@easybits.cloud/cli 0.12.0 → 0.14.0

package/README.md

@@ -50,6 +50,8 @@ easybits sandboxes destroy sb_abc123 --yes
 
 # Hosting: permanent machines (alias: deploy)
 easybits machines ls
+easybits machines launch --repo https://github.com/you/shop.git --tier micro --domain shop.example.com
+easybits machines launch --machine shop --archive ./build.tgz --prebuilt -m v2   # redeploy
 easybits deploy sb_abc123 -m "v1.2"   # = machines deploy
 easybits machines releases sb_abc123 --limit 5
 easybits machines logs sb_abc123 --lines 100 --grep ERROR
@@ -68,7 +70,8 @@ easybits domains rm sb_abc123 shop.example.com --yes
 # Databases
 easybits db ls
 easybits db create leads
-easybits db tables leads             # tables, row counts, columns
+easybits db tables leads             # tables, row counts, columns, permanent vs external links
+easybits db photos put catalog --table products --key-column sku --dir photos/   # SKU-123.jpg → row sku=SKU-123
 easybits db query leads "SELECT * FROM leads" --json
 easybits db rm leads --yes
 
@@ -163,6 +166,22 @@ Host *.ghosty
 
 Full reference: https://www.easybits.cloud/docs#cli · https://www.easybits.cloud/en/docs/cli.md
 
+## Changes in 0.14.0
+
+- `machines launch` (aliases `create`, `new`): create a permanent machine and put an app on it in
+  one step — the CLI side of `launch_app`. Source is `--repo`, `--archive <url|file>` (a local file
+  is uploaded first) or `--machine` (redeploy onto an existing one). `--tier`, `--prebuilt`,
+  `--start`, `--port`, `--env K=V`, `--secret NAME`, `--data <path>`, `--domain`.
+  Without a plan it prints the checkout link instead of failing.
+
+## Changes in 0.13.0
+
+- Catalog photos: `db photos put <db> --table T --key-column sku --dir photos/ [--column C]
+  [--replace] [--dry-run]` uploads each photo as a public file with a permanent link and writes it
+  in the matching row (real type by bytes, JPEG/PNG/WebP, 10 MB; one upload per distinct photo).
+- `db tables` shows, per text column with links, how many are permanent, expiring (signed),
+  external or empty (`--json`: `links`).
+
 ## Changes in 0.12.0
 
 - `easybits completion zsh|bash|fish`: TAB completes commands, subcommands, flags and the names of

package/dist/index.js

@@ -252,7 +252,12 @@ var HEADERS_ES = {
   TABLE: "TABLA",
   TYPE: "TIPO",
   "URL / COMMAND": "URL / COMANDO",
-  VERSION: "VERSI\xD3N"
+  VERSION: "VERSI\xD3N",
+  COLUMN: "COLUMNA",
+  PERMANENT: "PERMANENTES",
+  EXPIRING: "CADUCAN",
+  EXTERNAL: "DE FUERA",
+  EMPTY: "VAC\xCDAS"
 };
 function table(rows, cols, empty = t("Nothing here yet.", "Todav\xEDa no hay nada.")) {
   if (lang() === "es") cols = cols.map(([k, l]) => [k, HEADERS_ES[l] ?? l]);
@@ -1373,6 +1378,8 @@ var sandboxes = {
 };
 
 // src/commands/machines.ts
+import { existsSync as existsSync6, readFileSync as readFileSync6, statSync as statSync2 } from "fs";
+import { basename as basename2 } from "path";
 var SECRETS_USAGE = "easybits machines secrets <ls|set|unset> <machine> [--dotenv <path> | NAME]";
 var machines = {
   name: "machines",
@@ -1400,6 +1407,103 @@ var machines = {
         );
       }
     },
+    launch: {
+      aliases: ["create", "new"],
+      summary: "Create a machine and put an app on it in one step (or redeploy onto an existing one)",
+      usage: "easybits machines launch (--repo <url> | --archive <url|file> | --machine <machine>) [--tier micro] [--name <name>] [--prebuilt] [--start <cmd>] [--port 3000] [--env K=V]... [--secret NAME]... [--data <path>]... [--domain <host>]",
+      options: {
+        repo: { type: "string", value: "url", description: "Git repo to clone (clean URL; a token goes in --repo-token)" },
+        branch: { type: "string", value: "name", description: "Branch to clone" },
+        "repo-token": { type: "string", value: "$secret:NAME", description: "Token for a private repo; best as $secret:NAME from your vault" },
+        archive: { type: "string", value: "url|file", description: "A .tar.gz/.zip of the app: URL, or a local file that gets uploaded first" },
+        machine: { type: "string", value: "machine", description: "Deploy onto this existing machine instead of creating one" },
+        tier: { type: "string", value: "tier", description: "Size for a new machine: nano, micro (default), estandar, focus, performance\u2026" },
+        name: { type: "string", value: "name", description: "Human label" },
+        "app-dir": { type: "string", value: "dir", description: "Where the app lives in the machine (default /app)" },
+        build: { type: "string", value: "cmd", description: "Build command (default: npm ci && npm run build)" },
+        start: { type: "string", value: "cmd", description: "Start command (default: npm start)" },
+        port: { type: "string", value: "port", description: "Port the app listens on (default 3000)" },
+        prebuilt: { type: "boolean", description: "The code is already built: skip the build, just start it" },
+        env: { type: "string", multiple: true, value: "K=V", description: "Environment variable, non-secret (repeatable)" },
+        secret: { type: "string", multiple: true, value: "NAME", description: "Vault secret the app needs, by name (repeatable)" },
+        data: { type: "string", multiple: true, value: "path", description: "Path the nightly backup copies (repeatable). Without it nothing is backed up" },
+        domain: { type: "string", value: "host", description: "Domain to attach; the output says which DNS record to create" },
+        message: { type: "string", short: "m", value: "text", description: "Release note" }
+      },
+      examples: [
+        "easybits machines launch --repo https://github.com/you/shop.git --tier micro --domain shop.example.com",
+        "easybits machines launch --archive ./build.tgz --prebuilt --tier nano --name shop --start 'npm start'",
+        "easybits machines launch --machine shop --archive ./build.tgz --prebuilt -m v2   # redeploy"
+      ],
+      async run(ctx) {
+        const repo = str(ctx, "repo");
+        let archiveUrl = str(ctx, "archive");
+        const sandboxId = str(ctx, "machine");
+        if (!repo && !archiveUrl && !sandboxId) {
+          throw usageError(t("Give a source: --repo, --archive or --machine.", "Pasa una fuente: --repo, --archive o --machine."), this.usage);
+        }
+        if (repo && archiveUrl) throw usageError(t("--repo and --archive are exclusive.", "--repo y --archive se excluyen."), this.usage);
+        if (sandboxId && str(ctx, "tier")) {
+          throw usageError(t("--tier is only for a new machine (resize = redeploy_machine).", "--tier s\xF3lo aplica a una m\xE1quina nueva (cambiar tama\xF1o = redeploy_machine)."), this.usage);
+        }
+        const eb = await getClient(ctx);
+        if (archiveUrl && !/^https?:\/\//.test(archiveUrl)) {
+          if (!existsSync6(archiveUrl)) throw usageError(t(`File not found: ${archiveUrl}`, `No existe el archivo: ${archiveUrl}`), this.usage);
+          const size = statSync2(archiveUrl).size;
+          const contentType = archiveUrl.endsWith(".zip") ? "application/zip" : "application/gzip";
+          const up = await eb.uploadFile({ fileName: basename2(archiveUrl), contentType, size, access: "public" });
+          const res = await fetch(up.putUrl, { method: "PUT", body: readFileSync6(archiveUrl), headers: { "Content-Type": contentType } });
+          if (!res.ok) throw new CliError(t(`Upload failed: storage answered ${res.status}`, `Fall\xF3 la subida: el almacenamiento contest\xF3 ${res.status}`), 1, void 0, "upload_failed", res.status);
+          archiveUrl = up.file.url;
+          if (!archiveUrl) throw new CliError(t("The upload returned no public URL.", "La subida no devolvi\xF3 una URL p\xFAblica."), 1, void 0, "upload_failed");
+        }
+        const env = pairs(list(ctx, "env"), this.usage);
+        const secretNames = list(ctx, "secret");
+        const dataPaths = list(ctx, "data");
+        const r = await eb.machines.launch({
+          repo,
+          branch: str(ctx, "branch"),
+          repoToken: str(ctx, "repo-token"),
+          archiveUrl,
+          sandboxId,
+          tier: str(ctx, "tier"),
+          name: str(ctx, "name"),
+          appDir: str(ctx, "app-dir"),
+          buildCommand: str(ctx, "build"),
+          startCommand: str(ctx, "start"),
+          port: int(ctx, "port", this.usage),
+          prebuilt: bool(ctx, "prebuilt") || void 0,
+          env: Object.keys(env).length ? env : void 0,
+          secretNames: secretNames.length ? secretNames : void 0,
+          dataPaths: dataPaths.length ? dataPaths : void 0,
+          domain: str(ctx, "domain"),
+          message: str(ctx, "message")
+        });
+        if (r.checkoutUrl) {
+          emit(ctx, r, () => {
+            console.log(t("Your account has no plan: pay the machine here and it is created by itself:", "Tu cuenta no tiene plan: paga la m\xE1quina aqu\xED y se crea sola:"));
+            console.log(`  ${r.checkoutUrl}`);
+            console.log(t("Then deploy onto it: easybits machines launch --machine <id> \u2026", "Luego despliega encima: easybits machines launch --machine <id> \u2026"));
+          });
+          return;
+        }
+        if (r.exitCode !== 0) {
+          throw new CliError(
+            t(`Launch failed (exit ${r.exitCode}) on ${r.sandboxId}`, `Fall\xF3 el lanzamiento (exit ${r.exitCode}) en ${r.sandboxId}`),
+            1,
+            r.buildOutput?.slice(-2e3),
+            "launch_failed"
+          );
+        }
+        emit(ctx, r, () => {
+          console.log(`${r.sandboxId}  v${r.version}  ${r.url}`);
+          if (r.domain) {
+            console.log(`${t("Domain", "Dominio")}: ${r.domain.domain} \u2192 ${r.domain.url}`);
+            console.log(`DNS: ${JSON.stringify(r.domain.dns)}`);
+          }
+        });
+      }
+    },
     deploy: {
       summary: "Publish the machine's current app code as a new release",
       usage: "easybits machines deploy <machine> [--message <text>]",
@@ -1570,6 +1674,101 @@ var domains = {
   }
 };
 
+// src/commands/db.ts
+import { existsSync as existsSync7, readFileSync as readFileSync8, statSync as statSync4 } from "fs";
+
+// src/photos.ts
+import { createHash as createHash2 } from "crypto";
+import { readFileSync as readFileSync7, readdirSync, statSync as statSync3 } from "fs";
+import { extname as extname2, join as join3 } from "path";
+var PHOTO_MAX_BYTES = 10 * 1024 * 1024;
+var WHATSAPP_MAX_BYTES = 5 * 1024 * 1024;
+function imageTypeOf(b) {
+  if (b.length >= 3 && b[0] === 255 && b[1] === 216 && b[2] === 255) return { mime: "image/jpeg", ext: "jpg" };
+  if (b.length >= 8 && b[0] === 137 && b[1] === 80 && b[2] === 78 && b[3] === 71 && b[4] === 13 && b[5] === 10 && b[6] === 26 && b[7] === 10) {
+    return { mime: "image/png", ext: "png" };
+  }
+  if (b.length >= 12 && b[0] === 82 && b[1] === 73 && b[2] === 70 && b[3] === 70 && b[8] === 87 && b[9] === 69 && b[10] === 66 && b[11] === 80) {
+    return { mime: "image/webp", ext: "webp" };
+  }
+  return null;
+}
+function photoFiles(dir) {
+  const photos = [];
+  const rejected = [];
+  for (const name of readdirSync(dir).sort()) {
+    if (name.startsWith(".")) continue;
+    const path = join3(dir, name);
+    const st = statSync3(path);
+    if (!st.isFile()) continue;
+    if (st.size === 0) {
+      rejected.push({ file: name, reason: "empty" });
+      continue;
+    }
+    if (st.size > PHOTO_MAX_BYTES) {
+      rejected.push({ file: name, reason: "too_large" });
+      continue;
+    }
+    const bytes = readFileSync7(path);
+    const type = imageTypeOf(bytes);
+    if (!type) {
+      rejected.push({ file: name, reason: "not_an_image" });
+      continue;
+    }
+    const key = name.slice(0, name.length - extname2(name).length);
+    photos.push({ key, file: name, path, ...type, bytes: st.size, sha: createHash2("sha256").update(bytes).digest("hex") });
+  }
+  return { photos, rejected };
+}
+function linkKind(v) {
+  if (v == null || String(v).trim() === "") return "empty";
+  const s = String(v).trim();
+  let u;
+  try {
+    u = new URL(s);
+  } catch {
+    return "other";
+  }
+  if (u.protocol !== "https:" && u.protocol !== "http:") return "other";
+  if (/X-Amz-Signature=|[?&]Signature=|[?&]sig=/i.test(u.search)) return "expiring";
+  if (/^easybits-public\./.test(u.hostname) || u.hostname === "easybits.cloud" || u.hostname.endsWith(".easybits.cloud")) return "permanent";
+  return "external";
+}
+var PHOTO_COLUMNS = ["image_url", "photo_url", "imagen_url", "foto_url", "image", "photo", "imagen", "foto", "img"];
+function defaultPhotoColumn(columns) {
+  const lower = new Map(columns.map((c) => [c.toLowerCase(), c]));
+  for (const c of PHOTO_COLUMNS) if (lower.has(c)) return lower.get(c);
+  return void 0;
+}
+function planPhotos(photos, current2, replace) {
+  return photos.map((p) => {
+    if (!current2.has(p.key)) return { key: p.key, file: p.file, action: "no_row" };
+    const cur = current2.get(p.key);
+    const keep = !replace && linkKind(cur) === "permanent";
+    return { key: p.key, file: p.file, action: keep ? "keep" : "update", ...cur ? { current: String(cur) } : {} };
+  });
+}
+var ident = (n) => `"${n.replace(/"/g, '""')}"`;
+function linkStatsSql(table2, columns) {
+  const parts = columns.flatMap((c) => {
+    const v = `trim(CAST(${ident(c)} AS TEXT))`;
+    const url = `(${v} LIKE 'http://%' OR ${v} LIKE 'https://%')`;
+    const exp = `(${v} LIKE '%X-Amz-Signature=%' OR ${v} LIKE '%?Signature=%' OR ${v} LIKE '%&Signature=%')`;
+    const perm = `(${v} LIKE 'https://easybits-public.%' OR ${v} LIKE 'http%://easybits.cloud/%' OR ${v} LIKE 'http%.easybits.cloud/%')`;
+    return [
+      `SUM(CASE WHEN ${url} AND NOT ${exp} AND ${perm} THEN 1 ELSE 0 END)`,
+      `SUM(CASE WHEN ${url} AND ${exp} THEN 1 ELSE 0 END)`,
+      `SUM(CASE WHEN ${url} AND NOT ${exp} AND NOT ${perm} THEN 1 ELSE 0 END)`,
+      `SUM(CASE WHEN ${ident(c)} IS NULL OR ${v} = '' THEN 1 ELSE 0 END)`
+    ];
+  });
+  return `SELECT ${parts.join(", ")} FROM ${ident(table2)}`;
+}
+function parseLinkStats(columns, row) {
+  const n = (i) => Number(row[i] ?? 0) || 0;
+  return columns.map((column, i) => ({ column, permanent: n(i * 4), expiring: n(i * 4 + 1), external: n(i * 4 + 2), empty: n(i * 4 + 3) })).filter((s) => s.permanent + s.expiring + s.external > 0);
+}
+
 // src/refs.ts
 var ID_FORMAT = {
   agent: /^[0-9a-f]{24}$/i,
@@ -1609,7 +1808,8 @@ var REF_ARGS = {
   "domains rm": { index: 0, kind: "sandbox" },
   "db rm": { index: 0, kind: "db" },
   "db tables": { index: 0, kind: "db" },
-  "db query": { index: 0, kind: "db" }
+  "db query": { index: 0, kind: "db" },
+  "db photos": { index: 1, kind: "db" }
 };
 function matchRef(kind, ref, items) {
   if (looksLikeId(kind, ref)) return { ok: true, id: ref };
@@ -1731,7 +1931,7 @@ var db = {
     },
     tables: {
       aliases: ["inspect", "schema"],
-      summary: "List tables with row counts and columns",
+      summary: "List tables with row counts and columns, and how many links are permanent",
       usage: "easybits db tables <db-id|name>",
       examples: ["easybits db tables leads", "easybits db tables leads --json"],
       // Patrón de `turso db inspect` / `.tables` + `.schema` de sqlite3, en una sola vista.
@@ -1741,28 +1941,133 @@ var db = {
         const hit = await findDb(ctx, ref);
         const q = (sql, args) => eb.queryDatabase(hit.id, sql, args);
         const names = (await q("SELECT name FROM sqlite_master WHERE type = 'table' AND name NOT LIKE 'sqlite_%' AND name NOT LIKE '_litestream_%' ORDER BY name")).rows.map((r) => String(r[0]));
-        const ident = (n) => `"${n.replace(/"/g, '""')}"`;
+        const ident2 = (n) => `"${n.replace(/"/g, '""')}"`;
         const tables = [];
         for (const name of names) {
-          const info2 = await q(`PRAGMA table_info(${ident(name)})`);
+          const info2 = await q(`PRAGMA table_info(${ident2(name)})`);
           const col = (k) => info2.cols.indexOf(k);
           const columns = info2.rows.map((r) => ({ name: String(r[col("name")]), type: String(r[col("type")] ?? ""), pk: Number(r[col("pk")]) > 0 }));
-          const count = await q(`SELECT count(*) FROM ${ident(name)}`);
-          tables.push({ name, rows: Number(count.rows[0]?.[0] ?? 0), columns });
+          const count = await q(`SELECT count(*) FROM ${ident2(name)}`);
+          const textCols = columns.filter((c) => !c.type || /CHAR|TEXT|CLOB/i.test(c.type)).map((c) => c.name);
+          const links = textCols.length ? parseLinkStats(textCols, (await q(linkStatsSql(name, textCols))).rows[0] ?? []) : [];
+          tables.push({ name, rows: Number(count.rows[0]?.[0] ?? 0), columns, links });
         }
-        emit(
-          ctx,
-          tables,
-          () => table(
+        emit(ctx, tables, () => {
+          table(
             tables.map((t2) => ({
               name: t2.name,
               rows: t2.rows,
               columns: t2.columns.map((c) => `${c.name}${c.type ? ` ${c.type}` : ""}${c.pk ? " PK" : ""}`).join(", ")
             })),
             [["name", "TABLE"], ["rows", "ROWS"], ["columns", "COLUMNS"]],
-            `No tables in ${hit.name}. Create one: easybits db query ${hit.name} 'CREATE TABLE \u2026'`
-          )
-        );
+            t(`No tables in ${hit.name}. Create one: easybits db query ${hit.name} 'CREATE TABLE \u2026'`, `No hay tablas en ${hit.name}. Crea una: easybits db query ${hit.name} 'CREATE TABLE \u2026'`)
+          );
+          const withLinks = tables.flatMap((tb) => tb.links.map((l) => ({ ...l, table: tb.name })));
+          if (withLinks.length) {
+            console.log("\n" + t("Links (permanent = EasyBits public storage; expiring = signed URL):", "Ligas (permanente = almacenamiento p\xFAblico de EasyBits; caduca = URL firmada):"));
+            table(
+              withLinks.map((l) => ({ where: `${l.table}.${l.column}`, permanent: l.permanent, expiring: l.expiring, external: l.external, empty: l.empty })),
+              [["where", "COLUMN"], ["permanent", "PERMANENT"], ["expiring", "EXPIRING"], ["external", "EXTERNAL"], ["empty", "EMPTY"]]
+            );
+            if (withLinks.some((l) => l.external + l.expiring > 0)) {
+              console.log(t("Make them permanent: easybits db photos put <db> --table T --key-column sku --dir photos/", "Hazlas permanentes: easybits db photos put <db> --table T --key-column sku --dir fotos/"));
+            }
+          }
+        });
+      }
+    },
+    photos: {
+      summary: "Put catalog photos in a table: SKU-123.jpg \u2192 the row whose key is SKU-123, as a permanent public link",
+      usage: "easybits db photos put <db> --table <table> --key-column <col> --dir <folder> [--column <col>] [--replace] [--dry-run]",
+      options: {
+        table: { type: "string", value: "table", description: "Table to update" },
+        "key-column": { type: "string", value: "col", description: "Column that matches the file name (e.g. sku)" },
+        dir: { type: "string", value: "folder", description: "Folder with the photos (JPEG, PNG or WebP, max 10 MB each)" },
+        column: { type: "string", value: "col", description: "Column for the link (default: image_url, photo_url, imagen\u2026)" },
+        replace: { type: "boolean", description: "Also replace rows that already have a permanent link" },
+        "dry-run": { type: "boolean", description: "Show the plan; upload nothing" }
+      },
+      examples: [
+        "easybits db photos put catalogo --table productos --key-column sku --dir fotos/ --dry-run",
+        "easybits db photos put catalogo --table productos --key-column sku --dir fotos/ --column foto",
+        "easybits db tables catalogo                  # how many links are permanent, external or empty"
+      ],
+      async run(ctx) {
+        const action = need(ctx, 0, "put", this.usage);
+        if (action !== "put") throw usageError(t(`Unknown photos action "${action}".`, `Acci\xF3n de photos desconocida "${action}".`), this.usage);
+        const ref = need(ctx, 1, "db", this.usage);
+        const tableName = str(ctx, "table");
+        const keyCol = str(ctx, "key-column");
+        const dir = str(ctx, "dir");
+        if (!tableName || !keyCol || !dir) throw usageError(t("Missing --table, --key-column or --dir.", "Faltan --table, --key-column o --dir."), this.usage);
+        if (!existsSync7(dir) || !statSync4(dir).isDirectory()) throw usageError(t(`Not a folder: ${dir}`, `No es una carpeta: ${dir}`), this.usage);
+        const { photos, rejected } = photoFiles(dir);
+        const eb = await getClient(ctx);
+        const hit = await findDb(ctx, ref);
+        const q = (sql, args) => eb.queryDatabase(hit.id, sql, args);
+        const ident2 = (n) => `"${n.replace(/"/g, '""')}"`;
+        const info2 = await q(`PRAGMA table_info(${ident2(tableName)})`);
+        const cols = info2.rows.map((r) => String(r[info2.cols.indexOf("name")]));
+        if (!cols.length) throw new CliError(t(`No table "${tableName}" in ${hit.name}.`, `No hay tabla "${tableName}" en ${hit.name}.`), 1, t(`See: easybits db tables ${hit.name}`, `Mira: easybits db tables ${hit.name}`), "not_found", 404);
+        if (!cols.includes(keyCol)) throw usageError(t(`No column "${keyCol}" in ${tableName} (${cols.join(", ")}).`, `No hay columna "${keyCol}" en ${tableName} (${cols.join(", ")}).`), this.usage);
+        const column = str(ctx, "column") ?? defaultPhotoColumn(cols);
+        if (!column) throw usageError(t(`${tableName} has no photo column: pass --column (${cols.join(", ")}).`, `${tableName} no tiene columna de foto: pasa --column (${cols.join(", ")}).`), this.usage);
+        if (!cols.includes(column)) throw usageError(t(`No column "${column}" in ${tableName} (${cols.join(", ")}).`, `No hay columna "${column}" en ${tableName} (${cols.join(", ")}).`), this.usage);
+        const current2 = /* @__PURE__ */ new Map();
+        for (let i = 0; i < photos.length; i += 100) {
+          const keys = photos.slice(i, i + 100).map((p) => p.key);
+          const r = await q(`SELECT ${ident2(keyCol)}, ${ident2(column)} FROM ${ident2(tableName)} WHERE ${ident2(keyCol)} IN (${keys.map(() => "?").join(",")})`, keys);
+          for (const row of r.rows) current2.set(String(row[0]), row[1]);
+        }
+        const plan = planPhotos(photos, current2, bool(ctx, "replace"));
+        const big = photos.filter((p) => p.bytes > WHATSAPP_MAX_BYTES).map((p) => p.file);
+        const summary = { db: hit.name, table: tableName, keyColumn: keyCol, column, plan, rejected, overWhatsappLimit: big };
+        const count = (a) => plan.filter((p) => p.action === a).length;
+        const why = (r) => r === "not_an_image" ? t("not a JPEG/PNG/WebP", "no es JPEG/PNG/WebP") : r === "too_large" ? t("over 10 MB", "m\xE1s de 10 MB") : t("empty file", "archivo vac\xEDo");
+        const printPlan2 = () => {
+          for (const p of plan) {
+            const what = p.action === "update" ? t("update", "actualizar") : p.action === "keep" ? t("keep (already permanent; --replace to redo)", "se queda (ya es permanente; --replace para rehacerla)") : t("no row with that key", "no hay fila con esa llave");
+            console.log(`${p.action === "update" ? "~" : "!"} ${p.file} \u2192 ${keyCol}=${p.key}: ${what}`);
+          }
+          for (const r of rejected) console.log(`! ${r.file}: ${why(r.reason)}`);
+          if (big.length) console.log(t(`Over 5 MB (WhatsApp won't send them by link): ${big.join(", ")}`, `M\xE1s de 5 MB (WhatsApp no las manda por liga): ${big.join(", ")}`));
+        };
+        if (bool(ctx, "dry-run") || !count("update")) {
+          emit(ctx, { ...summary, dryRun: bool(ctx, "dry-run") }, () => {
+            printPlan2();
+            console.log(count("update") ? t("(dry run: nothing uploaded)", "(simulaci\xF3n: no se subi\xF3 nada)") : t("Nothing to update.", "Nada que actualizar."));
+          });
+          return;
+        }
+        const urls = /* @__PURE__ */ new Map();
+        const results = [];
+        for (const item of plan.filter((p) => p.action === "update")) {
+          const photo = photos.find((p) => p.key === item.key);
+          try {
+            let url = urls.get(photo.sha);
+            if (!url) {
+              const up = await eb.uploadFile({ fileName: `${photo.sha.slice(0, 32)}.${photo.ext}`, contentType: photo.mime, size: photo.bytes, access: "public" });
+              const res = await fetch(up.putUrl, { method: "PUT", body: readFileSync8(photo.path), headers: { "Content-Type": photo.mime } });
+              if (!res.ok) throw new Error(t(`storage answered ${res.status}`, `el almacenamiento contest\xF3 ${res.status}`));
+              url = up.file.url;
+              if (!url) throw new Error(t("the API returned no public link", "la API no devolvi\xF3 liga p\xFAblica"));
+              urls.set(photo.sha, url);
+            }
+            await q(`UPDATE ${ident2(tableName)} SET ${ident2(column)} = ? WHERE ${ident2(keyCol)} = ?`, [url, item.key]);
+            results.push({ key: item.key, file: item.file, url });
+            if (!ctx.json) console.log(`~ ${item.file} \u2192 ${keyCol}=${item.key}: ${url}`);
+          } catch (e) {
+            results.push({ key: item.key, file: item.file, error: e.message });
+            if (!ctx.json) console.error(`! ${item.file}: ${e.message}`);
+          }
+        }
+        const failed = results.filter((r) => r.error).length;
+        emit(ctx, { ...summary, results }, () => {
+          for (const p of plan.filter((x) => x.action !== "update")) console.log(`! ${p.file} \u2192 ${keyCol}=${p.key}: ${p.action === "keep" ? t("kept", "se qued\xF3") : t("no row with that key", "no hay fila con esa llave")}`);
+          for (const r of rejected) console.log(`! ${r.file}: ${why(r.reason)}`);
+          console.log(t(`Updated ${results.length - failed} row(s)${failed ? `, ${failed} failed` : ""}.`, `${results.length - failed} fila(s) actualizadas${failed ? `, ${failed} fallaron` : ""}.`));
+        });
+        if (failed) process.exitCode = 1;
       }
     },
     query: {
@@ -1804,7 +2109,7 @@ var db = {
 };
 
 // src/commands/agents.ts
-import { existsSync as existsSync9, readFileSync as readFileSync9, statSync as statSync4 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
 
 // src/api.ts
 import { EasybitsError as EasybitsError2, resolveBaseUrl as resolveBaseUrl4 } from "@easybits.cloud/sdk";
@@ -1834,8 +2139,8 @@ async function api(ctx, method, path, body, opts = {}) {
 var encodePath = (p) => p.replace(/^\/+/, "").split("/").map(encodeURIComponent).join("/");
 
 // src/commands/agents-config.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync6, readdirSync, statSync as statSync2, writeFileSync as writeFileSync4 } from "fs";
-import { basename as basename2, dirname, join as join3, relative, resolve } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync9, readdirSync as readdirSync2, statSync as statSync5, writeFileSync as writeFileSync4 } from "fs";
+import { basename as basename3, dirname, join as join4, relative, resolve } from "path";
 var WORK_DIR = "/data/work";
 var MACHINE_TEMPLATES = /* @__PURE__ */ new Set(["ghosty-lite", "goose"]);
 var SKILLS_DIR = "/data/agent/skills";
@@ -1914,8 +2219,8 @@ function readLocalText(path, usage2) {
     if (process.stdin.isTTY) throw usageError(t("Expected the content on stdin.", "Se esperaba el contenido por stdin."), usage2);
     return readStdin().then((b) => b.toString("utf8"));
   }
-  if (!existsSync6(path)) throw usageError(t(`File not found: ${path}`, `No existe el archivo: ${path}`), usage2);
-  return readFileSync6(path, "utf8");
+  if (!existsSync8(path)) throw usageError(t(`File not found: ${path}`, `No existe el archivo: ${path}`), usage2);
+  return readFileSync9(path, "utf8");
 }
 function parseMcpFile(text, usage2) {
   let j;
@@ -2130,8 +2435,8 @@ var files2 = {
       if (!rest.length) throw usageError(t("Give one or more local files.", "Pasa uno o m\xE1s archivos locales."), FILES_USAGE2);
       const to = (str(ctx, "to") ?? "").replace(/^\/+|\/+$/g, "");
       const plan = rest.map((local) => {
-        if (!existsSync6(local) || !statSync2(local).isFile()) throw usageError(t(`File not found: ${local}`, `No existe el archivo: ${local}`), FILES_USAGE2);
-        return { local, path: to ? `${to}/${basename2(local)}` : basename2(local), bytes: statSync2(local).size };
+        if (!existsSync8(local) || !statSync5(local).isFile()) throw usageError(t(`File not found: ${local}`, `No existe el archivo: ${local}`), FILES_USAGE2);
+        return { local, path: to ? `${to}/${basename3(local)}` : basename3(local), bytes: statSync5(local).size };
       });
       if (bool(ctx, "dry-run")) {
         emit(ctx, { agentId: id, dryRun: true, upload: plan }, () => {
@@ -2142,7 +2447,7 @@ var files2 = {
       }
       const done = [];
       for (const p of plan) {
-        const r = await api(ctx, "PUT", `/agents/${id}/files/${encodePath(p.path)}`, readFileSync6(p.local), { raw: true });
+        const r = await api(ctx, "PUT", `/agents/${id}/files/${encodePath(p.path)}`, readFileSync9(p.local), { raw: true });
         done.push({ local: p.local, ...r });
         if (!ctx.json) console.log(`${t("Uploaded", "Subido")} ${p.local} \u2192 ${WORK_DIR}/${p.path} (${fmtBytes(p.bytes)})`);
       }
@@ -2168,11 +2473,11 @@ var SKILLS_USAGE = "easybits agents skills <ls|get|add|rm> <agent> [slug...] [--
 function readSkillDir(dir) {
   const assets = [];
   const visit = (d) => {
-    for (const e of readdirSync(d, { withFileTypes: true })) {
+    for (const e of readdirSync2(d, { withFileTypes: true })) {
       if (e.name.startsWith(".") || e.name === "node_modules") continue;
-      const p = join3(d, e.name);
+      const p = join4(d, e.name);
       if (e.isDirectory()) visit(p);
-      else if (e.isFile() && relative(dir, p) !== "SKILL.md") assets.push({ name: relative(dir, p).split("\\").join("/"), contentBase64: readFileSync6(p).toString("base64") });
+      else if (e.isFile() && relative(dir, p) !== "SKILL.md") assets.push({ name: relative(dir, p).split("\\").join("/"), contentBase64: readFileSync9(p).toString("base64") });
     }
   };
   visit(dir);
@@ -2225,22 +2530,22 @@ var skills = {
       }
       const s = await readSkill(box, entry);
       mkdirSync3(out, { recursive: true });
-      writeFileSync4(join3(out, "SKILL.md"), s.markdown);
+      writeFileSync4(join4(out, "SKILL.md"), s.markdown);
       for (const a of s.assets) {
-        mkdirSync3(dirname(join3(out, a.name)), { recursive: true });
-        writeFileSync4(join3(out, a.name), Buffer.from(a.contentBase64, "base64"));
+        mkdirSync3(dirname(join4(out, a.name)), { recursive: true });
+        writeFileSync4(join4(out, a.name), Buffer.from(a.contentBase64, "base64"));
       }
       emit(ctx, { slug, out: resolve(out), files: entry.files }, () => console.log(t(`Saved ${entry.files.length} file(s) to ${resolve(out)}`, `Guard\xE9 ${entry.files.length} archivo(s) en ${resolve(out)}`)));
     } else if (action === "add" || action === "put") {
       const file = str(ctx, "file");
       const dir = str(ctx, "dir");
       if (!!file === !!dir) throw usageError(t("Pass --file SKILL.md or --dir <folder>.", "Pasa --file SKILL.md o --dir <carpeta>."), SKILLS_USAGE);
-      const mdPath = file ?? join3(dir, "SKILL.md");
-      if (!existsSync6(mdPath)) throw usageError(t(`File not found: ${mdPath}`, `No existe el archivo: ${mdPath}`), SKILLS_USAGE);
-      const markdown = readFileSync6(mdPath, "utf8");
+      const mdPath = file ?? join4(dir, "SKILL.md");
+      if (!existsSync8(mdPath)) throw usageError(t(`File not found: ${mdPath}`, `No existe el archivo: ${mdPath}`), SKILLS_USAGE);
+      const markdown = readFileSync9(mdPath, "utf8");
       const fm = skillFrontmatter(markdown);
       if (fm.error) throw usageError(`${mdPath}: ${fm.error}`, SKILLS_USAGE);
-      const slug = str(ctx, "slug") ?? (fm.name && SLUG_RE.test(fm.name) ? fm.name : basename2(resolve(dir ?? dirname(mdPath))).toLowerCase());
+      const slug = str(ctx, "slug") ?? (fm.name && SLUG_RE.test(fm.name) ? fm.name : basename3(resolve(dir ?? dirname(mdPath))).toLowerCase());
       if (!SLUG_RE.test(slug)) throw usageError(t(`Invalid slug "${slug}" ([a-z0-9-], max 64). Pass --slug.`, `Slug inv\xE1lido "${slug}" ([a-z0-9-], m\xE1x 64). Pasa --slug.`), SKILLS_USAGE);
       const assets = dir ? readSkillDir(dir) : [];
       const plan = { agentId: id, slug, files: ["SKILL.md", ...assets.map((a) => a.name)], restart: bool(ctx, "restart") };
@@ -2497,10 +2802,10 @@ var exportAgent = {
   }
 };
 function readExport(path, usage2) {
-  if (!existsSync6(path)) throw usageError(t(`File not found: ${path}`, `No existe el archivo: ${path}`), usage2);
+  if (!existsSync8(path)) throw usageError(t(`File not found: ${path}`, `No existe el archivo: ${path}`), usage2);
   let x;
   try {
-    x = JSON.parse(readFileSync6(path, "utf8"));
+    x = JSON.parse(readFileSync9(path, "utf8"));
   } catch (e) {
     throw usageError(t(`${path} is not JSON: ${e.message}`, `${path} no es JSON: ${e.message}`), usage2);
   }
@@ -2545,37 +2850,37 @@ async function applyExport(ctx, id, x, opts) {
 }
 
 // src/commands/spec.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync8, statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync11, statSync as statSync6, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname2, join as join5, resolve as resolve2 } from "path";
+import { dirname as dirname2, join as join6, resolve as resolve2 } from "path";
 
 // src/specfile.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7, readdirSync as readdirSync2 } from "fs";
-import { join as join4, relative as relative2 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync10, readdirSync as readdirSync3 } from "fs";
+import { join as join5, relative as relative2 } from "path";
 function walkLocal(root) {
   const out = [];
   const visit = (d) => {
-    for (const e of readdirSync2(d, { withFileTypes: true })) {
+    for (const e of readdirSync3(d, { withFileTypes: true })) {
       if (e.name.startsWith(".") || e.name === "node_modules") continue;
-      const p = join4(d, e.name);
+      const p = join5(d, e.name);
       if (e.isDirectory()) visit(p);
       else if (e.isFile()) out.push(relative2(root, p).split("\\").join("/"));
     }
   };
-  if (existsSync7(root)) visit(root);
+  if (existsSync9(root)) visit(root);
   return out;
 }
 function readUploads(dir) {
   const skills2 = {};
-  const skillsRoot = join4(dir, "skills");
-  if (existsSync7(skillsRoot)) {
-    for (const e of readdirSync2(skillsRoot, { withFileTypes: true })) {
+  const skillsRoot = join5(dir, "skills");
+  if (existsSync9(skillsRoot)) {
+    for (const e of readdirSync3(skillsRoot, { withFileTypes: true })) {
       if (!e.isDirectory() || e.name.startsWith(".")) continue;
-      skills2[e.name] = walkLocal(join4(skillsRoot, e.name)).map((path) => ({ path, contentBase64: readFileSync7(join4(skillsRoot, e.name, path)).toString("base64") }));
+      skills2[e.name] = walkLocal(join5(skillsRoot, e.name)).map((path) => ({ path, contentBase64: readFileSync10(join5(skillsRoot, e.name, path)).toString("base64") }));
     }
   }
-  const filesRoot = join4(dir, "files");
-  const files3 = Object.fromEntries(walkLocal(filesRoot).map((p) => [p, readFileSync7(join4(filesRoot, p)).toString("base64")]));
+  const filesRoot = join5(dir, "files");
+  const files3 = Object.fromEntries(walkLocal(filesRoot).map((p) => [p, readFileSync10(join5(filesRoot, p)).toString("base64")]));
   return { ...Object.keys(skills2).length ? { skills: skills2 } : {}, ...Object.keys(files3).length ? { files: files3 } : {} };
 }
 function secretsFor(text, env = process.env) {
@@ -2628,17 +2933,17 @@ Ed\xEDtalo y luego: easybits apply ${out} --dry-run`)));
     const yaml = await getYaml();
     const dir = resolve2(out);
     mkdirSync4(dir, { recursive: true });
-    writeFileSync5(join5(dir, "agent.yaml"), yaml);
+    writeFileSync5(join6(dir, "agent.yaml"), yaml);
     const x = await buildExport(ctx, id, { secrets: false, fileContents: true });
     const put = (path, b64) => {
       mkdirSync4(dirname2(path), { recursive: true });
       writeFileSync5(path, Buffer.from(b64, "base64"));
     };
     for (const s of x.skills ?? []) {
-      writeFileSync5((mkdirSync4(join5(dir, "skills", s.slug), { recursive: true }), join5(dir, "skills", s.slug, "SKILL.md")), s.markdown);
-      for (const a of s.assets) put(join5(dir, "skills", s.slug, a.name), a.contentBase64);
+      writeFileSync5((mkdirSync4(join6(dir, "skills", s.slug), { recursive: true }), join6(dir, "skills", s.slug, "SKILL.md")), s.markdown);
+      for (const a of s.assets) put(join6(dir, "skills", s.slug, a.name), a.contentBase64);
     }
-    for (const f of x.files ?? []) if (f.contentBase64 !== void 0) put(join5(dir, "files", f.path), f.contentBase64);
+    for (const f of x.files ?? []) if (f.contentBase64 !== void 0) put(join6(dir, "files", f.path), f.contentBase64);
     const summary = { saved: dir, skills: (x.skills ?? []).map((s) => s.slug), files: (x.files ?? []).map((f) => f.path) };
     emit(
       ctx,
@@ -2651,20 +2956,20 @@ ${t("Edit it, then", "Ed\xEDtalo y luego")}: easybits apply ${out} --dry-run`
   }
 };
 function readTarget(target, usage2) {
-  if (!existsSync8(target)) throw usageError(t(`Not found: ${target}`, `No existe: ${target}`), usage2);
-  if (statSync3(target).isDirectory()) {
-    const name = SPEC_NAMES.find((n) => existsSync8(join5(target, n)));
+  if (!existsSync10(target)) throw usageError(t(`Not found: ${target}`, `No existe: ${target}`), usage2);
+  if (statSync6(target).isDirectory()) {
+    const name = SPEC_NAMES.find((n) => existsSync10(join6(target, n)));
     if (!name) throw usageError(t(`${target} has no agent.yaml.`, `${target} no tiene agent.yaml.`), usage2);
-    return { text: readFileSync8(join5(target, name), "utf8"), dir: target };
+    return { text: readFileSync11(join6(target, name), "utf8"), dir: target };
   }
-  return { text: readFileSync8(target, "utf8") };
+  return { text: readFileSync11(target, "utf8") };
 }
 var line = (c) => `${c.op} ${c.what}`;
 var printPlan = (plan) => console.log(plan.map(line).join("\n"));
 function saveBackup(id, yaml) {
-  const dir = join5(homedir3(), ".easybits", "backups");
+  const dir = join6(homedir3(), ".easybits", "backups");
   mkdirSync4(dir, { recursive: true });
-  const path = join5(dir, `${id}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.yaml`);
+  const path = join6(dir, `${id}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.yaml`);
   writeFileSync5(path, yaml);
   return path;
 }
@@ -2778,7 +3083,7 @@ var apply = {
 // src/commands/agents.ts
 function isLegacyExport(path) {
   try {
-    return existsSync9(path) && !statSync4(path).isDirectory() && /"kind"\s*:\s*"easybits\.agent"/.test(readFileSync9(path, "utf8"));
+    return existsSync11(path) && !statSync7(path).isDirectory() && /"kind"\s*:\s*"easybits\.agent"/.test(readFileSync12(path, "utf8"));
   } catch {
     return false;
   }
@@ -2845,9 +3150,9 @@ var agents = {
         if (promptInline != null && promptFile) throw usageError(t("Use --prompt or --prompt-file, not both.", "Usa --prompt o --prompt-file, no los dos."), this.usage);
         const mode = str(ctx, "prompt-mode");
         if (mode && mode !== "append" && mode !== "replace") throw usageError(t("--prompt-mode must be append or replace.", "--prompt-mode debe ser append o replace."), this.usage);
-        if (promptFile && !existsSync9(promptFile)) throw usageError(t(`File not found: ${promptFile}`, `No existe el archivo: ${promptFile}`), this.usage);
+        if (promptFile && !existsSync11(promptFile)) throw usageError(t(`File not found: ${promptFile}`, `No existe el archivo: ${promptFile}`), this.usage);
         const mcpFile = str(ctx, "mcp-file");
-        if (mcpFile && !existsSync9(mcpFile)) throw usageError(t(`File not found: ${mcpFile}`, `No existe el archivo: ${mcpFile}`), this.usage);
+        if (mcpFile && !existsSync11(mcpFile)) throw usageError(t(`File not found: ${mcpFile}`, `No existe el archivo: ${mcpFile}`), this.usage);
         if (bool(ctx, "copy-files") && !like && !from) throw usageError(t("--copy-files needs --like or --from.", "--copy-files necesita --like o --from."), this.usage);
         if (from && !isLegacyExport(from)) {
           await applyTarget(ctx, from, { create: true, name: str(ctx, "name"), dryRun: bool(ctx, "dry-run"), usage: this.usage });
@@ -2857,7 +3162,7 @@ var agents = {
         const template = str(ctx, "template") ?? source?.template;
         if (!template) throw usageError(t("Missing --template (or --like / --from).", "Falta --template (o --like / --from)."), this.usage);
         const env = await envFrom(ctx, this.usage);
-        const prompt = promptInline ?? (promptFile ? readFileSync9(promptFile, "utf8") : source?.systemPrompt);
+        const prompt = promptInline ?? (promptFile ? readFileSync12(promptFile, "utf8") : source?.systemPrompt);
         const promptMode = mode ?? source?.systemPromptMode;
         const multiline = !!prompt && /[\r\n]/.test(prompt.trimEnd());
         const promptAfter = multiline ? prompt : void 0;
@@ -2866,7 +3171,7 @@ var agents = {
         }
         if (prompt && !multiline) env.SYSTEM_PROMPT = prompt.trimEnd();
         if (promptMode && (prompt || mode) && !multiline) env.SYSTEM_PROMPT_MODE = promptMode;
-        const mcpServers = mcpFile ? parseMcpFile(readFileSync9(mcpFile, "utf8"), this.usage) : source?.mcpServers;
+        const mcpServers = mcpFile ? parseMcpFile(readFileSync12(mcpFile, "utf8"), this.usage) : source?.mcpServers;
         if (mcpServers && hasMasked(mcpServers)) {
           throw usageError(t(`${from ?? "the source"} has masked MCP values (\u2026***).`, `${from ?? "la fuente"} trae valores del MCP tapados (\u2026***).`), t("Re-export with --show-secrets, or pass --mcp-file", "Vuelve a exportar con --show-secrets, o pasa --mcp-file"));
         }
@@ -2958,9 +3263,9 @@ var agents = {
 };
 
 // src/commands/completion.ts
-import { mkdirSync as mkdirSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "fs";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync13, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir4 } from "os";
-import { dirname as dirname3, join as join6 } from "path";
+import { dirname as dirname3, join as join7 } from "path";
 var GLOBAL_FLAGS = ["--json", "--token", "--lang", "--help", "--version"];
 var AGENT_FLAGS = /* @__PURE__ */ new Set(["--agent", "--like"]);
 var findSub = (c, name) => Object.entries(c.subs ?? {}).find(([n, l]) => n === name || l.aliases?.includes(name));
@@ -2997,11 +3302,11 @@ function completionFor(words, current2, commands) {
   if (spec && spec.index === n) return { kind: "names", ref: spec.kind };
   return { kind: "words", words: [] };
 }
-var cacheFile = () => join6(process.env.XDG_CACHE_HOME || join6(homedir4(), ".cache"), "easybits", "complete.json");
+var cacheFile = () => join7(process.env.XDG_CACHE_HOME || join7(homedir4(), ".cache"), "easybits", "complete.json");
 async function namesOf(ctx, kind) {
   let cache2 = {};
   try {
-    cache2 = JSON.parse(readFileSync10(cacheFile(), "utf8"));
+    cache2 = JSON.parse(readFileSync13(cacheFile(), "utf8"));
     const c = cache2[kind];
     if (c && Date.now() - c.at < 5 * 6e4) return c.names;
   } catch {
@@ -3128,16 +3433,16 @@ var docs = {
 };
 
 // src/commands/doctor.ts
-import { existsSync as existsSync10, statSync as statSync5 } from "fs";
+import { existsSync as existsSync12, statSync as statSync8 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import { resolveBaseUrl as resolveBaseUrl6 } from "@easybits.cloud/sdk";
 
 // src/update.ts
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync7 } from "fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname4, join as join7 } from "path";
-var FILE = join7(process.env.XDG_CONFIG_HOME || join7(homedir5(), ".config"), "easybits", "update.json");
+import { dirname as dirname4, join as join8 } from "path";
+var FILE = join8(process.env.XDG_CONFIG_HOME || join8(homedir5(), ".config"), "easybits", "update.json");
 var DAY = 24 * 60 * 60 * 1e3;
 var UPGRADE = "npm i -g @easybits.cloud/cli@latest";
 function newer(a, b) {
@@ -3149,7 +3454,7 @@ function newer(a, b) {
 var updateCheckDisabled = () => Boolean(process.env.EASYBITS_NO_UPDATE_CHECK || process.env.CI);
 function readCache() {
   try {
-    return JSON.parse(readFileSync11(FILE, "utf8"));
+    return JSON.parse(readFileSync14(FILE, "utf8"));
   } catch {
     return {};
   }
@@ -3184,7 +3489,7 @@ async function updateNotice(current2) {
 }
 
 // src/commands/doctor.ts
-var VERSION = true ? "0.12.0" : "dev";
+var VERSION = true ? "0.14.0" : "dev";
 var doctor2 = {
   name: "doctor",
   group: "Account",
@@ -3227,9 +3532,9 @@ var doctor2 = {
           checks.push({ check: "credential-env", ok: true, detail: t("EASYBITS_API_KEY wins over the saved login in ~/.easybitsrc", "EASYBITS_API_KEY le gana a la sesi\xF3n guardada en ~/.easybitsrc") });
         }
       }
-      const rcPath = join8(homedir6(), ".easybitsrc");
-      if (existsSync10(rcPath)) {
-        const mode = statSync5(rcPath).mode & 511;
+      const rcPath = join9(homedir6(), ".easybitsrc");
+      if (existsSync12(rcPath)) {
+        const mode = statSync8(rcPath).mode & 511;
         const ok2 = (mode & 63) === 0;
         checks.push({ check: "rc-file", ok: ok2, detail: `${rcPath} ${mode.toString(8).padStart(3, "0")}`, ...ok2 ? {} : { hint: t(`It holds tokens. Run: chmod 600 ${rcPath}`, `Guarda tokens. Corre: chmod 600 ${rcPath}`) } });
       }
@@ -3414,6 +3719,23 @@ var HELP_ES = {
   "List your permanent machines": "Enlista tus m\xE1quinas permanentes",
   "Publish the machine's current app code as a new release": "Publica el c\xF3digo actual de la app como un release nuevo",
   "Release note": "Nota del release",
+  "Create a machine and put an app on it in one step (or redeploy onto an existing one)": "Crea una m\xE1quina y le pone la app en un paso (o redespliega sobre una existente)",
+  "Git repo to clone (clean URL; a token goes in --repo-token)": "Repo git a clonar (URL limpia; el token va en --repo-token)",
+  "Branch to clone": "Rama a clonar",
+  "Token for a private repo; best as $secret:NAME from your vault": "Token de un repo privado; mejor como $secret:NOMBRE de tu vault",
+  "A .tar.gz/.zip of the app: URL, or a local file that gets uploaded first": "Un .tar.gz/.zip de la app: URL, o un archivo local que se sube primero",
+  "Deploy onto this existing machine instead of creating one": "Despliega sobre esta m\xE1quina existente en vez de crear una",
+  "Size for a new machine: nano, micro (default), estandar, focus, performance\u2026": "Tama\xF1o de una m\xE1quina nueva: nano, micro (default), estandar, focus, performance\u2026",
+  "Human label": "Nombre para personas",
+  "Where the app lives in the machine (default /app)": "D\xF3nde vive la app en la m\xE1quina (default /app)",
+  "Build command (default: npm ci && npm run build)": "Comando de build (default: npm ci && npm run build)",
+  "Start command (default: npm start)": "Comando de arranque (default: npm start)",
+  "Port the app listens on (default 3000)": "Puerto en el que escucha la app (default 3000)",
+  "The code is already built: skip the build, just start it": "El c\xF3digo ya viene compilado: sin build, s\xF3lo arranca",
+  "Vault secret the app needs, by name (repeatable)": "Secreto del vault que necesita la app, por nombre (repetible)",
+  "Path the nightly backup copies (repeatable). Without it nothing is backed up": "Ruta que copia el respaldo nocturno (repetible). Sin ella no se respalda nada",
+  "Domain to attach; the output says which DNS record to create": "Dominio a pegar; la salida dice qu\xE9 registro DNS crear",
+  "redeploy": "redespliegue",
   "same thing, shorter": "lo mismo, m\xE1s corto",
   "List releases, newest first": "Enlista los releases, el m\xE1s nuevo primero",
   "How many": "Cu\xE1ntos",
@@ -3439,7 +3761,7 @@ var HELP_ES = {
   "Delete a database (irreversible)": "Borra una base de datos (irreversible)",
   "asks you to type the name": "te pide teclear el nombre",
   "scripts and agents": "scripts y agentes",
-  "List tables with row counts and columns": "Enlista las tablas con su n\xFAmero de filas y columnas",
+  "List tables with row counts and columns, and how many links are permanent": "Enlista las tablas con sus filas y columnas, y cu\xE1ntas ligas son permanentes",
   "Run one SQL statement (by database id or name)": "Corre una sentencia SQL (por id o nombre de la base)",
   "Positional ? parameter (repeatable)": "Par\xE1metro ? posicional (repetible)",
   "Storage": "Almacenamiento",
@@ -3466,7 +3788,15 @@ var HELP_ES = {
   "Shell completion script (zsh, bash, fish)": "Script de autocompletado para tu shell (zsh, bash, fish)",
   "Print the completion script for your shell: commands, flags and your agents, sandboxes and databases": "Imprime el script de autocompletado de tu shell: comandos, flags y tus agentes, sandboxes y bases",
   "add to ~/.zshrc, after compinit": "agr\xE9galo a ~/.zshrc, despu\xE9s de compinit",
-  "add to ~/.bashrc": "agr\xE9galo a ~/.bashrc"
+  "add to ~/.bashrc": "agr\xE9galo a ~/.bashrc",
+  "Put catalog photos in a table: SKU-123.jpg \u2192 the row whose key is SKU-123, as a permanent public link": "Pone las fotos del cat\xE1logo en una tabla: SKU-123.jpg \u2192 la fila cuya llave es SKU-123, con liga p\xFAblica permanente",
+  "Table to update": "Tabla a actualizar",
+  "Column that matches the file name (e.g. sku)": "Columna que coincide con el nombre del archivo (p. ej. sku)",
+  "Folder with the photos (JPEG, PNG or WebP, max 10 MB each)": "Carpeta con las fotos (JPEG, PNG o WebP, m\xE1x 10 MB cada una)",
+  "Column for the link (default: image_url, photo_url, imagen\u2026)": "Columna de la liga (default: image_url, photo_url, imagen\u2026)",
+  "Also replace rows that already have a permanent link": "Reemplaza tambi\xE9n las filas que ya tienen liga permanente",
+  "Show the plan; upload nothing": "Ense\xF1a el plan; no sube nada",
+  "how many links are permanent, external or empty": "cu\xE1ntas ligas son permanentes, de fuera o vac\xEDas"
 };
 
 // src/help.ts
@@ -3657,7 +3987,7 @@ function normalizeArgs(input) {
 }
 
 // src/index.ts
-var VERSION2 = true ? "0.12.0" : "dev";
+var VERSION2 = true ? "0.14.0" : "dev";
 var GLOBAL_OPTIONS = {
   json: { type: "boolean" },
   token: { type: "string" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easybits.cloud/cli",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Official CLI for EasyBits, the cloud for AI agents — sandboxes, hosting, domains, databases, agents and files from your terminal",
   "type": "module",
   "bin": {