@easybits.cloud/cli 0.19.1 → 0.21.0

package/README.md

@@ -54,6 +54,9 @@ easybits sandboxes bg kill sb_abc123 exec_123      # the whole process group
 easybits sandboxes git clone sb_abc123 --repo https://github.com/you/app.git --dir /data/work/app --git-token '$secret:GITHUB_TOKEN'
 easybits sandboxes git status sb_abc123 --dir /data/work/app
 easybits sandboxes git commit sb_abc123 --dir /data/work/app --all -m "fix: checkout"
+easybits sandboxes codex login sb_abc123     # Codex on YOUR ChatGPT plan: shows a link + code, you sign in, saved to your vault
+easybits sandboxes codex connect sb_def456   # puts that session in another box (installs Codex if missing)
+easybits sandboxes codex save sb_abc123      # saves the renewed session back to the vault
 easybits sandboxes git push sb_abc123 --dir /data/work/app --git-token '$secret:GITHUB_TOKEN'
 easybits sandboxes git pull|checkout|log sb_abc123 --dir /data/work/app …
 easybits sandboxes suspend sb_abc123
@@ -131,6 +134,8 @@ easybits crons create "Heads-up" --at 23:00 --url https://my-app.com/api/notice
 easybits crons create "Heads-up" --in 2h --url https://my-app.com/api/notice --method POST              # once; --until/--times end repeating ones
 easybits crons create "Review" --at 23:00 --run "python3 asc.py submit" --file scripts/asc.py \
   --secret-file ASC_P8:~/.appstoreconnect/private_keys/AuthKey_X.p8     # a command in a throwaway box; the .p8 only this cron reads
+easybits crons create "Daily signups" --cron "0 9 * * *" --run "python3 count.py" --file count.py \
+  --machine my-app                                                       # runs with my-app's env and secrets (its DATABASE_URL), resolved each run
 easybits crons get "Review"                                              # what it does, how it notifies you, next run (--json: all of it)
 easybits crons runs "Review" --logs --limit 5                            # exit code + stdout/stderr
 easybits crons wait "Review" --timeout 2h                                # blocks until it runs; exits with its exit code
@@ -167,6 +172,7 @@ easybits db query leads "SELECT * FROM leads" --json
 easybits db rename leads prospects --dry-run   # which agent prompts name it
 easybits db rm leads --dry-run                 # tables and rows that would be lost
 easybits db rm leads --yes
+easybits db attach clave                     # the database your machine opens at /v1/db/clave/
 
 # Agents
 easybits agents ls
@@ -310,6 +316,14 @@ Host *.ghosty
 
 Full reference: https://www.easybits.cloud/docs#cli · https://www.easybits.cloud/en/docs/cli.md
 
+## Changes in 0.20.0
+
+- `db attach <name> [--description <text>]`: adds to your account the database one of your machines
+  already uses (`DATABASE_URL=http://172.20.0.1:8090/v1/db/<name>/`). Nothing is created or copied;
+  from then on `db query|tables|ls` work on it. It does not count toward your plan's database limit,
+  and `db rm` only removes it from your list: the machine keeps its data. New API:
+  `POST /api/v2/databases { name, attach: true }`.
+
 ## Changes in 0.17.1
 
 - `easybits crons ls|runs|run|pause|resume`: EasyBits' scheduled jobs, the same as the

package/dist/index.js

@@ -1754,6 +1754,14 @@ function printGit(op, r) {
 async function sandboxAt(ctx, i, usage2) {
   return (await getClient(ctx)).sandboxes.get(need(ctx, i, "sandbox", usage2));
 }
+var CODEX_USAGE = "easybits sandboxes codex <login|connect|save> <sandbox> [--force] [--no-install]";
+function parseDeviceAuth(out) {
+  const plain = out.replace(/\x1b\[[0-9;]*m/g, "");
+  return {
+    url: plain.match(/https:\/\/auth\.openai\.com\/\S+/)?.[0],
+    code: plain.match(/\b[A-Z0-9]{4}-[A-Z0-9]{4,6}\b/)?.[0]
+  };
+}
 var FILES_USAGE = "easybits sandboxes files <ls|read|write|rm|mv|mkdir> <sandbox> <path> [local-file|new-path]";
 var sandboxes = {
   name: "sandboxes",
@@ -2066,6 +2074,89 @@ var sandboxes = {
         }
       }
     },
+    codex: {
+      summary: "Codex on YOUR ChatGPT plan in a box: login once, then connect any box from your vault",
+      usage: CODEX_USAGE,
+      options: {
+        force: { type: "boolean", description: "connect: replace the session the box already has" },
+        "no-install": { type: "boolean", description: "connect/login: don't install Codex if it's missing" }
+      },
+      examples: [
+        "easybits sb codex login sb_abc123      # shows a link + code; you sign in; the session goes to your vault",
+        "easybits sb codex connect sb_def456    # puts that session in another box (installs Codex if missing)",
+        "easybits sb codex save sb_abc123       # saves the box's (renewed) session back to the vault"
+      ],
+      async run(ctx) {
+        const action = need(ctx, 0, "login|connect|save", CODEX_USAGE);
+        const id = need(ctx, 1, "sandbox", CODEX_USAGE);
+        const path = `/sandboxes/${encodeURIComponent(id)}`;
+        if (action === "connect") {
+          const r2 = await api(ctx, "POST", `${path}/codex-connect`, {
+            force: bool(ctx, "force"),
+            install: !bool(ctx, "no-install")
+          });
+          return emit(ctx, r2, () => {
+            console.log(
+              r2.session === "kept" ? t("The box already had a Codex session: kept it (use --force to replace it).", "La caja ya ten\xEDa sesi\xF3n de Codex: se conserv\xF3 (usa --force para reemplazarla).") : t("Codex session from your vault is in the box.", "La sesi\xF3n de Codex de tu vault ya est\xE1 en la caja.")
+            );
+            if (r2.codex === "no_npm") console.log(t("Codex isn't installed and the box has no npm: use a node template.", "Codex no est\xE1 instalado y la caja no tiene npm: usa un template node."));
+            console.log(t(`Try it: easybits sb exec ${id} -- codex exec "hola"`, `Pru\xE9balo: easybits sb exec ${id} -- codex exec "hola"`));
+          });
+        }
+        if (action === "save") {
+          const r2 = await api(ctx, "POST", `${path}/codex-save`, {});
+          return emit(
+            ctx,
+            r2,
+            () => console.log(r2.saved ? t("Saved to your vault as CODEX_AUTH.", "Guardada en tu vault como CODEX_AUTH.") : t(`Not saved: ${r2.reason}`, `No se guard\xF3: ${r2.reason}`))
+          );
+        }
+        if (action !== "login") throw usageError(t(`Unknown codex action "${action}".`, `Acci\xF3n de codex desconocida "${action}".`), CODEX_USAGE);
+        const sb = await sandboxAt(ctx, 1, CODEX_USAGE);
+        if (!bool(ctx, "no-install")) {
+          const i = await sb.exec("command -v codex >/dev/null 2>&1 || npm i -g @openai/codex >/dev/null 2>&1; command -v codex", { timeoutSeconds: 240 });
+          if (!i.stdout.trim()) throw new CliError(t("Couldn't install Codex in the box (needs npm: use a node template).", "No se pudo instalar Codex en la caja (necesita npm: usa un template node)."));
+        }
+        const bg = await sb.execBackground("codex login --device-auth");
+        const started = Date.now();
+        let shown = false;
+        for (; ; ) {
+          await new Promise((r2) => setTimeout(r2, 2e3));
+          const st = await sb.bgStatus(bg.execId);
+          const { url, code } = parseDeviceAuth(`${st.stdout ?? ""}
+${st.stderr ?? ""}`);
+          if (!shown && url && code) {
+            shown = true;
+            if (ctx.json) console.log(JSON.stringify({ url, code, expiresInMinutes: 15 }));
+            else {
+              console.log(t("1. Open:  ", "1. Abre:  ") + url);
+              console.log(t("2. Code:  ", "2. C\xF3digo: ") + code + t("  (15 min)", "  (15 min)"));
+              console.log(t("Waiting for you to sign in with your ChatGPT account\u2026", "Esperando a que inicies sesi\xF3n con tu cuenta de ChatGPT\u2026"));
+            }
+          }
+          if (st.status !== "running") {
+            if (st.exitCode !== 0) {
+              const tail = `${st.stderr ?? ""}${st.stdout ?? ""}`.replace(/\x1b\[[0-9;]*m/g, "").trim().split("\n").slice(-3).join(" ");
+              throw new CliError(t(`Codex login failed: ${tail}`, `El login de Codex fall\xF3: ${tail}`));
+            }
+            break;
+          }
+          if (Date.now() - started > 16 * 6e4) {
+            await sb.bgKill(bg.execId).catch(() => void 0);
+            throw new CliError(t("The code expired (15 min). Run it again.", "El c\xF3digo venci\xF3 (15 min). Vuelve a correrlo."));
+          }
+        }
+        const r = await api(ctx, "POST", `${path}/codex-save`, {});
+        return emit(
+          ctx,
+          { signedIn: true, ...r },
+          () => console.log(t(
+            `Signed in. Session saved to your vault (CODEX_AUTH): connect any other box with  easybits sb codex connect <sandbox>`,
+            `Listo. Sesi\xF3n guardada en tu vault (CODEX_AUTH): conecta cualquier otra caja con  easybits sb codex connect <sandbox>`
+          ))
+        );
+      }
+    },
     git: {
       summary: "Git inside a sandbox: clone, status, commit, push, pull, checkout, log",
       usage: GIT_USAGE,
@@ -3797,6 +3888,22 @@ var db = {
         emit(ctx, d, () => console.log(t(`Created ${d.name} (${d.id})`, `Creada ${d.name} (${d.id})`)));
       }
     },
+    attach: {
+      summary: "Add to your account the database one of your machines already uses",
+      usage: "easybits db attach <name> [--description <text>]",
+      options: { description: { type: "string", value: "text", description: "What it is for" } },
+      examples: [
+        "easybits db attach clave   # the machine's DATABASE_URL ends in /v1/db/clave/",
+        'easybits db query clave "SELECT count(*) FROM users" --json'
+      ],
+      // No crea nada: el servidor deriva el namespace de tu cuenta + nombre y exige que exista.
+      // Desde ahí sirven query/tables/export; `db rm` sólo la quita de la lista.
+      async run(ctx) {
+        const name = need(ctx, 0, "name", this.usage);
+        const d = await api(ctx, "POST", "/databases", { name, attach: true, description: str(ctx, "description") });
+        emit(ctx, d, () => console.log(t(`Attached ${d.name} (${d.id})`, `Adjunta ${d.name} (${d.id})`)));
+      }
+    },
     rm: {
       aliases: ["delete", "drop"],
       summary: "Delete a database (irreversible)",
@@ -3826,7 +3933,13 @@ var db = {
         const hit = await findDb(ctx, ref2);
         await confirm(ctx, t(`Delete database ${hit.name} (${hit.id}) and all its data?`, `\xBFBorrar la base ${hit.name} (${hit.id}) con todos sus datos?`), { typeName: hit.name });
         const r = await eb.deleteDatabase(hit.id);
-        emit(ctx, { ...r, id: hit.id, name: hit.name }, () => console.log(t(`Deleted ${hit.name} (${hit.id})`, `Borrada ${hit.name} (${hit.id})`)));
+        emit(
+          ctx,
+          { ...r, id: hit.id, name: hit.name },
+          () => console.log(
+            r.detached ? t(`Removed ${hit.name} from your list; its machine keeps the data`, `${hit.name} sali\xF3 de tu lista; su m\xE1quina conserva los datos`) : t(`Deleted ${hit.name} (${hit.id})`, `Borrada ${hit.name} (${hit.id})`)
+          )
+        );
       }
     },
     rename: {
@@ -4918,7 +5031,7 @@ async function updateNotice(current2) {
 }
 
 // src/commands/doctor.ts
-var VERSION = true ? "0.19.1" : "dev";
+var VERSION = true ? "0.21.0" : "dev";
 var doctor2 = {
   name: "doctor",
   group: "Account",
@@ -5444,7 +5557,7 @@ function describeCron(c) {
   const state = c.enabled ? t("active", "activo") : c.done ? t("done", "terminado") : t("paused", "en pausa");
   return [
     `${c.id} \xAB${c.name}\xBB (${state})`,
-    `${t("Schedule", "Horario")}: ${c.schedule} (${c.timezone})${c.until ? ` ${t("until", "hasta")} ${c.until}` : ""}${c.timesLeft != null ? ` \xB7 ${t("runs left", "corridas restantes")}: ${c.timesLeft}` : ""}`,
+    `${t("Schedule", "Horario")}: ${c.schedule} (${c.timezone})${c.until ? ` ${t("until", "hasta")} ${c.until}` : ""}${c.timesLeft != null ? ` \xB7 ${t("runs left", "ejecuciones restantes")}: ${c.timesLeft}` : ""}`,
     `${t("Next run", "Pr\xF3xima")}: ${c.enabled && c.nextRunLocal ? `${c.nextRunLocal} (${c.in})` : "\u2014"}`,
     `${t("Does", "Hace")}: ${describeCronAction(c.action)}`,
     `${t("Notifies", "Avisa")}: ${chans ? `${chans} (${n.on === "always" ? t("always", "siempre") : t("on failure", "si falla")})` : "\u2014"}`,
@@ -5477,7 +5590,8 @@ var ACTION_OPTIONS = {
   file: { type: "string", multiple: true, value: "local[=remote]", description: "File mounted for --run, next to the command by default (repeatable)" },
   "secret-file": { type: "string", multiple: true, value: "NAME:local[=remote]", description: "Upload a local file as a secret only this cron can read, written at the same ~ path in the box (repeatable; e.g. a .p8)" },
   template: { type: "string", value: "python|node|bun|ubuntu", description: "Box image for --run (default python)" },
-  timeout: { type: "string", value: "seconds", description: "Time limit for --run (default 300, max 600)" }
+  timeout: { type: "string", value: "seconds", description: "Time limit for --run (default 300, max 600)" },
+  machine: { type: "string", value: "id|name", description: "Run --run with that machine's config (its env and secrets, e.g. DATABASE_URL), resolved on every run" }
 };
 function remotePathFor(local, home = homedir7()) {
   const abs = resolve3(local.replace(/^~(?=\/)/, home));
@@ -5512,7 +5626,8 @@ function execFromFlags(f, read, home = homedir7()) {
       ...files3.length ? { files: files3 } : {},
       ...secrets2.length ? { secrets: secrets2 } : {},
       ...f.template ? { template: f.template } : {},
-      ...f.timeout ? { timeoutSeconds: Number(f.timeout) } : {}
+      ...f.timeout ? { timeoutSeconds: Number(f.timeout) } : {},
+      ...f.machine ? { machine: f.machine } : {}
     },
     ...Object.keys(secretValues).length ? { secretValues } : {}
   };
@@ -5592,7 +5707,7 @@ var whenOf = (ctx) => ({
   times: str(ctx, "times"),
   tz: str(ctx, "tz")
 });
-var nextLine = (c) => c.nextRunLocal ? t(`next ${c.nextRunLocal} ${c.timezone} (in ${c.in})`, `pr\xF3xima ${c.nextRunLocal} ${c.timezone} (en ${c.in})`) : t("no next run", "sin pr\xF3xima corrida");
+var nextLine = (c) => c.nextRunLocal ? t(`next ${c.nextRunLocal} ${c.timezone} (in ${c.in})`, `pr\xF3xima ${c.nextRunLocal} ${c.timezone} (en ${c.in})`) : t("no next run", "sin pr\xF3xima ejecuci\xF3n");
 var flagsOf = (ctx) => ({
   url: str(ctx, "url"),
   method: str(ctx, "method"),
@@ -5607,7 +5722,7 @@ function actionOf(ctx) {
   if (run && (str(ctx, "url") || str(ctx, "agent"))) return { error: "--run, --url and --agent are exclusive" };
   if (run) {
     return execFromFlags(
-      { run, files: list(ctx, "file"), secrets: list(ctx, "secret"), secretFiles: list(ctx, "secret-file"), template: str(ctx, "template"), timeout: str(ctx, "timeout") },
+      { run, files: list(ctx, "file"), secrets: list(ctx, "secret"), secretFiles: list(ctx, "secret-file"), template: str(ctx, "template"), timeout: str(ctx, "timeout"), machine: str(ctx, "machine") },
       (p) => {
         try {
           return readFileSync18(p, "utf8");
@@ -5625,10 +5740,10 @@ var STATUS = {
   tarde: ["late", "tarde"],
   fallo: ["failed", "fall\xF3"],
   pausado: ["paused", "pausado"],
-  nuevo: ["no runs yet", "sin corridas"]
+  nuevo: ["no runs yet", "sin ejecuciones"]
 };
 function cronStatus(c) {
-  if (c.running) return t("running", "corriendo");
+  if (c.running) return t("running", "en ejecuci\xF3n");
   const s = STATUS[c.status];
   return s ? t(s[0], s[1]) : c.status;
 }
@@ -5732,14 +5847,14 @@ var crons = {
           table(
             items.map((r) => ({
               at: fmtDate(r.startedAt),
-              ok: r.ok == null ? t("running", "corriendo") : r.ok ? "ok" : t("failed", "fall\xF3"),
+              ok: r.ok == null ? t("running", "en ejecuci\xF3n") : r.ok ? "ok" : t("failed", "fall\xF3"),
               status: r.exitCode != null ? `exit ${r.exitCode}` : r.status ?? "\u2014",
               took: duration(r.durationMs),
               trigger: r.trigger,
               summary: (r.error ?? r.summary ?? "").slice(0, 80)
             })),
             [["at", "STARTED"], ["ok", "RESULT"], ["status", "HTTP"], ["took", "TOOK"], ["trigger", "TRIGGER"], ["summary", "SUMMARY"]],
-            t("No runs yet.", "Todav\xEDa no hay corridas.")
+            t("No runs yet.", "Todav\xEDa no hay ejecuciones.")
           );
           if (withLogs) {
             const last = items.find((r) => r.logs);
@@ -5786,7 +5901,7 @@ ${failed.error}`);
           }
           if (Date.now() >= deadline) {
             throw new CliError(
-              t(`Gave up waiting for \xAB${mine.name}\xBB${r.nextRunLocal ? ` (next run ${r.nextRunLocal})` : ""}.`, `Me cans\xE9 de esperar \xAB${mine.name}\xBB${r.nextRunLocal ? ` (pr\xF3xima corrida ${r.nextRunLocal})` : ""}.`),
+              t(`Gave up waiting for \xAB${mine.name}\xBB${r.nextRunLocal ? ` (next run ${r.nextRunLocal})` : ""}.`, `Me cans\xE9 de esperar \xAB${mine.name}\xBB${r.nextRunLocal ? ` (pr\xF3xima ejecuci\xF3n ${r.nextRunLocal})` : ""}.`),
               EXIT.API,
               `easybits crons wait ${mine.id} --timeout 2h`,
               "timeout"
@@ -5835,7 +5950,7 @@ ${failed.error}`);
     create: {
       aliases: ["add"],
       summary: "Create a cron: call a public https URL, send a turn to one of your agents or run a command in a throwaway box, repeating (at most every 5 min) or once",
-      usage: 'easybits crons create <name> (--cron "<5 fields>" [--until <when>] [--times N] | --at <when> | --in <duration>) [--tz <IANA>] (--url <https-url> [--method] [--body] [--secret NAME] | --agent <id> --prompt <text> | --run <cmd> [--file f]\u2026 [--secret NAME]\u2026 [--secret-file NAME:path]\u2026 [--template] [--timeout]) [--dry-run]',
+      usage: 'easybits crons create <name> (--cron "<5 fields>" [--until <when>] [--times N] | --at <when> | --in <duration>) [--tz <IANA>] (--url <https-url> [--method] [--body] [--secret NAME] | --agent <id> --prompt <text> | --run <cmd> [--file f]\u2026 [--secret NAME]\u2026 [--secret-file NAME:path]\u2026 [--template] [--timeout] [--machine id|name]) [--dry-run]',
       options: {
         cron: { type: "string", value: "expr", description: 'Cron of 5 fields, e.g. "30 8 * * *" = daily 8:30' },
         ...WHEN_OPTIONS,
@@ -5867,7 +5982,7 @@ ${failed.error}`);
           emit(ctx, p, () => {
             console.log(t(`OK, nothing created. \xAB${name}\xBB \u2014 ${p.schedule}`, `V\xE1lido, no se cre\xF3 nada. \xAB${name}\xBB \u2014 ${p.schedule}`));
             for (const r of p.nextRuns) console.log(`  ${r.local} ${p.timezone}  (${r.at})`);
-            if (p.in) console.log(t(`First run in ${p.in}.`, `La primera corre en ${p.in}.`));
+            if (p.in) console.log(t(`First run in ${p.in}.`, `La primera se ejecuta en ${p.in}.`));
           });
           return;
         }
@@ -5922,7 +6037,7 @@ ${failed.error}`);
         const mine = await resolveUserCron(ctx, ref2);
         if (!mine) throw new CliError(t(`You have no cron "${ref2}".`, `No tienes un cron "${ref2}".`), EXIT.API, "easybits crons ls", "not_found", 404);
         requireYesIfHeadless(ctx);
-        await confirm(ctx, t(`Delete cron \xAB${mine.name}\xBB? It stops running right away.`, `\xBFBorrar el cron \xAB${mine.name}\xBB? Deja de correr de inmediato.`));
+        await confirm(ctx, t(`Delete cron \xAB${mine.name}\xBB? It stops running right away.`, `\xBFBorrar el cron \xAB${mine.name}\xBB? Deja de ejecutarse de inmediato.`));
         const r = await api(ctx, "DELETE", `/crons/${mine.id}`);
         emit(ctx, r, () => console.log(t(`Deleted \xAB${mine.name}\xBB`, `Borrado \xAB${mine.name}\xBB`)));
       }
@@ -7016,7 +7131,7 @@ var HELP_ES = {
   "Compute": "C\xF3mputo",
   "Firecracker microVMs (alias: sb)": "MicroVMs Firecracker (alias: sb)",
   "List your sandboxes": "Enlista tus sandboxes",
-  "Create a sandbox and wait until it is running": "Crea un sandbox y espera a que est\xE9 corriendo",
+  "Create a sandbox and wait until it is running": "Crea un sandbox y espera a que est\xE9 en marcha",
   "Base template (default ubuntu): ubuntu, python, node, code-interpreter\u2026": "Template base (default ubuntu): ubuntu, python, node, code-interpreter\u2026",
   "Human label (lets you `ssh <name>.ghosty`)": "Nombre para personas (permite `ssh <nombre>.ghosty`)",
   "Time to live before auto-destroy (was --timeout)": "Tiempo de vida antes de autodestruirse (antes --timeout)",
@@ -7025,7 +7140,7 @@ var HELP_ES = {
   "KEY=VALUE lines (dotenv); - reads stdin. Use it for secrets": "Renglones KEY=VALUE (dotenv); - lee stdin. \xDAsalo para secretos",
   "Return right away instead of waiting for running": "Regresa de inmediato en vez de esperar a que corra",
   "Show one sandbox": "Muestra un sandbox",
-  "Run a shell command inside a sandbox": "Corre un comando de shell dentro de un sandbox",
+  "Run a shell command inside a sandbox": "Ejecuta un comando de shell dentro de un sandbox",
   "Working directory": "Directorio de trabajo",
   "Kill the command after this long": "Mata el comando despu\xE9s de este tiempo",
   "Read the sandbox journal (optionally one systemd unit)": "Lee el journal del sandbox (opcionalmente de una unit de systemd)",
@@ -7043,7 +7158,7 @@ var HELP_ES = {
   "Skip the confirmation (required without a terminal or with --json)": "Salta la confirmaci\xF3n (obligatorio sin terminal o con --json)",
   "Capture a copy-on-write snapshot without stopping the box": "Toma un snapshot copy-on-write sin detener la caja",
   "Snapshot label": "Nombre del snapshot",
-  "Agents running in their own sandbox": "Agentes que corren en su propio sandbox",
+  "Agents running in their own sandbox": "Agentes que viven en su propio sandbox",
   "List your agents": "Enlista tus agentes",
   "Show one agent: record, prompt, MCP servers, skills and files": "Muestra un agente: registro, prompt, servidores MCP, skills y archivos",
   "Only these fields: agentId, name, template, status, lastError, sandboxId, agentUrl, embedToken, createdAt, expiresAt, systemPrompt, systemPromptMode, mcpServers, skills, files": "S\xF3lo estos campos: agentId, name, template, status, lastError, sandboxId, agentUrl, embedToken, createdAt, expiresAt, systemPrompt, systemPromptMode, mcpServers, skills, files",
@@ -7189,6 +7304,8 @@ var HELP_ES = {
   "SQL databases (libSQL)": "Bases de datos SQL (libSQL)",
   "List your databases": "Enlista tus bases de datos",
   "Create a database": "Crea una base de datos",
+  "Add to your account the database one of your machines already uses": "Agrega a tu cuenta la base que ya usa una de tus m\xE1quinas",
+  "the machine's DATABASE_URL ends in /v1/db/clave/": "el DATABASE_URL de la m\xE1quina termina en /v1/db/clave/",
   "What it is for": "Para qu\xE9 es",
   "Delete a database (irreversible)": "Borra una base de datos (irreversible)",
   "Show its tables and rows; delete nothing": "Ense\xF1a sus tablas y filas; no borra nada",
@@ -7200,7 +7317,7 @@ var HELP_ES = {
   "asks you to type the name": "te pide teclear el nombre",
   "scripts and agents": "scripts y agentes",
   "List tables with row counts and columns, and how many links are permanent": "Enlista las tablas con sus filas y columnas, y cu\xE1ntas ligas son permanentes",
-  "Run one SQL statement (by database id or name)": "Corre una sentencia SQL (por id o nombre de la base)",
+  "Run one SQL statement (by database id or name)": "Ejecuta una sentencia SQL (por id o nombre de la base)",
   "Positional ? parameter (repeatable)": "Par\xE1metro ? posicional (repetible)",
   "Storage": "Almacenamiento",
   "Your files in EasyBits storage": "Tus archivos en el almacenamiento de EasyBits",
@@ -7283,24 +7400,25 @@ var HELP_ES = {
   "Release a machine: stops billing, takes a last backup and destroys it": "Libera una m\xE1quina: deja de cobrarse, toma un \xFAltimo respaldo y la destruye",
   "The hosting catalog: sizes and monthly prices in MXN": "El cat\xE1logo de hosting: tama\xF1os y precio mensual en MXN",
   // crons (tuyos y de la plataforma)
-  "Your scheduled jobs (call a URL, message an agent or run a command; repeating or once) and, for admins, the platform's": "Tus tareas programadas (pegarle a una URL, escribirle a un agente o correr un comando; repetidas o de una sola vez) y, para admins, las de la plataforma",
+  "Your scheduled jobs (call a URL, message an agent or run a command; repeating or once) and, for admins, the platform's": "Tus tareas programadas (pegarle a una URL, escribirle a un agente o ejecutar un comando; repetidas o de una sola vez) y, para admins, las de la plataforma",
   "List your crons (or, with --platform, the platform's scheduled jobs)": "Enlista tus crons (o, con --platform, las tareas de la plataforma)",
   "Platform jobs (backups, purges\u2026; platform admins only)": "Tareas de la plataforma (respaldos, purgas\u2026; s\xF3lo admins)",
-  "Show the last runs of one of your crons (id or name) or of a platform job, with the full error": "Muestra las \xFAltimas corridas de un cron tuyo (id o nombre) o de una tarea de la plataforma, con el error completo",
-  "Run one of your crons or a platform job now, in the background (trigger manual)": "Corre ya un cron tuyo o una tarea de la plataforma, en segundo plano (manual)",
+  "Show the last runs of one of your crons (id or name) or of a platform job, with the full error": "Muestra las \xFAltimas ejecuciones de un cron tuyo (id o nombre) o de una tarea de la plataforma, con el error completo",
+  "Run one of your crons or a platform job now, in the background (trigger manual)": "Ejecuta ya un cron tuyo o una tarea de la plataforma, en segundo plano (manual)",
   "Pause one of your crons or a platform job until you resume it": "Pausa un cron tuyo o una tarea de la plataforma hasta que lo reanudes",
   "Resume one of your crons or a platform job": "Reanuda un cron tuyo o una tarea de la plataforma",
-  "Create a cron: call a public https URL, send a turn to one of your agents or run a command in a throwaway box, repeating (at most every 5 min) or once": "Crea un cron: pegarle a una URL https p\xFAblica, mandarle un turno a uno de tus agentes o correr un comando en una caja desechable, repetido (como mucho cada 5 min) o de una sola vez",
+  "Create a cron: call a public https URL, send a turn to one of your agents or run a command in a throwaway box, repeating (at most every 5 min) or once": "Crea un cron: pegarle a una URL https p\xFAblica, mandarle un turno a uno de tus agentes o ejecutar un comando en una caja desechable, repetido (como mucho cada 5 min) o de una sola vez",
   "Vault secret: a header with --url (default Authorization: Bearer); an env var with --run (repeatable)": "Secreto de la b\xF3veda: header con --url (default Authorization: Bearer); variable de entorno con --run (repetible)",
-  "Run this shell command in a throwaway box instead (python, files and secrets included; success = exit 0)": "Correr este comando de shell en una caja desechable (con python, tus archivos y secretos; \xE9xito = exit 0)",
+  "Run this shell command in a throwaway box instead (python, files and secrets included; success = exit 0)": "Ejecutar este comando de shell en una caja desechable (con python, tus archivos y secretos; \xE9xito = exit 0)",
   "File mounted for --run, next to the command by default (repeatable)": "Archivo que se monta para --run, junto al comando por default (repetible)",
   "Upload a local file as a secret only this cron can read, written at the same ~ path in the box (repeatable; e.g. a .p8)": "Sube un archivo local como secreto que s\xF3lo este cron puede leer; se escribe en la misma ruta ~ dentro de la caja (repetible; p. ej. un .p8)",
   "Box image for --run (default python)": "Imagen de la caja para --run (default python)",
   "Time limit for --run (default 300, max 600)": "Tiempo l\xEDmite de --run (default 300, m\xE1ximo 600)",
-  "Also print stdout/stderr of --run crons (last 64 KB per run)": "Muestra tambi\xE9n stdout/stderr de los crons --run (\xFAltimos 64 KB por corrida)",
-  "Wait for the next run of one of your crons to finish and exit with its result (exec: its exit code)": "Espera a que termine la siguiente corrida de un cron tuyo y sale con su resultado (exec: su c\xF3digo de salida)",
+  "Run --run with that machine's config (its env and secrets, e.g. DATABASE_URL), resolved on every run": "Corre --run con la configuraci\xF3n de esa m\xE1quina (su env y sus secretos, p. ej. DATABASE_URL), resuelta en cada ejecuci\xF3n",
+  "Also print stdout/stderr of --run crons (last 64 KB per run)": "Muestra tambi\xE9n stdout/stderr de los crons --run (\xFAltimos 64 KB por ejecuci\xF3n)",
+  "Wait for the next run of one of your crons to finish and exit with its result (exec: its exit code)": "Espera a que termine la siguiente ejecuci\xF3n de un cron tuyo y sale con su resultado (exec: su c\xF3digo de salida)",
   "Give up after this long (default 30m; 10m, 2h\u2026)": "Se rinde despu\xE9s de este tiempo (default 30m; 10m, 2h\u2026)",
-  "Tell you after each run: push to the Ghosty app (vault secret GHOSTY_PUSH_TOKEN), email to your account and/or an event in one of your inboxes; none removes it": "Te avisa tras cada corrida: push a la app de Ghosty (secreto GHOSTY_PUSH_TOKEN de la b\xF3veda), correo a tu cuenta y/o un evento en uno de tus buzones; none lo quita",
+  "Tell you after each run: push to the Ghosty app (vault secret GHOSTY_PUSH_TOKEN), email to your account and/or an event in one of your inboxes; none removes it": "Te avisa tras cada ejecuci\xF3n: push a la app de Ghosty (secreto GHOSTY_PUSH_TOKEN de la b\xF3veda), correo a tu cuenta y/o un evento en uno de tus buzones; none lo quita",
   // inbox (buzones de eventos)
   "Event inboxes: your own webhook URL whose events reach your terminal live or wait for you to read them": "Buzones de eventos: tu propia URL de webhook; lo que llega te alcanza en la terminal en vivo o te espera para que lo leas",
   "List your inboxes with their URL and unread events": "Enlista tus buzones con su URL y los eventos sin leer",
@@ -7318,22 +7436,22 @@ var HELP_ES = {
   "New name, unique in your account": "Nombre nuevo, \xFAnico en tu cuenta",
   "Days events are kept (1-30)": "D\xEDas que se guardan los eventos (1-30)",
   "Give an inbox a new URL and print it; the old one stops accepting writes right away (stored events stay)": "Le da al buz\xF3n una URL nueva y la imprime; la vieja deja de aceptar escrituras de inmediato (los eventos guardados se quedan)",
-  "Show one of your crons: what it does, how it notifies you and when it runs (--json: the whole object)": "Muestra un cron tuyo: qu\xE9 hace, c\xF3mo te avisa y cu\xE1ndo corre (--json: el objeto completo)",
-  "At most N runs of one of your crons (1-50, default 50)": "Como m\xE1ximo N corridas de un cron tuyo (1-50, default 50)",
+  "Show one of your crons: what it does, how it notifies you and when it runs (--json: the whole object)": "Muestra un cron tuyo: qu\xE9 hace, c\xF3mo te avisa y cu\xE1ndo se ejecuta (--json: el objeto completo)",
+  "At most N runs of one of your crons (1-50, default 50)": "Como m\xE1ximo N ejecuciones de un cron tuyo (1-50, default 50)",
   "When to notify (default failure)": "Cu\xE1ndo avisar (default failure: s\xF3lo si falla)",
-  'Run ONCE at this time: ISO ("2026-10-18T23:00", read in --tz) or "23:00" (today)': 'Correr UNA SOLA VEZ a esta hora: ISO ("2026-10-18T23:00", en la zona de --tz) o "23:00" (hoy)',
-  "Run ONCE after this long: 10m, 2h, 1h30m, 1d": "Correr UNA SOLA VEZ dentro de: 10m, 2h, 1h30m, 1d",
+  'Run ONCE at this time: ISO ("2026-10-18T23:00", read in --tz) or "23:00" (today)': 'Ejecutar UNA SOLA VEZ a esta hora: ISO ("2026-10-18T23:00", en la zona de --tz) o "23:00" (hoy)',
+  "Run ONCE after this long: 10m, 2h, 1h30m, 1d": "Ejecutar UNA SOLA VEZ dentro de: 10m, 2h, 1h30m, 1d",
   "A repeating cron stops after this date": "Un cron que se repite se detiene despu\xE9s de esta fecha",
-  "A repeating cron stops after N more runs": "Un cron que se repite se detiene tras N corridas m\xE1s",
-  "Validate and show the next 3 runs without creating anything": "Valida y muestra las pr\xF3ximas 3 corridas sin crear nada",
+  "A repeating cron stops after N more runs": "Un cron que se repite se detiene tras N ejecuciones m\xE1s",
+  "Validate and show the next 3 runs without creating anything": "Valida y muestra las pr\xF3ximas 3 ejecuciones sin crear nada",
   'Cron of 5 fields, e.g. "30 8 * * *" = daily 8:30': 'Cron de 5 campos, p. ej. "30 8 * * *" = diario 8:30',
   "IANA time zone (default America/Mexico_City)": "Zona horaria IANA (default America/Mexico_City)",
-  "Call this public https URL on each run": "Pegarle a esta URL https p\xFAblica en cada corrida",
+  "Call this public https URL on each run": "Pegarle a esta URL https p\xFAblica en cada ejecuci\xF3n",
   "HTTP method (default GET)": "M\xE9todo HTTP (default GET)",
   "Request body (not with GET)": "Cuerpo de la petici\xF3n (no con GET)",
   "Header for --secret": "Header para --secret",
   "Send a turn to this fleet agent instead of calling a URL": "Mandarle un turno a este agente de la flota en vez de pegarle a una URL",
-  "What the agent is told on each run (with --agent)": "Lo que se le dice al agente en cada corrida (con --agent)",
+  "What the agent is told on each run (with --agent)": "Lo que se le dice al agente en cada ejecuci\xF3n (con --agent)",
   "Change one of your crons (only what you pass)": "Cambia un cron tuyo (s\xF3lo lo que pases)",
   "New name": "Nombre nuevo",
   "New schedule": "Horario nuevo",
@@ -7350,6 +7468,12 @@ var HELP_ES = {
   "Long-running processes: start one in the background, list, poll its output, kill it": "Procesos largos: arranca uno en segundo plano, enl\xEDstalos, lee su salida, detenlo",
   "kill: seconds between SIGTERM and SIGKILL (default 5)": "kill: segundos entre SIGTERM y SIGKILL (default 5)",
   "status, exit code, stdout/stderr": "estado, c\xF3digo de salida, stdout/stderr",
+  "Codex on YOUR ChatGPT plan in a box: login once, then connect any box from your vault": "Codex con TU plan de ChatGPT en una caja: inicia sesi\xF3n una vez y conecta cualquier caja desde tu vault",
+  "connect: replace the session the box already has": "connect: reemplaza la sesi\xF3n que ya tenga la caja",
+  "shows a link + code; you sign in; the session goes to your vault": "muestra un link y un c\xF3digo; inicias sesi\xF3n; la sesi\xF3n se guarda en tu vault",
+  "puts that session in another box (installs Codex if missing)": "pone esa sesi\xF3n en otra caja (instala Codex si falta)",
+  "saves the box's (renewed) session back to the vault": "devuelve al vault la sesi\xF3n (renovada) de la caja",
+  "connect/login: don't install Codex if it's missing": "connect/login: no instalar Codex si falta",
   "Git inside a sandbox: clone, status, commit, push, pull, checkout, log": "Git dentro de un sandbox: clone, status, commit, push, pull, checkout, log",
   "Repo folder inside the sandbox (required)": "Carpeta del repo dentro del sandbox (obligatoria)",
   "clone: repo URL (clean; the token goes in --git-token)": "clone: URL del repo (limpia; el token va en --git-token)",
@@ -7653,7 +7777,7 @@ function normalizeArgs(input) {
 }
 
 // src/index.ts
-var VERSION2 = true ? "0.19.1" : "dev";
+var VERSION2 = true ? "0.21.0" : "dev";
 var GLOBAL_OPTIONS = {
   json: { type: "boolean" },
   token: { type: "string" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easybits.cloud/cli",
-  "version": "0.19.1",
+  "version": "0.21.0",
   "description": "Official CLI for EasyBits, the cloud for AI agents — sandboxes, hosting, domains, databases, agents and files from your terminal",
   "type": "module",
   "bin": {