@ghostystudio/cli 0.76.0 → 0.78.0

package/README.md

@@ -124,6 +124,9 @@ ghosty browser logout                    # revoke your terminal agents' browser
 ghosty audit ls [--workspace SLUG] [--agent ID] [--actor EMAIL] [--action A] [--since 24h] [--limit N]   # who changed what
 ghosty factory rooms repos                                  # the repos your GitHub App sees, and where they're connected
 ghosty factory rooms connect owner/name --room R --create   # set up the factory for a repo from the terminal
+ghosty factory sprints ls|show|approve ID                  # the sprints @plan proposes for a bigger goal; approve signs every ticket at once
+ghosty factory env ls|push [OWNER/REPO] [.env.preview]     # the preview's env vars: what's missing, push them from your .env (--gen for random keys)
+ghosty factory runs recheck <run>                          # escalated because blocked: @check reviews the same PR again, no @build loop
 ghosty factory run "…" --repo owner/name [--wait]   # hand a request to the Software Factory from the terminal
 ghosty factory runs watch|approve|changes|merge|card <run>   # wait for it and decide it without opening Teams
 ghosty factory runs ls|show|why|stats|rename [--workspace SLUG] [--room R] [--status S] [show --timing] [why --refresh]   # Software Factory runs

package/dist/index.js

@@ -1175,7 +1175,7 @@ async function postLong(path, body, timeoutMs = 9e5) {
     const req = httpsRequest(`${base}${path}`, {
       method: "POST",
       timeout: timeoutMs,
-      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.76.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.78.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
     }, (res) => {
       let buf = "";
       res.on("data", (c) => buf += c);
@@ -1217,7 +1217,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.76.0"}`,
+      "user-agent": `ghosty-cli/${"0.78.0"}`,
       "accept-language": lang(),
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
@@ -1264,7 +1264,7 @@ var mteams_exports = {};
 __export(mteams_exports, {
   mteamsCmd: () => mteamsCmd
 });
-import { writeFile as writeFile7 } from "node:fs/promises";
+import { writeFile as writeFile8 } from "node:fs/promises";
 function list(bots) {
   return bots.length ? table(
     bots.map((b) => ({
@@ -1306,7 +1306,7 @@ ${dim(`${t("Next", "Sigue")}: ghosty channels mteams zip ${id} ${b?.id ?? "<bot-
       const res = await request(`${path}/${enc9(botId)}/zip`);
       const bytes = Buffer.from(await res.arrayBuffer());
       const file = v.out ?? "ghosty-teams.zip";
-      await writeFile7(file, bytes);
+      await writeFile8(file, bytes);
       return out({ saved: file, bytes: bytes.length }, () => `${lavender("\u2713")} ${t(`Saved ${file}: upload it in Teams admin \u2192 Manage apps.`, `Se guard\xF3 ${file}: s\xFAbelo en Teams admin \u2192 Administrar apps.`)}`);
     }
     case "on":
@@ -9229,6 +9229,13 @@ async function anonVisitorUsage(id, v) {
 ${table(rows, ["visitor", "first", "msgs", "usd", "page", "pdf", "account"])}
 ${dim(foot)}` : dim(t(`No visitors in ${r.days} day(s).`, `Sin visitantes en ${r.days} d\xEDa(s).`)));
 }
+function parseCapFlag(raw) {
+  if (raw === "none") return { ok: true, cap: null };
+  return /^[1-9]\d*$/.test(raw) ? { ok: true, cap: Number(raw) } : { ok: false };
+}
+function capColumn(tokenCap) {
+  return tokenCap == null ? "" : String(tokenCap);
+}
 function fmtUntil(iso) {
   if (!iso) return "";
   const d = new Date(new Date(iso).getTime() - 6 * 36e5);
@@ -9237,22 +9244,25 @@ function fmtUntil(iso) {
 async function spacesMembers(action, slug, email, v, context) {
   if (context && slug?.includes("@") && !email) [slug, email] = [context, slug];
   if (action && !["ls", "list", "add", "rm", "remove"].includes(action) && !slug) [action, slug] = ["ls", action];
-  const ex = "ghosty spaces members ls <workspace> \xB7 add <workspace> <email>[,email\u2026] [--role member|admin|collaborator --room <room>] [--until 2026-10-28|14d] \xB7 rm <workspace> <email>";
+  const ex = "ghosty spaces members ls <workspace> \xB7 add <workspace> <email>[,email\u2026] [--role member|admin|collaborator --room <room> [--cap N|none]] [--until 2026-10-28|14d] \xB7 rm <workspace> <email>";
   slug = needSpace(slug ?? context, ex);
   switch (action ?? "ls") {
     case "ls":
     case "list": {
       const r = await api(wsPath(slug, "/members"));
-      const rows = r.members.map((m) => ({ email: m.email, role: m.role.toLowerCase(), status: m.status, until: fmtUntil(m.until) }));
-      return out(r, () => `${table(rows, ["email", "role", "status", "until"])}${r.error ? `
+      const rows = r.members.map((m) => ({ email: m.email, role: m.role.toLowerCase(), status: m.status, until: fmtUntil(m.until), cap: capColumn(m.tokenCap) }));
+      return out(r, () => `${table(rows, ["email", "role", "status", "until", "cap"])}${r.error ? `
 ${lavender(`\u26A0\uFE0F ${serverText(r.error)}`)}` : ""}`);
     }
     case "add": {
       if (!email) throw usage(t("Missing email.", "Falta el correo."), ex);
       if (v.role === "collaborator" && !v.room) throw usage(t("A collaborator needs --room (the Teams room they enter).", "Un colaborador necesita --room (el room de Teams al que entra)."), ex);
       if (v.room && !/^[A-Za-z0-9_-]{1,64}$/.test(v.room)) throw usage(t("The room takes letters, numbers, _ or - (max 64).", "El room lleva s\xF3lo letras, n\xFAmeros, _ o - (m\xE1x. 64)."), ex);
+      if (v.cap !== void 0 && v.role !== "collaborator") throw usage(t("--cap goes only with a collaborator (--role collaborator).", "--cap s\xF3lo va con un colaborador (--role collaborator)."), ex);
+      const cap = v.cap === void 0 ? void 0 : parseCapFlag(v.cap);
+      if (cap && !cap.ok) throw usage(t("--cap takes a whole number of tokens above 0, or none.", "--cap lleva un entero de tokens mayor que 0, o none."), ex);
       const emails = email.split(",").map((e) => e.trim()).filter(Boolean);
-      const r = await api(wsPath(slug, "/members"), { method: "POST", body: { emails, role: v.role ?? "member", ...v.until ? { until: v.until } : {}, ...v.room ? { room: v.room } : {} } });
+      const r = await api(wsPath(slug, "/members"), { method: "POST", body: { emails, role: v.role ?? "member", ...v.until ? { until: v.until } : {}, ...v.room ? { room: v.room } : {}, ...cap?.ok ? { cap: cap.cap } : {} } });
       const lines = [
         ...r.invited.map((e) => `${lavender("\u2713")} ${e} ${t(`added to ${r.workspace}`, `agregada a ${r.workspace}`)}${r.until ? dim(t(` until ${fmtUntil(r.until)} (CDMX), then removed`, ` hasta ${fmtUntil(r.until)} (CDMX), luego se retira sola`)) : ""}`),
         ...r.extended.map((e) => `${lavender("\u2713")} ${e} ${t("was already in; expires", "ya estaba; vence")} ${fmtUntil(r.until)} (CDMX)`),
@@ -11195,7 +11205,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.76.0"}`
+        "user-agent": `ghosty-cli/${"0.78.0"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -11472,9 +11482,41 @@ async function partnerCmd(sub, a1, a2, v, a3) {
   }
 }
 
+// src/commands/image.ts
+import { writeFile as writeFile6 } from "node:fs/promises";
+init_util();
+init_i18n();
+async function imageCmd(sub, prompt, v) {
+  if (sub !== "generate" && sub !== "gen") {
+    throw usage(t(`Unknown image subcommand: ${sub ?? "(none)"}.`, `Subcomando de image desconocido: ${sub ?? "(ninguno)"}.`), t("Try", "Prueba") + ': ghosty image generate "a cat astronaut" [--ref URL] [--aspect 16:9]');
+  }
+  if (!prompt?.trim()) throw usage(t("Missing the prompt.", "Falta el prompt."), t("Example", "Ejemplo") + ': ghosty image generate "my mascot in a Halloween scene" --ref https://example.com/mascot.png --aspect 16:9');
+  const body = {
+    prompt,
+    ...v.ref?.length ? { referenceUrls: v.ref } : {},
+    ...v.aspect ? { aspectRatio: v.aspect } : {},
+    ...v.tenant ? { tenant: { externalId: v.tenant } } : {},
+    ...v.agent ? { agent: v.agent } : {}
+  };
+  const r = await json("/api/v2/partner/images", v, { method: "POST", body });
+  if (v.out) {
+    const res = await fetch(r.url);
+    if (!res.ok) throw new Error(t(`Could not download the image (${res.status}).`, `No se pudo bajar la imagen (${res.status}).`));
+    await writeFile6(v.out, Buffer.from(await res.arrayBuffer()));
+  }
+  return out(
+    r,
+    () => [
+      r.url,
+      dim(`${r.mode === "edit" ? t("edited from references", "editada desde referencias") : t("generated", "generada")}${r.width && r.height ? ` \xB7 ${r.width}\xD7${r.height}` : ""} \xB7 ${t("charged", "cobrado")} USD ${r.priceUsd.toFixed(2)}`),
+      ...v.out ? [`${lavender("\u2713")} ${t(`saved to ${v.out}`, `guardada en ${v.out}`)}`] : []
+    ].join("\n")
+  );
+}
+
 // src/commands/data.ts
 init_api();
-import { readdir as readdir2, readFile as readFile6, writeFile as writeFile6 } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile6, writeFile as writeFile7 } from "node:fs/promises";
 import { basename as basename3, join as join5 } from "node:path";
 
 // src/rows.ts
@@ -11643,7 +11685,7 @@ async function dbsExport(id, db, v) {
   const suggested = /filename="([^"]+)"/.exec(res.headers.get("content-disposition") ?? "")?.[1] ?? (format === "csv" ? `${db}-${v.table}.csv` : `${db}.sqlite`);
   const file = v.out ?? suggested;
   const bytes = Buffer.from(await res.arrayBuffer());
-  await writeFile6(file, bytes);
+  await writeFile7(file, bytes);
   const countsHeader = res.headers.get("x-gs-row-counts");
   const counts = countsHeader ? JSON.parse(Buffer.from(countsHeader, "base64").toString("utf8")) : {};
   const rows = Object.entries(counts).map(([tb, n]) => ({ table: tb, rows: n }));
@@ -11709,6 +11751,19 @@ ${dim(`${t(`${rows.length} row(s)`, `${rows.length} fila(s)`)} \xB7 ${Math.round
       const rows = r.writes.map((w) => ({ when: w.created_at, agent: w.agent_id.slice(0, 10), channel: w.canal ?? "", what: `${w.op} ${w.table_name}${w.row_id != null ? ` #${w.row_id}` : ""}`, customer: w.phone10 ?? "", why: w.reason ?? "" }));
       return out(r, () => rows.length ? table(rows, ["when", "agent", "channel", "what", "customer", "why"]) : dim(t("No agent writes recorded yet in this database.", "Todav\xEDa no hay escrituras de agentes registradas en esta base.")));
     }
+    case "checkpoints": {
+      db = need2(db, t("database (id or name)", "la base (id o nombre)"), "ghosty dbs checkpoints <agent-id> <db>");
+      const r = await api(agentPath2(id, `/dbs/${enc8(db)}/checkpoints`));
+      const rows = r.checkpoints.map((c) => ({ id: c.id, when: c.at, rows: Object.values(c.counts).reduce((a, b) => a + b, 0), why: c.reason }));
+      return out(r, () => rows.length ? table(rows, ["id", "when", "rows", "why"]) : dim(t("No checkpoints yet: one is taken before the first write of each agent turn.", "Todav\xEDa no hay checkpoints: se toma uno antes de la primera escritura de cada turno de un agente.")));
+    }
+    case "restore": {
+      db = need2(db, t("database (id or name)", "la base (id o nombre)"), "ghosty dbs restore <agent-id> <db> <checkpoint-id> [--yes]");
+      const ckpt = need2(rest[0], t("checkpoint id (from dbs checkpoints)", "el id del checkpoint (de dbs checkpoints)"), `ghosty dbs restore ${id} ${db} <checkpoint-id>`);
+      await confirm(t(`Return every table of ${db} to checkpoint ${ckpt}? A new checkpoint is taken first, so you can undo it.`, `\xBFRegresar todas las tablas de ${db} al checkpoint ${ckpt}? Antes se toma otro, as\xED que se puede deshacer.`), { yes: v.yes, retry: `ghosty dbs restore ${id} ${db} ${ckpt}` });
+      const r = await api(agentPath2(id, `/dbs/${enc8(db)}/checkpoints`), { method: "POST", body: { checkpointId: ckpt } });
+      return out(r, () => `${lavender("\u2713")} ${t(`${r.db} returned to ${r.restoredTo.at}.`, `${r.db} regresada a ${r.restoredTo.at}.`)} ${dim(r.undo ? t(`Undo: ghosty dbs restore ${id} ${db} ${r.undo.id}`, `Para deshacer: ghosty dbs restore ${id} ${db} ${r.undo.id}`) : r.warning ?? "")}`);
+    }
     case "grant": {
       db = need2(db, t("database (id or name)", "la base (id o nombre)"), "ghosty dbs grant <agent-id> <db> [--external-write t1,t2] [--external-rows t:col+col]");
       let rowScope;
@@ -11871,6 +11926,7 @@ function skipReason(r) {
     reaction: ["only a reaction", "s\xF3lo una reacci\xF3n"],
     channel_off: ["WhatsApp channel off for this agent", "canal de WhatsApp apagado en este agente"],
     no_quota: ["out of balance", "sin saldo"],
+    own_number: ["sent by another of our agent numbers (bot loop guard)", "lo mand\xF3 otro n\xFAmero nuestro con agente (guarda de bucle)"],
     partner_token: ["partner did not issue a turn token", "el partner no dio token de turno"],
     partner_busy: ["partner at its concurrent-turn limit", "el partner lleg\xF3 a su tope de turnos a la vez"]
   };
@@ -13228,6 +13284,24 @@ var HELPS_ES = {
     summary: "Ghosty para Chrome: cerrar la sesi\xF3n del navegador.",
     notes: ["Revoca todos los tokens de Ghosty para Chrome que tengan tus agentes de terminal (Claude Code, CLI, @ghostystudio/browser-mcp) y desconecta la extensi\xF3n. Para volver, copia un comando nuevo del panel de la extensi\xF3n."]
   },
+  image: {
+    summary: "Una imagen con IA (Gemini \xABNano Banana Pro\xBB) para los negocios de tu espacio de partner, cobrada del saldo del espacio.",
+    replace: [
+      ["our mascot dressed as a pumpkin in a Halloween scene, flat illustration, no text", "nuestra mascota disfrazada de calabaza en una escena de Halloween, ilustraci\xF3n plana, sin texto"],
+      ["a cozy spa with candles, warm light", "un spa acogedor con velas, luz c\xE1lida"]
+    ],
+    flags: [
+      ["--ref URL", "una imagen de referencia (https; JPEG, PNG, WebP, GIF o SVG); se repite, hasta 4. La imagen CONSERVA su personaje u objeto (mascota, logo, producto)"],
+      ["--aspect RATIO", "1:1, 2:3, 3:2, 3:4, 4:3, 4:5, 5:4, 9:16, 16:9 o 21:9"],
+      ["--tenant ID", "el negocio (externalId) para el que es: va al desglose de consumo y a su tope diario opcional"],
+      ["--agent SLUG", "a qu\xE9 agente del partner se carga en el desglose (default: el de siempre)"],
+      ["--out FILE", "adem\xE1s baja el PNG aqu\xED"]
+    ],
+    notes: [
+      `Cada imagen se cobra aparte: USD 0.25 del saldo del espacio de partner (las fallidas no se cobran). Sin saldo: 402. gs no pone topes propios; un negocio puede tener el suyo: tenants set <id> --config '{"imageDailyCap":20}'.`,
+      "Auth: tu login (due\xF1a del espacio; --workspace si tienes varios) o la credencial del servidor del partner en el env (GHOSTY_PARTNER_KEY + GHOSTY_PARTNER_KEY_SECRET), que entonces exige --tenant."
+    ]
+  },
   me: {
     summary: "Tu cuenta: archivos, memorias, documentos editables y uso.",
     replace: [
@@ -13484,6 +13558,7 @@ var HELPS_ES = {
       ["--currency C", "pin: usd (default) o mxn \u2014 la moneda del cobro si hay que pagar"],
       ["--add-pack", "pin: ya usas tus lugares \u2014 suma 3 m\xE1s (mismo periodo y moneda de tu suscripci\xF3n) y fija \xE9ste"],
       ["--cancel / --resume", "pins: cancela al final del periodo (los sitios vuelven a Gratis con aviso), o lo deshace"],
+      ["--days N", "search: la ventana de Search Console en d\xEDas (default 28; Google reporta con 2\u20133 d\xEDas de retraso)"],
       ["--title T", "publish: el nombre del sitio (default: el <title> del HTML o el nombre de la carpeta)"],
       ["--slug S", "publish: el slug de un sitio NUEVO (a-z, 0-9 y guiones, 3\u201360, no reservado)"],
       ["--site X", "publish: actualiza ese sitio de la casa (slug, id o URL) en vez de crear uno"]
@@ -13509,6 +13584,7 @@ var HELPS_ES = {
       ["--user EMAIL", "ls (staff): los espacios de esa persona"],
       ["--role R", "members add: member (default: tableros + editor de los agentes del espacio, sin llaves, cobro ni traspasos) | admin (adem\xE1s invita y quita gente) | collaborator (invitado a UN room: sin asiento ni agente personal)"],
       ["--room ROOM", "members add --role collaborator: el room de Teams al que entra (obligatorio con collaborator)"],
+      ["--cap N|none", "members add --role collaborator: tokens facturables m\xE1ximos que puede gastar por periodo (entero > 0); none lo quita. Sin tope s\xF3lo aplica el saldo del espacio"],
       ["--until D", "members add: asiento temporal que se retira solo en esa fecha (fin del d\xEDa, CDMX) o tras 14d / 12h \u2014 cuentas de revisor (Meta, Google, Apple). A quien ya est\xE1, le pone o mueve la fecha"],
       ["--combo C", "set (staff): teams | sales | both | none (ni Teams ni Ventas) \u2014 sin Ventas sus tableros existen pero nadie los ve; create: distinto de teams, s\xF3lo staff"],
       ["--model-cap X", "set (staff): el modelo m\xE1s caro que puede elegir el espacio \u2014 0.25 econ\xF3micos, 1 est\xE1ndar (Sonnet), 4 todos; none = el de su plan"],
@@ -13578,6 +13654,8 @@ var HELPS_ES = {
       ["--note T", "changes: qu\xE9 cambiar del plan (o por qu\xE9 replanear tras un escalado). approve tras un escalado: qu\xE9 debe arreglar @build"],
       ["--check-scope T", "approve/changes: lo \xFAnico que @check revisa en la siguiente vuelta (lo propone runs advise); lo nuevo va como nota, no como hallazgo"],
       ["--skip-preview", "merge: mergea sin la preview que ped\xEDa el plan (queda en bit\xE1cora)"],
+      ["--gen KEY,KEY", "env push: genera ah\xED mismo llaves al azar (32 bytes hex) con esos nombres; nunca se imprimen"],
+      ["--replace", "env push: reemplaza el .env entero de la preview (por defecto agrega y deja las dem\xE1s)"],
       ["--create", "rooms connect: crea el room si no existe"],
       ["--private", "rooms connect --create: el room nuevo es privado (s\xF3lo t\xFA, y a quien agregues)"],
       ["--room R", "rooms connect/disconnect: el room (slug o nombre). run: ese room en vez de buscarlo por --repo. ls: s\xF3lo los pedidos de ese room (#slug o nombre)"],
@@ -13591,6 +13669,8 @@ var HELPS_ES = {
       ["--yes", "rename, approve, changes, merge: se salta la confirmaci\xF3n (obligatorio sin terminal)"]
     ],
     notes: [
+      "env: las variables de entorno de la preview viven en tu compu, as\xED que las sube tu agente de terminal. ls lista las guardadas y las que faltan (de .env.example y de los pedidos escalados porque la preview no arranca); push las agrega (s\xF3lo el due\xF1o del espacio). Usa valores desechables, nunca los de producci\xF3n: la preview corre el c\xF3digo del repo. Los valores nunca regresan. Luego runs recheck <pedido>: @check revisa otra vez el mismo PR sin otra vuelta de @build. Queda en bit\xE1cora (factory.env_set y factory.run_recheck).",
+      "sprints: si el objetivo no cabe en un pedido, @plan propone un sprint (3\u20138 tickets en orden, con dependencias) en borrador. approve firma todos los tickets incluidos de una vez; arrancan uno a la vez conforme sus dependencias tienen merge. S\xF3lo el due\xF1o o quien lo pidi\xF3 lo aprueba. Queda en bit\xE1cora (factory.sprint_approve).",
       "rooms repos lista los repos que ve tu GitHub App (los m\xE1s recientes primero) y en qu\xE9 rooms ya est\xE1 cada uno.",
       "rooms connect revisa que TU instalaci\xF3n de la GitHub App vea el repo (si no, te da la liga para darle acceso) y dice qu\xE9 tan listo est\xE1 para agentes (niveles 1\u20133 y lo que falta). Cualquier miembro puede conectar; desconectar, quien lo conect\xF3 o el due\xF1o. Queda en bit\xE1cora (factory.room_connect / factory.room_disconnect).",
       "run publica \xAB@plan <tu texto>\xBB en el room A TU NOMBRE, como si lo escribieras en Teams: el mismo plan, firmas y tarjeta. Escr\xEDbelo como ticket: el objetivo, por qu\xE9 y c\xF3mo se sabe que qued\xF3. Cualquier miembro puede pedir, firmar, pedir cambios y mergear; todo queda en bit\xE1cora (factory.run, factory.run_approve\u2026).",
@@ -13821,6 +13901,8 @@ var HELPS = {
       "ghosty dbs tables <agent-id> <db>",
       'ghosty dbs query <agent-id> <db> "SQL" [--arg V]\u2026 [--write]',
       "ghosty dbs origin <agent-id> <db> [--table T] [--since 2026-10-10] [--limit N]",
+      "ghosty dbs checkpoints <agent-id> <db>",
+      "ghosty dbs restore <agent-id> <db> <checkpoint-id> [--yes]",
       "ghosty dbs export <agent-id> <db> [--table T] [--out FILE]",
       "ghosty dbs import <agent-id> <db> --from easybits:<db-id> [--tables a,b] [--append] [--rehost-images t.col,\u2026] [--dry-run] [--yes]",
       "ghosty dbs rehost <agent-id> <db> --table T --column C [--dry-run]",
@@ -14005,6 +14087,26 @@ var HELPS = {
     notes: ["Revokes every Ghosty for Chrome token your terminal agents hold (Claude Code, CLI, @ghostystudio/browser-mcp) and disconnects the extension. Copy a new command from the extension panel to reconnect."],
     learn: `${REF}#navegador`
   },
+  image: {
+    summary: "An AI image (Gemini \xABNano Banana Pro\xBB) for your partner businesses, charged to the space's balance.",
+    usage: ['ghosty image generate "prompt" [--ref URL]... [--aspect 16:9] [--tenant ID] [--agent SLUG] [--out FILE]'],
+    flags: [
+      ["--ref URL", "a reference image (https; JPEG, PNG, WebP, GIF or SVG); repeat it, up to 4. The image KEEPS its character or object (mascot, logo, product)"],
+      ["--aspect RATIO", "1:1, 2:3, 3:2, 3:4, 4:3, 4:5, 5:4, 9:16, 16:9 or 21:9"],
+      ["--tenant ID", "the business (externalId) it is for: it goes to the usage breakdown and to its optional daily cap"],
+      ["--agent SLUG", "which partner agent it is charged to in the breakdown (default: the main one)"],
+      ["--out FILE", "also download the PNG here"]
+    ],
+    examples: [
+      'ghosty image generate "our mascot dressed as a pumpkin in a Halloween scene, flat illustration, no text" --ref https://example.com/mascot.svg --aspect 16:9 --tenant org_123',
+      'ghosty image generate "a cozy spa with candles, warm light" --aspect 1:1 --out spa.png'
+    ],
+    notes: [
+      `Each image is charged apart: USD 0.25 from the partner space's balance (failed ones are not charged). Without balance: 402. gs sets no cap of its own; a business can have one: tenants set <id> --config '{"imageDailyCap":20}'.`,
+      "Auth: your login (space owner; --workspace if you have several) or the partner server credential in the env (GHOSTY_PARTNER_KEY + GHOSTY_PARTNER_KEY_SECRET), which then requires --tenant."
+    ],
+    learn: `${DOCS}/partners#imagenes-con-ia`
+  },
   me: {
     summary: "Your account: files, memories, editable docs and usage.",
     usage: [
@@ -14368,11 +14470,12 @@ HELPS.novedades = {
 };
 HELPS.spaces = {
   summary: "Workspaces: create one of your own (trial), list yours (or, staff, anyone's), and Ghosty staff operations \u2014 join/leave a client's workspace, change its combo, move \xABpaid until\xBB, rename its slug, change its owner \u2014 and, owner or staff, archive or restore it. Each change is logged in the workspace's audit.",
-  usage: ["ghosty spaces ls [--user EMAIL]", "ghosty spaces create <slug> [--combo teams|sales|both|none] [--dry-run]", "ghosty spaces join|leave <workspace>", "ghosty spaces set <workspace> --combo teams|sales|both|none | --model-cap 0.25|1|4|none | --house-claude on|off [--dry-run]", "ghosty spaces renew <workspace> --until YYYY-MM-DD [--note TEXT] [--dry-run] [--yes]", "ghosty spaces rename <old> <new> [--dry-run] [--yes]", "ghosty spaces archive|restore <workspace> [--dry-run] [--yes]", "ghosty spaces transfer <workspace> --to EMAIL [--keep-as admin|member|none] [--copy-keys] [--dry-run] [--yes]", "ghosty spaces log <workspace> [--since 30d] [--action workspace] [--limit N]", "ghosty spaces members ls|add|rm <workspace> [email,\u2026] [--role member|admin|collaborator] [--room ROOM] [--until 2026-10-28|14d] [--yes]"],
+  usage: ["ghosty spaces ls [--user EMAIL]", "ghosty spaces create <slug> [--combo teams|sales|both|none] [--dry-run]", "ghosty spaces join|leave <workspace>", "ghosty spaces set <workspace> --combo teams|sales|both|none | --model-cap 0.25|1|4|none | --house-claude on|off [--dry-run]", "ghosty spaces renew <workspace> --until YYYY-MM-DD [--note TEXT] [--dry-run] [--yes]", "ghosty spaces rename <old> <new> [--dry-run] [--yes]", "ghosty spaces archive|restore <workspace> [--dry-run] [--yes]", "ghosty spaces transfer <workspace> --to EMAIL [--keep-as admin|member|none] [--copy-keys] [--dry-run] [--yes]", "ghosty spaces log <workspace> [--since 30d] [--action workspace] [--limit N]", "ghosty spaces members ls|add|rm <workspace> [email,\u2026] [--role member|admin|collaborator] [--room ROOM] [--cap N|none] [--until 2026-10-28|14d] [--yes]"],
   flags: [
     ["--user EMAIL", "ls (staff): that person's workspaces"],
     ["--role R", "members add: member (default: boards + editor of the workspace's agents, no keys, billing or transfers) | admin (also invites and removes people) | collaborator (invited to ONE Teams room: no seat, no personal agent)"],
     ["--room ROOM", "members add --role collaborator: the Teams room they enter (required with collaborator)"],
+    ["--cap N|none", "members add --role collaborator: max billable tokens they can spend per period (whole number > 0); none removes it. Without a cap only the space balance applies"],
     ["--until D", "members add: temporary seat, removed automatically on that date (end of day, CDMX) or after 14d / 12h \u2014 reviewer accounts (Meta, Google, Apple). On someone already in, it sets or moves the date"],
     ["--combo C", "set (staff): teams | sales | both | none (neither Teams nor Sales) \u2014 without Sales its boards exist but nobody sees them; create: other than teams, staff only"],
     ["--model-cap X", "set (staff): the most expensive model the workspace can pick \u2014 0.25 economy, 1 standard (Sonnet), 4 everything; none = its plan's"],
@@ -14409,6 +14512,7 @@ HELPS.sites = {
     "ghosty sites pin <slug|id> [--interval year|month] [--currency usd|mxn] [--add-pack]",
     "ghosty sites unpin <slug|id>",
     "ghosty sites pins [--cancel | --resume]",
+    "ghosty sites search <slug|id> [--days 28]",
     "ghosty sites publish <file.html|folder> [--title T] [--slug S] [--site <slug|id>]",
     "ghosty sites slug <slug|id> <new-slug>"
   ],
@@ -14418,6 +14522,7 @@ HELPS.sites = {
     ["--currency C", "pin: usd (default) or mxn \u2014 the currency charged if you need to pay"],
     ["--add-pack", "pin: you already use your slots \u2014 add 3 more (same period and currency as your subscription) and pin this one"],
     ["--cancel / --resume", "pins: cancel at period end (sites go back to Free with notice), or undo it"],
+    ["--days N", "search: Search Console window in days (default 28; Google reports 2\u20133 days late)"],
     ["--title T", "publish: the site's name (default: the HTML <title> or the folder name)"],
     ["--slug S", "publish: the slug for a NEW site (a-z, 0-9 and hyphens, 3\u201360, not reserved)"],
     ["--site X", "publish: update that house site (slug, id or URL) instead of creating one"]
@@ -14497,6 +14602,12 @@ HELPS.factory = {
     "ghosty factory rooms repos [--workspace SLUG]",
     "ghosty factory rooms connect OWNER/REPO --room R [--create] [--private] [--workspace SLUG]",
     "ghosty factory rooms disconnect OWNER/REPO --room R [--yes]",
+    "ghosty factory sprints ls [--workspace SLUG]",
+    "ghosty factory sprints show ID [--workspace SLUG]",
+    "ghosty factory sprints approve ID [--yes] [--workspace SLUG]",
+    "ghosty factory env ls [OWNER/REPO] [--workspace SLUG]",
+    "ghosty factory env push [OWNER/REPO] [FILE] [--gen KEY,KEY] [--replace] [--yes] [--workspace SLUG]",
+    "ghosty factory runs recheck <run> [--yes] [--workspace SLUG]",
     `ghosty factory run "What, why and how we know it's done" --repo OWNER/REPO [--room R] [--wait] [--timeout 1800] [--workspace SLUG]`,
     "ghosty factory runs watch <run> | --thread <id> [--timeout 1800] [--workspace SLUG]",
     'ghosty factory runs approve <run> --plan-version N [--note "\u2026"] [--check-scope "\u2026"] [--yes]',
@@ -14521,6 +14632,8 @@ HELPS.factory = {
     ["--note T", "changes: what to change in the plan (or why to replan after an escalation). approve after an escalation: what @build must fix"],
     ["--check-scope T", "approve/changes: the only thing @check reviews on the next loop (runs advise proposes it); anything new goes as a note, not a finding"],
     ["--skip-preview", "merge: merge without the preview the plan asked for (logged)"],
+    ["--gen KEY,KEY", "env push: generate random keys (32 bytes hex) for those names right there; never printed"],
+    ["--replace", "env push: replace the whole preview .env (default: add, keeping the rest)"],
     ["--create", "rooms connect: create the room if it doesn't exist"],
     ["--private", "rooms connect --create: make the new room private (only you, then whoever you add)"],
     ["--room R", "rooms connect/disconnect: the room (slug or name). run: that room instead of finding it by --repo. ls: only that room's runs (#slug or name)"],
@@ -14534,7 +14647,7 @@ HELPS.factory = {
     ["--yes", "rename, approve, changes, merge: skip the confirmation (required without a terminal)"]
   ],
   examples: ["ghosty factory rooms connect blissito/ghosty-studio --room studio --create --workspace business", 'ghosty factory run "Add a COLLABORATOR role: invited by room, lands in the room, no personal agent. Done when an invite to #factory logs in straight there" --repo blissito/ghosty-studio --wait --workspace business', "ghosty factory runs approve 31 --plan-version 2 --workspace business", "ghosty factory runs watch 31 --workspace business", "ghosty factory runs merge 31 --workspace business", "ghosty factory runs ls --workspace business --room mailmask", "ghosty factory runs show 15 --workspace business", "ghosty factory runs show 13 --timing --workspace mercadito-verde", "ghosty factory runs why 13 --workspace mercadito-verde", "ghosty factory runs advise 115 --workspace business", "ghosty factory runs stats --since 7d --workspace mercadito-verde", 'ghosty factory runs rename 15 "Docs del CLI al d\xEDa" --workspace business --dry-run'],
-  notes: ["rooms repos lists the repos your GitHub App sees (most recent first) and which rooms each one is already in.", "rooms connect checks that YOUR GitHub App installation sees the repo (if not, it gives you the link to grant access) and tells you how ready the repo is for agents (levels 1\u20133 and what's missing). Any member can connect; only whoever connected it, or the owner, can disconnect. Logged as factory.room_connect / factory.room_disconnect.", "run posts \xAB@plan <your text>\xBB in the room under YOUR name, like typing it in Teams: the same plan, approvals and card. Write it like a ticket: the goal, why, and how you'll know it's done. Any member can run, approve, ask for changes and merge; each one is logged (factory.run, factory.run_approve\u2026).", "card brings the run's live card down to the bottom of its thread; the old one stays as a still footprint linking to the live one. The roles can do it too (factory_card).", "Reading needs membership in the workspace; rename needs owner, admin or Ghosty staff, and is logged (factory.run_rename). The room's card picks the new title up on its next refresh.", "Who is @plan or @build: ghosty agents ls --handle plan --workspace SLUG.", "stats: runs, % merged, median minutes to PR and to merge, @check\u2192@build loops and red CI per run, and cost per run and per merged PR. The cost counts @plan's first turn in the thread, before the run existed.", "--timing reads each role's transcript: engines without one (ACP) show minutes and cost but no commands. It also lists stuck patterns: a command open 8+ min, the same command 4 times, the same error 3 times, going back and forth, or apt install inside a box.", "why: if the run wasn't healthy (stuck patterns, @build over 30 min, loops, red CI, escalated), a category (missing_service, unresolved_build_or_tests, fixed_strategy\u2026), the critical step with its evidence and what to change next time. First it checks the approved plan's criteria against the evidence: approved without the preview a criterion asked for, merged without preview, smoke failed on the merged commit, or a CI criterion with CI none \u2192 approved_unmet_criterion, above any stuck pattern. A healthy run doesn't call the model. When a run closes unhealthy, the room gets this summary in its thread.", "advise: for an ESCALATED run, what to do \u2014 let @build fix it or redo the plan \u2014 with the note for @build point by point (each one cites the finding or plan step behind it) and what @check should review. It compares @check's findings against the signed plan. Nothing is applied: it prints the exact approve/changes command. show tells you why it was escalated.", "While a role works, if it gets stuck the room gets a \u23F3 message in the thread and the role is told what to check; from the second time in the same run, whoever asked gets a push."],
+  notes: ["env: the preview's environment variables live on your computer, so your terminal agent pushes them. ls lists saved and missing names (from .env.example and from runs escalated because the preview won't start); push adds them (only the workspace owner). Use disposable values, never production: the preview runs the repo's code. Values never come back. Then runs recheck <run>: @check reviews the same PR again without another @build loop. Logged as factory.env_set and factory.run_recheck.", "sprints: when the goal is too big for one run, @plan proposes a sprint (3\u20138 tickets in order, with dependencies) as a draft. approve signs every included ticket at once; they start one at a time as their dependencies merge. Only the owner or whoever asked can approve. Logged as factory.sprint_approve.", "rooms repos lists the repos your GitHub App sees (most recent first) and which rooms each one is already in.", "rooms connect checks that YOUR GitHub App installation sees the repo (if not, it gives you the link to grant access) and tells you how ready the repo is for agents (levels 1\u20133 and what's missing). Any member can connect; only whoever connected it, or the owner, can disconnect. Logged as factory.room_connect / factory.room_disconnect.", "run posts \xAB@plan <your text>\xBB in the room under YOUR name, like typing it in Teams: the same plan, approvals and card. Write it like a ticket: the goal, why, and how you'll know it's done. Any member can run, approve, ask for changes and merge; each one is logged (factory.run, factory.run_approve\u2026).", "card brings the run's live card down to the bottom of its thread; the old one stays as a still footprint linking to the live one. The roles can do it too (factory_card).", "Reading needs membership in the workspace; rename needs owner, admin or Ghosty staff, and is logged (factory.run_rename). The room's card picks the new title up on its next refresh.", "Who is @plan or @build: ghosty agents ls --handle plan --workspace SLUG.", "stats: runs, % merged, median minutes to PR and to merge, @check\u2192@build loops and red CI per run, and cost per run and per merged PR. The cost counts @plan's first turn in the thread, before the run existed.", "--timing reads each role's transcript: engines without one (ACP) show minutes and cost but no commands. It also lists stuck patterns: a command open 8+ min, the same command 4 times, the same error 3 times, going back and forth, or apt install inside a box.", "why: if the run wasn't healthy (stuck patterns, @build over 30 min, loops, red CI, escalated), a category (missing_service, unresolved_build_or_tests, fixed_strategy\u2026), the critical step with its evidence and what to change next time. First it checks the approved plan's criteria against the evidence: approved without the preview a criterion asked for, merged without preview, smoke failed on the merged commit, or a CI criterion with CI none \u2192 approved_unmet_criterion, above any stuck pattern. A healthy run doesn't call the model. When a run closes unhealthy, the room gets this summary in its thread.", "advise: for an ESCALATED run, what to do \u2014 let @build fix it or redo the plan \u2014 with the note for @build point by point (each one cites the finding or plan step behind it) and what @check should review. It compares @check's findings against the signed plan. Nothing is applied: it prints the exact approve/changes command. show tells you why it was escalated.", "While a role works, if it gets stuck the room gets a \u23F3 message in the thread and the role is told what to check; from the second time in the same run, whoever asked gets a push."],
   learn: `${REF}#fabrica`
 };
 function helpText(cmd) {
@@ -14561,7 +14674,7 @@ function helpText(cmd) {
 
 // src/update.ts
 init_i18n();
-import { mkdir as mkdir5, readFile as readFile9, writeFile as writeFile8 } from "node:fs/promises";
+import { mkdir as mkdir5, readFile as readFile9, writeFile as writeFile9 } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
 import { dirname as dirname3, join as join7 } from "node:path";
 var FILE = join7(process.env.XDG_CONFIG_HOME || join7(homedir3(), ".config"), "ghosty", "update.json");
@@ -14587,7 +14700,7 @@ async function latestVersion(current2) {
       const latest = (await r.json()).version;
       if (latest) cache2 = { latest, checkedAt: Date.now() };
       await mkdir5(dirname3(FILE), { recursive: true });
-      await writeFile8(FILE, JSON.stringify(cache2));
+      await writeFile9(FILE, JSON.stringify(cache2));
     } catch {
     }
   }
@@ -14667,7 +14780,7 @@ function agentArgIndex(pos) {
 }
 
 // src/completion.ts
-import { mkdir as mkdir6, readFile as readFile10, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdir as mkdir6, readFile as readFile10, writeFile as writeFile10 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { join as join8 } from "node:path";
 var GLOBAL_FLAGS = ["--json", "--token", "--profile", "--yes", "--help", "--version", "--lang", "--dry-run"];
@@ -14719,7 +14832,7 @@ async function names() {
   const workspaces = [...new Set(list2.map((a) => a.espacio?.tipo === "workspace" ? a.espacio.nombre : void 0).filter((x) => !!x))];
   await mkdir6(join8(cacheFile(), ".."), { recursive: true }).catch(() => {
   });
-  await writeFile9(cacheFile(), JSON.stringify({ at: Date.now(), agents, workspaces })).catch(() => {
+  await writeFile10(cacheFile(), JSON.stringify({ at: Date.now(), agents, workspaces })).catch(() => {
   });
   return { agents, workspaces };
 }
@@ -14806,7 +14919,7 @@ init_i18n();
 // src/commands/spec.ts
 var import_yaml = __toESM(require_dist(), 1);
 init_api();
-import { mkdir as mkdir7, readdir as readdir4, readFile as readFile11, stat as stat2, writeFile as writeFile10 } from "node:fs/promises";
+import { mkdir as mkdir7, readdir as readdir4, readFile as readFile11, stat as stat2, writeFile as writeFile11 } from "node:fs/promises";
 import { join as join9, resolve as resolve2 } from "node:path";
 init_util();
 init_i18n();
@@ -14820,7 +14933,7 @@ async function agentsExport(id, v) {
   }
   const dir = resolve2(v.out);
   await mkdir7(dir, { recursive: true });
-  await writeFile10(join9(dir, "agent.yaml"), yaml);
+  await writeFile11(join9(dir, "agent.yaml"), yaml);
   const own = (0, import_yaml.parse)(yaml)["x-ghosty"]?.skills?.own ?? [];
   for (const slug of own) {
     const sk = await api(`/api/v2/agents/${enc12(id)}/skills/${enc12(slug)}`);
@@ -14943,7 +15056,7 @@ ${dim(t(`${r.totals.activeTurns} turn(s) running`, `${r.totals.activeTurns} turn
 init_api();
 init_auth();
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { mkdir as mkdir8, readFile as readFile12, writeFile as writeFile11 } from "node:fs/promises";
+import { mkdir as mkdir8, readFile as readFile12, writeFile as writeFile12 } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname4, join as join10 } from "node:path";
 init_i18n();
@@ -14988,7 +15101,7 @@ async function visitorCookie(base, slug, fresh) {
   if (!cookie) throw new CliError(t("The demo didn't hand out a visitor cookie.", "El demo no entreg\xF3 cookie de visitante."), EXIT.API);
   jar[slug] = cookie;
   await mkdir8(dirname4(jarPath()), { recursive: true });
-  await writeFile11(jarPath(), JSON.stringify(jar, null, 2), { mode: 384 });
+  await writeFile12(jarPath(), JSON.stringify(jar, null, 2), { mode: 384 });
   return cookie;
 }
 async function visitorTurn(base, slug, cookie, text) {
@@ -15104,7 +15217,7 @@ var packPrice = (c, i, lang2) => `$${(PACK[i]?.[c] ?? 0).toLocaleString("en-US")
 var kb = (n) => n ? `${Math.max(1, Math.round(n / 1024))} KB` : "";
 var day = (iso) => iso ? iso.slice(0, 10) : "";
 async function sitesCmd(sub, a1, a2, v) {
-  const ex = "ghosty sites ls [--house] \xB7 pin|unpin <slug|id> \xB7 pins [--cancel|--resume] \xB7 publish <file.html|folder> [--title T] [--slug S] [--site <slug|id>] \xB7 slug <slug|id> <new-slug>";
+  const ex = "ghosty sites ls [--house] \xB7 pin|unpin <slug|id> \xB7 pins [--cancel|--resume] \xB7 search <slug|id> [--days 28] \xB7 publish <file.html|folder> [--title T] [--slug S] [--site <slug|id>] \xB7 slug <slug|id> <new-slug>";
   switch (sub ?? "ls") {
     case "ls":
     case "list": {
@@ -15145,6 +15258,22 @@ ${dim(r.expiresAt ? t(`Free rule: pauses ${day(r.expiresAt)} unless it changes (
 ${table(r.pinned.map((p) => ({ slug: p.slug, title: (p.title ?? "").slice(0, 40), url: p.url, since: day(p.pinnedAt) })), ["slug", "title", "url", "since"])}` : t("No pinned sites. Pin one ($49 USD/yr or $5 USD/mo, includes up to 3 sites): ghosty sites pin <slug>", "Sin sitios fijos. Fija uno ($49 USD al a\xF1o o $5 USD al mes, incluye hasta 3 sitios): ghosty sites pin <slug>")
       );
     }
+    case "search": {
+      if (!a1) throw usage(t("Missing the site (slug, id or URL).", "Falta el sitio (slug, id o URL)."), "ghosty sites search <slug|id> [--days 28]");
+      const r = await api(`/api/v2/sites/${encodeURIComponent(a1)}/search${v.days ? `?days=${encodeURIComponent(v.days)}` : ""}`);
+      const p = r.portada;
+      const index = p.error ? dim(p.error) : p.indexada ? `${lavender("\u2713")} ${t("indexed", "indexada")} ${dim(day(p.ultimoRastreo ?? null))}` : `${t("not indexed", "sin indexar")} ${dim(p.estado ?? "")}`;
+      const tot = r.total;
+      return out(
+        r,
+        () => [
+          `${bold(r.sitio)} ${dim(`${r.desde} \u2192 ${r.hasta}`)}`,
+          `${t("Home", "Portada")}: ${index}`,
+          `${t("clicks", "clics")} ${tot.clics} \xB7 ${t("impressions", "impresiones")} ${tot.impresiones} \xB7 CTR ${tot.ctr} \xB7 ${t("position", "posici\xF3n")} ${tot.posicion ?? "\u2014"}`,
+          r.busquedas.length ? table(r.busquedas.map((q) => ({ query: q.busqueda, clicks: q.clics, impressions: q.impresiones, position: q.posicion })), ["query", "clicks", "impressions", "position"]) : dim(t("No searches yet (Google reports 2\u20133 days late).", "A\xFAn sin b\xFAsquedas (Google reporta con 2\u20133 d\xEDas de atraso)."))
+        ].join("\n")
+      );
+    }
     case "publish":
     case "deploy": {
       if (!a1) throw usage(t("Missing the file or folder.", "Falta el archivo o la carpeta."), ex);
@@ -15174,7 +15303,7 @@ ${dim(t("Links with the old slug may stop working.", "Las ligas con el slug viej
 
 // src/commands/docs.ts
 init_api();
-import { writeFile as writeFile12 } from "node:fs/promises";
+import { writeFile as writeFile13 } from "node:fs/promises";
 
 // ../docs/src/core/doc-blocks.ts
 var DOC_ENVELOPE_VERSION = 1;
@@ -15337,7 +15466,7 @@ ${t("Ids: ghosty me docs ls", "Ids: ghosty me docs ls")}`);
       }
       const named = /filename\*=UTF-8''([^;]+)/i.exec(res.headers.get("content-disposition") ?? "")?.[1];
       const file = v.out ?? (named ? decodeURIComponent(named) : fileName(id, format));
-      await writeFile12(file, bytes);
+      await writeFile13(file, bytes);
       return out({ id, format, saved: file, bytes: bytes.length }, () => `${lavender("\u2713")} ${file} (${bytes.length} bytes)`);
     }
     case "check": {
@@ -15363,7 +15492,7 @@ ${t("Ids: ghosty me docs ls", "Ids: ghosty me docs ls")}`);
       if (res.status === 204) return out({ id, block, segment, segments, saved: null }, () => dim(t("That block has no text to read.", "Ese bloque no tiene texto que leer.")));
       const bytes = Buffer.from(await res.arrayBuffer());
       const file = v.out ?? `${id}-${block}${segment !== null ? `-${segment}` : ""}.${audioExt(res.headers.get("content-type"))}`;
-      await writeFile12(file, bytes);
+      await writeFile13(file, bytes);
       return out({ id, block, segment, segments, saved: file, bytes: bytes.length }, () => `${lavender("\u2713")} ${file} (${bytes.length} bytes) ${dim(t(`\xB7 the block has ${segments} sentence(s): --segment 0\u2026${Math.max(segments - 1, 0)}`, `\xB7 el bloque tiene ${segments} frase(s): --segment 0\u2026${Math.max(segments - 1, 0)}`))}`);
     }
     case "restore": {
@@ -15532,6 +15661,9 @@ ${dim(t("Times in UTC. --full for the whole detail; --json for everything.", "Ho
 
 // src/commands/factory.ts
 init_api();
+import { execFileSync } from "node:child_process";
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
 init_util();
 init_i18n();
 var enc16 = encodeURIComponent;
@@ -15589,6 +15721,103 @@ async function roomsCmd(ws, verb, repo, v) {
     ].filter((l) => l !== "").join("\n")
   );
 }
+async function sprintsCmd(ws, verb, ref, v) {
+  const path = `/api/v2/workspaces/${enc16(ws)}/factory/sprints`;
+  if (!verb || verb === "ls" || verb === "list") {
+    const r2 = await api(path);
+    const rows = r2.sprints.map((x) => ({ sprint: `#${x.id}`, title: x.title.slice(0, 60), status: x.status, room: x.room ? `#${x.room}` : "", merged: `${x.merged}/${x.total}` }));
+    return out(r2, () => rows.length ? table(rows, ["sprint", "title", "status", "room", "merged"]) : dim(t("No sprints yet.", "Todav\xEDa no hay sprints.")));
+  }
+  const id = Number(String(ref ?? "").replace(/^#/, ""));
+  if (verb !== "show" && verb !== "approve") throw usage(t(`Unknown sprints subcommand: ${verb}.`, `Subcomando de sprints desconocido: ${verb}.`), "ghosty factory sprints ls | show <id> | approve <id> --yes");
+  if (!id) throw usage(t("Which sprint?", "\xBFQu\xE9 sprint?"), `ghosty factory sprints ${verb} 12 --workspace ${ws}`);
+  if (verb === "approve") {
+    const retry = `ghosty factory sprints approve ${id} --workspace ${ws}`;
+    requireYesIfHeadless(v.yes, retry);
+    await confirm(t(`Approve sprint #${id}? Every included ticket starts, one at a time.`, `\xBFAprobar el sprint #${id}? Arrancan todos los tickets incluidos, uno a la vez.`), { yes: v.yes, retry });
+  }
+  const r = verb === "approve" ? await api(`${path}/${id}`, { body: { action: "approve" } }) : await api(`${path}/${id}`);
+  return out(
+    r,
+    () => [
+      `${bold(`#${r.id} ${r.title}`)} ${dim(`\xB7 ${r.status} \xB7 v${r.version}${r.repo ? ` \xB7 ${r.repo}` : ""}`)}`,
+      r.goal ? dim(r.goal) : "",
+      table(
+        r.items.map((i) => ({ key: i.key, ticket: i.title.slice(0, 56), size: i.size, after: i.dependsOn.join(",") || "", status: i.included ? i.status : dim(t("out", "fuera")), run: i.runId ? `#${i.runId}` : "" })),
+        ["key", "ticket", "size", "after", "status", "run"]
+      ),
+      r.status === "draft" && r.canEdit ? dim(t(`Approve: ghosty factory sprints approve ${r.id} --workspace ${ws}`, `Aprueba: ghosty factory sprints approve ${r.id} --workspace ${ws}`)) : ""
+    ].filter(Boolean).join("\n")
+  );
+}
+function repoHere() {
+  try {
+    const url = execFileSync("git", ["remote", "get-url", "origin"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    return url.match(/github\.com[:/]([^/]+\/[^/]+?)(?:\.git)?$/)?.[1] ?? null;
+  } catch {
+    return null;
+  }
+}
+function dotenvKeys(text) {
+  return text.split("\n").map((l) => l.trim().replace(/^export\s+/, "")).filter((l) => l && !l.startsWith("#") && l.indexOf("=") > 0).map((l) => l.slice(0, l.indexOf("=")).trim());
+}
+async function envCmd(ws, verb, ref, file, v) {
+  const path = `/api/v2/workspaces/${enc16(ws)}/factory/env`;
+  const repo = ref && ref.includes("/") ? ref : v.repo ?? repoHere();
+  if (ref && !ref.includes("/") && !file) file = ref;
+  if (!repo) throw usage(t("Which repo?", "\xBFQu\xE9 repo?"), `ghosty factory env ${verb ?? "ls"} OWNER/REPO --workspace ${ws}`);
+  if (!verb || verb === "ls" || verb === "list") {
+    const r2 = await api(`${path}?repo=${enc16(repo)}`);
+    const risk = new Map(r2.risks.map((x) => [x.key, x.risk]));
+    return out(
+      r2,
+      () => [
+        `${bold(r2.repo)} ${dim(`\xB7 ${r2.rooms.map((x) => `#${x}`).join(" ")}`)}`,
+        `${t("saved", "guardadas")}: ${r2.saved.length ? r2.saved.map((k) => risk.has(k) ? red(`${k} (${risk.get(k)})`) : k).join(", ") : dim(t("none", "ninguna"))}`,
+        r2.missing.length ? `${red(t("missing", "faltan"))}: ${r2.missing.join(", ")}` : `${lavender("\u2713")} ${t("nothing missing", "no falta ninguna")}`,
+        ...r2.blocked.map((b) => dim(t(`#${b.id} is escalated because its preview doesn't start${b.keys.length ? ` (${b.keys.join(", ")})` : ""}`, `#${b.id} est\xE1 escalado porque su preview no arranca${b.keys.length ? ` (${b.keys.join(", ")})` : ""}`))),
+        r2.missing.length ? dim(
+          t(
+            `Use DISPOSABLE values (a test database, freshly generated keys), never production: the preview runs the repo's code and can read them.
+Push: ghosty factory env push ${r2.repo} .env.preview${r2.missing.length ? ` [--gen KEY,KEY]` : ""} --workspace ${ws}`,
+            `Usa valores DESECHABLES (una base de prueba, llaves reci\xE9n generadas), nunca los de producci\xF3n: la preview corre el c\xF3digo del repo y puede leerlos.
+S\xFAbelas: ghosty factory env push ${r2.repo} .env.preview${r2.missing.length ? ` [--gen LLAVE,LLAVE]` : ""} --workspace ${ws}`
+          )
+        ) : "",
+        r2.canWrite ? "" : dim(t("Only the workspace owner can save them.", "S\xF3lo el due\xF1o del espacio puede guardarlas."))
+      ].filter(Boolean).join("\n")
+    );
+  }
+  if (verb !== "push") throw usage(t(`Unknown env subcommand: ${verb}.`, `Subcomando de env desconocido: ${verb}.`), "ghosty factory env ls [OWNER/REPO] | push [OWNER/REPO] [FILE] [--gen KEY,KEY] [--replace] [--yes]");
+  const src = file ?? v.file;
+  if (src && !existsSync(src)) throw usage(t(`No such file: ${src}.`, `No existe el archivo: ${src}.`), t("A .env file: KEY=value per line.", "Un archivo .env: KEY=valor por rengl\xF3n."));
+  let dotenv = src ? readFileSync(src, "utf8") : "";
+  const gen = (v.gen ?? "").split(",").map((k) => k.trim()).filter(Boolean);
+  for (const k of gen) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(k)) throw usage(t(`Invalid name: ${k}.`, `Nombre inv\xE1lido: ${k}.`), "--gen SESSION_SECRET,ENCRYPTION_KEY");
+    dotenv += `
+${k}=${randomBytes2(32).toString("hex")}`;
+  }
+  const keys = [...new Set(dotenvKeys(dotenv))];
+  if (!keys.length) throw usage(t("Nothing to push.", "No hay nada que subir."), `ghosty factory env push ${repo} .env.preview [--gen KEY] --workspace ${ws}`);
+  const retry = `ghosty factory env push ${repo}${src ? ` ${src}` : ""}${gen.length ? ` --gen ${gen.join(",")}` : ""}${v.replace ? " --replace" : ""} --workspace ${ws}`;
+  requireYesIfHeadless(v.yes, retry);
+  await confirm(
+    v.replace ? t(`REPLACE the whole preview .env of ${repo} with ${keys.length} variables (${keys.join(", ")})?`, `\xBFREEMPLAZAR todo el .env de la preview de ${repo} con ${keys.length} variables (${keys.join(", ")})?`) : t(`Save ${keys.length} variables for the preview of ${repo} (${keys.join(", ")})? The others stay.`, `\xBFGuardar ${keys.length} variables para la preview de ${repo} (${keys.join(", ")})? Las dem\xE1s se quedan.`),
+    { yes: v.yes, retry }
+  );
+  const r = await api(path, {
+    body: { repo, dotenv, ...v.replace ? { replace: true } : {} }
+  });
+  return out(
+    r,
+    () => [
+      `${lavender("\u2713")} ${t(`${r.repo}: ${r.keys.length} variables saved; its previews are rebuilding.`, `${r.repo}: ${r.keys.length} variables guardadas; sus previews se est\xE1n reconstruyendo.`)}`,
+      ...r.risks.map((x) => red(t(`${x.key} touches production (${x.risk}): use a disposable value.`, `${x.key} toca producci\xF3n (${x.risk}): usa un valor desechable.`))),
+      ...r.blocked.map((b) => dim(t(`#${b.id} was waiting for this: ghosty factory runs recheck ${b.id} --workspace ${ws}`, `#${b.id} esperaba esto: ghosty factory runs recheck ${b.id} --workspace ${ws}`)))
+    ].join("\n")
+  );
+}
 var sleep3 = (ms) => new Promise((ok) => setTimeout(ok, ms));
 var STOPS = /* @__PURE__ */ new Set(["plan_review", "escalated", "pr_review", "done", "cancelled"]);
 var STAGE = {
@@ -15613,6 +15842,17 @@ Or ask for changes: ghosty factory runs changes ${r.id} --note "\u2026" ${w}`,
 Firma: ghosty factory runs approve ${r.id} --plan-version ${r.planVersion} ${w}
 O pide cambios: ghosty factory runs changes ${r.id} --note "\u2026" ${w}`
     );
+  if (r.status === "escalated" && "escalation" in r && r.escalation?.blocked)
+    return t(
+      `@check is blocked by something @build can't provide (e.g. preview variables). Resolve it, then:
+What's missing: ghosty factory env ls ${r.repo ?? "OWNER/REPO"} ${w}
+Review again (no @build loop): ghosty factory runs recheck ${r.id} ${w}
+Replan: ghosty factory runs changes ${r.id} --note "\u2026" ${w}`,
+      `A @check lo bloquea algo que @build no puede dar (p. ej. variables de la preview). Resu\xE9lvelo y luego:
+Qu\xE9 falta: ghosty factory env ls ${r.repo ?? "DUE\xD1O/REPO"} ${w}
+Que revise otra vez (sin vuelta de @build): ghosty factory runs recheck ${r.id} ${w}
+Replanear: ghosty factory runs changes ${r.id} --note "\u2026" ${w}`
+    );
   if (r.status === "escalated")
     return t(
       `Another loop: ghosty factory runs approve ${r.id} ${w}
@@ -15661,10 +15901,12 @@ function timeoutOf(v) {
   return s2;
 }
 async function factoryCmd(sub, verb, ref, title, v, context) {
-  if (sub !== "runs" && sub !== "run" && sub !== "rooms") throw usage(t(`Unknown factory subcommand: ${sub ?? "(none)"}.`, `Subcomando de factory desconocido: ${sub ?? "(ninguno)"}.`), 'ghosty factory run "\u2026" | rooms ls|connect|disconnect | runs ls|show|why|advise|stats|rename|watch|approve|changes|merge|card \u2026');
+  if (sub !== "runs" && sub !== "run" && sub !== "rooms" && sub !== "sprints" && sub !== "env") throw usage(t(`Unknown factory subcommand: ${sub ?? "(none)"}.`, `Subcomando de factory desconocido: ${sub ?? "(ninguno)"}.`), 'ghosty factory run "\u2026" | rooms ls|repos|connect|disconnect | sprints ls|show|approve | env ls|push | runs ls|show|why|advise|stats|rename|watch|approve|changes|merge|card \u2026');
   const ws = v.workspace ?? context;
   if (!ws) throw usage(t("Which workspace?", "\xBFQu\xE9 espacio?"), t("Add --workspace SLUG (or set one with ghosty use SLUG).", "Agrega --workspace SLUG (o fija uno con ghosty use SLUG)."));
   if (sub === "rooms") return roomsCmd(ws, verb, ref, v);
+  if (sub === "sprints") return sprintsCmd(ws, verb, ref, v);
+  if (sub === "env") return envCmd(ws, verb, ref, title, v);
   const base = `/api/v2/workspaces/${enc16(ws)}/factory/runs`;
   if (sub === "run") {
     const text = verb?.trim();
@@ -15764,20 +16006,25 @@ ${dim(`${t("Detail", "Detalle")}: ghosty factory runs show <run> --workspace ${r
     const { advice: a, workspace } = await api(`${path}/advise`, { body: {} });
     const note = a.buildNote.map((p, i) => `${i + 1}. ${p.point}`).join(" ");
     const sh = (x) => `'${x.replace(/'/g, `'\\''`)}'`;
-    const apply = a.decision === "fix" ? `ghosty factory runs approve ${id} --note ${sh(note)}${a.checkScope ? ` --check-scope ${sh(a.checkScope)}` : ""} --workspace ${workspace}` : `ghosty factory runs changes ${id} --note ${sh(note)} --workspace ${workspace}`;
+    const apply = a.decision === "fix" ? `ghosty factory runs approve ${id} --note ${sh(note)}${a.checkScope ? ` --check-scope ${sh(a.checkScope)}` : ""} --workspace ${workspace}` : a.decision === "replan" ? `ghosty factory runs changes ${id} --note ${sh(note)} --workspace ${workspace}` : a.decision === "recheck" ? `ghosty factory runs recheck ${id} --workspace ${workspace}` : null;
+    const label = {
+      fix: t("Let @build fix it", "Que @build lo arregle"),
+      replan: t("Redo the plan", "Rehacer el plan"),
+      close: t("Close the PR", "Cerrar el PR"),
+      close_ignore: t("Close the PR and ignore this version", "Cerrar el PR e ignorar esta versi\xF3n"),
+      recheck: t("Let @check review again", "Que @check revise otra vez"),
+      wait: t("Wait: it's a platform fault", "Esperar: es una falla de la plataforma")
+    }[a.decision] ?? a.decision;
     return out({ workspace, advice: a, apply }, () => {
       const conf = { high: t("high", "alta"), medium: t("medium", "media"), low: t("low", "baja") }[a.confidence] ?? a.confidence;
       return [
-        `${bold(`#${id}`)} ${bold(a.decision === "fix" ? t("Let @build fix it", "Que @build lo arregle") : t("Redo the plan", "Rehacer el plan"))} ${dim(`\xB7 ${t("confidence", "confianza")} ${conf} \xB7 ${a.model}`)}`,
+        `${bold(`#${id}`)} ${bold(label)} ${dim(`\xB7 ${t("confidence", "confianza")} ${conf} \xB7 ${a.model}`)}`,
         a.why,
-        "",
-        bold(a.decision === "fix" ? t("Note for @build", "Nota para @build") : t("What to change in the plan", "Qu\xE9 cambiar en el plan")),
-        ...a.buildNote.map((p, i) => `  ${i + 1}. ${p.point}
-     ${dim(p.cites)}`),
+        ...a.buildNote.length ? ["", bold(a.decision === "fix" ? t("Note for @build", "Nota para @build") : t("What to change in the plan", "Qu\xE9 cambiar en el plan")), ...a.buildNote.map((p, i) => `  ${i + 1}. ${p.point}
+     ${dim(p.cites)}`)] : [],
         ...a.checkScope && a.decision === "fix" ? ["", bold(t("@check reviews only", "@check revisa s\xF3lo")), `  ${a.checkScope}`] : [],
         "",
-        dim(t("Nothing was applied. To apply it (edit the note first if you want):", "No se aplic\xF3 nada. Para aplicarla (edita la nota antes si quieres):")),
-        `  ${apply}`
+        ...apply ? [dim(t("Nothing was applied. To apply it (edit the note first if you want):", "No se aplic\xF3 nada. Para aplicarla (edita la nota antes si quieres):")), `  ${apply}`] : [dim(t("Nothing was applied. Decide it on the run's card or in the app.", "No se aplic\xF3 nada. Dec\xEDdelo en la tarjeta del pedido o en la app."))]
       ].join("\n");
     });
   }
@@ -15813,7 +16060,7 @@ ${dim(t("Dry run: nothing changed.", "Simulacro: no se cambi\xF3 nada."))}`);
     const r = await api(path, { body: { title } });
     return out(r, () => `${lavender("\u2713")} ${line2} ${dim(t("(logged; the room card picks it up on its next refresh)", "(queda en bit\xE1cora; la tarjeta del room lo toma en su siguiente refresco)"))}`);
   }
-  if (verb === "approve" || verb === "changes" || verb === "merge" || verb === "card") {
+  if (verb === "approve" || verb === "changes" || verb === "recheck" || verb === "merge" || verb === "card") {
     const id = Number(ref.replace(/^#/, ""));
     const note = v.note?.trim() ?? title?.trim();
     const scope = verb === "approve" || verb === "changes" ? v["check-scope"]?.trim() : void 0;
@@ -15822,7 +16069,7 @@ ${dim(t("Dry run: nothing changed.", "Simulacro: no se cambi\xF3 nada."))}`);
     if (verb !== "card") {
       requireYesIfHeadless(v.yes, retry);
       const cur = (await api(`${base}/${id}`)).run;
-      const what = { approve: t(`Approve #${id} (plan v${cur.planVersion})`, `\xBFFirmar el #${id} (plan v${cur.planVersion})`), changes: t(`Ask for changes on #${id}`, `\xBFPedir cambios en el #${id}`), merge: t(`Merge the PR of #${id} (${cur.pr ?? "\u2014"})`, `\xBFMergear el PR del #${id} (${cur.pr ?? "\u2014"})`) }[verb];
+      const what = { approve: t(`Approve #${id} (plan v${cur.planVersion})`, `\xBFFirmar el #${id} (plan v${cur.planVersion})`), changes: t(`Ask for changes on #${id}`, `\xBFPedir cambios en el #${id}`), recheck: t(`Have @check review #${id} again (no @build loop)`, `\xBFQue @check revise otra vez el #${id} (sin vuelta de @build)`), merge: t(`Merge the PR of #${id} (${cur.pr ?? "\u2014"})`, `\xBFMergear el PR del #${id} (${cur.pr ?? "\u2014"})`) }[verb];
       await confirm(`${what}?`, { yes: v.yes, retry });
     }
     const r = await api(`${base}/${id}/act`, {
@@ -15831,13 +16078,14 @@ ${dim(t("Dry run: nothing changed.", "Simulacro: no se cambi\xF3 nada."))}`);
     const msg = {
       approve: t(`#${id} approved: ${stage(r.status)}.`, `#${id} firmado: ${stage(r.status)}.`),
       changes: t(`#${id}: changes sent to @plan.`, `#${id}: cambios enviados a @plan.`),
+      recheck: t(`#${id}: @check is reviewing the same PR again.`, `#${id}: @check revisa otra vez el mismo PR.`),
       merge: r.queued ? t(`#${id}: merge queued, it goes in when CI passes.`, `#${id}: merge en cola, entra cuando pase el CI.`) : t(`#${id} merged.`, `#${id} mergeado.`),
       card: t(`#${id}: the card is at the bottom of its thread again.`, `#${id}: la tarjeta volvi\xF3 al final de su hilo.`)
     }[verb];
-    return out(r, () => `${lavender("\u2713")} ${msg}${verb === "approve" || verb === "changes" ? `
+    return out(r, () => `${lavender("\u2713")} ${msg}${verb === "approve" || verb === "changes" || verb === "recheck" ? `
 ${dim(t(`Follow it: ghosty factory runs watch ${id} --workspace ${ws}`, `S\xEDguelo: ghosty factory runs watch ${id} --workspace ${ws}`))}` : ""}`);
   }
-  throw usage(t(`Unknown runs subcommand: ${verb}.`, `Subcomando de runs desconocido: ${verb}.`), 'ghosty factory runs ls | show <run> [--timing] | why <run> [--refresh] | advise <run> | stats [--since 30d] | rename <run> "title" | watch <run> | approve <run> --plan-version N [--note "\u2026"] [--check-scope "\u2026"] | changes <run> --note "\u2026" | merge <run> | card <run>');
+  throw usage(t(`Unknown runs subcommand: ${verb}.`, `Subcomando de runs desconocido: ${verb}.`), 'ghosty factory runs ls | show <run> [--timing] | why <run> [--refresh] | advise <run> | stats [--since 30d] | rename <run> "title" | watch <run> | approve <run> --plan-version N [--note "\u2026"] [--check-scope "\u2026"] | changes <run> --note "\u2026" | recheck <run> | merge <run> | card <run>');
 }
 async function agentsByHandle(handle, workspace) {
   const qs = new URLSearchParams({ handle, ...workspace ? { workspace } : {} });
@@ -15920,6 +16168,9 @@ async function adsCmd(sub, action, v) {
         lavender(t("Meta ad accounts", "Cuentas de Meta")),
         r.accounts.length ? table(r.accounts.map((a) => ({ workspace: a.workspace, account: a.account ?? "", active: `${a.active}/${a.campaigns}`, status: a.accountStatus ?? "", token: day3(a.tokenExpiresAt), checked: day3(a.checkedAt), alerted: day3(a.alertedAt), error: a.error ?? "" })), ["workspace", "account", "active", "status", "token", "checked", "alerted", "error"]) : dim(t("(none connected)", "(ninguna conectada)")),
         "",
+        lavender(t("Google Ads accounts", "Cuentas de Google Ads")),
+        r.google?.length ? table(r.google.map((g) => ({ workspace: g.workspace, account: g.account, link: g.link, active: `${g.active}/${g.campaigns}`, status: g.accountStatus ?? "", checked: day3(g.checkedAt), alerted: day3(g.alertedAt), error: g.error ?? "" })), ["workspace", "account", "link", "active", "status", "checked", "alerted", "error"]) : dim(t("(none linked)", "(ninguna vinculada)")),
+        "",
         lavender(t("Ads-only WhatsApp numbers", "N\xFAmeros de WhatsApp \xABs\xF3lo anuncios\xBB")),
         r.numbers.length ? table(r.numbers.map((n) => ({ number: n.number, "last ad lead": day3(n.lastAdLeadAt), alerted: day3(n.alertedAt) })), ["number", "last ad lead", "alerted"]) : dim(t("(none)", "(ninguno)"))
       ].join("\n")
@@ -16248,6 +16499,8 @@ ${bold("Workspaces")}  ${dim("(changing them: Ghosty staff)")}
   audit ls                                    The audit log: who changed what (agent page, channels, pauses, replies, transfers, "log in as")   [--workspace SLUG] [--agent ID] [--actor EMAIL] [--action A] [--since 24h] [--limit N]
   factory rooms ls|repos|connect|disconnect   Set up the factory for a repo without opening Teams: create a room and connect the repo to it   [connect owner/repo --room R --create]
   factory run "\u2026" --repo o/n [--wait]          Hand a request to the Software Factory from the terminal (@plan plans, @build builds, @check reviews); --wait returns when you have to decide   [runs watch|approve|changes|merge|card <run>]
+  factory sprints ls|show|approve             The sprints @plan proposes for a bigger goal (3\u20138 tickets in order): list, read, approve with one signature   [approve <id> --yes]
+  factory env ls|push [o/n] [.env]            The preview's environment variables: what's saved and missing, push them from your .env (disposable values)   [--gen KEY,KEY] [--replace]
   factory runs ls|show|why|advise|stats|rename  A workspace's Software Factory runs: list (time and cost), detail (plan, PR, preview, who is working), where the time and money went, why it got stuck or failed, what to do when it's escalated, totals, fix a title   [--workspace SLUG] [--room R] [--status S] [show --timing] [why --refresh] [stats --since 30d --repo R]
 
 ${bold("Agents")}
@@ -16344,6 +16597,7 @@ ${bold("Sites")}  ${dim("(sites your agents publish at <slug>.ghosty.page)")}
   sites ls                                Sites your agents published (live and paused)   [--house: Ghosty's own demos and landings (staff)]
   sites pin <slug|id>                     Pin it: never pauses, no banner ($49 USD/yr or $5/mo, includes up to 3 sites)   [--interval year|month] [--currency usd|mxn] [--add-pack: 3 more]
   sites unpin <slug|id>                   Release its slot (back to the Free rule: 30 days + notice)
+  sites search <slug|id>                  How Google finds it: clicks, impressions, searches, indexed or not   [--days 28]
   sites pins                              Your pinned-sites subscription and slots   [--cancel | --resume]
   sites publish <file.html|folder>        Publish a house site (staff): no owner, no expiry, no banner   [--title] [--slug S] [--site <slug|id>: update that one]
   sites slug <slug|id> <new-slug>         Change a site's slug (staff)
@@ -16386,6 +16640,7 @@ ${bold("Browser")}  ${dim("(Ghosty for Chrome)")}
 
 ${bold("Partners")}  ${dim("(give an agent to each of YOUR customers \u2014 see: ghosty partner --help)")}
   partner ls | enable | credentials | agent | tenants | audit | try
+  image generate "prompt"   An AI image for your businesses, charged to the space's balance   [--ref URL (repeat, keeps the character)] [--aspect 16:9] [--tenant ID] [--out FILE]
 
 ${bold("Your account")}
   me files ls|get|export|upload|rm Files in your account [--q TEXT] [--kind image|video|audio|document|other] [--cursor C] \xB7 get <id> [--out FILE]
@@ -16447,6 +16702,8 @@ ${bold("Espacios")}  ${dim("(cambiarlos: staff de Ghosty)")}
   audit ls                                    La bit\xE1cora: qui\xE9n cambi\xF3 qu\xE9 (ficha, canales, pausas, respuestas, traspasos, \xABentrar como\xBB)   [--workspace SLUG] [--agent ID] [--actor CORREO] [--action A] [--since 24h] [--limit N]
   factory rooms ls|repos|connect|disconnect   Deja lista la f\xE1brica de un repo sin abrir Teams: crea un room y con\xE9ctale el repo   [connect due\xF1o/repo --room R --create]
   factory run "\u2026" --repo o/n [--wait]          P\xEDdele algo a la Software Factory desde la terminal (@plan planea, @build construye, @check revisa); --wait regresa cuando te toca decidir   [runs watch|approve|changes|merge|card <pedido>]
+  factory sprints ls|show|approve             Los sprints que propone @plan para un objetivo grande (3\u20138 tickets en orden): lista, l\xE9elo, apru\xE9balo con una sola firma   [approve <id> --yes]
+  factory env ls|push [d/r] [.env]            Las variables de entorno de la preview: cu\xE1les hay y cu\xE1les faltan, s\xFAbelas desde tu .env (valores desechables)   [--gen LLAVE,LLAVE] [--replace]
   factory runs ls|show|why|advise|stats|rename  Los pedidos de la Software Factory de un espacio: lista (tiempo y costo), detalle (plan, PR, preview, qui\xE9n trabaja), en qu\xE9 se fue el tiempo y el dinero, por qu\xE9 se ator\xF3 o fall\xF3, qu\xE9 hacer si se escal\xF3, totales, corregir un t\xEDtulo   [--workspace SLUG] [--room R] [--status S] [show --timing] [why --refresh] [stats --since 30d --repo R]
 
 ${bold("Agentes")}
@@ -16585,6 +16842,7 @@ ${bold("Navegador")}  ${dim("(Ghosty para Chrome)")}
 
 ${bold("Partners")}  ${dim("(dale un agente a cada uno de TUS clientes \u2014 ver: ghosty partner --help)")}
   partner ls | enable | credentials | agent | tenants | audit | try
+  image generate "prompt"   Una imagen con IA para tus negocios, cobrada del saldo del espacio   [--ref URL (se repite, conserva al personaje)] [--aspect 16:9] [--tenant ID] [--out ARCHIVO]
 
 ${bold("Tu cuenta")}
   me files ls|get|export|upload|rm Archivos de tu cuenta [--q TEXTO] [--kind image|video|audio|document|other] [--cursor C] \xB7 get <id> [--out ARCHIVO]
@@ -16610,7 +16868,7 @@ ${bold("Opciones globales")}
 ${bold("C\xF3digos de salida")}  0 bien \xB7 1 error de la API \xB7 2 uso incorrecto \xB7 3 sin sesi\xF3n
 ${dim("Nota: `ghosty` puede chocar con otro binario en tu PATH (p. ej. la TUI de Ghosty). Rev\xEDsalo con `which -a ghosty`; corre `npx @ghostystudio/cli` para ir a la segura.")}
 ${dim("Documentaci\xF3n: https://www.ghosty.studio/docs/cli")}`;
-var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "workspaces", "staff", "settings", "ads", "audit", "factory", "demos", "sites", "push", "novedades", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "teams", "partner", "me", "channels", "board", "boards", "access", "credentials", "connectors", "browser", "support", "docs", "help"];
+var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "workspaces", "staff", "settings", "ads", "audit", "factory", "demos", "sites", "push", "novedades", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "teams", "partner", "image", "me", "channels", "board", "boards", "access", "credentials", "connectors", "browser", "support", "docs", "help"];
 var AGENTS_SUBS = ["ls", "create", "get", "show", "set", "export", "doctor", "docs", "share", "unshare", "shares", "teams", "rm", "restart", "demo", "embed", "box", "token", "memory", "transfer"];
 function unknown(what, input, known, helpCmd) {
   const s2 = suggest(input, known);
@@ -16787,6 +17045,7 @@ async function main() {
       reply: { type: "boolean" },
       actor: { type: "string" },
       room: { type: "string" },
+      cap: { type: "string" },
       url: { type: "string" },
       description: { type: "string" },
       grant: { type: "string" },
@@ -16864,6 +17123,7 @@ async function main() {
       thread: { type: "string" },
       private: { type: "boolean" },
       "skip-preview": { type: "boolean" },
+      gen: { type: "string" },
       owner: { type: "string" },
       cursor: { type: "string" },
       user: { type: "string" },
@@ -16877,6 +17137,8 @@ async function main() {
       draft: { type: "boolean" },
       "ads-only": { type: "string" },
       "partner-tenant": { type: "string" },
+      ref: { type: "string", multiple: true },
+      aspect: { type: "string" },
       tenant: { type: "string" },
       "app-id": { type: "string" },
       secret: { type: "string" },
@@ -16911,14 +17173,14 @@ async function main() {
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.76.0" }, () => "0.76.0");
+  if (v.version) return out({ version: "0.78.0" }, () => "0.78.0");
   for (const n of normalizeArgs(pos, v)) if (!globals.json) info(dim(n));
   const context = (await readConfig()).workspace;
   if (!explicitToken()?.startsWith("gat_")) {
     const at = agentArgIndex(pos);
     if (at !== null && pos[at]) pos[at] = await resolveAgent(pos[at], context);
     for (const f of ["like", "prompt-base", "agent"]) {
-      if (f === "agent" && pos[0] === "partner") continue;
+      if (f === "agent" && (pos[0] === "partner" || pos[0] === "image")) continue;
       const val = v[f];
       if (typeof val === "string" && val !== "none") v[f] = await resolveAgent(val, context);
     }
@@ -17052,6 +17314,8 @@ async function main() {
       return browserCmd(sub, v);
     case "partner":
       return partnerCmd(sub, a1, a2, { ...v, token: tokens.turn }, pos[4]);
+    case "image":
+      return imageCmd(sub, a1, v);
     case "usage":
       if (v.images) return imageUsage(v);
       if (v.boxes && v.by === "template") return fleetBoxes();
@@ -17106,7 +17370,7 @@ async function main() {
       throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
-var notice = updateNotice("0.76.0").catch(() => null);
+var notice = updateNotice("0.78.0").catch(() => null);
 main().then(
   async () => {
     const n = await notice;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghostystudio/cli",
-  "version": "0.76.0",
+  "version": "0.78.0",
   "description": "Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.",
   "type": "module",
   "bin": {