run), then add `--commit`. Rejecting needs `--comment "..."`, which the client reads |
 | What's the stock on a product, per branch? | `flowiq shopify stock <org_id> "olive oil"` — shows each location by NAME, and says "not tracked" rather than a confusing 0 |
 | Has this order shipped? What's the tracking? | `flowiq shopify order <org_id> '#14728'` — status, courier, tracking number + link |
@@ -109,6 +110,7 @@ When you see it, run `npm i -g @flowapt/flowiq-cli` — a stale version also mea
 | See an org's agents / create one | `flowiq agent list <org_id>` / `flowiq agent create <org_id> --name "…"` — a new agent arrives ready to work (gpt-5.6-luna, high reasoning, prompt switched ON); no follow-up `agent config` needed |
 | Change agent model / tool flags | `flowiq agent config <org_id> --model … --tool view_cart_tool=true` |
 | Set the house model + reasoning tier | `flowiq agent config <org_id> --model gpt-5.6-luna --reasoning-effort high` |
+| Run the agent on Claude (org needs a Claude key in Settings → Integrations) | `flowiq agent config <org_id> --model claude-sonnet-5 --reasoning-effort medium` |
 | Remove a conflicting built-in tool from one agent | `flowiq agent config <org_id> --disable-base-tool get_product_info` (repeatable; safety/delivery tools cannot be disabled) |
 | Agent says an in-stock product "isn't showing" | `flowiq agent config <org_id> --tool collapse_product_variants=true` — the search cap counts VARIANT rows until this is on |
 | Agent can't quote ANY price / "I can't pull the live menu" | `flowiq agent config <org_id> --tool product_lookup=true` — name-based fuzzy lookup that works without embeddings or a live OpenAI key (semantic `get_product_info` needs both) |
@@ -170,7 +172,10 @@ several.
 | Send the NEXT batch of a campaign that already has batches 01-12 | `flowiq seg plan <org_id> --tag-prefix f500 --ids-file next100.txt --batch-size 100 --start-index 13` → `flowiq seg apply <org_id> f500 --commit` (makes `f500-batch-13`; without `--start-index` the plan is REFUSED, because it would re-use `f500-batch-01` and merge the two cohorts) |
 | Split a whole tagged audience into batches of N (e.g. 90k → 7000s) | `flowiq seg plan <org_id> --tag-prefix 3-aug-bc --from-tag "3-aug-bc" --batch-size 7000` → `flowiq seg apply <org_id> 3-aug-bc --commit --yes` (makes `…-batch-01…13`; works at any size — big applies are chunked internally) |
 | Schedule a broadcast for later instead of sending now | `flowiq bc send <org_id> --tag <batch-tag> --template <name> --at "2026-08-05 09:00" --commit` (time is SAST; fires on its own; audience resolved at send time). **Works with --csv too (v0.6.1):** rows import+tag immediately, the send queues server-side, and it shows on the dashboard's Scheduled sends page. Nothing depends on your laptop being on at send time. |
-| See / approve / cancel what's scheduled | `flowiq bc scheduled list <org_id>` → `flowiq bc scheduled approve <org_id> <queue_id>` or `flowiq bc scheduled cancel <org_id> <queue_id> --confirm` |
+| See / approve / cancel what's scheduled | `flowiq bc scheduled list <org_id>` → `flowiq bc scheduled approve <org_id> <queue_id>` or `flowiq bc scheduled cancel <org_id> <queue_id> --confirm`. The plain list shows only what is still OPEN; it now tells you how many fired / cancelled rows it is hiding, and `--all` shows them with who scheduled each one and how big the audience was |
+| "Did a broadcast go out, and who scheduled it?" | `flowiq bc scheduled list <org_id> --all` — every queued send ever, with `via flowiq-cli (name@flowapt.com)`, the audience at schedule time, when it fired and its broadcastId |
+| Find a broadcast someone half-built and saved but never sent | `flowiq bc drafts <org_id>` → `flowiq bc drafts show <org_id> <draft_id>` (v0.9.1). These are the send dialog's SAVED DRAFTS — a draft is not scheduled and will never fire on its own |
+| Read a client's WhatsApp GROUP chat | **Not the CLI.** `flowiq groups` is deprecated — Evolution was retired on 29 Aug 2026 and its copy is frozen. Ask Claude to read it with the WhatsApp MCP (`whatsapp-flowapt`, then `whatsapp-flowmod`) |
 | Send to one batch tag | `flowiq bc send <org_id> --tag <batch-tag> --template … --body param1="Hi {{first_name}}" --commit` (per-contact tokens: the 6 contact fields + `{{attributes.<key>}}`). Sending a **different template to the SAME tag**? Add a distinct `--campaign <name>` — otherwise the CLI aborts (a campaign belongs to one template; reusing it would send the first template's image + skip everyone it already reached). |
 | Send a broadcast whose template has an IMAGE/VIDEO/DOCUMENT header | Same as above — the media is automatic (the template's own stored header). Override with `--header-media <public-url>` if needed. The CLI verifies the resolved media's actual type against the header format — `header video (video ✓ video/mp4)` means verified; a mismatch (e.g. a video template whose stored default is secretly a png — templates made before 3 Aug 2026 can carry this) ABORTS and tells you to pass `--header-media` with the real file. |
 | Send a **CAROUSEL** template (v0.4.9) | Tag mode only: `flowiq bc send <org_id> --tag <batch-tag> --template <carousel_name> --body param1="Hi {{first_name}}" --commit`. Card images are automatic (each card's stored template image, type-verified per card); override with repeatable `--card-media <url>` (one per card, in order). If the cards carry `{{n}}` body variables or URL-button variables, the CLI tells you exactly what to put in a `--cards-file <path>` JSON (one entry per card: `header_media` / `body_params` / `button_payloads` / `url_vars`). Always sends via the python engine (any size); no CSV mode for carousels. |
@@ -196,7 +201,8 @@ several.
 | Manage Shopify/Woo platform webhooks | `flowiq wh pull <org_id>` → edit → `flowiq wh push <slug>` |
 | Manage outbound messaging webhooks (incl. their auth) | `flowiq mw pull <org_id>` → `flowiq mw push <slug> --dry-run` → push |
 | Create a brand-new client org | `flowiq org create --name "Client Name"` → then `agent create` on the printed id |
-| See a client's pending change requests | `flowiq au pull <org_id>` |
+| See EVERY client's open change requests at once | `flowiq au all` (grouped by org; `--since 14d`, `--priority urgent,high`, `--search <text>`, `--status all`, `--summary`, `--json`) |
+| See one client's pending change requests, with the chat around each | `flowiq au pull <org_id>` |
 | Close a client's change request (after verifying the fix!) | `flowiq au resolve <update_id> --note "what changed"` — the client reads the note |
 | Check an org's platform + active agent | `flowiq org info <org_id>` |
 | **See every Settings → Profile switch on an org** | `flowiq org flags show <org_id>` (credentials are never shown) |
@@ -208,8 +214,9 @@ several.
 | Store insights daily without emailing anyone (build history first) | `flowiq insights enable <org_id> --daily --store-only` |
 | Send one insights report right now | `flowiq insights run <org_id> --period weekly --recipient you@flowapt.com` (dry run) → add `--commit` |
 | Work a Pin Board task | `flowiq pin list-remote open` → `pull` → edit → `push` |
-| Log hours you worked for a client (every package = 10h Flowapt work/month) | `flowiq hours log <org_id> --hours 1.5 --desc "what you did"` — plain language, the client sees it on their Client Console |
-| Check a client's package hours / the month across all clients | `flowiq hours list <org_id>` / `flowiq hours summary` |
+| Log hours you worked for a client (against the client's own monthly package) | `flowiq hours log <org_id> --hours 1.5 --desc "what you did"` — plain language, the client sees it on their Client Console |
+| Check a client's package hours / the month across all clients | `flowiq hours list <org_id>` / `flowiq hours summary` (a shared package, like Barkyn's three stores, shows the total across all of them) |
+| See what hours package a client is on | `flowiq hours package show <org_id>` (no org = every package). Setting one is Matt or Gidon only: `flowiq hours package set <org_id> --hours 5` |
 | Generate a client's monthly deck (metrics + copy) after the month has frozen | `flowiq report deck generate <org_id> 2026-08` — then review it at /reporting/deck |
 | See whether a client deck can be approved, and what is still missing | `flowiq report deck status <org_id> 2026-08` |
 | Send yourself a test copy of a client deck (PDF from flowiq@flowapt.com) | `flowiq report deck send <org_id> 2026-08 --test-to you@flowapt.com` — status untouched |
@@ -252,7 +259,9 @@ validates names, URLs, methods and parameter shapes. Unknown keys and unresolved
 object with no required fields remains a warning because it can be intentional.
 Nested object/array schemas are strict and supported. For ChatCart retailer tools, use
 `{{retailer_tools_internal_key}}` only as the `x-api-key` auth value on the
-trusted `express.chatcart.io/retailer-tools/*` gateway; org/contact identity is
+trusted `express.chatcart.io/retailer-tools/*` gateway. A tool that schedules a
+send through `add-to-api-queue` authenticates with `{{flowiq_queue_key}}` as its
+bearer token (the queue refuses the public anon key); it works nowhere else; org/contact identity is
 injected server-side and mutations use `{{operation_idempotency_key}}` for stable,
 operation-scoped idempotency. Batch independent product requests in one
 `search_retailer_products.queries` array (1–12) instead of repeated search calls.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowapt/flowiq-cli",
-  "version": "0.9.0",
+  "version": "0.9.3",
   "description": "Command-line tool for FlowIQ staff: round-trip agent prompts, questionnaires, fine-tuning, pin-board tasks, webhooks, templates, agent-updates, chat exports, and live agent testing without ever touching service-role credentials.",
   "type": "module",
   "bin": {

package/src/commands/agent-updates.js

@@ -1,6 +1,7 @@
-// `flowiq agent-updates pull <org_id> [flags]` / `list`.
+// `flowiq agent-updates pull <org_id> [flags]` / `all` / `list` / `resolve`.
 // Read-only: fetches an org's agent_updates + chat context via /cli/agent-updates,
 // then downloads any attachments client-side into ./.flowiq/agent-updates/files/.
+// `all` (v0.9.3) is the cross-org queue: one server query over every org.
 
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -81,7 +82,9 @@ export async function pull(orgId, opts = {}) {
     process.exit(1);
   }
 
-  const downloadFiles = !opts.noFiles;
+  // Commander turns --no-files into `files: false` (the old `noFiles` read was
+  // never set, so attachments downloaded regardless — gap row 14 Sep 2026).
+  const downloadFiles = opts.files !== false && !opts.noFiles;
   const maxMb = opts.maxMb != null ? Number.parseFloat(opts.maxMb) : DEFAULT_MAX_MB;
   if (!Number.isFinite(maxMb) || maxMb <= 0) {
     console.error(`Invalid --max-mb: ${opts.maxMb}`);
@@ -116,7 +119,10 @@ export async function pull(orgId, opts = {}) {
 
   await fs.mkdir(AU_DIR, { recursive: true });
   const slug = slugify(resp.organization_name, resp.organization_id);
-  const filePath = path.join(AU_DIR, `${slug}.json`);
+  // A non-default status gets its own file, so pulling in_progress no longer
+  // overwrites the pending snapshot (gap rows 18 + 21 Sep 2026).
+  const statusKey = String(resp.status_filter || "pending");
+  const filePath = path.join(AU_DIR, statusKey === "pending" ? `${slug}.json` : `${slug}.${slugify(statusKey, "status")}.json`);
   const overwriting = await fileExists(filePath);
   await fs.writeFile(filePath, JSON.stringify(resp, null, 2) + "\n", "utf8");
 
@@ -138,6 +144,7 @@ export async function pull(orgId, opts = {}) {
     console.log(`      priority=${u.priority}  status=${u.status}  raised=${date}${u.created_by_name ? ` by ${u.created_by_name}` : ""}`);
     console.log(`      desc: ${oneLine(u.description, 140)}`);
     if (u.contact) console.log(`      contact: ${u.contact.full_name ?? "(no name)"} (${u.contact.whatsapp_id ?? u.contact.id})`);
+    if (u.agent) console.log(`      agent:   ${agentLine(u.agent)}`);
     if (u.attachments && u.attachments.length) {
       console.log(`      attachments: ${u.attachments.length} (${u.attachments.map((a) => a.filename || a.type || "file").join(", ")})`);
       for (const a of u.attachments) {
@@ -158,6 +165,112 @@ export async function pull(orgId, opts = {}) {
   console.log(`${path.join(AU_DIR, FILES_DIRNAME)}/<update-id>/ — Read those files for visual context, then act.`);
 }
 
+function agentLine(a) {
+  const src = { update: "set on the update", contact_binding: "contact is bound to it", org_active: "org's active agent" }[a.source] || a.source;
+  const warn = a.is_active ? "" : `  ⚠ NOT the active agent (${a.active_agent_name ?? a.active_agent_id ?? "none"}) — fix THIS agent`;
+  return `${a.name ?? a.id} (${src})${warn}`;
+}
+
+function sastStamp(iso) {
+  if (!iso) return "?";
+  const d = new Date(new Date(iso).getTime() + 2 * 3600e3);
+  return d.toISOString().slice(0, 16).replace("T", " ");
+}
+
+const PRIORITY_MARK = { urgent: "‼", high: "!", medium: "·", low: " " };
+
+// --- all (cross-org queue) --------------------------------------------------
+// One server query across every org: no per-org UUIDs, no context window and
+// no attachment downloads unless asked, so the whole open queue is one call.
+export async function all(opts = {}) {
+  const query = { scope: "all", status: opts.status || "open" };
+  if (opts.since) query.since = opts.since;
+  if (opts.until) query.until = opts.until;
+  if (opts.priority) query.priority = opts.priority;
+  if (opts.org && opts.org.length) query.org = [].concat(opts.org).join(",");
+  if (opts.titles) query.titles = opts.titles;
+  if (opts.search) query.search = opts.search;
+  if (opts.limit) query.limit = String(opts.limit);
+  if (opts.context) {
+    query.context = "1";
+    if (opts.before != null) query.before = String(opts.before);
+    if (opts.after != null) query.after = String(opts.after);
+    if (opts.recent != null) query.recent = String(opts.recent);
+  }
+
+  let resp;
+  try {
+    resp = await http.get("agent-updates", query);
+  } catch (e) {
+    console.error(`Pull failed: ${e.message}`);
+    process.exit(1);
+  }
+
+  if (opts.files) {
+    const maxMb = opts.maxMb != null ? Number.parseFloat(opts.maxMb) : DEFAULT_MAX_MB;
+    const maxBytes = Math.round(maxMb * 1024 * 1024);
+    for (const u of resp.updates || []) {
+      if (!(u.attachments || []).length && !u.superadmin_response_image) continue;
+      try { await downloadUpdateFiles(u, maxBytes); } catch (e) { u._file_download_error = e.message; }
+    }
+  }
+
+  if (opts.json) {
+    process.stdout.write(JSON.stringify(resp, null, 2) + "\n");
+    return;
+  }
+
+  await fs.mkdir(AU_DIR, { recursive: true });
+  const statusKey = Array.isArray(resp.filters?.status) ? resp.filters.status.join("-") : String(resp.filters?.status ?? "all");
+  const filePath = opts.out ? path.resolve(opts.out) : path.join(AU_DIR, `_all.${slugify(statusKey, "all")}.json`);
+  await fs.writeFile(filePath, JSON.stringify(resp, null, 2) + "\n", "utf8");
+
+  const updates = resp.updates || [];
+  const f = resp.filters || {};
+  console.log(`Wrote ${filePath}  (${resp.elapsed_ms ?? "?"} ms server)`);
+  console.log(`  status:   ${Array.isArray(f.status) ? f.status.join(", ") : f.status}` +
+    `${f.since ? `  · since ${sastStamp(f.since)} SAST` : ""}${f.until ? `  · until ${sastStamp(f.until)}` : ""}` +
+    `${f.priority ? `  · priority ${f.priority.join(",")}` : ""}${f.search ? `  · search "${f.search}"` : ""}` +
+    `${f.titles ? `  · titles ${f.titles.join("|")}` : ""}${f.org ? `  · ${f.org.length} org(s)` : ""}`);
+  console.log(`  updates:  ${resp.returned} across ${(resp.by_org || []).length} org(s)` +
+    (resp.truncated ? `  ⚠ TRUNCATED: ${resp.total_matched} matched, raise --limit` : ""));
+  if (!updates.length) { console.log("  (nothing matches)"); return; }
+
+  console.log("");
+  console.log("  By org (count · pending · in progress · urgent/high · oldest):");
+  for (const b of resp.by_org || []) {
+    const age = Math.floor((Date.now() - new Date(b.oldest_created_at).getTime()) / 86400e3);
+    console.log(`    ${String(b.count).padStart(4)}  ${String(b.pending).padStart(3)} ${String(b.in_progress).padStart(3)} ${String(b.urgent_or_high).padStart(3)}  ${String(age + "d").padStart(5)}  ${b.organization_name ?? b.organization_id}`);
+  }
+  if (opts.summary) return;
+
+  const byOrg = new Map();
+  for (const u of updates) {
+    if (!byOrg.has(u.organization_id)) byOrg.set(u.organization_id, []);
+    byOrg.get(u.organization_id).push(u);
+  }
+  for (const b of resp.by_org || []) {
+    const list = byOrg.get(b.organization_id) || [];
+    console.log("");
+    console.log(`  ── ${b.organization_name ?? b.organization_id}  (${b.organization_id})`);
+    for (const u of list) {
+      const mark = PRIORITY_MARK[u.priority] ?? "?";
+      const st = u.status === "pending" ? "" : ` [${u.status}]`;
+      console.log(`   ${mark} ${u.id.slice(0, 8)}  ${String(u.age_days + "d").padStart(4)}  ${oneLine(u.title, 70)}${st}`);
+      const bits = [];
+      if (u.created_by_name) bits.push(`by ${u.created_by_name}`);
+      if (u.contact) bits.push(`contact ${u.contact.full_name ?? u.contact.whatsapp_id ?? u.contact.id}`);
+      if ((u.attachments || []).length) bits.push(`${u.attachments.length} attachment(s)`);
+      if (u.agent && !u.agent.is_active) bits.push(`⚠ agent ${u.agent.name ?? u.agent.id} is NOT active`);
+      if (bits.length) console.log(`               ${bits.join(" · ")}`);
+      if (opts.desc !== false && u.description) console.log(`               ${oneLine(u.description, 150)}`);
+    }
+  }
+  console.log("");
+  console.log("Full text, contacts, agents" + (opts.context ? ", chat context" : "") + " are in the JSON. Drill into one org with");
+  console.log("`flowiq au pull <org_id>` (chat context + attachments), then `flowiq au resolve <id> --note …`.");
+}
+
 export async function list() {
   let files;
   try {

package/src/commands/broadcast.js

@@ -1791,7 +1791,21 @@ export async function scheduledList(orgId, opts = {}) {
     });
   } catch (e) { console.error(`Scheduled list failed: ${e.message}`); if (e.body?.error) console.error(`  ${e.body.error}`); process.exit(1); }
   if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
-  if (!resp.scheduled?.length) { console.log(`No ${opts.all ? "" : "open "}scheduled broadcasts on ${resp.organization_name}.`); return; }
+  // An empty list must say what it is HIDING. "No open scheduled broadcasts"
+  // read as "this org has never scheduled anything" on an org with four fired
+  // rows (Johnson Fitness, 22 Sep 2026) and sent that session to raw SQL.
+  const counts = resp.status_counts ?? {};
+  const shownFilter = opts.all ? "all" : (opts.status || "open");
+  const hidden = Object.entries(counts)
+    .filter(([st]) => shownFilter === "all" ? false : (shownFilter === "open" ? !["pending", "request"].includes(st) : st !== shownFilter))
+    .map(([st, n]) => `${n} ${st}`);
+  if (!resp.scheduled?.length) {
+    console.log(`No ${opts.all ? "" : `${shownFilter} `}scheduled broadcasts on ${resp.organization_name}.`);
+    if (hidden.length) {
+      console.log(`  ${hidden.join(" · ")} row(s) exist on this org — see them with: flowiq bc scheduled list ${orgId} --all`);
+    }
+    return;
+  }
   console.log(`Scheduled broadcasts on ${resp.organization_name}:`);
   for (const s of resp.scheduled) {
     const flag = s.stalled ? " ⚠ AWAITING APPROVAL — will NOT fire" : "";
@@ -1806,6 +1820,62 @@ export async function scheduledList(orgId, opts = {}) {
   }
   console.log("");
   console.log(`  ${resp.count} row(s). Approve: flowiq bc scheduled approve <org> <id> · Cancel: … cancel <org> <id>`);
+  if (hidden.length) console.log(`  not shown: ${hidden.join(" · ")} (add --all)`);
+}
+
+/** List the org's SAVED SEND DRAFTS (broadcast_send_drafts). Read-only. */
+export async function draftsList(orgId, opts = {}) {
+  if (!UUID_RE.test(orgId)) { console.error(`Error: "${orgId}" is not a valid organization UUID.`); process.exit(1); }
+  let resp;
+  try {
+    resp = await http.post("broadcast", { action: "drafts-list", organization_id: orgId, limit: opts.limit });
+  } catch (e) { console.error(`Drafts list failed: ${e.message}`); if (e.body?.error) console.error(`  ${e.body.error}`); process.exit(1); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (!resp.drafts?.length) { console.log(`No saved send drafts on ${resp.organization_name}.`); return; }
+  console.log(`Saved send drafts on ${resp.organization_name} (newest first):`);
+  for (const d of resp.drafts) {
+    console.log("");
+    console.log(`  ${d.id}`);
+    console.log(`    ${d.name || "(unnamed)"} · template ${d.template_name ?? "?"}${d.mode ? ` · ${d.mode}` : ""}${d.engine ? ` · ${d.engine}` : ""}`);
+    const aud = [];
+    if (d.tags?.length) aud.push(`tags ${d.tags.join(", ")}`);
+    if (d.segment) aud.push(`segment ${d.segment}`);
+    if (d.recipient_count != null) aud.push(`${d.recipient_count} recipient(s)`);
+    if (!aud.length) aud.push("no audience chosen yet");
+    if (aud.length) console.log(`    ${aud.join(" · ")}`);
+    if (d.scheduled_for) console.log(`    scheduled for ${fmtSast(d.scheduled_for)} SAST`);
+    console.log(`    saved ${fmtSast(d.updated_at)} SAST${d.created_by_name ? ` by ${d.created_by_name}` : ""}`);
+  }
+  console.log("");
+  console.log(`  ${resp.count} draft(s). Full config: flowiq bc drafts show ${orgId} <draft_id>`);
+  console.log("  A draft is NOT scheduled and will never fire on its own — it is a saved form in the send dialog.");
+}
+
+/** One saved send draft in full. Read-only. */
+export async function draftsShow(orgId, draftId, opts = {}) {
+  if (!UUID_RE.test(orgId)) { console.error(`Error: "${orgId}" is not a valid organization UUID.`); process.exit(1); }
+  if (!UUID_RE.test(draftId || "")) { console.error(`Error: "${draftId}" is not a valid draft id (get it from: flowiq bc drafts <org>).`); process.exit(1); }
+  let resp;
+  try {
+    resp = await http.post("broadcast", { action: "drafts-show", organization_id: orgId, draft_id: draftId });
+  } catch (e) { console.error(`Draft show failed: ${e.message}`); if (e.body?.error) console.error(`  ${e.body.error}`); process.exit(1); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const d = resp.draft;
+  console.log(`${d.name || "(unnamed)"} — ${resp.organization_name}`);
+  console.log(`  id:        ${d.id}`);
+  console.log(`  template:  ${d.template_name ?? "?"}`);
+  if (d.mode) console.log(`  mode:      ${d.mode}`);
+  if (d.tags?.length) console.log(`  tags:      ${d.tags.join(", ")}`);
+  if (d.segment) console.log(`  segment:   ${d.segment}`);
+  if (d.recipient_count != null) console.log(`  audience:  ${d.recipient_count} recipient(s)`);
+  if (d.engine) console.log(`  engine:    ${d.engine}`);
+  if (d.carousel_cards) console.log(`  carousel:  ${d.carousel_cards} card override(s)`);
+  if (d.scheduled_for) console.log(`  scheduled: ${fmtSast(d.scheduled_for)} SAST (in the draft only — nothing is queued)`);
+  if (d.header_media) console.log(`  header:    ${d.header_media}`);
+  console.log(`  saved:     ${fmtSast(d.updated_at)} SAST${d.created_by_name ? ` by ${d.created_by_name}` : ""} · created ${fmtSast(d.created_at)} SAST`);
+  console.log("");
+  console.log("Stored config:");
+  console.log(JSON.stringify(d.config ?? {}, null, 2).split("\n").map((l) => `  ${l}`).join("\n"));
 }
 
 /** Approve (request → pending) or cancel a scheduled broadcast. */

package/src/commands/groups.js

@@ -11,6 +11,16 @@
 //   FLOWMOD_DB_HOST / FLOWMOD_DB_PORT / FLOWMOD_DB_USER / FLOWMOD_DB_PASS / FLOWMOD_DB_NAME
 //
 // Read-only: there is no `push` — group history is a system of record.
+//
+// ⛔ DEPRECATED (Matt, 22 Sep 2026): Evolution is fully deprecated. The flowapt
+// instance logged out of WhatsApp on 29 Aug 2026 (`Instance.connectionStatus`
+// 'close', reason 401) and has stored NOTHING since, so this command answers
+// from a frozen archive while looking current — on 22 Sep it reported the
+// Johnson Fitness group's last message as 17 Aug when the group had traffic
+// that morning. READ A GROUP CHAT WITH THE WHATSAPP MCP:
+//   mcp__whatsapp-flowapt__list_chats / list_messages  (then whatsapp-flowmod)
+// Both verbs now REFUSE unless --archive is passed, because a stale read that
+// looks complete is worse than an error.
 
 import fs from "node:fs/promises";
 import path from "node:path";
@@ -64,6 +74,32 @@ async function connect() {
   return client;
 }
 
+// ---------- deprecation guard ----------
+// Evolution is deprecated; the store is frozen. Refuse rather than answer with
+// a stale window that reads as complete.
+const ARCHIVE_FROZEN_NOTE =
+  "Evolution stopped syncing on 29 Aug 2026 (the flowapt instance was logged out), so anything after that date is MISSING here.";
+
+function refuseUnlessArchive(opts, what) {
+  if (opts.archive) {
+    console.error("⚠ ARCHIVE READ — Evolution is deprecated and this data is FROZEN.");
+    console.error(`  ${ARCHIVE_FROZEN_NOTE}`);
+    console.error("  Anything recent must come from the WhatsApp MCP (whatsapp-flowapt, then whatsapp-flowmod).");
+    console.error("");
+    return;
+  }
+  console.error(`⛔ \`flowiq groups ${what}\` is DEPRECATED — Evolution is no longer in use.`);
+  console.error(`   ${ARCHIVE_FROZEN_NOTE}`);
+  console.error("");
+  console.error("   Read a group chat with the WhatsApp MCP instead:");
+  console.error("     mcp__whatsapp-flowapt__list_chats   { query: \"<group name>\" }");
+  console.error("     mcp__whatsapp-flowapt__list_messages { chat_jid: \"…@g.us\", limit: 50 }");
+  console.error("     …and mcp__whatsapp-flowmod__* if the group is not on the flowapt line.");
+  console.error("");
+  console.error("   To read the frozen pre-29-Aug archive anyway, pass --archive.");
+  process.exit(1);
+}
+
 // ---------- helpers ----------
 function slugify(name, fallback) {
   const s = String(name || "")
@@ -132,7 +168,10 @@ function extractText(m) {
 }
 
 async function resolveInstanceId(client, instanceName) {
-  const r = await client.query('SELECT id, "profileName" FROM "Instance" WHERE name = $1', [instanceName]);
+  const r = await client.query(
+    'SELECT id, "profileName", "connectionStatus", "updatedAt" FROM "Instance" WHERE name = $1',
+    [instanceName]
+  );
   if (!r.rows.length) {
     const all = await client.query('SELECT name FROM "Instance" ORDER BY name');
     console.error(
@@ -145,6 +184,7 @@ async function resolveInstanceId(client, instanceName) {
 
 // ---------- groups list ----------
 export async function list(opts = {}) {
+  refuseUnlessArchive(opts, "list");
   const instanceName = opts.instance || DEFAULT_INSTANCE;
   const client = await connect();
   try {
@@ -161,7 +201,12 @@ export async function list(opts = {}) {
         ORDER BY last_ts DESC NULLS LAST`,
       [inst.id]
     );
-    console.log(`Instance "${instanceName}" (${inst.profileName ?? "?"}) — ${r.rows.length} group chats\n`);
+    // The instance's own state explains every stale row below it.
+    const connLabel = inst.connectionStatus === "open" ? "connected" : `${inst.connectionStatus} (not syncing)`;
+    console.log(
+      `Instance "${instanceName}" (${inst.profileName ?? "?"}) — ${r.rows.length} group chats · ${connLabel}` +
+        (inst.updatedAt ? ` since ${new Date(inst.updatedAt).toISOString().slice(0, 10)}` : "") + "\n"
+    );
     const rows = r.rows.map((x) => ({
       group: x.name || "(no name)",
       msgs: Number(x.msgs || 0),
@@ -181,6 +226,7 @@ export async function list(opts = {}) {
 
 // ---------- groups pull ----------
 export async function pull(nameOrJid, opts = {}) {
+  refuseUnlessArchive(opts, "pull");
   const instanceName = opts.instance || DEFAULT_INSTANCE;
   const limit = Math.max(1, Math.min(Number(opts.limit) || DEFAULT_LIMIT, 5000));
 

package/src/commands/hours.js

@@ -1,7 +1,9 @@
 // `flowiq hours log <org> --minutes N|--hours H --desc "…"` / `list <org>` /
-// `summary`. The client-hours ledger: every org's package includes 10 hours of
-// Flowapt work per calendar month, and every piece of client work gets logged
-// against it (manually here, or automatically by Claude via the FlowIQ MCP).
+// `summary` / `package show|set|clear`. The client-hours ledger: every piece
+// of client work gets logged against the org's monthly hours PACKAGE. Since
+// v0.9.2 each org has its own package (or shares one with sibling orgs, e.g.
+// Barkyn PT/ES/IT), set with `hours package set` by Matt or Gidon only; an org
+// with no package reads "no package on file", never an implied 10h.
 // All writes happen server-side (/cli/hours) with the staff token.
 
 import { http } from "../http.js";
@@ -14,6 +16,24 @@ function fmtHours(minutes) {
   return `${Number.isInteger(h) ? h : h.toFixed(1)}h`;
 }
 
+/** "5h package" / "10h package shared with Barkyn - Spain, Barkyn - Italy" / "no package on file". */
+function describePackage(pkg, orgName) {
+  if (!pkg) return "no package on file (set one with `flowiq hours package set`)";
+  const size = `${fmtHours(pkg.allowance_minutes)}/month`;
+  if (!pkg.shared) return `${size} package`;
+  const others = (pkg.organizations || []).filter((n) => n !== orgName);
+  return `${size} package "${pkg.name}", shared with ${others.join(", ")}`;
+}
+
+/** "3h of 5h used (2h left)" / "⚠ 1.5h OVER" against a package; "" with none. */
+function standingLine(pkg) {
+  if (!pkg) return "";
+  const used = pkg.used_minutes;
+  const allowance = pkg.allowance_minutes;
+  const tail = used > allowance ? `  ⚠ ${fmtHours(used - allowance)} OVER` : ` (${fmtHours(allowance - used)} left)`;
+  return `${fmtHours(used)} of ${fmtHours(allowance)} used${pkg.shared ? " across the shared package" : ""}${tail}`;
+}
+
 function requireOrg(orgId) {
   if (!UUID_RE.test(orgId || "")) {
     console.error(`Error: "${orgId}" is not a valid organization UUID (find it with \`flowiq org list <search>\`).`);
@@ -88,11 +108,11 @@ export async function log(orgId, opts) {
     process.exit(1);
   }
 
-  const used = resp.month_total_minutes;
-  const allowance = resp.allowance_hours * 60;
   console.log(`Logged ${fmtHours(minutes)} for ${resp.organization.name}`);
-  console.log(`  entry:  ${resp.id}`);
-  console.log(`  month:  ${resp.month} — ${fmtHours(used)} of ${resp.allowance_hours}h package used${used > allowance ? `  ⚠ ${fmtHours(used - allowance)} OVER` : ` (${fmtHours(allowance - used)} left)`}`);
+  console.log(`  entry:   ${resp.id}`);
+  console.log(`  month:   ${resp.month}: ${fmtHours(resp.month_total_minutes)} logged for this org`);
+  console.log(`  package: ${describePackage(resp.package, resp.organization.name)}`);
+  if (resp.package) console.log(`           ${standingLine(resp.package)}`);
 }
 
 export async function list(orgId, opts) {
@@ -109,9 +129,10 @@ export async function list(orgId, opts) {
     console.log(JSON.stringify(resp, null, 2));
     return;
   }
-  const over = resp.remaining_minutes < 0;
   console.log(`${resp.organization.name} — ${resp.month}`);
-  console.log(`  package: ${resp.allowance_hours}h/month · used ${fmtHours(resp.total_minutes)} · ${over ? `⚠ ${fmtHours(-resp.remaining_minutes)} OVER` : `${fmtHours(resp.remaining_minutes)} left`}`);
+  console.log(`  logged:  ${fmtHours(resp.total_minutes)} for this org`);
+  console.log(`  package: ${describePackage(resp.package, resp.organization.name)}`);
+  if (resp.package) console.log(`           ${standingLine(resp.package)}`);
   if (!resp.entries.length) {
     console.log("  (no entries this month)");
     return;
@@ -138,13 +159,107 @@ export async function summary(opts) {
     return;
   }
   if (!resp.organizations.length) {
-    console.log(`(no hours logged for any org in ${resp.month})`);
+    console.log(`(no hours logged and no packages set for ${resp.month})`);
     return;
   }
-  const allowance = resp.allowance_hours * 60;
-  console.log(`Client hours — ${resp.month} (package: ${resp.allowance_hours}h/month per org)\n`);
+  console.log(`Client hours — ${resp.month}\n`);
   for (const o of resp.organizations) {
-    const flag = o.total_minutes > allowance ? `  ⚠ ${fmtHours(o.total_minutes - allowance)} OVER` : "";
-    console.log(`  ${fmtHours(o.total_minutes).padStart(6)}  (${String(o.entries).padStart(2)} entr${o.entries === 1 ? "y" : "ies"})  ${o.name || o.id}${flag}`);
+    const p = o.package;
+    let pkgCol;
+    if (!p) pkgCol = "no package on file";
+    else if (p.shared) {
+      const flag = p.used_minutes > p.allowance_minutes ? `  ⚠ ${fmtHours(p.used_minutes - p.allowance_minutes)} OVER` : "";
+      pkgCol = `shared "${p.name}": ${fmtHours(p.used_minutes)} / ${fmtHours(p.allowance_minutes)}${flag}`;
+    } else {
+      const flag = p.used_minutes > p.allowance_minutes ? `  ⚠ ${fmtHours(p.used_minutes - p.allowance_minutes)} OVER` : "";
+      pkgCol = `of ${fmtHours(p.allowance_minutes)}${flag}`;
+    }
+    console.log(`  ${fmtHours(o.total_minutes).padStart(6)}  (${String(o.entries).padStart(3)} entr${o.entries === 1 ? "y  " : "ies"})  ${(o.name || o.id).padEnd(28)} ${pkgCol}`);
+  }
+}
+
+// ── packages ───────────────────────────────────────────────────────────────
+
+function printPackage(p) {
+  const who = p.updated_by ? ` · set by ${p.updated_by} ${String(p.updated_at).slice(0, 10)}` : "";
+  console.log(`  ${p.name}  ·  ${fmtHours(p.monthly_minutes)}/month${p.organizations.length > 1 ? "  ·  SHARED" : ""}${who}`);
+  for (const o of p.organizations) console.log(`      ${o.name}  ${o.id}`);
+  if (p.notes) console.log(`      notes: ${p.notes}`);
+}
+
+export async function packageShow(orgId, opts) {
+  if (orgId) requireOrg(orgId);
+  let resp;
+  try {
+    resp = await http.get("hours", { packages: "1" });
+  } catch (e) {
+    console.error(`Package lookup failed: ${e.message}`);
+    process.exit(1);
+  }
+  let packages = resp.packages;
+  if (orgId) packages = packages.filter((p) => p.organizations.some((o) => o.id === orgId));
+  if (opts.json) {
+    console.log(JSON.stringify(orgId ? { packages } : resp, null, 2));
+    return;
+  }
+  if (!packages.length) {
+    console.log(orgId ? "No package on file for this org." : "No packages set yet.");
+  } else {
+    console.log(`Hours packages (${packages.length})\n`);
+    for (const p of packages) printPackage(p);
+  }
+  console.log(`\nChanges: ${resp.editors.join(", ")} only${resp.can_edit ? " (you can)" : " (not you)"}.`);
+}
+
+export async function packageSet(orgIds, opts) {
+  for (const id of orgIds) requireOrg(id);
+  const hours = Number(opts.hours);
+  if (!Number.isFinite(hours) || hours < 0 || hours > 1000) {
+    console.error(`Error: --hours must be a number between 0 and 1000 (got "${opts.hours}").`);
+    process.exit(1);
+  }
+  let resp;
+  try {
+    resp = await http.post("hours", {
+      action: "package_set",
+      organization_ids: orgIds,
+      hours,
+      name: opts.name || undefined,
+      notes: opts.notes || undefined,
+      dry_run: !!opts.dryRun,
+    });
+  } catch (e) {
+    console.error(`Package change failed: ${e.message}`);
+    process.exit(1);
+  }
+  const plan = resp.plan;
+  const who = plan.organizations.map((o) => o.name).join(", ");
+  console.log(`${resp.dry_run ? "DRY RUN — nothing written.\n" : ""}${plan.mode === "update" ? "Update" : "New"} package "${plan.name}": ${fmtHours(plan.monthly_minutes)}/month for ${who}`);
+  for (const b of plan.before) {
+    console.log(`  before: "${b.name}" ${fmtHours(b.monthly_minutes)}/month (${b.organizations.map((o) => o.name).join(", ")})`);
+  }
+  if (!plan.before.length) console.log("  before: no package on file");
+  for (const l of plan.left_behind) {
+    console.log(`  ⚠ ${l.remaining.join(", ")} stay${l.remaining.length === 1 ? "s" : ""} on "${l.package}" without ${plan.organizations.length === 1 ? "this org" : "these orgs"}`);
+  }
+  if (resp.dry_run) console.log("\nRun again without --dry-run to apply.");
+}
+
+export async function packageClear(orgId, opts) {
+  requireOrg(orgId);
+  let resp;
+  try {
+    resp = await http.post("hours", { action: "package_clear", organization_id: orgId, dry_run: !!opts.dryRun });
+  } catch (e) {
+    console.error(`Package change failed: ${e.message}`);
+    process.exit(1);
+  }
+  if (resp.changed === false) {
+    console.log(`${resp.organization.name}: no package on file, nothing to clear.`);
+    return;
   }
+  const plan = resp.plan;
+  console.log(`${resp.dry_run ? "DRY RUN — nothing written.\n" : ""}${plan.organization.name} ${resp.dry_run ? "would leave" : "left"} package "${plan.package.name}" (${fmtHours(plan.package.monthly_minutes)}/month)`);
+  if (plan.package_removed) console.log("  the package had no other orgs, so it is removed");
+  else console.log(`  still on it: ${plan.remaining.join(", ")}`);
 }

package/src/commands/plans.js

@@ -65,6 +65,8 @@ export async function list(orgId, opts = {}) {
   if (orgId) query.organization_id = orgId;
   if (opts.status) query.status = opts.status;
   if (opts.since) query.since = opts.since;
+  if (opts.createdSince) query.created_since = opts.createdSince;
+  if (opts.touchedSince) query.touched_since = opts.touchedSince;
   if (opts.includeInactive) query.include_inactive = "1";
   if (opts.limit != null) query.limit = String(opts.limit);
 
@@ -83,7 +85,12 @@ export async function list(orgId, opts = {}) {
     ? resp.organization_name
     : `all ${resp.include_inactive ? "" : "active "}orgs`;
   const totals = STATUS_ORDER.filter((s) => resp.counts?.[s]).map((s) => `${s} ${resp.counts[s]}`).join(" · ");
-  console.log(`Broadcast plans · ${scope} · status ${resp.status_filter}${resp.since ? ` · from ${resp.since}` : ""}`);
+  const windowBits = [
+    resp.since ? `send date from ${resp.since}` : null,
+    resp.created_since ? `created from ${resp.created_since}` : null,
+    resp.touched_since ? `touched from ${resp.touched_since}` : null,
+  ].filter(Boolean);
+  console.log(`Broadcast plans · ${scope} · status ${resp.status_filter}${windowBits.length ? ` · ${windowBits.join(" · ")}` : ""}`);
   console.log(`  every status in this scope: ${totals || "none"}`);
 
   const plans = resp.plans || [];

package/src/index.js

@@ -223,13 +223,15 @@ export function run(argv) {
   // groups (read-only: pull WhatsApp GROUP chat history from the FlowMod Evolution DB)
   const groups = program.command("groups")
     .alias("grp")
-    .description("Read WhatsApp group chat history from the FlowMod Evolution DB (set FLOWMOD_EVO_DB_URL env). Read-only.");
+    .description("DEPRECATED — Evolution is retired and frozen (nothing since 29 Aug 2026). Read group chats with the whatsapp-flowapt / whatsapp-flowmod MCP instead.");
   groups.command("list")
-    .description("List an Evolution instance's group chats with message counts + last activity")
+    .description("[archive only] List the frozen Evolution instance's group chats — needs --archive")
     .option("--instance <name>", "Evolution instance name", "flowapt")
+    .option("--archive", "read the FROZEN pre-29-Aug-2026 archive anyway")
     .action((opts) => groupsCmd.list(opts));
   groups.command("pull <name-or-jid>")
-    .description("Pull a group's messages in a time window into a local JSON file + print a timeline")
+    .description("[archive only] Pull a group's FROZEN message history into a local JSON file — needs --archive")
+    .option("--archive", "read the FROZEN pre-29-Aug-2026 archive anyway")
     .option("--instance <name>", "Evolution instance name", "flowapt")
     .option("--last <window>", "rolling window back from now, e.g. 48h, 7d, 2w, 90m", "48h")
     .option("--since <date>", "window start (SAST), YYYY-MM-DD or \"YYYY-MM-DD HH:MM\" (overrides --last)")
@@ -255,9 +257,9 @@ export function run(argv) {
     .description("List every task in the DB (optionally filter: open | in_progress | done) to find an id")
     .action((status) => pinboardCmd.listRemote(status));
 
-  // hours (client-hours ledger — every org's package = 10h Flowapt work/month)
+  // hours (client-hours ledger + each org's monthly hours package, v0.9.2)
   const hours = program.command("hours")
-    .description("Client-hours ledger: log + report Flowapt work against each org's 10h/month package");
+    .description("Client-hours ledger: log + report Flowapt work against each org's monthly hours package");
   hours.command("log <organization_id>")
     .description("Log work done for a client org (exactly one of --minutes / --hours)")
     .option("--minutes <n>", "duration in whole minutes")
@@ -273,10 +275,27 @@ export function run(argv) {
     .option("--json", "raw JSON output")
     .action((orgId, opts) => hoursCmd.list(orgId, opts));
   hours.command("summary")
-    .description("Cross-org month totals — every org with logged work, vs the 10h package")
+    .description("Cross-org month totals: every org with logged work or a package, vs its package")
     .option("--month <YYYY-MM>", "which month to report")
     .option("--json", "raw JSON output")
     .action((opts) => hoursCmd.summary(opts));
+  const hoursPkg = hours.command("package")
+    .description("Each org's monthly hours package (one org, or several sharing one). Changes: Matt + Gidon only");
+  hoursPkg.command("show [organization_id]")
+    .description("Every package, or the one an org is on")
+    .option("--json", "raw JSON output")
+    .action((orgId, opts) => hoursCmd.packageShow(orgId, opts));
+  hoursPkg.command("set <organization_ids...>")
+    .description("Put these orgs on ONE package of --hours a month (several orgs = a shared package)")
+    .requiredOption("--hours <h>", "hours included per month (0 = none included, e.g. a self-service plan)")
+    .option("--name <text>", "package name (default: the org's name, or the names joined)")
+    .option("--notes <text>", "where the figure comes from, e.g. \"Order Form 12 Aug 2026\"")
+    .option("--dry-run", "show what would change, write nothing")
+    .action((orgIds, opts) => hoursCmd.packageSet(orgIds, opts));
+  hoursPkg.command("clear <organization_id>")
+    .description("Take an org off its package (back to 'no package on file')")
+    .option("--dry-run", "show what would change, write nothing")
+    .action((orgId, opts) => hoursCmd.packageClear(orgId, opts));
 
   // report deck — the monthly client deck (build / copy / approve / send)
   const report = program.command("report").description("Client reporting: the monthly 10-slide client deck");
@@ -474,7 +493,7 @@ export function run(argv) {
     .option("--agent <id>", "target a specific agent instead of the org's active one")
     .option("--use-settings-prompt [bool]", "settings.use_settings_prompt (true if bare)")
     .option("--model <model>", "settings.model (e.g. gpt-5.4-mini)")
-    .option("--reasoning-effort <level>", "settings.reasoning_effort — low|medium|high (\"\" clears it); pairs with reasoning models (e.g. gpt-5.6-luna + high)")
+    .option("--reasoning-effort <level>", "settings.reasoning_effort — low|medium|high|xhigh|max (\"\" clears it; max = Claude only); pairs with reasoning models (e.g. gpt-5.6-luna + high, claude-sonnet-5 + medium)")
     .option("--rename <name>", "rename the agent")
     .option("--tool <flag=bool>", "toggle a tool flag (repeatable): woo_order_build/woo_tip_field/woo_order_note_field/view_cart_tool/restock_tool/block_tool_status/postal_code_tool_status/shopify_products_web_chat/ticket_tool_status/product_lookup/email_request_tool/collapse_product_variants", agentConfigCmd.collectTool, [])
     .option("--discount [bool]", "agent.discount.enabled (true if bare)")
@@ -487,7 +506,7 @@ export function run(argv) {
   // agent-updates (pending client change-requests + chat context; pull + resolve)
   const au = program.command("agent-updates")
     .alias("au")
-    .description("Pull pending agent_updates + the chat context around each; resolve a ticket with a client-facing note");
+    .description("Agent updates: `all` = every org's queue in one call; `pull` = one org with chat context + attachments; `resolve` with a client-facing note");
   au.command("pull <organization_id>")
     .description("Fetch updates + linked contact + trigger-message window; downloads attachments locally")
     .option("--status <status>", "pending (default) | resolved | in_progress | all")
@@ -498,6 +517,29 @@ export function run(argv) {
     .option("--no-files", "do NOT download attachments (default: download is ON)")
     .option("--max-mb <n>", "skip attachments larger than N MB (default 25)")
     .action((orgId, opts) => agentUpdatesCmd.pull(orgId, opts));
+  au.command("all")
+    .alias("queue")
+    .alias("list-remote")
+    .description("EVERY org's agent updates in one call (default: open = pending + in_progress), grouped by org; → ./.flowiq/agent-updates/_all.<status>.json")
+    .option("--status <list>", "open (default) | pending | in_progress | resolved | declined | all — comma-separated allowed")
+    .option("--since <when>", "raised on/after: 14d, 12h, 2w or YYYY-MM-DD (SAST day start)")
+    .option("--until <when>", "raised on/before (same formats)")
+    .option("--priority <list>", "urgent,high,medium,low (comma-separated)")
+    .option("--org <uuid>", "limit to these org(s) (repeatable or comma-separated)", (v, prev) => prev.concat(v.split(",")), [])
+    .option("--titles <list>", "title contains any of these (comma-separated, ci substring)")
+    .option("--search <text>", "title OR description contains this text (ci)")
+    .option("--limit <n>", "max updates returned (default 1000, max 5000)")
+    .option("--context", "also fetch the chat window around each trigger message (slower)")
+    .option("--before <n>", "with --context: messages before the trigger (default 6)")
+    .option("--after <n>", "with --context: messages after the trigger (default 4)")
+    .option("--recent <n>", "with --context: fallback window when no trigger message (default 10)")
+    .option("--files", "download attachments too (off by default across orgs)")
+    .option("--max-mb <n>", "with --files: skip attachments larger than N MB (default 25)")
+    .option("--summary", "print only the per-org counts")
+    .option("--no-desc", "hide the one-line description under each update")
+    .option("--out <path>", "write the JSON here instead of ./.flowiq/agent-updates/_all.<status>.json")
+    .option("--json", "print the JSON to stdout (no file, no table) — pipe into jq")
+    .action((opts) => agentUpdatesCmd.all(opts));
   au.command("list")
     .description("List local agent-updates snapshots")
     .action(() => agentUpdatesCmd.list());
@@ -517,7 +559,9 @@ export function run(argv) {
   plans.command("list [organization_id]")
     .description("List plans, default open (draft, pending_review, approved, scheduled), across all active orgs or one org")
     .option("--status <status>", "open (default) | all | pending_review | draft | approved | rejected | scheduled | sent | cancelled (comma-separated allowed)")
-    .option("--since <date>", "only plans scheduled on or after YYYY-MM-DD")
+    .option("--since <date>", "only plans whose SEND date is on or after YYYY-MM-DD")
+    .option("--created-since <date>", "only plans CREATED on or after YYYY-MM-DD (SAST) — what a client just submitted")
+    .option("--touched-since <date>", "only plans UPDATED on or after YYYY-MM-DD (SAST)")
     .option("--include-inactive", "include plans from inactive orgs (cross-org listing)")
     .option("--limit <n>", "max plans returned (default 100, max 500)")
     .option("--json", "print the raw response")
@@ -736,6 +780,18 @@ export function run(argv) {
     .option("--confirm", "actually cancel")
     .action((orgId, queueId, opts) => broadcastCmd.scheduledUpdate(orgId, queueId, "cancel", opts));
 
+  const drafts = broadcast.command("drafts")
+    .description("Saved SEND DRAFTS (the send dialog's stored configurations) — read-only");
+  drafts.command("list <organization_id>", { isDefault: true })
+    .description("List the org's saved send drafts, newest first")
+    .option("--limit <n>", "max rows (default 25, max 200)")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => broadcastCmd.draftsList(orgId, opts));
+  drafts.command("show <organization_id> <draft_id>")
+    .description("One saved send draft in full (the whole stored config)")
+    .option("--json", "raw JSON")
+    .action((orgId, draftId, opts) => broadcastCmd.draftsShow(orgId, draftId, opts));
+
   broadcast.command("list-remote <organization_id>")
     .description("List the org's broadcasts newest-first (full broadcastId + template + status + recipients) — the discovery step for `bc status` / `bc retry`")
     .option("--limit <n>", "how many to show (default 25, max 200)")