@nodus-ai/equile 0.0.1-preview

package/README.md

@@ -0,0 +1,544 @@
+# `@nodus-ai/sdk`
+
+Run authenticated Codex, Claude, Grok, Gemini, Cursor, or Factory agents through Nodus.
+
+Use this package from trusted server-side code only. Never expose `NODUS_API_KEY` in a browser, Git repository, prompt, screenshot, or log.
+
+## Install
+
+```bash
+npm install @nodus-ai/sdk
+```
+
+Node.js 18 or newer is required.
+
+## Required values
+
+```bash
+export NODUS_BASE_URL="https://nodus-api-production-d291.up.railway.app"
+export NODUS_API_KEY="ndk_..."
+export NODUS_AGENT_ID="..."
+```
+
+- `NODUS_API_KEY` is either scoped to fixed Agent IDs or to one Agent Workspace. A Workspace key dynamically includes Agents added to that Workspace later.
+- `NODUS_AGENT_ID` identifies an Agent already created and authenticated in Nodus.
+- The SDK cannot create Agents or change provider credentials.
+
+## Run one task
+
+For a Workspace SDK key, omit `agentId`. Nodus distributes runs across healthy matching Agents in that Workspace:
+
+```js
+const run = await nodus.agentRuns.createAndWait({
+  provider: "codex",
+  model: "gpt-5.5",
+  mode: "goal",
+  prompt: "Begin the review and write the final report.",
+  goal: `# Review Goal
+
+## Requirements
+- Inspect the complete project.
+- Identify the three highest-priority issues.
+- Support every finding with concrete evidence.
+
+## Deliverable
+Write the completed report to output/report.md.`
+});
+```
+
+The bundled CLI supports interactive login and persistent local profiles:
+
+```bash
+npm install -g @nodus-ai/sdk@preview
+nodus login
+nodus auth status
+nodus agents list
+```
+
+`nodus login` opens a browser, displays a one-time code, and waits for approval.
+The resulting revocable Workspace SDK key is stored in
+`~/.config/nodus/config.json` with file mode `0600`. Use `--profile NAME` or
+`NODUS_PROFILE` for multiple accounts and environments. `NODUS_API_KEY` and
+`NODUS_BASE_URL` always take precedence for CI and headless use. `nodus logout`
+revokes the key server-side and removes the local profile.
+
+The CLI also accepts direct environment credentials:
+
+```bash
+export NODUS_API_KEY="ndk_..."
+nodus sdk
+nodus capabilities
+nodus agents list
+nodus agents quota --agent "$NODUS_AGENT_ID" --refresh
+nodus agents configure --agent "$NODUS_AGENT_ID" --model gpt-5.5 --reasoning high
+nodus agents concurrency --agent "$NODUS_AGENT_ID" --max 12
+nodus run --provider codex --model gpt-5.5 --instructions "Return exactly: workspace smoke" --wait
+nodus runs list --status running
+nodus runs get --run <run-id>
+nodus runs events --run <run-id>
+nodus runs cancel --run <run-id>
+nodus runs artifact --run <run-id> --artifact <artifact-id>
+nodus session list # Active Sessions only; use --status destroyed --limit 100 for history
+nodus session create --agent "$NODUS_AGENT_ID" --persistent
+nodus session run --session <session-id> --instructions "Continue the task" --wait
+nodus session exec --session <session-id> --command "git status --short"
+nodus session events --session <session-id> --after 0
+nodus session telemetry --session <session-id>
+nodus session telemetry-history --session <session-id> --step-sec 60
+nodus session pause --session <session-id>
+nodus session resume --session <session-id>
+nodus session destroy --session <session-id>
+```
+
+Workspace keys can still target a specific Agent when deterministic routing is required:
+
+Create `run.mjs`:
+
+```js
+import { createNodus } from "@nodus-ai/sdk";
+
+const nodus = createNodus({
+  baseUrl: process.env.NODUS_BASE_URL,
+  apiKey: process.env.NODUS_API_KEY,
+  requestTimeoutMs: 15 * 60_000
+});
+
+const run = await nodus.agentRuns.createAndWait({
+  agentId: process.env.NODUS_AGENT_ID,
+  instructions: "Review this project and return the three highest-priority issues.",
+  timeoutSeconds: 1800
+});
+
+console.log(run.status);      // "completed"
+console.log(run.finalOutput); // final assistant response
+```
+
+Run it:
+
+```bash
+node run.mjs
+```
+
+`createAndWait()` returns an `AgentRun` directly. `create()` returns `{ run }`:
+
+```js
+const { run } = await nodus.agentRuns.create({
+  agentId: process.env.NODUS_AGENT_ID,
+  instructions: "Perform the task."
+});
+
+console.log(run.id);
+```
+
+Do not read `result.id` from `create()`. The ID is `result.run.id`.
+
+## Reliable create-then-wait pattern
+
+Use this pattern for batch jobs and unreliable networks:
+
+```js
+const { run } = await nodus.agentRuns.create({
+  agentId,
+  instructions,
+  idempotencyKey: `teacher:${teacherId}:review-v1`,
+  timeoutSeconds: 7200
+});
+
+const completed = await nodus.agentRuns.wait(run.id, {
+  timeoutMs: 10 * 60 * 60 * 1000,
+  pollIntervalMs: 5000
+});
+```
+
+`nodus sdk` (also available as `nodus capabilities`) prints the installed SDK
+version, every callable client method, feature flags such as Workspace
+credential failover and persistent session snapshots, plus the supported CLI
+commands. It does not make an authenticated API request, so it also works
+before `NODUS_API_KEY` is configured.
+
+The Session namespace also exposes `diff`, `ports`, `git`, and
+`terminalTicket` for workspace inspection and terminal clients. The Desktop
+Runtime namespace exposes `browse`, `read`, `ports`, `attach`, `reveal`, and
+`terminalTicket` in addition to lifecycle methods. These owner-wide methods
+require a Workspace-scoped SDK key.
+
+`nodus workspace build` excludes `.git` from the uploaded Docker context.
+Keep generated files, local dependencies, and secrets out of the selected
+context directory; the CLI does not reinterpret Docker ignore rules.
+
+Rules:
+
+1. Generate a stable `idempotencyKey` for each logical task.
+2. After `create()` returns a run ID, keep waiting on that same ID.
+3. If polling fails, retry `wait(run.id)`; do not create a new run.
+4. If the create response is lost, call `create()` again with the same `idempotencyKey`.
+5. Do not log complete prompts or API keys.
+
+## Concurrency and queues
+
+Submitting many promises only submits many runs. Actual execution is limited by the Agent's server-side `maxConcurrency`.
+
+This is Run concurrency, not a sandbox count. Nodus may use one sandbox per Run or multiple isolated runtime sessions inside one sandbox. SDK behavior stays the same.
+
+Railway replica count and `NODUS_AGENT_RUN_WORKER_CAPACITY` only control internal worker throughput. Postgres enforces `maxConcurrency` globally across all replicas.
+
+```js
+await nodus.agents.update(agentId, { modelId: "gpt-5.5", reasoningEffort: "high" });
+await nodus.agents.update(agentId, { modelId: null, reasoningEffort: null }); // Restore provider defaults
+await nodus.agents.setRunConcurrency(agentId, 160); // Valid range: 1-160
+
+const created = await Promise.all(
+  tasks.map((task) => nodus.agentRuns.create({
+    agentId,
+    instructions: task.instructions,
+    idempotencyKey: task.id
+  }))
+);
+```
+
+Runs above the available Agent concurrency remain `queued` and start automatically when a slot becomes available. Queue time does not consume the run's `timeoutSeconds`; the execution timer starts when Nodus claims the run.
+
+Before starting a replacement batch, inspect existing work instead of blindly creating duplicates:
+
+```js
+const queued = await nodus.agentRuns.list({ agentId, status: "queued" });
+const running = await nodus.agentRuns.list({ agentId, status: "running" });
+
+console.log({ queued: queued.runs.length, running: running.runs.length });
+```
+
+## List and cancel old runs
+
+`list()` returns at most 100 lightweight run summaries. Use `nextCursor` to continue.
+
+```js
+let cursor;
+const queuedRunIds = [];
+
+do {
+  const page = await nodus.agentRuns.list({
+    agentId,
+    status: "queued",
+    cursor,
+    limit: 100
+  });
+
+  queuedRunIds.push(...page.runs.map((run) => run.id));
+  cursor = page.nextCursor ?? undefined;
+} while (cursor);
+
+await nodus.agentRuns.cancelMany(queuedRunIds);
+```
+
+Only runs belonging to Agents allowed by the SDK key are visible or cancellable.
+
+## Batch runner
+
+The repository includes [`examples/batch-agent-runs.mjs`](https://github.com/Nodus-my/Nodus-backend/blob/main/examples/batch-agent-runs.mjs). It:
+
+- runs up to 80 tasks concurrently;
+- uses a stable SHA-256 `idempotencyKey` per task;
+- waits on the original run ID after creation;
+- writes completed results to JSONL;
+- can cancel old queued runs before starting.
+
+Input file:
+
+```json
+[
+  {
+    "instructions": "Review teacher 123 and return JSON.",
+    "timeoutSeconds": 7200,
+    "metadata": { "teacherId": "123" }
+  }
+]
+```
+
+Run:
+
+```bash
+node examples/batch-agent-runs.mjs tasks.json results.jsonl
+```
+
+Cancel old queued runs first:
+
+```bash
+NODUS_CANCEL_QUEUED=1 node examples/batch-agent-runs.mjs tasks.json results.jsonl
+```
+
+## File inputs
+
+Pass short-lived HTTPS URLs as task resources:
+
+```js
+const run = await nodus.agentRuns.createAndWait({
+  agentId,
+  instructions: "Inspect the attached project.",
+  resources: [{
+    url: signedUrl,
+    path: "input/project.zip",
+    contentType: "application/zip"
+  }]
+});
+```
+
+Never place credentials in resource URLs, filenames, metadata, or instructions.
+
+## Send images and other inline files
+
+Small binary payloads (screenshots, photos, PDFs) can be passed directly — no hosting required. Nodus stages the bytes privately and the agent reads the file from its workspace:
+
+```js
+import { readFile } from "node:fs/promises";
+
+const run = await nodus.agentRuns.createAndWait({
+  agentId,
+  instructions: "Describe what is wrong in the attached screenshot.",
+  resources: [{
+    contentBase64: (await readFile("screenshot.png")).toString("base64"),
+    path: "input/screenshot.png",
+    contentType: "image/png"
+  }]
+});
+```
+
+Sessions accept per-message attachments; the delivered turn references the staged file paths so the agent can open them with its file-reading tools:
+
+```js
+await nodus.sessions.runAndWait(session.id, "Compare this design against the implementation.", {
+  attachments: [{ name: "design.png", contentBase64: (await readFile("design.png")).toString("base64") }]
+});
+```
+
+The CLI reads local files for you:
+
+```bash
+nodus run --agent "$NODUS_AGENT_ID" --instructions "Describe the screenshot." --attach ./screenshot.png --wait
+nodus session run --session <session-id> --instructions "Look at this photo." --attach ./photo.jpg --wait
+```
+
+Limits: about 7 MB per file (10,000,000 base64 characters), 20 MB of inline content per run, and 4 attachments per session message. Attachment names must look like `name.ext` (letters, digits, `_`, `-`). Inline blobs are deleted when the run is cleaned up; session staging blobs are deleted immediately after the file lands in the workspace.
+
+## Goal mode
+
+Goal mode is supported only by Codex Agents:
+
+```js
+const run = await nodus.agentRuns.createAndWait({
+  agentId,
+  mode: "goal",
+  instructions: "Implement and verify the requested change."
+});
+```
+
+For all other providers, omit `mode` or use `"standard"`.
+
+## Artifacts
+
+Completed runs can return output artifacts:
+
+```js
+for (const artifact of run.artifacts) {
+  const { url, expiresAt } = await nodus.agentRuns.getArtifactDownloadUrl(run.id, artifact.id);
+  console.log(artifact.path, url, expiresAt);
+}
+```
+
+Artifact download URLs are short-lived. Artifact metadata reports `available` or `expired`.
+
+## Events and streaming
+
+```js
+for await (const event of nodus.agentRuns.stream(runId)) {
+  console.log(event.type, event.payload);
+  console.log(event.raw?.provider, event.raw?.type, event.raw?.payload);
+}
+```
+
+Use `wait()` when only the final result matters. Use `stream()` when progress events are needed. Both wait for runtime cleanup before finishing.
+
+SDK event methods request full event detail. `event.payload` is the stable,
+normalized client contract; `event.raw` contains the complete persisted provider
+event for rich desktop rendering. Raw payloads are not truncated, but they are
+still recursively sanitized before persistence: credentials and internal
+infrastructure identifiers are removed or redacted.
+
+## Persistent sessions
+
+Agent Runs are temporary and automatically cleaned up. Use Sessions only when the conversation must continue across multiple messages.
+
+A Session is intentionally bound to one Agent identity. Automatic credential failover applies to Workspace-scheduled Agent Runs created with `provider` and no `agentId`; it does not silently switch an existing Session to a different Agent. If a fixed Session loses its credential, start a new Workspace-scheduled Run when cross-Agent continuation is required.
+
+```js
+const { session } = await nodus.sessions.create({ agentId });
+
+const first = await nodus.sessions.runAndWait(session.id, "Inspect the repository.");
+const second = await nodus.sessions.runAndWait(session.id, "Now implement the fix.");
+
+const live = await nodus.sessions.telemetry(session.id);
+const history = await nodus.sessions.telemetryHistory(session.id, { stepSec: 60 });
+
+await nodus.sessions.pause(session.id);
+await nodus.sessions.resume(session.id);
+await nodus.sessions.destroy(session.id);
+```
+
+## Persistent sandboxes (Claude only)
+
+By default a sandbox is a single-shot workflow: it is reaped when idle and an
+agent run destroys it on completion. Pass `persistent: true` to keep the
+sandbox alive as an ongoing workspace instead. Claude only — its tmux harness
+accepts appended messages; other providers reject the flag.
+
+```js
+// A session whose sandbox is never idle-reaped (max sandbox lifetime, 24h;
+// pause/resume snapshots carry it beyond that):
+const { session } = await nodus.sessions.create({ agentId, persistent: true });
+
+// An agent run that leaves its workspace running. The prompt drops the
+// "deliver files to an output folder" single-shot instructions and treats
+// /workspace as an ongoing project. The completed run exposes `sessionId`,
+// and follow-up persistent runs on the same agent continue the same live
+// workspace:
+const run = await nodus.agentRuns.createAndWait({
+  agentId,
+  instructions: "Scaffold the service.",
+  persistent: true
+});
+await nodus.sessions.runAndWait(run.sessionId, "Now add tests.");
+```
+
+Persistent sessions are billed while live; `pause()`, `resume()` and
+`destroy()` work as usual.
+
+## Errors
+
+SDK failures throw `NodusError`:
+
+```js
+import { NodusError } from "@nodus-ai/sdk";
+
+try {
+  await nodus.agentRuns.wait(runId);
+} catch (error) {
+  if (error instanceof NodusError) {
+    console.error(error.status, error.code, error.retryAt, error.message, error.data);
+  }
+  throw error;
+}
+```
+
+Common statuses:
+
+- `400`: invalid request;
+- `401`: invalid SDK key;
+- `403`: SDK key is not allowed to use the Agent;
+- `404`: run or session not found;
+- `409`: runtime/auth conflict;
+- `504`: the local SDK wait deadline elapsed. The remote run may still be active; call `get()` or `wait()` again before creating another run.
+
+Agent Run creation also exposes stable business codes through `NodusError.code`:
+
+- `workspace_auth_unavailable`: every matching Workspace credential is invalid or unavailable;
+- `workspace_capacity_unavailable`: usable credentials exist, but every matching Agent is at capacity;
+- `quota_exhausted`: a specifically selected Agent is rate-limited; `NodusError.retryAt` contains the reset time when known.
+
+Session APIs expose stable codes for caller-actionable failures:
+
+- `invalid_session_request`, `invalid_session_list_request`, `invalid_session_list_cursor`, `invalid_session_message`, `invalid_session_wait_request`;
+- `session_not_found`, `session_turn_conflict`, `session_turn_not_found`;
+- `session_not_live`, `session_not_paused`, `session_checkpoint_unavailable`;
+- `desktop_runtime_offline`, `agent_auth_unavailable`, `workspace_revision_not_ready`.
+
+## API reference
+
+### `agents`
+
+- `list()`
+- `create({ provider, harness, modelId, displayName?, defaultResourceProfile?, maxConcurrency?, metadata? })`
+- `update(agentId, { modelId?, reasoningEffort? })`
+- `setRunConcurrency(agentId, maxConcurrency)`
+- `setConcurrency(agentId, maxConcurrency)` — compatibility alias
+- `quota(agentId, { refresh? })`
+
+### `agentRuns`
+
+- `create(input)` → `{ run }`
+- `createAndWait(input, waitOptions?)` → `AgentRun`
+- `get(runId)`
+- `list({ agentId?, status?, cursor?, limit? })`
+- `wait(runId, options?)`
+- `events(runId, { after? })` → normalized events plus sanitized `raw` provider payloads
+- `stream(runId, options?)`
+- `cancel(runId)`
+- `cancelMany(runIds)`
+- `getArtifactDownloadUrl(runId, artifactId)`
+
+### `sessions`
+
+- `list({ status?, limit?, cursor? })` → `{ sessions, nextCursor }`; defaults to active Sessions only
+- `create({ agentId })`
+- `get(sessionId)`
+- `telemetry(sessionId)` / `telemetryHistory(sessionId, { startMs?, endMs?, stepSec? })`
+- `diff(sessionId, knownHash?)` / `ports(sessionId, knownHash?)`
+- `git(sessionId, { action, message?, path? })`
+- `terminalTicket(sessionId)`
+- `run(sessionId, text, { attachments? })`
+- `execWorkspace(sessionId, command, timeoutSeconds?)`
+- `runAndWait(sessionId, text, options?)` — options may include `attachments`
+- `waitForIdle(sessionId, options)`
+- `events(sessionId, { after? })` → normalized events plus sanitized `raw` provider payloads
+- `stream(sessionId, options?)`
+- `pause(sessionId)`
+- `resume(sessionId)`
+- `destroy(sessionId)`
+
+### `workspaces` (runtime images and revisions)
+
+This namespace manages immutable execution environments and interactive builders. Agent Workspace membership and routing are exposed through the Workspace-scoped key plus `agents`, `agentRuns`, and `sessions`.
+These methods use the same Workspace SDK key as Agents, Runs, and Sessions.
+
+- `create({ name, defaultResourceProfile? })`
+- `list()` / `get(workspaceId)` / `archive(workspaceId)` / `revisions(workspaceId)`
+- `startBuilder(workspaceId, { baseRevisionId? })` / `getBuild(buildId)`
+- `exec(buildId, command, timeoutSeconds?)`
+- `listFiles(buildId, path?)` / `readFile(buildId, path)` / `writeFile(buildId, path, content)`
+- `upload(buildId, path, content)` / `download(buildId, path)`
+- `publish(buildId)` / `destroyBuilder(buildId)`
+- `createContextUpload(workspaceId)`
+- `buildFromDockerfile(workspaceId, input)` / `buildFromContext(workspaceId, input)`
+
+### `desktopRuntimes`
+
+These methods require a Workspace-scoped SDK key because Desktop Runtimes are owner-wide execution resources rather than properties of one Agent.
+
+- `list()`
+- `get(desktopRuntimeId)`
+- `rename(desktopRuntimeId, name)`
+- `grants(desktopRuntimeId)`
+- `grant(desktopRuntimeId, agentId, "full" | "files_only")`
+- `revokeGrant(desktopRuntimeId, agentId)`
+- `browse(desktopRuntimeId, { path?, dirsOnly? })` / `read(desktopRuntimeId, path)`
+- `ports(desktopRuntimeId, knownHash?)`
+- `attach(desktopRuntimeId, { name, contentBase64 })`
+- `reveal(desktopRuntimeId, { path, app? })`
+- `terminalTicket(desktopRuntimeId)`
+- `disconnect(desktopRuntimeId)`; disconnected runtimes are hidden from `list()` and `get()`
+
+Terminal tickets are short-lived bearer credentials. Pass them directly to
+the WebSocket client and do not persist or log them.
+
+The same paired computer can serve multiple Agents with independent permissions. `files_only` grants expose only list, read, and write operations; `full` grants additionally allow commands, PTYs, local skills/plugins, and local MCP. Desktop daemons use bounded concurrency through `NODUS_DESKTOP_CONCURRENCY` (default `4`, maximum `16`). Runs remain queued with `desktopWaiting: true` while the computer is offline, so execution timeout and Goal turns do not start until it reconnects.
+
+## Checklist for coding agents
+
+Before writing a Nodus integration, verify all of these:
+
+- Import from `@nodus-ai/sdk`, not a repository-relative `sdk/dist` path.
+- Read `create()` results from `{ run }`.
+- Give every logical task a stable `idempotencyKey`.
+- Keep application metadata under your own keys; Nodus rejects reserved runtime and failover metadata keys.
+- Retry polling against the same run ID.
+- Inspect/cancel old queued runs before replacing a failed batch.
+- Treat `timeoutSeconds` as execution time, not queue time.
+- Keep API keys and full prompts out of logs.

package/dist/cli.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import {execFile}from'child_process';import {readFile,writeFile,mkdtemp,rm,mkdir,chmod,rename}from'fs/promises';import {platform,hostname,tmpdir,homedir}from'os';import y from'path';import {promisify}from'util';var h=class extends Error{constructor(u,f,i){super(u);this.status=f;this.data=i;this.name="NodusError";let b=i&&typeof i=="object"?i:null;this.code=typeof b?.code=="string"?b.code:null,this.retryAt=typeof b?.retryAt=="string"?b.retryAt:null;}status;data;code;retryAt},E=new Set(["completed","failed","cancelled","timed_out"]);function G(l){let s=l.baseUrl.replace(/\/+$/,""),u=l.fetch??globalThis.fetch,f=l.requestTimeoutMs??9e5,i=async(e,t,r,o={})=>{let p=new AbortController,n=o.timeoutMs??f,a=()=>p.abort(o.signal?.reason);o.signal?.addEventListener("abort",a,{once:true});let d=setTimeout(()=>p.abort(new Error("Nodus request timed out.")),n);try{let c=await u(`${s}${t}`,{method:e,headers:{authorization:`Bearer ${l.apiKey}`,...r===void 0?{}:{"content-type":"application/json"}},...r===void 0?{}:{body:JSON.stringify(r)},signal:p.signal}),g=await c.json().catch(()=>({}));if(!c.ok)throw new h(String(g.error??`Nodus request failed: ${c.status}`),c.status,g);return g}catch(c){throw o.signal?.aborted?new h("Nodus request was aborted.",499,null):p.signal.aborted?new h("Nodus request timed out.",504,{method:e,path:t,timeoutMs:n}):c}finally{clearTimeout(d),o.signal?.removeEventListener("abort",a);}},b=async(e,t={})=>{let r=Date.now()+(t.timeoutMs??18e5),o=t.pollIntervalMs??1e3;for(;Date.now()<r;){if(t.signal?.aborted)throw new h("Nodus agent run was aborted.",499,null);let{run:p}=await i("GET",`/agent-runs/${encodeURIComponent(e)}?view=status`,void 0,{signal:t.signal});if(E.has(p.status)&&!p.cleanupCompletedAt){await new Promise(n=>setTimeout(n,o));continue}if(p.status==="completed")return (await i("GET",`/agent-runs/${encodeURIComponent(e)}`)).run;if(E.has(p.status))throw new h(p.error??`Nodus agent run ${p.status}.`,502,{run:p});await new Promise(n=>setTimeout(n,o));}throw new h("Timed out waiting for Nodus agent run.",504,{runId:e})},A=(e,t={})=>i("GET",`/agent-runs/${encodeURIComponent(e)}/events?after=${t.after??0}&detail=full`),v=(e,t={})=>i("GET",`/runtime-sessions/${encodeURIComponent(e)}/events?after=${t.after??0}&detail=full`),C=async(e,t)=>{let r=Date.now()+(t.timeoutMs??144e5),o=t.afterSequence??0,p=[];for(;Date.now()<r;){if(t.signal?.aborted)throw new h("Nodus session turn was aborted.",499,null);let n=Math.max(10,Math.ceil((r-Date.now())/1e3)),a=Math.min(840,t.waitSeconds??840,n),d=await i("POST",`/runtime-sessions/${encodeURIComponent(e)}/wait?detail=full`,{turnId:t.turnId,afterSequence:o,timeoutSeconds:a},{signal:t.signal,timeoutMs:Math.max(f,(a+30)*1e3)});p.push(...d.events),o=Math.max(o,d.lastSequence);let c={...d,events:p};if(d.status==="completed")return c;if(d.status==="failed")throw new h(d.error??"Nodus session turn failed.",502,c)}throw new h("Timed out waiting for Nodus session turn.",504,{sessionId:e,turnId:t.turnId,afterSequence:o})},k=async function*(e,t={},r){let o=t.after??0,p=t.pollIntervalMs??1e3;for(;!t.signal?.aborted;){let{events:n}=await e(o,t.signal);for(let a of n)o=Math.max(o,a.sequence),yield a;if(r&&await r())return;await new Promise(a=>setTimeout(a,p));}};return {agents:{list:async()=>(await i("GET","/agent-runs/agents")).agents,create:e=>i("POST","/agent-runs/agents",e),update:(e,t)=>i("PATCH",`/agent-runs/agents/${encodeURIComponent(e)}/configuration`,t),setRunConcurrency:(e,t)=>i("POST",`/agent-runs/agents/${encodeURIComponent(e)}/concurrency`,{maxConcurrency:t}),quota:(e,t)=>i("GET",`/agent-runs/agents/${encodeURIComponent(e)}/quota${t?.refresh?"?refresh=1":""}`),setConcurrency:(e,t)=>i("POST",`/agent-runs/agents/${encodeURIComponent(e)}/concurrency`,{maxConcurrency:t})},agentRuns:{list:(e={})=>{let t=new URLSearchParams;e.agentId&&t.set("agentId",e.agentId),e.status&&t.set("status",e.status),e.cursor&&t.set("cursor",e.cursor),e.limit&&t.set("limit",String(e.limit));for(let[r,o]of Object.entries(e.metadata??{}))t.append("metadata",`${r}=${o}`);return i("GET",`/agent-runs?${t}`)},queueStats:()=>i("GET","/agent-runs/queue-stats"),create:e=>i("POST","/agent-runs",e),get:e=>i("GET",`/agent-runs/${encodeURIComponent(e)}`),events:A,stream:(e,t)=>k((r,o)=>i("GET",`/agent-runs/${encodeURIComponent(e)}/events?after=${r}&detail=full`,void 0,{signal:o}),t,async()=>{let{run:r}=await i("GET",`/agent-runs/${encodeURIComponent(e)}?view=status`);return E.has(r.status)&&!!r.cleanupCompletedAt}),cancel:e=>i("POST",`/agent-runs/${encodeURIComponent(e)}/cancel`),cancelMany:e=>Promise.all(e.map(async t=>(await i("POST",`/agent-runs/${encodeURIComponent(t)}/cancel`)).run)),getArtifactDownloadUrl:(e,t)=>i("GET",`/agent-runs/${encodeURIComponent(e)}/artifacts/${encodeURIComponent(t)}/download`),wait:b,createAndWait:async(e,t)=>{let{run:r}=await i("POST","/agent-runs",e);return r.status==="completed"&&r.cleanupCompletedAt?r:b(r.id,t)}},sessions:{create:e=>i("POST","/runtime-sessions",e),list:(e={})=>{let t=new URLSearchParams(Object.entries(e).filter(r=>r[1]!==void 0).map(([r,o])=>[r,String(o)]));return i("GET",`/runtime-sessions${t.size?`?${t}`:""}`)},get:e=>i("GET",`/runtime-sessions/${encodeURIComponent(e)}`),telemetry:e=>i("GET",`/runtime-sessions/${encodeURIComponent(e)}/telemetry`),telemetryHistory:(e,t={})=>{let r=new URLSearchParams(Object.entries(t).filter(o=>o[1]!==void 0).map(([o,p])=>[o,String(p)]));return i("GET",`/runtime-sessions/${encodeURIComponent(e)}/telemetry-history${r.size?`?${r}`:""}`)},diff:(e,t)=>i("GET",`/runtime-sessions/${encodeURIComponent(e)}/diff${t?`?known=${encodeURIComponent(t)}`:""}`),terminalTicket:e=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/terminal-ticket`),ports:(e,t)=>i("GET",`/runtime-sessions/${encodeURIComponent(e)}/ports${t?`?known=${encodeURIComponent(t)}`:""}`),git:(e,t)=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/git`,t),run:(e,t,r={})=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/messages`,{text:t,...r.attachments?.length?{attachments:r.attachments}:{}}),execWorkspace:(e,t,r)=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/workspace/exec`,{cmd:t,...r?{timeoutSeconds:r}:{}},{timeoutMs:r?Math.max(f,(r+30)*1e3):f}),waitForIdle:C,runAndWait:async(e,t,r={})=>{let{attachments:o,...p}=r,{turn:n}=await i("POST",`/runtime-sessions/${encodeURIComponent(e)}/messages`,{text:t,...o?.length?{attachments:o}:{}});return C(e,{...p,turnId:n.id,afterSequence:n.acceptedSequence})},events:v,stream:(e,t)=>k((r,o)=>i("GET",`/runtime-sessions/${encodeURIComponent(e)}/events?after=${r}&detail=full`,void 0,{signal:o}),t),pause:e=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/pause`),resume:e=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/resume`),activate:e=>i("POST",`/runtime-sessions/${encodeURIComponent(e)}/activate`),destroy:e=>i("DELETE",`/runtime-sessions/${encodeURIComponent(e)}`)},workspaces:{create:e=>i("POST","/workspace-runtimes",e),list:async()=>(await i("GET","/workspace-runtimes")).workspaces,get:e=>i("GET",`/workspace-runtimes/${encodeURIComponent(e)}`),archive:e=>i("DELETE",`/workspace-runtimes/${encodeURIComponent(e)}`),revisions:async e=>{let t=await i("GET",`/workspace-runtimes/${encodeURIComponent(e)}/revisions`);if(!Array.isArray(t.revisions))throw new Error("Invalid Workspace revisions response.");return t.revisions},startBuilder:(e,t={})=>i("POST",`/workspace-runtimes/${encodeURIComponent(e)}/builds`,{mode:"interactive",...t}),getBuild:e=>i("GET",`/workspace-builds/${encodeURIComponent(e)}`),exec:(e,t,r)=>i("POST",`/workspace-builds/${encodeURIComponent(e)}/exec`,{cmd:t,...r?{timeoutSeconds:r}:{}},{timeoutMs:r?Math.max(f,(r+30)*1e3):f}),listFiles:(e,t="/")=>i("GET",`/workspace-builds/${encodeURIComponent(e)}/files?path=${encodeURIComponent(t)}`),readFile:(e,t)=>i("GET",`/workspace-builds/${encodeURIComponent(e)}/file?path=${encodeURIComponent(t)}`),writeFile:(e,t,r)=>i("PUT",`/workspace-builds/${encodeURIComponent(e)}/file`,{path:t,contentBase64:Buffer.from(r).toString("base64")}),upload:(e,t,r)=>i("PUT",`/workspace-builds/${encodeURIComponent(e)}/file`,{path:t,contentBase64:Buffer.from(r).toString("base64")}),download:async(e,t)=>Buffer.from((await i("GET",`/workspace-builds/${encodeURIComponent(e)}/file?path=${encodeURIComponent(t)}`)).contentBase64,"base64"),publish:e=>i("POST",`/workspace-builds/${encodeURIComponent(e)}/publish`),destroyBuilder:e=>i("DELETE",`/workspace-builds/${encodeURIComponent(e)}`),createContextUpload:e=>i("POST",`/workspace-runtimes/${encodeURIComponent(e)}/context-upload`),buildFromDockerfile:(e,t)=>i("POST",`/workspace-runtimes/${encodeURIComponent(e)}/builds`,{mode:"dockerfile",...t}),buildFromContext:(e,t)=>i("POST",`/workspace-runtimes/${encodeURIComponent(e)}/builds`,{mode:"dockerfile",...t})},desktopRuntimes:{list:async(e={})=>(await i("GET",`/desktop-runtimes${e.agentId?`?agentId=${encodeURIComponent(e.agentId)}`:""}`)).desktopRuntimes,get:e=>i("GET",`/desktop-runtimes/${encodeURIComponent(e)}`),rename:(e,t)=>i("PATCH",`/desktop-runtimes/${encodeURIComponent(e)}`,{name:t}),bind:(e,t)=>i("PATCH",`/desktop-runtimes/${encodeURIComponent(e)}/bind`,{agentId:t}),grants:e=>i("GET",`/desktop-runtimes/${encodeURIComponent(e)}/grants`),grant:(e,t,r)=>i("PUT",`/desktop-runtimes/${encodeURIComponent(e)}/grants/${encodeURIComponent(t)}`,{permission:r}),revokeGrant:(e,t)=>i("DELETE",`/desktop-runtimes/${encodeURIComponent(e)}/grants/${encodeURIComponent(t)}`),browse:(e,t={})=>i("POST",`/desktop-runtimes/${encodeURIComponent(e)}/browse`,t),read:(e,t)=>i("POST",`/desktop-runtimes/${encodeURIComponent(e)}/read`,{path:t}),ports:(e,t)=>i("POST",`/desktop-runtimes/${encodeURIComponent(e)}/ports`,t?{known:t}:{}),attach:(e,t)=>i("POST",`/desktop-runtimes/${encodeURIComponent(e)}/attach`,t),terminalTicket:e=>i("POST",`/desktop-runtimes/${encodeURIComponent(e)}/terminal-ticket`),reveal:(e,t)=>i("POST",`/desktop-runtimes/${encodeURIComponent(e)}/reveal`,t),disconnect:e=>i("DELETE",`/desktop-runtimes/${encodeURIComponent(e)}`)}}}var q="0.4.0-preview.47";function L(){return {workspaceCredentialFailover:true,fixedSessionIdentity:true,persistentSessionSnapshots:true,runtimeResourceTelemetry:true,cliIntrospection:true,inlineRunResources:true,sessionAttachments:true,providers:["claude","codex","grok","gemini","cursor","factory"]}}function W(){return [{command:"nodus login|auth status|logout",description:"Authorize the CLI in a browser and manage local credential profiles."},{command:"nodus sdk",description:"List installed SDK methods, features, and CLI commands."},{command:"nodus capabilities",description:"Alias for `nodus sdk`."},{command:"nodus agents list|quota|configure|concurrency",description:"Inspect and configure every Agent available to the SDK key."},{command:"nodus agents deploy --provider <provider> --api-key <key> [--name <displayName>] [--owner-tag <tag>]",description:"Create an Agent in the key's Workspace and authenticate it with a provider API key."},{command:"nodus run --agent <id> --prompt <text> [--goal-file <markdown>] [--attach <file>]... [--wait]",description:"Run one task on a specific Agent. Goal Markdown is stored separately from the initial prompt."},{command:"nodus run --provider <provider> [--model <model>] --prompt <text> [--goal-file <markdown>] [--attach <file>]... [--wait]",description:"Let a Workspace key route a task; --goal-file enables Codex Goal mode."},{command:"nodus runs list|get|events|cancel|artifact",description:"Inspect and control existing Agent Runs, including artifact download URLs."},{command:"nodus session list|create|get|run|exec|events|telemetry|telemetry-history|diff|ports|git|terminal-ticket|pause|resume|destroy",description:"List, create, observe, and control persistent or temporary runtime Sessions."},{command:"nodus workspace create|list|get|revisions|archive|build",description:"Create, inspect, archive, and build persistent Workspace runtimes."},{command:"nodus workspace builder start|exec|put|get|files|status|publish|destroy",description:"Build and publish Workspace revisions interactively."},{command:"nodus desktop connect|list|get|rename|browse|read|ports|attach|reveal|terminal-ticket|disconnect",description:"Attach, inspect, control, or disconnect a local Desktop runtime."},{command:"nodus desktop bind --desktop <id> [--agent <id>|--none]",description:"Bind a Desktop runtime to one Agent (only that Agent's runs/sessions may use it) or unbind it."}]}function j(l){let s=[],u=(f,i="")=>{if(!(!f||typeof f!="object"))for(let[b,A]of Object.entries(f)){let v=i?`${i}.${b}`:b;typeof A=="function"?s.push(v):u(A,v);}};return u(l),s.sort()}function T(l){let s=l?.trim()||"default";if(!/^[A-Za-z0-9._-]{1,64}$/.test(s))throw new Error("Profile name must use 1-64 letters, numbers, dots, underscores, or hyphens.");return s}function P(l){let s=new URL(l);if(s.protocol!=="http:"&&s.protocol!=="https:")throw new Error("Nodus base URL must use HTTP or HTTPS.");return s.toString().replace(/\/$/,"")}var I=()=>process.env.NODUS_CONFIG_FILE||y.join(homedir(),".config","nodus","config.json");async function U(){try{let l=JSON.parse(await readFile(I(),"utf8"));return {activeProfile:l.activeProfile||"default",profiles:l.profiles||{}}}catch{return {activeProfile:"default",profiles:{}}}}async function O(l){let s=I();await mkdir(y.dirname(s),{recursive:true,mode:448});let u=`${s}.${process.pid}.tmp`;await writeFile(u,`${JSON.stringify(l,null,2)}
+`,{mode:384}),await chmod(u,384),await rename(u,s),await chmod(s,384);}async function z(l){let s=await U(),u=T(l||process.env.NODUS_PROFILE||s.activeProfile),f=s.profiles[u];return {profileName:u,apiKey:process.env.NODUS_API_KEY||f?.apiKey||"",baseUrl:P(process.env.NODUS_BASE_URL||f?.baseUrl||"https://nodus-api-preview-production.up.railway.app"),source:process.env.NODUS_API_KEY?"environment":f?"profile":"none"}}var $=promisify(execFile);async function ae(){let l=process.argv.slice(2),s=n=>{let a=l.indexOf(n);if(a<0)return;let d=l[a+1];if(!d||d.startsWith("--"))throw new Error(`Missing value for ${n}.`);return d},u=n=>{let a=s(n);if(!a)throw new Error(`Missing required option ${n}.`);return a},f=n=>{let a=[];for(let d=0;d<l.length;d+=1){if(l[d]!==n)continue;let c=l[d+1];if(!c||c.startsWith("--"))throw new Error(`Missing value for ${n}.`);a.push(c);}return a},i={png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",webp:"image/webp",svg:"image/svg+xml",pdf:"application/pdf"},b=n=>{let a=(y.extname(n).slice(1).replace(/[^A-Za-z0-9]/g,"")||"bin").slice(0,8),d=y.basename(n,y.extname(n)).replace(/[^A-Za-z0-9_-]/g,"-").slice(0,60);return /^[A-Za-z0-9]/.test(d)||(d=`f${d}`.slice(0,60)),`${d}.${a}`},A=async n=>Promise.all(n.map(async a=>({name:b(a),contentBase64:(await readFile(a)).toString("base64")}))),v=n=>{if(!n.length)return;let a={};for(let d of n){let c=d.indexOf("=");if(c<1)throw new Error(`--metadata expects key=value, got: ${d}`);a[d.slice(0,c)]=d.slice(c+1);}return a},C=async(n,a,d)=>{let c=new Array(n.length),g=0;return await Promise.all(Array.from({length:Math.min(a,n.length)},async()=>{for(;g<n.length;){let m=g;g+=1,c[m]=await d(n[m],m);}})),c},k=await z(s("--profile")),e=G({baseUrl:k.baseUrl,apiKey:k.apiKey}),t=n=>process.stdout.write(JSON.stringify(n,null,2)+`
+`),[r,o,p]=l;if(!r||r==="help"||r==="--help"||r==="-h")return process.stdout.write(["Usage:","  nodus login [--profile <name>] [--base-url <url>] [--no-open]","  nodus auth status [--profile <name>]","  nodus logout [--profile <name>]","  nodus sdk","  nodus capabilities","  nodus agents list","  nodus agents deploy --provider <provider> --api-key <key> [--name <displayName>] [--model <id>] [--owner-tag <tag>]","  nodus agents quota --agent <id> [--refresh]","  nodus agents configure --agent <id> [--model <id>|--default-model] [--reasoning <level>|--default-reasoning]","  nodus agents concurrency --agent <id> --max <1-160>","  nodus run --agent <id> (--prompt <text>|--instructions <text>) [--goal <markdown>|--goal-file <path>] [--output-schema <file>] [--attach <file>]... [--metadata key=value]... [--wait]","  nodus run --provider <provider> [--model <model>] (--prompt <text>|--instructions <text>) [--goal <markdown>|--goal-file <path>] [--output-schema <file>] [--attach <file>]... [--metadata key=value]... [--wait]","  nodus runs list [--agent <id>] [--status <status>] [--metadata key=value]... [--limit <n>] [--cursor <cursor>]","  nodus runs queue","  nodus runs create --from-jsonl <file> [--concurrency <n>]","  nodus runs export [--agent <id>] [--status <status>] [--concurrency <n>]","  nodus runs get|events|cancel --run <id>","  nodus runs artifact --run <id> --artifact <id> [--output <file>]","  nodus session list","  nodus session create --agent <id> [--persistent]","  nodus session get|events|telemetry|telemetry-history|diff|ports|terminal-ticket|pause|resume|activate|destroy --session <id>","  nodus session git --session <id> --action commit|revert [--message <text>] [--path <path>]","  nodus session run --session <id> --instructions <text> [--attach <file>]... [--wait]","  nodus session exec --session <id> --command <shell command>","  nodus desktop connect --folder <dir>","  nodus desktop list","  nodus desktop get --desktop <id>","  nodus desktop rename --desktop <id> --name <name>","  nodus desktop browse --desktop <id> [--path <path>] [--files]","  nodus desktop read --desktop <id> --path <path>","  nodus desktop ports|terminal-ticket --desktop <id>","  nodus desktop attach --desktop <id> --file <path> [--name <name>]","  nodus desktop reveal --desktop <id> --path <path> [--app finder|editor|terminal]","  nodus desktop bind --desktop <id> [--agent <id>|--none]","  nodus desktop disconnect --desktop <id>","  nodus workspace create [--name <name>]","  nodus workspace list","  nodus workspace get|revisions|archive --workspace <id>","  nodus workspace build --workspace <id> [--context <dir>] [--dockerfile <path>]","  nodus workspace builder start --workspace <id> [--base-revision <id>]","  nodus workspace builder exec --build <id> -- <command>","  nodus workspace builder put --build <id> --file <local> [--path <remote>]","  nodus workspace builder get --build <id> --path <remote> [--output <local>]","  nodus workspace builder files|status|publish|destroy --build <id>","","Environment: NODUS_API_KEY, optional NODUS_BASE_URL and NODUS_PROFILE",""].join(`
+`));if(r==="login"){let n=T(s("--profile")||process.env.NODUS_PROFILE),a=P(s("--base-url")||process.env.NODUS_BASE_URL||"https://nodus-api-production-d291.up.railway.app"),d=await fetch(`${a}/cli-auth/start`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({name:hostname(),platform:platform()})}),c=await d.json();if(!d.ok||!c.deviceCode||!c.userCode||!c.verificationUri)throw new Error(c.error||`Login start failed: ${d.status}`);console.log(`
+Authorize Nodus CLI in your browser:
+  code: ${c.userCode}
+  open: ${c.verificationUri}
+`),l.includes("--no-open")||await ue(c.verificationUri).catch(()=>{});let g=Date.now()+(c.expiresIn??600)*1e3;for(;Date.now()<g;){await new Promise(x=>setTimeout(x,(c.interval??3)*1e3));let m=await fetch(`${a}/cli-auth/poll`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({deviceCode:c.deviceCode})}),w=await m.json();if(!m.ok)throw new Error(w.error||`Login poll failed: ${m.status}`);if(w.status!=="complete"||!w.apiKey)continue;let S=await U();S.activeProfile=n,S.profiles[n]={apiKey:w.apiKey,baseUrl:a,keyId:w.keyId,createdAt:new Date().toISOString()},await O(S),console.log(`Logged in as profile ${n}. Credentials saved to ${I()}.`);return}throw new Error("Login timed out. Run `nodus login` again.")}if(r==="auth"&&o==="status"){if(!k.apiKey)return t({authenticated:false,profile:k.profileName,source:k.source,baseUrl:k.baseUrl,configFile:I()});try{let n=await e.agents.list();return t({authenticated:!0,profile:k.profileName,source:k.source,baseUrl:k.baseUrl,configFile:I(),agentCount:n.length})}catch(n){if(n instanceof h&&n.status===401)return t({authenticated:false,profile:k.profileName,source:k.source,baseUrl:k.baseUrl,configFile:I(),error:n.message});throw n}}if(r==="logout"){let n=await U(),a=T(s("--profile")||process.env.NODUS_PROFILE||n.activeProfile),d=n.profiles[a];if(!d){console.log(`Profile ${a} is not logged in.`);return}let c=await fetch(`${d.baseUrl.replace(/\/$/,"")}/cli-auth/logout`,{method:"POST",headers:{authorization:`Bearer ${d.apiKey}`}});if(!c.ok&&c.status!==401){let g=await c.json().catch(()=>({}));throw new Error(g.error||`Logout failed: ${c.status}`)}delete n.profiles[a],n.activeProfile===a&&(n.activeProfile=Object.keys(n.profiles)[0]||"default"),await O(n),console.log(`Logged out profile ${a}.`);return}if(r==="capabilities"||r==="sdk")return t({sdkVersion:q,capabilities:j(e),features:L(),commands:W()});if(r==="agents"){if(o==="list")return t({agents:await e.agents.list()});if(o==="deploy"){let a=u("--provider"),d=u("--api-key"),c=s("--name"),g=s("--model"),m=s("--owner-tag"),w={...g?{modelId:g}:{},...m?{ownerTag:m}:{}};return t({agent:await e.agents.deploy({provider:a,apiKey:d,...c?{displayName:c}:{},...Object.keys(w).length?{metadata:w}:{}})})}let n=u("--agent");if(o==="quota")return t(await e.agents.quota(n,{refresh:l.includes("--refresh")}));if(o==="configure"){let a=s("--reasoning");if(a&&!["low","medium","high","xhigh","max"].includes(a))throw new Error("--reasoning must be low, medium, high, xhigh, or max.");let d={...l.includes("--default-model")?{modelId:null}:s("--model")?{modelId:s("--model")}:{},...l.includes("--default-reasoning")?{reasoningEffort:null}:a?{reasoningEffort:a}:{}};if(Object.keys(d).length===0)throw new Error("Provide --model, --default-model, --reasoning, or --default-reasoning.");return t(await e.agents.update(n,d))}if(o==="concurrency"){let a=Number(u("--max"));if(!Number.isInteger(a)||a<1||a>160)throw new Error("--max must be an integer from 1 to 160.");return t(await e.agents.setRunConcurrency(n,a))}}if(r==="runs"){if(o==="list")return t(await e.agentRuns.list({agentId:s("--agent"),status:s("--status"),limit:s("--limit")?Number(s("--limit")):void 0,cursor:s("--cursor"),metadata:v(f("--metadata"))}));if(o==="queue")return t(await e.agentRuns.queueStats());if(o==="create"&&s("--from-jsonl")){let a=s("--concurrency")?Number(s("--concurrency")):8,d=(await readFile(u("--from-jsonl"),"utf8")).split(`
+`).map(c=>c.trim()).filter(Boolean);await C(d,a,async(c,g)=>{try{process.stdout.write(JSON.stringify({line:g+1,...await e.agentRuns.create(JSON.parse(c))})+`
+`);}catch(m){process.stdout.write(JSON.stringify({line:g+1,error:m instanceof Error?m.message:String(m)})+`
+`);}});return}if(o==="export"){let a=s("--concurrency")?Number(s("--concurrency")):8,d={agentId:s("--agent"),status:s("--status")},c=[],g=s("--cursor");do{let w=await e.agentRuns.list({...d,limit:100,cursor:g});c.push(...w.runs),g=w.nextCursor??void 0;}while(g);let m=await C(c,a,async w=>(await e.agentRuns.get(w.id)).run);for(let w of m)process.stdout.write(JSON.stringify(w)+`
+`);return}let n=u("--run");if(o==="get")return t(await e.agentRuns.get(n));if(o==="events")return t(await e.agentRuns.events(n));if(o==="cancel")return t(await e.agentRuns.cancel(n));if(o==="artifact"){let a=await e.agentRuns.getArtifactDownloadUrl(n,u("--artifact")),d=s("--output");if(!d)return t(a);let c=await fetch(a.url);if(!c.ok)throw new Error(`Artifact download failed: ${c.status}`);return await writeFile(d,Buffer.from(await c.arrayBuffer())),t({ok:true,output:d})}}if(r==="session"){if(o==="list")return t(await e.sessions.list({status:s("--status"),limit:s("--limit")?Number(s("--limit")):void 0,cursor:s("--cursor")}));if(o==="create")return t(await e.sessions.create({agentId:u("--agent"),workspaceRevisionId:s("--workspace-revision"),desktopRuntimeId:s("--desktop-runtime"),...l.includes("--persistent")?{persistent:true}:{}}));let n=u("--session");if(o==="get")return t(await e.sessions.get(n));if(o==="events")return t(await e.sessions.events(n,{after:s("--after")?Number(s("--after")):void 0}));if(o==="telemetry")return t(await e.sessions.telemetry(n));if(o==="telemetry-history")return t(await e.sessions.telemetryHistory(n,{startMs:s("--start-ms")?Number(s("--start-ms")):void 0,endMs:s("--end-ms")?Number(s("--end-ms")):void 0,stepSec:s("--step-sec")?Number(s("--step-sec")):void 0}));if(o==="diff")return t(await e.sessions.diff(n,s("--known")));if(o==="ports")return t(await e.sessions.ports(n,s("--known")));if(o==="terminal-ticket")return t(await e.sessions.terminalTicket(n));if(o==="git"){let a=u("--action");if(a!=="commit"&&a!=="revert")throw new Error("--action must be commit or revert.");return t(await e.sessions.git(n,{action:a,message:s("--message"),path:s("--path")}))}if(o==="run"){let a=await A(f("--attach")),d=a.length?{attachments:a}:{};return t(l.includes("--wait")?await e.sessions.runAndWait(n,u("--instructions"),d):await e.sessions.run(n,u("--instructions"),d))}if(o==="exec")return t(await e.sessions.execWorkspace(n,u("--command"),s("--timeout")?Number(s("--timeout")):void 0));if(o==="pause")return t(await e.sessions.pause(n));if(o==="resume")return t(await e.sessions.resume(n));if(o==="activate")return t(await e.sessions.activate(n));if(o==="destroy")return t(await e.sessions.destroy(n))}if(r==="workspace"&&o==="create")return t(await e.workspaces.create({name:s("--name")??"Workspace"}));if(r==="workspace"&&o==="list")return t(await e.workspaces.list());if(r==="workspace"&&o==="get")return t(await e.workspaces.get(u("--workspace")));if(r==="workspace"&&o==="archive")return t(await e.workspaces.archive(u("--workspace")));if(r==="workspace"&&o==="revisions")return t(await e.workspaces.revisions(u("--workspace")));if(r==="workspace"&&o==="builder"){if(p==="start")return t(await e.workspaces.startBuilder(u("--workspace"),{baseRevisionId:s("--base-revision")}));if(p==="exec"){let n=l.includes("--")?l.slice(l.indexOf("--")+1).join(" "):"";if(!n)throw new Error("Missing command after --.");return t(await e.workspaces.exec(u("--build"),n))}if(p==="put"){let n=u("--file");return t(await e.workspaces.upload(u("--build"),s("--path")??y.basename(n),await readFile(n)))}if(p==="get"){let n=await e.workspaces.download(u("--build"),u("--path")),a=s("--output");if(a)return await writeFile(a,n),t({ok:true,output:a});process.stdout.write(n);return}if(p==="files")return t(await e.workspaces.listFiles(u("--build"),s("--path")));if(p==="publish")return t(await e.workspaces.publish(u("--build")));if(p==="destroy")return t(await e.workspaces.destroyBuilder(u("--build")));if(p==="status")return t(await e.workspaces.getBuild(u("--build")))}if(r==="workspace"&&(o==="build"||o==="dockerfile-build")){let n=u("--workspace"),a=y.resolve(s("--context")??"."),d=await mkdtemp(y.join(tmpdir(),"nodus-workspace-"));try{let c=y.join(d,"context.tar.gz");await $("tar",["--exclude=.git","-czf",c,"-C",a,"."]);let g=await e.workspaces.createContextUpload(n),m=await fetch(g.uploadUrl,{method:"PUT",headers:{"content-type":"application/gzip"},body:await readFile(c)});if(!m.ok)throw new Error(`Context upload failed: ${m.status}`);return t(await e.workspaces.buildFromDockerfile(n,{contextBlobKey:g.objectKey,dockerfilePath:s("--dockerfile")}))}finally{await rm(d,{recursive:true,force:true});}}if(r==="workspace"&&o==="builder-start")return t(await e.workspaces.startBuilder(u("--workspace"),{baseRevisionId:s("--base-revision")}));if(r==="workspace"&&o==="exec"){let n=l.includes("--")?l.slice(l.indexOf("--")+1).join(" "):"";if(!n)throw new Error("Missing command after --.");return t(await e.workspaces.exec(u("--build"),n))}if(r==="workspace"&&o==="publish")return t(await e.workspaces.publish(u("--build")));if(r==="workspace"&&o==="destroy")return t(await e.workspaces.destroyBuilder(u("--build")));if(r==="desktop"&&o==="list")return t(await e.desktopRuntimes.list({agentId:s("--agent")}));if(r==="desktop"&&o==="get")return t(await e.desktopRuntimes.get(u("--desktop")));if(r==="desktop"&&o==="rename")return t(await e.desktopRuntimes.rename(u("--desktop"),u("--name")));if(r==="desktop"&&o==="browse")return t(await e.desktopRuntimes.browse(u("--desktop"),{path:s("--path"),dirsOnly:!l.includes("--files")}));if(r==="desktop"&&o==="read")return t(await e.desktopRuntimes.read(u("--desktop"),u("--path")));if(r==="desktop"&&o==="ports")return t(await e.desktopRuntimes.ports(u("--desktop"),s("--known")));if(r==="desktop"&&o==="terminal-ticket")return t(await e.desktopRuntimes.terminalTicket(u("--desktop")));if(r==="desktop"&&o==="attach"){let n=u("--file");return t(await e.desktopRuntimes.attach(u("--desktop"),{name:s("--name")??y.basename(n),contentBase64:(await readFile(n)).toString("base64")}))}if(r==="desktop"&&o==="reveal"){let n=s("--app");if(n&&!["finder","editor","terminal"].includes(n))throw new Error("--app must be finder, editor, or terminal.");return t(await e.desktopRuntimes.reveal(u("--desktop"),{path:u("--path"),app:n}))}if(r==="desktop"&&o==="bind")return t(await e.desktopRuntimes.bind(u("--desktop"),l.includes("--none")?null:u("--agent")));if(r==="desktop"&&o==="disconnect")return t(await e.desktopRuntimes.disconnect(u("--desktop")));if(r==="desktop"&&(o==="connect"||o==="agent")){let{connect:n}=await import('./desktop-agent-J5A2KK2P.js');return n({baseUrl:process.env.NODUS_BASE_URL??"https://nodus-api-production-d291.up.railway.app",folder:s("--folder")??"~",name:s("--name")})}if(r==="run"){let n=s("--agent"),a=s("--provider");if(!n&&!a)throw new Error("run requires --agent or --provider");let d=await Promise.all(f("--attach").map(async D=>{let B=b(D),_=B.split(".").pop()??"";return {contentBase64:(await readFile(D)).toString("base64"),path:`input/${B}`,...i[_]?{contentType:i[_]}:{}}})),c=s("--prompt")||s("--instructions");if(!c)throw new Error("Provide --prompt or --instructions.");let g=s("--goal-file"),m=s("--goal");if(g&&m)throw new Error("Provide either --goal or --goal-file.");let w=g?await readFile(y.resolve(g),"utf8"):m,S=v(f("--metadata")),x=s("--output-schema"),N=x?JSON.parse(await readFile(y.resolve(x),"utf8")):void 0,H={...n?{agentId:n}:{provider:a,model:s("--model")},...d.length?{resources:d}:{},workspaceRevisionId:s("--workspace-revision"),desktopRuntimeId:s("--desktop-runtime"),prompt:c,...w?{mode:"goal",goal:w}:{},...l.includes("--persistent")?{persistent:true}:{},...S?{metadata:S}:{},...N?{outputSchema:N}:{}},M=await e.agentRuns.create(H);return t(l.includes("--wait")?{run:await e.agentRuns.wait(M.run.id)}:M)}throw new Error("Unknown command. Run `nodus help`.")}async function ue(l){return process.platform==="darwin"?$("open",[l]):process.platform==="win32"?$("cmd",["/c","start","",l]):$("xdg-open",[l])}ae().catch(l=>{l instanceof h?console.error(JSON.stringify({error:l.message,status:l.status,code:l.code,retryAt:l.retryAt},null,2)):console.error(l instanceof Error?l.message:String(l)),process.exitCode=1;});