@flowapt/flowiq-cli 0.9.9 → 0.11.0

package/src/commands/notes.js

@@ -0,0 +1,63 @@
+// `flowiq steer list|add|clear <contact_id>` + `flowiq notes list|add
+// <contact_id>` — the internal rows in a contact's chat (server: api/cli/notes.js).
+
+import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
+const requireContact = (v) => { if (!UUID_RE.test(v || "")) { console.error(`Error: "${v}" is not a valid contact UUID.`); process.exit(1); } };
+
+async function listKind(contactId, kind, opts) {
+  requireContact(contactId);
+  let resp;
+  try { resp = await http.get("notes", { contact_id: contactId, kind, limit: opts.limit }); } catch (e) { fail("List failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const label = kind === "notes" ? "internal note" : "steer";
+  console.log(`${resp.contact_name || "(no name)"} ${resp.contact_whatsapp_id || ""} on ${resp.organization_name}: ${resp.count} ${label}(s)${kind === "steers" ? ` · AI ${resp.bot_status === false ? "OFF" : "on"}${resp.steer_messages_flag ? "" : " · steer_messages flag off (inbox hides the control; vert still applies rows)"}` : ""}`);
+  for (const r of resp.rows) {
+    const head = kind === "notes" ? `${r.author ?? "?"}` : `${r.mode}${r.mode === "once" ? (r.consumed ? ", consumed" : ", pending") : ""}`;
+    console.log(`\n  ${fmtSast(r.created_at)} SAST · ${head}${kind === "steers" && !r.active ? " · inactive" : ""}\n  ${r.id}\n    ${String(r.text).split("\n").join("\n    ")}`);
+  }
+  if (kind === "steers" && resp.rows.some((r) => r.active)) console.log(`\n  Remove: flowiq steer clear ${contactId} [--id <id>] --confirm`);
+}
+
+export const steerList = (contactId, opts = {}) => listKind(contactId, "steers", opts);
+export const notesList = (contactId, opts = {}) => listKind(contactId, "notes", opts);
+
+export async function steerAdd(contactId, textParts, opts = {}) {
+  requireContact(contactId);
+  const text = (Array.isArray(textParts) ? textParts.join(" ") : String(textParts ?? "")).trim();
+  if (!text) { console.error("Error: flowiq steer add <contact_id> \"instruction for the agent\" [--once]"); process.exit(1); }
+  let resp;
+  try { resp = await http.post("notes", { action: "add_steer", contact_id: contactId, text, mode: opts.once ? "once" : "persistent" }); } catch (e) { fail("Steer failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ ${resp.mode === "once" ? "one-shot" : "ongoing"} steer added (${resp.id}) as ${resp.author}. ${resp.mode === "once" ? "The agent applies it on the next reply, then it is spent." : "The agent applies it on EVERY reply until: flowiq steer clear " + contactId + " --id " + resp.id + " --confirm"}`);
+  for (const w of resp.warnings || []) console.error(`  ⚠ ${w}`);
+}
+
+export async function steerClear(contactId, opts = {}) {
+  requireContact(contactId);
+  const ids = opts.id ? [].concat(opts.id) : undefined;
+  let resp;
+  try { resp = await http.post("notes", { action: "clear_steers", contact_id: contactId, steer_ids: ids, confirm: !!opts.confirm }); } catch (e) { fail("Clear failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.dry_run) {
+    if (!resp.count) { console.log("No steers to remove."); return; }
+    console.log(`Would delete ${resp.count} steer(s):`);
+    for (const s of resp.steers) console.log(`  ${s.id}  ${s.mode}${s.consumed ? " (consumed)" : ""}  ${String(s.text).slice(0, 80)}`);
+    console.log("Add --confirm to delete (the texts are kept in the audit row).");
+    return;
+  }
+  console.log(`✓ deleted ${resp.deleted} steer(s).`);
+}
+
+export async function notesAdd(contactId, textParts, opts = {}) {
+  requireContact(contactId);
+  const text = (Array.isArray(textParts) ? textParts.join(" ") : String(textParts ?? "")).trim();
+  if (!text) { console.error("Error: flowiq notes add <contact_id> \"note for the team\""); process.exit(1); }
+  let resp;
+  try { resp = await http.post("notes", { action: "add_note", contact_id: contactId, text }); } catch (e) { fail("Note failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`✓ internal note added (${resp.id}) as ${resp.author}; it shows on the Customer panel, never to the customer.`);
+}

package/src/commands/org.js

@@ -3,6 +3,7 @@
 // are stripped server-side; this only prints derived booleans + public urls.
 
 import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
 
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
@@ -12,31 +13,78 @@ const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/
 export async function list(search, opts = {}) {
   let resp;
   try {
-    resp = await http.get("org", { list: "1", search: search || undefined });
+    resp = await http.get("org", { list: "1", search: search || undefined, number: opts.number || undefined });
   } catch (e) {
     console.error(`Lookup failed: ${e.message}`);
+    if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`);
     process.exit(1);
   }
   if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
 
-  const orgs = (resp.orgs || []).filter((o) => (opts.all ? true : !o.inactive));
+  // A number lookup shows parked orgs too: the number is the question.
+  const orgs = (resp.orgs || []).filter((o) => (opts.all || opts.number ? true : !o.inactive));
   if (!orgs.length) {
-    console.log(search ? `No organizations match "${search}".` : "No organizations found.");
+    console.log(opts.number ? `No organization has WhatsApp number / phone id / WABA ${opts.number}.` : search ? `No organizations match "${search}".` : "No organizations found.");
     return;
   }
   const pad = (s, n) => String(s ?? "").padEnd(n);
   const nameW = Math.min(34, Math.max(4, ...orgs.map((o) => (o.name || "").length)));
-  console.log(`${pad("NAME", nameW)}  ${pad("ID", 36)}  ${pad("PLATFORM", 9)}STORE`);
+  const byNumber = !!opts.number;
+  console.log(`${pad("NAME", nameW)}  ${pad("ID", 36)}  ${byNumber ? `${pad("NUMBER", 16)}${pad("PHONE ID", 18)}${pad("WABA", 18)}` : `${pad("PLATFORM", 9)}STORE`}`);
   for (const o of orgs) {
     console.log(
       `${pad((o.name || "").slice(0, nameW), nameW)}  ${pad(o.id, 36)}  ` +
-      `${pad(o.platform || "—", 9)}${o.store || ""}${o.inactive ? "  (inactive)" : ""}`
+      (byNumber
+        ? `${pad(o.phone_number || "—", 16)}${pad(o.phone_id || "—", 18)}${pad(o.waba_id || "—", 18)}`
+        : `${pad(o.platform || "—", 9)}${o.store || ""}`) +
+      `${o.inactive ? "  (inactive)" : ""}`
     );
   }
   const hidden = (resp.orgs || []).length - orgs.length;
   console.log(`\n${orgs.length} organization(s)${hidden ? ` · ${hidden} inactive hidden (--all to show)` : ""}`);
 }
 
+// `flowiq org agent <org> on|off [--commit] [--yes]` — the agent master switch
+// (organizations.wati_webhook_status). Off = no customer gets the AI. On with
+// vert.active:false + an allowlist = test mode. On with vert.active true =
+// live for everyone, which is the shape that needs --yes.
+export async function agentSwitch(orgId, state, opts = {}) {
+  requireOrg(orgId);
+  const s = String(state || "").toLowerCase();
+  if (!["on", "off"].includes(s)) { console.error('Error: pass "on" or "off", e.g. flowiq org agent <org> off --commit'); process.exit(1); }
+  let resp;
+  try { resp = await http.post("org", { action: "agent_switch", organization_id: orgId, enabled: s === "on", dry_run: !opts.commit, confirm: !!opts.yes }); }
+  catch (e) { fail("Switch failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name} — agent master switch`);
+  console.log(`  now:      ${resp.from ? "ON" : "OFF"} · vert.active ${resp.vert_active ?? "unset"}${resp.allowed_whatsapp_ids?.length ? ` · allowlist ${resp.allowed_whatsapp_ids.join(", ")}` : ""} · active agent ${resp.active_whatsapp_agent ?? "NONE"}`);
+  if (resp.unchanged) { console.log(`  already ${resp.to ? "ON" : "OFF"} — nothing to do.`); return; }
+  console.log(`  ${resp.dry_run ? "would set" : "✓ set"}: ${resp.to ? "ON" : "OFF"} → ${resp.mode}`);
+  if (resp.dry_run) {
+    console.log(`\nDRY RUN — add --commit to switch${resp.needs_confirm ? ", and --yes because this makes the agent LIVE for every customer (set vert.allowed_whatsapp_ids + vert.active false first for a test mode)" : ""}.`);
+  } else {
+    console.log(`\nUndo: flowiq org agent ${orgId} ${resp.from ? "on" : "off"} --commit${resp.from ? " --yes" : ""}`);
+  }
+}
+
+// `flowiq org park <org> [--unpark] --confirm` — organizations.inactive.
+export async function park(orgId, opts = {}) {
+  requireOrg(orgId);
+  let resp;
+  try { resp = await http.post("org", { action: "park", organization_id: orgId, inactive: !opts.unpark, confirm: !!opts.confirm }); }
+  catch (e) { fail("Park failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(`${resp.organization_name} is already ${resp.inactive ? "parked (inactive)" : "active"}.`); return; }
+  const verb = opts.unpark ? "unpark" : "park";
+  if (resp.dry_run) {
+    console.log(`Would ${verb} ${resp.organization_name} (inactive ${resp.from} → ${resp.to}).${resp.master_switch && !opts.unpark ? " Its agent master switch is still ON — parking hides the org from censuses and crons, it does not switch the agent off (flowiq org agent <org> off --commit)." : ""}`);
+    console.log("Add --confirm to write.");
+    return;
+  }
+  console.log(`✓ ${verb}ed ${resp.organization_name} (inactive ${resp.from} → ${resp.to}).${resp.master_switch && !opts.unpark ? " ⚠ agent master switch still ON." : ""}`);
+  console.log(`Undo: flowiq org park ${orgId}${opts.unpark ? "" : " --unpark"} --confirm`);
+}
+
 export async function info(orgId, opts = {}) {
   if (!UUID_RE.test(orgId)) {
     console.error(`Error: "${orgId}" is not a valid organization UUID.`);
@@ -97,3 +145,140 @@ export async function create(opts = {}) {
   console.log(`  flowiq agent create ${resp.id} --name "<AgentName>" --make-active`);
   console.log(`  flowiq prompts pull ${resp.id}   # then edit + push`);
 }
+
+// ── views (1 Oct 2026): channels · whatsapp · health · automations · abandoned ──
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
+const requireOrg = (v) => { if (!UUID_RE.test(v || "")) { console.error(`Error: "${v}" is not a valid organization UUID.`); process.exit(1); } };
+const yn = (v) => (v ? "yes" : "no");
+const when = (v) => (v ? `${fmtSast(v)} SAST` : "—");
+
+async function view(orgId, name) {
+  requireOrg(orgId);
+  try { return await http.get("org", { organization_id: orgId, view: name }); } catch (e) { fail(`${name} read failed`, e); }
+}
+
+export async function channels(orgId, opts = {}) {
+  if (opts.all) return channelsCensus(opts);
+  const resp = await view(orgId, "channels");
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const c = resp.channels;
+  console.log(`${resp.organization_name} — channels`);
+  const w = c.whatsapp;
+  console.log(`  whatsapp    ${w.connected ? "connected" : "NOT connected"} · provider ${w.provider}${w.phone_number ? ` · ${w.phone_number}` : ""}${w.phone_id ? ` (phone ${w.phone_id})` : ""}${w.connection_type ? ` · ${w.connection_type}` : ""}`);
+  console.log(`              master switch ${w.master_switch ? "ON" : "OFF"} · vert.active ${w.vert_active ? "yes" : "no"}${w.allowed_whatsapp_ids ? ` (only ${w.allowed_whatsapp_ids})` : ""} · connected ${when(w.connected_at)} · registered ${when(w.last_registered_at)}`);
+  const m = c.messenger;
+  console.log(`  messenger   ${m.connected ? "connected" : "not connected"} · via ${m.provider}${m.page_name ? ` · ${m.page_name} (${m.page_id})` : m.page_id ? ` · page ${m.page_id}` : ""} · agent ${yn(m.use_agent)}${m.connected_at ? ` · since ${when(m.connected_at)}` : ""}${m.token_expires_at ? ` · token expires ${when(m.token_expires_at)}` : ""}${m.disconnected_at ? ` · disconnected ${when(m.disconnected_at)} (${m.disconnect_reason ?? "?"})` : ""}`);
+  const i = c.instagram;
+  console.log(`  instagram   ${i.connected ? "connected" : "not connected"} · via ${i.provider}${i.username ? ` · @${i.username}` : ""}${i.account_id ? ` (${i.account_id})` : ""}${i.login_method ? ` · ${i.login_method}` : ""} · agent ${yn(i.use_agent)}${i.connected_at ? ` · since ${when(i.connected_at)}` : ""}${i.token_expires_at ? ` · token expires ${when(i.token_expires_at)}` : ""}${i.disconnected_at ? ` · disconnected ${when(i.disconnected_at)} (${i.disconnect_reason ?? "?"})` : ""}`);
+  const t = c.tiktok;
+  console.log(`  tiktok      ${t.connected ? "connected" : "not connected"}${t.username ? ` · @${t.username}` : ""} · agent ${yn(t.use_agent)}${t.connected_at ? ` · since ${when(t.connected_at)}` : ""}${t.disconnected_at ? ` · disconnected ${when(t.disconnected_at)} (${t.disconnect_reason ?? "?"})` : ""}`);
+  const e = c.email;
+  console.log(`  email       ${e.provider ? `${e.provider}, ${e.connected ? "connected" : "not connected"}` : "no provider"}${e.mailbox ? ` · ${e.mailbox}` : ""} · agent ${yn(e.use_agent)}${e.connected_at ? ` · since ${when(e.connected_at)}` : ""}`);
+  console.log(`  meta ads    ${c.meta_ads.connected ? `connected${c.meta_ads.account_id ? ` · ${c.meta_ads.account_id}` : ""}` : "not connected"}`);
+  if (c.zernio_profile_id) console.log(`  zernio      profile ${c.zernio_profile_id}`);
+}
+
+async function channelsCensus(opts) {
+  let resp;
+  try { resp = await http.get("org", { census: "channels", all: opts.inactive ? "1" : undefined }); } catch (e) { fail("Census failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.count} org(s): whatsapp ${Object.entries(resp.providers).map(([k, v]) => `${k} ${v}`).join(", ")} · messenger ${resp.messenger_connected} · instagram ${resp.instagram_connected} · tiktok ${resp.tiktok_connected} · email ${resp.email_connected} · meta ads ${resp.meta_ads_connected}`);
+  console.log("");
+  const pad = (s, n) => String(s ?? "").padEnd(n);
+  console.log(`  ${pad("ORG", 30)} ${pad("WHATSAPP", 12)} ${pad("SWITCH", 7)} ${pad("MESSENGER", 10)} ${pad("INSTAGRAM", 10)} ${pad("TIKTOK", 7)} ${pad("EMAIL", 8)} ADS`);
+  for (const o of resp.orgs) console.log(`  ${pad(o.name.slice(0, 30), 30)} ${pad(`${o.whatsapp}${o.whatsapp_connected ? "" : " (off)"}`, 12)} ${pad(o.master_switch ? "on" : "OFF", 7)} ${pad(o.messenger ?? "—", 10)} ${pad(o.instagram ?? "—", 10)} ${pad(o.tiktok ? "yes" : "—", 7)} ${pad(o.email ?? "—", 8)} ${o.meta_ads ? "yes" : "—"}`);
+}
+
+export async function whatsapp(orgId, opts = {}) {
+  if (opts.all) {
+    let resp;
+    try { resp = await http.get("org", { census: "whatsapp", all: opts.inactive ? "1" : undefined }); } catch (e) { fail("Census failed", e); }
+    if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+    console.log(`${resp.checked} Meta number(s) checked at Meta, ${resp.unhealthy} with a problem (${resp.skipped_not_meta_or_unconnected} org(s) skipped: not Meta or not connected)`);
+    const pad = (s, n) => String(s ?? "").padEnd(n);
+    console.log("");
+    console.log(`  ${pad("ORG", 30)} ${pad("NUMBER", 18)} ${pad("STATUS", 12)} ${pad("QUALITY", 9)} ${pad("TIER", 12)} PROBLEMS`);
+    for (const o of [...resp.orgs].sort((a, b) => Number(a.healthy) - Number(b.healthy))) console.log(`  ${pad(o.name.slice(0, 30), 30)} ${pad(o.phone_number, 18)} ${pad(o.status ?? "?", 12)} ${pad(o.quality ?? "?", 9)} ${pad(o.tier ?? "?", 12)} ${(o.problems || []).join("; ")}`);
+    return;
+  }
+  const resp = await view(orgId, "whatsapp");
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const w = resp.whatsapp;
+  console.log(`${resp.organization_name} — WhatsApp number health (from Meta)`);
+  if (w.note && !w.phone) { console.log(`  ${w.note}`); return; }
+  const p = w.phone || {};
+  console.log(`  number:      ${p.display_phone_number ?? "?"} · "${p.verified_name ?? "?"}" · phone ${w.phone_id} · WABA ${w.waba_id ?? "?"}`);
+  console.log(`  status:      ${p.status ?? "?"} · platform ${p.platform_type ?? "?"} · account mode ${p.account_mode ?? "?"}`);
+  console.log(`  quality:     ${p.quality_rating ?? "?"} · limit tier ${p.messaging_limit_tier ?? "?"}${p.throughput?.level ? ` · throughput ${p.throughput.level}` : ""}`);
+  console.log(`  name:        ${p.name_status ?? "?"}${p.new_name_status && p.new_name_status !== "NONE" ? ` · pending "${p.new_display_name}" (${p.new_name_status})` : ""} · OBA ${yn(p.is_official_business_account)} · code verification ${p.code_verification_status ?? "?"}`);
+  console.log(`  webhooks:    ${Array.isArray(w.subscribed_apps) ? (w.subscribed_apps.length ? w.subscribed_apps.join(", ") : "NO app subscribed") : w.subscribed_apps ?? "?"}`);
+  if (w.waba && !w.waba.error) console.log(`  waba:        ${w.waba.name ?? ""} · review ${w.waba.account_review_status ?? "?"} · ${w.waba.ownership_type ?? ""}`);
+  console.log(`  ${w.healthy ? "✓ healthy" : `✗ ${w.problems.join("; ")}`}`);
+}
+
+export async function health(orgId, opts = {}) {
+  const resp = await view(orgId, "health");
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const h = resp.health;
+  console.log(`${resp.organization_name} — is the agent ready?  ${h.ready ? "✓ yes" : `✗ ${h.problems.length} problem(s)`}`);
+  for (const p of h.problems) console.log(`  ✗ ${p}`);
+  for (const w of h.warnings || []) console.log(`  ⚠ ${w}`);
+  console.log(`  switch:      master ${h.master_switch ? "ON" : "OFF"} · vert.active ${yn(h.vert_active)}${h.allowed_whatsapp_ids ? ` (only ${h.allowed_whatsapp_ids})` : ""} · provider ${h.provider}${h.coexistence ? ` · ${h.coexistence}` : ""}${h.phone_number ? ` · ${h.phone_number}` : ""}`);
+  const spare = h.keys.openai_spare;
+  console.log(`  keys:        OpenAI ${h.keys.openai.state}${h.keys.openai.detail ? ` (${h.keys.openai.detail})` : ""}${spare ? ` · spare ${spare.state}${spare.detail ? ` (${spare.detail})` : ""}` : ""} · Claude ${h.keys.anthropic_present ? "present" : "none"}`);
+  console.log(`  agent:       ${h.agent ? `${h.agent.name} · ${h.agent.prompt_chars.toLocaleString()} prompt chars · prompt ${h.agent.use_settings_prompt === false ? "OFF" : "on"} · ${h.agent.model ?? "house model"} · product_lookup ${yn(h.agent.product_lookup)} · tickets ${yn(h.agent.ticket_tool_status)}` : "NONE"}`);
+  console.log(`  catalogue:   ${h.catalogue.products} product rows · ${h.catalogue.embedded} with embeddings${h.catalogue.last_sync ? ` · last sync ${when(h.catalogue.last_sync.created_at)} ${h.catalogue.last_sync.success === false ? "FAILED" : "ok"} (+${h.catalogue.last_sync.added ?? 0} ~${h.catalogue.last_sync.updated ?? 0} -${h.catalogue.last_sync.deleted ?? 0})` : " · no sync recorded"}`);
+  const s = h.store;
+  console.log(`  store:       ${s.platform ?? "none"}${s.shopify_domain ? ` ${s.shopify_domain}` : ""}${s.flowiq_webhooks != null ? ` · ${s.flowiq_webhooks} FlowIQ webhooks` : ""}${s.webhooks_note ? ` · ${s.webhooks_note}` : ""}`);
+  if (s.newest_synced_order || s.store_newest_order) console.log(`               newest synced order ${s.newest_synced_order ? `#${s.newest_synced_order.order_number} ${when(s.newest_synced_order.created_at)}` : "none"} · store newest ${s.store_newest_order && !s.store_newest_order.error ? `${s.store_newest_order.name} ${when(s.store_newest_order.created_at)}` : s.store_newest_order?.error ? `read failed (${s.store_newest_order.error})` : "—"}`);
+  console.log(`  traffic:     ${h.traffic.contacts} contacts (${h.traffic.bot_on} with AI on) · inbound 24h ${h.traffic.inbound_24h} · 7d ${h.traffic.inbound_7d} · last bot reply ${when(h.traffic.last_bot_reply_at)}`);
+}
+
+export async function automations(orgId, opts = {}) {
+  requireOrg(orgId);
+  if (opts.enable || opts.disable) {
+    const type = opts.enable || opts.disable;
+    let resp;
+    try { resp = await http.post("org", { action: "automations_set", organization_id: orgId, type: type === true ? undefined : type, enabled: !!opts.enable, dry_run: !opts.commit }); }
+    catch (e) { fail("Set failed", e); }
+    if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+    if (resp.unchanged) { console.log(`${resp.field} is already ${resp.value}.`); return; }
+    console.log(`${resp.dry_run ? "Would set" : "✓ set"} ${resp.field}: ${resp.from} → ${resp.to} on ${resp.organization_name}${resp.dry_run ? "\nDRY RUN — add --commit to write." : ""}`);
+    return;
+  }
+  const resp = await view(orgId, "automations");
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const a = resp.automations;
+  if (!a.configured) { console.log(`${resp.organization_name} has no automated_messages_config.`); return; }
+  console.log(`${resp.organization_name} — automated order messages: ${a.enabled ? "ON" : "OFF"} (${a.types.filter((t) => t.enabled).length} of ${a.types.length} types on)`);
+  const pad = (s, n) => String(s ?? "").padEnd(n);
+  for (const t of a.types) {
+    console.log(`  ${t.enabled ? "ON " : "off"} ${pad(t.type, 26)} ${pad(t.template_name ?? "(no template)", 34)} ${pad(t.template_state ?? "", 14)} ${t.trigger_event ?? ""}${t.body_mapping ? ` · body ${JSON.stringify(t.body_mapping)}` : ""}`);
+    if (t.warning) console.log(`      ⚠ ${t.warning}`);
+  }
+  console.log(`\nflowiq org automations ${orgId} --enable <type> | --disable <type> [--commit]  (the whole feature: --enable/--disable with no type)`);
+}
+
+export async function abandoned(orgId, opts = {}) {
+  requireOrg(orgId);
+  if (opts.enable !== undefined || opts.disable !== undefined) {
+    const seq = opts.enable ?? opts.disable;
+    let resp;
+    try { resp = await http.post("org", { action: "abandoned_set", organization_id: orgId, sequence: seq === true ? undefined : Number(seq), enabled: opts.enable !== undefined, dry_run: !opts.commit }); }
+    catch (e) { fail("Set failed", e); }
+    if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+    if (resp.unchanged) { console.log(`${resp.field} is already ${resp.value}.`); return; }
+    console.log(`${resp.dry_run ? "Would set" : "✓ set"} ${resp.field}: ${resp.from} → ${resp.to} on ${resp.organization_name}${resp.dry_run ? "\nDRY RUN — add --commit to write." : ""}`);
+    return;
+  }
+  const resp = await view(orgId, "abandoned");
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const a = resp.abandoned;
+  if (!a.configured) { console.log(`${resp.organization_name} has no abandoned_checkout_config (no recovery messages).`); return; }
+  console.log(`${resp.organization_name} — abandoned-cart recovery: ${a.enabled ? "ON" : "OFF"}${a.use_utm != null ? ` · utm ${yn(a.use_utm)}` : ""}`);
+  for (const s of a.sequences) {
+    console.log(`  ${s.enabled ? "ON " : "off"} sequence ${s.sequence}: ${s.template_name ?? "(no template)"} (${s.template_state ?? "?"}) · after ${s.delay_minutes} min${s.cart_filter ? ` · ${s.cart_filter}` : ""}${s.include_discount ? ` · discount ${s.discount_code ?? (s.auto_create_discount ? "auto" : "?")}` : ""}${s.include_image ? " · image" : ""}${s.link_mode ? ` · ${s.link_mode}` : ""}`);
+    console.log(`      last 30 days: ${s.last_30_days.sent} sent, ${s.last_30_days.not_sent} not sent`);
+  }
+  console.log(`\nflowiq org abandoned ${orgId} --enable <n> | --disable <n> [--commit]  (the whole feature: --enable/--disable with no number)`);
+}

package/src/commands/products.js

@@ -0,0 +1,58 @@
+// `flowiq products status|search|reconcile <org>` — the synced catalogue as
+// the agent sees it (server: api/cli/products.js).
+
+import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const pad = (s, n) => String(s ?? "").padEnd(n);
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); process.exit(1); }
+const requireOrg = (v) => { if (!UUID_RE.test(v || "")) { console.error(`Error: "${v}" is not a valid organization UUID.`); process.exit(1); } };
+
+export async function status(orgId, opts = {}) {
+  requireOrg(orgId);
+  let resp;
+  try { resp = await http.get("products", { organization_id: orgId, status: "1" }); } catch (e) { fail("Status failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const c = resp.counts;
+  console.log(`${resp.organization_name} — catalogue (${resp.platform ?? "no store"})${resp.sync_inactive_products ? " · sync_inactive_products on" : ""}`);
+  console.log(`  rows:        ${c.total} total · ${c.active} active · ${c.archived} archived · ${c.draft} draft${c.other ? ` · ${c.other} other` : ""}`);
+  console.log(`  embeddings:  ${c.embedded} with · ${c.missing_embedding} MISSING${c.missing_embedding ? "  ⚠ the agent cannot find these by meaning (products reconcile re-embeds)" : ""}`);
+  console.log(`  images:      ${c.with_image} with an image · prices: ${c.with_price} with a price · ${c.zero_stock} at zero stock`);
+  console.log(`  newest row:  ${resp.newest_row_updated_at ? `${fmtSast(resp.newest_row_updated_at)} SAST` : "—"}`);
+  if (resp.last_syncs.length) {
+    console.log(`  last syncs:`);
+    for (const s of resp.last_syncs) console.log(`    ${fmtSast(s.created_at)} SAST  ${(s.success ?? s.successful) === false ? "FAILED" : "ok    "}  +${s.added ?? 0} ~${s.updated ?? 0} -${s.deleted ?? 0}${s.source ? `  ${s.source}` : ""}${s.summary ? `  ${String(s.summary).slice(0, 70)}` : ""}`);
+  } else console.log(`  last syncs:  none recorded`);
+  if (resp.missing_embedding_sample.length) {
+    console.log(`  missing embedding (sample):`);
+    for (const p of resp.missing_embedding_sample) console.log(`    ${pad(p.variant_id, 16)} ${pad(p.status ?? "", 9)} ${String(p.product_title || "").slice(0, 60)}`);
+  }
+}
+
+export async function search(orgId, textParts, opts = {}) {
+  requireOrg(orgId);
+  const text = (Array.isArray(textParts) ? textParts.join(" ") : String(textParts ?? "")).trim();
+  if (text.length < 2) { console.error("Error: give at least 2 characters, e.g. flowiq products search <org> whey protein"); process.exit(1); }
+  let resp;
+  try { resp = await http.get("products", { organization_id: orgId, search: text, limit: opts.limit, min_similarity: opts.minSimilarity }); } catch (e) { fail("Search failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.organization_name}: ${resp.count} match(es) for "${text}" via ${resp.rpc} (min similarity ${resp.min_similarity}) — what the agent's product_lookup tool sees`);
+  for (const p of resp.results) {
+    const sim = p.similarity ?? p.score ?? p.sim;
+    const stock = p.stockcount && typeof p.stockcount === "object" ? Object.values(p.stockcount).reduce((a, b) => a + (Number(b) || 0), 0) : p.stockcount;
+    console.log(`  ${pad(sim != null ? Number(sim).toFixed(2) : "", 5)} ${pad(p.variant_id ?? "", 16)} ${pad(p.price != null ? String(p.price) : "", 9)} ${pad(stock != null ? `stock ${stock}` : "", 11)} ${pad(p.status ?? "", 8)} ${String(p.product_title ?? p.title ?? "").slice(0, 70)}`);
+  }
+  if (!resp.count) console.log(`  (nothing within similarity ${resp.min_similarity}; try --min-similarity 0.05, or check embeddings with: flowiq products status ${orgId})`);
+}
+
+export async function reconcile(orgId, opts = {}) {
+  requireOrg(orgId);
+  let resp;
+  try { resp = await http.post("products", { action: "reconcile", organization_id: orgId, platform: opts.platform, confirm: !!opts.confirm }); } catch (e) { fail("Reconcile failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.dry_run) { console.log(`Would trigger a ${resp.platform} reconcile for ${resp.organization_name} (${resp.note}). Add --confirm.`); return; }
+  console.log(`${resp.ok ? "✓" : "✗"} products-reconcile-scheduler answered ${resp.http_status} for ${resp.organization_name} (${resp.platform})`);
+  console.log(`  ${JSON.stringify(resp.response).slice(0, 600)}`);
+  console.log(`\n  Watch it land: flowiq products status ${orgId}`);
+}

package/src/commands/prompts.js

@@ -96,7 +96,34 @@ export function mintSectionIds(sections) {
   return touched;
 }
 
-export async function push(identifier) {
+// --dry-run: what a push WOULD change, section by section, against the live
+// agent, without writing. Compares by section id (title for sections that
+// have no id yet) and reports added / removed / changed sections with the
+// character delta, plus title / hidden / channels / window changes.
+export function diffSections(live, local) {
+  const keyOf = (s) => s.id || `title:${s.title}`;
+  const liveBy = new Map((live || []).map((s) => [keyOf(s), s]));
+  const localBy = new Map((local || []).map((s) => [keyOf(s), s]));
+  const added = [], removed = [], changed = [];
+  for (const [k, s] of localBy) if (!liveBy.has(k)) added.push({ title: s.title, chars: (s.content || "").length });
+  for (const [k, s] of liveBy) if (!localBy.has(k)) removed.push({ title: s.title, chars: (s.content || "").length });
+  for (const [k, s] of localBy) {
+    const l = liveBy.get(k);
+    if (!l) continue;
+    const what = [];
+    if ((l.content || "") !== (s.content || "")) what.push(`content ${(l.content || "").length} → ${(s.content || "").length} chars`);
+    if ((l.title || "") !== (s.title || "")) what.push(`title "${l.title}" → "${s.title}"`);
+    if (!!l.hidden !== !!s.hidden) what.push(`hidden ${!!l.hidden} → ${!!s.hidden}`);
+    if (JSON.stringify(l.channels ?? null) !== JSON.stringify(s.channels ?? null)) what.push(`channels ${JSON.stringify(l.channels ?? "all")} → ${JSON.stringify(s.channels ?? "all")}`);
+    for (const f of ["active_from", "active_until", "active_tz"]) if ((l[f] ?? null) !== (s[f] ?? null)) what.push(`${f} ${l[f] ?? "unset"} → ${s[f] ?? "unset"}`);
+    if (what.length) changed.push({ title: s.title, what });
+  }
+  const order = (list) => list.map(keyOf).join("|");
+  const reordered = !added.length && !removed.length && order(live || []) !== order(local || []);
+  return { added, removed, changed, reordered, unchanged: !added.length && !removed.length && !changed.length && !reordered };
+}
+
+export async function push(identifier, opts = {}) {
   let filePath;
   try {
     filePath = await resolvePushPath(identifier);
@@ -121,6 +148,24 @@ export async function push(identifier) {
     process.exit(1);
   }
 
+  if (opts.dryRun) {
+    let live;
+    try { live = await http.get("prompts", { organization_id: data.organization_id, agent_id: data.agent_id }); }
+    catch (e) { console.error(`Dry run failed (could not read the live prompt): ${e.message}`); process.exit(1); }
+    const d = diffSections(live.prompt_sections, data.prompt_sections);
+    const liveChars = (live.prompt_sections || []).reduce((a, s) => a + (s.content || "").length, 0);
+    const localChars = data.prompt_sections.reduce((a, s) => a + (s.content || "").length, 0);
+    console.log(`DRY RUN — ${filePath} against ${live.agent_name} (${live.agent_id}) on ${live.organization_name}`);
+    console.log(`  live: ${(live.prompt_sections || []).length} sections, ${liveChars.toLocaleString()} chars · file: ${data.prompt_sections.length} sections, ${localChars.toLocaleString()} chars`);
+    if (d.unchanged) { console.log("  no differences — a push would change nothing."); return; }
+    for (const a of d.added) console.log(`  + add     "${a.title}" (${a.chars} chars)`);
+    for (const r of d.removed) console.log(`  - REMOVE  "${r.title}" (${r.chars} chars)`);
+    for (const c of d.changed) console.log(`  ~ change  "${c.title}": ${c.what.join("; ")}`);
+    if (d.reordered) console.log("  ~ sections reordered");
+    console.log(`\nNothing written. Push for real: flowiq prompts push ${identifier}`);
+    return;
+  }
+
   // A section added by hand has no id yet. Mint one and write it back to the
   // file BEFORE pushing, so a later pull or push keeps the same id.
   const minted = mintSectionIds(data.prompt_sections);

package/src/commands/rules.js

@@ -0,0 +1,67 @@
+// `flowiq rules list|show|results|enable|disable` — the Automations rules
+// engine, custom_notification_rules (server: api/cli/rules.js).
+
+import { http } from "../http.js";
+import { fmtSast } from "./audit.js";
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const pad = (s, n) => String(s ?? "").padEnd(n);
+function fail(prefix, e) { console.error(`${prefix}: ${e.message}`); if (e.body?.error && !e.message.includes(e.body.error)) console.error(`  ${e.body.error}`); if (e.body?.needs_confirm) console.error("  Re-run with --confirm."); process.exit(1); }
+
+export async function list(orgId, opts = {}) {
+  if (!UUID_RE.test(orgId || "")) { console.error(`Error: "${orgId}" is not a valid organization UUID.`); process.exit(1); }
+  let resp;
+  try { resp = await http.get("rules", { organization_id: orgId, trigger: opts.trigger }); } catch (e) { fail("List failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (!resp.count) { console.log(`${resp.organization_name} has no automation rules${opts.trigger ? ` with trigger ${opts.trigger}` : ""}.`); return; }
+  console.log(`${resp.organization_name}: ${resp.count} rule(s), ${resp.enabled} enabled`);
+  console.log("");
+  console.log(`  ${pad("", 3)} ${pad("NAME", 32)} ${pad("TRIGGER", 34)} ${pad("SENDS", 30)} WHEN`);
+  for (const r of resp.rules) {
+    console.log(`  ${r.enabled ? "ON " : "off"} ${pad(r.name, 32)} ${pad(`${r.trigger_type}=${r.trigger_value ?? ""}`, 34)} ${pad(r.template_name ?? r.action_type, 30)} ${r.send_at}${r.conditions.length ? ` · conditions: ${r.conditions.join(", ")}` : ""}`);
+    console.log(`      ${r.id}`);
+  }
+  console.log(`\nflowiq rules show <rule_id> · rules results <rule_id> --since 30d`);
+}
+
+export async function show(ruleId, opts = {}) {
+  if (!UUID_RE.test(ruleId || "")) { console.error(`Error: "${ruleId}" is not a valid rule UUID.`); process.exit(1); }
+  let resp;
+  try { resp = await http.get("rules", { rule_id: ruleId }); } catch (e) { fail("Read failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  const r = resp.rule;
+  console.log(`${r.name}  ${r.id}  on ${resp.organization_name}: ${r.enabled ? "ENABLED" : "disabled"}`);
+  console.log(`  trigger:    ${r.trigger_type} = ${r.trigger_value ?? "(any)"}`);
+  console.log(`  action:     ${r.action_type}${r.template_name ? ` · template ${r.template_name}` : ""}`);
+  console.log(`  send at:    ${r.send_at}`);
+  if (r.body_parameters) console.log(`  body:       ${JSON.stringify(r.body_parameters)}`);
+  if (r.button_parameters) console.log(`  buttons:    ${JSON.stringify(r.button_parameters)}`);
+  if (r.conditions_raw) console.log(`  conditions: ${JSON.stringify(r.conditions_raw)}`);
+  if (r.action_config) console.log(`  config:     ${JSON.stringify(r.action_config)}`);
+  console.log(`  priority:   ${r.priority} · created ${fmtSast(r.created_at)} SAST`);
+}
+
+export async function results(ruleId, opts = {}) {
+  if (!UUID_RE.test(ruleId || "")) { console.error(`Error: "${ruleId}" is not a valid rule UUID.`); process.exit(1); }
+  let resp;
+  try { resp = await http.get("rules", { rule_id: ruleId, results: "1", since: opts.since }); } catch (e) { fail("Results failed", e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  console.log(`${resp.rule.name} (${resp.organization_name}): ${resp.queued} queued send(s) since ${fmtSast(resp.since)} SAST${resp.capped ? " (capped)" : ""}`);
+  console.log(`  by status: ${Object.entries(resp.by_status).map(([k, v]) => `${k} ${v}`).join(" · ") || "none"}`);
+  for (const e of resp.error_rollup) console.log(`  ${String(e.n).padStart(5)} × ${e.message}`);
+  if (resp.recent.length) {
+    console.log("\n  recent:");
+    for (const q of resp.recent) console.log(`    ${fmtSast(q.scheduled_for)} ${pad(q.status, 10)} ${q.template ?? ""} → ${(q.contact_ids || []).join(",")}${q.error_message ? `  ${String(q.error_message).slice(0, 80)}` : ""}`);
+  }
+}
+
+async function toggle(ruleId, opts, action) {
+  if (!UUID_RE.test(ruleId || "")) { console.error(`Error: "${ruleId}" is not a valid rule UUID.`); process.exit(1); }
+  let resp;
+  try { resp = await http.post("rules", { action, rule_id: ruleId, confirm: !!opts.confirm }); } catch (e) { fail(`${action} failed`, e); }
+  if (opts.json) { console.log(JSON.stringify(resp, null, 2)); return; }
+  if (resp.unchanged) { console.log(`Rule is already ${resp.enabled ? "enabled" : "disabled"}.`); return; }
+  console.log(`✓ "${resp.name}" ${resp.enabled ? "ENABLED" : "disabled"} (was ${resp.was ? "enabled" : "disabled"}).`);
+}
+export const enable = (id, opts) => toggle(id, opts, "enable");
+export const disable = (id, opts) => toggle(id, opts, "disable");

package/src/commands/segments.js

@@ -288,7 +288,20 @@ export async function plan(orgId, opts = {}) {
     console.log(`⚠ could not check existing batch tags (${e.message}) — verify with \`seg list --prefix ${prefix}\` before apply.`);
   }
 
-  const slug = slugify(opts.segment || prefix, prefix);
+  // A continuation (--start-index N) is a NEW plan, not a rewrite of the first
+  // one: the earlier file is the record of who got the earlier batches, so it
+  // is never overwritten. The continuation lands in <slug>-from-NN.json
+  // unless --segment names it.
+  const baseSlug = slugify(opts.segment || prefix, prefix);
+  const slug = !opts.segment && startIndex > 1 ? `${baseSlug}-from-${String(startIndex).padStart(2, "0")}` : baseSlug;
+  if (await fs.access(planPath(slug)).then(() => true).catch(() => false)) {
+    const prev = JSON.parse(await fs.readFile(planPath(slug), "utf8").catch(() => "{}"));
+    if (prev.applied) {
+      console.error(`Error: ${planPath(slug)} already exists AND was applied on ${prev.applied.at} — it is the record of who got those batches. Pass --segment <new-name> to write a different file.`);
+      process.exit(1);
+    }
+    console.log(`⚠ overwriting ${planPath(slug)} (never applied)`);
+  }
   const planDoc = {
     schema_version: 1,
     segment: slug,
@@ -373,24 +386,44 @@ export async function apply(orgId, identifier, opts = {}) {
     if (a !== planDoc.segment) { console.log("Mismatch — aborted, nothing tagged."); process.exit(0); }
   }
 
-  let resp;
-  try {
-    resp = await http.post("segments", {
-      mode: "apply", organization_id: orgId,
-      batches: planDoc.batches.map((b) => ({ tag: b.tag, contact_ids: b.contact_ids })),
-    });
-  } catch (e) {
-    console.error(`Apply failed: ${e.message}`);
-    if (e.body?.error) console.error(`  ${e.body.error}`);
-    process.exit(1);
+  // One HTTP request per chunk of ≤ APPLY_CHUNK ids. The server already splits
+  // its DB calls at 8,000 rows, but a big cohort in ONE request still ran past
+  // the function timeout (Zero BS 18,614 on 30 Sep 2026: two timeouts, one
+  // batch half-tagged). Smaller requests finish, and a failure names the chunk
+  // so a re-run (idempotent) picks up where it stopped.
+  const APPLY_CHUNK = 4000;
+  const chunks = [];
+  for (const b of planDoc.batches) {
+    for (let i = 0; i < b.contact_ids.length; i += APPLY_CHUNK) chunks.push({ tag: b.tag, contact_ids: b.contact_ids.slice(i, i + APPLY_CHUNK) });
+  }
+  const byTag = new Map();
+  for (const [ci, chunk] of chunks.entries()) {
+    let resp;
+    try {
+      resp = await http.post("segments", { mode: "apply", organization_id: orgId, batches: [chunk] });
+    } catch (e) {
+      const done = [...byTag.values()].reduce((a, r) => a + r.tagged, 0);
+      console.error(`Apply failed on request ${ci + 1}/${chunks.length} (${chunk.tag}, ${chunk.contact_ids.length} ids): ${e.message}`);
+      if (e.body?.error) console.error(`  ${e.body.error}`);
+      console.error(`  ${done} contact(s) tagged by the earlier requests. Re-run the same apply: it is idempotent and only the missing ones get tagged.`);
+      process.exit(1);
+    }
+    for (const r of resp.results || []) {
+      const prev = byTag.get(r.tag) ?? { tag: r.tag, tagged: 0, already_had: 0, not_found: 0 };
+      prev.tagged += r.tagged ?? 0; prev.already_had += r.already_had ?? 0; prev.not_found += r.not_found ?? 0;
+      byTag.set(r.tag, prev);
+    }
+    if (chunks.length > 1) console.log(`  request ${ci + 1}/${chunks.length}: ${chunk.tag} ${chunk.contact_ids.length} ids → tagged ${(resp.results || []).reduce((a, r) => a + (r.tagged ?? 0), 0)}`);
   }
+  const results = [...byTag.values()];
+  const totals = results.reduce((a, r) => ({ tagged: a.tagged + r.tagged, already_had: a.already_had + r.already_had, not_found: a.not_found + r.not_found }), { tagged: 0, already_had: 0, not_found: 0 });
 
-  for (const r of resp.results || []) {
+  for (const r of results) {
     console.log(`  ${r.tag.padEnd(40)} tagged ${r.tagged}${r.already_had ? ` · already_had ${r.already_had}` : ""}${r.not_found ? ` · not_found ${r.not_found}` : ""}`);
   }
-  console.log(`Totals: tagged ${resp.totals.tagged} · already_had ${resp.totals.already_had} · not_found ${resp.totals.not_found}`);
+  console.log(`Totals: tagged ${totals.tagged} · already_had ${totals.already_had} · not_found ${totals.not_found}`);
 
-  planDoc.applied = { at: new Date().toISOString(), tag_counts: Object.fromEntries((resp.results || []).map((r) => [r.tag, r.tagged + r.already_had])) };
+  planDoc.applied = { at: new Date().toISOString(), tag_counts: Object.fromEntries(results.map((r) => [r.tag, r.tagged + r.already_had])) };
   await fs.writeFile(filePath, JSON.stringify(planDoc, null, 2) + "\n", "utf8");
   console.log("");
   console.log(`Send per tag, one batch at a time: flowiq broadcast send ${orgId} --tag ${planDoc.batches[0].tag} --template <name> …`);