@ghostystudio/cli 0.7.2 → 0.9.0

package/dist/index.js

@@ -273,6 +273,40 @@ async function currentToken() {
   if (cfg.expiresAt !== void 0 && cfg.expiresAt - Date.now() < 6e4) cfg = await refresh(cfg) ?? cfg;
   return cfg.accessToken;
 }
+async function postLong(path, body, timeoutMs = 9e5) {
+  const base = await baseUrl();
+  const token = await currentToken();
+  const httpsRequest = base.startsWith("https:") ? (await import("node:https")).request : (await import("node:http")).request;
+  const data = JSON.stringify(body);
+  return new Promise((resolve) => {
+    const req = httpsRequest(`${base}${path}`, {
+      method: "POST",
+      timeout: timeoutMs,
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.9.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+    }, (res) => {
+      let buf = "";
+      res.on("data", (c) => buf += c);
+      res.on("end", () => {
+        let parsed;
+        try {
+          parsed = JSON.parse(buf);
+        } catch {
+          parsed = { error: buf.slice(0, 300) };
+        }
+        resolve({ status: res.statusCode ?? 0, retryAfter: retryAfterSeconds(res.headers["retry-after"]), body: parsed });
+      });
+    });
+    req.on("timeout", () => req.destroy(new Error(`no answer in ${Math.round(timeoutMs / 6e4)} min`)));
+    req.on("error", (e) => resolve({ status: 0, retryAfter: null, body: { error: String(e) } }));
+    req.end(data);
+  });
+}
+function retryAfterSeconds(h, now = Date.now()) {
+  if (!h) return null;
+  if (/^\d+$/.test(h.trim())) return Number(h.trim());
+  const t = Date.parse(h);
+  return Number.isNaN(t) ? null : Math.max(0, Math.round((t - now) / 1e3));
+}
 async function api(path, opts = {}) {
   const res = await request(path, opts);
   const text = await res.text();
@@ -290,7 +324,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.7.2"}`,
+      "user-agent": `ghosty-cli/${"0.9.0"}`,
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
     },
@@ -313,7 +347,7 @@ async function toError(res) {
   }
   const detail = body.message || body.error_description || (body.detalle && body.error ? `${body.error}: ${body.detalle}` : body.error) || text.slice(0, 300) || res.statusText;
   if (res.status === 401) return new CliError("Your session is not valid anymore.", EXIT.AUTH, "Run: ghosty login");
-  if (res.status === 403) return new CliError(`Not allowed: ${detail}`, EXIT.API, "Run: ghosty login   (to refresh your permissions)");
+  if (res.status === 403) return new CliError(`Not allowed: ${detail}`, EXIT.API, "If the agent was shared with you, its workspace (board, channels, numbers) stays with the owner: ask them to add you to that workspace. Otherwise run: ghosty login");
   if (res.status === 404) return new CliError("Not found.", EXIT.API, "Check the agent id (ghosty agents ls) or that your token belongs to that agent.");
   if (body.error === "restart_no_aplica" || body.error === "agente_sin_maquina") {
     return new CliError("This agent doesn't need a restart: new files, skills and MCP load on its next turn.", EXIT.API);
@@ -322,9 +356,146 @@ async function toError(res) {
 }
 
 // src/commands/agents.ts
-import { readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir3, readdir, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname2, join as join3, relative } from "node:path";
+
+// src/prompt.ts
+import { createInterface } from "node:readline/promises";
+var canPrompt = () => Boolean(process.stdin.isTTY && process.stderr.isTTY);
+function requireYesIfHeadless(yes, retry) {
+  if (!yes && !canPrompt()) throw usage("--yes required when not running interactively.", `Run: ${retry} --yes`);
+}
+async function confirm(question, opts) {
+  if (opts.yes) return;
+  if (!canPrompt()) throw usage("--yes required when not running interactively.", `Run: ${opts.retry} --yes`);
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const ask = opts.expect ? `${question}
+Type ${bold(opts.expect)} to confirm: ` : `${question} [y/N] `;
+    const a = (await rl.question(ask)).trim();
+    const ok = opts.expect ? a === opts.expect : /^y(es)?$/i.test(a);
+    if (!ok) throw usage("Cancelled.");
+  } finally {
+    rl.close();
+  }
+}
+function distance(a, b) {
+  const d = Array.from({ length: a.length + 1 }, (_, i) => [i, ...Array(b.length).fill(0)]);
+  for (let j = 1; j <= b.length; j++) d[0][j] = j;
+  for (let i = 1; i <= a.length; i++)
+    for (let j = 1; j <= b.length; j++) d[i][j] = Math.min(d[i - 1][j] + 1, d[i][j - 1] + 1, d[i - 1][j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1));
+  return d[a.length][b.length];
+}
+function suggest(input, known) {
+  const best = known.map((k) => [k, distance(input, k)]).sort((x, y) => x[1] - y[1])[0];
+  if (best && best[1] <= 2) return best[0];
+  return known.find((k) => k.startsWith(input) && input.length >= 2);
+}
+
+// src/commands/replay.ts
+import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
+import { basename, join as join2 } from "node:path";
 var enc = encodeURIComponent;
-var agentPath = (id, rest = "") => `/api/v2/agents/${enc(id)}${rest}`;
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var MIME = { jpg: "image/jpeg", jpeg: "image/jpeg", png: "image/png", webp: "image/webp", gif: "image/gif", pdf: "application/pdf", ogg: "audio/ogg", opus: "audio/ogg", mp3: "audio/mpeg", m4a: "audio/mp4", wav: "audio/wav", mp4: "video/mp4" };
+async function tryPost(id, body) {
+  for (let attempt = 0; ; attempt++) {
+    const r = await postLong(`/api/v2/agents/${enc(id)}/try`, body);
+    if ((r.status === 503 || r.status === 409 || r.status === 0) && attempt < 40) {
+      const wait = r.status === 503 ? r.retryAfter ?? 15 : Math.min(30, 2 ** Math.min(attempt, 4) + 1);
+      if (!globals.json) info(dim(`  ${r.status === 503 ? "Ghosty is restarting" : r.status === 409 ? "previous turn still running" : "network error"} \u2014 retrying in ${wait}s`));
+      await sleep(wait * 1e3);
+      continue;
+    }
+    return { status: r.status, body: r.body };
+  }
+}
+async function uploadMedia(file) {
+  const bytes = await readFile2(file);
+  const ext = file.split(".").pop()?.toLowerCase() ?? "";
+  const r = await api(`/api/v2/me/files?nombre=${enc(basename(file))}`, {
+    method: "POST",
+    raw: new Uint8Array(bytes),
+    headers: { "content-type": "application/octet-stream" }
+  });
+  const mime = MIME[ext] ?? "application/octet-stream";
+  return { url: r.url, mime, filename: r.name, type: mime.startsWith("image/") ? "image" : mime.startsWith("audio/") ? "audio" : mime.startsWith("video/") ? "video" : "document" };
+}
+function sentText(sent) {
+  return sent.map((s) => s.kind === "text" ? `${lavender("\u2192")} ${s.text}` : s.kind === "voice" ? `${lavender("\u{1F3A4}")} ${s.text}` : `${lavender("\u{1F4CE}")} ${s.name} ${dim(s.url)}`).join("\n\n");
+}
+async function tryWaba(id, text, v) {
+  const phone = v.session ?? "";
+  if (!/^\d{10,15}$/.test(phone)) throw usage("--waba needs --session <phone> (10-15 digits, a made-up number).", 'Example: ghosty try <agent-id> "hola" --waba --session 5210000000009');
+  if ((v.media?.length ?? 0) > 1) throw usage("One --media per turn (WhatsApp sends one file per message).", "Send several turns, one file each.");
+  if (!text && !v.media?.length && !v.reset) throw usage("Missing message.", 'Example: ghosty try <agent-id> "hola" --waba --session 5210000000009');
+  let history;
+  if (v.history) {
+    const raw = JSON.parse(await readFile2(v.history, "utf8"));
+    history = Array.isArray(raw) ? raw : raw.messages;
+    if (!Array.isArray(history)) throw usage(`${v.history}: expected [{role, text, at?}] or {messages: [...]}.`);
+    if (!v.reset) info(dim("Note: history only counts on the first turn of a session; add --reset to start over."));
+  }
+  const media = v.media?.[0] ? await uploadMedia(v.media[0]) : void 0;
+  if (process.stderr.isTTY && !globals.json && (text || media)) info(dim("Thinking\u2026 (the real WhatsApp path; nothing is sent)"));
+  const r = await tryPost(id, { as: "waba", session: phone, reset: v.reset, text: text ?? "", ...media ? { media } : {}, ...history ? { history } : {} });
+  if (r.status !== 200) throw Object.assign(new Error(`${r.status} ${r.body.error ?? "turn failed"}`), { code: 1 });
+  out(r.body, () => (r.body.sent ? sentText(r.body.sent) || dim("(the agent sent nothing)") : dim("Session reset.")) + (r.body.error ? `
+${dim(`(warning: ${r.body.error})`)}` : ""));
+}
+async function tryReplay(id, v) {
+  if (!v.out) throw usage("--replay needs --out DIR (the report is written there after every step).", "Example: ghosty try <agent-id> --replay muestra.json --out ./replay");
+  const max = Number(v.max ?? 15);
+  const conc = Math.max(1, Math.min(30, Number(v.concurrency ?? 8)));
+  const input = JSON.parse(await readFile2(v.replay, "utf8"));
+  const convs = input.sample ?? [];
+  if (!convs.length) throw usage(`${v.replay}: no conversations in "sample".`, 'Format: {"sample": [{"id", "fakePhone", "messages": [{"role": "user"|"agent", "text"}]}]}');
+  await mkdir2(v.out, { recursive: true });
+  const file = join2(v.out, "replay.json");
+  const prev = v.resume ? JSON.parse(await readFile2(file, "utf8").catch(() => "null")) : null;
+  const report = prev ?? { agentId: id, startedAt: (/* @__PURE__ */ new Date()).toISOString(), finishedAt: null, done: false, results: {} };
+  report.done = false;
+  let saving = Promise.resolve();
+  const save = () => saving = saving.then(() => writeFile2(file, JSON.stringify(report, null, 1)));
+  info(`${bold("Replay")} ${convs.length} conversation(s), up to ${max} customer turns each, ${conc} at a time \u2192 ${file}`);
+  const queue = [...convs];
+  const worker = async () => {
+    for (let c = queue.shift(); c; c = queue.shift()) {
+      const pairs = [];
+      for (const m of c.messages) {
+        if (m.role === "user") pairs.push({ user: m.text, original: "" });
+        else if (pairs.length) pairs[pairs.length - 1].original += (pairs[pairs.length - 1].original ? "\n\n" : "") + m.text;
+      }
+      const entry = report.results[c.id] ??= { tags: c.tags ?? [], steps: [] };
+      const todo = pairs.slice(0, max).slice(entry.steps.length);
+      if (!todo.length) continue;
+      if (!entry.steps.length) await tryPost(id, { as: "waba", session: c.fakePhone, reset: true });
+      for (const p of todo) {
+        const t0 = Date.now();
+        const r = await tryPost(id, { as: "waba", session: c.fakePhone, text: p.user });
+        entry.steps.push({ user: p.user, original: p.original, reply: r.body.text ?? "", sent: r.body.sent ?? [], error: r.body.error ?? null, ms: Date.now() - t0, status: r.status });
+        await save();
+      }
+      const bad = entry.steps.filter((s) => s.status !== 200 || !s.reply).length;
+      info(`  ${bad ? red("!") : lavender("\u2713")} ${c.id}: ${entry.steps.length} turn(s)${bad ? `, ${bad} without an answer` : ""}`);
+    }
+  };
+  await Promise.all(Array.from({ length: Math.min(conc, convs.length) }, worker));
+  report.done = true;
+  report.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
+  await save();
+  const steps = Object.values(report.results).flatMap((r) => r.steps);
+  const failed = steps.filter((s) => s.status !== 200 || !s.reply).length;
+  const summary = { file, conversations: Object.keys(report.results).length, turns: steps.length, failed, medianMs: steps.map((s) => s.ms).sort((a, b) => a - b)[Math.floor(steps.length / 2)] ?? 0 };
+  out(summary, () => `${failed ? red("!") : lavender("\u2713")} ${summary.turns} turn(s) in ${summary.conversations} conversation(s), ${failed} without an answer, median ${Math.round(summary.medianMs / 1e3)}s
+${dim(`Report: ${file}   Failed turns: ghosty turns ls ${id} --errors --since 2h`)}`);
+  if (failed) process.exitCode = 1;
+}
+
+// src/commands/agents.ts
+var enc2 = encodeURIComponent;
+var agentPath = (id, rest = "") => `/api/v2/agents/${enc2(id)}${rest}`;
 var need = (v, what, example) => {
   if (!v) throw usage(`Missing ${what}.`, `Example: ${example}`);
   return v;
@@ -357,7 +528,7 @@ async function agentsCreate(v) {
   if (v.engine) body.engine = v.engine;
   if (v.model) body.model = v.model;
   if (v.prompt) body.prompt = v.prompt;
-  if (v["prompt-file"]) body.prompt = await readFile2(v["prompt-file"], "utf8");
+  if (v["prompt-file"]) body.prompt = await readFile3(v["prompt-file"], "utf8");
   const env = parseEnv(v.env);
   if (env) body.env = env;
   const r = await api("/api/v2/me/agents", { method: "POST", body });
@@ -366,7 +537,7 @@ async function agentsCreate(v) {
 }
 async function agentsGet(id, fields) {
   id = need(id, "agent id", "ghosty agents get <agent-id>");
-  const q = fields ? `?fields=${enc(fields)}` : "?full=1";
+  const q = fields ? `?fields=${enc2(fields)}` : "?full=1";
   out(await api(agentPath(id, q)));
 }
 async function agentsSet(id, v) {
@@ -376,19 +547,40 @@ async function agentsSet(id, v) {
   if (v.engine) body.engine = v.engine;
   if (v.model) body.model = v.model;
   if (v.prompt) body.prompt = v.prompt;
-  if (v["prompt-file"]) body.prompt = await readFile2(v["prompt-file"], "utf8");
+  if (v["prompt-file"]) body.prompt = await readFile3(v["prompt-file"], "utf8");
   const env = parseEnv(v.env);
   if (env) body.env = env;
   const connectors = {};
   for (const c of (v.connect ?? "").split(",").map((s) => s.trim()).filter(Boolean)) connectors[c] = {};
   for (const c of (v.disconnect ?? "").split(",").map((s) => s.trim()).filter(Boolean)) connectors[c] = null;
   if (Object.keys(connectors).length) body.connectors = connectors;
-  if (!Object.keys(body).length) throw usage("Nothing to change.", "Use --name, --engine, --model, --prompt, --prompt-file, --env, --connect or --disconnect.");
+  const voice = {};
+  if (v.voice) {
+    const [engine, ...rest] = v.voice.split(":");
+    if (engine !== "elevenlabs" && engine !== "kokoro" || !rest.join(":")) throw usage(`Bad --voice: ${v.voice}.`, "Use elevenlabs:<voiceId> or kokoro:em_santa|em_alex|ef_dora");
+    voice.engine = engine;
+    voice.voiceId = rest.join(":");
+  }
+  if (v["voice-replies"]) {
+    if (v["voice-replies"] !== "auto" && v["voice-replies"] !== "off") throw usage("--voice-replies takes auto or off.");
+    voice.replies = v["voice-replies"];
+  }
+  if (Object.keys(voice).length) body.voice = voice;
+  if (v["auto-stage"]) {
+    if (v["auto-stage"] !== "on" && v["auto-stage"] !== "off") throw usage("--auto-stage takes on or off.");
+    body.autoStage = v["auto-stage"] === "on";
+  }
+  if (!Object.keys(body).length) throw usage("Nothing to change.", "Use --name, --engine, --model, --prompt, --prompt-file, --env, --connect, --disconnect, --voice, --voice-replies or --auto-stage.");
   const r = await api(agentPath(id), { method: "PATCH", body });
   out(r, () => `${lavender("\u2713")} Updated ${Object.keys(body).join(", ")}.`);
 }
-async function agentsRm(id) {
+async function agentsRm(id, v = {}) {
   id = need(id, "agent id", "ghosty agents rm <agent-id>");
+  requireYesIfHeadless(v.yes, `ghosty agents rm ${id}`);
+  if (!v.yes) {
+    const a = await api(agentPath(id, "?fields=name"));
+    await confirm(`Delete agent ${a.name ?? id}? Its machine, memory and files go too. This can't be undone.`, { expect: a.name || id, retry: `ghosty agents rm ${id}` });
+  }
   out(await api(agentPath(id), { method: "DELETE" }), () => `${lavender("\u2713")} Deleted ${id}.`);
 }
 async function agentsRestart(id) {
@@ -397,11 +589,13 @@ async function agentsRestart(id) {
 }
 async function tryTurn(id, text, v) {
   id = need(id, "agent id", 'ghosty try <agent-id> "hello"');
+  if (v.replay) return tryReplay(id, v);
+  if (v.whatsapp && !v.waba) info(dim("Note: --whatsapp is now --waba (the real WhatsApp path)."));
+  if (v.waba || v.whatsapp || v.media?.length || v.history) return tryWaba(id, text, v);
   if (!text && !v.reset) throw usage("Missing message.", 'Example: ghosty try <agent-id> "hello"');
-  if (!process.stdout.isTTY || !text) {
-  } else info(dim("Thinking\u2026 (a test turn can take up to 3 minutes)"));
+  if (process.stderr.isTTY && text && !globals.json) info(dim("Thinking\u2026 (a test turn can take up to 3 minutes)"));
   const r = await api(agentPath(id, "/try"), {
-    body: { text, session: v.session, reset: v.reset, ...v.whatsapp ? { as: "whatsapp" } : {} }
+    body: { text, session: v.session, reset: v.reset }
   });
   out(r, () => (r.text ?? "") + (r.error ? `
 ${dim(`(warning: ${r.error})`)}` : ""));
@@ -423,20 +617,21 @@ ${table(r.files ?? [], cols)}`);
       const res = await request(agentPath(id, `/files/${p}`));
       const bytes = Buffer.from(await res.arrayBuffer());
       if (v.out) {
-        await writeFile2(v.out, bytes);
+        await writeFile3(v.out, bytes);
         out({ path: p, saved: v.out, bytes: bytes.length }, () => `${lavender("\u2713")} Saved ${bytes.length} bytes to ${v.out}`);
       } else process.stdout.write(bytes);
       return;
     }
     case "put": {
       need(path, "path", ex);
-      const data = v.file ? await readFile2(v.file) : await readStdin();
+      const data = v.file ? await readFile3(v.file) : await readStdin();
       const r = await api(agentPath(id, `/files/${p}`), { method: "PUT", raw: new Uint8Array(data), headers: { "content-type": "application/octet-stream" } });
       out(r ?? { path: p, bytes: data.length }, () => `${lavender("\u2713")} Wrote ${p} (${data.length} bytes).`);
       return;
     }
     case "rm": {
       need(path, "path", ex);
+      await confirm(`Delete ${p} from the agent's machine?`, { yes: v.yes, retry: `ghosty files rm ${id} ${p}` });
       out(await api(agentPath(id, `/files/${p}`), { method: "DELETE" }) ?? { deleted: p }, () => `${lavender("\u2713")} Deleted ${p}`);
       return;
     }
@@ -450,11 +645,38 @@ async function readStdin() {
   for await (const c of process.stdin) parts.push(c);
   return Buffer.concat(parts);
 }
+async function writeSkill(dir, sk) {
+  let bytes = 0;
+  for (const f of sk.files) {
+    const full = join3(dir, f.path);
+    if (relative(dir, full).startsWith("..")) continue;
+    await mkdir3(dirname2(full), { recursive: true });
+    const b = Buffer.from(f.contentBase64, "base64");
+    await writeFile3(full, b);
+    bytes += b.length;
+  }
+  return bytes;
+}
+async function readSkillDir(dir) {
+  const files = (await readdir(dir, { recursive: true, withFileTypes: true })).filter((e) => e.isFile());
+  let markdown;
+  const assets = [];
+  for (const e of files) {
+    const full = join3(e.parentPath, e.name);
+    const rel = relative(dir, full).split("\\").join("/");
+    if (rel === "SKILL.md") markdown = await readFile3(full, "utf8");
+    else if (!rel.split("/").some((part) => part.startsWith("."))) assets.push({ name: rel, contentBase64: (await readFile3(full)).toString("base64") });
+  }
+  if (!markdown) throw usage(`No SKILL.md in ${dir}.`, "A skill folder has SKILL.md at its root (agentskills.io).");
+  return { markdown, assets };
+}
+var trashDir = (id, slug) => join3(process.env.XDG_CONFIG_HOME || join3(homedir2(), ".config"), "ghosty", "trash", id, `${slug}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`);
 async function skillsCmd(sub, id, slug, v) {
-  const ex = "ghosty skills ls <agent-id> | add <agent-id> <slug> [--file SKILL.md] | rm <agent-id> <slug>";
+  const ex = "ghosty skills ls <agent-id> | get <agent-id> <slug> | add <agent-id> <slug> [--file SKILL.md | --dir FOLDER] | rm <agent-id> <slug>";
   id = need(id, "agent id", ex);
-  switch (sub) {
-    case "ls": {
+  switch (sub ?? "ls") {
+    case "ls":
+    case "list": {
       const r = await api(agentPath(id, "/skills"));
       const short2 = (d) => (d ?? "").replace(/\s+/g, " ").slice(0, 70);
       const rows = [
@@ -463,22 +685,42 @@ async function skillsCmd(sub, id, slug, v) {
       ];
       const more = r.community.filter((c) => !c.installed).length;
       out(r, () => `${table(rows, ["slug", "source", "on", "description"])}
-${dim(`${more} more in the community catalog: ghosty skills add <agent-id> <slug> (--json lists them)`)}`);
+${dim(`${more} more in the community catalog: ghosty skills add <agent-id> <slug> (--json lists them) \xB7 overlaps: ghosty agents doctor ${id}`)}`);
+      return;
+    }
+    case "get": {
+      slug = need(slug, "skill slug", "ghosty skills get <agent-id> <slug> [--out DIR]");
+      const sk = await api(agentPath(id, `/skills/${enc2(slug)}`));
+      const dir = v.out ?? slug;
+      const bytes = await writeSkill(dir, sk);
+      out({ slug, saved: dir, files: sk.files.map((f) => f.path), bytes }, () => `${lavender("\u2713")} ${slug} \u2192 ${dir}/ ${dim(`(${sk.files.length} file(s), ${bytes} bytes)`)}`);
       return;
     }
     case "add": {
       slug = need(slug, "skill slug", ex);
-      const body = v.file ? { markdown: await readFile2(v.file, "utf8") } : { fromCatalog: true };
-      const r = await api(agentPath(id, `/skills/${enc(slug)}`), { method: "PUT", body });
+      if (v.file && v.dir) throw usage("Use --file or --dir, not both.");
+      const body = v.dir ? await readSkillDir(v.dir) : v.file ? { markdown: await readFile3(v.file, "utf8") } : { fromCatalog: true };
+      const r = await api(agentPath(id, `/skills/${enc2(slug)}`), { method: "PUT", body });
       out(r, () => `${lavender("\u2713")} Skill ${slug} installed.${r?.nota ? dim(` (${r.nota})`) : ""}`);
       return;
     }
     case "rm":
+    case "remove": {
       slug = need(slug, "skill slug", ex);
-      out(await api(agentPath(id, `/skills/${enc(slug)}`), { method: "DELETE" }) ?? { removed: slug }, () => `${lavender("\u2713")} Skill ${slug} removed.`);
+      requireYesIfHeadless(v.yes, `ghosty skills rm ${id} ${slug}`);
+      const sk = await api(agentPath(id, `/skills/${enc2(slug)}`)).catch(() => null);
+      await confirm(`Remove skill ${slug} from agent ${id}?${sk ? " A local copy is kept." : ""}`, { yes: v.yes, retry: `ghosty skills rm ${id} ${slug}` });
+      const backup = sk ? trashDir(id, slug) : null;
+      if (sk && backup) await writeSkill(backup, sk);
+      const r = await api(agentPath(id, `/skills/${enc2(slug)}`), { method: "DELETE" }) ?? { deleted: slug };
+      const restore = backup ? `ghosty skills add ${id} ${slug} --dir "${backup}"` : null;
+      out({ ...r, backup, restore }, () => `${lavender("\u2713")} Skill ${slug} removed.${restore ? `
+${dim(`Backup: ${backup}
+Undo:   ${restore}`)}` : ""}`);
       return;
+    }
     default:
-      throw usage(`Unknown skills subcommand: ${sub ?? "(none)"}.`, ex);
+      throw usage(`Unknown skills subcommand: ${sub}.`, ex);
   }
 }
 async function mcpCmd(sub, id, v) {
@@ -487,7 +729,7 @@ async function mcpCmd(sub, id, v) {
   if (sub === "get") return out(await api(agentPath(id, "/mcp")));
   if (sub === "set") {
     const file = need(v.file, "--file", ex);
-    const parsed = JSON.parse(await readFile2(file, "utf8"));
+    const parsed = JSON.parse(await readFile3(file, "utf8"));
     const body = { servers: Array.isArray(parsed) ? parsed : parsed.servers ?? [] };
     const r = await api(agentPath(id, "/mcp"), { method: "PUT", body });
     return out(r, () => `${lavender("\u2713")} MCP servers replaced \u2014 ${r?.reiniciado ? "the agent restarted with them." : "they load on the next turn."}`);
@@ -507,6 +749,7 @@ async function agentsDemo(id, v) {
   if (v.welcome !== void 0) body.welcome = v.welcome;
   if (v.chips !== void 0) body.chips = v.chips.split("|").map((c) => c.trim()).filter(Boolean);
   if (v.starter !== void 0) body.starter = v.starter || null;
+  if (v.rotate) body.rotate = true;
   if (v.sponsor !== void 0) {
     if (v.sponsor !== "on" && v.sponsor !== "off") throw usage("--sponsor takes on or off.");
     body.sponsor = v.sponsor === "on";
@@ -528,9 +771,9 @@ async function agentsDemo(id, v) {
 
 // src/commands/chat.ts
 import { randomUUID } from "node:crypto";
-import { createInterface } from "node:readline/promises";
-import { readFile as readFile3 } from "node:fs/promises";
-import { basename } from "node:path";
+import { createInterface as createInterface2 } from "node:readline/promises";
+import { readFile as readFile4 } from "node:fs/promises";
+import { basename as basename2 } from "node:path";
 
 // src/sse.ts
 async function* readSse(body) {
@@ -565,8 +808,8 @@ function parseData(e) {
 }
 
 // src/commands/chat.ts
-var enc2 = encodeURIComponent;
-var convPath = (agent, rest = "") => `/api/v2/me/agents/${enc2(agent)}/conversations${rest}`;
+var enc3 = encodeURIComponent;
+var convPath = (agent, rest = "") => `/api/v2/me/agents/${enc3(agent)}/conversations${rest}`;
 async function conversationsLs(agent) {
   if (!agent) throw usage("Missing agent id.", "Example: ghosty conversations ls <agent-id>");
   const r = await api(convPath(agent));
@@ -576,17 +819,17 @@ async function conversationsLs(agent) {
 async function turn(agent, sid, text, first) {
   const turnId = randomUUID();
   const ctrl = new AbortController();
-  const res = await request(convPath(agent, `/${enc2(sid)}/events`), { signal: ctrl.signal, headers: { accept: "text/event-stream" } });
+  const res = await request(convPath(agent, `/${enc3(sid)}/events`), { signal: ctrl.signal, headers: { accept: "text/event-stream" } });
   let cancelled = false;
   const onSigint = () => {
     if (cancelled) process.exit(130);
     cancelled = true;
     info(dim("\n(cancelling\u2026 press Ctrl-C again to quit)"));
-    void api(convPath(agent, `/${enc2(sid)}/cancel`), { method: "POST", body: {} }).catch(() => {
+    void api(convPath(agent, `/${enc3(sid)}/cancel`), { method: "POST", body: {} }).catch(() => {
     });
   };
   process.on("SIGINT", onSigint);
-  const sent = api(convPath(agent, `/${enc2(sid)}/messages`), { body: { content: text, turnId, primerTurno: first } });
+  const sent = api(convPath(agent, `/${enc3(sid)}/messages`), { body: { content: text, turnId, primerTurno: first } });
   let answer = "";
   let usageData;
   let ours = false;
@@ -638,7 +881,7 @@ async function chat(agent, message, v) {
     await turn(agent, sid, piped, first);
     return;
   }
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  const rl = createInterface2({ input: process.stdin, output: process.stderr });
   info(dim("Type your message. Ctrl-C cancels a turn, Ctrl-D exits."));
   for (; ; ) {
     let line;
@@ -665,7 +908,7 @@ async function meFiles(sub, arg, v) {
   switch (sub) {
     case "ls": {
       const r = await api(
-        `/api/v2/me/files${v.kind ? `?kind=${enc2(v.kind)}` : ""}`
+        `/api/v2/me/files${v.kind ? `?kind=${enc3(v.kind)}` : ""}`
       );
       out(r, () => {
         const rows = r.files.map((f) => ({ id: f.id, name: f.name, kind: f.kind, size: f.size, created: f.createdAt.slice(0, 10) }));
@@ -676,8 +919,8 @@ ${dim(`${(r.storage.usedBytes / 1e9).toFixed(2)} GB of ${r.storage.limitGb} GB u
     }
     case "upload": {
       if (!arg) throw usage("Missing file.", ex);
-      const bytes = await readFile3(arg);
-      const r = await api(`/api/v2/me/files?nombre=${enc2(basename(arg))}`, {
+      const bytes = await readFile4(arg);
+      const r = await api(`/api/v2/me/files?nombre=${enc3(basename2(arg))}`, {
         method: "POST",
         raw: new Uint8Array(bytes),
         headers: { "content-type": "application/octet-stream" }
@@ -687,7 +930,7 @@ ${dim(`${(r.storage.usedBytes / 1e9).toFixed(2)} GB of ${r.storage.limitGb} GB u
     }
     case "rm": {
       if (!arg) throw usage("Missing file id.", ex);
-      out(await api(`/api/v2/me/files/${enc2(arg)}`, { method: "DELETE" }) ?? { deleted: arg }, () => `${lavender("\u2713")} Deleted ${arg}`);
+      out(await api(`/api/v2/me/files/${enc3(arg)}`, { method: "DELETE" }) ?? { deleted: arg }, () => `${lavender("\u2713")} Deleted ${arg}`);
       return;
     }
     default:
@@ -710,7 +953,7 @@ async function meUsage() {
 }
 
 // src/commands/schedule.ts
-var enc3 = encodeURIComponent;
+var enc4 = encodeURIComponent;
 function minutesOf(s, flag) {
   const m = /^(\d+(?:\.\d+)?)\s*(m|min|h|d)?$/i.exec(s.trim());
   if (!m) throw usage(`Invalid ${flag}: ${s}.`, "Use minutes, hours or days: 30m, 12h, 1d");
@@ -726,7 +969,7 @@ function isoOf(s, flag) {
 var every = (min) => min == null ? "once" : min % 1440 === 0 ? `${min / 1440}d` : min % 60 === 0 ? `${min / 60}h` : `${min}m`;
 var short = (s, n = 60) => s.length > n ? s.slice(0, n - 1) + "\u2026" : s;
 async function agentSchedule(agent) {
-  return api(`/api/v2/me/agents/${enc3(agent)}/schedule`);
+  return api(`/api/v2/me/agents/${enc4(agent)}/schedule`);
 }
 async function scheduleCmd(sub, agent, arg, v) {
   if (sub === "ls" || sub === "list") {
@@ -769,13 +1012,13 @@ async function scheduleCmd(sub, agent, arg, v) {
     }
     let r;
     try {
-      r = await api(convPath(agent, `/${enc3(sid)}/schedule`), { body });
+      r = await api(convPath(agent, `/${enc4(sid)}/schedule`), { body });
     } catch (e) {
-      if (created) await api(convPath(agent, `/${enc3(sid)}`), { method: "DELETE" }).catch(() => {
+      if (created) await api(convPath(agent, `/${enc4(sid)}`), { method: "DELETE" }).catch(() => {
       });
       throw e;
     }
-    if (v.title && created) await api(convPath(agent, `/${enc3(sid)}`), { method: "PATCH", body: { title: v.title } });
+    if (v.title && created) await api(convPath(agent, `/${enc4(sid)}`), { method: "PATCH", body: { title: v.title } });
     const p = r.programado;
     return out(
       { scheduled: p },
@@ -787,7 +1030,7 @@ ${dim(`conversation ${p.sessionId}`)}`
     if (!agent || !arg) throw usage("Missing agent id or schedule id.", "Example: ghosty schedule rm <agent-id> <schedule-id>   (ids: ghosty schedule ls <agent-id>)");
     const row = (await agentSchedule(agent)).pendientes.find((p) => p.id === arg);
     if (!row) throw usage(`No pending scheduled turn ${arg}.`, "See them with: ghosty schedule ls <agent-id>");
-    await api(convPath(agent, `/${enc3(row.sessionId)}/schedule/${enc3(arg)}`), { method: "DELETE" });
+    await api(convPath(agent, `/${enc4(row.sessionId)}/schedule/${enc4(arg)}`), { method: "DELETE" });
     return out({ canceled: arg }, () => `${lavender("\u2713")} Canceled ${arg}`);
   }
   throw usage(`Unknown schedule subcommand: ${sub ?? "(none)"}.`, "Try: ghosty schedule ls | add | rm");
@@ -795,7 +1038,7 @@ ${dim(`conversation ${p.sessionId}`)}`
 
 // src/commands/partner.ts
 import { createHmac } from "node:crypto";
-import { readFile as readFile4 } from "node:fs/promises";
+import { readFile as readFile5 } from "node:fs/promises";
 var PARTNER_HELP = `${bold("Usage:")} ghosty partner <command> [options]
 
 ${bold("Partner space")}  ${dim("(you, signed in as the space owner)")}
@@ -827,7 +1070,7 @@ ${bold("Options")}
 
 ${bold("Server credential mode")}  GHOSTY_PARTNER_KEY=gpk_\u2026 GHOSTY_PARTNER_SECRET=gps_\u2026 ghosty partner agent get
 ${dim("Docs: https://www.ghosty.studio/docs/cli")}`;
-var enc4 = encodeURIComponent;
+var enc5 = encodeURIComponent;
 function partnerCreds() {
   const key = process.env.GHOSTY_PARTNER_KEY;
   const secret = process.env.GHOSTY_PARTNER_SECRET;
@@ -847,7 +1090,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.7.2"}`
+        "user-agent": `ghosty-cli/${"0.9.0"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -895,10 +1138,10 @@ async function credentialsCmd(sub, id, v) {
   if (sub === "rotate") {
     const grace = v.grace !== void 0 ? Number(v.grace) : void 0;
     if (grace !== void 0 && (!Number.isFinite(grace) || grace < 0)) throw usage("--grace must be minutes \u2265 0.");
-    return showSecret(await json(`/api/v2/partner/credentials/${enc4(id)}/rotate`, v, { ...owner, method: "POST", body: { graceMinutes: grace } }));
+    return showSecret(await json(`/api/v2/partner/credentials/${enc5(id)}/rotate`, v, { ...owner, method: "POST", body: { graceMinutes: grace } }));
   }
   if (sub === "revoke" || sub === "rm") {
-    const r = await json(`/api/v2/partner/credentials/${enc4(id)}`, v, { ...owner, method: "DELETE" });
+    const r = await json(`/api/v2/partner/credentials/${enc5(id)}`, v, { ...owner, method: "DELETE" });
     return out(r, () => `${lavender("\u2713")} Revoked ${r.keyId}.`);
   }
   throw usage(`Unknown credentials subcommand: ${sub}.`, "Try: ghosty partner credentials ls | create | rotate | revoke");
@@ -917,7 +1160,7 @@ async function agentCmd(sub, v) {
   }
   if (sub === "apply" || sub === "set") {
     if (!v.file) throw usage("Missing --file.", "Example: ghosty partner agent apply --file agent.json");
-    const body = JSON.parse(await readFile4(v.file, "utf8"));
+    const body = JSON.parse(await readFile5(v.file, "utf8"));
     const r = await json("/api/v2/partner/agent", v, { method: "PUT", body });
     return out(r, () => `${lavender("\u2713")} ${r.created ? "Created" : r.changed ? "Updated" : "No changes"} \xB7 v${r.agent.version}`);
   }
@@ -929,7 +1172,7 @@ async function tenantsCmd(sub, id, v) {
     return out(r, () => table(r.tenants.map((t) => ({ externalId: t.externalId, config: JSON.stringify(t.config ?? {}), updated: fmt(t.updatedAt) })), ["externalId", "config", "updated"]));
   }
   if (!id) throw usage("Missing externalId.", `Example: ghosty partner tenants ${sub} org_123`);
-  const path = `/api/v2/partner/tenants/${enc4(id)}`;
+  const path = `/api/v2/partner/tenants/${enc5(id)}`;
   if (sub === "get") return out(await json(path, v));
   if (sub === "set" || sub === "apply") {
     if (!v.config) throw usage("Missing --config.", `Example: --config '{"name":"Spa","timezone":"America/Mexico_City"}'`);
@@ -1012,6 +1255,509 @@ async function partnerCmd(sub, a1, a2, v) {
   }
 }
 
+// src/commands/data.ts
+var enc6 = encodeURIComponent;
+var agentPath2 = (id, rest = "") => `/api/v2/agents/${enc6(id)}${rest}`;
+var need2 = (v, what, example) => {
+  if (!v) throw usage(`Missing ${what}.`, `Example: ${example}`);
+  return v;
+};
+var csv = (s) => (s ?? "").split(",").map((x) => x.trim()).filter(Boolean);
+function planText(plan) {
+  return plan.map((p) => p.action === "create" ? `  + ${p.table}  create, ${p.sourceRows} row(s)` : `  ~ ${p.table}  ${p.action} ${p.targetRows} \u2192 ${p.resultRows} row(s)`).join("\n");
+}
+async function dbsImport(id, db, v) {
+  const ex = "ghosty dbs import <agent-id> <db> --from easybits:<db-id> [--tables a,b] [--dry-run]";
+  const m = /^easybits:(.+)$/.exec(v.from ?? "");
+  if (!m) throw usage("Missing or bad --from.", `Example: ${ex}`);
+  const easybitsKey = process.env.EASYBITS_API_KEY;
+  if (!easybitsKey) throw usage("EASYBITS_API_KEY is not set.", "Export your EasyBits API key (https://www.easybits.cloud/dash/developer) and run again.");
+  const body = { from: "easybits", sourceDb: m[1], easybitsKey, mode: v.append ? "append" : "replace", ...v.tables ? { tables: csv(v.tables) } : {} };
+  const path = agentPath2(id, `/dbs/${enc6(db)}/import`);
+  const dry = await api(path, { body: { ...body, dryRun: true } });
+  if (v["dry-run"]) return out(dry, () => `${dry.db} \u2190 easybits:${m[1]}
+${planText(dry.plan)}
+${dim("Dry run: nothing changed.")}`);
+  const destructive = dry.plan.some((p) => p.action === "replace" && p.targetRows > 0);
+  if (destructive) await confirm(`${planText(dry.plan)}
+Replace the rows above in ${dry.db}?`, { yes: v.yes, retry: `ghosty dbs import ${id} ${db} --from ${v.from}${v.tables ? ` --tables ${v.tables}` : ""}` });
+  const r = await api(path, { body });
+  return out(r, () => `${planText(r.plan)}
+${lavender("\u2713")} Imported into ${r.db}. ${dim("Run it again any time: with replace it ends in the same state.")}`);
+}
+async function dbsCmd(sub, id, db, rest, v) {
+  const ex = "ghosty dbs ls <agent-id>";
+  id = need2(id, "agent id", ex);
+  switch (sub ?? "ls") {
+    case "ls":
+    case "list": {
+      const r = await api(agentPath2(id, "/dbs"));
+      const rows = r.dbs.map((d) => ({ name: d.name, access: d.granted ? "granted" : "\u2014", "writes from customers": d.granted ? d.externalWriteTables.join(", ") || "(none)" : "", id: d.id }));
+      return out(r.dbs, () => rows.length ? table(rows, ["name", "access", "writes from customers", "id"]) : dim("This account has no databases yet: create one at /app/dbs."));
+    }
+    case "tables": {
+      db = need2(db, "database (id or name)", "ghosty dbs tables <agent-id> <db>");
+      const r = await api(agentPath2(id, `/dbs/${enc6(db)}`));
+      const ext = new Set(r.externalWriteTables);
+      const rows = r.tables.map((t) => ({ table: t.name, rows: t.rows, "customer writes": ext.has(t.name) ? "yes" : "", columns: t.columns.map((c) => `${c.name}${c.pk ? "*" : ""}`).join(", ") }));
+      return out(r, () => `${bold(r.name)} ${r.granted ? lavender("granted") : dim("not granted")}
+${table(rows, ["table", "rows", "customer writes", "columns"])}`);
+    }
+    case "query":
+    case "sql": {
+      db = need2(db, "database (id or name)", 'ghosty dbs query <agent-id> <db> "SELECT \u2026"');
+      const sql = need2(rest.join(" ").trim() || void 0, "SQL", 'ghosty dbs query <agent-id> <db> "SELECT * FROM t LIMIT 10"');
+      const r = await api(agentPath2(id, `/dbs/${enc6(db)}/query`), { body: { sql, args: v.arg ?? [], write: v.write === true } }).catch((e) => {
+        if (e instanceof CliError && !v.write && /lectura|SELECT|escribir/i.test(e.message)) throw new CliError(e.message, EXIT.API, "To write on purpose, add --write.");
+        throw e;
+      });
+      return out(r, () => {
+        if (!r.cols.length) return `${lavender("\u2713")} ${r.affected} row(s) affected ${dim(`(${Math.round(r.ms)} ms)`)}`;
+        const rows = r.rows.map((row) => Object.fromEntries(r.cols.map((c, i) => [c, row[i]])));
+        return `${table(rows, r.cols)}
+${dim(`${rows.length} row(s) \xB7 ${Math.round(r.ms)} ms`)}`;
+      });
+    }
+    case "grant": {
+      db = need2(db, "database (id or name)", "ghosty dbs grant <agent-id> <db> [--external-write t1,t2]");
+      const body = v["external-write"] !== void 0 ? { externalWriteTables: csv(v["external-write"]) } : {};
+      const r = await api(agentPath2(id, `/dbs/${enc6(db)}`), { method: "PUT", body });
+      return out(r, () => `${lavender("\u2713")} ${r.name} granted. ${dim(`From customer channels it writes to: ${r.externalWriteTables.join(", ") || "nothing (read only)"}.`)}`);
+    }
+    case "import": {
+      db = need2(db, "database (id or name)", "ghosty dbs import <agent-id> <db> --from easybits:<db-id>");
+      return dbsImport(id, db, v);
+    }
+    case "revoke": {
+      db = need2(db, "database (id or name)", "ghosty dbs revoke <agent-id> <db>");
+      const r = await api(agentPath2(id, `/dbs/${enc6(db)}`), { method: "DELETE" });
+      return out(r, () => `${lavender("\u2713")} ${r.name} revoked. ${dim(`Undo: ghosty dbs grant ${id} ${r.name}`)}`);
+    }
+    default:
+      throw usage(`Unknown dbs subcommand: ${sub}.`, "Try: ghosty dbs ls | tables | query | import | grant | revoke   (ghosty dbs --help)");
+  }
+}
+async function agentDocsCmd(sub, id, doc, v) {
+  id = need2(id, "agent id", "ghosty agents docs ls <agent-id>");
+  switch (sub ?? "ls") {
+    case "ls":
+    case "list": {
+      const r = await api(agentPath2(id, "/documents"));
+      const rows = r.documents.map((d) => ({ name: d.name, access: d.granted ? d.mode === "write" ? "read+replace" : "read" : "\u2014", delivers: d.granted ? d.deliverable ? "yes" : "no" : "", id: d.id }));
+      return out(r.documents, () => rows.length ? table(rows, ["name", "access", "delivers", "id"]) : dim("This account has no documents yet: upload them at /app/datos."));
+    }
+    case "grant": {
+      doc = need2(doc, "document (id or exact name)", 'ghosty agents docs grant <agent-id> "Cat\xE1logo.pdf"');
+      const body = {};
+      if (v.write) body.mode = "write";
+      if (v["no-deliver"]) body.deliverable = false;
+      else if (v.deliver) body.deliverable = true;
+      const r = await api(agentPath2(id, `/documents/${enc6(doc)}`), { method: "PUT", body });
+      return out(r, () => `${lavender("\u2713")} ${r.name}: ${r.mode === "write" ? "reads and replaces it" : "reads it"}${r.deliverable ? ", and can send it" : ", never sends it"}.`);
+    }
+    case "revoke": {
+      doc = need2(doc, "document (id or exact name)", 'ghosty agents docs revoke <agent-id> "Cat\xE1logo.pdf"');
+      const r = await api(agentPath2(id, `/documents/${enc6(doc)}`), { method: "DELETE" });
+      return out(r, () => `${lavender("\u2713")} ${r.name} revoked. ${dim(`Undo: ghosty agents docs grant ${id} "${r.name}"`)}`);
+    }
+    default:
+      throw usage(`Unknown agents docs subcommand: ${sub}.`, "Try: ghosty agents docs ls | grant | revoke");
+  }
+}
+async function turnsCmd(sub, id, v) {
+  if (sub && sub !== "ls" && sub !== "list") throw usage(`Unknown turns subcommand: ${sub}.`, "Try: ghosty turns ls <agent-id> --errors --since 1h");
+  id = need2(id, "agent id", "ghosty turns ls <agent-id> --errors --since 1h");
+  const q = new URLSearchParams();
+  const status = v.errors ? "error" : v.status;
+  if (status) q.set("state", status);
+  if (v.since) q.set("since", v.since);
+  q.set("limit", v.limit ?? "20");
+  const r = await api(agentPath2(id, `/turns?${q}`));
+  const when = (s) => s.slice(0, 16).replace("T", " ");
+  const rows = r.turns.map((t) => ({
+    started: when(t.startedAt),
+    state: t.state === "error" ? red(t.state) : t.state,
+    secs: t.ms == null ? "" : Math.round(t.ms / 1e3),
+    from: t.surface ?? "",
+    session: t.sessionId.slice(0, 24),
+    error: (t.error ?? "").replace(/\s+/g, " ").slice(0, 90)
+  }));
+  const tally = Object.entries(r.counts).map(([k, n]) => `${k} ${n}`).join(" \xB7 ");
+  out(r, () => rows.length ? `${table(rows, ["started", "state", "secs", "from", "session", "error"])}
+${dim(`${v.since ? `since ${v.since}: ` : ""}${tally}`)}` : dim(`No ${status ?? ""} turns${v.since ? ` since ${v.since}` : ""}.`));
+}
+async function agentsDoctor(id, v) {
+  id = need2(id, "agent id", "ghosty agents doctor <agent-id>");
+  const r = await api(agentPath2(id, "/doctor"));
+  const problems = r.summary.warn + r.summary.error;
+  if (globals.json) out(r);
+  else {
+    const mark = { ok: lavender("\u2713"), warn: "\x1B[33m!\x1B[0m", error: red("\u2717") };
+    const lines = [];
+    for (const c of r.checks) {
+      if (c.level === "ok" && !v.verbose) continue;
+      lines.push(`${process.stdout.isTTY ? mark[c.level] : { ok: "\u2713", warn: "!", error: "\u2717" }[c.level]} ${c.title}`);
+      if (c.detail && c.level !== "ok") lines.push(...c.detail.split("\n").map((l) => `    ${dim(l)}`));
+      if (c.fix && c.level !== "ok") lines.push(`    ${dim("fix:")} ${c.fix}`);
+    }
+    lines.push(problems ? `Doctor found ${r.summary.error} error(s) and ${r.summary.warn} warning(s) in ${r.checks.length} checks.` : `${lavender("\u2713")} No issues found (${r.checks.length} checks).`);
+    process.stdout.write(lines.join("\n") + "\n");
+  }
+  if (problems) {
+    if (!globals.json) info(dim("Exit 1: problems found."));
+    process.exit(EXIT.API);
+  }
+}
+
+// src/commands/credentials.ts
+async function hiddenPrompt(label) {
+  process.stderr.write(label);
+  const stdin = process.stdin;
+  stdin.setRawMode(true);
+  stdin.resume();
+  stdin.setEncoding("utf8");
+  return new Promise((resolve, reject) => {
+    let value = "";
+    const onData = (chunk) => {
+      for (const ch of chunk) {
+        if (ch === "\r" || ch === "\n") {
+          stdin.setRawMode(false);
+          stdin.pause();
+          stdin.off("data", onData);
+          process.stderr.write("\n");
+          return resolve(value);
+        }
+        if (ch === "") {
+          stdin.setRawMode(false);
+          process.stderr.write("\n");
+          return reject(usage("Cancelled."));
+        }
+        if (ch === "\x7F") value = value.slice(0, -1);
+        else value += ch;
+      }
+    };
+    stdin.on("data", onData);
+  });
+}
+async function readSecret(provider, fromEnv) {
+  if (fromEnv) {
+    const v = process.env[fromEnv];
+    if (!v) throw usage(`$${fromEnv} is empty or not set.`, `Example: export ${fromEnv}=\u2026 && ghosty credentials set ${provider} --from-env ${fromEnv}`);
+    return v;
+  }
+  if (!process.stdin.isTTY) {
+    const parts = [];
+    for await (const c of process.stdin) parts.push(c);
+    return Buffer.concat(parts).toString("utf8").replace(/\r?\n$/, "");
+  }
+  if (!canPrompt()) throw usage("No value to save.", `Pipe it (\u2026 | ghosty credentials set ${provider}) or use --from-env VAR.`);
+  return hiddenPrompt(`${provider} key (hidden): `);
+}
+async function credentialsCmd2(sub, provider, v) {
+  switch (sub ?? "ls") {
+    case "ls":
+    case "list": {
+      const r = await api("/api/v2/me/credentials");
+      const rows = r.credentials.map((c) => ({ provider: c.provider, set: c.configured ? `\u2026${c.lastFour ?? ""}` : "\u2014", updated: c.updatedAt?.slice(0, 10) ?? "" }));
+      return out(r.credentials, () => table(rows, ["provider", "set", "updated"]));
+    }
+    case "set": {
+      if (!provider) throw usage("Missing provider.", "Example: ghosty credentials set elevenlabs --from-env ELEVENLABS_API_KEY   (ghosty credentials ls lists them)");
+      const key = (await readSecret(provider, v["from-env"])).trim();
+      if (!key) throw usage("Empty key: nothing saved.");
+      const r = await api(`/api/v2/me/credentials/${encodeURIComponent(provider)}`, { method: "PUT", body: { key } });
+      return out(r, () => `${lavender("\u2713")} ${provider} saved ${dim(`(\u2026${r.lastFour ?? ""}). Agents with a machine pick it up on their next turn.`)}`);
+    }
+    case "rm":
+    case "remove": {
+      if (!provider) throw usage("Missing provider.", "Example: ghosty credentials rm elevenlabs");
+      await confirm(`Remove your ${provider} key? Agents using it stop working until you set another.`, { yes: v.yes, retry: `ghosty credentials rm ${provider}` });
+      const r = await api(`/api/v2/me/credentials/${encodeURIComponent(provider)}`, { method: "DELETE" });
+      return out(r, () => `${lavender("\u2713")} ${provider} removed.`);
+    }
+    default:
+      throw usage(`Unknown credentials subcommand: ${sub}.`, "Try: ghosty credentials ls | set | rm   (ghosty credentials --help)");
+  }
+}
+
+// src/commands/channels.ts
+var enc7 = encodeURIComponent;
+var digits = (s) => s.replace(/\D/g, "");
+function find(nums, ref) {
+  const d = digits(ref);
+  const hit = nums.find((n) => n.id === ref) ?? nums.find((n) => n.label.toLowerCase() === ref.toLowerCase()) ?? (d.length >= 6 ? nums.find((n) => digits(n.label).endsWith(d)) : void 0);
+  if (!hit) throw usage(`No WhatsApp number "${ref}" for this agent.`, nums.length ? `Available: ${nums.map((n) => n.label).join(", ")}` : "Pair a number first in the web (the agent's Channels page).");
+  return hit;
+}
+async function channelsCmd(kind, sub, id, ref, v) {
+  if (kind !== "whatsapp" && kind !== "wa") throw usage(`Unknown channel: ${kind ?? "(none)"}.`, "Try: ghosty channels whatsapp ls <agent-id>");
+  if (!id) throw usage("Missing agent id.", "Example: ghosty channels whatsapp ls <agent-id>");
+  if (sub === "enable" && !v["dry-run"]) requireYesIfHeadless(v.yes, `ghosty channels whatsapp enable ${id} ${ref ?? "<number>"}`);
+  const path = `/api/v2/agents/${enc7(id)}/whatsapp`;
+  const cur = await api(path);
+  if (!sub || sub === "ls" || sub === "list") {
+    const rows = cur.numbers.map((n2) => ({ number: n2.label, answers: n2.mine ? lavender("this agent") : n2.takenByOther ? "another agent" : dim("nobody (silent)"), id: n2.id }));
+    return out(cur, () => rows.length ? table(rows, ["number", "answers", "id"]) : dim(`No WhatsApp Business numbers yet. Pair one at ${cur.salesUrl}`));
+  }
+  if (sub !== "enable" && sub !== "disable") throw usage(`Unknown subcommand: ${sub}.`, "Try: ghosty channels whatsapp ls | enable | disable <agent-id> <number>");
+  if (!ref) throw usage("Missing number.", `Example: ghosty channels whatsapp ${sub} ${id} +52 55 1234 5678`);
+  const n = find(cur.numbers, ref);
+  const on = sub === "enable";
+  if (on === n.mine) return out({ changed: 0, number: n.label, answers: on }, () => dim(`Nothing to do: ${n.label} is already ${on ? "answered by this agent" : "not answered by it"}.`));
+  const plan = on ? `+ ${n.label}: this agent starts answering its customers${n.takenByOther ? " (takes it from the agent answering today)" : ""}` : `- ${n.label}: this agent stops answering (messages are still logged)`;
+  if (v["dry-run"]) return out({ dryRun: true, plan: [plan] }, () => `${plan}
+${dim("Dry run: nothing changed.")}`);
+  if (on) await confirm(`${bold(plan)}
+Real customers will get answers from this agent.`, { yes: v.yes, expect: digits(n.label).slice(-4) || n.id, retry: `ghosty channels whatsapp enable ${id} ${ref}` });
+  const wanted = cur.numbers.filter((x) => x.id === n.id ? on : x.mine).map((x) => x.id);
+  const r = await api(path, { method: "PUT", body: { numbers: wanted } });
+  return out(r, () => `${lavender("\u2713")} ${plan.slice(2)}`);
+}
+
+// src/commands/board.ts
+async function boardCmd(sub, id, v) {
+  if (sub !== "archive") throw usage(`Unknown board subcommand: ${sub ?? "(none)"}.`, "Try: ghosty board archive <agent-id> --integration prueba --dry-run");
+  if (!id) throw usage("Missing agent id.", "Example: ghosty board archive <agent-id> --integration prueba --dry-run");
+  const filter = { ...v.integration ? { integration: v.integration } : {}, ...v.column ? { column: v.column } : {}, ...v.before ? { before: v.before } : {} };
+  if (!Object.keys(filter).length) throw usage("Add at least one filter: --integration, --column or --before.", "A filter-less archive would empty the board.");
+  const retry = `ghosty board archive ${id} ${Object.entries(filter).map(([k, x]) => `--${k} ${JSON.stringify(x)}`).join(" ")}`;
+  if (!v["dry-run"]) requireYesIfHeadless(v.yes, retry);
+  const path = `/api/v2/agents/${encodeURIComponent(id)}/board/archive`;
+  const plan = await api(path, { body: { ...filter, dryRun: true } });
+  const sample = () => table(plan.sample.map((c) => ({ name: c.name ?? "", phone: c.phone, column: c.estado_label ?? "" })), ["name", "phone", "column"]);
+  if (v["dry-run"] || plan.matched === 0) {
+    return out(plan, () => plan.matched ? `${sample()}
+${dim(`Would archive ${plan.matched} card(s) on \xAB${plan.board}\xBB. Dry run: nothing changed.`)}` : dim(`No cards match on \xAB${plan.board}\xBB.`));
+  }
+  await confirm(`${sample()}
+Archive ${plan.matched} card(s) on \xAB${plan.board}\xBB? (reversible: a new message brings a card back)`, { yes: v.yes, retry });
+  const r = await api(path, { body: filter });
+  out(r, () => `${lavender("\u2713")} Archived ${r.archived} card(s) on \xAB${r.board}\xBB.`);
+}
+
+// src/help.ts
+var DOCS = "https://www.ghosty.studio/docs/cli";
+var HELPS = {
+  agents: {
+    summary: "Create, inspect, change, check and delete agents.",
+    usage: [
+      "ghosty agents ls",
+      "ghosty agents create --name NAME [--engine E] [--model M] [--prompt TEXT | --prompt-file FILE] [--env K=V,\u2026]",
+      "ghosty agents get <agent-id> [--fields name,model,prompt]",
+      "ghosty agents set <agent-id> [--name] [--engine] [--model] [--prompt | --prompt-file] [--env K=V,\u2026] [--connect ID,\u2026] [--disconnect ID,\u2026] [--voice E:ID] [--voice-replies auto|off] [--auto-stage on|off]",
+      "ghosty agents doctor <agent-id> [--verbose]",
+      "ghosty agents docs ls|grant|revoke <agent-id> [doc] [--write] [--no-deliver]",
+      "ghosty agents restart <agent-id>",
+      "ghosty agents demo <agent-id> [--slug NAME] [--on | --off] \u2026",
+      "ghosty agents rm <agent-id> [--yes]"
+    ],
+    flags: [
+      ["--fields a,b", "get: return only these fields"],
+      ["--voice E:ID", "set: voice for voice notes: elevenlabs:<voiceId> or kokoro:em_santa|em_alex|ef_dora"],
+      ["--voice-replies M", "set: auto = answer with a voice note when the customer sends or asks for audio; off = always text"],
+      ["--auto-stage on|off", "set: move board cards by itself after each customer turn (one extra model call per turn)"],
+      ["--verbose", "doctor: also list the checks that passed"],
+      ["--write", "docs grant: the agent may replace the document (default: read only)"],
+      ["--no-deliver", "docs grant: it can read it but never send it to whoever writes"],
+      ["--yes", "rm: skip the confirmation (required without a terminal)"]
+    ],
+    examples: [
+      "ghosty agents doctor cmu7pgbyr0001gee3ruk172mm",
+      "ghosty agents set <id> --prompt-file PROMPT.md",
+      "ghosty agents set <id> --voice elevenlabs:21m00Tcm4TlvDq8ikWAM --voice-replies auto --auto-stage on",
+      'ghosty agents docs grant <id> "Cat\xE1logo 2026.pdf"',
+      "ghosty agents docs grant <id> precios.xlsx --write --no-deliver"
+    ],
+    notes: ["doctor exits 1 when it finds a problem, so it can gate a script or CI."],
+    learn: `${DOCS}#agents`
+  },
+  skills: {
+    summary: "Skills of an agent (agentskills.io format: a folder with SKILL.md).",
+    usage: [
+      "ghosty skills ls <agent-id>",
+      "ghosty skills get <agent-id> <slug> [--out DIR]",
+      "ghosty skills add <agent-id> <slug> [--file SKILL.md | --dir FOLDER]",
+      "ghosty skills rm <agent-id> <slug> [--yes]"
+    ],
+    flags: [
+      ["--out DIR", "get: folder to write into (default ./<slug>)"],
+      ["--file FILE", "add: upload one SKILL.md"],
+      ["--dir FOLDER", "add: upload a whole skill folder (SKILL.md + assets); restores a backup"],
+      ["--yes", "rm: skip the confirmation (required without a terminal)"]
+    ],
+    examples: [
+      "ghosty skills get <id> cotizar --out ./backup/cotizar",
+      "ghosty skills add <id> cotizar --dir ./backup/cotizar",
+      "ghosty skills add <id> pdf-doc          # from the community catalog",
+      "ghosty skills rm <id> cotizacion        # keeps a local copy first"
+    ],
+    notes: ["rm saves a copy under ~/.config/ghosty/trash/ and prints the command that restores it."],
+    learn: `${DOCS}#skills`
+  },
+  dbs: {
+    summary: "Databases an agent can use, and what it may write from customer channels.",
+    usage: [
+      "ghosty dbs ls <agent-id>",
+      "ghosty dbs tables <agent-id> <db>",
+      'ghosty dbs query <agent-id> <db> "SQL" [--arg V]\u2026 [--write]',
+      "ghosty dbs import <agent-id> <db> --from easybits:<db-id> [--tables a,b] [--append] [--dry-run] [--yes]",
+      "ghosty dbs grant <agent-id> <db> [--external-write t1,t2]",
+      "ghosty dbs revoke <agent-id> <db>"
+    ],
+    flags: [
+      ["--arg V", "query: value for a ? placeholder (repeatable)"],
+      ["--write", "query: allow INSERT/UPDATE/DELETE/DDL (default: read only)"],
+      ["--external-write t1,t2", 'grant: tables it may write from WhatsApp/Messenger ("" = none)'],
+      ["--from easybits:ID", "import: source database in EasyBits (key from $EASYBITS_API_KEY)"],
+      ["--tables a,b", "import: only these tables (default: all)"],
+      ["--append", "import: add rows instead of replacing them (replace is the idempotent default)"],
+      ["-n, --dry-run", "import: print the plan (+ create, ~ replace N \u2192 M rows), change nothing"]
+    ],
+    examples: [
+      "ghosty dbs ls <id>",
+      "ghosty dbs tables <id> totequim",
+      'ghosty dbs query <id> totequim "SELECT count(*) AS n FROM productos"',
+      "ghosty dbs grant <id> totequim --external-write cotizaciones,folio",
+      "ghosty dbs import <id> totequim --from easybits:6a10c84c\u2026 --dry-run   # reads $EASYBITS_API_KEY"
+    ],
+    notes: ["<db> is the database id or its name. From owner channels the agent reads and writes everything granted."],
+    learn: `${DOCS}#dbs`
+  },
+  turns: {
+    summary: "An agent's recent turns: what answered, what failed and why.",
+    usage: ["ghosty turns ls <agent-id> [--errors | --status STATE] [--since 1h] [--limit N]"],
+    flags: [
+      ["--errors", "only failed turns (same as --status error)"],
+      ["--status S", "running | done | stopped | error"],
+      ["--since T", "30m, 1h, 2d or an ISO date"],
+      ["--limit N", "max rows (default 20, max 500)"]
+    ],
+    examples: ["ghosty turns ls <id> --errors --since 1h", "ghosty turns ls <id> --json --limit 100"],
+    learn: `${DOCS}#turns`
+  },
+  files: {
+    summary: "Files in the agent's machine.",
+    usage: ["ghosty files ls <agent-id> [dir]", "ghosty files get <agent-id> <path> [--out LOCAL]", "ghosty files put <agent-id> <path> [--file LOCAL | < stdin]", "ghosty files rm <agent-id> <path> [--yes]"],
+    examples: ["ghosty files put <id> knowledge/precios.md --file precios.md", "cat notas.md | ghosty files put <id> notas.md"],
+    learn: `${DOCS}#files`
+  },
+  mcp: {
+    summary: "MCP servers of an agent. set REPLACES the whole list.",
+    usage: ["ghosty mcp get <agent-id>", "ghosty mcp set <agent-id> --file servers.json"],
+    examples: ["ghosty mcp get <id> > servers.json && $EDITOR servers.json && ghosty mcp set <id> --file servers.json"],
+    learn: `${DOCS}#mcp`
+  },
+  try: {
+    summary: "Test turns: plain, through the real WhatsApp path (nothing is sent), or a replay of real conversations.",
+    usage: [
+      'ghosty try <agent-id> "message" [--session ID] [--reset]',
+      'ghosty try <agent-id> "message" --waba --session PHONE [--media FILE] [--history FILE] [--reset]',
+      "ghosty try <agent-id> --replay FILE --out DIR [--max 15] [--concurrency 8] [--resume]"
+    ],
+    flags: [
+      ["--waba", "the real WhatsApp Business path: inherited context, price rule, board, voice. Shows what it WOULD send"],
+      ["--session PHONE", "with --waba: a made-up customer phone (10-15 digits); each phone is its own conversation"],
+      ["--media FILE", "with --waba: the customer sends this photo/audio/PDF (one per turn)"],
+      ["--history FILE", "with --waba: what was said before, as [{role: user|agent, text, at?}]; counts on the first turn (--reset)"],
+      ["--reset", "forget that test session (with --waba also its test thread)"],
+      ["--replay FILE", "run the conversations in FILE ({sample: [{id, fakePhone, messages}]}) against the agent"],
+      ["--out DIR", "replay: where replay.json is written, after every step"],
+      ["--max N", "replay: customer turns per conversation (default 15)"],
+      ["--concurrency N", "replay: conversations at the same time (default 8, max 30)"],
+      ["--resume", "replay: continue from DIR/replay.json, skipping finished steps"]
+    ],
+    examples: [
+      'ghosty try <id> "\xBFcu\xE1nto cuesta el gal\xF3n?"',
+      'ghosty try <id> "cot\xEDzame esto" --waba --session 5210000000009 --media lista.jpg',
+      'ghosty try <id> "\xBFy el env\xEDo?" --waba --session 5210000000009 --history hilo.json --reset',
+      "ghosty try <id> --replay muestra.json --out ./replay --max 5"
+    ],
+    notes: [
+      "Replays survive Ghosty deploys: a 503 is retried after its Retry-After; the report lives on your disk.",
+      "--whatsapp is now an alias of --waba."
+    ],
+    learn: `${DOCS}#try`
+  },
+  chat: {
+    summary: "Stream a conversation; with no message it is interactive.",
+    usage: ['ghosty chat <agent-id> ["message"] [--conversation ID]', "ghosty conversations ls <agent-id>"],
+    examples: ['ghosty chat <id> "hola"', "ghosty chat <id>"],
+    learn: `${DOCS}#chat`
+  },
+  schedule: {
+    summary: "Turns that run later, on the agent's own clock.",
+    usage: ['ghosty schedule add <agent-id> "what to do" --in 30m | --at ISO [--every 12h --until ISO] [--conversation ID] [--title T]', "ghosty schedule ls <agent-id>", "ghosty schedule rm <agent-id> <schedule-id>"],
+    examples: ['ghosty schedule add <id> "revisa pedidos pendientes" --every 12h --in 1h'],
+    learn: `${DOCS}#schedule`
+  },
+  me: {
+    summary: "Your account: files and usage.",
+    usage: ["ghosty me files ls|upload|rm [--kind image|video|audio|document|other]", "ghosty usage"],
+    examples: ["ghosty me files ls --kind document"],
+    learn: `${DOCS}#me`
+  }
+};
+HELPS.credentials = {
+  summary: "Provider keys in your account's vault (encrypted; only the last 4 characters come back).",
+  usage: ["ghosty credentials ls", "ghosty credentials set <provider> [--from-env VAR | < stdin]", "ghosty credentials rm <provider> [--yes]"],
+  flags: [
+    ["--from-env VAR", "set: read the key from this environment variable (pass its NAME)"],
+    ["--yes", "rm: skip the confirmation"]
+  ],
+  examples: [
+    "ghosty credentials set elevenlabs            # hidden prompt",
+    "ghosty credentials set mercadopago --from-env MP_ACCESS_TOKEN",
+    "op read op://vault/claude/token | ghosty credentials set anthropic-oauth"
+  ],
+  notes: ["The key is never accepted as an argument: it would stay in your shell history and in `ps`."],
+  learn: `${DOCS}#credentials`
+};
+HELPS.creds = HELPS.credentials;
+HELPS.channels = {
+  summary: "Which WhatsApp Business numbers an agent answers. Pair new numbers in the web.",
+  usage: ["ghosty channels whatsapp ls <agent-id>", "ghosty channels whatsapp enable <agent-id> <number> [--dry-run] [--yes]", "ghosty channels whatsapp disable <agent-id> <number> [--dry-run]"],
+  flags: [
+    ["-n, --dry-run", "print the plan (+ starts answering, - stops) and change nothing"],
+    ["--yes", "enable: skip typing the last 4 digits (required without a terminal)"]
+  ],
+  examples: ["ghosty channels whatsapp ls <id>", "ghosty channels whatsapp enable <id> 5512345678 --dry-run", "ghosty channels whatsapp disable <id> 5512345678"],
+  notes: ["<number> is its id, its label or its last digits. One number, one agent: enabling it takes it from the other agent.", "Disabling keeps logging messages; nobody answers them."],
+  learn: `${DOCS}#channels`
+};
+HELPS.board = {
+  summary: "The agent's sales board. It belongs to the WORKSPACE: you must be a member, a shared agent is not enough.",
+  usage: ["ghosty board archive <agent-id> [--integration ID] [--column NAME] [--before 30d|ISO] [--dry-run] [--yes]"],
+  flags: [
+    ["--integration ID", "cards from this channel/integration (e.g. prueba)"],
+    ["--column NAME", "cards in this column"],
+    ["--before T", "cards with no activity since T (30d, 12h or an ISO date)"],
+    ["-n, --dry-run", "count and show a sample, change nothing"],
+    ["--yes", "skip the confirmation (required without a terminal)"]
+  ],
+  examples: ["ghosty board archive <id> --integration prueba --dry-run", "ghosty board archive <id> --column Perdido --before 30d --yes"],
+  notes: ["Archiving is reversible: when the customer writes again the card comes back. At least one filter is required."],
+  learn: `${DOCS}#board`
+};
+HELPS.conversations = HELPS.chat;
+HELPS.usage = HELPS.me;
+function helpText(cmd) {
+  const h = HELPS[cmd];
+  if (!h) return void 0;
+  const section = (t, lines) => [bold(t), ...lines.map((l) => `  ${l}`), ""];
+  const w = Math.max(0, ...(h.flags ?? []).map(([f]) => f.length)) + 2;
+  return [
+    h.summary,
+    "",
+    ...section("USAGE", h.usage),
+    ...h.flags?.length ? section("FLAGS", h.flags.map(([f, d]) => `${f.padEnd(w)}${d}`)) : [],
+    ...section("EXAMPLES", h.examples.map((e) => `$ ${e}`)),
+    ...h.notes?.length ? section("NOTES", h.notes) : [],
+    bold("LEARN MORE"),
+    `  Add --json for machine output. Exit codes: 0 ok \xB7 1 API error \xB7 2 usage \xB7 3 not signed in.`,
+    `  ${dim(h.learn ?? DOCS)}`
+  ].join("\n");
+}
+
 // src/index.ts
 var HELP = `${bold("Usage:")} ghosty <command> [options]
 
@@ -1028,20 +1774,29 @@ ${bold("Agents")}
   agents get <id>           Show an agent's config            [--fields name,model,prompt]
   agents set <id>           Change identity or engine         [--name] [--engine] [--model] [--prompt | --prompt-file FILE] [--env K=V,\u2026]
                             [--connect google-drive,\u2026] [--disconnect \u2026]  give/remove access to your connectors
-  agents rm <id>            Delete an agent (owner only)
+                            [--voice elevenlabs:ID | kokoro:em_santa] [--voice-replies auto|off] [--auto-stage on|off]
+  agents doctor <id>        Check the config: overlapping skills, tools the prompt names, broken grants, failing turns
+  agents docs ls|grant|revoke <id> [doc]   Documents it reads and may send   [--write] [--no-deliver]
+  agents rm <id>            Delete an agent (owner only; asks you to type its name, or --yes)
   agents restart <id>       Restart an ACP agent (needsRestart) so it loads new skills
   agents demo <id>          Public demo link /p/<slug>: anyone tries it without an account, "Keep it" clones it to theirs
-                            [--slug NAME] [--on | --off] [--hours N] [--turns N] [--per-ip N] [--welcome TEXT] [--chips "a|b|c"] [--starter TEXT] [--sponsor on|off]
+                            [--slug NAME] [--on | --off] [--hours N] [--turns N] [--per-ip N] [--welcome TEXT] [--chips "a|b|c"] [--starter TEXT] [--sponsor on|off] [--rotate]
 
 ${bold("Configure an agent")}
   files ls|get|put|rm <id> [path]    Files in the agent's machine   [--file LOCAL] [--out LOCAL]
-  skills ls|add|rm <id> [slug]       Skills (add from catalog, or --file SKILL.md)
+  skills ls|get|add|rm <id> [slug]   Skills (add from catalog, --file SKILL.md or --dir FOLDER; rm keeps a copy)
+  dbs ls|tables|query|import|grant|revoke <id> [db]   Databases it uses   [--write] [--external-write t1,t2] [--from easybits:ID --dry-run]
   mcp get|set <id>                   MCP servers                    [--file servers.json]
+  channels whatsapp ls|enable|disable <id> [number]   Which WhatsApp Business numbers it answers   [--dry-run]
+  board archive <id>        Archive cards in bulk (reversible)   --integration X | --column X | --before 30d   [--dry-run]
 
 ${bold("Talk to an agent")}
-  try <id> "message"        One test turn, prints the full answer   [--session] [--reset] [--whatsapp]
+  try <id> "message"        One test turn, prints the full answer   [--session] [--reset]
+    --waba --session PHONE  \u2026through the real WhatsApp path, nothing sent   [--media FILE] [--history FILE]
+    --replay FILE --out DIR Replay real conversations; report written locally   [--max 15] [--concurrency 8] [--resume]
   chat <id> ["message"]     Stream a conversation (no message = interactive)   [--conversation ID]
   conversations ls <id>     List conversations
+  turns ls <id>             Recent turns and why they failed   [--errors] [--since 1h] [--limit N]
 
 ${bold("Schedule turns")}  ${dim("(each run lands in a conversation and notifies your phone; an answer of exactly OK stays silent)")}
   schedule ls <id>                   Pending turns and recent runs
@@ -1053,18 +1808,26 @@ ${bold("Partners")}  ${dim("(give an agent to each of YOUR customers \u2014 see:
 
 ${bold("Your account")}
   me files ls|upload|rm     Files in your account        [--kind image|video|audio|document|other]
+  credentials ls|set|rm [provider]   Provider keys in your vault (hidden prompt, stdin or --from-env VAR; never as an argument)
   docs [topic]              Open the docs
 
 ${bold("Global options")}
   --json                    Machine-readable output (stdout is JSON only)
   --token <token>           Use this token (or env GHOSTY_TOKEN). A gat_\u2026 agent token reaches only that agent.
   --profile <name>          Use a separate saved session (or env GHOSTY_PROFILE), e.g. one per account
-  -h, --help                Show help
+  --yes                     Skip confirmations (required for rm without a terminal)
+  -h, --help                Show help (also: ghosty <command> --help, ghosty help <command>)
   -v, --version             Show version
 
 ${bold("Exit codes")}  0 ok \xB7 1 API error \xB7 2 usage error \xB7 3 not signed in
 ${dim("Note: `ghosty` may collide with another binary on your PATH (e.g. the Ghosty TUI). Check with `which -a ghosty`; run `npx @ghostystudio/cli` to be sure.")}
 ${dim("Docs: https://www.ghosty.studio/docs/cli")}`;
+var COMMANDS = ["login", "logout", "whoami", "usage", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "credentials", "docs", "help"];
+var AGENTS_SUBS = ["ls", "create", "get", "set", "doctor", "docs", "rm", "restart", "demo"];
+function unknown(what, input, known, helpCmd) {
+  const s = suggest(input, known);
+  return usage(`Unknown command: ${what}.`, s ? `Did you mean "${s}"? Run: ${helpCmd}` : `Run: ${helpCmd}`);
+}
 function showHelp() {
   if (process.stdout.isTTY && !process.env.NO_COLOR && !globals.json) process.stdout.write(BANNER + "\n\n");
   process.stdout.write(HELP + "\n");
@@ -1093,6 +1856,13 @@ async function main() {
       session: { type: "string" },
       reset: { type: "boolean" },
       whatsapp: { type: "boolean" },
+      waba: { type: "boolean" },
+      media: { type: "string", multiple: true },
+      history: { type: "string" },
+      replay: { type: "string" },
+      max: { type: "string" },
+      concurrency: { type: "string" },
+      resume: { type: "boolean" },
       conversation: { type: "string" },
       kind: { type: "string" },
       at: { type: "string" },
@@ -1116,16 +1886,43 @@ async function main() {
       welcome: { type: "string" },
       chips: { type: "string" },
       starter: { type: "string" },
-      sponsor: { type: "string" }
+      rotate: { type: "boolean" },
+      sponsor: { type: "string" },
+      yes: { type: "boolean", short: "y" },
+      dir: { type: "string" },
+      arg: { type: "string", multiple: true },
+      write: { type: "boolean" },
+      "external-write": { type: "string" },
+      "no-deliver": { type: "boolean" },
+      deliver: { type: "boolean" },
+      errors: { type: "boolean" },
+      status: { type: "string" },
+      since: { type: "string" },
+      limit: { type: "string" },
+      verbose: { type: "boolean" },
+      voice: { type: "string" },
+      "voice-replies": { type: "string" },
+      "auto-stage": { type: "string" },
+      "from-env": { type: "string" },
+      "dry-run": { type: "boolean", short: "n" },
+      integration: { type: "string" },
+      from: { type: "string" },
+      tables: { type: "string" },
+      append: { type: "boolean" },
+      column: { type: "string" },
+      before: { type: "string" }
     }
   });
   globals.json = Boolean(v.json);
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.7.2" }, () => "0.7.2");
+  if (v.version) return out({ version: "0.9.0" }, () => "0.9.0");
   const [cmd, sub, a1, a2] = pos;
   if (cmd === "partner" && (v.help || !sub || sub === "help")) return out({ help: PARTNER_HELP }, () => PARTNER_HELP);
+  const topic = cmd === "help" ? sub : v.help ? cmd : void 0;
+  if (topic === "partner") return out({ help: PARTNER_HELP }, () => PARTNER_HELP);
+  if (topic && helpText(topic)) return out({ help: helpText(topic) }, () => helpText(topic));
   if (!cmd || v.help || cmd === "help") return showHelp();
   switch (cmd) {
     case "login": {
@@ -1151,16 +1948,30 @@ async function main() {
       if (sub === "create" || sub === "new") return agentsCreate(v);
       if (sub === "get") return agentsGet(a1, v.fields);
       if (sub === "set") return agentsSet(a1, v);
-      if (sub === "rm" || sub === "delete") return agentsRm(a1);
+      if (sub === "rm" || sub === "delete") return agentsRm(a1, v);
+      if (sub === "doctor") return agentsDoctor(a1, v);
+      if (sub === "docs" || sub === "documents") return agentDocsCmd(a1, a2, pos[4], v);
       if (sub === "restart") return agentsRestart(a1);
       if (sub === "demo") return agentsDemo(a1, v);
-      throw usage(`Unknown agents subcommand: ${sub}.`, "Try: ghosty agents ls | create | get | set | rm | restart | demo");
+      throw unknown(`agents ${sub}`, sub, AGENTS_SUBS, "ghosty agents --help");
     case "files":
       return filesCmd(sub, a1, a2, v);
     case "skills":
       return skillsCmd(sub, a1, a2, v);
     case "mcp":
       return mcpCmd(sub, a1, v);
+    case "dbs":
+    case "db":
+      return dbsCmd(sub, a1, a2, pos.slice(4).filter((x) => x !== void 0), v);
+    case "turns":
+      return turnsCmd(sub, a1, v);
+    case "board":
+      return boardCmd(sub, a1, v);
+    case "channels":
+      return channelsCmd(sub, a1, a2, pos.slice(4).join(" ") || void 0, v);
+    case "credentials":
+    case "creds":
+      return credentialsCmd2(sub, a1, v);
     case "try":
       return tryTurn(sub, a1, v);
     case "chat":
@@ -1185,7 +1996,7 @@ async function main() {
       return openUrl(url);
     }
     default:
-      throw usage(`Unknown command: ${cmd}.`, "Run: ghosty --help");
+      throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
 main().then(