@easybits.cloud/cli 0.9.0 → 0.10.0

package/README.md

@@ -90,8 +90,10 @@ easybits agents mcp get|set helper [--file servers.json|-]   # set replaces the
 easybits agents restart helper
 easybits agents try helper "who are you?"      # one full turn as text: verify what you set up
 easybits agents logs helper --since "10 min ago"
-easybits agents doctor helper                   # exits 1 on a problem
-easybits agents export helper --out helper.json [--show-secrets] [--with-files]
+easybits agents doctor helper                   # exits 1 on a problem; status "error" shows why it did not start
+easybits agents export helper --out ./helper      # the agent as a folder: agent.yaml + skills/ + files/
+easybits apply ./helper --dry-run                 # after editing: the plan (+ ~ - !); --prune also removes
+easybits apply ./helper --create --name helper-2  # a new agent from the folder
 easybits agents create --like helper --name helper-2 [--copy-files] --dry-run   # clone its setup, never its env
 easybits agents create --from helper.json --name helper-3
 
@@ -157,6 +159,15 @@ Host *.ghosty
 
 Full reference: https://www.easybits.cloud/docs#cli · https://www.easybits.cloud/en/docs/cli.md
 
+## Changes in 0.10.0
+
+- **The agent as a file**: `agents export <agent> [--out DIR|file.yaml|file.json]` and
+  `easybits apply <file|dir> [--agent X] [--create] [--prune] [--dry-run] [--yes]`. Declarative
+  plan computed by the server (`+ ~ - !`; removing needs `--prune`), secrets exported as `${NAME}`
+  and filled from your environment, previous file saved to `~/.easybits/backups/`.
+  `create --from <file>` accepts the new files too.
+- `agents create --timeout` is now `--ttl` (the old flag still works and says so).
+
 ## Changes in 0.9.0
 
 - Configure agents with a machine (ghosty-lite, goose) from the terminal, same contract as

package/dist/index.js

@@ -134,9 +134,9 @@ async function readEnvFile(path, usage2) {
   }
   const out = {};
   for (const [n, raw] of text.split(/\r?\n/).entries()) {
-    const line = raw.trim();
-    if (!line || line.startsWith("#")) continue;
-    const m = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_.-]*)\s*=\s*(.*)$/.exec(line);
+    const line2 = raw.trim();
+    if (!line2 || line2.startsWith("#")) continue;
+    const m = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_.-]*)\s*=\s*(.*)$/.exec(line2);
     if (!m) throw usageError(`${path === "-" ? "stdin" : path}:${n + 1}: expected KEY=VALUE.`, usage2);
     let v = m[2];
     if (v.length >= 2 && (v[0] === '"' || v[0] === "'") && v.endsWith(v[0])) v = v.slice(1, -1);
@@ -175,9 +175,9 @@ function table(rows, cols, empty = "Nothing here yet.") {
   const widths = cols.map(
     ([k, label]) => Math.min(48, Math.max(label.length, ...rows.map((r) => cell(r[k]).length)))
   );
-  const line = (vals) => vals.map((v, i) => i === vals.length - 1 ? v : v.slice(0, widths[i]).padEnd(widths[i])).join("  ").trimEnd();
-  console.log(line(cols.map(([, l]) => l)));
-  for (const r of rows) console.log(line(cols.map(([k]) => cell(r[k]))));
+  const line2 = (vals) => vals.map((v, i) => i === vals.length - 1 ? v : v.slice(0, widths[i]).padEnd(widths[i])).join("  ").trimEnd();
+  console.log(line2(cols.map(([, l]) => l)));
+  for (const r of rows) console.log(line2(cols.map(([k]) => cell(r[k]))));
 }
 function pickFields(rec, fields) {
   if (!fields?.length) return rec;
@@ -260,7 +260,7 @@ async function oauthLogin(ctx, opts = {}) {
   const challenge = b64url(createHash("sha256").update(verifier).digest());
   const state = b64url(randomBytes(16));
   const server = createServer();
-  await new Promise((resolve2) => server.listen(0, "127.0.0.1", resolve2));
+  await new Promise((resolve3) => server.listen(0, "127.0.0.1", resolve3));
   const port = server.address().port;
   const redirectUri = `http://127.0.0.1:${port}/cb`;
   try {
@@ -274,7 +274,7 @@ async function oauthLogin(ctx, opts = {}) {
       code_challenge: challenge,
       code_challenge_method: "S256"
     });
-    const code = await new Promise((resolve2, reject) => {
+    const code = await new Promise((resolve3, reject) => {
       const timer = setTimeout(
         () => reject(new CliError("Login timed out after 5 minutes.", EXIT.AUTH, "Run: easybits login", "login_timeout")),
         LOGIN_TIMEOUT_MS
@@ -290,7 +290,7 @@ async function oauthLogin(ctx, opts = {}) {
         clearTimeout(timer);
         if (ok) {
           res.writeHead(302, { location: `${base}/oauth/listo` }).end();
-          resolve2(got);
+          resolve3(got);
         } else {
           res.writeHead(400, { "content-type": "text/html; charset=utf-8" }).end(FAIL_PAGE(base));
           reject(
@@ -950,8 +950,8 @@ var sshProxy = {
       const { url } = await sb.sshTicket();
       const ws = new WebSocket(url);
       ws.binaryType = "arraybuffer";
-      await new Promise((resolve2, reject) => {
-        ws.onopen = () => resolve2();
+      await new Promise((resolve3, reject) => {
+        ws.onopen = () => resolve3();
         ws.onerror = () => reject(new CliError("easybits ssh-proxy: could not open the tunnel"));
       });
       ws.onerror = () => {
@@ -1673,7 +1673,7 @@ var db = {
 };
 
 // src/commands/agents.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync9, statSync as statSync4 } from "fs";
 
 // src/api.ts
 import { EasybitsError as EasybitsError2, resolveBaseUrl as resolveBaseUrl4 } from "@easybits.cloud/sdk";
@@ -1722,9 +1722,9 @@ function skillFrontmatter(md) {
   if (!m) return { error: "SKILL.md has no frontmatter (--- name / description ---)" };
   const out = {};
   for (const key of ["name", "description"]) {
-    const line = m[1].split(/\r?\n/).find((l) => l.startsWith(`${key}:`));
-    if (!line) return { ...out, error: `frontmatter has no \`${key}:\`` };
-    const value = line.slice(key.length + 1).trim();
+    const line2 = m[1].split(/\r?\n/).find((l) => l.startsWith(`${key}:`));
+    if (!line2) return { ...out, error: `frontmatter has no \`${key}:\`` };
+    const value = line2.slice(key.length + 1).trim();
     if (!value) return { ...out, error: `\`${key}:\` is empty` };
     const quoted = /^(["']).*\1$/.test(value);
     if (!quoted && value.includes(": ")) return { ...out, error: `\`${key}:\` has an unquoted ": " \u2014 quote the value or the skill is dropped` };
@@ -1803,6 +1803,7 @@ var GET_FIELDS = [
   "name",
   "template",
   "status",
+  "lastError",
   "sandboxId",
   "agentUrl",
   "embedToken",
@@ -1890,11 +1891,14 @@ ${rec.systemPrompt.trimEnd()}`);
     });
   }
 };
+var startError = (a) => a.status === "error" ? a.lastError ?? null : null;
 function printAgent(a) {
   console.log(`ID:        ${a.agentId}`);
   if (a.name) console.log(`Name:      ${a.name}`);
   console.log(`Template:  ${a.template}`);
   console.log(`Status:    ${a.status}`);
+  const reason = startError(a);
+  if (reason) console.log(`Error:     ${reason}`);
   console.log(`Sandbox:   ${a.sandboxId}`);
   console.log(`URL:       ${a.agentUrl}`);
   console.log(`Token:     ${maskSecret(a.embedToken ?? "")}   (full value: --fields embedToken --json)`);
@@ -2267,7 +2271,8 @@ var doctor = {
     add({
       check: "status",
       ok: a.status === "running" || a.status === "suspended",
-      detail: a.status,
+      detail: startError(a) ? `error: ${startError(a)}` : a.status,
+      ...a.status === "error" ? { hint: `Its runtime did not start. Fix the cause, then: easybits agents restart ${id}` } : {},
       ...a.status === "lost" ? { hint: `Its sandbox is gone. Destroy it (easybits agents destroy ${id}) or recreate it (easybits agents create --from <export.json>).` } : {}
     });
     if (a.expiresAt) {
@@ -2407,7 +2412,240 @@ async function applyExport(ctx, id, x, opts) {
   return copied;
 }
 
+// src/commands/spec.ts
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync8, statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
+import { homedir as homedir3 } from "os";
+import { dirname as dirname2, join as join5, resolve as resolve2 } from "path";
+
+// src/specfile.ts
+import { existsSync as existsSync7, readFileSync as readFileSync7, readdirSync as readdirSync2 } from "fs";
+import { join as join4, relative as relative2 } from "path";
+function walkLocal(root) {
+  const out = [];
+  const visit = (d) => {
+    for (const e of readdirSync2(d, { withFileTypes: true })) {
+      if (e.name.startsWith(".") || e.name === "node_modules") continue;
+      const p = join4(d, e.name);
+      if (e.isDirectory()) visit(p);
+      else if (e.isFile()) out.push(relative2(root, p).split("\\").join("/"));
+    }
+  };
+  if (existsSync7(root)) visit(root);
+  return out;
+}
+function readUploads(dir) {
+  const skills2 = {};
+  const skillsRoot = join4(dir, "skills");
+  if (existsSync7(skillsRoot)) {
+    for (const e of readdirSync2(skillsRoot, { withFileTypes: true })) {
+      if (!e.isDirectory() || e.name.startsWith(".")) continue;
+      skills2[e.name] = walkLocal(join4(skillsRoot, e.name)).map((path) => ({ path, contentBase64: readFileSync7(join4(skillsRoot, e.name, path)).toString("base64") }));
+    }
+  }
+  const filesRoot = join4(dir, "files");
+  const files3 = Object.fromEntries(walkLocal(filesRoot).map((p) => [p, readFileSync7(join4(filesRoot, p)).toString("base64")]));
+  return { ...Object.keys(skills2).length ? { skills: skills2 } : {}, ...Object.keys(files3).length ? { files: files3 } : {} };
+}
+function secretsFor(text, env = process.env) {
+  const names = [...new Set([...text.matchAll(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g)].map((m) => m[1]))];
+  const secrets = {};
+  const missing = [];
+  for (const n of names) env[n] !== void 0 ? secrets[n] = env[n] : missing.push(n);
+  return { secrets, missing };
+}
+function specId(text) {
+  return /^id:\s*["']?([^"'\s#]+)/m.exec(text)?.[1] ?? /^\s{0,2}"id"\s*:\s*"([^"]+)"/m.exec(text)?.[1];
+}
+
+// src/commands/spec.ts
+var SPEC_NAMES = ["agent.yaml", "agent.yml", "agent.json"];
+var isFileTarget = (p) => /\.(ya?ml|json)$/i.test(p);
+var exportSpec = {
+  summary: "Export an agent as a file you can edit and apply (secrets as ${NAME}, never their value)",
+  usage: "easybits agents export <agent> [--out <dir | file.yaml | file.json>]",
+  options: {
+    out: { type: "string", value: "path", description: "A folder (agent.yaml + skills/ + files/) or a .yaml/.json file" },
+    // El formato de clonado de 0.9 (JSON con contenidos), para `create --from` viejo.
+    "show-secrets": { type: "boolean", description: "Legacy clone JSON (0.9) with MCP values unmasked" },
+    "with-files": { type: "boolean", description: "Legacy clone JSON (0.9) with the file contents" }
+  },
+  examples: [
+    "easybits agents export helper > helper.yaml",
+    "easybits agents export helper --out ./helper      # agent.yaml + skills/ + files/, versionable in git",
+    "easybits apply ./helper --dry-run                 # after editing: see the plan"
+  ],
+  async run(ctx) {
+    if (bool(ctx, "show-secrets") || bool(ctx, "with-files")) return exportAgent.run.call(exportAgent, ctx);
+    const id = need(ctx, 0, "agent", this.usage);
+    const out = str(ctx, "out");
+    const getYaml = () => api(ctx, "GET", `/agents/${id}/export`);
+    const getJson = async () => (await api(ctx, "GET", `/agents/${id}/export?format=json`)).spec;
+    if (!out) {
+      if (ctx.json) return emit(ctx, await getJson(), () => {
+      });
+      process.stdout.write(await getYaml());
+      return;
+    }
+    if (isFileTarget(out)) {
+      writeFileSync5(out, /\.json$/i.test(out) ? JSON.stringify(await getJson(), null, 2) + "\n" : await getYaml());
+      emit(ctx, { saved: resolve2(out) }, () => console.log(`Saved ${resolve2(out)}
+Edit it, then: easybits apply ${out} --dry-run`));
+      return;
+    }
+    const yaml = await getYaml();
+    const dir = resolve2(out);
+    mkdirSync4(dir, { recursive: true });
+    writeFileSync5(join5(dir, "agent.yaml"), yaml);
+    const x = await buildExport(ctx, id, { secrets: false, fileContents: true });
+    const put = (path, b64) => {
+      mkdirSync4(dirname2(path), { recursive: true });
+      writeFileSync5(path, Buffer.from(b64, "base64"));
+    };
+    for (const s of x.skills ?? []) {
+      writeFileSync5((mkdirSync4(join5(dir, "skills", s.slug), { recursive: true }), join5(dir, "skills", s.slug, "SKILL.md")), s.markdown);
+      for (const a of s.assets) put(join5(dir, "skills", s.slug, a.name), a.contentBase64);
+    }
+    for (const f of x.files ?? []) if (f.contentBase64 !== void 0) put(join5(dir, "files", f.path), f.contentBase64);
+    const summary = { saved: dir, skills: (x.skills ?? []).map((s) => s.slug), files: (x.files ?? []).map((f) => f.path) };
+    emit(
+      ctx,
+      summary,
+      () => console.log(
+        `Saved ${dir}/agent.yaml${summary.skills.length ? ` + skills/ (${summary.skills.join(", ")})` : ""}${summary.files.length ? ` + files/ (${summary.files.length})` : ""}
+Edit it, then: easybits apply ${out} --dry-run`
+      )
+    );
+  }
+};
+function readTarget(target, usage2) {
+  if (!existsSync8(target)) throw usageError(`Not found: ${target}`, usage2);
+  if (statSync3(target).isDirectory()) {
+    const name = SPEC_NAMES.find((n) => existsSync8(join5(target, n)));
+    if (!name) throw usageError(`${target} has no agent.yaml.`, usage2);
+    return { text: readFileSync8(join5(target, name), "utf8"), dir: target };
+  }
+  return { text: readFileSync8(target, "utf8") };
+}
+var line = (c) => `${c.op} ${c.what}`;
+var printPlan = (plan) => console.log(plan.map(line).join("\n"));
+function saveBackup(id, yaml) {
+  const dir = join5(homedir3(), ".easybits", "backups");
+  mkdirSync4(dir, { recursive: true });
+  const path = join5(dir, `${id}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.yaml`);
+  writeFileSync5(path, yaml);
+  return path;
+}
+async function applyTarget(ctx, target, o) {
+  const { text, dir } = readTarget(target, o.usage);
+  const { secrets, missing } = secretsFor(text);
+  const uploads = dir ? readUploads(dir) : {};
+  if (o.create) {
+    if (o.agent) throw usageError("Use --agent or --create, not both.", o.usage);
+    const body2 = { spec: text, secrets, ...o.name ? { name: o.name } : {} };
+    const plan2 = await api(ctx, "POST", "/agents/apply", { ...body2, dryRun: true });
+    if (o.dryRun) {
+      emit(ctx, { create: true, ...plan2, ...uploads.skills ? { skills: Object.keys(uploads.skills) } : {}, ...uploads.files ? { files: Object.keys(uploads.files) } : {} }, () => {
+        printPlan(plan2.plan);
+        for (const s of Object.keys(uploads.skills ?? {})) console.log(`+ skill ${s}`);
+        for (const f of Object.keys(uploads.files ?? {})) console.log(`+ file ${f}`);
+        console.log("(dry run: nothing created)");
+      });
+      return;
+    }
+    const created = await api(ctx, "POST", "/agents/apply", body2);
+    const id2 = created.agentId;
+    if (!ctx.json) process.stderr.write(`Created ${id2}; applying the rest\u2026
+`);
+    let rest;
+    if (/\n?(skills|files):/m.test(text) || uploads.skills || uploads.files) {
+      await waitMachine(ctx, id2).catch(() => {
+      });
+      rest = await api(ctx, "POST", `/agents/${id2}/apply`, { spec: text, secrets, ...uploads, ...o.name ? { name: o.name } : {} });
+    }
+    const extra = (rest?.plan ?? []).filter((c) => c.op !== "!" && !/^(prompt|env)\b/.test(c.what));
+    const res = { agentId: id2, sandboxId: created.sandboxId, plan: [...created.plan, ...extra], applied: rest?.applied, failed: rest?.failed };
+    emit(ctx, res, () => {
+      printPlan(res.plan);
+      console.log(`Created ${id2}.${res.failed ? "" : ` Try it: easybits agents try ${id2} "hello"`}`);
+      if (res.failed) console.error(`Stopped at \xAB${res.failed.what}\xBB: ${res.failed.error}`);
+    });
+    if (res.failed) process.exitCode = EXIT.API;
+    return;
+  }
+  const ref = o.agent ?? specId(text);
+  if (!ref) throw usageError("The file has no agent id.", "Point it at one with --agent <name|id>, or make a new one with --create.");
+  const id = await resolveRef(ctx, "agent", ref);
+  if (missing.length && !ctx.json) process.stderr.write(`Not in your environment (keep their current value): ${missing.join(", ")}
+`);
+  const path = `/agents/${id}/apply`;
+  const body = { spec: text, secrets, ...uploads, ...o.prune ? { prune: true } : {} };
+  const plan = await api(ctx, "POST", path, { ...body, dryRun: true });
+  const actionable = plan.plan.filter((c) => c.op !== "!");
+  if (o.dryRun || !actionable.length) {
+    emit(ctx, plan, () => {
+      if (plan.plan.length) printPlan(plan.plan);
+      console.log(actionable.length ? "(dry run: nothing changed)" : plan.plan.length ? "Nothing to apply (see the ! lines)." : "No changes: the agent already matches the file.");
+    });
+    return;
+  }
+  requireYesIfHeadless(ctx);
+  await confirm(ctx, `${plan.plan.map(line).join("\n")}
+Apply ${actionable.length} change(s) to ${id}?`);
+  const r = await api(ctx, "POST", path, body);
+  const backup = r.before ? saveBackup(id, r.before) : void 0;
+  const { before: _b, ...shown } = r;
+  emit(ctx, { ...shown, ...backup ? { backup } : {} }, () => {
+    console.log(`Applied ${r.applied?.length ?? 0} change(s) to ${id}.`);
+    if (backup) console.log(`Before (to roll back: easybits apply ${backup} --agent ${id}): ${backup}`);
+    if (r.failed) console.error(`Stopped at \xAB${r.failed.what}\xBB: ${r.failed.error}`);
+  });
+  if (r.failed) process.exitCode = EXIT.API;
+}
+var apply = {
+  name: "apply",
+  group: "Compute",
+  summary: "Make an agent match a file from `agents export` (plan, then apply)",
+  synopsis: "apply <file|dir>",
+  leaf: {
+    summary: "Apply an agent file or folder: shows the plan (+ add, ~ change, - remove, ! skipped), then applies it",
+    usage: "easybits apply <file|dir> [--agent <agent>] [--create [--name <name>]] [--prune] [--dry-run] [--yes]",
+    options: {
+      agent: { type: "string", value: "agent", description: "Apply to this agent (default: the id in the file)" },
+      create: { type: "boolean", description: "Make a new agent from the file instead" },
+      name: { type: "string", value: "name", description: "--create: name for the new agent" },
+      prune: { type: "boolean", description: "Also remove what the file doesn't list (env, MCP, skills, files)" },
+      "dry-run": { type: "boolean", description: "Show the plan; change nothing" },
+      ...YES_OPTION
+    },
+    examples: [
+      "easybits agents export helper --out ./helper",
+      "easybits apply ./helper --dry-run",
+      "ANTHROPIC_API_KEY=\u2026 easybits apply ./helper --yes         # ${ANTHROPIC_API_KEY} in the file gets this value",
+      "easybits apply ./helper --create --name helper-2          # a copy",
+      "easybits apply helper.yaml --prune --dry-run              # what would be removed"
+    ],
+    async run(ctx) {
+      const target = need(ctx, 0, "file|dir", this.usage);
+      await applyTarget(ctx, target, {
+        agent: str(ctx, "agent"),
+        create: bool(ctx, "create"),
+        name: str(ctx, "name"),
+        prune: bool(ctx, "prune"),
+        dryRun: bool(ctx, "dry-run"),
+        usage: this.usage
+      });
+    }
+  }
+};
+
 // src/commands/agents.ts
+function isLegacyExport(path) {
+  try {
+    return existsSync9(path) && !statSync4(path).isDirectory() && /"kind"\s*:\s*"easybits\.agent"/.test(readFileSync9(path, "utf8"));
+  } catch {
+    return false;
+  }
+}
 var agents = {
   name: "agents",
   aliases: ["agent"],
@@ -2438,7 +2676,7 @@ var agents = {
     create: {
       aliases: ["new"],
       summary: "Create an agent from a template, or clone one (--like / --from)",
-      usage: "easybits agents create (--template <template> | --like <agent> | --from <export.json>) [--name <name>] [--prompt <text> | --prompt-file <file>] [--prompt-mode append|replace] [--mcp-file <json>] [--copy-files] [--dotenv <path>] [--env K=V]... [--timeout <s>] [--dry-run]",
+      usage: "easybits agents create (--template <template> | --like <agent> | --from <export.json>) [--name <name>] [--prompt <text> | --prompt-file <file>] [--prompt-mode append|replace] [--mcp-file <json>] [--copy-files] [--dotenv <path>] [--env K=V]... [--ttl <s>] [--dry-run]",
       options: {
         template: { type: "string", value: "template", description: "Agent template (see: easybits docs agents)" },
         like: { type: "string", value: "agent", description: "Clone another agent's setup: template, prompt, MCP, skills (never its env)" },
@@ -2451,7 +2689,7 @@ var agents = {
         "copy-files": { type: "boolean", description: `--like/--from: also copy the knowledge files in /data/work` },
         env: { type: "string", multiple: true, value: "K=V", description: "Env for the agent, non-secret (repeatable)" },
         ...ENV_FILE_OPTION,
-        timeout: { type: "string", value: "seconds", description: "Lifetime before auto-destroy" },
+        ttl: { type: "string", value: "seconds", description: "Lifetime before auto-destroy (was --timeout)" },
         "dry-run": { type: "boolean", description: "Print the plan; create nothing" }
       },
       examples: [
@@ -2470,15 +2708,19 @@ var agents = {
         if (promptInline != null && promptFile) throw usageError("Use --prompt or --prompt-file, not both.", this.usage);
         const mode = str(ctx, "prompt-mode");
         if (mode && mode !== "append" && mode !== "replace") throw usageError("--prompt-mode must be append or replace.", this.usage);
-        if (promptFile && !existsSync7(promptFile)) throw usageError(`File not found: ${promptFile}`, this.usage);
+        if (promptFile && !existsSync9(promptFile)) throw usageError(`File not found: ${promptFile}`, this.usage);
         const mcpFile = str(ctx, "mcp-file");
-        if (mcpFile && !existsSync7(mcpFile)) throw usageError(`File not found: ${mcpFile}`, this.usage);
+        if (mcpFile && !existsSync9(mcpFile)) throw usageError(`File not found: ${mcpFile}`, this.usage);
         if (bool(ctx, "copy-files") && !like && !from) throw usageError("--copy-files needs --like or --from.", this.usage);
+        if (from && !isLegacyExport(from)) {
+          await applyTarget(ctx, from, { create: true, name: str(ctx, "name"), dryRun: bool(ctx, "dry-run"), usage: this.usage });
+          return;
+        }
         const source = from ? readExport(from, this.usage) : like ? await buildExport(ctx, await resolveRef(ctx, "agent", like), { secrets: true, fileContents: bool(ctx, "copy-files") }) : void 0;
         const template = str(ctx, "template") ?? source?.template;
         if (!template) throw usageError("Missing --template (or --like / --from).", this.usage);
         const env = await envFrom(ctx, this.usage);
-        const prompt = promptInline ?? (promptFile ? readFileSync7(promptFile, "utf8") : source?.systemPrompt);
+        const prompt = promptInline ?? (promptFile ? readFileSync9(promptFile, "utf8") : source?.systemPrompt);
         const promptMode = mode ?? source?.systemPromptMode;
         const multiline = !!prompt && /[\r\n]/.test(prompt.trimEnd());
         const promptAfter = multiline ? prompt : void 0;
@@ -2487,7 +2729,7 @@ var agents = {
         }
         if (prompt && !multiline) env.SYSTEM_PROMPT = prompt.trimEnd();
         if (promptMode && (prompt || mode) && !multiline) env.SYSTEM_PROMPT_MODE = promptMode;
-        const mcpServers = mcpFile ? parseMcpFile(readFileSync7(mcpFile, "utf8"), this.usage) : source?.mcpServers;
+        const mcpServers = mcpFile ? parseMcpFile(readFileSync9(mcpFile, "utf8"), this.usage) : source?.mcpServers;
         if (mcpServers && hasMasked(mcpServers)) {
           throw usageError(`${from ?? "the source"} has masked MCP values (\u2026***).`, "Re-export with --show-secrets, or pass --mcp-file");
         }
@@ -2515,7 +2757,7 @@ var agents = {
           template,
           name,
           env,
-          timeoutSeconds: int(ctx, "timeout", this.usage),
+          timeoutSeconds: int(ctx, "ttl", this.usage),
           ...mcpServers?.length ? { mcpServers } : {}
         });
         if (promptAfter || source?.skills?.length || bool(ctx, "copy-files") && source?.files?.length) await waitMachine(ctx, a.agentId);
@@ -2574,7 +2816,7 @@ var agents = {
     try: tryTurn,
     logs,
     doctor,
-    export: exportAgent
+    export: exportSpec
   }
 };
 
@@ -2625,16 +2867,16 @@ var docs = {
 };
 
 // src/commands/doctor.ts
-import { existsSync as existsSync8, statSync as statSync3 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join5 } from "path";
+import { existsSync as existsSync10, statSync as statSync5 } from "fs";
+import { homedir as homedir5 } from "os";
+import { join as join7 } from "path";
 import { resolveBaseUrl as resolveBaseUrl6 } from "@easybits.cloud/sdk";
 
 // src/update.ts
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "fs";
-import { homedir as homedir3 } from "os";
-import { dirname as dirname2, join as join4 } from "path";
-var FILE = join4(process.env.XDG_CONFIG_HOME || join4(homedir3(), ".config"), "easybits", "update.json");
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "fs";
+import { homedir as homedir4 } from "os";
+import { dirname as dirname3, join as join6 } from "path";
+var FILE = join6(process.env.XDG_CONFIG_HOME || join6(homedir4(), ".config"), "easybits", "update.json");
 var DAY = 24 * 60 * 60 * 1e3;
 var UPGRADE = "npm i -g @easybits.cloud/cli@latest";
 function newer(a, b) {
@@ -2646,7 +2888,7 @@ function newer(a, b) {
 var updateCheckDisabled = () => Boolean(process.env.EASYBITS_NO_UPDATE_CHECK || process.env.CI);
 function readCache() {
   try {
-    return JSON.parse(readFileSync8(FILE, "utf8"));
+    return JSON.parse(readFileSync10(FILE, "utf8"));
   } catch {
     return {};
   }
@@ -2656,8 +2898,8 @@ async function fetchLatest(timeoutMs = 1500) {
     const r = await fetch("https://registry.npmjs.org/@easybits.cloud/cli/latest", { signal: AbortSignal.timeout(timeoutMs) });
     const latest = (await r.json()).version;
     if (!latest) return null;
-    mkdirSync4(dirname2(FILE), { recursive: true });
-    writeFileSync5(FILE, JSON.stringify({ latest, checkedAt: Date.now() }));
+    mkdirSync5(dirname3(FILE), { recursive: true });
+    writeFileSync6(FILE, JSON.stringify({ latest, checkedAt: Date.now() }));
     return latest;
   } catch {
     return null;
@@ -2681,7 +2923,7 @@ async function updateNotice(current) {
 }
 
 // src/commands/doctor.ts
-var VERSION = true ? "0.9.0" : "dev";
+var VERSION = true ? "0.10.0" : "dev";
 var doctor2 = {
   name: "doctor",
   group: "Account",
@@ -2724,9 +2966,9 @@ var doctor2 = {
           checks.push({ check: "credential-env", ok: true, detail: "EASYBITS_API_KEY wins over the saved login in ~/.easybitsrc" });
         }
       }
-      const rcPath = join5(homedir4(), ".easybitsrc");
-      if (existsSync8(rcPath)) {
-        const mode = statSync3(rcPath).mode & 511;
+      const rcPath = join7(homedir5(), ".easybitsrc");
+      if (existsSync10(rcPath)) {
+        const mode = statSync5(rcPath).mode & 511;
         const ok2 = (mode & 63) === 0;
         checks.push({ check: "rc-file", ok: ok2, detail: `${rcPath} ${mode.toString(8).padStart(3, "0")}`, ...ok2 ? {} : { hint: `It holds tokens. Run: chmod 600 ${rcPath}` } });
       }
@@ -2752,6 +2994,7 @@ var COMMANDS = [
   usage,
   sandboxes,
   agents,
+  apply,
   machines,
   domains,
   init,
@@ -2895,6 +3138,7 @@ function positionals(argv2) {
 }
 var MACHINE_SUBS = ["ls", "list", "deploy", "release", "releases", "logs", "rollback", "secrets"];
 var SANDBOX_NAMES = ["sandboxes", "sandbox", "sb"];
+var AGENT_NAMES = ["agents", "agent"];
 function normalizeArgs(input) {
   const argv2 = [...input];
   const notes = [];
@@ -2928,12 +3172,13 @@ function normalizeArgs(input) {
     argv2[pos[1]] = "deploy";
     notes.push("`machines release` is now `machines deploy`.");
   }
-  if (SANDBOX_NAMES.includes(at(0) ?? "") && (at(1) === "create" || at(1) === "new")) {
+  const noun = SANDBOX_NAMES.includes(at(0) ?? "") ? "sandboxes" : AGENT_NAMES.includes(at(0) ?? "") ? "agents" : null;
+  if (noun && (at(1) === "create" || at(1) === "new")) {
     const stop = argv2.indexOf("--");
     for (let i = 0; i < (stop === -1 ? argv2.length : stop); i++) {
       if (argv2[i] === "--timeout" || argv2[i].startsWith("--timeout=")) {
         argv2[i] = argv2[i].replace("--timeout", "--ttl");
-        notes.push("`sandboxes create --timeout` is now `--ttl` (`--timeout` stays for `exec`).");
+        notes.push(`\`${noun} create --timeout\` is now \`--ttl\`${noun === "sandboxes" ? " (`--timeout` stays for `exec`)" : ""}.`);
       }
     }
   }
@@ -2941,7 +3186,7 @@ function normalizeArgs(input) {
 }
 
 // src/index.ts
-var VERSION2 = true ? "0.9.0" : "dev";
+var VERSION2 = true ? "0.10.0" : "dev";
 var GLOBAL_OPTIONS = {
   json: { type: "boolean" },
   token: { type: "string" },
@@ -3105,8 +3350,8 @@ main(argv).catch((err) => {
 `);
   }
   process.exitCode = e.exitCode || EXIT.API;
-}).then(() => notice).then((line) => {
-  if (line) process.stderr.write(`
-${line}
+}).then(() => notice).then((line2) => {
+  if (line2) process.stderr.write(`
+${line2}
 `);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easybits.cloud/cli",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Official CLI for EasyBits, the cloud for AI agents — sandboxes, hosting, domains, databases, agents and files from your terminal",
   "type": "module",
   "bin": {