@easybits.cloud/cli 0.7.0 → 0.9.0

package/dist/index.js

@@ -179,6 +179,16 @@ function table(rows, cols, empty = "Nothing here yet.") {
   console.log(line(cols.map(([, l]) => l)));
   for (const r of rows) console.log(line(cols.map(([k]) => cell(r[k]))));
 }
+function pickFields(rec, fields) {
+  if (!fields?.length) return rec;
+  const out = {};
+  for (const f of fields) out[f] = rec[f];
+  return out;
+}
+function maskSecret(v) {
+  if (v.startsWith("$secret:")) return v;
+  return v.length <= 8 ? "***" : `${v.slice(0, 4)}\u2026***`;
+}
 
 // src/client.ts
 import { EasybitsClient, resolveBaseUrl as resolveBaseUrl2 } from "@easybits.cloud/sdk";
@@ -250,7 +260,7 @@ async function oauthLogin(ctx, opts = {}) {
   const challenge = b64url(createHash("sha256").update(verifier).digest());
   const state = b64url(randomBytes(16));
   const server = createServer();
-  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+  await new Promise((resolve2) => server.listen(0, "127.0.0.1", resolve2));
   const port = server.address().port;
   const redirectUri = `http://127.0.0.1:${port}/cb`;
   try {
@@ -264,7 +274,7 @@ async function oauthLogin(ctx, opts = {}) {
       code_challenge: challenge,
       code_challenge_method: "S256"
     });
-    const code = await new Promise((resolve, reject) => {
+    const code = await new Promise((resolve2, reject) => {
       const timer = setTimeout(
         () => reject(new CliError("Login timed out after 5 minutes.", EXIT.AUTH, "Run: easybits login", "login_timeout")),
         LOGIN_TIMEOUT_MS
@@ -280,7 +290,7 @@ async function oauthLogin(ctx, opts = {}) {
         clearTimeout(timer);
         if (ok) {
           res.writeHead(302, { location: `${base}/oauth/listo` }).end();
-          resolve(got);
+          resolve2(got);
         } else {
           res.writeHead(400, { "content-type": "text/html; charset=utf-8" }).end(FAIL_PAGE(base));
           reject(
@@ -495,7 +505,8 @@ var providers = {
   synopsis: "providers",
   leaf: {
     summary: "Show storage providers",
-    usage: "easybits providers [list]",
+    usage: "easybits providers",
+    examples: ["easybits providers", "easybits providers --json"],
     async run(ctx) {
       const data = {
         defaultProvider: "tigris",
@@ -508,60 +519,57 @@ var providers = {
     }
   }
 };
-var config = {
-  name: "config",
+var mcp = {
+  name: "mcp",
   group: "MCP",
-  summary: "Print MCP config JSON (streamable HTTP)",
-  synopsis: "config",
-  leaf: {
-    summary: "Print MCP config JSON (streamable HTTP) with your key",
-    usage: "easybits config",
-    examples: ["easybits config > .mcp.json"],
-    async run(ctx) {
-      const apiKey = resolveApiKey(ctx);
-      const baseUrl = await resolveBaseUrl3();
-      console.log(
-        JSON.stringify(
-          {
+  summary: "Print the MCP config JSON for your agent or editor",
+  synopsis: "mcp",
+  subs: {
+    config: {
+      summary: "Print MCP config JSON: streamable HTTP with your key, or stdio (npx @easybits.cloud/mcp)",
+      usage: "easybits mcp config [--stdio]",
+      options: { stdio: { type: "boolean", description: "stdio config (npx @easybits.cloud/mcp) instead of streamable HTTP" } },
+      examples: ["easybits mcp config > .mcp.json", "easybits mcp config --stdio"],
+      async run(ctx) {
+        if (bool(ctx, "stdio")) {
+          const config2 = {
             mcpServers: {
-              easybits: {
-                type: "streamable-http",
-                url: `${baseUrl}/api/mcp`,
-                headers: { Authorization: `Bearer ${apiKey || "eb_sk_live_YOUR_KEY"}` }
-              }
+              easybits: { command: "npx", args: ["-y", "@easybits.cloud/mcp"], env: { EASYBITS_API_KEY: "eb_sk_live_YOUR_KEY" } }
             }
-          },
-          null,
-          2
-        )
-      );
+          };
+          console.log(JSON.stringify(config2, null, 2));
+          return;
+        }
+        const apiKey = resolveApiKey(ctx);
+        const baseUrl = await resolveBaseUrl3();
+        const config = {
+          mcpServers: {
+            easybits: {
+              type: "streamable-http",
+              url: `${baseUrl}/api/mcp`,
+              headers: { Authorization: `Bearer ${apiKey || "eb_sk_live_YOUR_KEY"}` }
+            }
+          }
+        };
+        console.log(JSON.stringify(config, null, 2));
+      }
     }
   }
 };
-var mcp = {
-  name: "mcp",
-  group: "MCP",
-  summary: "Print MCP stdio config JSON",
-  synopsis: "mcp",
+var whoami = {
+  name: "whoami",
+  group: "Account",
+  summary: "Show which account and credential the CLI is using",
+  synopsis: "whoami",
   leaf: {
-    summary: "Print MCP stdio config JSON (npx @easybits.cloud/mcp)",
-    usage: "easybits mcp",
-    async run() {
-      console.log(
-        JSON.stringify(
-          {
-            mcpServers: {
-              easybits: {
-                command: "npx",
-                args: ["-y", "@easybits.cloud/mcp"],
-                env: { EASYBITS_API_KEY: "eb_sk_live_YOUR_KEY" }
-              }
-            }
-          },
-          null,
-          2
-        )
-      );
+    summary: "Show the account email and where the credential comes from",
+    usage: "easybits whoami",
+    examples: ["easybits whoami", "easybits whoami --json"],
+    async run(ctx) {
+      const source = process.env.EASYBITS_API_KEY ? "env EASYBITS_API_KEY" : ctx.token ? "--token" : readRc().oauth?.accessToken ? "browser session (~/.easybitsrc)" : readRc().apiKey ? "API key (~/.easybitsrc)" : void 0;
+      if (!source) throw notLoggedIn();
+      const email = await fetchEmail(await resolveCredential(ctx));
+      emit(ctx, { email, source, baseUrl: await resolveBaseUrl3() }, () => console.log(`${email ?? "(unknown email)"}  via ${source}`));
     }
   }
 };
@@ -674,12 +682,12 @@ var files = {
         emit(ctx, data.file, () => console.log(`Uploaded: ${data.file.id}`));
       }
     },
-    delete: {
-      aliases: ["rm"],
+    rm: {
+      aliases: ["delete", "remove"],
       summary: "Delete a file (soft delete, 7-day trash)",
-      usage: "easybits files delete <file-id> [--yes]",
+      usage: "easybits files rm <file-id> [--yes]",
       options: { ...YES_OPTION },
-      examples: ["easybits files delete 6650f0c2a1b2c3d4e5f60718", "easybits files rm 6650f0c2a1b2c3d4e5f60718 --yes"],
+      examples: ["easybits files rm 6650f0c2a1b2c3d4e5f60718", "easybits files rm 6650f0c2a1b2c3d4e5f60718 --yes"],
       async run(ctx) {
         const id = need(ctx, 0, "file-id", this.usage);
         requireYesIfHeadless(ctx);
@@ -942,8 +950,8 @@ var sshProxy = {
       const { url } = await sb.sshTicket();
       const ws = new WebSocket(url);
       ws.binaryType = "arraybuffer";
-      await new Promise((resolve, reject) => {
-        ws.onopen = () => resolve();
+      await new Promise((resolve2, reject) => {
+        ws.onopen = () => resolve2();
         ws.onerror = () => reject(new CliError("easybits ssh-proxy: could not open the tunnel"));
       });
       ws.onerror = () => {
@@ -1026,11 +1034,11 @@ var sandboxes = {
     create: {
       aliases: ["new"],
       summary: "Create a sandbox and wait until it is running",
-      usage: "easybits sandboxes create [--template ubuntu] [--name <name>] [--timeout <s>] [--size s|m|l|xl] [--dotenv <path>] [--env K=V]...",
+      usage: "easybits sandboxes create [--template ubuntu] [--name <name>] [--ttl <s>] [--size s|m|l|xl] [--dotenv <path>] [--env K=V]...",
       options: {
         template: { type: "string", value: "name", description: "Base template (default ubuntu): ubuntu, python, node, code-interpreter\u2026" },
         name: { type: "string", value: "name", description: "Human label (lets you `ssh <name>.ghosty`)" },
-        timeout: { type: "string", value: "seconds", description: "Time to live before auto-destroy" },
+        ttl: { type: "string", value: "seconds", description: "Time to live before auto-destroy (was --timeout)" },
         size: { type: "string", value: "s|m|l|xl", description: "VM size class (gated by plan)" },
         env: { type: "string", multiple: true, value: "K=V", description: "Environment variable, non-secret (repeatable)" },
         ...ENV_FILE_OPTION,
@@ -1049,7 +1057,7 @@ var sandboxes = {
         const sb = await eb.sandboxes.create({
           template: str(ctx, "template") ?? "ubuntu",
           name: str(ctx, "name"),
-          timeoutSeconds: int(ctx, "timeout", this.usage),
+          timeoutSeconds: int(ctx, "ttl", this.usage),
           size,
           env: Object.keys(env).length ? env : void 0,
           waitForReady: !bool(ctx, "no-wait")
@@ -1243,16 +1251,16 @@ var sandboxes = {
 var SECRETS_USAGE = "easybits machines secrets <ls|set|unset> <machine> [--dotenv <path> | NAME]";
 var machines = {
   name: "machines",
-  aliases: ["deploy", "machine"],
+  aliases: ["machine"],
   group: "Hosting",
-  summary: "Permanent machines and their releases (alias: deploy)",
+  summary: "Permanent machines and their releases (easybits deploy <machine> publishes)",
   synopsis: "machines",
   subs: {
     ls: {
       aliases: ["list"],
       summary: "List your permanent machines",
       usage: "easybits machines ls",
-      examples: ["easybits machines ls", "easybits deploy ls --json"],
+      examples: ["easybits machines ls", "easybits machines ls --json"],
       async run(ctx) {
         const eb = await getClient(ctx);
         const rows = (await eb.machines.list()).map(sandboxRecord);
@@ -1268,11 +1276,10 @@ var machines = {
       }
     },
     deploy: {
-      aliases: ["release"],
       summary: "Publish the machine's current app code as a new release",
       usage: "easybits machines deploy <machine> [--message <text>]",
       options: { message: { type: "string", short: "m", value: "text", description: "Release note" } },
-      examples: ['easybits machines deploy sb_abc123 -m "v1.2: fix checkout"'],
+      examples: ['easybits machines deploy shop -m "v1.2: fix checkout"', 'easybits deploy shop -m "v1.2"          # same thing, shorter'],
       async run(ctx) {
         const id = need(ctx, 0, "machine", this.usage);
         const eb = await getClient(ctx);
@@ -1449,6 +1456,15 @@ var REF_ARGS = {
   "agents get": { index: 0, kind: "agent" },
   "agents message": { index: 0, kind: "agent" },
   "agents destroy": { index: 0, kind: "agent" },
+  "agents set": { index: 0, kind: "agent" },
+  "agents files": { index: 1, kind: "agent" },
+  "agents skills": { index: 1, kind: "agent" },
+  "agents mcp": { index: 1, kind: "agent" },
+  "agents restart": { index: 0, kind: "agent" },
+  "agents try": { index: 0, kind: "agent" },
+  "agents logs": { index: 0, kind: "agent" },
+  "agents doctor": { index: 0, kind: "agent" },
+  "agents export": { index: 0, kind: "agent" },
   "sandboxes get": { index: 0, kind: "sandbox" },
   "sandboxes exec": { index: 0, kind: "sandbox" },
   "sandboxes logs": { index: 0, kind: "sandbox" },
@@ -1535,7 +1551,7 @@ async function findDb(ctx, id) {
 }
 var db = {
   name: "db",
-  aliases: ["databases"],
+  aliases: ["databases", "database"],
   group: "Data",
   summary: "SQL databases (libSQL)",
   synopsis: "db",
@@ -1656,6 +1672,741 @@ var db = {
   }
 };
 
+// src/commands/agents.ts
+import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
+
+// src/api.ts
+import { EasybitsError as EasybitsError2, resolveBaseUrl as resolveBaseUrl4 } from "@easybits.cloud/sdk";
+async function api(ctx, method, path, body, opts = {}) {
+  const token = await resolveCredential(ctx);
+  const base = (await resolveBaseUrl4()).replace(/\/$/, "");
+  const headers = { Authorization: `Bearer ${token}` };
+  let payload;
+  if (body !== void 0) {
+    if (opts.raw) {
+      payload = body;
+      headers["Content-Type"] = "application/octet-stream";
+    } else {
+      payload = JSON.stringify(body);
+      headers["Content-Type"] = "application/json";
+    }
+  }
+  const res = await fetch(`${base}/api/v2${path}`, { method, headers, body: payload });
+  const text = await res.text();
+  if (!res.ok) throw new EasybitsError2(res.status, text);
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+var encodePath = (p) => p.replace(/^\/+/, "").split("/").map(encodeURIComponent).join("/");
+
+// src/commands/agents-config.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync6, readdirSync, statSync as statSync2, writeFileSync as writeFileSync4 } from "fs";
+import { basename as basename2, dirname, join as join3, relative, resolve } from "path";
+var WORK_DIR = "/data/work";
+var MACHINE_TEMPLATES = /* @__PURE__ */ new Set(["ghosty-lite", "goose"]);
+var SKILLS_DIR = "/data/agent/skills";
+var SLUG_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+var DRY_RUN = { "dry-run": { type: "boolean", description: "Show what would change; change nothing" } };
+var getPrompt = (ctx, id) => api(ctx, "GET", `/agents/${id}/prompt`);
+var getMcp = async (ctx, id) => (await api(ctx, "GET", `/agents/${id}/mcp`)).servers;
+var listFiles = (ctx, id, sub) => api(ctx, "GET", `/agents/${id}/files${sub ? `/${encodePath(sub)}` : ""}`);
+async function agentBox(eb, id) {
+  const a = await eb.getAgent(id);
+  return { agent: a, box: await eb.sandboxes.get(a.sandboxId) };
+}
+function skillFrontmatter(md) {
+  const m = /^---\r?\n([\s\S]*?)\r?\n---/.exec(md);
+  if (!m) return { error: "SKILL.md has no frontmatter (--- name / description ---)" };
+  const out = {};
+  for (const key of ["name", "description"]) {
+    const line = m[1].split(/\r?\n/).find((l) => l.startsWith(`${key}:`));
+    if (!line) return { ...out, error: `frontmatter has no \`${key}:\`` };
+    const value = line.slice(key.length + 1).trim();
+    if (!value) return { ...out, error: `\`${key}:\` is empty` };
+    const quoted = /^(["']).*\1$/.test(value);
+    if (!quoted && value.includes(": ")) return { ...out, error: `\`${key}:\` has an unquoted ": " \u2014 quote the value or the skill is dropped` };
+    out[key] = quoted ? value.slice(1, -1) : value;
+  }
+  return out;
+}
+async function listSkills(box) {
+  let entries;
+  try {
+    ({ entries } = await box.files.list(SKILLS_DIR));
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const e of entries.filter((x) => x.isDir)) {
+    const files3 = await walk(box, `${SKILLS_DIR}/${e.name}`);
+    let description = "";
+    if (files3.includes("SKILL.md")) {
+      const md = (await box.files.read(`${SKILLS_DIR}/${e.name}/SKILL.md`)).content;
+      description = skillFrontmatter(md).description ?? "";
+    }
+    out.push({ slug: e.name, description, files: files3 });
+  }
+  return out;
+}
+async function walk(box, dir, prefix = "") {
+  const { entries } = await box.files.list(dir);
+  const out = [];
+  for (const e of entries) {
+    if (e.isDir) out.push(...await walk(box, `${dir}/${e.name}`, `${prefix}${e.name}/`));
+    else out.push(`${prefix}${e.name}`);
+  }
+  return out;
+}
+async function readSkill(box, s) {
+  const markdown = (await box.files.read(`${SKILLS_DIR}/${s.slug}/SKILL.md`)).content;
+  const assets = [];
+  for (const rel of s.files.filter((f) => f !== "SKILL.md")) {
+    const r = await box.files.read(`${SKILLS_DIR}/${s.slug}/${rel}`, { encoding: "base64" });
+    assets.push({ name: rel, contentBase64: r.content });
+  }
+  return { slug: s.slug, markdown, assets };
+}
+var maskList = (l) => l?.map((x) => ({ name: x.name, value: maskSecret(x.value) }));
+var maskMcp = (servers) => servers.map((s) => ({ ...s, ...s.env ? { env: maskList(s.env) } : {}, ...s.headers ? { headers: maskList(s.headers) } : {} }));
+async function soft(fn) {
+  try {
+    return { ok: true, value: await fn() };
+  } catch (e) {
+    return { ok: false, error: toCliError(e).message };
+  }
+}
+function readLocalText(path, usage2) {
+  if (path === "-") {
+    if (process.stdin.isTTY) throw usageError("Expected the content on stdin.", usage2);
+    return readStdin().then((b) => b.toString("utf8"));
+  }
+  if (!existsSync6(path)) throw usageError(`File not found: ${path}`, usage2);
+  return readFileSync6(path, "utf8");
+}
+function parseMcpFile(text, usage2) {
+  let j;
+  try {
+    j = JSON.parse(text);
+  } catch (e) {
+    throw usageError(`servers file is not JSON: ${e.message}`, usage2);
+  }
+  const list2 = Array.isArray(j) ? j : j?.servers ?? j?.mcpServers;
+  if (!Array.isArray(list2)) throw usageError("Expected an array of MCP servers, or { servers: [...] }.", usage2);
+  return list2;
+}
+var hasMasked = (servers) => servers.some((s) => [...s.env ?? [], ...s.headers ?? []].some((x) => /…\*\*\*$|^\*\*\*$/.test(x.value)));
+var GET_FIELDS = [
+  "agentId",
+  "name",
+  "template",
+  "status",
+  "sandboxId",
+  "agentUrl",
+  "embedToken",
+  "createdAt",
+  "expiresAt",
+  "systemPrompt",
+  "systemPromptMode",
+  "mcpServers",
+  "skills",
+  "files"
+];
+var get = {
+  aliases: ["show"],
+  summary: "Show one agent: record, prompt, MCP servers, skills and files",
+  usage: "easybits agents get <agent> [--fields a,b] [--prompt-out <file>]",
+  options: {
+    fields: { type: "string", value: "a,b", description: `Only these fields: ${GET_FIELDS.join(", ")}` },
+    "prompt-out": { type: "string", value: "file", description: "Write the system prompt to a file instead of printing it" }
+  },
+  examples: [
+    "easybits agents get helper",
+    "easybits agents get helper --fields status,systemPromptMode --json",
+    "easybits agents get helper --prompt-out PROMPT.md   # edit, then: agents set helper --prompt-file PROMPT.md"
+  ],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const fields = str(ctx, "fields")?.split(",").map((f) => f.trim()).filter(Boolean);
+    const bad = fields?.filter((f) => !GET_FIELDS.includes(f));
+    if (bad?.length) throw usageError(`Unknown field(s): ${bad.join(", ")}. Valid: ${GET_FIELDS.join(", ")}`, this.usage);
+    const promptOut = str(ctx, "prompt-out");
+    const want = (f) => !fields || fields.includes(f);
+    const eb = await getClient(ctx);
+    const a = await eb.getAgent(id);
+    const rec = { ...a };
+    const notes = [];
+    const wantsConfig = ["systemPrompt", "systemPromptMode", "mcpServers", "files", "skills"].some(want) || !!promptOut;
+    let machine = wantsConfig && a.status !== "lost";
+    if (wantsConfig && !machine) notes.push(`its sandbox is lost: prompt, MCP, skills and files are unavailable (easybits agents doctor ${id})`);
+    if (machine) {
+      const p = await soft(() => getPrompt(ctx, id));
+      if (!p.ok && /agente_sin_maquina|no expone/.test(p.error)) {
+        machine = false;
+        notes.push(`template "${a.template}" has no machine: prompt, MCP, skills and files apply only to ghosty-lite and goose`);
+      } else if (p.ok) {
+        rec.systemPromptMode = p.value.systemPromptMode;
+        if (promptOut) {
+          writeFileSync4(promptOut, p.value.systemPrompt);
+          rec.systemPrompt = { file: resolve(promptOut), bytes: Buffer.byteLength(p.value.systemPrompt) };
+        } else rec.systemPrompt = p.value.systemPrompt;
+      } else notes.push(`prompt: ${p.error}`);
+    }
+    if (machine && want("mcpServers")) {
+      const m = await soft(() => getMcp(ctx, id));
+      if (m.ok) rec.mcpServers = maskMcp(m.value);
+      else notes.push(`mcp: ${m.error}`);
+    }
+    if (machine && want("files")) {
+      const f = await soft(() => listFiles(ctx, id));
+      if (f.ok) rec.files = f.value.files;
+      else notes.push(`files: ${f.error}`);
+    }
+    if (machine && want("skills")) {
+      const s = await soft(async () => listSkills((await agentBox(eb, id)).box));
+      if (s.ok) rec.skills = s.value;
+      else notes.push(`skills: ${s.error}`);
+    }
+    const errors = notes;
+    const out = { ...pickFields(rec, fields), ...errors.length ? { errors } : {} };
+    emit(ctx, out, () => {
+      if (fields) {
+        for (const f of fields) console.log(`${f}: ${typeof out[f] === "object" ? JSON.stringify(out[f]) : out[f] ?? "-"}`);
+        return;
+      }
+      printAgent(a);
+      if (rec.systemPromptMode) console.log(`Prompt:    ${rec.systemPromptMode}${promptOut ? ` \u2192 ${resolve(promptOut)}` : ""}`);
+      const mcp3 = rec.mcpServers;
+      if (mcp3) console.log(`MCP:       ${mcp3.length ? mcp3.map((s) => s.name).join(", ") : "none"}`);
+      const skills2 = rec.skills;
+      if (skills2) console.log(`Skills:    ${skills2.length ? skills2.map((s) => s.slug).join(", ") : "none"}`);
+      const files3 = rec.files;
+      if (files3) console.log(`Files:     ${files3.length} in ${WORK_DIR}`);
+      for (const e of errors) console.error(`note: ${e}`);
+      if (typeof rec.systemPrompt === "string" && rec.systemPrompt) console.log(`
+${rec.systemPrompt.trimEnd()}`);
+    });
+  }
+};
+function printAgent(a) {
+  console.log(`ID:        ${a.agentId}`);
+  if (a.name) console.log(`Name:      ${a.name}`);
+  console.log(`Template:  ${a.template}`);
+  console.log(`Status:    ${a.status}`);
+  console.log(`Sandbox:   ${a.sandboxId}`);
+  console.log(`URL:       ${a.agentUrl}`);
+  console.log(`Token:     ${maskSecret(a.embedToken ?? "")}   (full value: --fields embedToken --json)`);
+  console.log(`Created:   ${fmtDate(a.createdAt)}`);
+  console.log(`Expires:   ${a.expiresAt ? fmtDate(a.expiresAt) : "never"}`);
+}
+var set = {
+  summary: "Change the system prompt (ghosty-lite, goose); takes effect without a reboot",
+  usage: "easybits agents set <agent> [--prompt <text> | --prompt-file <file|->] [--prompt-mode append|replace] [--dry-run]",
+  options: {
+    prompt: { type: "string", value: "text", description: "New system prompt" },
+    "prompt-file": { type: "string", value: "file", description: "Read the prompt from a file (- = stdin)" },
+    "prompt-mode": { type: "string", value: "mode", description: "append (to the engine's own) or replace it" },
+    ...DRY_RUN
+  },
+  examples: [
+    "easybits agents set helper --prompt-file PROMPT.md --dry-run",
+    "easybits agents set helper --prompt-file PROMPT.md --prompt-mode replace",
+    "cat PROMPT.md | easybits agents set helper --prompt-file - --json"
+  ],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const inline = str(ctx, "prompt");
+    const file = str(ctx, "prompt-file");
+    if (inline != null && file) throw usageError("Use --prompt or --prompt-file, not both.", this.usage);
+    const mode = str(ctx, "prompt-mode");
+    if (mode && mode !== "append" && mode !== "replace") throw usageError("--prompt-mode must be append or replace.", this.usage);
+    const prompt = inline ?? (file ? await readLocalText(file, this.usage) : void 0);
+    if (prompt == null && !mode) throw usageError("Nothing to change: pass --prompt, --prompt-file or --prompt-mode.", this.usage);
+    const cur = await getPrompt(ctx, id);
+    const changes = {};
+    if (prompt != null && prompt !== cur.systemPrompt) {
+      changes.systemPrompt = { from: `${Buffer.byteLength(cur.systemPrompt)} bytes`, to: `${Buffer.byteLength(prompt)} bytes` };
+    }
+    if (mode && mode !== cur.systemPromptMode) changes.systemPromptMode = { from: cur.systemPromptMode, to: mode };
+    if (bool(ctx, "dry-run") || !Object.keys(changes).length) {
+      const dry = { agentId: id, dryRun: bool(ctx, "dry-run"), changes };
+      emit(ctx, dry, () => {
+        if (!Object.keys(changes).length) return console.log("No changes: the agent already has that prompt.");
+        for (const [k, v] of Object.entries(changes)) console.log(`${k}: ${v.from} \u2192 ${v.to}`);
+        console.log("(dry run: nothing changed)");
+      });
+      return;
+    }
+    const r = await api(ctx, "PATCH", `/agents/${id}`, {
+      ...changes.systemPrompt ? { systemPrompt: prompt } : {},
+      ...changes.systemPromptMode ? { systemPromptMode: mode } : {}
+    });
+    emit(ctx, { agentId: id, changes, ...r }, () => {
+      for (const [k, v] of Object.entries(changes)) console.log(`${k}: ${v.from} \u2192 ${v.to}`);
+      if (r.hooks) console.log(r.hooks);
+      console.log(`Check it: easybits agents try ${id} "who are you?"`);
+    });
+  }
+};
+var FILES_USAGE2 = "easybits agents files <ls|get|put|rm> <agent> [path|local-file...]";
+var files2 = {
+  summary: `Knowledge files in ${WORK_DIR}: list, read, upload (several at once) or delete`,
+  usage: FILES_USAGE2,
+  options: {
+    out: { type: "string", value: "file", description: "get: save to a local file (binary-safe)" },
+    to: { type: "string", value: "dir", description: `put: folder inside ${WORK_DIR} (default: its root)` },
+    ...DRY_RUN,
+    ...YES_OPTION
+  },
+  examples: [
+    "easybits agents files ls helper",
+    "easybits agents files put helper catalog.pdf prices.csv --to docs",
+    "easybits agents files get helper docs/prices.csv --out prices.csv",
+    "easybits agents files rm helper docs/old.pdf docs/old2.pdf --yes"
+  ],
+  async run(ctx) {
+    const action = need(ctx, 0, "ls|get|put|rm", FILES_USAGE2);
+    const id = need(ctx, 1, "agent", FILES_USAGE2);
+    const rest = ctx.args.slice(2);
+    if (action === "ls" || action === "list") {
+      const r = await listFiles(ctx, id, rest[0]);
+      emit(
+        ctx,
+        r,
+        () => table(r.files.map((f) => ({ ...f, size: fmtBytes(f.size) })), [["path", "PATH"], ["size", "SIZE"]], `No files in ${r.dir}. Upload: easybits agents files put ${id} <file>`)
+      );
+    } else if (action === "get" || action === "read" || action === "cat") {
+      const path = need(ctx, 2, "path", FILES_USAGE2);
+      const eb = await getClient(ctx);
+      const { box } = await agentBox(eb, id);
+      const full = `${WORK_DIR}/${path.replace(/^\/+/, "")}`;
+      const out = str(ctx, "out");
+      if (out) {
+        const r = await box.files.read(full, { encoding: "base64" });
+        writeFileSync4(out, Buffer.from(r.content, "base64"));
+        emit(ctx, { path, out: resolve(out), size: r.size }, () => console.error(`Saved ${fmtBytes(r.size)} to ${resolve(out)}`));
+      } else {
+        const r = await box.files.read(full);
+        emit(ctx, r, () => process.stdout.write(r.content));
+      }
+    } else if (action === "put" || action === "upload") {
+      if (!rest.length) throw usageError("Give one or more local files.", FILES_USAGE2);
+      const to = (str(ctx, "to") ?? "").replace(/^\/+|\/+$/g, "");
+      const plan = rest.map((local) => {
+        if (!existsSync6(local) || !statSync2(local).isFile()) throw usageError(`File not found: ${local}`, FILES_USAGE2);
+        return { local, path: to ? `${to}/${basename2(local)}` : basename2(local), bytes: statSync2(local).size };
+      });
+      if (bool(ctx, "dry-run")) {
+        emit(ctx, { agentId: id, dryRun: true, upload: plan }, () => {
+          for (const p of plan) console.log(`${p.local} \u2192 ${WORK_DIR}/${p.path} (${fmtBytes(p.bytes)})`);
+          console.log("(dry run: nothing uploaded)");
+        });
+        return;
+      }
+      const done = [];
+      for (const p of plan) {
+        const r = await api(ctx, "PUT", `/agents/${id}/files/${encodePath(p.path)}`, readFileSync6(p.local), { raw: true });
+        done.push({ local: p.local, ...r });
+        if (!ctx.json) console.log(`Uploaded ${p.local} \u2192 ${WORK_DIR}/${p.path} (${fmtBytes(p.bytes)})`);
+      }
+      if (ctx.json) emit(ctx, done, () => {
+      });
+    } else if (action === "rm" || action === "delete") {
+      if (!rest.length) throw usageError("Give one or more paths.", FILES_USAGE2);
+      if (bool(ctx, "dry-run")) {
+        emit(ctx, { agentId: id, dryRun: true, delete: rest }, () => {
+          for (const p of rest) console.log(`would delete ${WORK_DIR}/${p}`);
+        });
+        return;
+      }
+      requireYesIfHeadless(ctx);
+      await confirm(ctx, `Delete ${rest.length === 1 ? rest[0] : `${rest.length} files`} from agent ${id}?`);
+      const done = [];
+      for (const p of rest) done.push(await api(ctx, "DELETE", `/agents/${id}/files/${encodePath(p)}`));
+      emit(ctx, done, () => done.forEach((d) => console.log(`Deleted ${d.deleted}`)));
+    } else throw usageError(`Unknown files action "${action}".`, FILES_USAGE2);
+  }
+};
+var SKILLS_USAGE = "easybits agents skills <ls|get|add|rm> <agent> [slug...] [--file SKILL.md | --dir <folder>] [--restart]";
+function readSkillDir(dir) {
+  const assets = [];
+  const visit = (d) => {
+    for (const e of readdirSync(d, { withFileTypes: true })) {
+      if (e.name.startsWith(".") || e.name === "node_modules") continue;
+      const p = join3(d, e.name);
+      if (e.isDirectory()) visit(p);
+      else if (e.isFile() && relative(dir, p) !== "SKILL.md") assets.push({ name: relative(dir, p).split("\\").join("/"), contentBase64: readFileSync6(p).toString("base64") });
+    }
+  };
+  visit(dir);
+  return assets;
+}
+async function restartAgent(ctx, id) {
+  return api(ctx, "POST", `/agents/${id}/restart`);
+}
+var skills = {
+  summary: "Skills in /data/agent/skills: list, read, add from a file or folder, remove",
+  usage: SKILLS_USAGE,
+  options: {
+    file: { type: "string", value: "SKILL.md", description: "add: a single SKILL.md" },
+    dir: { type: "string", value: "folder", description: "add: a folder with SKILL.md and its assets" },
+    slug: { type: "string", value: "slug", description: "add: slug (default: the frontmatter name, else the folder)" },
+    out: { type: "string", value: "dir", description: "get: download the whole skill into this folder" },
+    restart: { type: "boolean", description: "add/rm: restart the agent so it sees the change (new session)" },
+    ...DRY_RUN,
+    ...YES_OPTION
+  },
+  examples: [
+    "easybits agents skills ls helper",
+    "easybits agents skills add helper --dir ./skills/quotes --restart",
+    "easybits agents skills add helper --file SKILL.md --dry-run",
+    "easybits agents skills get helper quotes --out ./quotes",
+    "easybits agents skills rm helper quotes --yes --restart"
+  ],
+  async run(ctx) {
+    const action = need(ctx, 0, "ls|get|add|rm", SKILLS_USAGE);
+    const id = need(ctx, 1, "agent", SKILLS_USAGE);
+    if (action === "ls" || action === "list") {
+      const eb = await getClient(ctx);
+      const list2 = await listSkills((await agentBox(eb, id)).box);
+      emit(
+        ctx,
+        list2,
+        () => table(list2.map((s) => ({ ...s, files: s.files.length })), [["slug", "SLUG"], ["files", "FILES"], ["description", "DESCRIPTION"]], `No skills. Add one: easybits agents skills add ${id} --dir <folder>`)
+      );
+    } else if (action === "get" || action === "read") {
+      const slug = need(ctx, 2, "slug", SKILLS_USAGE);
+      const eb = await getClient(ctx);
+      const { box } = await agentBox(eb, id);
+      const entry = (await listSkills(box)).find((s2) => s2.slug === slug);
+      if (!entry) throw new CliError(`No skill "${slug}" on agent ${id}.`, EXIT.API, `List them: easybits agents skills ls ${id}`, "not_found", 404);
+      const out = str(ctx, "out");
+      if (!out) {
+        const md = (await box.files.read(`${SKILLS_DIR}/${slug}/SKILL.md`)).content;
+        emit(ctx, { ...entry, markdown: md }, () => process.stdout.write(md.endsWith("\n") ? md : md + "\n"));
+        return;
+      }
+      const s = await readSkill(box, entry);
+      mkdirSync3(out, { recursive: true });
+      writeFileSync4(join3(out, "SKILL.md"), s.markdown);
+      for (const a of s.assets) {
+        mkdirSync3(dirname(join3(out, a.name)), { recursive: true });
+        writeFileSync4(join3(out, a.name), Buffer.from(a.contentBase64, "base64"));
+      }
+      emit(ctx, { slug, out: resolve(out), files: entry.files }, () => console.log(`Saved ${entry.files.length} file(s) to ${resolve(out)}`));
+    } else if (action === "add" || action === "put") {
+      const file = str(ctx, "file");
+      const dir = str(ctx, "dir");
+      if (!!file === !!dir) throw usageError("Pass --file SKILL.md or --dir <folder>.", SKILLS_USAGE);
+      const mdPath = file ?? join3(dir, "SKILL.md");
+      if (!existsSync6(mdPath)) throw usageError(`File not found: ${mdPath}`, SKILLS_USAGE);
+      const markdown = readFileSync6(mdPath, "utf8");
+      const fm = skillFrontmatter(markdown);
+      if (fm.error) throw usageError(`${mdPath}: ${fm.error}`, SKILLS_USAGE);
+      const slug = str(ctx, "slug") ?? (fm.name && SLUG_RE.test(fm.name) ? fm.name : basename2(resolve(dir ?? dirname(mdPath))).toLowerCase());
+      if (!SLUG_RE.test(slug)) throw usageError(`Invalid slug "${slug}" ([a-z0-9-], max 64). Pass --slug.`, SKILLS_USAGE);
+      const assets = dir ? readSkillDir(dir) : [];
+      const plan = { agentId: id, slug, files: ["SKILL.md", ...assets.map((a) => a.name)], restart: bool(ctx, "restart") };
+      if (bool(ctx, "dry-run")) {
+        emit(ctx, { ...plan, dryRun: true }, () => console.log(`would add skill ${slug} (${plan.files.length} file(s))${plan.restart ? " and restart" : ""}
+(dry run: nothing changed)`));
+        return;
+      }
+      const r = await api(ctx, "PUT", `/agents/${id}/skills/${slug}`, { markdown, assets });
+      const restarted = plan.restart ? await restartAgent(ctx, id) : null;
+      emit(ctx, { ...r, restarted: !!restarted }, () => {
+        console.log(`Added skill ${slug} (${r.files.length} file(s), ${fmtBytes(r.bytes)})`);
+        console.log(restarted ? "Restarted: the agent sees it now." : `It takes effect after: easybits agents restart ${id}`);
+      });
+    } else if (action === "rm" || action === "delete") {
+      const slugs = ctx.args.slice(2);
+      if (!slugs.length) throw usageError("Give one or more slugs.", SKILLS_USAGE);
+      if (bool(ctx, "dry-run")) {
+        emit(ctx, { agentId: id, dryRun: true, delete: slugs }, () => slugs.forEach((s) => console.log(`would remove skill ${s}`)));
+        return;
+      }
+      requireYesIfHeadless(ctx);
+      await confirm(ctx, `Remove skill${slugs.length > 1 ? "s" : ""} ${slugs.join(", ")} from agent ${id}?`);
+      const done = [];
+      for (const s of slugs) done.push(await api(ctx, "DELETE", `/agents/${id}/skills/${s}`));
+      const restarted = bool(ctx, "restart") ? await restartAgent(ctx, id) : null;
+      emit(ctx, { deleted: done.map((d) => d.deleted), restarted: !!restarted }, () => {
+        done.forEach((d) => console.log(`Removed ${d.deleted}`));
+        console.log(restarted ? "Restarted." : `It takes effect after: easybits agents restart ${id}`);
+      });
+    } else throw usageError(`Unknown skills action "${action}".`, SKILLS_USAGE);
+  }
+};
+var MCP_USAGE = "easybits agents mcp <get|set> <agent> [--file <servers.json|->] [--dry-run]";
+var mcp2 = {
+  summary: "The agent's own MCP servers: show them, or replace the whole list (restarts it)",
+  usage: MCP_USAGE,
+  options: {
+    file: { type: "string", value: "servers.json", description: "set: JSON array (or { servers }); - = stdin. [] removes all" },
+    "show-secrets": { type: "boolean", description: "get: print env/header values unmasked" },
+    ...DRY_RUN
+  },
+  examples: [
+    "easybits agents mcp get helper",
+    "easybits agents mcp get helper --json --show-secrets > servers.json",
+    "easybits agents mcp set helper --file servers.json --dry-run",
+    `echo '[{"name":"crm","type":"http","url":"https://crm.example.com/mcp","headers":[{"name":"Authorization","value":"$secret:CRM_TOKEN"}]}]' | easybits agents mcp set helper --file -`
+  ],
+  async run(ctx) {
+    const action = need(ctx, 0, "get|set", MCP_USAGE);
+    const id = need(ctx, 1, "agent", MCP_USAGE);
+    if (action === "get" || action === "ls") {
+      const servers = await getMcp(ctx, id);
+      const shown = bool(ctx, "show-secrets") ? servers : maskMcp(servers);
+      emit(
+        ctx,
+        { servers: shown },
+        () => table(shown.map((s) => ({ name: s.name, type: s.type ?? "stdio", target: s.url ?? [s.command, ...s.args ?? []].join(" ") })), [["name", "NAME"], ["type", "TYPE"], ["target", "URL / COMMAND"]], "No MCP servers.")
+      );
+      return;
+    }
+    if (action !== "set") throw usageError(`Unknown mcp action "${action}".`, MCP_USAGE);
+    const file = str(ctx, "file");
+    if (!file) throw usageError("Missing --file.", MCP_USAGE);
+    const next = parseMcpFile(await readLocalText(file, MCP_USAGE), MCP_USAGE);
+    if (hasMasked(next)) throw usageError("The file has masked values (\u2026***). Export with --show-secrets or use $secret:NAME references.", MCP_USAGE);
+    const cur = await getMcp(ctx, id);
+    const names = (l) => new Set(l.map((s) => s.name));
+    const diff = {
+      added: [...names(next)].filter((n) => !names(cur).has(n)),
+      removed: [...names(cur)].filter((n) => !names(next).has(n)),
+      changed: next.filter((s) => {
+        const c = cur.find((x) => x.name === s.name);
+        return c && JSON.stringify(c) !== JSON.stringify(s);
+      }).map((s) => s.name)
+    };
+    if (bool(ctx, "dry-run")) {
+      emit(ctx, { agentId: id, dryRun: true, ...diff, servers: maskMcp(next) }, () => {
+        console.log(`added: ${diff.added.join(", ") || "-"}
+removed: ${diff.removed.join(", ") || "-"}
+changed: ${diff.changed.join(", ") || "-"}`);
+        console.log("(dry run: nothing changed; a real set restarts the agent)");
+      });
+      return;
+    }
+    const r = await api(ctx, "PUT", `/agents/${id}/mcp`, { servers: next });
+    emit(
+      ctx,
+      { agentId: id, ...diff, servers: maskMcp(r.servers), restarted: true },
+      () => console.log(`MCP servers: ${r.servers.map((s) => s.name).join(", ") || "none"} (agent restarted, new session)`)
+    );
+  }
+};
+var restart = {
+  summary: "Restart the agent (picks up skills, MCP and prompt mode; starts a new session)",
+  usage: "easybits agents restart <agent>",
+  examples: ["easybits agents restart helper"],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const r = await restartAgent(ctx, id);
+    emit(ctx, { agentId: id, restarted: true, sandboxId: r.sandboxId }, () => console.log(`Restarted ${id}`));
+  }
+};
+var tryTurn = {
+  summary: "One full turn as text (no stream): verify what you just configured",
+  usage: "easybits agents try <agent> <text...> [--session <id>] [--reset]",
+  options: {
+    session: { type: "string", value: "id", description: "Continue this session (printed after each turn)" },
+    reset: { type: "boolean", description: "Start a fresh session" }
+  },
+  examples: ['easybits agents try helper "who are you and which skills do you have?"', 'easybits agents try helper "and the price?" --session s_123 --json'],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const text = ctx.args.slice(1).join(" ");
+    if (!text) throw usageError("Missing <text>.", this.usage);
+    let r;
+    try {
+      r = await api(ctx, "POST", `/agents/${id}/try`, { text, session: str(ctx, "session"), reset: bool(ctx, "reset") });
+    } catch (e) {
+      const err = toCliError(e);
+      if (err.status === 409) err.hint = "A turn is already running in that session. Wait, or use another --session.";
+      throw err;
+    }
+    emit(ctx, r, () => {
+      console.log(r.text || "(no text)");
+      if (r.error) console.error(`error: ${r.error}`);
+      console.error(r.session ? `session: ${r.session} \xB7 ${(r.ms / 1e3).toFixed(1)}s   (continue: --session ${r.session})` : `${(r.ms / 1e3).toFixed(1)}s`);
+    });
+  }
+};
+var logs = {
+  summary: "Read the journal of the agent's sandbox",
+  usage: "easybits agents logs <agent> [--unit <unit>] [--lines <n>] [--since <spec>] [--grep <text>]",
+  options: {
+    unit: { type: "string", value: "unit", description: "systemd unit to filter" },
+    lines: { type: "string", value: "n", description: "Last N lines (default 200)" },
+    since: { type: "string", value: "spec", description: 'journalctl time spec, e.g. "10 min ago"' },
+    grep: { type: "string", value: "text", description: "Only lines matching" }
+  },
+  examples: ["easybits agents logs helper --lines 50", "easybits agents logs helper --since '10 min ago' --grep error"],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const eb = await getClient(ctx);
+    const { box } = await agentBox(eb, id);
+    const r = await box.logs({ unit: str(ctx, "unit"), lines: int(ctx, "lines", this.usage), since: str(ctx, "since"), grep: str(ctx, "grep") });
+    emit(ctx, r, () => process.stdout.write(r.output.endsWith("\n") || !r.output ? r.output : r.output + "\n"));
+  }
+};
+var doctor = {
+  summary: "Check an agent: status, sandbox, prompt, skills frontmatter, MCP; exits 1 on a problem",
+  usage: "easybits agents doctor <agent>",
+  examples: ["easybits agents doctor helper", "easybits agents doctor helper --json | jq '.checks[] | select(.ok==false)'"],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const eb = await getClient(ctx);
+    const a = await eb.getAgent(id);
+    const checks = [];
+    const add = (c) => checks.push(c);
+    add({
+      check: "status",
+      ok: a.status === "running" || a.status === "suspended",
+      detail: a.status,
+      ...a.status === "lost" ? { hint: `Its sandbox is gone. Destroy it (easybits agents destroy ${id}) or recreate it (easybits agents create --from <export.json>).` } : {}
+    });
+    if (a.expiresAt) {
+      const left = new Date(a.expiresAt).getTime() - Date.now();
+      add({ check: "expires", ok: left > 0, detail: left > 0 ? `in ${Math.round(left / 6e4)} min` : `expired ${fmtDate(a.expiresAt)}` });
+    }
+    const sb = await soft(() => eb.sandboxes.get(a.sandboxId));
+    add(sb.ok ? { check: "sandbox", ok: sb.value.status !== "error", detail: `${a.sandboxId} ${sb.value.status}` } : { check: "sandbox", ok: false, detail: sb.error });
+    if (sb.ok && sb.value.status === "running") {
+      const p = await soft(() => getPrompt(ctx, id));
+      if (!p.ok && /agente_sin_maquina|no expone/.test(p.error)) {
+        add({ check: "machine", ok: true, detail: `template ${a.template} has no machine config (prompt/skills/MCP): nothing more to check` });
+      } else {
+        add(p.ok ? { check: "prompt", ok: p.value.systemPrompt.trim().length > 0, detail: `${Buffer.byteLength(p.value.systemPrompt)} bytes, ${p.value.systemPromptMode}`, ...p.value.systemPrompt.trim() ? {} : { hint: `Set one: easybits agents set ${id} --prompt-file PROMPT.md` } } : { check: "prompt", ok: false, detail: p.error });
+        const s = await soft(() => listSkills(sb.value));
+        if (s.ok) {
+          add({ check: "skills", ok: true, detail: s.value.length ? s.value.map((x) => x.slug).join(", ") : "none" });
+          for (const skill of s.value) {
+            const md = await soft(() => sb.value.files.read(`${SKILLS_DIR}/${skill.slug}/SKILL.md`));
+            const fm = md.ok ? skillFrontmatter(md.value.content) : { error: "no SKILL.md" };
+            if (fm.error) add({ check: `skill ${skill.slug}`, ok: false, detail: fm.error, hint: "The engine drops this skill silently. Fix SKILL.md and add it again." });
+          }
+        } else add({ check: "skills", ok: false, detail: s.error });
+        const m = await soft(() => getMcp(ctx, id));
+        add(m.ok ? { check: "mcp", ok: true, detail: m.value.length ? m.value.map((x) => x.name).join(", ") : "none" } : { check: "mcp", ok: false, detail: m.error });
+      }
+    }
+    const ok = checks.every((c) => c.ok);
+    emit(ctx, { agentId: id, ok, checks }, () => {
+      for (const c of checks) {
+        console.log(`${c.ok ? "ok  " : "FAIL"}  ${c.check.padEnd(14)} ${c.detail}`);
+        if (!c.ok && c.hint) console.log(`      ${"".padEnd(14)} \u2192 ${c.hint}`);
+      }
+      console.log(ok ? "\nNo problems found." : "\nProblems found.");
+    });
+    if (!ok) process.exitCode = EXIT.API;
+  }
+};
+async function buildExport(ctx, id, opts) {
+  const eb = await getClient(ctx);
+  const { agent, box } = await agentBox(eb, id);
+  const out = {
+    kind: "easybits.agent",
+    version: 1,
+    source: { agentId: agent.agentId, exportedAt: (/* @__PURE__ */ new Date()).toISOString() },
+    template: agent.template,
+    name: agent.name
+  };
+  const p = await soft(() => getPrompt(ctx, id));
+  if (!p.ok) {
+    if (/agente_sin_maquina|no expone/.test(p.error)) return out;
+    throw new CliError(`Could not read the agent's config: ${p.error}`, EXIT.API, `Is it running? easybits agents doctor ${id}`);
+  }
+  out.systemPrompt = p.value.systemPrompt;
+  out.systemPromptMode = p.value.systemPromptMode;
+  const servers = await getMcp(ctx, id);
+  out.mcpServers = opts.secrets ? servers : maskMcp(servers);
+  out.skills = [];
+  for (const s of await listSkills(box)) out.skills.push(await readSkill(box, s));
+  const { files: files3 } = await listFiles(ctx, id);
+  out.files = [];
+  for (const f of files3.filter((x) => x.path !== "CLAUDE.md")) {
+    out.files.push(opts.fileContents ? { ...f, contentBase64: (await box.files.read(`${WORK_DIR}/${f.path}`, { encoding: "base64" })).content } : f);
+  }
+  return out;
+}
+var exportAgent = {
+  summary: "Export an agent's setup as JSON (template, prompt, MCP, skills, files); never its env",
+  usage: "easybits agents export <agent> [--out <file>] [--show-secrets] [--with-files]",
+  options: {
+    out: { type: "string", value: "file", description: "Write to a file instead of stdout" },
+    "show-secrets": { type: "boolean", description: "Keep MCP env/header values unmasked (needed to re-create from the file)" },
+    "with-files": { type: "boolean", description: `Include the contents of ${WORK_DIR} (base64)` }
+  },
+  examples: [
+    "easybits agents export helper --out helper.json",
+    "easybits agents export helper --show-secrets --with-files --out helper.json && easybits agents create --from helper.json --name helper-2"
+  ],
+  async run(ctx) {
+    const id = need(ctx, 0, "agent", this.usage);
+    const x = await buildExport(ctx, id, { secrets: bool(ctx, "show-secrets"), fileContents: bool(ctx, "with-files") });
+    const out = str(ctx, "out");
+    if (out) {
+      writeFileSync4(out, JSON.stringify(x, null, 2) + "\n", { mode: bool(ctx, "show-secrets") ? 384 : 420 });
+      const summary = { out: resolve(out), template: x.template, skills: x.skills?.length ?? 0, mcpServers: x.mcpServers?.length ?? 0, files: x.files?.length ?? 0 };
+      emit(ctx, summary, () => console.log(`Exported ${id} to ${summary.out} (${summary.skills} skill(s), ${summary.mcpServers} MCP, ${summary.files} file(s))`));
+      return;
+    }
+    process.stdout.write(JSON.stringify(x, null, 2) + "\n");
+  }
+};
+function readExport(path, usage2) {
+  if (!existsSync6(path)) throw usageError(`File not found: ${path}`, usage2);
+  let x;
+  try {
+    x = JSON.parse(readFileSync6(path, "utf8"));
+  } catch (e) {
+    throw usageError(`${path} is not JSON: ${e.message}`, usage2);
+  }
+  if (x?.kind !== "easybits.agent" || !x.template) throw usageError(`${path} is not an agent export (easybits agents export).`, usage2);
+  return x;
+}
+async function waitMachine(ctx, id, ms = 12e4) {
+  const until = Date.now() + ms;
+  if (!ctx.json) process.stderr.write("Waiting for the agent's machine");
+  let last = "";
+  while (Date.now() < until) {
+    const p = await soft(() => getPrompt(ctx, id));
+    if (p.ok) {
+      if (!ctx.json) process.stderr.write(" ready\n");
+      return;
+    }
+    last = p.error;
+    if (!ctx.json) process.stderr.write(".");
+    await new Promise((r) => setTimeout(r, 3e3));
+  }
+  if (!ctx.json) process.stderr.write("\n");
+  throw new CliError(`Agent ${id} was created but its machine did not answer in ${ms / 1e3}s: ${last}`, EXIT.API, `Check it: easybits agents doctor ${id}`);
+}
+async function applyExport(ctx, id, x, opts) {
+  const copied = { skills: [], files: [], skippedFiles: [] };
+  for (const s of x.skills ?? []) {
+    await api(ctx, "PUT", `/agents/${id}/skills/${s.slug}`, { markdown: s.markdown, assets: s.assets });
+    copied.skills.push(s.slug);
+  }
+  if (opts.files) {
+    for (const f of x.files ?? []) {
+      if (f.contentBase64 == null) {
+        copied.skippedFiles.push(f.path);
+        continue;
+      }
+      await api(ctx, "PUT", `/agents/${id}/files/${encodePath(f.path)}`, Buffer.from(f.contentBase64, "base64"), { raw: true });
+      copied.files.push(f.path);
+    }
+  }
+  if (copied.skills.length) await restartAgent(ctx, id);
+  return copied;
+}
+
 // src/commands/agents.ts
 var agents = {
   name: "agents",
@@ -1683,58 +2434,99 @@ var agents = {
         );
       }
     },
-    get: {
-      aliases: ["show"],
-      summary: "Show one agent (by id or name)",
-      usage: "easybits agents get <agent>",
-      examples: ["easybits agents get helper", "easybits agents get 6650f0c2a1b2c3d4e5f60718 --json"],
-      async run(ctx) {
-        const id = need(ctx, 0, "agent", this.usage);
-        const eb = await getClient(ctx);
-        const a = await eb.getAgent(id);
-        emit(ctx, a, () => {
-          console.log(`ID:        ${a.agentId}`);
-          if (a.name) console.log(`Name:      ${a.name}`);
-          console.log(`Template:  ${a.template}`);
-          console.log(`Status:    ${a.status}`);
-          console.log(`Sandbox:   ${a.sandboxId}`);
-          console.log(`URL:       ${a.agentUrl}`);
-          console.log(`Created:   ${fmtDate(a.createdAt)}`);
-          console.log(`Expires:   ${a.expiresAt ? fmtDate(a.expiresAt) : "never"}`);
-        });
-      }
-    },
+    get,
     create: {
-      summary: "Create an agent from a template",
-      usage: "easybits agents create --template <template> [--name <name>] [--dotenv <path>] [--env K=V]... [--timeout <s>]",
+      aliases: ["new"],
+      summary: "Create an agent from a template, or clone one (--like / --from)",
+      usage: "easybits agents create (--template <template> | --like <agent> | --from <export.json>) [--name <name>] [--prompt <text> | --prompt-file <file>] [--prompt-mode append|replace] [--mcp-file <json>] [--copy-files] [--dotenv <path>] [--env K=V]... [--timeout <s>] [--dry-run]",
       options: {
         template: { type: "string", value: "template", description: "Agent template (see: easybits docs agents)" },
+        like: { type: "string", value: "agent", description: "Clone another agent's setup: template, prompt, MCP, skills (never its env)" },
+        from: { type: "string", value: "file", description: "Clone from `easybits agents export` output" },
         name: { type: "string", value: "name", description: "Label" },
+        prompt: { type: "string", value: "text", description: "System prompt (ghosty-lite, goose)" },
+        "prompt-file": { type: "string", value: "file", description: "System prompt from a file" },
+        "prompt-mode": { type: "string", value: "mode", description: "append (default) or replace the engine's prompt" },
+        "mcp-file": { type: "string", value: "json", description: "MCP servers: JSON array or { servers } (ACP templates)" },
+        "copy-files": { type: "boolean", description: `--like/--from: also copy the knowledge files in /data/work` },
         env: { type: "string", multiple: true, value: "K=V", description: "Env for the agent, non-secret (repeatable)" },
         ...ENV_FILE_OPTION,
-        timeout: { type: "string", value: "seconds", description: "Lifetime before auto-destroy" }
+        timeout: { type: "string", value: "seconds", description: "Lifetime before auto-destroy" },
+        "dry-run": { type: "boolean", description: "Print the plan; create nothing" }
       },
       examples: [
-        "easybits agents create --template goose --name helper",
+        "easybits agents create --template ghosty-lite --name helper --prompt-file PROMPT.md",
         "easybits agents create --template chat-anthropic --dotenv .env --json",
-        "op read op://vault/anthropic/env | easybits agents create --template chat-anthropic --dotenv -"
+        "easybits agents create --like helper --name helper-2 --dry-run",
+        "easybits agents create --like helper --name helper-2 --copy-files --dotenv .env",
+        "easybits agents create --from helper.json --name helper-3"
       ],
       async run(ctx) {
-        const template = str(ctx, "template");
-        if (!template) throw usageError("Missing --template.", this.usage);
+        const like = str(ctx, "like");
+        const from = str(ctx, "from");
+        if (like && from) throw usageError("Use --like or --from, not both.", this.usage);
+        const promptInline = str(ctx, "prompt");
+        const promptFile = str(ctx, "prompt-file");
+        if (promptInline != null && promptFile) throw usageError("Use --prompt or --prompt-file, not both.", this.usage);
+        const mode = str(ctx, "prompt-mode");
+        if (mode && mode !== "append" && mode !== "replace") throw usageError("--prompt-mode must be append or replace.", this.usage);
+        if (promptFile && !existsSync7(promptFile)) throw usageError(`File not found: ${promptFile}`, this.usage);
+        const mcpFile = str(ctx, "mcp-file");
+        if (mcpFile && !existsSync7(mcpFile)) throw usageError(`File not found: ${mcpFile}`, this.usage);
+        if (bool(ctx, "copy-files") && !like && !from) throw usageError("--copy-files needs --like or --from.", this.usage);
+        const source = from ? readExport(from, this.usage) : like ? await buildExport(ctx, await resolveRef(ctx, "agent", like), { secrets: true, fileContents: bool(ctx, "copy-files") }) : void 0;
+        const template = str(ctx, "template") ?? source?.template;
+        if (!template) throw usageError("Missing --template (or --like / --from).", this.usage);
         const env = await envFrom(ctx, this.usage);
-        const eb = await getClient(ctx);
-        const a = await eb.createAgent({
+        const prompt = promptInline ?? (promptFile ? readFileSync7(promptFile, "utf8") : source?.systemPrompt);
+        const promptMode = mode ?? source?.systemPromptMode;
+        const multiline = !!prompt && /[\r\n]/.test(prompt.trimEnd());
+        const promptAfter = multiline ? prompt : void 0;
+        if (multiline && !MACHINE_TEMPLATES.has(template)) {
+          throw usageError(`A multi-line prompt needs a template with a machine (${[...MACHINE_TEMPLATES].join(", ")}).`, this.usage);
+        }
+        if (prompt && !multiline) env.SYSTEM_PROMPT = prompt.trimEnd();
+        if (promptMode && (prompt || mode) && !multiline) env.SYSTEM_PROMPT_MODE = promptMode;
+        const mcpServers = mcpFile ? parseMcpFile(readFileSync7(mcpFile, "utf8"), this.usage) : source?.mcpServers;
+        if (mcpServers && hasMasked(mcpServers)) {
+          throw usageError(`${from ?? "the source"} has masked MCP values (\u2026***).`, "Re-export with --show-secrets, or pass --mcp-file");
+        }
+        const name = str(ctx, "name") ?? (source?.name ? `${source.name}-copy` : void 0);
+        const plan = {
           template,
-          name: str(ctx, "name"),
+          name: name ?? null,
+          envKeys: Object.keys(env),
+          promptBytes: prompt ? Buffer.byteLength(prompt) : 0,
+          promptMode: promptMode ?? null,
+          mcpServers: (mcpServers ?? []).map((s) => s.name),
+          skills: (source?.skills ?? []).map((s) => s.slug),
+          files: bool(ctx, "copy-files") ? (source?.files ?? []).map((f) => f.path) : [],
+          ...source ? { from: source.source.agentId } : {}
+        };
+        if (bool(ctx, "dry-run")) {
+          emit(ctx, { dryRun: true, ...plan }, () => {
+            for (const [k, v] of Object.entries(plan)) console.log(`${k.padEnd(12)} ${Array.isArray(v) ? v.join(", ") || "-" : v ?? "-"}`);
+            if (source) console.log("Env is never copied: pass the engine's keys with --dotenv.");
+            console.log("(dry run: nothing created)");
+          });
+          return;
+        }
+        const a = await api(ctx, "POST", "/agents", {
+          template,
+          name,
           env,
-          timeoutSeconds: int(ctx, "timeout", this.usage)
+          timeoutSeconds: int(ctx, "timeout", this.usage),
+          ...mcpServers?.length ? { mcpServers } : {}
         });
-        emit(ctx, a, () => {
+        if (promptAfter || source?.skills?.length || bool(ctx, "copy-files") && source?.files?.length) await waitMachine(ctx, a.agentId);
+        const copied = source ? await applyExport(ctx, a.agentId, source, { files: bool(ctx, "copy-files") }) : void 0;
+        if (promptAfter) await api(ctx, "PATCH", `/agents/${a.agentId}`, { systemPrompt: promptAfter, ...promptMode ? { systemPromptMode: promptMode } : {} });
+        emit(ctx, { ...a, ...copied ? { copied } : {} }, () => {
           console.log(`Agent:   ${a.agentId}`);
           console.log(`Sandbox: ${a.sandboxId}`);
           console.log(`URL:     ${a.agentUrl}`);
-          console.log(`Talk to it: easybits agents message ${a.agentId} "hello"`);
+          if (copied) console.log(`Copied:  ${copied.skills.length} skill(s), ${copied.files.length} file(s)${copied.skippedFiles.length ? ` (${copied.skippedFiles.length} skipped: export without --with-files)` : ""}`);
+          console.log(`Talk to it: easybits agents try ${a.agentId} "hello"`);
         });
       }
     },
@@ -1773,13 +2565,22 @@ var agents = {
         const r = await eb.destroyAgent(id);
         emit(ctx, { ...r, agentId: id }, () => console.log(`Destroyed ${id}`));
       }
-    }
+    },
+    set,
+    files: files2,
+    skills,
+    mcp: mcp2,
+    restart,
+    try: tryTurn,
+    logs,
+    doctor,
+    export: exportAgent
   }
 };
 
 // src/commands/docs.ts
 import { spawn as spawn2 } from "child_process";
-import { resolveBaseUrl as resolveBaseUrl4 } from "@easybits.cloud/sdk";
+import { resolveBaseUrl as resolveBaseUrl5 } from "@easybits.cloud/sdk";
 var docs = {
   name: "docs",
   group: "Help",
@@ -1794,7 +2595,7 @@ var docs = {
     },
     examples: ["easybits docs", "easybits docs cli --en", "easybits docs hosting", "easybits docs --open"],
     async run(ctx) {
-      const base = await resolveBaseUrl4();
+      const base = await resolveBaseUrl5();
       const prefix = bool(ctx, "en") ? "/en/docs" : "/docs";
       const section = ctx.args[0];
       if (!section) {
@@ -1823,10 +2624,131 @@ var docs = {
   }
 };
 
+// src/commands/doctor.ts
+import { existsSync as existsSync8, statSync as statSync3 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join5 } from "path";
+import { resolveBaseUrl as resolveBaseUrl6 } from "@easybits.cloud/sdk";
+
+// src/update.ts
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { dirname as dirname2, join as join4 } from "path";
+var FILE = join4(process.env.XDG_CONFIG_HOME || join4(homedir3(), ".config"), "easybits", "update.json");
+var DAY = 24 * 60 * 60 * 1e3;
+var UPGRADE = "npm i -g @easybits.cloud/cli@latest";
+function newer(a, b) {
+  const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
+  const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
+  for (let i = 0; i < 3; i++) if ((pa[i] ?? 0) !== (pb[i] ?? 0)) return (pa[i] ?? 0) > (pb[i] ?? 0);
+  return false;
+}
+var updateCheckDisabled = () => Boolean(process.env.EASYBITS_NO_UPDATE_CHECK || process.env.CI);
+function readCache() {
+  try {
+    return JSON.parse(readFileSync8(FILE, "utf8"));
+  } catch {
+    return {};
+  }
+}
+async function fetchLatest(timeoutMs = 1500) {
+  try {
+    const r = await fetch("https://registry.npmjs.org/@easybits.cloud/cli/latest", { signal: AbortSignal.timeout(timeoutMs) });
+    const latest = (await r.json()).version;
+    if (!latest) return null;
+    mkdirSync4(dirname2(FILE), { recursive: true });
+    writeFileSync5(FILE, JSON.stringify({ latest, checkedAt: Date.now() }));
+    return latest;
+  } catch {
+    return null;
+  }
+}
+async function latestVersion() {
+  if (updateCheckDisabled()) return null;
+  const c = readCache();
+  if (c.latest && c.checkedAt && Date.now() - c.checkedAt < DAY) return c.latest;
+  return await fetchLatest() ?? c.latest ?? null;
+}
+function cachedNewer(current) {
+  if (updateCheckDisabled() || current === "dev") return null;
+  const l = readCache().latest;
+  return l && newer(l, current) ? l : null;
+}
+async function updateNotice(current) {
+  if (current === "dev") return null;
+  const latest = await latestVersion();
+  return latest && newer(latest, current) ? `Update available: ${current} \u2192 ${latest}. Run: ${UPGRADE}` : null;
+}
+
+// src/commands/doctor.ts
+var VERSION = true ? "0.9.0" : "dev";
+var doctor2 = {
+  name: "doctor",
+  group: "Account",
+  summary: "Check the CLI setup: Node, version, credential, API; exits 1 on a problem",
+  synopsis: "doctor",
+  leaf: {
+    summary: "Check Node, the CLI version, your credential and the API; exits 1 on a problem",
+    usage: "easybits doctor",
+    examples: ["easybits doctor", "easybits doctor --json | jq '.checks[] | select(.ok==false)'", "easybits agents doctor <agent>   # one agent"],
+    async run(ctx) {
+      const checks = [];
+      const major = Number(process.versions.node.split(".")[0]);
+      checks.push({ check: "node", ok: major >= 22, detail: process.versions.node, ...major >= 22 ? {} : { hint: "The CLI needs Node 22 or newer." } });
+      if (updateCheckDisabled()) checks.push({ check: "version", ok: true, detail: `${VERSION} (update check off)` });
+      else {
+        const latest = await fetchLatest(3e3);
+        const old = latest && VERSION !== "dev" && newer(latest, VERSION);
+        checks.push({
+          check: "version",
+          ok: !old,
+          detail: latest ? `${VERSION}${old ? ` (latest ${latest})` : " (latest)"}` : `${VERSION} (npm unreachable)`,
+          ...old ? { hint: `Run: ${UPGRADE}` } : {}
+        });
+      }
+      const base = await resolveBaseUrl6();
+      const health = await fetch(`${base.replace(/\/+$/, "")}/api/health`, { signal: AbortSignal.timeout(5e3) }).then((r) => ({ ok: r.ok, detail: `${base} (${r.status})` })).catch((e) => ({ ok: false, detail: `${base}: ${e.message}` }));
+      checks.push({ check: "api", ...health, ...health.ok ? {} : { hint: "Check your network or EASYBITS_URL." } });
+      const rc = readRc();
+      const source = process.env.EASYBITS_API_KEY ? "env EASYBITS_API_KEY" : ctx.token ? "--token" : rc.oauth?.accessToken ? "browser session (~/.easybitsrc)" : rc.apiKey ? "API key (~/.easybitsrc)" : null;
+      if (!source) checks.push({ check: "credential", ok: false, detail: "not logged in", hint: "Run: easybits login   (or set EASYBITS_API_KEY)" });
+      else {
+        try {
+          const email = await fetchEmail(await resolveCredential(ctx));
+          checks.push({ check: "credential", ok: true, detail: `${email ?? "(unknown email)"} via ${source}` });
+        } catch (e) {
+          const err = toCliError(e);
+          checks.push({ check: "credential", ok: false, detail: `${source}: ${err.message}`, hint: err.hint });
+        }
+        if (process.env.EASYBITS_API_KEY && (rc.apiKey || rc.oauth)) {
+          checks.push({ check: "credential-env", ok: true, detail: "EASYBITS_API_KEY wins over the saved login in ~/.easybitsrc" });
+        }
+      }
+      const rcPath = join5(homedir4(), ".easybitsrc");
+      if (existsSync8(rcPath)) {
+        const mode = statSync3(rcPath).mode & 511;
+        const ok2 = (mode & 63) === 0;
+        checks.push({ check: "rc-file", ok: ok2, detail: `${rcPath} ${mode.toString(8).padStart(3, "0")}`, ...ok2 ? {} : { hint: `It holds tokens. Run: chmod 600 ${rcPath}` } });
+      }
+      const ok = checks.every((c) => c.ok);
+      emit(ctx, { ok, checks }, () => {
+        for (const c of checks) {
+          console.log(`${c.ok ? "ok  " : "FAIL"}  ${c.check.padEnd(14)} ${c.detail}`);
+          if (!c.ok && c.hint) console.log(`      ${"".padEnd(14)} \u2192 ${c.hint}`);
+        }
+        console.log(ok ? "\nAll good." : "\nProblems found.");
+      });
+      if (!ok) process.exitCode = EXIT.API;
+    }
+  }
+};
+
 // src/commands/index.ts
 var COMMANDS = [
   login,
   logout,
+  whoami,
+  doctor2,
   usage,
   sandboxes,
   agents,
@@ -1837,7 +2759,6 @@ var COMMANDS = [
   files,
   websites,
   providers,
-  config,
   mcp,
   sshKey,
   sshProxy,
@@ -1879,13 +2800,18 @@ var GLOBAL_FLAGS = `Global flags:
   -h, --help       Help (also: easybits <command> --help)
   -v, --version    Print the CLI version
 
+Naming (like gh): noun then verb \u2014 easybits <noun> <verb>. Old spellings still work
+and print the new one on stderr (never with --json).
+
 Names or ids: agents, sandboxes/machines and databases take either
 (exact, case-insensitive; two with the same name \u2192 exit 2 with the ids).
 
-Deletes (sandboxes destroy, agents destroy, db rm, domains rm, files delete) ask first;
-without a terminal or with --json pass -y/--yes, or they exit 2.
+Deletes (sandboxes destroy, agents destroy, db rm, domains rm, files rm, agents files|skills rm)
+ask first; without a terminal or with --json pass -y/--yes, or they exit 2.
+Agent writes (agents set|create|files|skills|mcp) take --dry-run: show the change, touch nothing.
 
-Env: EASYBITS_API_KEY (API key), EASYBITS_URL (API server, default https://www.easybits.cloud)
+Env: EASYBITS_API_KEY (API key), EASYBITS_URL (API server, default https://www.easybits.cloud),
+     EASYBITS_NO_UPDATE_CHECK=1 (no daily "update available" notice on stderr)
 
 Exit codes: 0 ok, 1 API error, 2 usage error, 3 not logged in or bad key`;
 var COL = 17;
@@ -1897,7 +2823,16 @@ function globalHelp(version) {
     lines.push(`${group}:`);
     for (const c of cmds) {
       lines.push(`  ${c.synopsis.padEnd(COL)}${c.summary}`);
-      if (c.subs) lines.push(`  ${"".padEnd(COL)}${Object.keys(c.subs).join(" ")}`);
+      if (c.subs) {
+        let row = "";
+        for (const n of Object.keys(c.subs)) {
+          if (row && row.length + 1 + n.length > 80 - 2 - COL) {
+            lines.push(`  ${"".padEnd(COL)}${row}`);
+            row = n;
+          } else row = row ? `${row} ${n}` : n;
+        }
+        if (row) lines.push(`  ${"".padEnd(COL)}${row}`);
+      }
     }
     lines.push("");
   }
@@ -1941,8 +2876,72 @@ function indent(s, n) {
 var BANNER = "            \x1B[38;2;244;245;251m\u2860\u2812\u2812\u28E4\x1B[38;2;152;112;237m\u28C0\u28C0\u2840    \x1B[38;2;244;245;251m\u28FF\u28FF\u28FF\u28FF\u28FF\u28FF                       \u28FF\u28FF\u28FF\u28FF\u28FF\u28FF\u28E4 \u28FF\u28FF  \u28E4\u28FF\x1B[0m\n    \x1B[38;2;244;245;251m\u28A0\u2854\u2809\u2809\u2809\u2822\u2840\u285E\x1B[38;2;152;112;237m\u2880\u2874\u288B\u282D\x1B[38;2;244;245;251m\u2809\u28AF\x1B[38;2;152;112;237m\u28FD\u28F7\u2844  \x1B[38;2;244;245;251m\u28FF\u28FF     \u28E4\u28FF\u28FF\u28FF\u28FF\u28FF\u28E4 \u28E4\u28FF\u28FF\u28FF\u28FF\u28E4 \u28FF\u28FF  \u28FF\u28FF \u28FF\u28FF   \u28FF\u28FF \u28E4\u28E4 \u28E4\u28FF\u28FF\u28E4\u28E4 \u28E4\u28FF\u28FF\u28FF\u28FF\u28E4\x1B[0m\n   \x1B[38;2;152;112;237m\u2880\x1B[38;2;244;245;251m\u28FF\x1B[38;2;152;112;237m\u289B\u280D\u2809\u2899\u2873\u28FC\u2857\u28FE\u28B0\x1B[38;2;244;245;251m\u28A1\u28F6\u28E4\u2818\u2846 \x1B[38;2;152;112;237m\u28BB  \x1B[38;2;244;245;251m\u28FF\u28FF\u28FF\u28FF\u28FF   \u28E4\u28E4\u28E4\u28E4\u28FF\u28FF \u28FF\u28FF\u28E4\u28E4\u28E4  \u28FF\u28FF  \u28FF\u28FF \u28FF\u28FF\u28FF\u28FF\u28FF\u28FF\u28E4 \u28FF\u28FF \u281B\u28FF\u28FF\u281B\u281B \u28FF\u28FF\u28E4\u28E4\u28E4\x1B[0m\n\x1B[38;2;152;112;237m\u28E4\u28C4\u28C0\u28FF\x1B[38;2;244;245;251m\u28DF\x1B[38;2;152;112;237m\u2801  \x1B[38;2;244;245;251m\u28FE\u28FF\u280E\x1B[38;2;152;112;237m\u28E7\u28BF\u284C\x1B[38;2;244;245;251m\u2808\u2819\u280B \u2847\x1B[38;2;152;112;237m\u2880\u287E  \x1B[38;2;244;245;251m\u28FF\u28FF     \u28FF\u28FF\u281B\u281B\u281B\u28FF\u28FF  \u281B\u281B\u281B\u28FF\u28FF \u281B\u28FF\u28FF\u28E4\u28FF\u28FF \u28FF\u28FF   \u28FF\u28FF \u28FF\u28FF  \u28FF\u28FF    \u281B\u281B\u281B\u28FF\u28FF\x1B[0m\n\x1B[38;2;152;112;237m\u2801 \u2808\u28E7\x1B[38;2;244;245;251m\u28BF\u28C6   \u2809\x1B[38;2;152;112;237m\u2880\u285F\x1B[38;2;244;245;251m\u28E7\x1B[38;2;152;112;237m\u2859\u2832\u28A4\u28E4\u2874\u2835\u280B   \x1B[38;2;244;245;251m\u28FF\u28FF\u28FF\u28FF\u28FF\u28FF \u281B\u28FF\u28FF\u28FF\u281B\u28FF\u28FF \u281B\u28FF\u28FF\u28FF\u28FF\u281B  \u28E4\u28FF\u28FF\u281B  \u28FF\u28FF\u28FF\u28FF\u28FF\u28FF\u281B \u28FF\u28FF  \u281B\u28FF\u28FF\u28FF \u281B\u28FF\u28FF\u28FF\u28FF\u281B\x1B[0m\n   \x1B[38;2;152;112;237m\u2808\u283B\x1B[38;2;244;245;251m\u28BF\u28E6\x1B[38;2;152;112;237m\u28C0\u28E0\u28F4\u281F\x1B[38;2;244;245;251m\u2801\u2808\u2819\u2833\u2836\u280A                            \u28FF\u28FF\u281B\x1B[0m\n      \x1B[38;2;244;245;251m\u2808\u2809\u2809\u2801\x1B[0m";
 
 // src/index.ts
-import { EasybitsError as EasybitsError2 } from "@easybits.cloud/sdk";
-var VERSION = true ? "0.7.0" : "dev";
+import { EasybitsError as EasybitsError3 } from "@easybits.cloud/sdk";
+
+// src/aliases.ts
+function positionals(argv2) {
+  const out = [];
+  for (let i = 0; i < argv2.length; i++) {
+    const a = argv2[i];
+    if (a === "--") break;
+    if (a === "--token") {
+      i++;
+      continue;
+    }
+    if (a.startsWith("-") && a !== "-") continue;
+    out.push(i);
+  }
+  return out;
+}
+var MACHINE_SUBS = ["ls", "list", "deploy", "release", "releases", "logs", "rollback", "secrets"];
+var SANDBOX_NAMES = ["sandboxes", "sandbox", "sb"];
+function normalizeArgs(input) {
+  const argv2 = [...input];
+  const notes = [];
+  const end = argv2.indexOf("--");
+  const head = end === -1 ? argv2 : argv2.slice(0, end);
+  const help = head.includes("--help") || head.includes("-h");
+  let pos = positionals(argv2);
+  const at = (n) => pos[n] != null ? argv2[pos[n]] : void 0;
+  if (at(0) === "config") {
+    argv2.splice(pos[0], 1, "mcp", "config");
+    notes.push("`easybits config` is now `easybits mcp config`.");
+  } else if (at(0) === "mcp" && at(1) == null && !help) {
+    argv2.splice(pos[0] + 1, 0, "config");
+    argv2.push("--stdio");
+    notes.push("`easybits mcp` is now `easybits mcp config --stdio`.");
+  }
+  if (at(0) === "deploy") {
+    const sub = at(1);
+    if (sub && MACHINE_SUBS.includes(sub) && sub !== "deploy") {
+      argv2[pos[0]] = "machines";
+      notes.push(`\`easybits deploy ${sub}\` is now \`easybits machines ${sub}\`.`);
+    } else if (sub === "deploy") {
+      argv2[pos[0]] = "machines";
+      notes.push("`easybits deploy deploy` is now `easybits deploy <machine>`.");
+    } else {
+      argv2.splice(pos[0], 1, "machines", "deploy");
+    }
+    pos = positionals(argv2);
+  }
+  if ((at(0) === "machines" || at(0) === "machine") && at(1) === "release") {
+    argv2[pos[1]] = "deploy";
+    notes.push("`machines release` is now `machines deploy`.");
+  }
+  if (SANDBOX_NAMES.includes(at(0) ?? "") && (at(1) === "create" || at(1) === "new")) {
+    const stop = argv2.indexOf("--");
+    for (let i = 0; i < (stop === -1 ? argv2.length : stop); i++) {
+      if (argv2[i] === "--timeout" || argv2[i].startsWith("--timeout=")) {
+        argv2[i] = argv2[i].replace("--timeout", "--ttl");
+        notes.push("`sandboxes create --timeout` is now `--ttl` (`--timeout` stays for `exec`).");
+      }
+    }
+  }
+  return { argv: argv2, notes };
+}
+
+// src/index.ts
+var VERSION2 = true ? "0.9.0" : "dev";
 var GLOBAL_OPTIONS = {
   json: { type: "boolean" },
   token: { type: "string" },
@@ -1974,13 +2973,13 @@ function positionalIndexes(argv2) {
 function parse(argv2, skip, leaf) {
   const rest = argv2.filter((_, i) => !skip.includes(i));
   try {
-    const { values, positionals } = parseArgs({
+    const { values, positionals: positionals2 } = parseArgs({
       args: rest,
       options: { ...GLOBAL_OPTIONS, ...leaf?.options ?? {} },
       allowPositionals: true,
       strict: true
     });
-    return { values, positionals };
+    return { values, positionals: positionals2 };
   } catch (e) {
     throw usageError(e.message.split("\n")[0].split(". To specify")[0].replace(/\.?$/, "."), leaf?.usage);
   }
@@ -2004,7 +3003,15 @@ function unknownSub(cmd, name) {
 ${e.hint}`;
   return e;
 }
-async function main(argv2) {
+function aliasNote(note) {
+  const dim = process.stderr.isTTY && !process.env.NO_COLOR;
+  process.stderr.write(dim ? `\x1B[2m${note}\x1B[0m
+` : `${note}
+`);
+}
+async function main(input) {
+  const { argv: argv2, notes } = normalizeArgs(input);
+  if (!wantsJson(argv2)) notes.forEach(aliasNote);
   const pos = positionalIndexes(argv2);
   const cmdName = pos.length ? argv2[pos[0]] : void 0;
   if (!cmdName || cmdName === "help") {
@@ -2016,7 +3023,7 @@ async function main(argv2) {
     if (topic && subName && !sub) throw unknownSub(topic, subName);
     const { values: values2 } = parse(argv2, pos.slice(0, sub ? 3 : 2), void 0);
     if (values2.version) {
-      console.log(VERSION);
+      console.log(VERSION2);
       return;
     }
     if (sub) {
@@ -2028,7 +3035,7 @@ async function main(argv2) {
       return;
     }
     showBanner(values2.json === true);
-    console.log(globalHelp(VERSION));
+    console.log(globalHelp(VERSION2));
     return;
   }
   const cmd = findCommand(cmdName);
@@ -2052,9 +3059,9 @@ async function main(argv2) {
       throw usageError(`Missing subcommand for "${cmd.name}".`, `easybits ${cmd.name} <${Object.keys(cmd.subs).join("|")}>`);
     }
   }
-  const { values, positionals } = parse(argv2, skip, leaf);
+  const { values, positionals: positionals2 } = parse(argv2, skip, leaf);
   if (values.version) {
-    console.log(VERSION);
+    console.log(VERSION2);
     return;
   }
   if (values.help || !leaf) {
@@ -2064,7 +3071,7 @@ async function main(argv2) {
   const ctx = {
     json: values.json === true,
     token: typeof values.token === "string" ? values.token : void 0,
-    args: positionals,
+    args: positionals2,
     opts: values
   };
   const refKey = `${cmd.name} ${subKey ?? ""}`.trim();
@@ -2076,7 +3083,7 @@ async function main(argv2) {
   try {
     await run();
   } catch (e) {
-    if (e instanceof EasybitsError2 && e.status === 401 && usedSession() && await forceRefresh()) {
+    if (e instanceof EasybitsError3 && e.status === 401 && usedSession() && await forceRefresh()) {
       await run();
       return;
     }
@@ -2084,8 +3091,11 @@ async function main(argv2) {
   }
 }
 var argv = process.argv.slice(2);
+var notice = process.stderr.isTTY && !wantsJson(argv) && !argv.includes("doctor") ? updateNotice(VERSION2) : null;
 main(argv).catch((err) => {
   const e = toCliError(err);
+  const latest = e.code === "usage" ? cachedNewer(VERSION2) : null;
+  if (latest) e.hint = `${e.hint ? e.hint + "\n" : ""}You have ${VERSION2}; ${latest} is out and may have it. Run: ${UPGRADE}`;
   if (wantsJson(argv)) {
     process.stdout.write(JSON.stringify({ error: e.message, code: e.exitCode, ...e.hint ? { hint: e.hint } : {} }) + "\n");
   } else {
@@ -2095,4 +3105,8 @@ main(argv).catch((err) => {
 `);
   }
   process.exitCode = e.exitCode || EXIT.API;
+}).then(() => notice).then((line) => {
+  if (line) process.stderr.write(`
+${line}
+`);
 });