agent-relay 7.1.1 → 8.0.2

package/dist/cli/commands/channel.js

@@ -0,0 +1,60 @@
+import { addSdkOptions, printJson, runSdk, sdkOptionsFromOpts, withSdkDefaults, } from '../lib/sdk-command.js';
+export function registerChannelCommands(program, overrides = {}) {
+    const deps = withSdkDefaults(overrides);
+    const group = program.command('channel').description('Manage channels (requires agent token)');
+    const opts = (o) => sdkOptionsFromOpts(o);
+    addSdkOptions(group
+        .command('create')
+        .description('Create a channel')
+        .argument('<name>', 'Channel name')
+        .option('--topic <topic>', 'Channel topic')).action(async (name, o) => {
+        await runSdk(deps, async () => {
+            const relay = deps.createAgentRelay(opts(o));
+            printJson(deps, await relay.channels.create({ name, topic: o.topic }));
+        });
+    });
+    addSdkOptions(group.command('list').description('List channels').option('--archived', 'Include archived')).action(async (o) => {
+        await runSdk(deps, async () => {
+            const relay = deps.createAgentRelay(opts(o));
+            printJson(deps, await relay.channels.list({ includeArchived: Boolean(o.archived) }));
+        });
+    });
+    addSdkOptions(group.command('join').description('Join a channel').argument('<name>', 'Channel name')).action(async (name, o) => {
+        await runSdk(deps, async () => {
+            await deps.createAgentRelay(opts(o)).channels.join(name);
+            deps.log(`Joined ${name}.`);
+        });
+    });
+    addSdkOptions(group.command('leave').description('Leave a channel').argument('<name>', 'Channel name')).action(async (name, o) => {
+        await runSdk(deps, async () => {
+            await deps.createAgentRelay(opts(o)).channels.leave(name);
+            deps.log(`Left ${name}.`);
+        });
+    });
+    addSdkOptions(group
+        .command('invite')
+        .description('Invite an agent to a channel')
+        .argument('<channel>', 'Channel name')
+        .argument('<agent>', 'Agent name')).action(async (channel, agent, o) => {
+        await runSdk(deps, async () => {
+            await deps.createAgentRelay(opts(o)).channels.invite(channel, agent);
+            deps.log(`Invited ${agent} to ${channel}.`);
+        });
+    });
+    addSdkOptions(group
+        .command('set_topic')
+        .description('Set a channel topic')
+        .argument('<name>', 'Channel name')
+        .argument('<topic>', 'New topic')).action(async (name, topic, o) => {
+        await runSdk(deps, async () => {
+            printJson(deps, await deps.createAgentRelay(opts(o)).channels.update(name, { topic }));
+        });
+    });
+    addSdkOptions(group.command('archive').description('Archive a channel').argument('<name>', 'Channel name')).action(async (name, o) => {
+        await runSdk(deps, async () => {
+            await deps.createAgentRelay(opts(o)).channels.archive(name);
+            deps.log(`Archived ${name}.`);
+        });
+    });
+}
+//# sourceMappingURL=channel.js.map

package/dist/cli/commands/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../../src/cli/commands/channel.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,aAAa,EACb,SAAS,EACT,MAAM,EACN,kBAAkB,EAClB,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,UAAU,uBAAuB,CACrC,OAAgB,EAChB,YAAiD,EAAE;IAEnD,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAC;IAE/F,MAAM,IAAI,GAAG,CAAC,CAA0B,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAEnE,aAAa,CACX,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kBAAkB,CAAC;SAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;SAClC,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAC9C,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,CAA0B,EAAE,EAAE;QAC1D,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAA2B,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,aAAa,CACX,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAC5F,CAAC,MAAM,CAAC,KAAK,EAAE,CAA0B,EAAE,EAAE;QAC5C,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,aAAa,CACX,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CACvF,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,CAA0B,EAAE,EAAE;QAC1D,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,aAAa,CACX,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CACzF,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,CAA0B,EAAE,EAAE;QAC1D,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,aAAa,CACX,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,8BAA8B,CAAC;SAC3C,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;SACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CACrC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,KAAa,EAAE,CAA0B,EAAE,EAAE;QAC5E,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,WAAW,KAAK,OAAO,OAAO,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,aAAa,CACX,KAAK;SACF,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,qBAAqB,CAAC;SAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;SAClC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CACpC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,KAAa,EAAE,CAA0B,EAAE,EAAE;QACzE,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,SAAS,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,aAAa,CACX,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAC7F,CAAC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,CAA0B,EAAE,EAAE;QAC1D,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/cloud.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAwB,MAAM,WAAW,CAAC;AAsC1D,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAID,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC;AAEtC,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IAClC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;CACd;AAiID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,IAAI,CA+fxG"}

package/dist/cli/commands/cloud.js

@@ -0,0 +1,552 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { InvalidArgumentError } from 'commander';
+import { ensureAuthenticated, authorizedApiFetch, readStoredAuth, clearStoredAuth, defaultApiUrl, AUTH_FILE_PATH, REFRESH_WINDOW_MS, runWorkflow, scheduleWorkflow, listWorkflowSchedules, getRunStatus, getRunLogs, syncWorkflowPatch, cancelWorkflow, connectProvider, getProviderHelpText, normalizeProvider, } from '@agent-relay/cloud';
+import { defaultExit } from '../lib/exit.js';
+import { errorClassName } from '../lib/telemetry-helpers.js';
+import { track } from '../telemetry/index.js';
+const CLOUD_SYNC_PATCH_EXCLUDES = [
+    '.agent-bin/**',
+    '.relayfile.acl',
+    '.relayfile-mount-state.json',
+    '.relayfile-mount-state.json.tmp-*',
+    '.trajectories/**',
+    '.workflow-context/**',
+];
+export function buildCloudSyncPatchExcludeArgs() {
+    return CLOUD_SYNC_PATCH_EXCLUDES.map((pattern) => `--exclude=${JSON.stringify(pattern)}`).join(' ');
+}
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function withDefaults(overrides = {}) {
+    return {
+        log: (...args) => console.log(...args),
+        error: (...args) => console.error(...args),
+        exit: defaultExit,
+        ...overrides,
+    };
+}
+function parsePositiveInteger(value) {
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new InvalidArgumentError('Expected a positive integer.');
+    }
+    return parsed;
+}
+function parseNonNegativeInteger(value) {
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isInteger(parsed) || parsed < 0) {
+        throw new InvalidArgumentError('Expected a non-negative integer.');
+    }
+    return parsed;
+}
+function parseWorkflowFileType(value) {
+    if (value === 'yaml' || value === 'ts' || value === 'py') {
+        return value;
+    }
+    throw new InvalidArgumentError('Expected workflow type to be one of: yaml, ts, py');
+}
+function parseEnvAssignment(value, previous = {}) {
+    const equalsIndex = value.indexOf('=');
+    if (equalsIndex <= 0) {
+        throw new InvalidArgumentError('Expected environment assignment in KEY=VALUE form.');
+    }
+    const key = value.slice(0, equalsIndex).trim();
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+        throw new InvalidArgumentError(`Invalid environment variable name: ${key || '(empty)'}`);
+    }
+    return {
+        ...previous,
+        [key]: value.slice(equalsIndex + 1),
+    };
+}
+function isObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function renderPatchPushResults(patches, log) {
+    if (!isObject(patches)) {
+        return;
+    }
+    const entries = Object.entries(patches);
+    if (entries.length === 0) {
+        return;
+    }
+    log('Patches:');
+    for (const [name, rawEntry] of entries) {
+        if (!isObject(rawEntry)) {
+            log(`  ${name}: patch pending - run still active`);
+            continue;
+        }
+        const pushedTo = rawEntry.pushedTo;
+        if (isObject(pushedTo) && typeof pushedTo.prUrl === 'string') {
+            const branch = typeof pushedTo.branch === 'string' ? ` (${pushedTo.branch})` : '';
+            log(`  ${name}: ${pushedTo.prUrl}${branch}`);
+            continue;
+        }
+        const pushError = rawEntry.pushError;
+        if (isObject(pushError)) {
+            const code = typeof pushError.code === 'string' ? pushError.code : 'unknown';
+            const message = typeof pushError.message === 'string' ? pushError.message : 'push failed';
+            log(`  ${name}: push failed: ${code}: ${message}`);
+            continue;
+        }
+        log(`  ${name}: patch pending - run still active`);
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function formatScheduleCadence(schedule) {
+    if (schedule.scheduleType === 'cron') {
+        return `${schedule.cronExpression ?? 'cron'} (${schedule.timezone})`;
+    }
+    return schedule.scheduledAt
+        ? `${schedule.scheduledAt} (${schedule.timezone})`
+        : `once (${schedule.timezone})`;
+}
+function renderSchedule(schedule, log) {
+    log(`Schedule created: ${schedule.id}`);
+    log(`Name: ${schedule.name}`);
+    log(`Status: ${schedule.status}`);
+    log(`Cadence: ${formatScheduleCadence(schedule)}`);
+}
+function renderScheduleList(schedules, log) {
+    if (schedules.length === 0) {
+        log('No workflow schedules found.');
+        return;
+    }
+    for (const schedule of schedules) {
+        const lastRun = schedule.lastTriggeredRunId ? ` last run ${schedule.lastTriggeredRunId}` : ' no runs yet';
+        log(`${schedule.id}  ${schedule.status}  ${formatScheduleCadence(schedule)}  ${schedule.name} (${lastRun})`);
+    }
+}
+// ── Command registration ─────────────────────────────────────────────────────
+export function registerCloudCommands(program, overrides = {}) {
+    const deps = withDefaults(overrides);
+    const cloudCommand = program
+        .command('cloud')
+        .description('Cloud account, provider auth, and workflow commands');
+    // ── login ──────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('login')
+        .description('Authenticate with Agent Relay Cloud via browser (alias of `relay login`)')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--force', 'Force re-authentication even if already logged in')
+        .action(async (options) => {
+        const started = Date.now();
+        let success = false;
+        let errorClass;
+        try {
+            const apiUrl = options.apiUrl || defaultApiUrl();
+            if (!options.force) {
+                const existing = await readStoredAuth();
+                if (existing && existing.apiUrl === apiUrl) {
+                    const expiresAt = Date.parse(existing.accessTokenExpiresAt);
+                    if (!Number.isNaN(expiresAt) && expiresAt - Date.now() > REFRESH_WINDOW_MS) {
+                        deps.log(`Already logged in to ${existing.apiUrl}`);
+                        success = true;
+                        return;
+                    }
+                }
+            }
+            await ensureAuthenticated(apiUrl, { force: options.force });
+            success = true;
+        }
+        catch (err) {
+            errorClass = errorClassName(err);
+            throw err;
+        }
+        finally {
+            track('cloud_auth', {
+                action: 'login',
+                success,
+                duration_ms: Date.now() - started,
+                ...(errorClass ? { error_class: errorClass } : {}),
+            });
+        }
+    });
+    // ── logout ─────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('logout')
+        .description('Clear stored cloud credentials')
+        .action(async () => {
+        const started = Date.now();
+        let success = false;
+        let errorClass;
+        try {
+            const auth = await readStoredAuth();
+            if (!auth) {
+                deps.log('Not logged in.');
+                success = true;
+                return;
+            }
+            try {
+                const revokeUrl = new URL('api/v1/auth/token/revoke', auth.apiUrl.endsWith('/') ? auth.apiUrl : `${auth.apiUrl}/`);
+                await fetch(revokeUrl, {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: JSON.stringify({ token: auth.refreshToken }),
+                });
+            }
+            catch {
+                // best-effort revoke
+            }
+            await clearStoredAuth();
+            deps.log('Logged out.');
+            success = true;
+        }
+        catch (err) {
+            errorClass = errorClassName(err);
+            throw err;
+        }
+        finally {
+            track('cloud_auth', {
+                action: 'logout',
+                success,
+                duration_ms: Date.now() - started,
+                ...(errorClass ? { error_class: errorClass } : {}),
+            });
+        }
+    });
+    // ── whoami ─────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('whoami')
+        .description('Show current authentication status')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .action(async (options) => {
+        const started = Date.now();
+        let success = false;
+        let errorClass;
+        try {
+            const apiUrl = options.apiUrl || defaultApiUrl();
+            const auth = await ensureAuthenticated(apiUrl);
+            const { response } = await authorizedApiFetch(auth, '/api/v1/auth/whoami', {
+                method: 'GET',
+            });
+            const payload = (await response.json().catch(() => null));
+            if (!response.ok || !payload?.authenticated) {
+                throw new Error(payload?.error || 'Failed to resolve auth status');
+            }
+            deps.log(`API URL: ${auth.apiUrl}`);
+            deps.log(`Auth source: ${payload.source}`);
+            deps.log(`Subject type: ${payload.subjectType ?? 'session'}`);
+            deps.log(`User: ${payload.user.name || '(no name)'}${payload.user.email ? ` <${payload.user.email}>` : ''}`);
+            deps.log(`Organization: ${payload.currentOrganization.name}`);
+            deps.log(`Workspace: ${payload.currentWorkspace.name}`);
+            deps.log(`Scopes: ${payload.scopes.length > 0 ? payload.scopes.join(', ') : '(none)'}`);
+            deps.log(`Token file: ${AUTH_FILE_PATH}`);
+            success = true;
+        }
+        catch (err) {
+            errorClass = errorClassName(err);
+            throw err;
+        }
+        finally {
+            track('cloud_auth', {
+                action: 'whoami',
+                success,
+                duration_ms: Date.now() - started,
+                ...(errorClass ? { error_class: errorClass } : {}),
+            });
+        }
+    });
+    // ── connect ────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('connect')
+        .description('Connect a provider via interactive SSH session')
+        .argument('<provider>', `Provider to connect (${getProviderHelpText()})`)
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--language <language>', 'Sandbox language/image', 'typescript')
+        .option('--timeout <seconds>', 'Connection timeout in seconds', parsePositiveInteger, 300)
+        .action(async (providerArg, options) => {
+        const started = Date.now();
+        let success = false;
+        let errorClass;
+        const trackedProvider = normalizeProvider(providerArg);
+        try {
+            const result = await connectProvider({
+                provider: providerArg,
+                apiUrl: options.apiUrl,
+                language: options.language,
+                timeoutMs: options.timeout * 1000,
+                io: { log: deps.log, error: deps.error },
+            });
+            success = result.success;
+        }
+        catch (err) {
+            errorClass = errorClassName(err);
+            throw err;
+        }
+        finally {
+            track('cloud_auth', {
+                action: 'connect',
+                success,
+                duration_ms: Date.now() - started,
+                provider: trackedProvider,
+                ...(errorClass ? { error_class: errorClass } : {}),
+            });
+        }
+    });
+    // ── run ────────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('run')
+        .description('Submit a workflow run')
+        .argument('<workflow>', 'Workflow file path or inline workflow content')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--file-type <type>', 'Workflow type: yaml, ts, or py', parseWorkflowFileType)
+        .option('--sync-code', 'Upload the current working directory before running')
+        .option('--no-sync-code', 'Skip uploading the current working directory')
+        .option('--resume <runId>', 'Resume a previously failed cloud workflow run from where it left off')
+        .option('--start-from <step>', 'Start from a specific step in cloud and skip predecessor steps')
+        .option('--previous-run-id <runId>', 'Use cached outputs from a previous cloud run when starting from a step')
+        .option('--json', 'Print raw JSON response', false)
+        .action(async (workflow, options) => {
+        const started = Date.now();
+        let success = false;
+        let errorClass;
+        try {
+            const result = await runWorkflow(workflow, options);
+            if (options.json) {
+                deps.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                deps.log(`Run created: ${result.runId}`);
+                if (typeof result.sandboxId === 'string') {
+                    deps.log(`Sandbox: ${result.sandboxId}`);
+                }
+                deps.log(`Status: ${result.status}`);
+                renderPatchPushResults(result.patches, deps.log);
+                deps.log(`\nView logs:  agent-relay cloud logs ${result.runId} --follow`);
+                deps.log(`Sync code:  agent-relay cloud sync ${result.runId}`);
+            }
+            success = true;
+        }
+        catch (err) {
+            errorClass = errorClassName(err);
+            throw err;
+        }
+        finally {
+            track('cloud_workflow_run', {
+                has_explicit_file_type: Boolean(options.fileType),
+                sync_code: options.syncCode !== false,
+                json_output: Boolean(options.json),
+                success,
+                duration_ms: Date.now() - started,
+                ...(errorClass ? { error_class: errorClass } : {}),
+            });
+        }
+    });
+    // ── schedule ───────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('schedule')
+        .description('Schedule a repeatable workflow run')
+        .argument('<workflow>', 'Workflow file path or inline workflow content')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--file-type <type>', 'Workflow type: yaml, ts, or py', parseWorkflowFileType)
+        .option('--cron <expression>', 'Cron expression, for example "0 * * * *"')
+        .option('--at <isoTimestamp>', 'One-time ISO timestamp, for example 2026-05-10T09:00:00Z')
+        .option('--timezone <timezone>', 'IANA timezone for cron schedules', 'UTC')
+        .option('--name <name>', 'Schedule name')
+        .option('--description <description>', 'Schedule description')
+        .option('--env <KEY=VALUE>', 'Environment variable to pass to scheduled runs; repeat for multiple variables', parseEnvAssignment, {})
+        .option('--json', 'Print raw JSON response', false)
+        .action(async (workflow, options) => {
+        const started = Date.now();
+        let success = false;
+        let errorClass;
+        try {
+            const { env, ...scheduleOptions } = options;
+            const result = await scheduleWorkflow(workflow, {
+                ...scheduleOptions,
+                ...(env && Object.keys(env).length > 0 ? { envSecrets: env } : {}),
+            });
+            if (options.json) {
+                deps.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                renderSchedule(result, deps.log);
+                deps.log('\nList schedules:  agent-relay cloud schedules');
+            }
+            success = true;
+        }
+        catch (err) {
+            errorClass = errorClassName(err);
+            throw err;
+        }
+        finally {
+            track('cloud_workflow_schedule', {
+                schedule_type: options.cron ? 'cron' : 'once',
+                has_explicit_file_type: Boolean(options.fileType),
+                json_output: Boolean(options.json),
+                success,
+                duration_ms: Date.now() - started,
+                ...(errorClass ? { error_class: errorClass } : {}),
+            });
+        }
+    });
+    cloudCommand
+        .command('schedules')
+        .description('List scheduled workflow runs')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--json', 'Print raw JSON response', false)
+        .action(async (options) => {
+        const schedules = await listWorkflowSchedules(options);
+        if (options.json) {
+            deps.log(JSON.stringify({ schedules }, null, 2));
+            return;
+        }
+        renderScheduleList(schedules, deps.log);
+    });
+    // ── status ─────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('status')
+        .description('Fetch workflow run status')
+        .argument('<runId>', 'Workflow run id')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--json', 'Print raw JSON response', false)
+        .action(async (runId, options) => {
+        const result = await getRunStatus(runId, options);
+        if (options.json) {
+            deps.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        deps.log(`Run: ${result.runId ?? runId}`);
+        deps.log(`Status: ${result.status ?? 'unknown'}`);
+        if (typeof result.sandboxId === 'string') {
+            deps.log(`Sandbox: ${result.sandboxId}`);
+        }
+        if (typeof result.updatedAt === 'string') {
+            deps.log(`Updated: ${result.updatedAt}`);
+        }
+        renderPatchPushResults(result.patches, deps.log);
+    });
+    // ── logs ───────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('logs')
+        .description('Read workflow run logs')
+        .argument('<runId>', 'Workflow run id')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--follow', 'Poll until the run is done', false)
+        .option('--poll-interval <seconds>', 'Polling interval while following', parsePositiveInteger, 2)
+        .option('--offset <bytes>', 'Start reading logs from a byte offset', parseNonNegativeInteger, 0)
+        .option('--agent <name>', 'Read logs for a specific agent')
+        .option('--sandbox-id <sandboxId>', 'Read logs for a specific step sandbox')
+        .option('--json', 'Print raw JSON responses', false)
+        .action(async (runId, options) => {
+        let offset = options.offset ?? 0;
+        const sandboxId = options.agent ?? options.sandboxId;
+        while (true) {
+            const result = await getRunLogs(runId, {
+                apiUrl: options.apiUrl,
+                offset,
+                sandboxId,
+            });
+            if (options.json) {
+                deps.log(JSON.stringify(result, null, 2));
+            }
+            else if (result.content) {
+                process.stdout.write(result.content);
+            }
+            offset = result.offset;
+            if (!options.follow || result.done) {
+                break;
+            }
+            await sleep((options.pollInterval ?? 2) * 1000);
+        }
+    });
+    // ── sync ───────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('sync')
+        .description('Download and apply code changes from a completed workflow run')
+        .argument('<runId>', 'Workflow run id')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--dir <path>', 'Local directory to apply the patch to', '.')
+        .option('--dry-run', 'Download and display the patch without applying', false)
+        .action(async (runId, options) => {
+        const targetDir = path.resolve(options.dir ?? '.');
+        deps.log(`Fetching patch for run ${runId}...`);
+        const result = await syncWorkflowPatch(runId, { apiUrl: options.apiUrl });
+        // Multi-path responses target different repos and can't be applied to a
+        // single --dir. Surface them in dry-run, otherwise direct the user to
+        // apply manually. Single-patch runs continue to apply automatically.
+        if (result.patches) {
+            const entries = Object.entries(result.patches);
+            const withChanges = entries.filter(([, p]) => p.hasChanges);
+            if (withChanges.length === 0) {
+                deps.log('No changes to sync — the workflow did not modify any files.');
+                return;
+            }
+            if (options.dryRun) {
+                for (const [name, p] of withChanges) {
+                    deps.log(`\n--- Patch for "${name}" (dry run) ---`);
+                    process.stdout.write(p.patch);
+                    deps.log(`\n--- End patch for "${name}" ---`);
+                }
+                return;
+            }
+            deps.error(`This run produced ${withChanges.length} per-path patch${withChanges.length === 1 ? '' : 'es'} ` +
+                `(${withChanges.map(([n]) => n).join(', ')}). "cloud sync" only applies single-patch runs. ` +
+                `Use --dry-run to inspect each patch, then apply manually in the correct repo.`);
+            deps.exit(1);
+            return;
+        }
+        if (!result.hasChanges || !result.patch) {
+            deps.log('No changes to sync — the workflow did not modify any files.');
+            return;
+        }
+        if (typeof result.patch !== 'string' || !result.patch) {
+            throw new Error('Server reported changes but returned no patch data. The response may be malformed.');
+        }
+        if (options.dryRun) {
+            deps.log('\n--- Patch (dry run) ---');
+            process.stdout.write(result.patch);
+            deps.log('\n--- End patch ---');
+            return;
+        }
+        const { execSync } = await import('node:child_process');
+        const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'cloud-sync-'));
+        const tmpPatch = path.join(tmpDir, 'changes.patch');
+        fs.writeFileSync(tmpPatch, result.patch, { mode: 0o600 });
+        try {
+            const excludeArgs = buildCloudSyncPatchExcludeArgs();
+            const stat = execSync(`git apply ${excludeArgs} --stat "${tmpPatch}"`, {
+                cwd: targetDir,
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            if (stat.trim()) {
+                deps.log('\nFiles changed by agent:');
+                deps.log(stat);
+            }
+            execSync(`git apply ${excludeArgs} "${tmpPatch}"`, {
+                cwd: targetDir,
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            deps.log('Patch applied successfully.');
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            deps.error(`Failed to apply patch: ${message}`);
+            deps.error(`Patch saved to: ${tmpPatch}`);
+            deps.exit(1);
+        }
+    });
+    // ── cancel ─────────────────────────────────────────────────────────────────
+    cloudCommand
+        .command('cancel')
+        .description('Cancel a running workflow')
+        .argument('<runId>', 'Workflow run id')
+        .option('--api-url <url>', 'Cloud API base URL')
+        .option('--json', 'Print raw JSON response', false)
+        .action(async (runId, options) => {
+        const result = await cancelWorkflow(runId, options);
+        if (options.json) {
+            deps.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        deps.log(`Run: ${result.runId ?? runId}`);
+        deps.log(`Status: ${result.status ?? 'unknown'}`);
+    });
+}
+//# sourceMappingURL=cloud.js.map