@plotio/cli 0.3.0 → 0.4.0

package/README.md

@@ -1,6 +1,6 @@
 # @plotio/cli
 
-`plot`: read Plot pages, follow a meeting while it happens, and post back, from
+`plot`: read Plot pages, follow a meeting while it happens, and write back, from
 any agent with a shell (Claude Code, Codex CLI, Amp, OpenCode) or a script.
 
 Plot records conversations — meetings, calls, voice notes — as shared pages: a
@@ -33,6 +33,10 @@ a hash. Each is kept once redeemed, so later shells need nothing.
   browser, against the authorization server the API itself names — so `--api`
   at a local or preview deployment signs in on that deployment's own web app,
   never production's.
+- **A workspace, with no browser anywhere.** Someone signed in to Plot creates
+  a token in Settings > Agents and hands it over. Set `PLOT_TOKEN` (and
+  `PLOT_API_URL` unless it is production) and every command works with no login
+  and nothing stored, which is what a sandbox or a CI job wants.
 
 `plot login` ends three ways, and what it can see decides which:
 
@@ -48,21 +52,23 @@ a hash. Each is kept once redeemed, so later shells need nothing.
 
 ## Commands
 
-| Command                                                     | Does                                                                          |
-| ----------------------------------------------------------- | ----------------------------------------------------------------------------- |
-| `plot open <temp_code_…> [--agent <name>]`                  | Redeem a handoff code and store the page token                                |
-| `plot login [--agent] [--no-browser]`                       | Connect a workspace: sign in and approve in the browser                       |
-| `plot login --code <code>`                                  | Finish a login started without a terminal, with the code the browser showed   |
-| `plot logout [<page>] [--all]`                              | Revoke a credential on the server, then forget it                             |
-| `plot whoami [<page>] [--json]`                             | What the credential acts for, its scope and expiry                            |
-| `plot pages [--limit <n>] [--next <c>] [--json]`            | Pages the workspace grant can read, newest first                              |
-| `plot read <page> [--json]`                                 | The page as Markdown (topics included), or as JSON; stores the updates cursor |
-| `plot watch <page> [--level …] [options]`                   | Wait for the next update, print it, store the cursor                          |
-| `plot topics <page>`                                        | Topics as JSON, with the quotes behind each point                             |
-| `plot search <query> [--limit] [--next] [--json]`           | Search every page the workspace grant can read                                |
-| `plot post <page> [--branch <id>] [--body <t>]`             | Post a message (body from `--body`, else stdin), idempotent per run           |
-| `plot mcp-config [--host <h>] [--token] [--write] [<page>]` | The MCP server block for a host: the `<api>/mcp` URL, signed in with OAuth    |
-| `plot help agents`                                          | The guide for an AI agent                                                     |
+| Command                                                       | Does                                                                          |
+| ------------------------------------------------------------- | ----------------------------------------------------------------------------- |
+| `plot open <temp_code_…> [--agent <name>]`                    | Redeem a handoff code and store the page token                                |
+| `plot login [--agent] [--no-browser]`                         | Connect a workspace: sign in and approve in the browser                       |
+| `plot login --code <code>`                                    | Finish a login started without a terminal, with the code the browser showed   |
+| `plot logout [<page>] [--all]`                                | Revoke a credential on the server, then forget it                             |
+| `plot whoami [<page>] [--json]`                               | What the credential acts for, its scope and expiry                            |
+| `plot pages [--limit <n>] [--next <c>] [--json]`              | Pages the workspace grant can read, newest first                              |
+| `plot read <page> [--json]`                                   | The page as Markdown (topics included), or as JSON; stores the updates cursor |
+| `plot watch <page> [--level …] [options]`                     | Wait for the next update, print it, store the cursor                          |
+| `plot topics <page>`                                          | Topics as JSON, with the quotes behind each point                             |
+| `plot search <query> [--limit] [--next] [--json]`             | Search every page the workspace grant can read                                |
+| `plot message <page> [--body <t>] [--branch] [--note] [--id]` | Draft a message into the person's composer (body from `--body`, else stdin)   |
+| `plot message <page> --send …`                                | Post it as the person instead, marked "via" your agent                        |
+| `plot message <page> --show\|--discard [<id>]`                | Read back or withdraw a draft (the last one made here by default)             |
+| `plot mcp-config [--host <h>] [--token] [--write] [<page>]`   | The MCP server block for a host: the `<api>/mcp` URL, signed in with OAuth    |
+| `plot help agents`                                            | The guide for an AI agent                                                     |
 
 `<page>` is a page id or a page URL (`https://www.plot.io/p/<id>`).
 
@@ -119,7 +125,8 @@ calls expired or revoked is removed and the next one tried.
 `~/.config/plot/credentials.json`, mode `0600` in a `0700` directory. It is
 keyed by API base, so production's tokens and a preview's never collide — and
 so changing `--api` or `PLOT_API_URL` changes which credential is in play. It
-also holds each page's last `watch` cursor, which is how a new shell resumes.
+also holds each page's last `watch` cursor, which is how a new shell resumes,
+and the id of the last message `plot message` made there.
 `plot logout --all` revokes and removes everything for the current API base.
 
 A `plot login` with no TTY leaves a `pending-login.json` beside it, same mode,

package/dist/plot.js

@@ -6,22 +6,22 @@ import { parseArgs } from "node:util";
 // src/errors.ts
 var CliError = class extends Error {
   exitCode;
-  constructor(message, exitCode = 1) {
-    super(message);
+  constructor(message2, exitCode = 1) {
+    super(message2);
     this.name = "CliError";
     this.exitCode = exitCode;
   }
 };
 var UsageError = class extends CliError {
-  constructor(message) {
-    super(`${message}
+  constructor(message2) {
+    super(`${message2}
 Run "plot --help" for usage.`, 2);
     this.name = "UsageError";
   }
 };
 
 // src/version.ts
-var VERSION = "0.3.0";
+var VERSION = "0.4.0";
 
 // src/api.ts
 var DEFAULT_API_URL = "https://agents.plot.io";
@@ -29,8 +29,8 @@ var ApiError = class extends Error {
   status;
   /** The server's machine reason (`expired`, `no_access`, …), or `network`/`http`. */
   code;
-  constructor(status, code, message) {
-    super(message);
+  constructor(status, code, message2) {
+    super(message2);
     this.name = "ApiError";
     this.status = status;
     this.code = code;
@@ -252,32 +252,65 @@ function createApi(opts) {
       );
     },
     /**
-     * POST /v1/pages/:id/messages. `id` makes the post idempotent, which is
-     * what lets a transport failure (no answer, or a gateway 5xx) be retried
-     * with the same id: the server posts it once however many times it
-     * arrives. A refusal with a reason is never retried.
+     * POST /v1/pages/:id/messages: a draft in the person's composer, or with
+     * `send` a message on the page. `id` makes it idempotent, which is what
+     * lets a transport failure (no answer, or a gateway 5xx) be retried with
+     * the same id: the server acts once however many times it arrives. A
+     * refusal with a reason is never retried. Returns the HTTP status too,
+     * since 201 (new) and 200 (an existing draft updated) differ only there.
      */
-    async post(token, pageId, message, retry = {}) {
-      const body = {
-        body: message.body,
-        id: message.id
-      };
-      if (message.branchId) body.branchId = message.branchId;
+    async createMessage(token, pageId, message2, retry = {}) {
+      const body = {};
+      if (message2.body !== void 0) body.body = message2.body;
+      body.id = message2.id;
+      if (message2.branchId) body.branchId = message2.branchId;
+      if (message2.send) body.send = true;
+      if (message2.note) body.note = message2.note;
       const attempts = retry.attempts ?? 3;
       for (let attempt = 1; ; attempt++) {
         try {
-          return await json(
-            await request("POST", `/v1/pages/${enc(pageId)}/messages`, {
-              token,
-              body
-            })
+          const response = await request(
+            "POST",
+            `/v1/pages/${enc(pageId)}/messages`,
+            { token, body }
           );
+          return {
+            status: response.status,
+            body: await json(response)
+          };
         } catch (err) {
           const transport = err instanceof ApiError && (err.code === "network" || [502, 503, 504].includes(err.status));
           if (!transport || attempt >= attempts) throw err;
           await retry.sleep?.(1e3 * attempt);
         }
       }
+    },
+    /**
+     * GET /v1/pages/:id/messages/:messageId: a draft's words and note, or
+     * just `status: 'sent'` once it is on the page. 404 `no_draft` when the
+     * id names nothing of the person's.
+     */
+    async getMessage(token, pageId, messageId) {
+      const body = await json(
+        await request(
+          "GET",
+          `/v1/pages/${enc(pageId)}/messages/${enc(messageId)}`,
+          { token }
+        )
+      );
+      return "message" in body && body.message && typeof body.message === "object" ? body.message : body;
+    },
+    /**
+     * DELETE /v1/pages/:id/messages/:messageId: withdraw a draft. 204; 404
+     * `no_draft`; 403 `not_a_draft` for a message already sent, which the
+     * agent surface never deletes.
+     */
+    async discardMessage(token, pageId, messageId) {
+      await request(
+        "DELETE",
+        `/v1/pages/${enc(pageId)}/messages/${enc(messageId)}`,
+        { token }
+      );
     }
   };
 }
@@ -296,8 +329,8 @@ async function errorFrom(response) {
     const body = JSON.parse(text);
     if (body && typeof body === "object") {
       const code = typeof body.error === "string" ? body.error : "http";
-      const message = typeof body.message === "string" && body.message ? body.message : `Request failed with HTTP ${response.status} (${code}).`;
-      return new ApiError(response.status, code, message);
+      const message2 = typeof body.message === "string" && body.message ? body.message : `Request failed with HTTP ${response.status} (${code}).`;
+      return new ApiError(response.status, code, message2);
     }
   } catch {
   }
@@ -349,6 +382,7 @@ var KNOWN_NODES = /* @__PURE__ */ new Set([
   ...INLINE_NODES
 ]);
 var KNOWN_MARKS = new Set(MARKS);
+var MAX_DOC_DEPTH = 20;
 var MAX_DOC_BYTES = 256 * 1024;
 var MARKDOWN_SYNTAX = new RegExp(
   [
@@ -385,6 +419,9 @@ var MARKDOWN_SYNTAX = new RegExp(
   ].join("|"),
   "m"
 );
+var MAX_PARAGRAPH_DEPTH = MAX_DOC_DEPTH - 1;
+var MAX_QUOTE_DEPTH = MAX_DOC_DEPTH - 2;
+var MAX_LIST_DEPTH = MAX_DOC_DEPTH - 3;
 
 // ../shared/src/transcriptDelta.ts
 var INT64_MAX = BigInt("9223372036854775807");
@@ -406,8 +443,10 @@ Usage: plot <command> [options]
   watch <page> [--level <level>]        Wait for what is new since the last watch
   topics <page>                         The page's topics as JSON
   search <query> [--limit] [--next]    Search your pages (workspace login)
-  post <page> [--branch <id>] [--body <text> | stdin]
-                                        Post a message onto the page
+  message <page> [--body <text> | stdin] Draft a message into the person's composer
+  message <page> --send \u2026               Or post it as them, only when they asked
+  message <page> --show|--discard [<id>]
+                                        Read back or withdraw a draft
   mcp-config [--host <host>] [--write]  Config block for an MCP host
   help agents                           How an AI agent should use this
 
@@ -430,6 +469,10 @@ Get access (once; the token is stored, so later shells need nothing):
                                                 the code the page shows. Then:
   plot login --code <code>                      Finishes it (within ten minutes)
 
+If nobody can open a browser for you at all, ask your person for a token from
+Plot's Settings > Agents, and export PLOT_TOKEN=plot_agent_sk_\u2026 in your shell
+(plus PLOT_API_URL if they say so). Then no login is needed.
+
 Read:
   plot read <page>            The page as Markdown: transcript, then Topics.
                               A later watch starts from the end of this read.
@@ -449,7 +492,9 @@ Follow a meeting that is still happening:
                               tool's own timeout, e.g. --timeout 100)
 
 Write back (only if the person who gave you access can post):
-  plot post <page> --body "\u2026"   Appears as the person, marked "via <your name>"
+  plot message <page> --body "\u2026"         Goes into their composer as a draft for them to send
+  plot message <page> --send --body "\u2026"  Appears as the person at once, marked "via <your name>":
+                                         only when they asked you to post
 
 <page> is a page id or a link like https://www.plot.io/p/<id>.
 
@@ -531,13 +576,37 @@ source quotes and message ids.`,
 
 Searches every page the workspace grant can read: messages, topics and page
 fields, each with pageId, pageTitle, url, snippet and at. Needs "plot login".`,
-  post: `plot post <page> [--branch <id>] [--body <text>]
+  message: `plot message <page> [--branch <id>] [--note <line>] [--id <id>]
+             [--body <text> | stdin]
+plot message <page> --send \u2026
+plot message <page> --show [<id>]
+plot message <page> --discard [<id>]
+
+Puts Markdown words (from --body, else stdin) into the composer of the
+person who granted access, on that page, as a draft: nobody else sees it,
+and it reaches the page only when they send it (or they discard it). Prints
+the message id and the page URL. One draft per lane: a second draft on the
+same lane replaces the first, and says so.
+  --branch <id>   Draft a reply on that branch instead of the main thread
+  --note <line>   One line to the person, shown with the draft (200 chars)
+  --id <id>       Use this message id (8 to 64 of A-Z a-z 0-9 _ -). The same
+                  id again updates that draft in place. Each run otherwise
+                  makes one id, so a retry after a dropped connection lands
+                  once
+
+--send posts it now instead, as the person, marked "via <your agent>". Use it
+only when they asked you to post. With no words given it sends your earlier
+draft as it stands, formatting intact: the one --id names, else the last one
+made here. A grant that cannot post is refused (read_only), never quietly
+turned into a draft.
+
+--show reads a draft back (its words and note), or says it was sent.
+--discard withdraws a draft; a sent message cannot be withdrawn here
+(not_a_draft). Both act on <id>, else --id, else the last message this
+machine made on the page.
 
-Posts a text message onto the page, from --body or else from stdin. It
-appears as the person who granted access, marked as posted via your agent.
-Needs a member who can post; a viewer's grant is refused (read_only). Each
-run sends one idempotency id, so a retry after a dropped connection posts
-once.`,
+Needs a member who can post: a viewer's grant is refused (read_only) for a
+draft as for a send.`,
   "mcp-config": `plot mcp-config [--host <host>] [--write] [--token]
                 [--inline-token] [<page>]
 
@@ -807,6 +876,27 @@ function renderUpdate(update) {
 // src/store.ts
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join } from "node:path";
+function pageMemory(page2) {
+  const kept = {};
+  if (page2?.title) kept.title = page2.title;
+  if (page2?.cursor) kept.cursor = page2.cursor;
+  if (page2?.lastMessageId) kept.lastMessageId = page2.lastMessageId;
+  return kept;
+}
+function dropPageCredential(entry, pageId) {
+  const page2 = entry.pages?.[pageId];
+  if (!page2) return;
+  const kept = pageMemory(page2);
+  if (kept.cursor || kept.lastMessageId) entry.pages[pageId] = kept;
+  else delete entry.pages[pageId];
+}
+function setLastMessageId(entry, pageId, messageId) {
+  const page2 = { ...entry.pages?.[pageId], lastMessageId: messageId };
+  if (messageId === void 0) delete page2.lastMessageId;
+  entry.pages ??= {};
+  if (Object.keys(page2).length === 0) delete entry.pages[pageId];
+  else entry.pages[pageId] = page2;
+}
 function credentialsPath(env, homeDir) {
   const configHome = env.XDG_CONFIG_HOME?.trim() || join(homeDir, ".config");
   return join(configHome, "plot", "credentials.json");
@@ -935,7 +1025,7 @@ async function withToken(rt, pageId, fn) {
   });
   if (candidates.length === 0) {
     throw new CliError(
-      pageId ? `No credential for page ${pageId} on ${rt.origin}. Redeem the code you were given with "plot open temp_code_\u2026", or connect a workspace with "plot login".` : `No workspace credential for ${rt.origin}. Run "plot login" (a code from "plot open" reaches only its one page).`
+      pageId ? `No credential for page ${pageId} on ${rt.origin}. Redeem the code you were given with "plot open temp_code_\u2026", or connect a workspace with "plot login".` : `No workspace credential for ${rt.origin}. Run "plot login", or set PLOT_TOKEN to a token from Plot's Settings > Agents (a code from "plot open" reaches only its one page).`
     );
   }
   for (let i = 0; i < candidates.length; i++) {
@@ -960,10 +1050,8 @@ async function withToken(rt, pageId, fn) {
 async function forget(rt, candidate, pageId) {
   await updateOrigin(rt, (entry) => {
     if (candidate.source === "workspace") delete entry.workspace;
-    if (candidate.source === "page" && pageId && entry.pages?.[pageId]) {
-      const { cursor, title } = entry.pages[pageId];
-      if (cursor) entry.pages[pageId] = { cursor, title };
-      else delete entry.pages[pageId];
+    if (candidate.source === "page" && pageId) {
+      dropPageCredential(entry, pageId);
     }
   });
 }
@@ -1027,7 +1115,7 @@ async function open(rt) {
   rt.ctx.out(
     [
       `Opened "${title}"${by}. ${canPost ? "Read and post" : "Read-only"} access until ${session.expiresAt}; each read extends it${session.absoluteExpiresAt ? `, up to ${session.absoluteExpiresAt}` : ""}.`,
-      `Next: plot read ${pageId}${canPost ? `, plot post ${pageId} --body "\u2026"` : ""}    (plot help agents for more)`,
+      `Next: plot read ${pageId}${canPost ? `, plot message ${pageId} --body "\u2026"` : ""}    (plot help agents for more)`,
       DATA_NOT_INSTRUCTIONS
     ].join("\n")
   );
@@ -1210,11 +1298,7 @@ async function logout(rt) {
     for (const [id, page2] of Object.entries(e.pages ?? {})) {
       if (page2.token && revoked.has(page2.token)) {
         if (rt.values.all) delete e.pages[id];
-        else {
-          delete page2.token;
-          delete page2.expiresAt;
-          if (!page2.cursor) delete e.pages[id];
-        }
+        else dropPageCredential(e, id);
       }
     }
   });
@@ -1503,35 +1587,166 @@ async function search(rt) {
   if (rt.values.json) printJson(rt, result);
   else rt.ctx.out(renderSearch(query, result.results ?? [], result.next));
 }
-async function post(rt) {
-  const pageId = parsePageRef(rt.positionals[0]);
+var MESSAGE_ID = /^[A-Za-z0-9_-]{8,64}$/;
+function checkedId(raw, what) {
+  if (!MESSAGE_ID.test(raw)) {
+    throw new UsageError(
+      `${what} "${raw}" is not a message id (8 to 64 of A-Z a-z 0-9 _ -).`
+    );
+  }
+  return raw;
+}
+async function messageBody(rt) {
   let body = typeof rt.values.body === "string" ? rt.values.body : void 0;
-  if (body === void 0) {
-    if (rt.ctx.stdinIsTTY) {
-      throw new UsageError("Give the message with --body, or pipe it on stdin.");
+  if (body === void 0 && !rt.ctx.stdinIsTTY) body = await rt.ctx.readStdin();
+  body = body?.trim();
+  return body || void 0;
+}
+async function existingId(rt, pageId) {
+  const named = rt.positionals[1] ?? stringFlag(rt, "id");
+  if (named) return checkedId(named, "Message id");
+  const remembered = (await originEntry(rt)).pages?.[pageId]?.lastMessageId;
+  if (remembered) return remembered;
+  throw new UsageError(
+    `No message id given, and none remembered for page ${pageId}: name one with --id.`
+  );
+}
+async function rememberMessage(rt, pageId, messageId) {
+  await updateOrigin(rt, (entry) => setLastMessageId(entry, pageId, messageId));
+}
+function where(title, url) {
+  const named = title ? `"${title}"` : "";
+  if (named && url) return `${named} (${url})`;
+  return named || url || "the page";
+}
+function renderCreated(status, created, title) {
+  const m = created.message;
+  const agent = created.agent || "your agent";
+  const place = where(title, m?.url);
+  const lines = [];
+  if (created.replaced) {
+    lines.push("Replaced the earlier draft on this lane; its id is gone.");
+  }
+  if (m?.status === "sent" && status === 200) {
+    lines.push(
+      created.agent ? `Already sent as the person who granted access, marked "via ${created.agent}", on ${place} (id ${m.id}). Nothing new was posted.` : `Already sent by the person who granted access, from their composer, on ${place} (id ${m.id}). Nothing new was posted.`
+    );
+  } else if (m?.status === "sent") {
+    lines.push(
+      `Sent as the person who granted access, marked "via ${agent}", on ${place} (id ${m.id}).`
+    );
+  } else {
+    const verb = status === 201 || created.replaced ? "Drafted" : "Updated the draft";
+    lines.push(
+      `${verb} into the composer of the person who granted access, on ${place} (id ${m?.id}).`,
+      "Nobody else sees it: they edit it and send it, or discard it. Send it yourself only if they ask:",
+      `  plot message ${m?.pageId ?? "<page>"} --send --id ${m?.id}`
+    );
+  }
+  return lines.join("\n");
+}
+function renderMessage(m, title) {
+  const place = where(title, m.url);
+  if (m.status === "sent") {
+    return `Message ${m.id} is sent: it is on ${place}${m.messageId ? ` as ${m.messageId}` : ""}.`;
+  }
+  const lines = [
+    `Draft ${m.id} is waiting in the person's composer on ${place}${m.branchId ? `, in reply ${m.branchId}` : ""}.`
+  ];
+  if (m.note) lines.push(`Note: ${m.note}`);
+  if (m.body !== void 0) lines.push("", m.body);
+  return lines.join("\n");
+}
+async function message(rt) {
+  const pageId = parsePageRef(rt.positionals[0]);
+  const show = rt.values.show === true;
+  const discard = rt.values.discard === true;
+  const send = rt.values.send === true;
+  if ([show, discard, send].filter(Boolean).length > 1) {
+    throw new UsageError("Choose one of --send, --show and --discard.");
+  }
+  const title = (await originEntry(rt)).pages?.[pageId]?.title;
+  if (show || discard) {
+    for (const flag of ["body", "branch", "note"]) {
+      if (rt.values[flag] !== void 0) {
+        throw new UsageError(
+          `--${flag} does not go with --${show ? "show" : "discard"}.`
+        );
+      }
+    }
+    if (rt.positionals.length > 2) {
+      throw new UsageError("Too many arguments: <page> and at most one id.");
+    }
+    const id2 = await existingId(rt, pageId);
+    if (show) {
+      const found = await withToken(
+        rt,
+        pageId,
+        (token) => rt.api.getMessage(token, pageId, id2)
+      );
+      if (rt.values.json) printJson(rt, found);
+      else rt.ctx.out(renderMessage(found, title));
+      return;
     }
-    body = await rt.ctx.readStdin();
+    await withToken(
+      rt,
+      pageId,
+      (token) => rt.api.discardMessage(token, pageId, id2)
+    );
+    const remembered = (await originEntry(rt)).pages?.[pageId]?.lastMessageId;
+    if (remembered === id2) await rememberMessage(rt, pageId, void 0);
+    if (rt.values.json) printJson(rt, { id: id2, discarded: true });
+    else
+      rt.ctx.out(
+        `Discarded draft ${id2}; it is gone from the person's composer.`
+      );
+    return;
+  }
+  if (rt.positionals.length > 1) {
+    throw new UsageError(
+      `Unexpected argument "${rt.positionals[1]}". Give the words with --body, or pipe them on stdin.`
+    );
+  }
+  const branchId = stringFlag(rt, "branch");
+  const note = stringFlag(rt, "note");
+  const body = await messageBody(rt);
+  let id;
+  if (body !== void 0) {
+    const named = stringFlag(rt, "id");
+    id = named ? checkedId(named, "--id") : newClientId();
+  } else if (send) {
+    id = await existingId(rt, pageId);
+  } else {
+    throw new UsageError(
+      rt.ctx.stdinIsTTY ? "Give the message with --body, or pipe it on stdin." : "The message is empty."
+    );
   }
-  body = body.trim();
-  if (!body) throw new UsageError("The message is empty.");
-  const id = newClientId();
   const created = await withToken(
     rt,
     pageId,
-    (token) => rt.api.post(
+    (token) => rt.api.createMessage(
       token,
       pageId,
-      { body, branchId: stringFlag(rt, "branch"), id },
+      {
+        body,
+        id,
+        branchId,
+        send,
+        note
+      },
       { sleep: rt.ctx.sleep }
     )
-  );
-  if (rt.values.json) printJson(rt, created);
-  else {
-    const via = created.postedByAgent ? ` via ${created.postedByAgent}` : "";
-    rt.ctx.out(
-      `Posted${via}: ${created.message?.url ?? created.message?.id ?? ""}`.trim()
-    );
-  }
+  ).catch((err) => {
+    if (body === void 0 && err instanceof ApiError && err.code === "no_draft") {
+      throw new CliError(
+        `No draft to send here: ${id} is not a draft of yours on page ${pageId}. (${err.message})`
+      );
+    }
+    throw err;
+  });
+  await rememberMessage(rt, pageId, created.body.message?.id ?? id);
+  if (rt.values.json) printJson(rt, created.body);
+  else rt.ctx.out(renderCreated(created.status, created.body, title));
 }
 
 // src/commands/watch.ts
@@ -1642,9 +1857,17 @@ var COMMANDS = {
     run: search,
     options: { next: { type: "string" }, limit: { type: "string" } }
   },
-  post: {
-    run: post,
-    options: { branch: { type: "string" }, body: { type: "string" } }
+  message: {
+    run: message,
+    options: {
+      branch: { type: "string" },
+      body: { type: "string" },
+      note: { type: "string" },
+      id: { type: "string" },
+      send: { type: "boolean" },
+      show: { type: "boolean" },
+      discard: { type: "boolean" }
+    }
   },
   "mcp-config": {
     run: mcpConfig,
@@ -1796,8 +2019,8 @@ function oauthFailure(error, description) {
   }
   return new CliError(`Login failed: the browser returned "${error}".`);
 }
-function page(res, status, title, message) {
-  const body = `<!doctype html><meta charset="utf-8"><title>${escape(title)}</title><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1rem"><h1 style="font-size:1.25rem">${escape(title)}</h1><p>${escape(message)}</p></body>`;
+function page(res, status, title, message2) {
+  const body = `<!doctype html><meta charset="utf-8"><title>${escape(title)}</title><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1rem"><h1 style="font-size:1.25rem">${escape(title)}</h1><p>${escape(message2)}</p></body>`;
   res.writeHead(status, {
     "Content-Type": "text/html; charset=utf-8",
     "Cache-Control": "no-store",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@plotio/cli",
-  "version": "0.3.0",
-  "description": "Read Plot pages, follow a meeting as it happens, and post back, from any agent with a shell.",
+  "version": "0.4.0",
+  "description": "Read Plot pages, follow a meeting as it happens, and draft or send messages, from any agent with a shell.",
   "type": "module",
   "license": "MIT",
   "bin": {