@ghostystudio/cli 0.27.0 → 0.28.0

package/README.md

@@ -77,6 +77,8 @@ ghosty credentials ls|set|rm [provider]  [--from-env VAR]   # never as an argume
 ghosty docs
 
 ghosty partner ls|enable|credentials|agent|tenants|audit|try   # one agent for each of YOUR customers: ghosty partner --help
+ghosty demos try <slug> "message" ["message 2"…] [--new] [--recycle-between --agent X]   # try a public demo as a visitor
+ghosty demos history <id> [--since 2d] [--session web:…] [--timeline] [--full]          # what demo visitors did (Ghosty staff)
 ```
 
 Global: `--json` (stdout is JSON only), `--token <token>` / `GHOSTY_TOKEN` (a `gat_…` agent token reaches only that agent), `--profile <name>` / `GHOSTY_PROFILE` (a separate saved session, e.g. one per account), `--yes`, `--help`, `--version`. Env: `GHOSTY_URL`, `XDG_CONFIG_HOME`, `NO_COLOR`, `GHOSTY_NO_UPDATE_CHECK`; partner commands sign with `GHOSTY_PARTNER_KEY` + `GHOSTY_PARTNER_SECRET` when set.
@@ -87,6 +89,18 @@ Every command has its own help with examples: `ghosty <command> --help` or `ghos
 
 Exit codes: `0` ok · `1` API error · `2` usage error · `3` not signed in.
 
+### Changes in 0.28.0
+
+- `ghosty demos try <slug> "…"`: try a public demo as a visitor from the terminal (keeps the thread; `--new`; `--recycle-between --agent X` checks memory across boxes). `ghosty demos history <agent>` (Ghosty staff): visitors' turns, messages, files and clones, `--timeline`.
+- `turns ls --session S`, and on Claude agents a «resumed» column: ✓ when the turn kept its SDK session, ⚠ from scratch (orphan|stale|replaced) when it lost its memory. `turns show` says the same, with the Claude CLI version.
+- `partner credentials create|rotate --env-file PATH` (mode 600, nothing printed) or `--format env` (pipe to `fly secrets import`). The secret's env var is now `GHOSTY_PARTNER_KEY_SECRET` (`GHOSTY_PARTNER_SECRET` still works).
+- `partner agent apply --prompt-file prompt.md`; `partner try --verbose` prints each tool's arguments and milliseconds.
+- Empty `partner ls|credentials ls|tenants ls` say what to do next. `login --device --profile <client>` explains how to sign in a client's account (they approve the link).
+
+### Changes in 0.27.1
+
+- A 404 with a reason (no such bag, room or thread) prints that reason instead of a generic «Not found».
+
 ### Changes in 0.27.0
 
 - `schedule add <id> "…" --teams <workspace>#<room>[/<thread-id>] --at ISO | --in 30m`: at that time the agent answers in that Teams room or thread as if mentioned (with the room's memory). `schedule ls|rm <id> --teams <workspace>`.

package/dist/index.js

@@ -8014,6 +8014,8 @@ var SERVER_MESSAGES = [
   ["el mensaje {} es una respuesta; usa el del inicio del hilo ({})", "message {} is a reply; use the one that starts the thread ({})"],
   ["dueAt tiene que ser una fecha futura (epoch en segundos)", "dueAt must be a future date (epoch seconds)"],
   ["no hay un turno pendiente con ese id (\xBFya corri\xF3?)", "no pending turn with that id (did it already run?)"],
+  ["los chats de los visitantes de un demo: s\xF3lo el staff de Ghosty", "a demo's visitor chats: Ghosty staff only"],
+  ["since inv\xE1lido: \xAB{}\xBB (7d, 12h o una fecha ISO)", "invalid since: \xAB{}\xBB (7d, 12h or an ISO date)"],
   // — Infra interna (casi nunca llega al CLI, pero por si acaso)
   ["SESSION_SECRET ausente en producci\xF3n \u2014 las cookies quedar\xEDan firmadas con un valor p\xFAblico. Inyectarlo con ./scripts/set_gs_secret.sh SESSION_SECRET (openssl rand -hex 32).", "SESSION_SECRET missing in production \u2014 cookies would be signed with a public value. Inject it with ./scripts/set_gs_secret.sh SESSION_SECRET (openssl rand -hex 32)."],
   ["sqld: fetch sin namespace", "sqld: fetch without namespace"],
@@ -8232,6 +8234,7 @@ async function loginDevice() {
   if (globals.json) process.stdout.write(JSON.stringify({ event: "login_url", url: d.verification_uri_complete, code: d.user_code, method: "device" }) + "\n");
   info(`${lavender("\u203A")} ${t("Open this link on any device and confirm the code", "Abre esta liga en cualquier dispositivo y confirma el c\xF3digo")} ${lavender(d.user_code)}:`);
   info(`  ${d.verification_uri_complete}`);
+  if (globals.profile) info(dim(t(`  Signing in someone else? Send them this link and code; when they approve, the session lands in profile \xAB${globals.profile}\xBB (use it with --profile ${globals.profile}; ghosty logout --profile ${globals.profile} revokes it).`, `  \xBFEs la cuenta de otra persona? M\xE1ndale esta liga y el c\xF3digo; cuando apruebe, la sesi\xF3n queda en el perfil \xAB${globals.profile}\xBB (\xFAsalo con --profile ${globals.profile}; ghosty logout --profile ${globals.profile} la revoca).`)));
   let interval = (d.interval ?? 5) * 1e3;
   const deadline = Date.now() + (d.expires_in ?? 600) * 1e3;
   while (Date.now() < deadline) {
@@ -8315,7 +8318,7 @@ async function postLong(path, body, timeoutMs = 9e5) {
     const req = httpsRequest(`${base}${path}`, {
       method: "POST",
       timeout: timeoutMs,
-      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.27.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.28.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
     }, (res) => {
       let buf = "";
       res.on("data", (c) => buf += c);
@@ -8357,7 +8360,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.27.0"}`,
+      "user-agent": `ghosty-cli/${"0.28.0"}`,
       "accept-language": lang(),
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
@@ -8383,6 +8386,7 @@ async function toError(res) {
   const detail = serverText(raw);
   if (res.status === 401) return new CliError(t("Your session is not valid anymore.", "Tu sesi\xF3n ya no es v\xE1lida."), EXIT.AUTH, t("Run: ghosty login", "Corre: ghosty login"));
   if (res.status === 403) return new CliError(t(`Not allowed: ${detail}`, `No permitido: ${detail}`), EXIT.API, t("If the agent was shared with you, its workspace (board, channels, numbers) stays with the owner: ask them to add you to that workspace. Otherwise run: ghosty login", "Si el agente se comparti\xF3 contigo, su espacio (tablero, canales, n\xFAmeros) sigue siendo del due\xF1o: p\xEDdele que te agregue a ese espacio. Si no, corre: ghosty login"));
+  if (res.status === 404 && (body.message || body.error)) return new CliError(detail, EXIT.API);
   if (res.status === 404) return new CliError(t("Not found.", "No se encontr\xF3."), EXIT.API, t("Check the agent id (ghosty agents ls) or that your token belongs to that agent.", "Revisa el id del agente (ghosty agents ls) o que tu token sea de ese agente."));
   if (body.error === "restart_no_aplica" || body.error === "agente_sin_maquina") {
     return new CliError(t("This agent doesn't need a restart: new files, skills and MCP load on its next turn.", "Este agente no necesita reinicio: los archivos, skills y MCP nuevos se cargan en su siguiente turno."), EXIT.API);
@@ -8486,16 +8490,16 @@ async function tryWaba(id, text, v) {
   if ((v.media?.length ?? 0) > 1) throw usage(t("One --media per turn (WhatsApp sends one file per message).", "Un --media por turno (WhatsApp manda un archivo por mensaje)."), t("Send several turns, one file each.", "Manda varios turnos, un archivo en cada uno."));
   if (v["as-formmy"] && !v.media?.length) throw usage(t("--as-formmy goes with --media FILE.", "--as-formmy va con --media ARCHIVO."), t("Example", "Ejemplo") + ': ghosty try <agent-id> "" --waba --session 5210000000009 --media nota.ogg --as-formmy');
   if (!text && !v.media?.length && !v.reset) throw usage(t("Missing message.", "Falta el mensaje."), t("Example", "Ejemplo") + ': ghosty try <agent-id> "hola" --waba --session 5210000000009');
-  let history;
+  let history2;
   if (v.history) {
     const raw = JSON.parse(await readFile2(v.history, "utf8"));
-    history = Array.isArray(raw) ? raw : raw.messages;
-    if (!Array.isArray(history)) throw usage(t(`${v.history}: expected [{role, text, at?}] or {messages: [...]}.`, `${v.history}: se esperaba [{role, text, at?}] o {messages: [...]}.`));
+    history2 = Array.isArray(raw) ? raw : raw.messages;
+    if (!Array.isArray(history2)) throw usage(t(`${v.history}: expected [{role, text, at?}] or {messages: [...]}.`, `${v.history}: se esperaba [{role, text, at?}] o {messages: [...]}.`));
     if (!v.reset) info(dim(t("Note: history only counts on the first turn of a session; add --reset to start over.", "Nota: el historial s\xF3lo cuenta en el primer turno de una sesi\xF3n; agrega --reset para empezar de nuevo.")));
   }
   const media = v.media?.[0] ? await uploadMedia(v.media[0]) : void 0;
   if (process.stderr.isTTY && !globals.json && (text || media)) info(dim(t("Thinking\u2026 (the real WhatsApp path; nothing is sent)", "Pensando\u2026 (el camino real de WhatsApp; no se manda nada)")));
-  const r = await tryPost(id, { as: "waba", session: phone, reset: v.reset, text: text ?? "", ...media ? { media } : {}, ...history ? { history } : {}, ...v["as-formmy"] ? { asFormmy: true } : {}, ...v.keep ? { keep: true } : {} });
+  const r = await tryPost(id, { as: "waba", session: phone, reset: v.reset, text: text ?? "", ...media ? { media } : {}, ...history2 ? { history: history2 } : {}, ...v["as-formmy"] ? { asFormmy: true } : {}, ...v.keep ? { keep: true } : {} });
   if (r.status !== 200) throw Object.assign(new Error(`${r.status} ${r.body.error ? serverText(r.body.error) : t("turn failed", "el turno fall\xF3")}`), { code: 1 });
   const via = r.body.media ? `
 ${r.body.media.copied ? dim(t("attachment: downloaded through the Formmy-like proxy and copied to gs", "adjunto: descargado por el proxy tipo Formmy y copiado a gs")) : red(t("attachment: NOT copied to gs (the proxy download failed)", "adjunto: NO se copi\xF3 a gs (fall\xF3 la descarga por el proxy)"))}` : "";
@@ -9339,7 +9343,7 @@ ${dim(`${t("conversation", "conversaci\xF3n")} ${p.sessionId}`)}`
 
 // src/commands/partner.ts
 import { createHmac } from "node:crypto";
-import { readFile as readFile5 } from "node:fs/promises";
+import { readFile as readFile5, writeFile as writeFile4 } from "node:fs/promises";
 var partnerHelp = () => t(
   `${bold("Usage:")} ghosty partner <command> [options]
 
@@ -9347,14 +9351,14 @@ ${bold("Partner space")}  ${dim("(you, signed in as the space owner)")}
   partner ls                              Your partner spaces
   partner enable <workspace>              Turn one of your spaces into a partner space
   partner credentials ls                  Server credentials (no secrets)
-  partner credentials create [--label L]  Issue one \u2014 the secret is shown ONCE
+  partner credentials create [--label L]  Issue one \u2014 the secret is shown ONCE   [--env-file PATH | --format env]
   partner credentials rotate <keyId> [--grace MIN]   New secret, same keyId (old one valid MIN, default 60)
   partner credentials revoke <keyId>      Revoke it (idempotent)
   partner audit                           Who did what, when
 
 ${bold("Shared agent (solo-MCP)")}
   partner agent get                       The agent template and its version
-  partner agent apply --file agent.json   Create or update it (idempotent)
+  partner agent apply --file agent.json   Create or update it (idempotent)   [--prompt-file prompt.md]
 
 ${bold("Tenants")}  ${dim("(your customers, by externalId \u2014 config only, no box)")}
   partner tenants ls
@@ -9363,14 +9367,15 @@ ${bold("Tenants")}  ${dim("(your customers, by externalId \u2014 config only, no
   partner tenants rm <externalId>         Deletes its config AND its memory
 
 ${bold("Try it")}
-  partner try <externalId> "message"      One turn  [--group END_USER_ID] [--turn-token SHORT_LIVED_TOKEN]
+  partner try <externalId> "message"      One turn  [--group END_USER_ID] [--turn-token SHORT_LIVED_TOKEN] [--verbose: tool args and ms]
                                           (the turn token goes to YOUR MCP as \${turn.token}; --token also works here)
 
 ${bold("Options")}
   --workspace SLUG   Which partner space (only if you own more than one)
   --json             Machine-readable output
 
-${bold("Server credential mode")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_SECRET=gps_\u2026 ghosty partner agent get
+${bold("Server credential mode")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_KEY_SECRET=gps_\u2026 ghosty partner agent get
+${dim("(GHOSTY_PARTNER_SECRET also works; it is NOT the gs server's global secret)")}
 ${dim("Docs: https://www.ghosty.studio/docs/cli/partners")}`,
   `${bold("Uso:")} ghosty partner <comando> [opciones]
 
@@ -9378,14 +9383,14 @@ ${bold("Espacio de partner")}  ${dim("(t\xFA, con sesi\xF3n como due\xF1a del es
   partner ls                              Tus espacios de partner
   partner enable <workspace>              Convierte uno de tus espacios en espacio de partner
   partner credentials ls                  Credenciales de servidor (sin secretos)
-  partner credentials create [--label L]  Emite una \u2014 el secreto se muestra UNA vez
+  partner credentials create [--label L]  Emite una \u2014 el secreto se muestra UNA vez   [--env-file RUTA | --format env]
   partner credentials rotate <keyId> [--grace MIN]   Secreto nuevo, mismo keyId (el viejo vale MIN, default 60)
   partner credentials revoke <keyId>      La revoca (idempotente)
   partner audit                           Qui\xE9n hizo qu\xE9 y cu\xE1ndo
 
 ${bold("Agente compartido (solo-MCP)")}
   partner agent get                       La plantilla del agente y su versi\xF3n
-  partner agent apply --file agent.json   Lo crea o lo actualiza (idempotente)
+  partner agent apply --file agent.json   Lo crea o lo actualiza (idempotente)   [--prompt-file prompt.md]
 
 ${bold("Tenants")}  ${dim("(tus clientes, por externalId \u2014 s\xF3lo config, sin caja)")}
   partner tenants ls
@@ -9394,20 +9399,21 @@ ${bold("Tenants")}  ${dim("(tus clientes, por externalId \u2014 s\xF3lo config,
   partner tenants rm <externalId>         Borra su config Y su memoria
 
 ${bold("Pru\xE9balo")}
-  partner try <externalId> "mensaje"      Un turno  [--group END_USER_ID] [--turn-token TOKEN_DE_VIDA_CORTA]
+  partner try <externalId> "mensaje"      Un turno  [--group END_USER_ID] [--turn-token TOKEN_DE_VIDA_CORTA] [--verbose: args y ms de cada tool]
                                           (el token del turno llega a TU MCP como \${turn.token}; --token tambi\xE9n sirve aqu\xED)
 
 ${bold("Opciones")}
   --workspace SLUG   Qu\xE9 espacio de partner (s\xF3lo si tienes m\xE1s de uno)
   --json             Salida para m\xE1quinas
 
-${bold("Modo credencial de servidor")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_SECRET=gps_\u2026 ghosty partner agent get
+${bold("Modo credencial de servidor")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_KEY_SECRET=gps_\u2026 ghosty partner agent get
+${dim("(GHOSTY_PARTNER_SECRET tambi\xE9n vale; NO es el secreto global del servidor de gs)")}
 ${dim("Docs: https://www.ghosty.studio/docs/cli/partners")}`
 );
 var enc5 = encodeURIComponent;
 function partnerCreds() {
   const key = process.env.GHOSTY_PARTNER_KEY;
-  const secret = process.env.GHOSTY_PARTNER_SECRET;
+  const secret = process.env.GHOSTY_PARTNER_KEY_SECRET || process.env.GHOSTY_PARTNER_SECRET;
   return key && secret ? { key, secret } : null;
 }
 async function call(path, v, init = {}) {
@@ -9424,7 +9430,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.27.0"}`
+        "user-agent": `ghosty-cli/${"0.28.0"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -9443,13 +9449,23 @@ async function json(path, v, init = {}) {
   return text ? JSON.parse(text) : void 0;
 }
 var fmt = (d) => d ? d.replace("T", " ").slice(0, 16) : "\u2014";
-function showSecret(r) {
+var envLines = (r) => `GHOSTY_PARTNER_KEY=${r.keyId}
+GHOSTY_PARTNER_KEY_SECRET=${r.secret}
+`;
+async function showSecret(r, v) {
+  if (v["env-file"]) {
+    await writeFile4(v["env-file"], envLines(r), { mode: 384 });
+    return out({ keyId: r.keyId, envFile: v["env-file"] }, () => `${lavender("\u2713")} ${r.keyId} ${t(`\u2192 ${v["env-file"]} (mode 600; the secret was not printed)`, `\u2192 ${v["env-file"]} (modo 600; el secreto no se imprimi\xF3)`)}`);
+  }
+  if (v.format === "env") return void process.stdout.write(envLines(r));
+  if (v.format) throw usage(t("--format takes env.", "--format acepta env."));
   out(
     r,
     () => [
       `${lavender("\u2713")} ${t("Save these now \u2014 the secret is not shown again:", "Gu\xE1rdalas ya \u2014 el secreto no se vuelve a mostrar:")}`,
       `  GHOSTY_PARTNER_KEY=${r.keyId}`,
-      `  GHOSTY_PARTNER_SECRET=${r.secret}`
+      `  GHOSTY_PARTNER_KEY_SECRET=${r.secret}`,
+      dim(t("  Next time: --env-file PATH (0600) or --format env | fly secrets import", "  La pr\xF3xima: --env-file RUTA (0600) o --format env | fly secrets import"))
     ].join("\n")
   );
 }
@@ -9459,20 +9475,20 @@ async function credentialsCmd(sub, id, v) {
     const r = await json("/api/v2/partner/credentials", v, owner);
     return out(
       r,
-      () => table(
+      () => r.credentials.length ? table(
         r.credentials.map((c) => ({ keyId: c.keyId, label: c.label, status: c.status, lastUsed: fmt(c.lastUsedAt), created: fmt(c.createdAt) })),
         ["keyId", "label", "status", "lastUsed", "created"]
-      )
+      ) : dim(t("No credentials yet. Run: ghosty partner credentials create --label prod --env-file .env.partner", "Todav\xEDa no hay credenciales. Corre: ghosty partner credentials create --label prod --env-file .env.partner"))
     );
   }
   if (sub === "create" || sub === "new") {
-    return showSecret(await json("/api/v2/partner/credentials", v, { ...owner, method: "POST", body: { label: v.label } }));
+    return showSecret(await json("/api/v2/partner/credentials", v, { ...owner, method: "POST", body: { label: v.label } }), v);
   }
   if (!id) throw usage(t("Missing keyId.", "Falta el keyId."), `${t("Example", "Ejemplo")}: ghosty partner credentials ${sub} gpk_\u2026`);
   if (sub === "rotate") {
     const grace = v.grace !== void 0 ? Number(v.grace) : void 0;
     if (grace !== void 0 && (!Number.isFinite(grace) || grace < 0)) throw usage(t("--grace must be minutes \u2265 0.", "--grace deben ser minutos \u2265 0."));
-    return showSecret(await json(`/api/v2/partner/credentials/${enc5(id)}/rotate`, v, { ...owner, method: "POST", body: { graceMinutes: grace } }));
+    return showSecret(await json(`/api/v2/partner/credentials/${enc5(id)}/rotate`, v, { ...owner, method: "POST", body: { graceMinutes: grace } }), v);
   }
   if (sub === "revoke" || sub === "rm") {
     const r = await json(`/api/v2/partner/credentials/${enc5(id)}`, v, { ...owner, method: "DELETE" });
@@ -9495,6 +9511,10 @@ async function agentCmd(sub, v) {
   if (sub === "apply" || sub === "set") {
     if (!v.file) throw usage(t("Missing --file.", "Falta --file."), t("Example", "Ejemplo") + ": ghosty partner agent apply --file agent.json");
     const body = JSON.parse(await readFile5(v.file, "utf8"));
+    if (v["prompt-file"]) {
+      body.prompt = await readFile5(v["prompt-file"], "utf8");
+      if (body.prompt.length > 6e4) throw usage(t(`The prompt has ${body.prompt.length} chars; the limit is 60,000.`, `El prompt tiene ${body.prompt.length} caracteres; el tope es 60,000.`));
+    }
     const r = await json("/api/v2/partner/agent", v, { method: "PUT", body });
     return out(r, () => `${lavender("\u2713")} ${r.created ? t("Created", "Creado") : r.changed ? t("Updated", "Actualizado") : t("No changes", "Sin cambios")} \xB7 v${r.agent.version}`);
   }
@@ -9503,7 +9523,7 @@ async function agentCmd(sub, v) {
 async function tenantsCmd(sub, id, v) {
   if (!sub || sub === "ls" || sub === "list") {
     const r = await json("/api/v2/partner/tenants", v);
-    return out(r, () => table(r.tenants.map((tn) => ({ externalId: tn.externalId, config: JSON.stringify(tn.config ?? {}), updated: fmt(tn.updatedAt) })), ["externalId", "config", "updated"]));
+    return out(r, () => r.tenants.length ? table(r.tenants.map((tn) => ({ externalId: tn.externalId, config: JSON.stringify(tn.config ?? {}), updated: fmt(tn.updatedAt) })), ["externalId", "config", "updated"]) : dim(t("No tenants yet: each one appears on its first turn, or create it with ghosty partner tenants set <externalId> --config '{\u2026}'", "Todav\xEDa no hay tenants: cada uno aparece en su primer turno, o cr\xE9alo con ghosty partner tenants set <externalId> --config '{\u2026}'")));
   }
   if (!id) throw usage(t("Missing externalId.", "Falta el externalId."), `${t("Example", "Ejemplo")}: ghosty partner tenants ${sub} org_123`);
   const path = `/api/v2/partner/tenants/${enc5(id)}`;
@@ -9550,7 +9570,8 @@ async function tryCmd(externalId, text, v) {
       if (ev.type === "chunk" && ev.value) {
         full += ev.value;
         process.stdout.write(ev.value);
-      } else if (ev.type === "tool" && ev.phase === "start") info(dim(`  \u21B3 ${ev.name}`));
+      } else if (ev.type === "tool" && ev.phase === "start") info(dim(`  \u21B3 ${ev.name}${v.verbose && ev.args !== void 0 ? ` ${JSON.stringify(ev.args)}` : ""}`));
+      else if (ev.type === "tool" && ev.phase === "end" && v.verbose) info(dim(`    ${ev.ok === false ? "\u2717" : "\u2713"} ${ev.name}${ev.ms != null ? ` ${ev.ms} ms` : ""}`));
       else if (ev.type === "error") info(`Error: ${serverText(ev.message ?? "")}`);
     }
   }
@@ -9564,7 +9585,7 @@ async function partnerCmd(sub, a1, a2, v) {
     case "ls":
     case "list": {
       const r = await json("/api/v2/partner", v, { ownerOnly: true });
-      return out(r, () => table(r.partners.map((p) => ({ workspace: p.workspace, credentials: p.credentials, agent: p.agents ? "yes" : "no", status: p.disabledAt ? "off" : "on" })), ["workspace", "credentials", "agent", "status"]));
+      return out(r, () => r.partners.length ? table(r.partners.map((p) => ({ workspace: p.workspace, credentials: p.credentials, agent: p.agents ? "yes" : "no", status: p.disabledAt ? "off" : "on" })), ["workspace", "credentials", "agent", "status"]) : dim(t("No partner spaces. Run: ghosty partner enable <workspace>", "No tienes espacios de partner. Corre: ghosty partner enable <espacio>")));
     }
     case "enable": {
       if (!a1) throw usage(t("Missing workspace.", "Falta el workspace."), t("Example", "Ejemplo") + ": ghosty partner enable denik");
@@ -9916,6 +9937,11 @@ ${dim(t("Used by", "Lo usan"))}: ${used}` : ""}`);
       throw usage(t(`Unknown agents docs subcommand: ${sub}.`, `Subcomando de agents docs desconocido: ${sub}.`), t("Try", "Prueba") + ": ghosty agents docs ls | add | grant | replace | history | restore | revoke");
   }
 }
+function resumedCell(sdk) {
+  if (!sdk) return "";
+  if (sdk.resumed) return "\u2713";
+  return sdk.freshReason === "new" ? t("new", "nueva") : `\u26A0 ${t("from scratch", "desde cero")} (${sdk.freshReason ?? "?"})`;
+}
 function skipReason(r) {
   const es = {
     manual_mode: ["operator active in Formmy (manual mode)", "operador activo en Formmy (modo manual)"],
@@ -9946,6 +9972,7 @@ async function turnsCmd(sub, id, turnId, v) {
   const status = v.errors ? "error" : v.status;
   if (status) q.set("state", status);
   if (v.since) q.set("since", v.since);
+  if (v.session) q.set("session", v.session);
   q.set("limit", v.limit ?? "20");
   const r = await api(agentPath2(id, `/turns?${q}`));
   const when = (s) => s.slice(0, 16).replace("T", " ");
@@ -9956,10 +9983,11 @@ async function turnsCmd(sub, id, turnId, v) {
     secs: tu.ms == null ? "" : Math.round(tu.ms / 1e3),
     from: tu.surface ?? "",
     session: tu.sessionId.slice(0, 24),
+    resumed: resumedCell(tu.sdk),
     error: serverText(tu.error ?? "").replace(/\s+/g, " ").slice(0, 90)
   }));
   const tally = Object.entries(r.counts).map(([k, n]) => `${k} ${n}`).join(" \xB7 ");
-  out(r, () => rows.length ? `${table(rows, ["id", "started", "state", "secs", "from", "session", "error"])}
+  out(r, () => rows.length ? `${table(rows, ["id", "started", "state", "secs", "from", "session", ...rows.some((r2) => r2.resumed) ? ["resumed"] : [], "error"])}
 ${dim(`${v.since ? t(`since ${v.since}: `, `desde ${v.since}: `) : ""}${tally} \xB7 ${t("where the time went", "en qu\xE9 se fue el tiempo")}: ghosty turns show ${id} <turn-id>`)}` : dim(t(`No ${status ?? ""} turns${v.since ? ` since ${v.since}` : ""}.`, `Sin turnos${status ? ` ${status}` : ""}${v.since ? ` desde ${v.since}` : ""}.`)));
 }
 async function turnShow(id, turnId, full = false) {
@@ -9972,7 +10000,8 @@ async function turnShow(id, turnId, full = false) {
       `${lavender("in ")} ${r.input ? clip(r.input) : dim(t("(no copy of the message)", "(sin copia del mensaje)"))}`,
       `${lavender("out")} ${r.output ? clip(r.output) : dim(t("(no answer saved)", "(sin respuesta guardada)"))}`
     ];
-    const state = `${bold(tu.id)}  ${tu.state === "error" ? red(tu.state) : tu.state}  ${tu.secs ?? "?"} s${tu.session ? dim(`  ${tu.session}`) : ""}`;
+    const sdk = tu.sdk ? `  ${resumedCell(tu.sdk).startsWith("\u26A0") ? red(resumedCell(tu.sdk)) : dim(`sdk ${resumedCell(tu.sdk)}`)}${tu.sdk.cliVersion ? dim(` \xB7 CLI ${tu.sdk.cliVersion}`) : ""}` : "";
+    const state = `${bold(tu.id)}  ${tu.state === "error" ? red(tu.state) : tu.state}  ${tu.secs ?? "?"} s${tu.session ? dim(`  ${tu.session}`) : ""}${sdk}`;
     if (!r.totals) return [state, ...io, dim(`${t("no timeline", "sin l\xEDnea de tiempo")}: ${r.why ? serverText(r.why) : t("no transcript", "sin transcript")}`)].join("\n");
     const head = `${state}  ${dim(t(`${r.totals.model ?? ""} \xB7 ${r.totals.modelCalls} model calls \xB7 ${r.totals.outputTokens} output tokens \xB7 ${r.totals.toolSecs} s in tools`, `${r.totals.model ?? ""} \xB7 ${r.totals.modelCalls} llamadas al modelo \xB7 ${r.totals.outputTokens} tokens de salida \xB7 ${r.totals.toolSecs} s en tools`))}`;
     const line2 = (s) => {
@@ -10659,7 +10688,8 @@ var HELPS_ES = {
       ["--since T", "30m, 1h, 2d o una fecha ISO"],
       ["--limit N", "m\xE1ximo de filas (default 20, m\xE1x. 500)"],
       ["--full", "show: el mensaje que entr\xF3 y la respuesta completos (default: primeros 600 caracteres)"],
-      ["--quota-hits", "ls --workspace: mensajes (WhatsApp Business y Teams) que no abrieron turno porque se acab\xF3 el saldo"]
+      ["--quota-hits", "ls --workspace: mensajes (WhatsApp Business y Teams) que no abrieron turno porque se acab\xF3 el saldo"],
+      ["--session S", "ls: s\xF3lo los turnos de esa conversaci\xF3n. Los de Claude dicen \xABresumed\xBB: \u2713 = retom\xF3 la sesi\xF3n del SDK, \u26A0 desde cero (orphan|stale|replaced) = perdi\xF3 la memoria"]
     ],
     notes: ["--skipped guarda 30 d\xEDas y s\xF3lo ve lo que Formmy reenvi\xF3: si Formmy no reenv\xEDa (ghosty channels whatsapp ls, \xABformmy forwards\xBB), a gs nunca le llega el mensaje.", "show imprime lo que entr\xF3 y lo que sali\xF3 en cualquier motor o canal (grupos de WhatsApp tambi\xE9n); la l\xEDnea de tiempo lee el transcript del worker, as\xED que s\xF3lo motores del pool (no ACP/goose)."]
   },
@@ -10849,6 +10879,19 @@ var HELPS_ES = {
     ],
     notes: ["Un agente sin bolsa gasta del saldo del espacio. rm s\xF3lo borra una bolsa que ning\xFAn agente usa: mu\xE9velos primero (agents set --bag)."]
   },
+  demos: {
+    summary: "Demos p\xFAblicos (/p/<slug>): pru\xE9balo como visitante desde la terminal y (staff de Ghosty) lee qu\xE9 hicieron los visitantes. El due\xF1o s\xF3lo ve n\xFAmeros: ghosty agents demo <id>.",
+    flags: [
+      ["--new", "try: un visitante nuevo (si no, sigue el mismo hilo entre corridas)"],
+      ["--recycle-between", "try: recicla las cajas del agente entre mensajes, para probar que recuerda entre cajas (necesita --agent)"],
+      ["--agent X", "try: el agente del demo, para --recycle-between"],
+      ["--since T", "history: desde cu\xE1ndo (2d, 12h o una fecha ISO; default 7d)"],
+      ["--session S", "history: el hilo de un visitante (web:\u2026)"],
+      ["--timeline", "history: en qu\xE9 se fue el tiempo de cada turno (tool \u2192 segundos), del transcript del worker"],
+      ["--full", "history: los mensajes completos (default: primeros 400 caracteres)"]
+    ],
+    notes: ["try cuenta contra los topes del demo (mensajes por visitante, por IP al d\xEDa) y sale en sus n\xFAmeros y en el CRM.", "history es s\xF3lo para staff de Ghosty: los chats de los visitantes no se le ense\xF1an al due\xF1o."]
+  },
   spaces: {
     summary: "Operaciones del staff de Ghosty sobre un espacio: mover \xABpagado hasta\xBB y renombrar su slug. Cada una queda en la bit\xE1cora del espacio.",
     flags: [
@@ -11046,7 +11089,8 @@ var HELPS = {
       ["--since T", "30m, 1h, 2d or an ISO date"],
       ["--limit N", "max rows (default 20, max 500)"],
       ["--full", "show: the whole message that came in and the whole answer (default: first 600 chars)"],
-      ["--quota-hits", "ls --workspace: messages (WhatsApp Business and Teams) that got no turn because the balance ran out"]
+      ["--quota-hits", "ls --workspace: messages (WhatsApp Business and Teams) that got no turn because the balance ran out"],
+      ["--session S", "ls: only this conversation's turns. Claude turns show \xABresumed\xBB: \u2713 = it kept the SDK session, \u26A0 from scratch (orphan|stale|replaced) = it lost its memory"]
     ],
     examples: ["ghosty turns ls <id> --errors --since 1h", "ghosty turns ls --workspace descti --quota-hits --days 30", "ghosty turns ls <id> --skipped --since 1d", "ghosty turns ls <id> --json --limit 100", "ghosty turns show <id>            # last turn: each tool, its seconds, output tokens"],
     notes: ["--skipped keeps 30 days and only sees what Formmy forwarded: if Formmy doesn't forward (ghosty channels whatsapp ls, \xABformmy forwards\xBB), gs never gets the message.", "show prints what came in and what went out on any engine or channel (WhatsApp groups too); the timeline reads the worker's transcript, so pool engines only (not ACP/goose)."],
@@ -11337,6 +11381,25 @@ HELPS.bags = {
   notes: ["An agent with no bag spends from the workspace balance. rm only deletes a bag no agent uses: move them first (agents set --bag)."],
   learn: `${REF}#espacios`
 };
+HELPS.demos = {
+  summary: "Public demos (/p/<slug>): try one as a visitor from the terminal, and (Ghosty staff) read what visitors did. The owner only sees numbers: ghosty agents demo <id>.",
+  usage: [
+    'ghosty demos try <slug> "message" ["message 2"\u2026] [--new] [--recycle-between --agent <agent>]',
+    "ghosty demos history <agent> [--since 2d|ISO] [--session web:\u2026] [--timeline] [--full]"
+  ],
+  flags: [
+    ["--new", "try: a new visitor (otherwise it keeps the same thread across runs)"],
+    ["--recycle-between", "try: recycle the agent's boxes between messages, to test that it remembers across boxes (needs --agent)"],
+    ["--agent X", "try: the demo's agent, for --recycle-between"],
+    ["--since T", "history: from when (2d, 12h or an ISO date; default 7d)"],
+    ["--session S", "history: one visitor's thread (web:\u2026)"],
+    ["--timeline", "history: where each turn's time went (tool \u2192 seconds), from the worker transcript"],
+    ["--full", "history: whole messages (default: first 400 chars)"]
+  ],
+  examples: ['ghosty demos try guardias-k3x9q2 "recuerda MANZANA-47" "\xBFqu\xE9 palabra te dije?" --recycle-between --agent <id>', "ghosty demos history <id> --since 2d --timeline"],
+  notes: ["try counts against the demo's caps (messages per visitor, per IP per day) and shows up in its numbers and CRM.", "history is Ghosty staff only: visitors' chats are not shown to the owner."],
+  learn: `${REF}#demo-publico-agents-demo`
+};
 HELPS.spaces = {
   summary: "Ghosty staff operations on a workspace: move \xABpaid until\xBB and rename its slug. Each one is logged in the workspace's audit.",
   usage: ["ghosty spaces renew <workspace> --until YYYY-MM-DD [--note TEXT] [--dry-run] [--yes]", "ghosty spaces rename <old> <new> [--dry-run] [--yes]"],
@@ -11373,7 +11436,7 @@ function helpText(cmd) {
 }
 
 // src/update.ts
-import { mkdir as mkdir4, readFile as readFile9, writeFile as writeFile4 } from "node:fs/promises";
+import { mkdir as mkdir4, readFile as readFile9, writeFile as writeFile5 } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
 import { dirname as dirname3, join as join6 } from "node:path";
 var FILE = join6(process.env.XDG_CONFIG_HOME || join6(homedir3(), ".config"), "ghosty", "update.json");
@@ -11398,7 +11461,7 @@ async function latestVersion() {
       const latest = (await r.json()).version;
       if (latest) cache2 = { latest, checkedAt: Date.now() };
       await mkdir4(dirname3(FILE), { recursive: true });
-      await writeFile4(FILE, JSON.stringify(cache2));
+      await writeFile5(FILE, JSON.stringify(cache2));
     } catch {
     }
   }
@@ -11463,13 +11526,16 @@ function agentArgIndex(pos) {
       return pos[2] === "groups" ? 4 : 3;
     case "boards":
       return sub === "assign" ? 2 : null;
+    case "demos":
+    case "demo":
+      return sub === "history" ? 2 : null;
     default:
       return null;
   }
 }
 
 // src/completion.ts
-import { mkdir as mkdir5, readFile as readFile10, writeFile as writeFile5 } from "node:fs/promises";
+import { mkdir as mkdir5, readFile as readFile10, writeFile as writeFile6 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { join as join7 } from "node:path";
 var GLOBAL_FLAGS = ["--json", "--token", "--profile", "--yes", "--help", "--version", "--lang", "--dry-run"];
@@ -11521,7 +11587,7 @@ async function names() {
   const workspaces = [...new Set(list.map((a) => a.espacio?.tipo === "workspace" ? a.espacio.nombre : void 0).filter((x) => !!x))];
   await mkdir5(join7(cacheFile(), ".."), { recursive: true }).catch(() => {
   });
-  await writeFile5(cacheFile(), JSON.stringify({ at: Date.now(), agents, workspaces })).catch(() => {
+  await writeFile6(cacheFile(), JSON.stringify({ at: Date.now(), agents, workspaces })).catch(() => {
   });
   return { agents, workspaces };
 }
@@ -11599,7 +11665,7 @@ function normalizeArgs(pos, v) {
 
 // src/commands/spec.ts
 var import_yaml = __toESM(require_dist(), 1);
-import { mkdir as mkdir6, readdir as readdir4, readFile as readFile11, stat, writeFile as writeFile6 } from "node:fs/promises";
+import { mkdir as mkdir6, readdir as readdir4, readFile as readFile11, stat, writeFile as writeFile7 } from "node:fs/promises";
 import { join as join8, resolve as resolve2 } from "node:path";
 var enc9 = encodeURIComponent;
 async function agentsExport(id, v) {
@@ -11611,7 +11677,7 @@ async function agentsExport(id, v) {
   }
   const dir = resolve2(v.out);
   await mkdir6(dir, { recursive: true });
-  await writeFile6(join8(dir, "agent.yaml"), yaml);
+  await writeFile7(join8(dir, "agent.yaml"), yaml);
   const own = (0, import_yaml.parse)(yaml)["x-ghosty"]?.skills?.own ?? [];
   for (const slug of own) {
     const sk = await api(`/api/v2/agents/${enc9(id)}/skills/${enc9(slug)}`);
@@ -11892,6 +11958,122 @@ ${table(rows, cols)}
 ${dim(t(`${fmtTokens(total)} billable tokens \xB7 failed = error or stopped \xB7 no balance: ghosty turns ls --workspace ${r.workspace} --quota-hits`, `${fmtTokens(total)} tokens facturables \xB7 failed = error o detenido \xB7 sin saldo: ghosty turns ls --workspace ${r.workspace} --quota-hits`))}`);
 }
 
+// src/commands/demos.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
+import { mkdir as mkdir7, readFile as readFile12, writeFile as writeFile8 } from "node:fs/promises";
+import { homedir as homedir5 } from "node:os";
+import { dirname as dirname4, join as join9 } from "node:path";
+var enc11 = encodeURIComponent;
+var hora = (iso) => new Date(iso).toLocaleString("es-MX", { timeZone: "America/Mexico_City", hour12: false, dateStyle: "short", timeStyle: "short" });
+async function history(agent, v) {
+  if (!agent) throw usage(t("Missing agent.", "Falta el agente."), "ghosty demos history <agent> [--since 2d] [--session web:\u2026] [--timeline] [--full]");
+  const q = new URLSearchParams({ since: v.since ?? "7d", ...v.session ? { session: v.session } : {}, ...v.timeline ? { timeline: "1" } : {}, ...v.full ? { full: "1" } : {} });
+  const r = await api(`/api/v2/agents/${enc11(agent)}/demo/conversations?${q}`);
+  out(r, () => {
+    const lines = [`${bold(r.agent.name ?? r.agent.id)} ${dim(`/p/${r.agent.slug ?? "\u2014"} \xB7 ${t("since", "desde")} ${hora(r.since)} \xB7 ${t("clones", "clones")}: ${r.clones.length}`)}`];
+    for (const c of r.clones) lines.push(dim(`  ${t("clone", "clon")} ${c.id} (${hora(c.createdAt)})${c.sponsored ? t(" \xB7 on your key", " \xB7 con tu llave") : ""}`));
+    for (const c of r.conversations) {
+      lines.push("", bold(`${c.sessionId}`) + dim(` \xB7 ${hora(c.createdAt)} \u2192 ${hora(c.updatedAt)}`));
+      for (const tu of c.turns) lines.push(`  ${t("turn", "turno")} ${hora(tu.startedAt)} \xB7 ${tu.state === "error" ? red(tu.state) : tu.state} \xB7 ${tu.secs != null ? `${tu.secs} s` : t("not closed", "sin cerrar")}${tu.error ? red(` \xB7 ${serverText(tu.error)}`) : ""}`);
+      for (const m of c.messages) lines.push(`  ${m.role === "user" ? "\u{1F464}" : "\u{1F916}"} ${m.text}${m.attachments.length ? dim(` [${t("attached", "adjuntos")}: ${m.attachments.join(", ")}]`) : ""}${m.delivered.length ? dim(` [${t("delivered", "entreg\xF3")}: ${m.delivered.join(", ")}]`) : ""}`);
+      for (const s of c.timeline ?? []) lines.push(dim(s.kind === "turn" ? `    \u2500\u2500 ${t("turn", "turno")} ${hora(s.at)}` : `    ${String(s.secs).padStart(4)}s  ${s.kind === "tool" ? `${s.tool}: ${s.input} (out ${s.outTokens ?? "?"})` : `\xAB${s.text}\xBB`}`));
+    }
+    if (!r.conversations.length) lines.push("", dim(t("No visitors in that range.", "Sin visitantes en ese rango.")));
+    return lines.join("\n");
+  });
+}
+var jarPath = () => join9(process.env.XDG_CONFIG_HOME || join9(homedir5(), ".config"), "ghosty", "demo-cookies.json");
+async function readJar() {
+  try {
+    return JSON.parse(await readFile12(jarPath(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function anonCookieOf(setCookie) {
+  const m = /(?:^|,\s*)(gs_anon=[^;]+)/.exec(setCookie ?? "");
+  return m ? m[1] : null;
+}
+async function visitorCookie(base, slug, fresh) {
+  const jar = await readJar();
+  if (jar[slug] && !fresh) return jar[slug];
+  const res = await fetch(`${base}/p/${enc11(slug)}`, { redirect: "manual" });
+  if (res.status === 404) throw new CliError(t(`No demo \xAB${slug}\xBB (the link is name-code, e.g. guardias-k3x9q2).`, `No hay demo \xAB${slug}\xBB (la liga es nombre-c\xF3digo, p. ej. guardias-k3x9q2).`), EXIT.API);
+  const cookie = anonCookieOf(res.headers.get("set-cookie"));
+  if (!cookie) throw new CliError(t("The demo didn't hand out a visitor cookie.", "El demo no entreg\xF3 cookie de visitante."), EXIT.API);
+  jar[slug] = cookie;
+  await mkdir7(dirname4(jarPath()), { recursive: true });
+  await writeFile8(jarPath(), JSON.stringify(jar, null, 2), { mode: 384 });
+  return cookie;
+}
+async function visitorTurn(base, slug, cookie, text) {
+  const turnId = randomUUID2();
+  const ctrl = new AbortController();
+  const ev = await fetch(`${base}/p/${enc11(slug)}/events`, { headers: { cookie, accept: "text/event-stream" }, signal: ctrl.signal });
+  if (!ev.ok) throw await toError(ev);
+  const sent = await fetch(`${base}/p/${enc11(slug)}/messages`, { method: "POST", headers: { cookie, "content-type": "application/json" }, body: JSON.stringify({ content: text, turnId }) });
+  if (!sent.ok) {
+    ctrl.abort();
+    const body = await sent.text();
+    if (sent.headers.get("x-needs-login")) throw new CliError(t(`The demo cut this visitor off: ${body}`, `El demo le cort\xF3 a este visitante: ${body}`), EXIT.API, t("New visitor: add --new", "Visitante nuevo: agrega --new"));
+    throw new CliError(`${sent.status} ${serverText(body.slice(0, 300))}`, EXIT.API);
+  }
+  let answer = "";
+  let ours = false;
+  try {
+    for await (const e of readSse(ev.body)) {
+      const d = parseData(e);
+      if (d.turnId) ours = d.turnId === turnId;
+      if (!ours) continue;
+      if (e.event === "chunk" && d.text) {
+        answer += d.text;
+        if (!globals.json) process.stdout.write(d.text);
+      } else if (e.event === "tool" && d.title && !globals.json) info(dim(`  \u2699 ${serverText(d.title)}`));
+      else if (e.event === "error") throw new CliError(d.message ? serverText(d.message) : t("The turn failed.", "El turno fall\xF3."), EXIT.API);
+      else if (e.event === "done") break;
+    }
+  } finally {
+    ctrl.abort();
+  }
+  if (!globals.json && !answer.endsWith("\n")) process.stdout.write("\n");
+  return answer;
+}
+async function recycle(agent) {
+  for (let i = 0; i < 10; i++) {
+    try {
+      await api(`/api/v2/agents/${enc11(agent)}/box`, { method: "POST", body: { recycle: true } });
+      return;
+    } catch (e) {
+      if (!(e instanceof CliError) || !/turno|turn/i.test(e.message)) throw e;
+      await new Promise((r) => setTimeout(r, 3e3));
+    }
+  }
+  throw new CliError(t("Couldn't recycle: a turn kept running.", "No pude reciclar: segu\xEDa un turno en curso."), EXIT.API);
+}
+async function tryDemo(slug, texts, v) {
+  if (!slug || !texts.length) throw usage(t("Missing slug or message.", "Falta el slug o el mensaje."), 'ghosty demos try <slug> "recuerda MANZANA-47" "\xBFqu\xE9 palabra te dije?" [--recycle-between --agent <agent>] [--new]');
+  if (v["recycle-between"] && !v.agent) throw usage(t("--recycle-between needs --agent <agent> (its boxes get recycled).", "--recycle-between necesita --agent <agente> (se reciclan sus cajas)."));
+  const base = await baseUrl();
+  const cookie = await visitorCookie(base, slug, !!v.new);
+  if (!globals.json) info(dim(t(`visitor ${v.new ? "new" : "saved"} \xB7 each message counts against the demo's caps and shows up in its stats and CRM`, `visitante ${v.new ? "nuevo" : "guardado"} \xB7 cada mensaje cuenta contra los topes del demo y sale en sus n\xFAmeros y el CRM`)));
+  const answers = [];
+  for (const [i, text] of texts.entries()) {
+    const recycledBefore = i > 0 && !!v["recycle-between"];
+    if (recycledBefore) {
+      await recycle(v.agent);
+      if (!globals.json) info(lavender(t("\u21BB boxes recycled: the next answer starts in a new box", "\u21BB cajas recicladas: la siguiente respuesta nace en caja nueva")));
+    }
+    if (!globals.json) info(bold(`\u{1F464} ${text}`));
+    answers.push({ text, answer: await visitorTurn(base, slug, cookie, text), recycledBefore });
+  }
+  if (globals.json) out({ slug, turns: answers });
+}
+async function demosCmd(sub, a1, rest, v) {
+  if (sub === "history") return history(a1, v);
+  if (sub === "try") return tryDemo(a1, rest, v);
+  throw usage(t(`Unknown demos subcommand: ${sub ?? "(none)"}.`, `Subcomando de demos desconocido: ${sub ?? "(ninguno)"}.`), 'ghosty demos history <agent> \xB7 ghosty demos try <slug> "message"');
+}
+
 // src/index.ts
 var HELP_EN = `${bold("Usage:")} ghosty <command> [options]
 
@@ -11963,6 +12145,10 @@ ${bold("Configure an agent")}
   cards show <id> <card>    A card's thread: who wrote, text, attachments and whether gs kept a copy   (folio, phone or id)
   cards archive <id>        Archive cards in bulk (reversible)   --integration X | --column X | --before 30d   [--dry-run]
 
+${bold("Demos")}
+  demos try <slug> "msg" ["msg2"\u2026]   Try a public demo as a visitor (same thread across runs)   [--new] [--recycle-between --agent X]
+  demos history <id>                 What visitors did: turns, messages, files (Ghosty staff)   [--since 2d] [--session web:\u2026] [--timeline] [--full]
+
 ${bold("Talk to an agent")}
   try <id> "message"        One test turn, prints the full answer   [--session] [--reset]
     --waba --session PHONE  \u2026through the real WhatsApp path, nothing sent; lists what it would send (tools too)   [--media FILE [--as-formmy]] [--history FILE]
@@ -12071,6 +12257,10 @@ ${bold("Configurar un agente")}
   cards show <id> <tarjeta> El hilo de una tarjeta: qui\xE9n escribi\xF3, texto, adjuntos y si gs guard\xF3 copia   (folio, tel\xE9fono o id)
   cards archive <id>        Archiva tarjetas en bloque (reversible)   --integration X | --column X | --before 30d   [--dry-run]
 
+${bold("Demos")}
+  demos try <slug> "msg" ["msg2"\u2026]   Prueba un demo p\xFAblico como visitante (mismo hilo entre corridas)   [--new] [--recycle-between --agent X]
+  demos history <id>                 Qu\xE9 hicieron los visitantes: turnos, mensajes, archivos (staff de Ghosty)   [--since 2d] [--session web:\u2026] [--timeline] [--full]
+
 ${bold("Hablar con un agente")}
   try <id> "mensaje"        Un turno de prueba; imprime la respuesta completa   [--session] [--reset]
     --waba --session TEL    \u2026por el camino real de WhatsApp, sin enviar nada; lista lo que mandar\xEDa (tools tambi\xE9n)   [--media ARCHIVO [--as-formmy]] [--history ARCHIVO]
@@ -12109,7 +12299,7 @@ ${bold("Opciones globales")}
 ${bold("C\xF3digos de salida")}  0 bien \xB7 1 error de la API \xB7 2 uso incorrecto \xB7 3 sin sesi\xF3n
 ${dim("Nota: `ghosty` puede chocar con otro binario en tu PATH (p. ej. la TUI de Ghosty). Rev\xEDsalo con `which -a ghosty`; corre `npx @ghostystudio/cli` para ir a la segura.")}
 ${dim("Documentaci\xF3n: https://www.ghosty.studio/docs/cli")}`;
-var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "boards", "credentials", "docs", "help"];
+var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "demos", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "boards", "credentials", "docs", "help"];
 var AGENTS_SUBS = ["ls", "create", "get", "set", "export", "doctor", "docs", "share", "unshare", "shares", "rm", "restart", "demo", "box"];
 function unknown(what, input, known, helpCmd) {
   const s = suggest(input, known);
@@ -12280,7 +12470,12 @@ async function main() {
       "quota-hits": { type: "boolean" },
       by: { type: "string" },
       models: { type: "boolean" },
-      teams: { type: "string" }
+      teams: { type: "string" },
+      format: { type: "string" },
+      timeline: { type: "boolean" },
+      new: { type: "boolean" },
+      "recycle-between": { type: "boolean" },
+      "env-file": { type: "string" }
     }
   });
   globals.json = Boolean(v.json);
@@ -12288,7 +12483,7 @@ async function main() {
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.27.0" }, () => "0.27.0");
+  if (v.version) return out({ version: "0.28.0" }, () => "0.28.0");
   for (const n of normalizeArgs(pos, v)) if (!globals.json) info(dim(n));
   const context = (await readConfig()).workspace;
   if (!explicitToken()?.startsWith("gat_")) {
@@ -12395,6 +12590,9 @@ async function main() {
       return meUsage();
     case "engines":
       return enginesCmd(sub, v);
+    case "demos":
+    case "demo":
+      return demosCmd(sub, a1, pos.slice(3).filter((x) => x !== void 0), v);
     case "bags":
     case "bag":
       return bagsCmd(sub, a1, a2, v, context);
@@ -12417,7 +12615,7 @@ async function main() {
       throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
-var notice = updateNotice("0.27.0").catch(() => null);
+var notice = updateNotice("0.28.0").catch(() => null);
 main().then(
   async () => {
     const n = await notice;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghostystudio/cli",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.",
   "type": "module",
   "bin": {