@ghostystudio/cli 0.49.0 → 0.51.0

package/README.md

@@ -38,6 +38,8 @@ ghosty agents box <id> [--check PATH]… [--contains PATH=TEXT]… [--recycle]
 ghosty agents demo enable|disable <id>
 ghosty agents demo <id> [--slug NAME] [--expires "YYYY-MM-DDTHH:MM"|no] [--turns N] [--per-ip N]
                         [--welcome TEXT] [--starter TEXT] [--chips "a|b|c"] [--sponsor on|off] [--rotate]   # public /p/ link, no account needed
+ghosty agents embed enable|disable <id> [--domains a.com,*.b.com]   # web widget: chat bubble on your site, only on those domains
+ghosty agents embed <id> [--per-visitor N] [--per-ip N] [--welcome TEXT] [--color #hex] [--rotate]   # state + the <script> to paste
 ghosty agents doctor <id> [--verbose]                 # exits 1 when it finds a problem
 ghosty agents docs ls|grant|revoke <id> [doc]         [--write] [--no-deliver]
 ghosty agents docs add <id> --url URL | --file PATH   [--description TEXT] [--grant read|write|no]
@@ -103,6 +105,19 @@ Every command has its own help with examples: `ghosty <command> --help` or `ghos
 
 Exit codes: `0` ok · `1` API error · `2` usage error · `3` not signed in.
 
+### Changes in 0.51.0
+
+- `agents embed enable|disable <id> [--domains a.com,*.b.com] [--per-visitor N] [--per-ip N] [--welcome T] [--color #hex] [--rotate]`: the **web widget**, a chat bubble with the agent on your own site (one `<script>`), loading only on the domains you list; each visitor gets an isolated conversation and talks as a customer. Claude engine only. No flags = state + the snippet.
+
+### Changes in 0.50.0
+
+- `cards pause|resume <id> <card> [--mode 30min|2h|24h|until_tomorrow|permanent]`: the thread's pause menu; resume also lifts "operator only" and doesn't answer by itself. Logged.
+- `cards reply <id> <card> [--directive TEXT]` ("Ask for a reply") and `cards pending <id> [--since 2d|ISO] [--reply] [--dry-run]`: conversations whose last message is the customer's, flagged when they must not be answered (paused, escalated, outside the 24 h window, only a reaction, not WhatsApp Business, number without agent).
+- `channels whatsapp integrations` shows who answered each number last; `--orphans` and `channels messenger ls [--orphans]` list numbers/pages nobody answers today that had turns.
+- `agents set --prompt-patch overlay.json` / `--prompt-append FILE [--dry-run]`: change one piece of the prompt on the server's current copy (dry run prints the diff).
+- `audit ls [--workspace] [--agent] [--actor] [--action] [--since]`: the audit log. The agent page's Save and channel changes are logged now.
+- `factory runs ls|show|rename` (a workspace's Software Factory runs) and `agents ls --handle build`.
+
 ### Changes in 0.49.0
 
 - `dbs export <id> <db> [--table T] [--out FILE]`: download a database — the whole thing as `.sqlite` (sqlite3, DB Browser, DBeaver) or one table as CSV (Excel). Same buttons on each database's page in /app/datos.

package/dist/index.js

@@ -8135,7 +8135,41 @@ var SERVER_MESSAGES = [
   // — Infra interna (casi nunca llega al CLI, pero por si acaso)
   ["SESSION_SECRET ausente en producci\xF3n \u2014 las cookies quedar\xEDan firmadas con un valor p\xFAblico. Inyectarlo con ./scripts/set_gs_secret.sh SESSION_SECRET (openssl rand -hex 32).", "SESSION_SECRET missing in production \u2014 cookies would be signed with a public value. Inject it with ./scripts/set_gs_secret.sh SESSION_SECRET (openssl rand -hex 32)."],
   ["sqld: fetch sin namespace", "sqld: fetch without namespace"],
-  ["sqld: token sin namespace ser\xEDa un token maestro", "sqld: a token without namespace would be a master token"]
+  ["sqld: token sin namespace ser\xEDa un token maestro", "sqld: a token without namespace would be a master token"],
+  // — CLI 0.50: cards pause/resume/reply/pending, canales huérfanos, audit, factory, prompt-patch
+  ["el agente est\xE1 trabajando ahora; repite cuando termine", "the agent is working right now; try again when it's done"],
+  ["no pude saber si el agente est\xE1 trabajando", "couldn't tell whether the agent is working"],
+  ["s\xF3lo el due\xF1o cambia a qui\xE9n puede escribir el agente desde canales de clientes", "only the owner changes who the agent may email from customer channels"],
+  ["el pedido es un n\xFAmero (#15 o 15)", "the run is a number (#15 or 15)"],
+  ["el prompt cambi\xF3 mientras tanto y {}", "the prompt changed in the meantime and {}"],
+  ["el prompt no tiene \xAB{}\xBB", "the prompt has no \xAB{}\xBB"],
+  ["el prompt quedar\xEDa de {} caracteres (m\xE1x. 120000)", "the prompt would be {} characters (max 120000)"],
+  ["el token del agente no busca handles: usa tu sesi\xF3n (ghosty login)", "the agent token can't look up handles: use your session (ghosty login)"],
+  ["el token del agente no lee la bit\xE1cora: usa tu sesi\xF3n (ghosty login)", "the agent token can't read the audit log: use your session (ghosty login)"],
+  ["el token del agente no lista los canales del espacio: usa tu sesi\xF3n (ghosty login)", "the agent token can't list the workspace's channels: use your session (ghosty login)"],
+  ["el token del agente no opera la f\xE1brica: usa tu sesi\xF3n (ghosty login)", "the agent token can't operate the factory: use your session (ghosty login)"],
+  ["el t\xEDtulo pasa de 120 caracteres", "the title is longer than 120 characters"],
+  ["ese n\xFAmero lo contesta otro agente ({})", "that number is answered by another agent ({})"],
+  ["este n\xFAmero no tiene un agente que conteste", "this number has no agent answering it"],
+  ["este prompt se genera de otro agente + una capa: cambia la base o la capa, o su\xE9ltalo (ghosty agents set {} --prompt-base none)", "this prompt is generated from another agent + an overlay: change the base or the overlay, or unlink it (ghosty agents set {} --prompt-base none)"],
+  ["falta handle", "missing handle"],
+  ["kind: waba o messenger", "kind: waba or messenger"],
+  ["no encuentro el agente {} (o su bit\xE1cora no es tuya)", "agent {} not found (or its audit log isn't yours)"],
+  ["no eres miembro del espacio \xAB{}\xBB", "you're not a member of workspace \xAB{}\xBB"],
+  ["no hay un pedido #{} en la f\xE1brica de este espacio", "there's no run #{} in this workspace's factory"],
+  ["para cambiar los pedidos de \xAB{}\xBB hace falta ser due\xF1o o admin del espacio", "changing \xAB{}\xBB's runs needs the workspace's owner or an admin"],
+  ["no se pudo", "it couldn't be done"],
+  ["parche inv\xE1lido: {}", "invalid patch: {}"],
+  ["promptAppend vac\xEDo", "empty promptAppend"],
+  ["s\xF3lo el due\xF1o de \xAB{}\xBB o el staff de Ghosty leen su bit\xE1cora", "only \xAB{}\xBB's owner or Ghosty staff read its audit log"],
+  ["s\xF3lo aplica a conversaciones de WhatsApp Business", "only applies to WhatsApp Business conversations"],
+  ["ese n\xFAmero ya no est\xE1 conectado", "that number is no longer connected"],
+  ["ese n\xFAmero no es de este tablero", "that number isn't on this board"],
+  // — Widget web (`agents embed`)
+  ["s\xF3lo el due\xF1o del agente maneja su widget web", "only the agent's owner manages its web widget"],
+  ["dominio no v\xE1lido: {} (usa ejemplo.com o *.ejemplo.com, sin https:// ni rutas)", "invalid domain: {} (use example.com or *.example.com, no https:// or paths)"],
+  ["el widget web s\xF3lo corre con motor claude (es el que a\xEDsla a cada visitante)", "the web widget only runs on the claude engine (it's the one that isolates each visitor)"],
+  ["pon al menos un dominio donde va a vivir el widget (--domains ejemplo.com)", "add at least one domain where the widget will live (--domains example.com)"]
 ];
 
 // src/i18n.ts
@@ -8434,7 +8468,7 @@ async function postLong(path, body, timeoutMs = 9e5) {
     const req = httpsRequest(`${base}${path}`, {
       method: "POST",
       timeout: timeoutMs,
-      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.49.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.51.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
     }, (res) => {
       let buf = "";
       res.on("data", (c) => buf += c);
@@ -8476,7 +8510,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.49.0"}`,
+      "user-agent": `ghosty-cli/${"0.51.0"}`,
       "accept-language": lang(),
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
@@ -8684,6 +8718,52 @@ ${dim(t(`Report: ${file}   Failed turns: ghosty turns ls ${id} --errors --since
   if (failed) process.exitCode = 1;
 }
 
+// src/diff.ts
+function lineDiff(before, after, context = 2) {
+  const a = before.split("\n");
+  const b = after.split("\n");
+  let start = 0;
+  while (start < a.length && start < b.length && a[start] === b[start]) start++;
+  let endA = a.length;
+  let endB = b.length;
+  while (endA > start && endB > start && a[endA - 1] === b[endB - 1]) {
+    endA--;
+    endB--;
+  }
+  const midA = a.slice(start, endA);
+  const midB = b.slice(start, endB);
+  const n = midA.length;
+  const m = midB.length;
+  const dp = Array.from({ length: n + 1 }, () => new Uint32Array(m + 1));
+  for (let i2 = n - 1; i2 >= 0; i2--) for (let j2 = m - 1; j2 >= 0; j2--) dp[i2][j2] = midA[i2] === midB[j2] ? dp[i2 + 1][j2 + 1] + 1 : Math.max(dp[i2 + 1][j2], dp[i2][j2 + 1]);
+  const ops = a.slice(0, start).map((text, i2) => ({ kind: " ", text, at: i2 + 1 }));
+  let i = 0;
+  let j = 0;
+  while (i < n || j < m) {
+    if (i < n && j < m && midA[i] === midB[j]) {
+      ops.push({ kind: " ", text: midA[i], at: start + i + 1 });
+      i++;
+      j++;
+    } else if (i < n && (j >= m || dp[i + 1][j] >= dp[i][j + 1])) {
+      ops.push({ kind: "-", text: midA[i], at: start + i + 1 });
+      i++;
+    } else ops.push({ kind: "+", text: midB[j++], at: start + i + 1 });
+  }
+  for (let k = endA; k < a.length; k++) ops.push({ kind: " ", text: a[k], at: k + 1 });
+  const keep = /* @__PURE__ */ new Set();
+  ops.forEach((o, k) => {
+    if (o.kind !== " ") for (let x = Math.max(0, k - context); x <= Math.min(ops.length - 1, k + context); x++) keep.add(x);
+  });
+  const lines = [];
+  let last = -2;
+  for (const k of [...keep].sort((x, y) => x - y)) {
+    if (k !== last + 1) lines.push(`@@ ${ops[k].at}`);
+    lines.push(`${ops[k].kind} ${ops[k].text}`);
+    last = k;
+  }
+  return lines.join("\n");
+}
+
 // src/commands/agents.ts
 var enc2 = encodeURIComponent;
 var agentPath = (id, rest = "") => `/api/v2/agents/${enc2(id)}${rest}`;
@@ -8830,6 +8910,25 @@ ${dim(t("Dry run: nothing changed.", "Simulacro: no se cambi\xF3 nada."))}`);
     }
     return out(r2, () => r2.unlinked ? `${lavender("\u2713")} ${t("Unlinked: the prompt stays as it is and is edited by hand again.", "Desenlazado: el prompt se queda como est\xE1 y se vuelve a editar a mano.")}` : `${lavender("\u2713")} Prompt = ${v["prompt-base"]} + ${v["prompt-overlay"]} ${t(`(${r2.chars} chars). It regenerates when the base changes; ghosty agents doctor ${id} tells if the overlay stops applying.`, `(${r2.chars} caracteres). Se regenera cuando cambia la base; ghosty agents doctor ${id} avisa si la capa deja de aplicar.`)}`);
   }
+  if (v["prompt-patch"] || v["prompt-append"]) {
+    const body2 = {};
+    if (v["prompt-patch"]) {
+      try {
+        body2.promptPatch = JSON.parse(await readFile3(v["prompt-patch"], "utf8"));
+      } catch (e) {
+        throw usage(t(`Can't read ${v["prompt-patch"]}: ${e.message}`, `No pude leer ${v["prompt-patch"]}: ${e.message}`), t("Its format", "Su formato") + ': {"edits":[{"what":"horario","find":"9 a 18","replace":"9 a 19","all":true}]} (regex: true ' + t("for patterns", "para patrones") + ")");
+      }
+    }
+    if (v["prompt-append"]) body2.promptAppend = await readFile3(v["prompt-append"], "utf8");
+    if (v["dry-run"]) {
+      const r3 = await api(agentPath(id), { method: "PATCH", body: { ...body2, dryRun: true } });
+      const diff = lineDiff(r3.before, r3.after);
+      return out({ dryRun: true, beforeChars: r3.beforeChars, chars: r3.chars, diff }, () => `${diff.split("\n").map((l) => l.startsWith("+ ") ? lavender(l) : l.startsWith("- ") ? red(l) : l.startsWith("@@") ? dim(l) : l).join("\n")}
+${dim(t(`${r3.beforeChars} \u2192 ${r3.chars} chars. Dry run: nothing changed.`, `${r3.beforeChars} \u2192 ${r3.chars} caracteres. Simulacro: no se cambi\xF3 nada.`))}`);
+    }
+    const r2 = await api(agentPath(id), { method: "PATCH", body: body2 });
+    return out(r2, () => `${lavender("\u2713")} ${t(`Prompt patched (${r2.edits} edit(s)${r2.appended ? " + appended text" : ""}): ${r2.beforeChars} \u2192 ${r2.chars} chars. It applies from the next conversation.`, `Prompt parchado (${r2.edits} edici\xF3n(es)${r2.appended ? " + texto anexado" : ""}): ${r2.beforeChars} \u2192 ${r2.chars} caracteres. Entra desde la siguiente conversaci\xF3n.`)}`);
+  }
   if (v.engine && v["dry-run"]) {
     const p = await api(agentPath(id), { method: "PATCH", body: { engine: v.engine, ...v.model ? { model: v.model } : {}, dryRun: true } });
     return out(p, () => [
@@ -9111,10 +9210,10 @@ async function skillsCmd(sub, id, slug, v) {
     case "ls":
     case "list": {
       const r = await api(agentPath(id, "/skills"));
-      const short2 = (d) => (d ?? "").replace(/\s+/g, " ").slice(0, 70);
+      const short3 = (d) => (d ?? "").replace(/\s+/g, " ").slice(0, 70);
       const rows = [
-        ...r.skills.map((s) => ({ slug: s.slug, source: "own", on: "on", description: short2(s.description) })),
-        ...(r.house ?? []).map((s) => ({ slug: s.slug, source: "ghosty", on: s.enabled ? "on" : "off", description: short2(s.description) }))
+        ...r.skills.map((s) => ({ slug: s.slug, source: "own", on: "on", description: short3(s.description) })),
+        ...(r.house ?? []).map((s) => ({ slug: s.slug, source: "ghosty", on: s.enabled ? "on" : "off", description: short3(s.description) }))
       ];
       const more = r.community.filter((c) => !c.installed).length;
       out(r, () => `${table(rows, ["slug", "source", "on", "description"])}
@@ -9245,6 +9344,33 @@ async function agentsDemo(id, v) {
     ].join("\n")
   );
 }
+async function agentsEmbed(id, v) {
+  id = need(id, "agent id", "ghosty agents embed enable <agent-id> --domains tusitio.com");
+  if (v.on && v.off) throw usage(t("Use enable or disable, not both.", "Usa enable o disable, no los dos."));
+  const body = {};
+  if (v.on) body.enabled = true;
+  if (v.off) body.enabled = false;
+  if (v.domains !== void 0) body.domains = v.domains.split(/[\s,]+/).map((d) => d.trim()).filter(Boolean);
+  if (v["per-visitor"]) body.perVisitorDay = Number(v["per-visitor"]);
+  if (v["per-ip"]) body.perIpDay = Number(v["per-ip"]);
+  if (v.welcome !== void 0) body.welcome = v.welcome || null;
+  if (v.color !== void 0) body.color = v.color;
+  if (v.rotate) body.rotate = true;
+  const e = Object.keys(body).length ? await api(agentPath(id, "/embed"), { method: "PUT", body }) : await api(agentPath(id, "/embed"));
+  out(
+    e,
+    () => [
+      `${e.enabled ? lavender(t("\u25CF on", "\u25CF encendido")) : dim(t("\u25CB off", "\u25CB apagado"))}  ${t("web widget", "widget web")}`,
+      e.domains.length ? `${t("domains", "dominios")}: ${e.domains.join(", ")}` : red(t("domains: (none \u2014 it loads nowhere; add --domains yoursite.com)", "dominios: (ninguno \u2014 no carga en ning\xFAn lado; agrega --domains tusitio.com)")),
+      ...e.engineOk ? [] : [red(t("engine: only claude isolates each visitor; switch with `ghosty agents set <id> --engine claude`", "motor: s\xF3lo claude a\xEDsla a cada visitante; c\xE1mbialo con `ghosty agents set <id> --engine claude`"))],
+      dim(t(`cap ${e.perVisitorDay} messages per visitor per day \xB7 ${e.perIpDay} per IP per day \xB7 color ${e.color}`, `tope ${e.perVisitorDay} mensajes por visitante al d\xEDa \xB7 ${e.perIpDay} por IP al d\xEDa \xB7 color ${e.color}`)),
+      e.welcome ? `${t("welcome", "bienvenida")}: ${e.welcome}` : dim(t("welcome: (default greeting)", "bienvenida: (saludo por defecto)")),
+      ...e.snippet ? ["", t("Paste before </body> on your site:", "Pega antes de </body> en tu sitio:"), e.snippet, ""] : [],
+      t(`visitors ${e.stats.visitantes} \xB7 messages ${e.stats.mensajes}`, `visitantes ${e.stats.visitantes} \xB7 mensajes ${e.stats.mensajes}`),
+      ...e.lastError ? [red(`${t("last failure", "\xFAltima falla")} ${e.lastError.at}: ${serverText(e.lastError.message ?? e.lastError.error ?? "")}`)] : []
+    ].join("\n")
+  );
+}
 async function agentsBox(id, v) {
   id = need(id, "agent id", "ghosty agents box <agent-id> [--check PATH] [--contains PATH=TEXT] [--recycle]");
   if (v.recycle) {
@@ -9856,7 +9982,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.49.0"}`
+        "user-agent": `ghosty-cli/${"0.51.0"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -10916,10 +11042,16 @@ function find2(nums, ref) {
   return hit;
 }
 async function channelsCmd(kind, sub, id, ref, v) {
+  if (kind === "messenger" || kind === "fb") {
+    if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + ": ghosty channels messenger ls <agent-id> [--orphans]");
+    if (sub && sub !== "ls" && sub !== "list") throw usage(t(`Unknown subcommand: ${sub}.`, `Subcomando desconocido: ${sub}.`), t("Try", "Prueba") + ": ghosty channels messenger ls <agent-id> [--orphans]");
+    return linksCmd(id, "messenger", v.orphans);
+  }
   if (kind !== "whatsapp" && kind !== "wa") throw usage(t(`Unknown channel: ${kind ?? "(none)"}.`, `Canal desconocido: ${kind ?? "(ninguno)"}.`), t("Try", "Prueba") + ": ghosty channels whatsapp ls <agent-id>");
   if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + ": ghosty channels whatsapp ls <agent-id>");
   if (sub === "link" || sub === "unlink") return linkCmd(sub, id, v);
   if (sub === "history") return historyCmd(id, v);
+  if (sub === "integrations" && v.orphans) return linksCmd(id, "waba", true);
   if (sub === "integrations") return integrationsCmd(id, v.email);
   if (sub === "import" || sub === "status" || sub === "pause" || sub === "pair") return waCmd2(sub, id, v);
   if (sub === "enable" && !v["dry-run"]) requireYesIfHeadless(v.yes, `ghosty channels whatsapp enable ${id} ${ref ?? "<number>"}`);
@@ -11150,6 +11282,19 @@ async function pageWithRetry(fetchPage, where, waitMs = (n) => 5e3 * n, tries =
     }
   }
 }
+var lastCell = (l) => l ? `${l.agentName ?? l.agentId} ${dim(l.at.slice(0, 16).replace("T", " "))}` : dim("\u2014");
+async function linksCmd(id, kind, orphans) {
+  const r = await api(`/api/v2/agents/${enc7(id)}/channels/links?kind=${kind}${orphans ? "&orphans=1" : ""}`);
+  const now = (l) => l.answersNow ? l.answersNow.agentName ?? l.answersNow.agentId : l.recordsOnly ? t("nobody (records only)", "nadie (s\xF3lo registra)") : l.via === "easybits" ? "EasyBits" : l.via === "partner" ? "partner" : lavender(t("nobody", "nadie"));
+  const rows = r.links.map((l) => ({ [kind === "waba" ? "number" : "page"]: l.label, "answers now": now(l), "last answered by": lastCell(l.lastAnswer), turns: l.lastAnswer?.turns ?? 0, id: l.id }));
+  const first = r.links.find((l) => l.nobody && l.lastAnswer);
+  const hint = first ? `
+${dim(`${t("Give it back", "Regresarlo")}: ${kind === "waba" ? `ghosty channels whatsapp enable ${first.lastAnswer.agentId} ${first.label.split(" ")[0]} --dry-run` : t(`the agent's Channels page (Messenger \u2192 \xABPass to this agent\xBB)`, `la p\xE1gina Canales del agente (Messenger \u2192 \xABPasar a este agente\xBB)`)}`)}` : "";
+  return out(
+    r,
+    () => rows.length ? `${table(rows, [kind === "waba" ? "number" : "page", "answers now", "last answered by", "turns", "id"])}${hint}` : dim(orphans ? t("No orphans: every number/page with turns has an agent answering.", "Sin hu\xE9rfanos: todo n\xFAmero o p\xE1gina con turnos tiene un agente que contesta.") : t("No numbers/pages in this agent's workspace.", "No hay n\xFAmeros ni p\xE1ginas en el espacio de este agente."))
+  );
+}
 async function integrationsCmd(id, email) {
   const r = await api(`/api/v2/agents/${enc7(id)}/whatsapp/integrations${email ? `?email=${enc7(email)}` : ""}`);
   const who2 = { gs: "gs", easybits: "EasyBits", droplet: "droplet", formmy: "Formmy", other: t("other", "otro") };
@@ -11159,11 +11304,12 @@ async function integrationsCmd(id, email) {
     "answered by": `${who2[i.answeredBy] ?? i.answeredBy}${i.gsAgent ? ` (${i.thisAgent ? lavender(t("this agent", "este agente")) : i.gsAgent.name})` : ""}${i.isActive ? "" : dim(t(" \xB7 inactive", " \xB7 inactiva"))}`,
     "formmy forwards": i.forwards ? t("yes", "s\xED") : dim("no"),
     "formmy agent": i.agent ?? "",
+    "last answered by": lastCell(i.lastAnswer),
     integration: i.integrationId
   }));
   return out(
     r,
-    () => rows.length ? `${table(rows, ["number", "name", "answered by", "formmy forwards", "formmy agent", "integration"])}
+    () => rows.length ? `${table(rows, ["number", "name", "answered by", "last answered by", "formmy forwards", "formmy agent", "integration"])}
 ${dim(`${t("Next", "Siguiente")}: ghosty channels whatsapp link ${id} --integration <integration> --answer on|off --dry-run`)}` : dim(t(`${r.ownerEmail} has no WhatsApp Business numbers in Formmy (staff: --email <other Formmy account>).`, `${r.ownerEmail} no tiene n\xFAmeros de WhatsApp Business en Formmy (staff: --email <otra cuenta de Formmy>).`))
   );
 }
@@ -11231,6 +11377,31 @@ ${t(`Cards appear on the team's board (no "new lead" alerts).`, "Las tarjetas ap
   out({ ...sum, conversations: done }, () => `${lavender("\u2713")} ${t(`${sum.newCards} new card(s), ${sum.updatedCards} updated, ${sum.messages} message(s), ${sum.orders} order(s)`, `${sum.newCards} tarjeta(s) nueva(s), ${sum.updatedCards} actualizada(s), ${sum.messages} mensaje(s), ${sum.orders} pedido(s)`)}${files(sum)}${sum.suppressed ? dim(t(` \xB7 ${sum.suppressed} bot draft(s) the customer never saw, skipped`, ` \xB7 se omitieron ${sum.suppressed} borrador(es) del bot que el cliente nunca vio`)) : ""}${pausedLine(sum, id)}`);
 }
 
+// src/cards.ts
+var PAUSE_MODES = ["30min", "2h", "24h", "until_tomorrow", "permanent"];
+function pauseMode(raw) {
+  const m = (raw ?? "24h").trim();
+  if (!PAUSE_MODES.includes(m)) throw new Error(t(`--mode takes ${PAUSE_MODES.join(" | ")}.`, `--mode acepta ${PAUSE_MODES.join(" | ")}.`));
+  return m;
+}
+function flagLabel(flag) {
+  const labels = {
+    paused: ["paused", "en pausa"],
+    escalated: ["escalated (operator only)", "escalada (s\xF3lo operador)"],
+    window_closed: ["outside WhatsApp's 24 h window", "fuera de la ventana de 24 h"],
+    reaction: ["only a reaction", "s\xF3lo una reacci\xF3n"],
+    not_whatsapp: ["not WhatsApp Business", "no es WhatsApp Business"],
+    no_agent: ["number answered by nobody", "n\xFAmero sin agente"]
+  };
+  const l = labels[flag];
+  return l ? t(l[0], l[1]) : flag;
+}
+function pauseLabel(p) {
+  if (p.state === "escalated") return t("escalated (operator only)", "escalada (s\xF3lo operador)");
+  if (p.state === "paused") return t(`paused until ${p.until?.slice(0, 16).replace("T", " ")}`, `en pausa hasta ${p.until?.slice(0, 16).replace("T", " ")}`);
+  return t("active (the agent answers)", "activa (el agente contesta)");
+}
+
 // src/commands/board.ts
 var who = (role) => ({ user: t("customer", "cliente"), assistant: t("agent", "agente"), operator: t("operator", "operador") })[role] ?? role;
 async function boardLs(id, v) {
@@ -11254,7 +11425,79 @@ async function boardShow(id, ref, v) {
   };
   out(r, () => [head, ...r.messages.map(line2)].join("\n"));
 }
+var cardName = (c) => `${c.folio ? `#${c.folio} ` : ""}${c.name ?? `+${c.phone}`}`;
+var cardPath = (id, ref, tail = "") => `/api/v2/agents/${encodeURIComponent(id)}/board/conversations/${encodeURIComponent(ref)}${tail}`;
+async function cardPause(sub, id, ref, v) {
+  if (!ref) throw usage(t("Missing card.", "Falta la tarjeta."), t("Example", "Ejemplo") + `: ghosty cards ${sub} ${id} "#12"${sub === "pause" ? " --mode 2h" : ""}`);
+  let mode = "resume";
+  if (sub === "pause") {
+    try {
+      mode = pauseMode(v.mode);
+    } catch (e) {
+      throw usage(e.message);
+    }
+  }
+  const r = await api(cardPath(id, ref, "/pause"), { body: { mode } });
+  out(r, () => `${lavender("\u2713")} ${bold(cardName(r.card))}: ${pauseLabel(r.before)} \u2192 ${pauseLabel(r.after)}${sub === "resume" ? `
+${dim(t(`Resuming doesn't answer by itself; to answer what's pending: ghosty cards reply ${id} ${JSON.stringify(ref)}`, `Reanudar no contesta solo; para contestar lo pendiente: ghosty cards reply ${id} ${JSON.stringify(ref)}`))}` : ""}`);
+}
+async function cardReply(id, ref, v) {
+  if (!ref) throw usage(t("Missing card.", "Falta la tarjeta."), t("Example", "Ejemplo") + `: ghosty cards reply ${id} "#12" [--directive "ofr\xE9cele el env\xEDo"]`);
+  const retry = `ghosty cards reply ${id} ${JSON.stringify(ref)}${v.directive ? ` --directive ${JSON.stringify(v.directive)}` : ""}`;
+  requireYesIfHeadless(v.yes, retry);
+  await confirm(t(`The agent will answer card ${ref} \u2014 a real customer gets the message. Go?`, `El agente contestar\xE1 la tarjeta ${ref}: un cliente real recibe el mensaje. \xBFSeguimos?`), { yes: v.yes, retry });
+  const r = await api(cardPath(id, ref, "/reply"), { body: v.directive ? { directive: v.directive } : {} });
+  out(r, () => `${lavender("\u2713")} ${t("Answered", "Contest\xF3")} ${bold(cardName(r.card))}${r.resumed ? dim(t(" (it was paused: resumed)", " (estaba en pausa: se reanud\xF3)")) : ""}`);
+}
+async function cardPending(id, v) {
+  const retry = `ghosty cards pending ${id}${v.since ? ` --since ${v.since}` : ""} --reply`;
+  if (v.reply && !v["dry-run"]) requireYesIfHeadless(v.yes, retry);
+  const qs = new URLSearchParams({ ...v.since ? { since: v.since } : {}, ...v.limit ? { limit: v.limit } : {} });
+  const r = await api(`/api/v2/agents/${encodeURIComponent(id)}/board/pending?${qs}`);
+  const go = r.cards.filter((c) => c.flags.length === 0);
+  const rows = r.cards.map((c) => ({
+    card: c.folio ? `#${c.folio}` : c.id.slice(0, 8),
+    name: c.name ?? "",
+    phone: c.phone,
+    msgs: c.pendingMessages,
+    since: c.lastUserAt.slice(5, 16).replace("T", " "),
+    last: c.lastText.replace(/\s+/g, " ").slice(0, 40),
+    status: c.flags.length ? dim(c.flags.map(flagLabel).join(", ")) : lavender(t("answer", "contestar"))
+  }));
+  const summary = dim(t(
+    `\xAB${r.board}\xBB since ${r.since.slice(0, 16).replace("T", " ")}: ${r.cards.length} waiting, ${go.length} can be answered${r.otherAgents ? ` (${r.otherAgents} more belong to another agent's numbers)` : ""}.`,
+    `\xAB${r.board}\xBB desde ${r.since.slice(0, 16).replace("T", " ")}: ${r.cards.length} esperando, ${go.length} se pueden contestar${r.otherAgents ? ` (otras ${r.otherAgents} son de n\xFAmeros de otro agente)` : ""}.`
+  ));
+  if (!v.reply || v["dry-run"] || !go.length) {
+    return out({ ...r, ...v.reply ? { dryRun: true, wouldReply: go.map((c) => c.id) } : {} }, () => `${rows.length ? `${table(rows, ["card", "name", "phone", "msgs", "since", "last", "status"])}
+` : ""}${summary}${v.reply && go.length ? `
+${dim(t("Dry run: nothing was sent.", "Simulacro: no se mand\xF3 nada."))}` : go.length ? `
+${dim(t(`Answer them: ${retry}`, `Contestarlas: ${retry}`))}` : ""}`);
+  }
+  if (!globals.json) info(table(rows.filter((_, k) => r.cards[k].flags.length === 0), ["card", "name", "phone", "msgs", "since", "last"]));
+  await confirm(t(`The agent will answer ${go.length} real customer(s), one by one. Go?`, `El agente les contestar\xE1 a ${go.length} cliente(s) reales, uno por uno. \xBFSeguimos?`), { yes: v.yes, retry });
+  const done = [];
+  for (const c of go) {
+    try {
+      await api(cardPath(id, c.id, "/reply"), { body: v.directive ? { directive: v.directive } : {} });
+      done.push({ id: c.id, ok: true });
+      if (!globals.json) info(`${lavender("\u2713")} ${cardName(c)}`);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      done.push({ id: c.id, ok: false, error: msg });
+      if (!globals.json) info(`\u2717 ${cardName(c)}: ${serverText(msg)}`);
+    }
+  }
+  const ok = done.filter((d) => d.ok).length;
+  out({ board: r.board, replied: done }, () => `${lavender("\u2713")} ${t(`Answered ${ok} of ${go.length}.`, `Se contestaron ${ok} de ${go.length}.`)}`);
+}
 async function boardCmd(sub, id, v, ref) {
+  if (sub === "pause" || sub === "resume" || sub === "reply" || sub === "pending") {
+    if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + `: ghosty cards ${sub} <agent-id>${sub === "pending" ? "" : ' "#12"'}`);
+    if (sub === "reply") return cardReply(id, ref, v);
+    if (sub === "pending") return cardPending(id, v);
+    return cardPause(sub, id, ref, v);
+  }
   if (sub === "ls" || sub === "list") {
     if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + ": ghosty board ls <agent-id> [--q text] [--limit 20]");
     return boardLs(id, v);
@@ -11263,7 +11506,7 @@ async function boardCmd(sub, id, v, ref) {
     if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + ': ghosty board show <agent-id> "#12"');
     return boardShow(id, ref, v);
   }
-  if (sub !== "archive") throw usage(t(`Unknown board subcommand: ${sub ?? "(none)"}.`, `Subcomando de board desconocido: ${sub ?? "(ninguno)"}.`), t("Try", "Prueba") + ": ghosty board ls <agent-id> \xB7 ghosty board show <agent-id> <folio|phone> \xB7 ghosty board archive <agent-id> --integration prueba --dry-run");
+  if (sub !== "archive") throw usage(t(`Unknown board subcommand: ${sub ?? "(none)"}.`, `Subcomando de board desconocido: ${sub ?? "(ninguno)"}.`), t("Try", "Prueba") + ": ghosty cards ls <agent-id> \xB7 show <agent-id> <folio|phone> \xB7 archive <agent-id> --integration prueba --dry-run \xB7 pause|resume|reply <agent-id> <card> \xB7 pending <agent-id>");
   if (!id) throw usage(t("Missing agent id.", "Falta el id del agente."), t("Example", "Ejemplo") + ": ghosty board archive <agent-id> --integration prueba --dry-run");
   const filter = { ...v.integration ? { integration: v.integration } : {}, ...v.column ? { column: v.column } : {}, ...v.before ? { before: v.before } : {} };
   if (!Object.keys(filter).length) throw usage(t("Add at least one filter: --integration, --column or --before.", "Agrega al menos un filtro: --integration, --column o --before."), t("A filter-less archive would empty the board.", "Archivar sin filtro vaciar\xEDa el tablero."));
@@ -11344,13 +11587,17 @@ var HELPS_ES = {
     summary: "Crea, revisa, cambia, diagnostica y borra agentes.",
     replace: [
       ["# the agent as a file; see ghosty apply --help", "# el agente como archivo; ver ghosty apply --help"],
+      ["# who is @build in Teams (that workspace, or all of yours)", "# qui\xE9n es @build en Teams (en ese espacio, o en todos los tuyos)"],
+      ["# change one piece of the prompt, on the server's current one", "# cambia un pedazo del prompt, sobre el actual del servidor"],
       ["# your account: merge copies with the same content", "# tu cuenta: une las copias con el mismo contenido"],
       ["# staff: their agents, latest turns, plan and boxes", "# staff: sus agentes, \xFAltimos turnos, plan y cajas"],
       ["# what it really has: effective toolsets, connectors connected + granted", "# lo que de verdad tiene: toolsets efectivos, conectores conectados + concedidos"],
       ["# Teams workspaces you administer: where it answers, is paused, and with which @handle", "# los equipos de Teams que administras: d\xF3nde contesta, d\xF3nde est\xE1 en pausa y con qu\xE9 @handle"],
       ["# turn it on there (or change its @handle)", "# lo prende ah\xED (o le cambia el @handle)"],
       ["# pause it there; it keeps its @handle", "# lo pausa ah\xED; conserva su @handle"],
-      ["# remove it from there; the agent stays", "# lo quita de ah\xED; el agente sigue"]
+      ["# remove it from there; the agent stays", "# lo quita de ah\xED; el agente sigue"],
+      ["# web widget: chat bubble on your site, only on those domains", "# widget web: burbuja de chat en tu sitio, s\xF3lo en esos dominios"],
+      ["# state + the <script> to paste", "# su estado + el <script> para pegar"]
     ],
     flags: [
       ["--fields a,b", "get: regresa s\xF3lo estos campos"],
@@ -11365,6 +11612,8 @@ var HELPS_ES = {
       ["--toolsets LIST", "set: grupos de tools de gs que recibe (crm, sales\u2026): una lista reemplaza; +x / -x agrega o quita"],
       ["--prompt-base ID", "set: el prompt de este agente = el prompt de ese agente + --prompt-overlay; se regenera cuando cambia la base. none = desliga (conserva el prompt de hoy)"],
       ["--prompt-overlay FILE", 'set: JSON {"edits":[{"what","find","replace","regex"?,"all"?}]}, aplicados en orden; cada uno debe encontrar su lugar o no cambia nada'],
+      ["--prompt-patch FILE", 'set: el mismo formato {"edits":[\u2026]}, aplicado UNA vez sobre el prompt actual del agente en el servidor (no sobre una copia local: nunca pisa el cambio de alguien m\xE1s). Si una edici\xF3n no encuentra su lugar, no cambia nada. --dry-run imprime el diff'],
+      ["--prompt-append FILE", "set: agrega ese texto al final del prompt (con --prompt-patch tambi\xE9n: primero las ediciones, luego el texto)"],
       ["--voice E:ID", "set: voz de las notas de voz: elevenlabs:<voiceId> o kokoro:em_santa|em_alex|ef_dora"],
       ["--voice-replies M", "set: auto = contesta con nota de voz cuando el cliente manda o pide audio; off = siempre texto"],
       ["--auto-stage on|off", "set: mueve solo las tarjetas del tablero tras cada turno del cliente (una llamada extra al modelo por turno)"],
@@ -11379,7 +11628,7 @@ var HELPS_ES = {
       ["--grant read|write|no", "docs add: acceso de este agente (default read; no = s\xF3lo subirlo a la cuenta)"],
       ["--note TEXT", "docs replace/restore: por qu\xE9 cambi\xF3 (sale en docs history)"],
       ["--role R", "share: editor (lo configura y lo usa) o admin (adem\xE1s lo comparte); repetirlo sobre un correo ya compartido cambia el rol"],
-      ["--handle NAME", "teams on: su @handle en ese equipo (default: sacado de su nombre, con sufijo si est\xE1 ocupado; @ghosty est\xE1 reservado). Sobre un equipo donde ya est\xE1, le cambia el handle"],
+      ["--handle NAME", "teams on: su @handle en ese equipo (default: sacado de su nombre, con sufijo si est\xE1 ocupado; @ghosty est\xE1 reservado). Sobre un equipo donde ya est\xE1, le cambia el handle. ls: qui\xE9n contesta a ese @handle"],
       ["--factory ROLES", "teams on: le pasa esos roles de la Software Factory del equipo (plan, build, check, eval; separados por comas) \u2014 lo mismo que \xABEquipo\xBB en /factory. Cada rol conserva su nombre y avatar; su siguiente turno ya corre en \xE9l. La f\xE1brica tiene que estar instalada ah\xED"],
       ["--yes", "rm: se salta la confirmaci\xF3n (obligatorio sin terminal)"],
       ["--slug NAME", "demo: nombre de la liga; se le agrega un c\xF3digo de 6 caracteres (/p/NAME-CODE)"],
@@ -11575,6 +11824,7 @@ var HELPS_ES = {
       ["--name N", "groups set: el nombre con que lo ve gs (p. ej. un grupo guardado con su jid de nombre); el asunto en WhatsApp no cambia"],
       ["--integration ID", "link/unlink/history: el id de la Integration del n\xFAmero de WhatsApp Business en Formmy"],
       ["--email E", "integrations (staff): lista los n\xFAmeros de otra cuenta de Formmy"],
+      ["--orphans", "integrations / messenger ls: s\xF3lo los n\xFAmeros o p\xE1ginas que hoy no contesta nadie y S\xCD tuvieron turnos, con qui\xE9n los contest\xF3 al \xFAltimo (a qui\xE9n regresarlos)"],
       ["--days N", "history: conversaciones activas en los \xFAltimos N d\xEDas (1-30, default 7)"],
       ["--media", "history: s\xF3lo re-copia los archivos que faltan (fotos, PDF, audios) de las conversaciones ya importadas"],
       ["--answer on|off", "link (obligatorio, sin default): on = este agente contesta a clientes reales; off = s\xF3lo registra"],
@@ -11592,7 +11842,7 @@ var HELPS_ES = {
       "Apagarlo sigue registrando los mensajes; nadie los contesta.",
       "Los grupos son del WhatsApp PERSONAL emparejado al agente (no de WhatsApp Business). <group> es su nombre o su jid.",
       "link mueve un n\xFAmero que ya vive en Formmy (EasyBits, un droplet) sin rehacer el alta de Meta; unlink lo regresa. S\xF3lo el due\xF1o, un admin del agente o el staff de Ghosty.",
-      "integrations lista los n\xFAmeros de WhatsApp Business del due\xF1o en Formmy (n\xFAmero, nombre, qui\xE9n contesta hoy: gs, EasyBits, un droplet o Formmy) con el id de la Integration que piden link e history. Tambi\xE9n salen los n\xFAmeros que el espacio ya enlaz\xF3 en gs, aunque en Formmy sean de otra cuenta.",
+      "integrations lista los n\xFAmeros de WhatsApp Business del due\xF1o en Formmy (n\xFAmero, nombre, qui\xE9n contesta hoy: gs, EasyBits, un droplet o Formmy) con el id de la Integration que piden link e history. Tambi\xE9n salen los n\xFAmeros que el espacio ya enlaz\xF3 en gs, aunque en Formmy sean de otra cuenta. \xABlast answered by\xBB es el agente del \xFAltimo turno en ese n\xFAmero (de los turnos de gs): as\xED un n\xFAmero que qued\xF3 en nadie se puede regresar.",
       "history trae al tablero las tarjetas, mensajes y pedidos recientes del n\xFAmero desde Formmy (enl\xE1zalo antes; --dry-run funciona sin enlazar, para decidir --days). Repetirlo nunca duplica: c\xF3rrelo antes del corte y otra vez justo en el corte. Los archivos (fotos, PDF, audios) tambi\xE9n se copian a gs: Formmy los borra a los 7 d\xEDas, as\xED que trae el n\xFAmero dentro de esa semana; una copia que fall\xF3 se reintenta con --media.",
       "import: apaga primero el socket de EasyBits SIN logout (dos sockets se tumban entre s\xED; un logout invalida las llaves). Borra el archivo despu\xE9s."
     ]
@@ -11674,12 +11924,19 @@ var HELPS_ES = {
       ["--integration ID", "tarjetas de este canal/integraci\xF3n (p. ej. prueba)"],
       ["--column NAME", "tarjetas en esta columna"],
       ["--before T", "tarjetas sin actividad desde T (30d, 12h o una fecha ISO)"],
-      ["-n, --dry-run", "cuenta y muestra una muestra, no cambia nada"],
-      ["--yes", "se salta la confirmaci\xF3n (obligatorio sin terminal)"]
+      ["-n, --dry-run", "cuenta y muestra una muestra, no cambia nada \xB7 pending --reply: lista lo que contestar\xEDa, no manda nada"],
+      ["--yes", "se salta la confirmaci\xF3n (obligatorio sin terminal)"],
+      ["--mode M", "pause: 30min | 2h | 24h (default) | until_tomorrow (9:00) | permanent (escalada: s\xF3lo operador)"],
+      ["--directive TEXT", "reply / pending --reply: una instrucci\xF3n para el agente (redacta su respuesta sigui\xE9ndola, no la repite)"],
+      ["--since T", "pending: clientes que escribieron desde T (30m, 2d o una fecha ISO; default 3d)"],
+      ["--reply", "pending: contesta, una por una, las que no traen bandera (pregunta antes)"]
     ],
     notes: [
       "show imprime cada mensaje con qui\xE9n lo escribi\xF3 (cliente, agente, operador), su adjunto y si gs guarda una copia.",
-      "Archivar es reversible: cuando el cliente vuelve a escribir, la tarjeta regresa. Se necesita al menos un filtro."
+      "Archivar es reversible: cuando el cliente vuelve a escribir, la tarjeta regresa. Se necesita al menos un filtro.",
+      "resume quita la pausa Y el \xABs\xF3lo operador\xBB (escalar = pausa permanente), en gs y en Formmy; NO contesta solo \u2014 para eso est\xE1 reply. reply s\xF3lo sirve en conversaciones de WhatsApp Business de un n\xFAmero que contesta este agente.",
+      "pending marca y nunca contesta: en pausa, escalada, fuera de la ventana de 24 h de WhatsApp (Meta s\xF3lo acepta plantillas), s\xF3lo una reacci\xF3n, no es WhatsApp Business, n\xFAmero sin agente. Las de n\xFAmeros de otro agente no salen (s\xF3lo se cuentan).",
+      "pause, resume y reply quedan en bit\xE1cora (ghosty audit ls --action card)."
     ]
   },
   usage: {
@@ -11770,6 +12027,39 @@ var HELPS_ES = {
       "En el panel web el staff elige \xABAtendiendo: <cliente>\xBB (Documentos y bases, Agentes); es una cookie que se revalida en cada request, nunca otra sesi\xF3n.",
       "Revocar corta en el siguiente request. Asignar dos veces no hace nada (una sola activa por par)."
     ]
+  },
+  audit: {
+    summary: "La bit\xE1cora (AuditEvent): qui\xE9n entr\xF3 \xABcomo\xBB qui\xE9n, qu\xE9 cambi\xF3 en la ficha y en los canales de un agente, pausas y respuestas desde el CLI, traspasos, staff que entra o sale. El staff de Ghosty ve todo; cualquier otra cuenta, s\xF3lo lo de sus espacios y agentes.",
+    flags: [
+      ["--workspace SLUG", "los eventos de ese espacio y de sus agentes (default: el de ghosty use; none = todos los tuyos)"],
+      ["--agent ID", "s\xF3lo los de ese agente (nombre o id)"],
+      ["--actor EMAIL", "s\xF3lo lo que hizo esa persona"],
+      ["--action A", "agent, channel, card, factory, workspace\u2026 (un prefijo) o una acci\xF3n exacta (agent.save)"],
+      ["--since T", "desde T (30m, 24h, 7d o una fecha ISO; default 7d)"],
+      ["--limit N", "cu\xE1ntos (default 50, m\xE1x. 1000)"],
+      ["--full", "el detalle completo de cada evento (JSON)"]
+    ],
+    notes: [
+      "Hoy se anotan: agent.save (el Guardar de la ficha), channel.* (p\xE1gina Canales), agent.prompt_patch, card.pause/resume/reply, factory.run_rename, workspace.*, staff y \xABentrar como\xBB. Cambios m\xE1s viejos pueden no estar.",
+      "El token gat_ de un agente no lee la bit\xE1cora."
+    ]
+  },
+  factory: {
+    summary: "Los pedidos de la Software Factory de un espacio (viven en su Teams): listarlos, ver uno (plan vigente, PR, preview, \xFAltimos eventos, qu\xE9 rol trabaja) y corregir el t\xEDtulo de un pedido.",
+    replace: [['"Title"', '"T\xEDtulo"']],
+    flags: [
+      ["--workspace SLUG", "el espacio (default: el de ghosty use)"],
+      ["--room R", "ls: s\xF3lo los pedidos de ese room (#slug o nombre)"],
+      ["--status S", "ls: s\xF3lo esa etapa (planning, building, checking, pr_review, merged\u2026)"],
+      ["--limit N", "ls: cu\xE1ntos (default 30)"],
+      ["--full", "show: imprime el plan vigente"],
+      ["-n, --dry-run", "rename: ense\xF1a el cambio, no cambia nada"],
+      ["--yes", "rename: se salta la confirmaci\xF3n (obligatorio sin terminal)"]
+    ],
+    notes: [
+      "Leer pide ser miembro del espacio; renombrar, ser due\xF1o, admin o staff de Ghosty, y queda en bit\xE1cora (factory.run_rename). La tarjeta del room toma el t\xEDtulo nuevo en su siguiente refresco.",
+      "Qui\xE9n es @plan o @build: ghosty agents ls --handle plan --workspace SLUG."
+    ]
   }
 };
 var HELP_ALIASES = { creds: "credentials", conectores: "connectors", board: "cards", conversations: "chat", workspaces: "spaces" };
@@ -11782,12 +12072,14 @@ var HELPS = {
     summary: "Create, inspect, change, check and delete agents.",
     usage: [
       "ghosty agents ls [--engine E] [--ids] [--sponsor EMAIL | --owner EMAIL]",
+      "ghosty agents ls --handle build [--workspace WS]   # who is @build in Teams (that workspace, or all of yours)",
       "ghosty agents create --name NAME [--engine E] [--model M] [--prompt TEXT | --prompt-file FILE] [--env K=V,\u2026] [--workspace SLUG] [--channels teams=off,\u2026] [--like AGENT [--copy-dbs] [--board same|main|new|NAME] [--no-notify] [--dry-run]]",
       "ghosty agents get <agent-id> [--fields name,model,prompt] [--prompt-out FILE]",
       "ghosty agents export <agent-id> [--out DIR]   # the agent as a file; see ghosty apply --help",
       "ghosty agents set <agent-id> [--name] [--engine] [--model] [--prompt | --prompt-file] [--env K=V,\u2026] [--unset-env K1,K2] [--connect ID,\u2026] [--disconnect ID,\u2026] [--voice E:ID] [--voice-replies auto|off] [--auto-stage on|off] [--toolsets crm,sales | +crm,-sales] [--tool [channel:]tool=on|off,\u2026] [--bag NAME|none] [--avatar URL|FILE]",
       "ghosty agents set <agent-id> --engine E [--model M] --dry-run   # what changing the engine does (sessions, machines, memory), without changing it",
       "ghosty agents set <agent-id> --prompt-base <base-agent-id> --prompt-overlay overlay.json [--dry-run [--out FILE]]   |   --prompt-base none",
+      "ghosty agents set <agent-id> --prompt-patch overlay.json [--prompt-append FILE] [--dry-run]   # change one piece of the prompt, on the server's current one",
       "ghosty agents doctor <agent-id> [--verbose]",
       "ghosty agents doctor --user <email> [agent-id] [--turns 8]   # staff: their agents, latest turns, plan and boxes",
       "ghosty agents docs ls|grant|revoke <agent-id> [doc\u2026] [--write] [--no-deliver] [--like AGENT]",
@@ -11807,6 +12099,8 @@ var HELPS = {
       "ghosty agents box <agent-id> [--check PATH]\u2026 [--contains PATH=TEXT]\u2026 [--recycle]",
       "ghosty agents demo enable|disable <agent-id>",
       'ghosty agents demo <agent-id> [--slug NAME] [--expires "YYYY-MM-DDTHH:MM"|no] [--turns N] [--per-ip N] [--welcome TEXT] [--starter TEXT] [--chips "a|b|c"] [--sponsor on|off] [--rotate]',
+      "ghosty agents embed enable|disable <agent-id> [--domains a.com,*.b.com]   # web widget: chat bubble on your site, only on those domains",
+      "ghosty agents embed <agent-id> [--domains \u2026] [--per-visitor N] [--per-ip N] [--welcome TEXT] [--color #hex] [--rotate]   # state + the <script> to paste",
       "ghosty agents rm <agent-id> [--from-workspace] [--yes]"
     ],
     flags: [
@@ -11822,6 +12116,8 @@ var HELPS = {
       ["--toolsets LIST", "set: gs tool groups it gets (crm, sales\u2026): a list replaces; +x / -x add or remove"],
       ["--prompt-base ID", "set: this agent's prompt = that agent's prompt + --prompt-overlay; regenerates when the base changes. none = unlink (keeps today's prompt)"],
       ["--prompt-overlay FILE", 'set: JSON {"edits":[{"what","find","replace","regex"?,"all"?}]}, applied in order; each must find its place or nothing changes'],
+      ["--prompt-patch FILE", `set: the same {"edits":[\u2026]} format, applied ONCE on the agent's current prompt on the server (not a local copy: it never overwrites someone else's change). If one edit doesn't find its place, nothing changes. --dry-run prints the diff`],
+      ["--prompt-append FILE", "set: add that text at the end of the prompt (with --prompt-patch too: edits first, then the text)"],
       ["--voice E:ID", "set: voice for voice notes: elevenlabs:<voiceId> or kokoro:em_santa|em_alex|ef_dora"],
       ["--voice-replies M", "set: auto = answer with a voice note when the customer sends or asks for audio; off = always text"],
       ["--auto-stage on|off", "set: move board cards by itself after each customer turn (one extra model call per turn)"],
@@ -11836,7 +12132,7 @@ var HELPS = {
       ["--grant read|write|no", "docs add: access for this agent (default read; no = only upload to the account)"],
       ["--note TEXT", "docs replace/restore: why it changed (shown in docs history)"],
       ["--role R", "share: editor (configures and uses it) or admin (also shares it); again on a shared email changes the role"],
-      ["--handle NAME", "teams on: its @handle in that workspace (default: from its name, with a suffix if taken; @ghosty is reserved). On an active workspace it changes the handle"],
+      ["--handle NAME", "teams on: its @handle in that workspace (default: from its name, with a suffix if taken; @ghosty is reserved). On an active workspace it changes the handle. ls: who answers to that @handle"],
       ["--factory ROLES", "teams on: give it those Software Factory roles in that workspace (plan, build, check, eval; comma-separated) \u2014 the same as \xABTeam\xBB in /factory. Keeps each role's name and avatar; the next turn of each role runs on it. The factory must be installed there"],
       ["--yes", "rm: skip the confirmation (required without a terminal)"],
       ["--slug NAME", "demo: link name; a 6-char code is appended (/p/NAME-CODE)"],
@@ -11883,6 +12179,7 @@ var HELPS = {
       "ghosty agents set <pia-id> --prompt-base <tania-id> --prompt-overlay capa.json --dry-run --out /tmp/pia.md",
       "ghosty agents demo enable <id>",
       'ghosty agents demo <id> --slug guardias --expires "2026-10-15T20:00" --starter "Ens\xE9\xF1ame c\xF3mo empezar"',
+      'ghosty agents embed enable <id> --domains "mitienda.com,*.mitienda.mx" --welcome "\xA1Hola! \xBFEn qu\xE9 te ayudo?"',
       "ghosty agents box <id> --contains /opt/claude-worker/skills/pdf-doc/render-doc.mjs=pdf-templates",
       "ghosty agents set <id> --tool wa:actualizar_identidad=off,teams:actualizar_identidad=on",
       'ghosty agents set minighosty --bag "MiniGhosty" --avatar https://www.ghosty.studio/avatars/minighosty.png',
@@ -12136,7 +12433,8 @@ HELPS.channels = {
     "ghosty channels whatsapp ls <agent-id>",
     "ghosty channels whatsapp enable <agent-id> <number> [--dry-run] [--yes]",
     "ghosty channels whatsapp disable <agent-id> <number> [--dry-run]",
-    "ghosty channels whatsapp integrations <agent-id> [--email OTHER]",
+    "ghosty channels whatsapp integrations <agent-id> [--email OTHER] [--orphans]",
+    "ghosty channels messenger ls <agent-id> [--orphans]",
     "ghosty channels whatsapp link <agent-id> --integration <formmy-id> --answer on|off [--forward] [--dry-run] [--yes]",
     "ghosty channels whatsapp unlink <agent-id> --integration <formmy-id> [--dry-run] [--yes]",
     "ghosty channels whatsapp history <agent-id> --integration <formmy-id> [--days 7] [--media] [--dry-run] [--yes]",
@@ -12163,6 +12461,7 @@ HELPS.channels = {
     ["--name N", "groups set: the name gs shows (e.g. a group saved with its jid as name); WhatsApp's subject doesn't change"],
     ["--integration ID", "link/unlink/history: the WhatsApp Business number's Integration id in Formmy"],
     ["--email E", "integrations (staff): list the numbers of another Formmy account"],
+    ["--orphans", "integrations / messenger ls: only the numbers or pages nobody answers today that DID have turns, with who answered them last (who to give them back to)"],
     ["--days N", "history: conversations active in the last N days (1-30, default 7)"],
     ["--media", "history: only re-copy the missing files (photos, PDFs, audio) of conversations already imported"],
     ["--answer on|off", "link (required, no default): on = this agent answers real customers; off = it only records"],
@@ -12182,6 +12481,8 @@ HELPS.channels = {
     "ghosty channels wa groups ls <id>",
     'ghosty channels wa groups enable <id> "Pia-cotizadora" --role equipo --dry-run',
     "ghosty channels whatsapp integrations <id>",
+    "ghosty channels whatsapp integrations <id> --orphans",
+    "ghosty channels messenger ls <id>",
     "ghosty channels whatsapp link <id> --integration 6a3af395\u2026 --answer off --dry-run",
     "ghosty channels whatsapp history <id> --integration 6a3af395\u2026 --days 7 --dry-run",
     "ghosty channels whatsapp history <id> --integration 6a3af395\u2026 --days 7 --media",
@@ -12193,7 +12494,7 @@ HELPS.channels = {
     "Disabling keeps logging messages; nobody answers them.",
     "Groups belong to the PERSONAL WhatsApp paired to the agent (not WhatsApp Business). <group> is its name or its jid.",
     "link moves a number that already lives in Formmy (EasyBits, a droplet) without redoing Meta's signup; unlink sends it back. Only the owner, an admin of the agent or Ghosty staff.",
-    "integrations lists the owner's WhatsApp Business numbers in Formmy (number, name, who answers today: gs, EasyBits, a droplet or Formmy) with the Integration id that link and history take. Numbers the workspace already linked in gs show up too, even if another Formmy account owns them.",
+    "integrations lists the owner's WhatsApp Business numbers in Formmy (number, name, who answers today: gs, EasyBits, a droplet or Formmy) with the Integration id that link and history take. Numbers the workspace already linked in gs show up too, even if another Formmy account owns them. \xABlast answered by\xBB is the agent of the latest turn on that number (from gs's turns), so a number left answered by nobody can be given back.",
     "history brings the number's recent cards, messages and orders from Formmy to the board (link it first; --dry-run works before linking, to choose --days). Re-running never duplicates: run it before the cutover and again right at it. Files (photos, PDFs, audio) are copied to gs too: Formmy deletes them after 7 days, so bring the number within that week; a copy that failed is retried with --media.",
     "import: turn off the EasyBits socket first WITHOUT logout (two sockets knock each other off; a logout invalidates the keys). Delete the file afterwards."
   ],
@@ -12283,7 +12584,11 @@ HELPS.cards = {
   usage: [
     "ghosty cards ls <agent-id> [--q TEXT] [--paused] [--limit 20]",
     "ghosty cards show <agent-id> <folio|phone|session|id> [--limit 20]",
-    "ghosty cards archive <agent-id> [--integration ID] [--column NAME] [--before 30d|ISO] [--dry-run] [--yes]"
+    "ghosty cards archive <agent-id> [--integration ID] [--column NAME] [--before 30d|ISO] [--dry-run] [--yes]",
+    "ghosty cards pause <agent-id> <card> [--mode 30min|2h|24h|until_tomorrow|permanent]",
+    "ghosty cards resume <agent-id> <card>",
+    "ghosty cards reply <agent-id> <card> [--directive TEXT] [--yes]",
+    "ghosty cards pending <agent-id> [--since 2d|ISO] [--limit N] [--reply [--directive TEXT] [--yes]] [--dry-run]"
   ],
   flags: [
     ["--q TEXT", "ls: cards whose name, phone or last message contains TEXT"],
@@ -12292,11 +12597,15 @@ HELPS.cards = {
     ["--integration ID", "cards from this channel/integration (e.g. prueba)"],
     ["--column NAME", "cards in this column"],
     ["--before T", "cards with no activity since T (30d, 12h or an ISO date)"],
-    ["-n, --dry-run", "count and show a sample, change nothing"],
-    ["--yes", "skip the confirmation (required without a terminal)"]
+    ["-n, --dry-run", "count and show a sample, change nothing \xB7 pending --reply: list what it would answer, send nothing"],
+    ["--yes", "skip the confirmation (required without a terminal)"],
+    ["--mode M", "pause: 30min | 2h | 24h (default) | until_tomorrow (9:00) | permanent (escalated: operator only)"],
+    ["--directive TEXT", "reply / pending --reply: an instruction for the agent (it writes its own answer following it, it doesn't repeat it)"],
+    ["--since T", "pending: customers who wrote since T (30m, 2d or an ISO date; default 3d)"],
+    ["--reply", "pending: answer, one by one, the ones with no flag (asks first)"]
   ],
-  examples: ["ghosty cards ls <id> --q 7712", "ghosty cards ls <id> --paused --limit 200", 'ghosty cards show <id> "#12"', "ghosty cards show <id> 5210000009922 --limit 50", "ghosty cards archive <id> --integration prueba --dry-run", "ghosty cards archive <id> --column Perdido --before 30d --yes"],
-  notes: ["show prints each message with who wrote it (customer, agent, operator), its attachment and whether gs keeps a copy of it.", "Archiving is reversible: when the customer writes again the card comes back. At least one filter is required."],
+  examples: ["ghosty cards ls <id> --q 7712", "ghosty cards ls <id> --paused --limit 200", 'ghosty cards show <id> "#12"', "ghosty cards show <id> 5210000009922 --limit 50", "ghosty cards archive <id> --integration prueba --dry-run", "ghosty cards archive <id> --column Perdido --before 30d --yes", 'ghosty cards pause <id> "#12" --mode 2h', 'ghosty cards resume <id> "#12"', 'ghosty cards reply <id> "#12" --directive "ofr\xE9cele el env\xEDo a domicilio"', "ghosty cards pending <id> --since 2026-10-06T02:13Z", "ghosty cards pending <id> --since 12h --reply --dry-run"],
+  notes: ["show prints each message with who wrote it (customer, agent, operator), its attachment and whether gs keeps a copy of it.", "Archiving is reversible: when the customer writes again the card comes back. At least one filter is required.", "resume lifts the pause AND \xABoperator only\xBB (escalating = a permanent pause), on gs and on Formmy; it does NOT answer by itself \u2014 reply does. reply only works on WhatsApp Business conversations of a number this agent answers.", "pending flags and never answers: paused, escalated, outside WhatsApp's 24 h window (Meta only takes templates), only a reaction, not WhatsApp Business, number answered by nobody. Conversations of another agent's numbers are left out (only counted).", "pause, resume and reply are logged (ghosty audit ls --action card)."],
   learn: `${REF}#tablero`
 };
 HELPS.board = HELPS.cards;
@@ -12438,6 +12747,42 @@ HELPS.staff = {
   ],
   learn: `${REF}#staff-asignado`
 };
+HELPS.audit = {
+  summary: "The audit log (AuditEvent): who logged in \xABas\xBB whom, what changed on an agent's page and channels, pauses and replies from the CLI, transfers, staff in and out. Ghosty staff see everything; anyone else, only the events of their own workspaces and agents.",
+  usage: ["ghosty audit ls [--workspace SLUG] [--agent ID] [--actor EMAIL] [--action A] [--since 7d] [--limit 50] [--full]"],
+  flags: [
+    ["--workspace SLUG", "that workspace's events and its agents' (default: the one from ghosty use; none = all of yours)"],
+    ["--agent ID", "only that agent's events (name or id)"],
+    ["--actor EMAIL", "only what that person did"],
+    ["--action A", "agent, channel, card, factory, workspace\u2026 (a prefix) or an exact action (agent.save)"],
+    ["--since T", "since T (30m, 24h, 7d or an ISO date; default 7d)"],
+    ["--limit N", "how many (default 50, max 1000)"],
+    ["--full", "the whole detail of each event (JSON)"]
+  ],
+  examples: ["ghosty audit ls --workspace siiqtec --since 24h", "ghosty audit ls --agent tania-0 --action agent", "ghosty audit ls --actor brenda@siiqtec.com --since 2026-10-05T00:00Z", "ghosty audit ls --action card --json"],
+  notes: ["Logged today: agent.save (the agent page's Save), channel.* (Channels page), agent.prompt_patch, card.pause/resume/reply, factory.run_rename, workspace.*, staff and \xABlog in as\xBB. Older changes may not be there.", "A gat_ agent token can't read the log."],
+  learn: `${REF}#bitacora`
+};
+HELPS.factory = {
+  summary: "A workspace's Software Factory runs (they live in its Teams): list them, see one (current plan, PR, preview, latest events, which role is working) and fix a run's title.",
+  usage: [
+    "ghosty factory runs ls [--workspace SLUG] [--room R] [--status S] [--limit 30]",
+    "ghosty factory runs show <run> [--workspace SLUG] [--full]",
+    'ghosty factory runs rename <run> "Title" [--workspace SLUG] [--dry-run] [--yes]'
+  ],
+  flags: [
+    ["--workspace SLUG", "the workspace (default: the one from ghosty use)"],
+    ["--room R", "ls: only that room's runs (#slug or name)"],
+    ["--status S", "ls: only that stage (planning, building, checking, pr_review, merged\u2026)"],
+    ["--limit N", "ls: how many (default 30)"],
+    ["--full", "show: print the current plan"],
+    ["-n, --dry-run", "rename: show the change, change nothing"],
+    ["--yes", "rename: skip the confirmation (required without a terminal)"]
+  ],
+  examples: ["ghosty factory runs ls --workspace business --room mailmask", "ghosty factory runs show 15 --workspace business", 'ghosty factory runs rename 15 "Docs del CLI al d\xEDa" --workspace business --dry-run'],
+  notes: ["Reading needs membership in the workspace; rename needs owner, admin or Ghosty staff, and is logged (factory.run_rename). The room's card picks the new title up on its next refresh.", "Who is @plan or @build: ghosty agents ls --handle plan --workspace SLUG."],
+  learn: `${REF}#fabrica`
+};
 function helpText(cmd) {
   const base = HELPS[cmd];
   if (!base) return void 0;
@@ -12681,6 +13026,10 @@ function normalizeArgs(pos, v) {
     if (v.expires !== void 0) v.vence = v.expires;
     else if (v.vence !== void 0) notes.push(t("`--vence` is now `--expires`.", "`--vence` ahora es `--expires`."));
   }
+  if (cmd === "agents" && (sub === "embed" || sub === "widget") && (pos[2] === "enable" || pos[2] === "disable")) {
+    v[pos[2] === "enable" ? "on" : "off"] = true;
+    pos.splice(2, 1);
+  }
   if (cmd === "channels" && pos[2] === "groups") {
     if (pos[3] === "enable" || pos[3] === "disable") {
       v[pos[3] === "enable" ? "on" : "off"] = true;
@@ -13253,6 +13602,91 @@ ${dim(t("Links with the old slug may stop working.", "Las ligas con el slug viej
   }
 }
 
+// src/commands/audit.ts
+function detailLine(d, max = 90) {
+  if (d === null || d === void 0) return "";
+  if (typeof d !== "object") return String(d).slice(0, max);
+  const parts = Object.entries(d).filter(([k]) => k !== "via").map(([k, v]) => `${k}=${v !== null && typeof v === "object" ? JSON.stringify(v) : String(v)}`);
+  const s = parts.join(" ");
+  return s.length > max ? `${s.slice(0, max - 1)}\u2026` : s;
+}
+async function auditCmd(sub, v, context) {
+  if (sub && sub !== "ls" && sub !== "list") throw usage(t(`Unknown audit subcommand: ${sub}.`, `Subcomando de audit desconocido: ${sub}.`), "ghosty audit ls [--workspace SLUG] [--agent ID] [--actor EMAIL] [--action A] [--since 24h] [--limit N]");
+  const ws = v.workspace === "none" ? void 0 : v.workspace ?? (v.agent ? void 0 : context);
+  const qs = new URLSearchParams({
+    ...ws ? { workspace: ws } : {},
+    ...v.agent ? { agent: v.agent } : {},
+    ...v.actor ? { actor: v.actor } : {},
+    ...v.action ? { action: v.action } : {},
+    since: v.since ?? "7d",
+    ...v.limit ? { limit: v.limit } : {}
+  });
+  const r = await api(`/api/v2/audit?${qs}`);
+  const rows = r.events.map((e) => ({
+    at: e.at.slice(0, 16).replace("T", " "),
+    actor: e.actor,
+    action: e.action,
+    where: [e.workspace, e.agentName ?? e.agentId].filter(Boolean).join(" \xB7 "),
+    detail: v.full ? JSON.stringify(e.detail ?? null) : detailLine(e.detail)
+  }));
+  return out(r, () => rows.length ? `${table(rows, ["at", "actor", "action", "where", "detail"])}
+${dim(t("Times in UTC. --full for the whole detail; --json for everything.", "Horas en UTC. --full para el detalle completo; --json para todo."))}` : dim(t(`No events since ${v.since ?? "7d"}${ws ? ` in ${ws}` : ""}.`, `Sin eventos desde ${v.since ?? "7d"}${ws ? ` en ${ws}` : ""}.`)));
+}
+
+// src/commands/factory.ts
+var enc12 = encodeURIComponent;
+var short2 = (s) => (s ?? "").slice(0, 16).replace("T", " ");
+async function factoryCmd(sub, verb, ref, title, v, context) {
+  if (sub !== "runs") throw usage(t(`Unknown factory subcommand: ${sub ?? "(none)"}.`, `Subcomando de factory desconocido: ${sub ?? "(ninguno)"}.`), "ghosty factory runs ls|show|rename \u2026");
+  const ws = v.workspace ?? context;
+  if (!ws) throw usage(t("Which workspace?", "\xBFQu\xE9 espacio?"), t("Add --workspace SLUG (or set one with ghosty use SLUG).", "Agrega --workspace SLUG (o fija uno con ghosty use SLUG)."));
+  const base = `/api/v2/workspaces/${enc12(ws)}/factory/runs`;
+  if (!verb || verb === "ls" || verb === "list") {
+    const qs = new URLSearchParams({ ...v.room ? { room: v.room } : {}, ...v.status ? { status: v.status } : {}, ...v.limit ? { limit: v.limit } : {} });
+    const r = await api(`${base}?${qs}`);
+    const rows = r.runs.map((x) => ({ run: `#${x.id}`, title: x.title.slice(0, 60), status: x.status, room: x.room ? `#${x.room}` : "", pr: x.pr ? x.pr.replace(/^https:\/\/github\.com\//, "") : "", updated: short2(x.updatedAt) }));
+    return out(r, () => rows.length ? `${table(rows, ["run", "title", "status", "room", "pr", "updated"])}
+${dim(`${t("Detail", "Detalle")}: ghosty factory runs show <run> --workspace ${r.workspace}`)}` : dim(t(`No factory runs in ${r.workspace}.`, `No hay pedidos de la f\xE1brica en ${r.workspace}.`)));
+  }
+  if (!ref) throw usage(t("Missing run.", "Falta el pedido."), `ghosty factory runs ${verb} <run> --workspace ${ws}`);
+  const path = `${base}/${enc12(ref.replace(/^#/, ""))}`;
+  if (verb === "show") {
+    const { run: r } = await api(path);
+    const lines = [
+      `${bold(`#${r.id} ${r.title}`)} ${dim(`\xB7 ${r.status}${r.kind ? ` (${r.kind})` : ""} \xB7 ${r.room ? `#${r.room}` : ""}`)}`,
+      `${t("repo", "repo")}: ${r.repo ?? "\u2014"}${r.branch ? ` (${r.branch})` : ""}   PR: ${r.pr ?? "\u2014"}`,
+      `preview: ${r.preview ?? "\u2014"}${r.previewState ? dim(` (${r.previewState})`) : ""}`,
+      `${t("plan", "plan")}: v${r.planVersion}${r.plan ? ` ${r.plan.decision ?? t("pending", "pendiente")}${r.plan.decidedBy ? ` ${t("by", "por")} ${r.plan.decidedBy}` : ""}` : ""} \xB7 ${t("loops", "vueltas")}: ${r.loops} \xB7 ${t("requested by", "pidi\xF3")} ${r.requestedBy}`,
+      ...r.plans.map((p) => dim(`  v${p.version} ${p.decision ?? "\u2014"}: ${p.title ?? ""}`)),
+      `${t("running", "trabajando")}: ${r.running.length ? r.running.map((x) => `@${x.role} ${dim(`(${x.turn}, ${short2(x.since)})`)}`).join(", ") : dim(t("nobody", "nadie"))}`,
+      bold(t("Latest events", "\xDAltimos eventos")),
+      ...r.events.map((e) => `  ${dim(short2(e.at))} ${e.type}${e.actor ? ` ${dim(e.actor)}` : ""}`),
+      ...v.full && r.plan ? ["", bold(t("Current plan", "Plan vigente")), r.plan.markdown] : [dim(t("--full prints the current plan.", "--full imprime el plan vigente."))]
+    ];
+    return out(r, () => lines.join("\n"));
+  }
+  if (verb === "rename") {
+    if (!title?.trim()) throw usage(t("Missing the new title.", "Falta el t\xEDtulo nuevo."), `ghosty factory runs rename ${ref} "T\xEDtulo" --workspace ${ws}`);
+    const retry = `ghosty factory runs rename ${ref} ${JSON.stringify(title)} --workspace ${ws}`;
+    if (!v["dry-run"]) requireYesIfHeadless(v.yes, retry);
+    const plan = await api(path, { body: { title, dryRun: true } });
+    const line2 = `#${ref.replace(/^#/, "")}: \xAB${plan.from}\xBB \u2192 \xAB${plan.to}\xBB`;
+    if (v["dry-run"]) return out({ ...plan, dryRun: true }, () => `${line2}
+${dim(t("Dry run: nothing changed.", "Simulacro: no se cambi\xF3 nada."))}`);
+    await confirm(t(`Rename ${line2}?`, `\xBFRenombrar ${line2}?`), { yes: v.yes, retry });
+    const r = await api(path, { body: { title } });
+    return out(r, () => `${lavender("\u2713")} ${line2} ${dim(t("(logged; the room card picks it up on its next refresh)", "(queda en bit\xE1cora; la tarjeta del room lo toma en su siguiente refresco)"))}`);
+  }
+  throw usage(t(`Unknown runs subcommand: ${verb}.`, `Subcomando de runs desconocido: ${verb}.`), 'ghosty factory runs ls | show <run> | rename <run> "title"');
+}
+async function agentsByHandle(handle, workspace) {
+  const qs = new URLSearchParams({ handle, ...workspace ? { workspace } : {} });
+  const r = await api(`/api/v2/teams/handles?${qs}`);
+  const rows = r.agents.map((a) => ({ workspace: a.workspace, handle: `@${a.handle}`, name: a.name ?? "", engine: [a.engine, a.model].filter(Boolean).join("/"), on: a.enabled ? t("yes", "s\xED") : dim(t("paused", "en pausa")), id: a.agentId ?? dim(t("(not a gs agent)", "(no es agente de gs)")) }));
+  return out(r, () => `${rows.length ? table(rows, ["workspace", "handle", "name", "engine", "on", "id"]) : dim(t(`Nobody is @${r.handle}${workspace ? ` in ${workspace}` : " in your workspaces"}.`, `Nadie es @${r.handle}${workspace ? ` en ${workspace}` : " en tus espacios"}.`))}${r.unreadable?.length ? `
+${dim(t(`Couldn't read: ${r.unreadable.join(", ")}`, `No se pudieron leer: ${r.unreadable.join(", ")}`))}` : ""}`);
+}
+
 // src/commands/staff.ts
 var day2 = (iso) => iso ? iso.slice(0, 10) : "";
 async function staffCmd(sub, staff, client, v) {
@@ -13292,7 +13726,7 @@ async function staffCmd(sub, staff, client, v) {
 
 // src/commands/support.ts
 import { readFile as readFile14 } from "node:fs/promises";
-var enc12 = encodeURIComponent;
+var enc13 = encodeURIComponent;
 var cdmx = (iso) => new Date(Date.parse(iso) - 6 * 36e5).toISOString().slice(5, 16).replace("T", " ");
 async function supportThreads(email, v) {
   const q = new URLSearchParams({ user: email, since: v.since ?? "30d", ...v.surface ? { surface: v.surface } : {} });
@@ -13312,7 +13746,7 @@ ${table(rows, ["last", "agent", "conversation", "title", "kind", "listed", "turn
 ${dim(t("Read one: ghosty conversations show <agent> <conversation> --why \xB7 times in CDMX \xB7 listed = in their app list", "Leer uno: ghosty conversations show <agente> <conversaci\xF3n> --why \xB7 horas CDMX \xB7 listed = sale en su lista de la app"))}`);
 }
 async function supportThread(agent, sid, v) {
-  const r = await api(`/api/v2/support/threads/${enc12(agent)}/${enc12(sid)}?tail=${enc12(v.limit ?? "40")}${v.tools ? "&tools=1" : ""}`);
+  const r = await api(`/api/v2/support/threads/${enc13(agent)}/${enc13(sid)}?tail=${enc13(v.limit ?? "40")}${v.tools ? "&tools=1" : ""}`);
   out(r, () => {
     if (v.tools && r.tools) {
       const x = r.tools;
@@ -13344,7 +13778,7 @@ async function cleanupConversations(action, agent, v) {
   const ex = `ghosty conversations ${action} <agent> --kind ${action === "rm" ? "test" : "test|channel"} [--before 7d] [--dry-run]`;
   if (!agent) throw usage(t("Missing agent.", "Falta el agente."), ex);
   if (v.kind !== "test" && v.kind !== "channel") throw usage(t("--kind takes test or channel.", "--kind acepta test o channel."), ex);
-  const path = `/api/v2/agents/${enc12(agent)}/conversations/cleanup`;
+  const path = `/api/v2/agents/${enc13(agent)}/conversations/cleanup`;
   const body = { kind: v.kind, action, ...v.before ? { before: v.before } : {} };
   const plan = await api(path, { method: "POST", body: { ...body, dryRun: true } });
   const verb = action === "rm" ? t("delete (rows + agent memory)", "borrar (filas + memoria del agente)") : t("archive (hidden; memory stays)", "archivar (se ocultan; la memoria se queda)");
@@ -13359,7 +13793,7 @@ ${t("Go ahead?", "\xBFSigo?")}`, { yes: v.yes, retry: `ghosty conversations ${ac
   out(r, () => `${lavender("\u2713")} ${t(`${r.threads} conversation(s) ${action === "rm" ? "deleted" : "archived"}.`, `${r.threads} conversaci\xF3n(es) ${action === "rm" ? "borradas" : "archivadas"}.`)}`);
 }
 async function turnStats(v) {
-  const r = await api(`/api/v2/support/turn-stats?since=${enc12(v.since ?? "14d")}${v.all ? "&all=1" : ""}`);
+  const r = await api(`/api/v2/support/turn-stats?since=${enc13(v.since ?? "14d")}${v.all ? "&all=1" : ""}`);
   out(
     r,
     () => [
@@ -13379,7 +13813,7 @@ async function fleetBoxes() {
 ${table(rows, ["template", "boxes", "on", "asleep", "ram", "vcpu", "ram on"])}`);
 }
 async function appAgentsOf(email, client) {
-  const r = await api(`/api/v2/support/app-agents?user=${enc12(email)}${client && client !== "all" ? `&client=${enc12(client)}` : ""}`);
+  const r = await api(`/api/v2/support/app-agents?user=${enc13(email)}${client && client !== "all" ? `&client=${enc13(client)}` : ""}`);
   const rows = r.agentes.map((a) => ({ id: a.id, name: a.nombre, engine: a.motor ?? "", model: a.modelo ?? "", tone: a.tono ?? t("(by position)", "(por posici\xF3n)"), space: a.espacio?.tipo === "workspace" ? a.espacio.nombre : a.espacio?.tipo ?? "", last: a.ultimaActividad ? cdmx(a.ultimaActividad) : "" }));
   const phones = (r.devices ?? []).map((d) => `${d.platform} ${d.appVersion ?? ""}${d.appBuild ? ` (build ${d.appBuild})` : " (build ?)"} \xB7 ${t("seen", "visto")} ${cdmx(d.lastSeenAt)}`.replace(/\s+/g, " "));
   out(r, () => `${bold(r.user)} ${dim(r.client ? t(`as the ${r.client} app sees it`, `como lo ve la app de ${r.client}`) : t("all apps", "todas las apps"))}
@@ -13390,7 +13824,7 @@ ${dim(t("No phones registered for push.", "Sin tel\xE9fonos registrados para avi
 }
 async function pushLog(email, v) {
   if (!email) throw usage(t("Missing --user.", "Falta --user."), "ghosty push log --user ana@empresa.com [--since 2d]");
-  const r = await api(`/api/v2/support/push-log?user=${enc12(email)}&since=${enc12(v.since ?? "2d")}${v.limit ? `&limit=${enc12(v.limit)}` : ""}`);
+  const r = await api(`/api/v2/support/push-log?user=${enc13(email)}&since=${enc13(v.since ?? "2d")}${v.limit ? `&limit=${enc13(v.limit)}` : ""}`);
   const rows = r.pushes.map((p) => ({ at: cdmx(p.at), kind: p.kind, to: p.platform, status: p.status === "sent" ? p.status : red(p.status), thread: p.threadKind ? `${p.threadId?.slice(0, 18)} (${p.threadKind})` : (p.threadId ?? "").slice(0, 24), title: (p.title ?? "").slice(0, 40), detail: p.detail ?? "" }));
   out(r, () => rows.length ? `${bold(r.user)}
 ${table(rows, ["at", "kind", "to", "status", "thread", "title", "detail"])}` : dim(t(`No pushes for ${r.user} in that range (logged since 2026-10-01).`, `Sin avisos para ${r.user} en ese rango (se registran desde el 1-oct).`)));
@@ -13428,24 +13862,24 @@ ${dim(t(`Try it on your phone: ghosty novedades test ${r.id}`, `Pru\xE9bala en t
       if (!id) throw usage(t("Missing id.", "Falta el id."), ex);
       const b = await fields();
       if (!Object.keys(b).length) throw usage(t("Nothing to change.", "Nada que cambiar."), ex);
-      const r = await api(`${base}/${enc12(id)}`, { method: "PATCH", body: b });
+      const r = await api(`${base}/${enc13(id)}`, { method: "PATCH", body: b });
       return out(r, () => `${lavender("\u2713")} ${line2(r)}`);
     }
     case "test": {
       if (!id) throw usage(t("Missing id.", "Falta el id."), ex);
-      const r = await api(`${base}/${enc12(id)}`, { method: "POST", body: { push: "test" } });
+      const r = await api(`${base}/${enc13(id)}`, { method: "POST", body: { push: "test" } });
       return out(r, () => `${lavender("\u2713")} ${t(`Sent to your phone (${r.enviados} device(s)).`, `Enviada a tu tel\xE9fono (${r.enviados} dispositivo(s)).`)}`);
     }
     case "send":
     case "schedule": {
       if (!id) throw usage(t("Missing id.", "Falta el id."), ex);
       if (v.at !== void 0) {
-        const r2 = await api(`${base}/${enc12(id)}`, { method: "PATCH", body: { schedule: v.at || null } });
+        const r2 = await api(`${base}/${enc13(id)}`, { method: "PATCH", body: { schedule: v.at || null } });
         return out(r2, () => `${lavender("\u2713")} ${line2(r2)}`);
       }
       requireYesIfHeadless(v.yes, `ghosty novedades send ${id}`);
       await confirm(t("Push this announcement to every recipient now?", "\xBFMandar ya el push de esta novedad a todos sus destinatarios?"), { yes: v.yes, retry: `ghosty novedades send ${id}` });
-      const r = await api(`${base}/${enc12(id)}`, { method: "POST", body: { push: "all" } });
+      const r = await api(`${base}/${enc13(id)}`, { method: "POST", body: { push: "all" } });
       return out(r, () => `${lavender("\u2713")} ${t(`Pushed to ${r.enviados} device(s).`, `Enviada a ${r.enviados} dispositivo(s).`)}`);
     }
     case "rm":
@@ -13453,7 +13887,7 @@ ${dim(t(`Try it on your phone: ghosty novedades test ${r.id}`, `Pru\xE9bala en t
       if (!id) throw usage(t("Missing id.", "Falta el id."), ex);
       requireYesIfHeadless(v.yes, `ghosty novedades rm ${id}`);
       await confirm(t(`Delete announcement ${id}?`, `\xBFBorrar la novedad ${id}?`), { yes: v.yes, retry: `ghosty novedades rm ${id}` });
-      return out(await api(`${base}/${enc12(id)}`, { method: "DELETE" }), () => `${lavender("\u2713")} ${t("Deleted.", "Borrada.")}`);
+      return out(await api(`${base}/${enc13(id)}`, { method: "DELETE" }), () => `${lavender("\u2713")} ${t("Deleted.", "Borrada.")}`);
     }
     default:
       throw usage(t(`Unknown novedades subcommand: ${sub}.`, `Subcomando de novedades desconocido: ${sub}.`), ex);
@@ -13534,9 +13968,12 @@ ${bold("Workspaces")}  ${dim("(changing them: Ghosty staff)")}
   spaces log <workspace>                      Its log: transfers, staff in/out, renewals (owner or staff)   [--since 30d] [--action workspace]
   staff ls [staff-email] [client-email]       Ghosty staff assigned to client accounts (staff)   [--all: also revoked]
   staff assign|unassign <staff> <client>      Staff sees and runs that account's agents, documents, databases and boards as themselves (no keys, billing or transfers; logged)   [--reason]
+  audit ls                                    The audit log: who changed what (agent page, channels, pauses, replies, transfers, "log in as")   [--workspace SLUG] [--agent ID] [--actor EMAIL] [--action A] [--since 24h] [--limit N]
+  factory runs ls|show|rename                 A workspace's Software Factory runs: list, detail (plan, PR, preview, who is working), fix a title   [--workspace SLUG] [--room R] [--status S]
 
 ${bold("Agents")}
   agents ls                 List your agents   [--engine E] [--ids: only ids, for xargs] \xB7 --user EMAIL --app all|android|ios|desktop: as their app sees it (staff)
+                            [--handle build [--workspace WS]]  who answers to that @handle in Teams
                             [--sponsor EMAIL | --owner EMAIL]  any account's agents (Ghosty staff)
   agents create             Create an agent                   --name [--engine] [--model] [--prompt | --prompt-file FILE] [--env K=V,\u2026]
                             [--workspace SLUG] [--channels teams=off,\u2026]  born in a workspace, active in its Teams
@@ -13552,6 +13989,7 @@ ${bold("Agents")}
                             [--catalog productos.csv|json]  its catalog: sku,nombre,precio[,unidad,categoria]
                             [--toolsets crm,sales | +crm,-sales]  gs tool groups it gets
                             [--prompt-base AGENT|none --prompt-overlay FILE [--dry-run]]  prompt = another agent's + edits, kept in sync
+                            [--prompt-patch overlay.json | --prompt-append FILE [--dry-run]]  change one piece of the prompt, on the server's current one
                             [--tool wa:tool=off,\u2026] [--bag NAME|none] [--avatar URL|FILE]  a tool per channel \xB7 its token bag (staff) \xB7 its face in Teams
                             [--prompt-mode append|replace]  replace = its prompt WITHOUT Ghosty's house persona
   agents doctor <id>        Check the config: overlapping skills, tools the prompt names, broken grants, failing turns
@@ -13568,6 +14006,8 @@ ${bold("Agents")}
   agents box <id>           The machine serving it: is it on the new image?   [--check PATH]\u2026 [--contains PATH=TEXT]\u2026 [--recycle [--reenv] [--force]]
   agents demo enable|disable <id>   Turn its public demo link on or off
   agents demo <id>          Public demo link /p/<slug>: anyone tries it without an account, "Keep it" clones it to theirs
+  agents embed enable|disable <id>   Web widget: a chat bubble on YOUR site (one <script>), only on the domains you list   [--domains a.com,*.b.com] [--per-visitor N] [--per-ip N] [--welcome T] [--color #hex] [--rotate]
+  agents embed <id>         Its state and the snippet to paste (claude engine only: it isolates each visitor)
                             [--slug NAME] [--expires "YYYY-MM-DDTHH:MM"|no] [--turns N] [--per-ip N] [--welcome TEXT] [--chips "a|b|c"] [--starter TEXT] [--sponsor on|off] [--rotate]
 
 ${bold("Configure an agent")}
@@ -13581,7 +14021,8 @@ ${bold("Configure an agent")}
   dbs photos put <id> <db> --table T --key-column K --dir DIR   Loose photos to a catalog (SKU-123.jpg \u2192 its row), permanent links   [--column C] [--dry-run]
   mcp get|set <id>                   MCP servers                    [--file servers.json]  (http headers accept \${turn.token})
   channels whatsapp ls|enable|disable <id> [number]   Which WhatsApp Business numbers it answers   [--dry-run]
-  channels whatsapp integrations <id>    Its owner's WhatsApp Business numbers in Formmy (number, who answers today, Integration id)
+  channels whatsapp integrations <id>    Its owner's WhatsApp Business numbers in Formmy (number, who answers today, who answered last, Integration id)   [--orphans: answered by nobody but with turns]
+  channels messenger ls <id>             The workspace's Messenger pages: who answers now and who answered last   [--orphans]
   channels whatsapp link|unlink <id> --integration ID --answer on|off   Bring a WhatsApp Business number from Formmy/EasyBits to this agent, or send it back   [--forward] [--ads-only on|off] [--dry-run]
   channels whatsapp history <id> --integration ID [--days 7]   Bring its recent cards, messages, orders and files from Formmy (no duplicates; Formmy keeps files 7 days)   [--media] [--dry-run [--list]] [--only-ads] [--phones a,b] [--column NAME]
   channels wa import <id> --from easybits:ID | --from-file F | --from-dir DIR --own-number yes|no   Move a personal WhatsApp session here, no QR   [--dry-run] [--replace] [--no-connect]
@@ -13592,6 +14033,9 @@ ${bold("Configure an agent")}
   cards ls <id>             Recent cards on its sales board   [--q TEXT] [--paused] [--limit 20]
   cards show <id> <card>    A card's thread: who wrote, text, attachments and whether gs kept a copy   (folio, phone or id)
   cards archive <id>        Archive cards in bulk (reversible)   --integration X | --column X | --before 30d   [--dry-run]
+  cards pause|resume <id> <card>   Pause the agent in a conversation, or resume it (also lifts "operator only")   [--mode 30min|2h|24h|until_tomorrow|permanent]
+  cards reply <id> <card>   The agent answers what the customer left pending ("Ask for a reply")   [--directive TEXT] [--yes]
+  cards pending <id>        Conversations whose last message is the customer's, and why some can't be answered   [--since 2d|ISO] [--reply [--directive] [--yes]] [--dry-run]
 
 ${bold("Support")}  ${dim("(Ghosty staff)")}
   conversations ls --user EMAIL           Someone's conversations in any agent   [--since 30d] [--surface android]
@@ -13682,9 +14126,12 @@ ${bold("Espacios")}  ${dim("(cambiarlos: staff de Ghosty)")}
   spaces log <espacio>                        Su bit\xE1cora: traspasos, staff que entra o sale, renovaciones (due\xF1o o staff)   [--since 30d] [--action workspace]
   staff ls [correo-staff] [correo-cliente]    Staff de Ghosty asignado a cuentas cliente (staff)   [--all: tambi\xE9n revocadas]
   staff assign|unassign <staff> <cliente>     El staff ve y opera agentes, documentos, bases y tableros de esa cuenta como s\xED mismo (sin llaves, cobro ni traspasos; queda en bit\xE1cora)   [--reason]
+  audit ls                                    La bit\xE1cora: qui\xE9n cambi\xF3 qu\xE9 (ficha, canales, pausas, respuestas, traspasos, \xABentrar como\xBB)   [--workspace SLUG] [--agent ID] [--actor CORREO] [--action A] [--since 24h] [--limit N]
+  factory runs ls|show|rename                 Los pedidos de la Software Factory de un espacio: lista, detalle (plan, PR, preview, qui\xE9n trabaja), corregir un t\xEDtulo   [--workspace SLUG] [--room R] [--status S]
 
 ${bold("Agentes")}
   agents ls                 Lista tus agentes   [--engine E] [--ids: s\xF3lo ids, para xargs] \xB7 --user CORREO --app all|android|ios|desktop: como lo ve su app (staff)
+                            [--handle build [--workspace WS]]  qui\xE9n contesta a ese @handle en Teams
                             [--sponsor CORREO | --owner CORREO]  agentes de cualquier cuenta (staff de Ghosty)
   agents create             Crea un agente                    --name [--engine] [--model] [--prompt | --prompt-file ARCHIVO] [--env K=V,\u2026]
                             [--workspace SLUG] [--channels teams=off,\u2026]  nace en un espacio, activo en su Teams
@@ -13700,6 +14147,7 @@ ${bold("Agentes")}
                             [--catalog productos.csv|json]  su cat\xE1logo: sku,nombre,precio[,unidad,categoria]
                             [--toolsets crm,sales | +crm,-sales]  grupos de tools de gs que recibe
                             [--prompt-base AGENTE|none --prompt-overlay ARCHIVO [--dry-run]]  prompt = el de otro agente + ediciones, sincronizado
+                            [--prompt-patch overlay.json | --prompt-append ARCHIVO [--dry-run]]  cambia un pedazo del prompt, sobre el actual del servidor
                             [--tool wa:tool=off,\u2026] [--bag NOMBRE|none] [--avatar URL|ARCHIVO]  una tool por canal \xB7 su bolsa de tokens (staff) \xB7 su cara en Teams
                             [--prompt-mode append|replace]  replace = su prompt SIN la persona de casa de Ghosty
   agents doctor <id>        Revisa la configuraci\xF3n: skills encimadas, tools que nombra el prompt, permisos rotos, turnos que fallan
@@ -13716,6 +14164,8 @@ ${bold("Agentes")}
   agents box <id>           La m\xE1quina que lo atiende: \xBFya trae la imagen nueva?   [--check RUTA]\u2026 [--contains RUTA=TEXTO]\u2026 [--recycle [--reenv] [--force]]
   agents demo enable|disable <id>   Prende o apaga su liga p\xFAblica de demo
   agents demo <id>          Liga p\xFAblica de demo /p/<slug>: cualquiera lo prueba sin cuenta y \xABQued\xE1rmelo\xBB lo clona a la suya
+  agents embed enable|disable <id>   Widget web: burbuja de chat en TU sitio (un <script>), s\xF3lo en los dominios que pongas   [--domains a.com,*.b.com] [--per-visitor N] [--per-ip N] [--welcome T] [--color #hex] [--rotate]
+  agents embed <id>         Su estado y el snippet para pegar (s\xF3lo motor claude: a\xEDsla a cada visitante)
                             [--slug NOMBRE] [--expires "AAAA-MM-DDTHH:MM"|no] [--turns N] [--per-ip N] [--welcome TEXTO] [--chips "a|b|c"] [--starter TEXTO] [--sponsor on|off] [--rotate]
 
 ${bold("Configurar un agente")}
@@ -13729,7 +14179,8 @@ ${bold("Configurar un agente")}
   dbs photos put <id> <db> --table T --key-column K --dir DIR   Fotos sueltas a un cat\xE1logo (SKU-123.jpg \u2192 su fila), ligas permanentes   [--column C] [--dry-run]
   mcp get|set <id>                   Servidores MCP                 [--file servers.json]  (headers http admiten \${turn.token})
   channels whatsapp ls|enable|disable <id> [n\xFAmero]   Qu\xE9 n\xFAmeros de WhatsApp Business contesta   [--dry-run]
-  channels whatsapp integrations <id>    Los n\xFAmeros de WhatsApp Business de su due\xF1o en Formmy (n\xFAmero, qui\xE9n contesta hoy, id de la Integration)
+  channels whatsapp integrations <id>    Los n\xFAmeros de WhatsApp Business de su due\xF1o en Formmy (n\xFAmero, qui\xE9n contesta hoy, qui\xE9n contest\xF3 al \xFAltimo, id de la Integration)   [--orphans: sin qui\xE9n conteste pero con turnos]
+  channels messenger ls <id>             Las p\xE1ginas de Messenger del espacio: qui\xE9n contesta hoy y qui\xE9n contest\xF3 al \xFAltimo   [--orphans]
   channels whatsapp link|unlink <id> --integration ID --answer on|off   Trae un n\xFAmero de WhatsApp Business de Formmy/EasyBits a este agente, o devu\xE9lvelo   [--forward] [--ads-only on|off] [--dry-run]
   channels whatsapp history <id> --integration ID [--days 7]   Trae de Formmy sus tarjetas, mensajes, pedidos y archivos recientes (sin duplicar; Formmy guarda los archivos 7 d\xEDas)   [--media] [--dry-run [--list]] [--only-ads] [--phones a,b] [--column NOMBRE]
   channels wa import <id> --from easybits:ID | --from-file F | --from-dir DIR --own-number yes|no   Mueve aqu\xED una sesi\xF3n de WhatsApp personal, sin QR   [--dry-run] [--replace] [--no-connect]
@@ -13740,6 +14191,9 @@ ${bold("Configurar un agente")}
   cards ls <id>             Tarjetas recientes de su tablero de ventas   [--q TEXTO] [--paused] [--limit 20]
   cards show <id> <tarjeta> El hilo de una tarjeta: qui\xE9n escribi\xF3, texto, adjuntos y si gs guard\xF3 copia   (folio, tel\xE9fono o id)
   cards archive <id>        Archiva tarjetas en bloque (reversible)   --integration X | --column X | --before 30d   [--dry-run]
+  cards pause|resume <id> <tarjeta>   Pausa al agente en una conversaci\xF3n, o lo reanuda (tambi\xE9n quita \xABs\xF3lo operador\xBB)   [--mode 30min|2h|24h|until_tomorrow|permanent]
+  cards reply <id> <tarjeta>   El agente contesta lo que el cliente dej\xF3 pendiente (\xABPedir respuesta\xBB)   [--directive TEXTO] [--yes]
+  cards pending <id>        Conversaciones cuyo \xFAltimo mensaje es del cliente, y por qu\xE9 algunas no se contestan   [--since 2d|ISO] [--reply [--directive] [--yes]] [--dry-run]
 
 ${bold("Soporte")}  ${dim("(staff de Ghosty)")}
   conversations ls --user CORREO          Las conversaciones de alguien en cualquier agente   [--since 30d] [--surface android]
@@ -13804,8 +14258,8 @@ ${bold("Opciones globales")}
 ${bold("C\xF3digos de salida")}  0 bien \xB7 1 error de la API \xB7 2 uso incorrecto \xB7 3 sin sesi\xF3n
 ${dim("Nota: `ghosty` puede chocar con otro binario en tu PATH (p. ej. la TUI de Ghosty). Rev\xEDsalo con `which -a ghosty`; corre `npx @ghostystudio/cli` para ir a la segura.")}
 ${dim("Documentaci\xF3n: https://www.ghosty.studio/docs/cli")}`;
-var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "workspaces", "staff", "demos", "sites", "push", "novedades", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "boards", "credentials", "connectors", "browser", "docs", "help"];
-var AGENTS_SUBS = ["ls", "create", "get", "set", "export", "doctor", "docs", "share", "unshare", "shares", "teams", "rm", "restart", "demo", "box"];
+var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "workspaces", "staff", "audit", "factory", "demos", "sites", "push", "novedades", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "boards", "credentials", "connectors", "browser", "docs", "help"];
+var AGENTS_SUBS = ["ls", "create", "get", "set", "export", "doctor", "docs", "share", "unshare", "shares", "teams", "rm", "restart", "demo", "embed", "box"];
 function unknown(what, input, known, helpCmd) {
   const s = suggest(input, known);
   return usage(t(`Unknown command: ${what}.`, `Comando desconocido: ${what}.`), s ? t(`Did you mean "${s}"? Run: ${helpCmd}`, `\xBFQuisiste decir "${s}"? Corre: ${helpCmd}`) : t(`Run: ${helpCmd}`, `Corre: ${helpCmd}`));
@@ -13887,6 +14341,9 @@ async function main() {
       turns: { type: "string" },
       vence: { type: "string" },
       "per-ip": { type: "string" },
+      "per-visitor": { type: "string" },
+      domains: { type: "string" },
+      color: { type: "string" },
       welcome: { type: "string" },
       chips: { type: "string" },
       starter: { type: "string" },
@@ -13940,6 +14397,13 @@ async function main() {
       toolsets: { type: "string" },
       "prompt-base": { type: "string" },
       "prompt-overlay": { type: "string" },
+      "prompt-patch": { type: "string" },
+      "prompt-append": { type: "string" },
+      mode: { type: "string" },
+      directive: { type: "string" },
+      reply: { type: "boolean" },
+      actor: { type: "string" },
+      room: { type: "string" },
       url: { type: "string" },
       description: { type: "string" },
       grant: { type: "string" },
@@ -14036,7 +14500,7 @@ async function main() {
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.49.0" }, () => "0.49.0");
+  if (v.version) return out({ version: "0.51.0" }, () => "0.51.0");
   for (const n of normalizeArgs(pos, v)) if (!globals.json) info(dim(n));
   const context = (await readConfig()).workspace;
   if (!explicitToken()?.startsWith("gat_")) {
@@ -14084,6 +14548,7 @@ async function main() {
       return applyCmd(sub, v);
     case "agents":
       if ((sub === "ls" || sub === "list" || !sub) && v.user && v.app !== void 0) return appAgentsOf(v.user, v.app);
+      if ((sub === "ls" || sub === "list" || !sub) && v.handle) return agentsByHandle(v.handle, v.workspace ?? context);
       if (sub === "ls" || sub === "list" || !sub) return agentsLs(v.all ? void 0 : v.workspace ?? context, { sponsor: v.sponsor, owner: v.owner, engine: v.engine, ids: v.ids, all: v.all });
       if (sub === "create" || sub === "new") {
         if (v.workspace === "none") delete v.workspace;
@@ -14103,6 +14568,7 @@ async function main() {
       if (sub === "docs" || sub === "documents") return agentDocsCmd(a1, a2, pos.slice(4).filter((x) => x !== void 0), v);
       if (sub === "restart") return agentsRestart(a1);
       if (sub === "demo") return agentsDemo(a1, v);
+      if (sub === "embed" || sub === "widget") return agentsEmbed(a1, v);
       if (sub === "box") return agentsBox(a1, v);
       if (sub === "export") return agentsExport(a1, v);
       throw unknown(`agents ${sub}`, sub, AGENTS_SUBS, "ghosty agents --help");
@@ -14179,6 +14645,10 @@ async function main() {
       return spacesCmd(sub, a1, a2, v, context);
     case "staff":
       return staffCmd(sub, a1, a2, v);
+    case "audit":
+      return auditCmd(sub, v, context);
+    case "factory":
+      return factoryCmd(sub, a1, a2, pos[4], v, context);
     case "plan":
       return planCmd(sub, a1, v, context);
     case "me":
@@ -14196,7 +14666,7 @@ async function main() {
       throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
-var notice = updateNotice("0.49.0").catch(() => null);
+var notice = updateNotice("0.51.0").catch(() => null);
 main().then(
   async () => {
     const n = await notice;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghostystudio/cli",
-  "version": "0.49.0",
+  "version": "0.51.0",
   "description": "Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.",
   "type": "module",
   "bin": {
@@ -16,7 +16,7 @@
   "scripts": {
     "build": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/index.js --banner:js='#!/usr/bin/env node\nimport { createRequire as __cr } from \"node:module\"; const require = __cr(import.meta.url);' --define:__VERSION__=\\\"$npm_package_version\\\"",
     "prepack": "npm run build",
-    "test": "for t in flags prompt api rows wa-auth resolve aliases i18n help completion photos channels-retry spaces sites; do esbuild src/$t.test.ts --bundle --platform=node --format=esm --outfile=/tmp/ghosty-cli-$t.test.mjs --log-level=error || exit 1; done && node --test /tmp/ghosty-cli-*.test.mjs"
+    "test": "for t in flags prompt api rows wa-auth resolve aliases i18n help completion photos channels-retry spaces sites diff cards; do esbuild src/$t.test.ts --bundle --platform=node --format=esm --outfile=/tmp/ghosty-cli-$t.test.mjs --log-level=error || exit 1; done && node --test /tmp/ghosty-cli-*.test.mjs"
   },
   "keywords": [
     "ghosty",