@flowapt/flowiq-cli 0.9.9 → 0.11.0

package/src/index.js

@@ -28,6 +28,11 @@ import * as agentsCmd from "./commands/agents.js";
 import * as agentUpdatesCmd from "./commands/agent-updates.js";
 import * as plansCmd from "./commands/plans.js";
 import * as gapsCmd from "./commands/gaps.js";
+import * as contactsCmd from "./commands/contacts.js";
+import * as widgetsCmd from "./commands/widgets.js";
+import * as ticketsCmd from "./commands/tickets.js";
+import * as flowsCmd from "./commands/flows.js";
+import * as rulesCmd from "./commands/rules.js";
 import * as exportCmd from "./commands/export.js";
 import * as testCmd from "./commands/agent-test.js";
 import * as knowledgeCmd from "./commands/knowledge.js";
@@ -36,6 +41,9 @@ import * as broadcastCmd from "./commands/broadcast.js";
 import * as segmentsCmd from "./commands/segments.js";
 import * as tagCmd from "./commands/tag.js";
 import * as linksCmd from "./commands/links.js";
+import * as membersCmd from "./commands/members.js";
+import * as notesCmd from "./commands/notes.js";
+import * as productsCmd from "./commands/products.js";
 import * as keywordsCmd from "./commands/keywords.js";
 import * as guideCmd from "./commands/guide.js";
 import * as auditCmd from "./commands/audit.js";
@@ -111,7 +119,8 @@ export function run(argv) {
     .action((orgId, auditId, opts) => promptsCmd.restore(orgId, auditId, opts));
   prompts.command("push <slug-or-path>")
     .description("Apply a local JSON file's prompt_sections back to the agent it was pulled from (regenerates system_prompt server-side)")
-    .action((id) => promptsCmd.push(id));
+    .option("--dry-run", "print what would change (added / removed / changed sections against the live agent) and write nothing")
+    .action((id, opts) => promptsCmd.push(id, opts));
 
   // questionnaires
   const qs = program.command("questionnaires")
@@ -133,6 +142,33 @@ export function run(argv) {
     .description("Pull last N user-message windows of conversation for a contact (default N=25, max 200)")
     .option("--count <n>", "number of most-recent user-* messages to anchor on", "25")
     .action((contactId, opts) => messagesCmd.pull(contactId, opts));
+  msgs.command("search <organization_id> <text...>")
+    .description("Org-wide text search: did the agent (or anyone) say X to anyone? Template sends excluded unless asked")
+    .option("--since <when>", "24h (default) | 7d | 2w | YYYY-MM-DD")
+    .option("--until <when>", "upper bound")
+    .option("--sender-type <list>", "comma list, e.g. bot-whatsapp or user-whatsapp,user-web (default: conversation rows only)")
+    .option("--include-templates", "also match template / broadcast payloads")
+    .option("--limit <n>", "max rows (default 200, max 1000)")
+    .option("--json", "raw JSON (rows carry contact_id)")
+    .action((orgId, text, opts) => messagesCmd.search(orgId, text, opts));
+  msgs.command("failures <organization_id>")
+    .description("What failed to send and why (Meta error codes by reason / media / contact), plus sends Meta accepted and never confirmed")
+    .option("--since <when>", "7d (default) | 24h | 30d | YYYY-MM-DD")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => messagesCmd.failures(orgId, opts));
+  msgs.command("stats <organization_id>")
+    .description("Monthly WhatsApp volume: inbound, outbound, free-form (in-window) vs template, bot vs human")
+    .option("--since <when>", "6m (default) | 30d | YYYY-MM-DD")
+    .option("--until <when>", "upper bound (default now)")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => messagesCmd.stats(orgId, opts));
+  msgs.command("delete <contact_id>")
+    .description("DELETE a contact's messages (all, older than --before, or only --sender-type). Dry run by default; --confirm asks you to type the contact id")
+    .option("--before <when>", "only rows older than this: 30d | 2w | YYYY-MM-DD | ISO time")
+    .option("--sender-type <list>", "only these sender types, e.g. tool-call,steer")
+    .option("--confirm", "actually delete (typed confirmation follows)")
+    .option("--json", "raw JSON")
+    .action((contactId, opts) => messagesCmd.remove(contactId, opts));
 
   // fine-tuning (agents.fine_tuning text + agents.fine_tuning_entries jsonb)
   const ft = program.command("fine-tuning")
@@ -403,10 +439,23 @@ export function run(argv) {
   // org (read-only org summary for the prompt-builder skill, creds stripped)
   const org = program.command("org").description("Org info (read), create a new organization, read/set its feature flags");
   org.command("list [search]")
-    .description("List organizations with their UUIDs — the lookup every other command needs (filter by name/slug)")
+    .description("List organizations with their UUIDs — the lookup every other command needs (filter by name/slug, or find by WhatsApp number)")
     .option("--all", "include inactive organizations")
+    .option("--number <digits>", "find the org by its WhatsApp number (any format), Meta phone id or WABA id")
     .option("--json", "raw JSON")
     .action((search, opts) => orgCmd.list(search, opts));
+  org.command("agent <organization_id> <on|off>")
+    .description("The agent master switch (wati_webhook_status): off = no customer gets the AI. Dry-run unless --commit; ON without test mode needs --yes")
+    .option("--commit", "write the change")
+    .option("--yes", "confirm switching ON for every customer (vert.active not false, no allowlist)")
+    .option("--json", "raw JSON")
+    .action((orgId, state, opts) => orgCmd.agentSwitch(orgId, state, opts));
+  org.command("park <organization_id>")
+    .description("Park an org (organizations.inactive = true: hidden from censuses and crons; nothing deleted). --unpark reverses it. Needs --confirm")
+    .option("--unpark", "set inactive = false")
+    .option("--confirm", "write the change")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => orgCmd.park(orgId, opts));
   org.command("create")
     .description("Create a NEW organization (org row + admin membership; owner defaults to you)")
     .requiredOption("--name <name>", "organization name")
@@ -418,6 +467,36 @@ export function run(argv) {
     .description("Show the org's platform, storefront url + active agent (raw creds stripped)")
     .option("--json", "print the raw JSON payload")
     .action((orgId, opts) => orgCmd.info(orgId, opts));
+  org.command("channels [organization_id]")
+    .description("Channel connections: WhatsApp (provider, master switch), Messenger, Instagram, TikTok, email, Meta Ads; --all = every org")
+    .option("--all", "census across every active org (no organization_id needed)")
+    .option("--inactive", "with --all: include inactive orgs")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => orgCmd.channels(orgId, opts));
+  org.command("whatsapp [organization_id]")
+    .description("WhatsApp number health straight from Meta: status, quality, limit tier, name status, webhook subscription; --all = every Meta org")
+    .option("--all", "census across every active Meta org")
+    .option("--inactive", "with --all: include inactive orgs")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => orgCmd.whatsapp(orgId, opts));
+  org.command("health <organization_id>")
+    .description("Is this client's agent ready? Master switch, keys (probed), agent, catalogue + embeddings, store webhooks + order sync, traffic")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => orgCmd.health(orgId, opts));
+  org.command("automations <organization_id>")
+    .description("Automated order messages (automated_messages_config): each type, its template and whether that template is approved")
+    .option("--enable [type]", "switch a type on (or the whole feature with no type); dry run unless --commit")
+    .option("--disable [type]", "switch a type off (or the whole feature)")
+    .option("--commit", "write the change")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => orgCmd.automations(orgId, opts));
+  org.command("abandoned <organization_id>")
+    .description("Abandoned-cart recovery config per sequence (template, delay, cart filter, discount) + the last 30 days of sends")
+    .option("--enable [sequence]", "switch a sequence on (or the whole feature with no number); dry run unless --commit")
+    .option("--disable [sequence]", "switch a sequence off (or the whole feature)")
+    .option("--commit", "write the change")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => orgCmd.abandoned(orgId, opts));
 
   // org flags — organizations.feature_flags (the Settings → Profile switches).
   // Registry-allowlisted writes, credentials never read or written, dangerous
@@ -503,6 +582,13 @@ export function run(argv) {
     .description("List the org's agents (★ = active); use an id as --agent <id> elsewhere")
     .option("--json", "print the raw JSON payload")
     .action((orgId, opts) => agentsCmd.list(orgId, opts));
+  agent.command("flags")
+    .description("Cross-org census of every active agent: model, reasoning, prompt switch, tool gates (product_lookup, tickets, postal, …)")
+    .option("--tool <flag[=bool]>", "only agents where this tool flag is on (or =false: off)")
+    .option("--model <substr>", "only agents whose model contains this")
+    .option("--all", "include inactive orgs")
+    .option("--json", "raw JSON")
+    .action((opts) => agentsCmd.flags(opts));
   agent.command("create <organization_id>")
     .description("Create a new agent (optionally seed its prompt + set it active)")
     .requiredOption("--name <name>", "agent name")
@@ -616,6 +702,90 @@ export function run(argv) {
     .option("--commit", "apply the change (default is a dry run)")
     .action((planId, opts) => plansCmd.status(planId, opts));
 
+  // contacts (1 Oct 2026): the contact record from the terminal
+  const contacts = program.command("contacts").description("Find a contact (incl. archived / blocked) with its inbox state, lint numbers, merge, opt out / in, fix a number, export");
+  contacts.command("find <organization_id>")
+    .description("Find contacts by email / phone / name / id, archived and blocked included, with team, assignee, latest message and open ticket")
+    .option("--email <substr>", "email contains").option("--phone <digits>", "number contains (digits only)").option("--name <substr>", "name contains").option("--id <uuid>", "one contact by id")
+    .option("--limit <n>", "max matches (default 20, max 100)").option("--json", "raw JSON")
+    .action((orgId, opts) => contactsCmd.find(orgId, opts));
+  contacts.command("show <contact_id>")
+    .description("One contact's record + inbox state (needs --org)")
+    .requiredOption("--org <organization_id>", "the contact's org").option("--json", "raw JSON")
+    .action((contactId, opts) => contactsCmd.show(contactId, opts));
+  contacts.command("census <organization_id>")
+    .description("Archived chats that still carry unread messages or where the customer wrote last")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => contactsCmd.census(orgId, opts));
+  contacts.command("lint <organization_id>")
+    .description("Malformed WhatsApp numbers (doubled country code, kept trunk 0, bad length) with the repair and whether a twin contact holds it")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => contactsCmd.lint(orgId, opts));
+  contacts.command("merge <organization_id> <keep_id> <remove_id>")
+    .description("Merge <remove_id> into <keep_id> (messages, tickets, orders move; the app's merge_contacts_v2). Dry run unless --commit")
+    .option("--commit", "do it").option("--json", "raw JSON")
+    .action((orgId, keep, remove, opts) => contactsCmd.merge(orgId, keep, remove, opts));
+  contacts.command("optout <organization_id>")
+    .description("Opt contacts OUT of broadcasts (allow_broadcast=false + the inbox marker). Dry run unless --commit")
+    .option("--contact <id>", "contact id (repeatable)", (v, a) => (a || []).concat(v), []).option("--ids-file <file>", "file of contact ids (whitespace / comma separated)")
+    .option("--reason <text>", "recorded on the marker and the audit row").option("--commit", "write").option("--json", "raw JSON")
+    .action((orgId, opts) => contactsCmd.optout(orgId, opts));
+  contacts.command("optin <organization_id>")
+    .description("Opt contacts back IN to broadcasts (they will receive sends again). Dry run unless --commit --confirm")
+    .option("--contact <id>", "contact id (repeatable)", (v, a) => (a || []).concat(v), []).option("--ids-file <file>", "file of contact ids")
+    .option("--reason <text>", "recorded on the marker and the audit row").option("--commit", "write").option("--confirm", "required with --commit").option("--json", "raw JSON")
+    .action((orgId, opts) => contactsCmd.optin(orgId, opts));
+  contacts.command("set <organization_id> <contact_id>")
+    .description("Repair a contact's WhatsApp number (refused when another contact holds it: merge instead). Dry run unless --commit")
+    .option("--whatsapp-id <digits>", "the corrected number, country code first").option("--commit", "write").option("--json", "raw JSON")
+    .action((orgId, contactId, opts) => contactsCmd.set(orgId, contactId, opts));
+  contacts.command("export <organization_id>")
+    .description("Export the org's contacts to CSV (Excel opens it) → .flowiq/contacts/<org>.csv")
+    .option("--subscribers", "only opted-in, not archived, not blocked").option("--out <file>", "write here instead").option("--json", "write JSON instead of CSV")
+    .action((orgId, opts) => contactsCmd.exportContacts(orgId, opts));
+
+  // widgets (1 Oct 2026): web chat widgets
+  const widgets = program.command("widgets").description("Web chat widgets: list, show, pull / push the config (id-keyed patch), embed code, set the active one");
+  widgets.command("list <organization_id>").description("The org's widgets").option("--json", "raw JSON").action((orgId, opts) => widgetsCmd.list(orgId, opts));
+  widgets.command("show <widget_id>").description("One widget's settings").option("--json", "raw JSON").action((id, opts) => widgetsCmd.show(id, opts));
+  widgets.command("pull <widget_id>").description("Write the full config to .flowiq/widgets/<org>-<id>.json for editing").option("--out <file>", "write here instead").action((id, opts) => widgetsCmd.pull(id, opts));
+  widgets.command("push <file>").description("Push a pulled file back: only differing fields, jsonb bags merged at their top level (null removes a key). Dry run unless --commit")
+    .option("--commit", "write").option("--json", "raw JSON").action((file, opts) => widgetsCmd.push(file, opts));
+  widgets.command("embed <organization_id> [widget_id]").description("The <script> snippet a client pastes (widget id optional: the org-only embed resolves to the active widget)").option("--json", "raw JSON").action((orgId, wid, opts) => widgetsCmd.embed(orgId, wid, opts));
+  widgets.command("activate <widget_id>").description("Make this the widget an org-only embed resolves to").option("--json", "raw JSON").action((id, opts) => widgetsCmd.activate(id, opts));
+
+  // tickets (1 Oct 2026): escalation tickets
+  const tickets = program.command("tickets").description("Escalation tickets: list open / stale ones, show one, change its status");
+  tickets.command("list <organization_id>")
+    .description("Tickets newest first (default open + in_progress)")
+    .option("--status <list>", "open,in_progress (default) | resolved | closed | all").option("--contact <id>", "one contact's tickets")
+    .option("--older-than <age>", "only tickets opened longer ago than 48h / 3d / 1w").option("--limit <n>", "max rows (default 100, max 500)").option("--json", "raw JSON")
+    .action((orgId, opts) => ticketsCmd.list(orgId, opts));
+  tickets.command("show <ticket_id>").description("One ticket in full").option("--json", "raw JSON").action((id, opts) => ticketsCmd.show(id, opts));
+  tickets.command("status <ticket_id>")
+    .description("Change a ticket's status the way the app does (stamps, history; honours reenable_bot_on_ticket_resolve). Dry run unless --commit")
+    .requiredOption("--set <status>", "open | in_progress | resolved | closed").option("--note <text>", "resolution / reopen note").option("--commit", "write").option("--json", "raw JSON")
+    .action((id, opts) => ticketsCmd.status(id, opts));
+
+  // flows (1 Oct 2026): the Flows automation engine
+  const flows = program.command("flows").description("Flows: list (trigger, templates, param-key lint), show, execution status + failures, enable / disable");
+  flows.command("list <organization_id>").description("Every flow with trigger, templates, stats and a lint of its body_parameters keys").option("--json", "raw JSON").action((orgId, opts) => flowsCmd.list(orgId, opts));
+  flows.command("show <flow_id>").description("One flow with its full configuration").option("--json", "raw JSON").action((id, opts) => flowsCmd.show(id, opts));
+  flows.command("status <organization_id>")
+    .description("Execution funnel per status and per flow, with the verbatim error rollup")
+    .option("--since <when>", "14d (default) | 7d | 2w | YYYY-MM-DD").option("--flow <id>", "one flow").option("--failed", "also list the failed executions").option("--json", "raw JSON")
+    .action((orgId, opts) => flowsCmd.status(orgId, opts));
+  flows.command("enable <flow_id>").description("Enable a flow (arms real sends: needs --confirm)").option("--confirm", "required").option("--json", "raw JSON").action((id, opts) => flowsCmd.enable(id, opts));
+  flows.command("disable <flow_id>").description("Disable a flow").option("--json", "raw JSON").action((id, opts) => flowsCmd.disable(id, opts));
+
+  // rules (1 Oct 2026): the Automations rules engine (custom_notification_rules)
+  const rules = program.command("rules").description("Automation rules (Shoppers → Rules): list, show, what each has queued, enable / disable");
+  rules.command("list <organization_id>").description("Every rule: trigger, template, delay / quiet hours, conditions").option("--trigger <type>", "tag_added | shopify_order_stage | external_webhook | instagram_comment").option("--json", "raw JSON").action((orgId, opts) => rulesCmd.list(orgId, opts));
+  rules.command("show <rule_id>").description("One rule in full").option("--json", "raw JSON").action((id, opts) => rulesCmd.show(id, opts));
+  rules.command("results <rule_id>").description("What the rule queued (api_request_queue): status counts, errors, recent sends").option("--since <when>", "30d (default) | 7d | YYYY-MM-DD").option("--json", "raw JSON").action((id, opts) => rulesCmd.results(id, opts));
+  rules.command("enable <rule_id>").description("Enable a rule (arms real template sends: needs --confirm)").option("--confirm", "required").option("--json", "raw JSON").action((id, opts) => rulesCmd.enable(id, opts));
+  rules.command("disable <rule_id>").description("Disable a rule").option("--json", "raw JSON").action((id, opts) => rulesCmd.disable(id, opts));
+
   // gaps (CLI gap reports + feature requests, filed by anyone incl. a Claude session)
   const gaps = program.command("gaps")
     .alias("requests")
@@ -712,7 +882,8 @@ export function run(argv) {
     .description("Send one message, print the reply + any tool calls")
     .option("--agent <id>", "test a specific (non-active) agent")
     .option("--clear", "clear the conversation before the run")
-    .option("--sender <name>", "senderName in the payload (default the test contact's name)")
+    .option("--tools", "also print each tool's arguments and result (what the agent asked and got back)")
+    .option("--sender <name>", "the name the agent sees: renames a SYNTHETIC test contact (a real person's contact keeps their name)")
     .option("--image <url>", "attach a publicly-fetchable image URL (text is the caption)")
     .option("--timeout <ms>", "per-turn HTTP timeout (default 120000)")
     .option("--json", "print raw JSON instead of the transcript")
@@ -721,6 +892,7 @@ export function run(argv) {
   test.command("scenario <organization_id> <file>")
     .description("Run a scenario pack (JSON: {scenarios:[{id,title,turns:[{text,expect?,expectNot?}]}]})")
     .option("--agent <id>", "test a specific agent")
+    .option("--tools", "also print each tool's arguments and result")
     .option("--no-clear-between", "do NOT clear between scenarios (one long thread)")
     .option("--force", "go ahead even though the test contact had real (non-web) messages in the last 6 h")
     .option("--sender <name>", "senderName")
@@ -867,6 +1039,7 @@ export function run(argv) {
     .option("--all", "include fired / cancelled / failed rows too")
     .option("--status <s>", "filter to one status (pending|request|completed|cancelled|failed)")
     .option("--limit <n>", "max rows (default 25, max 200)")
+    .option("--detail", "also print each row's body / button values and header media (what the queued send will say)")
     .option("--json", "raw JSON")
     .action((orgId, opts) => broadcastCmd.scheduledList(orgId, opts));
   scheduled.command("approve <organization_id> <queue_id>")
@@ -979,15 +1152,25 @@ export function run(argv) {
     .option("--raw-campaign", "use --campaign exactly as typed, bypassing the Date_Campaign normalisation")
     .option("--new-campaign", "confirm the tag is a NEW campaign even though a differently spelled one with the same name already runs")
     .option("--domain <host>", "short domain: chatcart.io (default) | linklnk.io | yapi.store")
+    .option("--slug <slug>", "readable code for ONE url (3-48 chars a-z 0-9 -); a taken slug falls back to a generated code and says so")
     .option("--commit", "actually mint the links (omit = dry-run preview)")
     .option("--json", "raw JSON output")
     .action((orgId, opts) => linksCmd.shorten(orgId, opts));
   links.command("list <organization_id>")
-    .description("List the org's short links, newest first")
+    .description("List the org's short links, newest first; look one up by code or by destination")
     .option("--campaign <value>", "only links carrying this exact utm_campaign")
-    .option("--limit <n>", "max rows (default 25, max 200)")
+    .option("--code <code>", "one link by its code (the part after the slash)")
+    .option("--to <substr>", "only links whose destination contains this text")
+    .option("--limit <n>", "max rows (default 25, max 500)")
+    .option("--all", "walk every page (500 a call) instead of the first")
     .option("--json", "raw JSON output")
     .action((orgId, opts) => linksCmd.list(orgId, opts));
+  links.command("repoint <organization_id> <code>")
+    .description("Move where a live short code sends people (the code, its clicks and every message carrying it stay). Dry-run unless --commit")
+    .requiredOption("--to <url>", "the new destination page")
+    .option("--commit", "write the change (audited with the old destination; undo is printed)")
+    .option("--json", "raw JSON output")
+    .action((orgId, code, opts) => linksCmd.repoint(orgId, code, opts));
 
   // tag (the Advanced Tagging dialog in the terminal — ONE named tag on a matched set; dry-run default)
   const tag = program.command("tag")
@@ -997,11 +1180,28 @@ export function run(argv) {
     .option("--field <name>", "field to search", "order_history")
     .option("--any <csv>", "match ANY of these comma-separated keywords (OR)")
     .option("--all <csv>", "match ALL of these comma-separated keywords (AND)")
+    .option("--exact", "match the WHOLE value (whatsapp_id / phone_number / email / full_name), not a substring")
     .option("--case-sensitive", "case-sensitive match")
     .option("--tag <name>", "tag to apply (required with --commit)")
     .option("--commit", "write the tag (omit = dry-run count + sample)")
     .option("--yes", "skip the type-the-tag confirm on large (>2000) writes")
     .action((orgId, opts) => tagCmd.field(orgId, opts));
+  tag.command("ids <organization_id>")
+    .description("Apply one tag to an explicit list of contact ids (append-only, idempotent; ids outside the org are ignored)")
+    .option("--ids <csv>", "contact UUIDs, comma-separated")
+    .option("--ids-file <path>", "file of contact UUIDs (one per line or comma-separated)")
+    .option("--tag <name>", "tag to apply (required with --commit)")
+    .option("--commit", "write the tag (omit = dry-run count + sample)")
+    .option("--yes", "skip the type-the-tag confirm on large (>2000) writes")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => tagCmd.ids(orgId, opts));
+  tag.command("holders <organization_id> <tag>")
+    .description("Who carries a tag: name, number, id and the flags that keep them off a broadcast (read-only)")
+    .option("--limit <n>", "rows (default 200, max 1000)")
+    .option("--all", "walk every page")
+    .option("--csv", "CSV to stdout (id, name, number, email, allow_broadcast, archived, blocked)")
+    .option("--json", "raw JSON")
+    .action((orgId, tagName, opts) => tagCmd.holders(orgId, tagName, opts));
   tag.command("cohort <organization_id>")
     .description("Tag a ranked cohort (top-N). --type top_spenders|frequent_buyers|recent_buyers|high_value_low_frequency")
     .option("--type <t>", "cohort type", "top_spenders")
@@ -1055,10 +1255,90 @@ export function run(argv) {
     .option("--json", "raw JSON")
     .action((orgId, opts) => tagCmd.list(orgId, opts));
   tag.command("remove <organization_id> <tags>")
-    .description("Remove tag(s) (comma-separated) from ALL contacts in the org. Destructive — needs --confirm")
+    .description("Remove tag(s) (comma-separated) from ALL contacts in the org, or only from --contacts. Destructive — needs --confirm")
+    .option("--contacts <csv>", "only these contact UUIDs lose the tag(s)")
+    .option("--contacts-file <path>", "file of contact UUIDs that lose the tag(s)")
     .option("--confirm", "actually remove (omit = dry-run)")
     .action((orgId, tags, opts) => tagCmd.remove(orgId, tags, opts));
 
+  // members / users (organization_members + profiles + auth.users)
+  const members = program.command("members").description("An org's people: list, add an existing account, change a role, rename, remove");
+  members.command("list <organization_id>")
+    .description("Members with role, name, email, last sign-in; pending invitations")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => membersCmd.list(orgId, opts));
+  members.command("add <organization_id> <email>")
+    .description("Add an EXISTING account to the org (someone with no account must be invited from the app)")
+    .option("--role <role>", "admin | member | viewer", "member")
+    .option("--json", "raw JSON")
+    .action((orgId, email, opts) => membersCmd.add(orgId, email, opts));
+  members.command("role <organization_id> <email> <role>")
+    .description("Change a member's role: admin | member | viewer (the last admin cannot be demoted)")
+    .option("--json", "raw JSON")
+    .action((orgId, email, role, opts) => membersCmd.role(orgId, email, role, opts));
+  members.command("rename <email> <full_name>")
+    .description("Set the person's display name (profiles.full_name, shown in every org)")
+    .option("--json", "raw JSON")
+    .action((email, name, opts) => membersCmd.rename(email, name, opts));
+  members.command("remove <organization_id> <email>")
+    .description("Remove a member from the org (dry-run unless --confirm; the owner and the last admin are refused)")
+    .option("--confirm", "actually remove")
+    .option("--json", "raw JSON")
+    .action((orgId, email, opts) => membersCmd.remove(orgId, email, opts));
+  const users = program.command("users").description("One user across orgs");
+  users.command("lookup <email>")
+    .description("The account behind an email: sign-in method, confirmation, last sign-in, every org and role")
+    .option("--json", "raw JSON")
+    .action((email, opts) => membersCmd.lookup(email, opts));
+
+  // steer / notes (internal rows in a contact's chat)
+  const steer = program.command("steer").description("Supervisor steers for the agent on one contact: list, add, clear");
+  steer.command("list <contact_id>")
+    .description("Every steer on the contact (mode, consumed, active)")
+    .option("--limit <n>", "rows (default 50)")
+    .option("--json", "raw JSON")
+    .action((contactId, opts) => notesCmd.steerList(contactId, opts));
+  steer.command("add <contact_id> <text...>")
+    .description("Add a steer the agent applies on EVERY reply (ongoing), or --once for the next reply only")
+    .option("--once", "next reply only")
+    .option("--json", "raw JSON")
+    .action((contactId, text, opts) => notesCmd.steerAdd(contactId, text, opts));
+  steer.command("clear <contact_id>")
+    .description("Delete the contact's steers (all, or --id); the inbox has no delete for an ongoing steer. Dry-run unless --confirm")
+    .option("--id <steer_id>", "only this steer (repeatable)", (v, acc) => (acc || []).concat([v]), [])
+    .option("--confirm", "actually delete")
+    .option("--json", "raw JSON")
+    .action((contactId, opts) => notesCmd.steerClear(contactId, opts));
+  const notes = program.command("notes").description("Internal notes on a contact (the Customer panel's sticky notes)");
+  notes.command("list <contact_id>")
+    .description("Every internal note on the contact")
+    .option("--limit <n>", "rows (default 50)")
+    .option("--json", "raw JSON")
+    .action((contactId, opts) => notesCmd.notesList(contactId, opts));
+  notes.command("add <contact_id> <text...>")
+    .description("Add an internal note (team-only, never sent to the customer)")
+    .option("--json", "raw JSON")
+    .action((contactId, text, opts) => notesCmd.notesAdd(contactId, text, opts));
+
+  // products (the synced catalogue)
+  const products = program.command("products").description("The synced catalogue as the agent sees it: status, a search replay, a one-org reconcile");
+  products.command("status <organization_id>")
+    .description("Row counts by status, embeddings (missing = the agent cannot find them), images, prices, stock, the last syncs")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => productsCmd.status(orgId, opts));
+  products.command("search <organization_id> <text...>")
+    .description("Replay the agent's product_lookup match (fuzzy_match_products) for a phrase")
+    .option("--limit <n>", "matches (default 8, max 50)")
+    .option("--min-similarity <x>", "pg_trgm threshold (default 0.15)")
+    .option("--json", "raw JSON")
+    .action((orgId, text, opts) => productsCmd.search(orgId, text, opts));
+  products.command("reconcile <organization_id>")
+    .description("Trigger products-reconcile-scheduler for this org only (re-sync + re-embed). Dry-run unless --confirm")
+    .option("--platform <p>", "shopify | woo (default: the org's connected store)")
+    .option("--confirm", "actually trigger")
+    .option("--json", "raw JSON")
+    .action((orgId, opts) => productsCmd.reconcile(orgId, opts));
+
   // keywords (org auto-reply engine: keywords + keyword_actions; id-keyed diff push)
   const keywords = program.command("keywords")
     .alias("kw")