@madarco/agentbox 0.12.0 → 0.14.0

package/runtime/relay/bin.cjs

@@ -3057,15 +3057,15 @@ var require_windows = __commonJS({
       }
       return false;
     }
-    function checkStat(stat, path6, options) {
-      if (!stat.isSymbolicLink() && !stat.isFile()) {
+    function checkStat(stat2, path6, options) {
+      if (!stat2.isSymbolicLink() && !stat2.isFile()) {
         return false;
       }
       return checkPathExt(path6, options);
     }
     function isexe(path6, options, cb) {
-      fs.stat(path6, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, path6, options));
+      fs.stat(path6, function(er, stat2) {
+        cb(er, er ? false : checkStat(stat2, path6, options));
       });
     }
     function sync(path6, options) {
@@ -3082,20 +3082,20 @@ var require_mode = __commonJS({
     isexe.sync = sync;
     var fs = require("fs");
     function isexe(path6, options, cb) {
-      fs.stat(path6, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, options));
+      fs.stat(path6, function(er, stat2) {
+        cb(er, er ? false : checkStat(stat2, options));
       });
     }
     function sync(path6, options) {
       return checkStat(fs.statSync(path6), options);
     }
-    function checkStat(stat, options) {
-      return stat.isFile() && checkMode(stat, options);
+    function checkStat(stat2, options) {
+      return stat2.isFile() && checkMode(stat2, options);
     }
-    function checkMode(stat, options) {
-      var mod = stat.mode;
-      var uid = stat.uid;
-      var gid = stat.gid;
+    function checkMode(stat2, options) {
+      var mod = stat2.mode;
+      var uid = stat2.uid;
+      var gid = stat2.gid;
       var myUid = options.uid !== void 0 ? options.uid : process.getuid && process.getuid();
       var myGid = options.gid !== void 0 ? options.gid : process.getgid && process.getgid();
       var u2 = parseInt("100", 8);
@@ -11808,11 +11808,11 @@ var replacements = Object.entries(specialMainSymbols);
 // ../../node_modules/.pnpm/yoctocolors@2.1.2/node_modules/yoctocolors/base.js
 var import_node_tty = __toESM(require("tty"), 1);
 var hasColors = import_node_tty.default?.WriteStream?.prototype?.hasColors?.() ?? false;
-var format = (open, close) => {
+var format = (open2, close) => {
   if (!hasColors) {
     return (input) => input;
   }
-  const openCode = `\x1B[${open}m`;
+  const openCode = `\x1B[${open2}m`;
   const closeCode = `\x1B[${close}m`;
   return (input) => {
     const string = input + "";
@@ -18492,6 +18492,10 @@ async function resolveCloudBackend(name) {
     const pkg = "@agentbox/sandbox-vercel";
     return loadCloudBackend(pkg, async () => (await import(pkg)).vercelBackend);
   }
+  if (name === "e2b") {
+    const pkg = "@agentbox/sandbox-e2b";
+    return loadCloudBackend(pkg, async () => (await import(pkg)).e2bBackend);
+  }
   throw new Error(`no host executor for cloud backend '${name}'`);
 }
 async function loadCloudBackend(pkg, load2) {
@@ -20306,8 +20310,8 @@ async function startRelayServer(opts) {
 }
 
 // src/autopause.ts
-var import_node_child_process8 = require("child_process");
-var import_promises16 = require("fs/promises");
+var import_node_child_process9 = require("child_process");
+var import_promises18 = require("fs/promises");
 
 // ../config/dist/index.js
 var import_yaml = __toESM(require_dist(), 1);
@@ -20325,11 +20329,13 @@ var BUILT_IN_DEFAULTS = {
     defaultCheckpointDaytona: "",
     defaultCheckpointHetzner: "",
     defaultCheckpointVercel: "",
+    defaultCheckpointE2b: "",
     size: "",
     sizeDocker: "",
     sizeDaytona: "",
     sizeHetzner: "",
     sizeVercel: "",
+    sizeE2b: "",
     withPlaywright: false,
     withEnv: false,
     resyncOnStart: true,
@@ -20342,6 +20348,7 @@ var BUILT_IN_DEFAULTS = {
     imageDaytona: "",
     imageHetzner: "",
     imageVercel: "",
+    imageE2b: "",
     // Mirrors BOX_IMAGE_REGISTRY in @agentbox/sandbox-docker. Empty disables the
     // registry pull (always build the docker base image locally).
     imageRegistry: "ghcr.io/madarco/agentbox/box",
@@ -20370,7 +20377,8 @@ var BUILT_IN_DEFAULTS = {
     sessionName: "opencode"
   },
   attach: {
-    openIn: "split"
+    openIn: "split",
+    cmuxStatus: true
   },
   code: {
     ide: "auto",
@@ -20422,8 +20430,8 @@ var KEY_REGISTRY = [
   {
     key: "box.provider",
     type: "enum",
-    enumValues: ["docker", "daytona", "hetzner", "vercel"],
-    description: "Sandbox backend new boxes are created on: local Docker containers, Daytona Cloud sandboxes, Hetzner Cloud VPSes, or Vercel Sandboxes."
+    enumValues: ["docker", "daytona", "hetzner", "vercel", "e2b"],
+    description: "Sandbox backend new boxes are created on: local Docker containers, Daytona Cloud sandboxes, Hetzner Cloud VPSes, Vercel Sandboxes, or E2B microVMs."
   },
   {
     key: "box.hostSnapshot",
@@ -20459,6 +20467,12 @@ var KEY_REGISTRY = [
     description: "Per-provider override of `box.defaultCheckpoint` for vercel. Wins over the global when set; set via `agentbox checkpoint set-default --provider vercel`.",
     advanced: true
   },
+  {
+    key: "box.defaultCheckpointE2b",
+    type: "string",
+    description: "Per-provider override of `box.defaultCheckpoint` for e2b. Wins over the global when set; set via `agentbox checkpoint set-default --provider e2b`.",
+    advanced: true
+  },
   {
     key: "box.size",
     type: "string",
@@ -20488,6 +20502,12 @@ var KEY_REGISTRY = [
     description: "Per-provider override of `box.size` for vercel. Reserved \u2014 vercel sizing is controlled via `box.vercelVcpus`.",
     advanced: true
   },
+  {
+    key: "box.sizeE2b",
+    type: "string",
+    description: "Per-provider override of `box.size` for e2b. Reserved \u2014 e2b sizing is template-level (set at `agentbox prepare --provider e2b` time via --vcpus / --memory).",
+    advanced: true
+  },
   {
     key: "checkpoint.maxLayers",
     type: "int",
@@ -20559,6 +20579,12 @@ var KEY_REGISTRY = [
     description: "Per-provider override of `box.image` for vercel (snapshot id, e.g. `snap_\u2026`). Written by `agentbox prepare --provider vercel`.",
     advanced: true
   },
+  {
+    key: "box.imageE2b",
+    type: "string",
+    description: "Per-provider override of `box.image` for e2b (template id or `name:tag`, e.g. `agentbox-base:latest`). Written by `agentbox prepare --provider e2b`.",
+    advanced: true
+  },
   {
     key: "box.imageRegistry",
     type: "string",
@@ -20640,7 +20666,12 @@ var KEY_REGISTRY = [
     key: "attach.openIn",
     type: "enum",
     enumValues: ["split", "window", "tab", "same"],
-    description: "Where `agentbox claude|codex|opencode` opens the attached session when run from tmux or iTerm2: `split` (tmux split-window / iTerm2 vertical split, default), `window` (tmux new-window / new iTerm2 window), `tab` (tmux new-window / new iTerm2 tab), or `same` (attach inline in the current terminal). Outside tmux/iTerm2 every value behaves like `same`."
+    description: "Where `agentbox claude|codex|opencode` opens the attached session when run from tmux, cmux, or iTerm2: `split` (tmux split-window / cmux new-split / iTerm2 vertical split, default \u2014 same workspace), `window` (tmux new-window / cmux new-workspace / new iTerm2 window), `tab` (tmux new-window / cmux new-surface tab in the current pane, same workspace / new iTerm2 tab), or `same` (attach inline in the current terminal). Outside tmux/cmux/iTerm2 every value behaves like `same`."
+  },
+  {
+    key: "attach.cmuxStatus",
+    type: "bool",
+    description: "When attached inside cmux, reflect the box agent's live activity on its cmux workspace (colour + description: blue=working, amber=needs input, idle clears; restored on detach) and, when the agent needs input, flag the box's own tab via a cmux notification (tab badge + reorder + desktop notification) so it stands out among sibling tabs. cmux only; no-op in other terminals."
   },
   {
     key: "code.ide",
@@ -20894,210 +20925,18 @@ var GLOBAL_CONFIG_FILE = (0, import_path2.join)(STATE_DIR2, "config.yaml");
 var PROJECTS_DIR = (0, import_path2.join)(STATE_DIR2, "projects");
 var PROJECT_GC_COUNTER_FILE = (0, import_path3.join)(PROJECTS_DIR, ".gc.json");
 
-// src/autopause.ts
-function selectBoxesToPause(entries, cfg) {
-  if (!cfg.enabled) return [];
-  const runningCount = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
-  const excess = runningCount - cfg.maxRunningBoxes;
-  if (excess <= 0) return [];
-  const idleThresholdMs = cfg.idleMinutes * 6e4;
-  const candidates = entries.filter(
-    (e) => e.running && e.claudeState === "idle" && e.idleMs != null && e.idleMs >= idleThresholdMs
-  );
-  candidates.sort(
-    (a2, b) => b.idleMs - a2.idleMs || a2.createdAt - b.createdAt || (a2.boxId < b.boxId ? -1 : a2.boxId > b.boxId ? 1 : 0)
-  );
-  return candidates.slice(0, excess).map((e) => e.boxId);
-}
-async function loadAutopauseConfig() {
-  const d = BUILT_IN_DEFAULTS.autopause;
-  let global3 = {};
-  try {
-    global3 = parseUserConfig(await (0, import_promises16.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
-  } catch {
-  }
-  const a2 = global3.autopause ?? {};
-  return {
-    enabled: a2.enabled ?? d.enabled,
-    maxRunningBoxes: a2.maxRunningBoxes ?? d.maxRunningBoxes,
-    idleMinutes: a2.idleMinutes ?? d.idleMinutes
-  };
-}
-var DEFAULT_INTERVAL_MS = 6e4;
-function startAutopauseLoop(deps) {
-  const loadConfig = deps.loadConfig ?? loadAutopauseConfig;
-  const inspectStatus = deps.inspectStatus ?? inspectContainerState;
-  const pause = deps.pause ?? pauseContainer;
-  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS;
-  const { registry, statusStore, events, log } = deps;
-  let ticking = false;
-  let stopped = false;
-  let inFlight = Promise.resolve();
-  async function tick() {
-    if (ticking) return;
-    ticking = true;
-    try {
-      const cfg = await loadConfig();
-      if (!cfg.enabled) return;
-      const entries = [];
-      for (const reg of registry.list()) {
-        if (!reg.containerName) continue;
-        const state = await inspectStatus(reg.containerName);
-        const claude = readClaude(statusStore.get(reg.boxId));
-        const idleMs = claude.state === "idle" && claude.updatedAt ? msSince(claude.updatedAt) : null;
-        entries.push({
-          boxId: reg.boxId,
-          containerName: reg.containerName,
-          running: state === "running",
-          claudeState: claude.state,
-          idleMs,
-          createdAt: reg.createdAt ? toEpoch(reg.createdAt) : 0
-        });
-      }
-      const toPause = selectBoxesToPause(entries, cfg);
-      if (toPause.length === 0) return;
-      const byId = new Map(entries.map((e) => [e.boxId, e]));
-      const runningBefore = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
-      for (const boxId of toPause) {
-        const e = byId.get(boxId);
-        if (!e) continue;
-        try {
-          await pause(e.containerName);
-          const mins = e.idleMs != null ? Math.round(e.idleMs / 6e4) : null;
-          events.append({
-            boxId,
-            type: "autopause",
-            payload: {
-              containerName: e.containerName,
-              action: "paused",
-              idleMs: e.idleMs,
-              runningBefore,
-              max: cfg.maxRunningBoxes
-            }
-          });
-          log(
-            `autopause: paused box ${boxId} (${e.containerName})` + (mins != null ? ` after ~${String(mins)}m idle` : "") + `; running ${String(runningBefore)} -> target ${String(cfg.maxRunningBoxes)}`
-          );
-        } catch (err) {
-          const msg = err instanceof Error ? err.message : String(err);
-          log(`autopause: docker pause ${e.containerName} failed: ${msg}`);
-          events.append({
-            boxId,
-            type: "autopause",
-            payload: { containerName: e.containerName, action: "pause-failed", error: msg }
-          });
-        }
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      log(`autopause: tick error: ${msg}`);
-    } finally {
-      ticking = false;
-    }
-  }
-  const timer = setInterval(() => {
-    if (stopped) return;
-    inFlight = tick();
-  }, intervalMs);
-  timer.unref();
-  return {
-    stop: async () => {
-      stopped = true;
-      clearInterval(timer);
-      await inFlight.catch(() => {
-      });
-    }
-  };
-}
-function readClaude(snap) {
-  const c3 = snap && typeof snap === "object" ? snap.claude : void 0;
-  if (!c3 || typeof c3 !== "object") return { state: null, updatedAt: null };
-  const o2 = c3;
-  const state = o2.state === "working" || o2.state === "idle" || o2.state === "waiting" || o2.state === "unknown" ? o2.state : null;
-  return { state, updatedAt: typeof o2.updatedAt === "string" ? o2.updatedAt : null };
-}
-function msSince(iso) {
-  const t = Date.parse(iso);
-  return Number.isNaN(t) ? null : Date.now() - t;
-}
-function toEpoch(iso) {
-  const t = Date.parse(iso);
-  return Number.isNaN(t) ? 0 : t;
-}
-var INSPECT_TIMEOUT_MS = 15e3;
-var PAUSE_TIMEOUT_MS = 3e4;
-function runDocker(args, timeoutMs) {
-  return new Promise((resolve2) => {
-    const child = (0, import_node_child_process8.spawn)("docker", args, { stdio: ["ignore", "pipe", "pipe"] });
-    let stdout = "";
-    let stderr = "";
-    let settled = false;
-    const finish = (exitCode) => {
-      if (settled) return;
-      settled = true;
-      resolve2({ exitCode, stdout, stderr });
-    };
-    const timer = setTimeout(() => {
-      child.kill("SIGTERM");
-      stderr += `
-relay: docker ${args.join(" ")} timed out after ${String(timeoutMs)}ms
-`;
-      finish(124);
-    }, timeoutMs);
-    child.stdout?.on("data", (c3) => {
-      stdout += c3.toString("utf8");
-    });
-    child.stderr?.on("data", (c3) => {
-      stderr += c3.toString("utf8");
-    });
-    child.on("error", (err) => {
-      clearTimeout(timer);
-      stderr += String(err.message ?? err);
-      finish(127);
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      finish(code ?? -1);
-    });
-  });
-}
-async function inspectContainerState(name) {
-  const r = await runDocker(["inspect", "--format", "{{.State.Status}}", name], INSPECT_TIMEOUT_MS);
-  if (r.exitCode !== 0) return "missing";
-  switch (r.stdout.trim()) {
-    case "running":
-      return "running";
-    case "paused":
-      return "paused";
-    case "created":
-    case "exited":
-    case "dead":
-    case "restarting":
-    case "removing":
-      return "stopped";
-    default:
-      return "missing";
-  }
-}
-async function pauseContainer(name) {
-  const r = await runDocker(["pause", name], PAUSE_TIMEOUT_MS);
-  if (r.exitCode !== 0) {
-    throw new Error(r.stderr.trim() || `docker pause ${name} exited ${String(r.exitCode)}`);
-  }
-}
-
 // src/queue.ts
-var import_node_child_process9 = require("child_process");
-var import_promises17 = require("fs/promises");
+var import_node_child_process8 = require("child_process");
+var import_promises16 = require("fs/promises");
 var import_node_fs6 = require("fs");
 var import_node_path8 = require("path");
-var import_promises18 = require("timers/promises");
+var import_promises17 = require("timers/promises");
 var QUEUE_DIR = (0, import_node_path8.join)(STATE_DIR, "queue");
 async function loadQueueConfig() {
   const d = BUILT_IN_DEFAULTS.queue;
   let global3 = {};
   try {
-    global3 = parseUserConfig(await (0, import_promises17.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
+    global3 = parseUserConfig(await (0, import_promises16.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
   } catch {
   }
   const q = global3.queue ?? {};
@@ -21109,25 +20948,32 @@ async function loadQueueConfig() {
   };
 }
 async function writeJob(job) {
-  await (0, import_promises17.mkdir)(QUEUE_DIR, { recursive: true });
+  await (0, import_promises16.mkdir)(QUEUE_DIR, { recursive: true });
   const final = (0, import_node_path8.join)(QUEUE_DIR, `${job.id}.json`);
   const tmp = `${final}.tmp.${String(process.pid)}.${String(Date.now())}`;
-  await (0, import_promises17.writeFile)(tmp, JSON.stringify(job, null, 2) + "\n", "utf8");
-  await (0, import_promises17.rename)(tmp, final);
+  await (0, import_promises16.writeFile)(tmp, JSON.stringify(job, null, 2) + "\n", "utf8");
+  await (0, import_promises16.rename)(tmp, final);
 }
 async function readJob(id) {
   try {
-    const raw = await (0, import_promises17.readFile)((0, import_node_path8.join)(QUEUE_DIR, `${id}.json`), "utf8");
+    const raw = await (0, import_promises16.readFile)((0, import_node_path8.join)(QUEUE_DIR, `${id}.json`), "utf8");
     return JSON.parse(raw);
   } catch (err) {
     if (err.code === "ENOENT") return null;
     throw err;
   }
 }
+async function deleteJob(id) {
+  try {
+    await (0, import_promises16.unlink)((0, import_node_path8.join)(QUEUE_DIR, `${id}.json`));
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+  }
+}
 async function loadQueue() {
   let entries;
   try {
-    entries = await (0, import_promises17.readdir)(QUEUE_DIR);
+    entries = await (0, import_promises16.readdir)(QUEUE_DIR);
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -21136,7 +20982,7 @@ async function loadQueue() {
   for (const name of entries) {
     if (!name.endsWith(".json")) continue;
     try {
-      const raw = await (0, import_promises17.readFile)((0, import_node_path8.join)(QUEUE_DIR, name), "utf8");
+      const raw = await (0, import_promises16.readFile)((0, import_node_path8.join)(QUEUE_DIR, name), "utf8");
       out.push(JSON.parse(raw));
     } catch {
     }
@@ -21210,22 +21056,23 @@ function parseTime(iso) {
   const t = Date.parse(iso);
   return Number.isNaN(t) ? 0 : t;
 }
-function msSince2(iso) {
+function msSince(iso) {
   if (!iso) return null;
   const t = Date.parse(iso);
   return Number.isNaN(t) ? null : Date.now() - t;
 }
-var DEFAULT_INTERVAL_MS2 = 2e3;
+var DEFAULT_INTERVAL_MS = 2e3;
 function startQueueLoop(deps) {
   const loadConfig = deps.loadConfig ?? loadQueueConfig;
   const countRunning = deps.countRunning ?? defaultCountRunningBoxes;
   const spawnWorker = deps.spawnWorker ?? defaultSpawnWorker;
-  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS2;
+  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS;
   const { log, onStatusChange } = deps;
   const countWorking = deps.countWorking ?? (deps.registry && deps.statusStore ? (idleGraceMs) => defaultCountWorkingBoxes(deps.registry, deps.statusStore, idleGraceMs) : null);
   let ticking = false;
   let stopped = false;
   let warnedNoWorkingDeps = false;
+  let lastSweepAt = 0;
   let inFlight = recoverOrphanedWorkers(log, onStatusChange).catch((err) => {
     log(`queue: orphan recovery failed: ${err instanceof Error ? err.message : String(err)}`);
   });
@@ -21235,6 +21082,13 @@ function startQueueLoop(deps) {
     try {
       const cfg = await loadConfig();
       if (!cfg.enabled) return;
+      const now = Date.now();
+      if (now - lastSweepAt >= SWEEP_INTERVAL_MS) {
+        lastSweepAt = now;
+        await sweepTerminalJobs(log, now).catch((err) => {
+          log(`queue: sweep failed: ${err instanceof Error ? err.message : String(err)}`);
+        });
+      }
       const jobs = await loadQueue();
       const hasQueued = jobs.some((j) => j.status === "queued");
       if (!hasQueued) return;
@@ -21337,6 +21191,21 @@ async function recoverOrphanedWorkers(log, onChange) {
     log(`queue: recovered orphan job ${j.id} (pid ${String(j.pid ?? "?")} not alive) -> failed`);
   }
 }
+var TERMINAL_RETENTION_MS = 60 * 60 * 1e3;
+var SWEEP_INTERVAL_MS = 60 * 1e3;
+var TERMINAL_STATUSES = ["done", "failed", "cancelled"];
+async function sweepTerminalJobs(log, now) {
+  const jobs = await loadQueue();
+  let swept = 0;
+  for (const j of jobs) {
+    if (!TERMINAL_STATUSES.includes(j.status)) continue;
+    const since = Date.parse(j.finishedAt ?? j.createdAt);
+    if (Number.isNaN(since) || now - since < TERMINAL_RETENTION_MS) continue;
+    await deleteJob(j.id);
+    swept += 1;
+  }
+  if (swept > 0) log(`queue: swept ${String(swept)} stale terminal manifest(s)`);
+}
 function processAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -21353,8 +21222,8 @@ async function defaultCountWorkingBoxes(registry, statusStore, idleGraceMs) {
     return {
       key: b.boxId,
       agentState: active.state,
-      sinceUpdateMs: msSince2(active.updatedAt),
-      sinceCreateMs: msSince2(b.createdAt)
+      sinceUpdateMs: msSince(active.updatedAt),
+      sinceCreateMs: msSince(b.createdAt)
     };
   });
   const count2 = countWorkingSlots(entries, idleGraceMs);
@@ -21426,7 +21295,7 @@ async function uncachedBoxStateCount() {
 }
 function inspectDockerState(containerName) {
   return new Promise((resolveP) => {
-    const child = (0, import_node_child_process9.spawn)("docker", ["inspect", "--format", "{{.State.Status}}", containerName], {
+    const child = (0, import_node_child_process8.spawn)("docker", ["inspect", "--format", "{{.State.Status}}", containerName], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let out = "";
@@ -21460,9 +21329,9 @@ async function defaultSpawnWorker(job) {
       `AGENTBOX_CLI_ENTRY not set or missing (${String(entry)}); cannot spawn queue worker`
     );
   }
-  await (0, import_promises17.mkdir)((0, import_node_path8.join)(STATE_DIR, "logs"), { recursive: true });
+  await (0, import_promises16.mkdir)((0, import_node_path8.join)(STATE_DIR, "logs"), { recursive: true });
   const fd = (0, import_node_fs6.openSync)(job.logPath, "a");
-  const child = (0, import_node_child_process9.spawn)(process.execPath, [entry, "_run-queued-job", job.id], {
+  const child = (0, import_node_child_process8.spawn)(process.execPath, [entry, "_run-queued-job", job.id], {
     detached: true,
     stdio: ["ignore", fd, fd],
     env: process.env
@@ -21476,6 +21345,212 @@ async function defaultSpawnWorker(job) {
 }
 var QUEUE_LOGS_DIR = (0, import_node_path8.join)(STATE_DIR, "logs");
 
+// src/autopause.ts
+function selectBoxesToPause(entries, cfg) {
+  if (!cfg.enabled) return [];
+  const runningCount = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
+  const excess = runningCount - cfg.maxRunningBoxes;
+  if (excess <= 0) return [];
+  const idleThresholdMs = cfg.idleMinutes * 6e4;
+  const candidates = entries.filter(
+    (e) => e.running && e.claudeState === "idle" && e.idleMs != null && e.idleMs >= idleThresholdMs
+  );
+  candidates.sort(
+    (a2, b) => b.idleMs - a2.idleMs || a2.createdAt - b.createdAt || (a2.boxId < b.boxId ? -1 : a2.boxId > b.boxId ? 1 : 0)
+  );
+  return candidates.slice(0, excess).map((e) => e.boxId);
+}
+async function loadAutopauseConfig() {
+  const d = BUILT_IN_DEFAULTS.autopause;
+  let global3 = {};
+  try {
+    global3 = parseUserConfig(await (0, import_promises18.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
+  } catch {
+  }
+  const a2 = global3.autopause ?? {};
+  return {
+    enabled: a2.enabled ?? d.enabled,
+    maxRunningBoxes: a2.maxRunningBoxes ?? d.maxRunningBoxes,
+    idleMinutes: a2.idleMinutes ?? d.idleMinutes
+  };
+}
+var DEFAULT_INTERVAL_MS2 = 6e4;
+function startAutopauseLoop(deps) {
+  const loadConfig = deps.loadConfig ?? loadAutopauseConfig;
+  const inspectStatus = deps.inspectStatus ?? inspectContainerState;
+  const pause = deps.pause ?? pauseContainer;
+  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS2;
+  const { registry, statusStore, events, log } = deps;
+  let ticking = false;
+  let stopped = false;
+  let inFlight = Promise.resolve();
+  async function tick() {
+    if (ticking) return;
+    ticking = true;
+    try {
+      const cfg = await loadConfig();
+      if (!cfg.enabled) return;
+      const entries = [];
+      for (const reg of registry.list()) {
+        if (!reg.containerName) continue;
+        const state = await inspectStatus(reg.containerName);
+        const active = readPauseState(statusStore.get(reg.boxId));
+        const idleMs = active.state === "idle" && active.updatedAt ? msSince2(active.updatedAt) : null;
+        entries.push({
+          boxId: reg.boxId,
+          containerName: reg.containerName,
+          running: state === "running",
+          claudeState: active.state,
+          idleMs,
+          createdAt: reg.createdAt ? toEpoch(reg.createdAt) : 0
+        });
+      }
+      const toPause = selectBoxesToPause(entries, cfg);
+      if (toPause.length === 0) return;
+      const byId = new Map(entries.map((e) => [e.boxId, e]));
+      const runningBefore = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
+      for (const boxId of toPause) {
+        const e = byId.get(boxId);
+        if (!e) continue;
+        try {
+          await pause(e.containerName);
+          const mins = e.idleMs != null ? Math.round(e.idleMs / 6e4) : null;
+          events.append({
+            boxId,
+            type: "autopause",
+            payload: {
+              containerName: e.containerName,
+              action: "paused",
+              idleMs: e.idleMs,
+              runningBefore,
+              max: cfg.maxRunningBoxes
+            }
+          });
+          log(
+            `autopause: paused box ${boxId} (${e.containerName})` + (mins != null ? ` after ~${String(mins)}m idle` : "") + `; running ${String(runningBefore)} -> target ${String(cfg.maxRunningBoxes)}`
+          );
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          log(`autopause: docker pause ${e.containerName} failed: ${msg}`);
+          events.append({
+            boxId,
+            type: "autopause",
+            payload: { containerName: e.containerName, action: "pause-failed", error: msg }
+          });
+        }
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      log(`autopause: tick error: ${msg}`);
+    } finally {
+      ticking = false;
+    }
+  }
+  const timer = setInterval(() => {
+    if (stopped) return;
+    inFlight = tick();
+  }, intervalMs);
+  timer.unref();
+  return {
+    stop: async () => {
+      stopped = true;
+      clearInterval(timer);
+      await inFlight.catch(() => {
+      });
+    }
+  };
+}
+function readPauseState(snap) {
+  const active = readActiveAgent(snap);
+  return { state: coarsePauseState(active.state), updatedAt: active.updatedAt };
+}
+function coarsePauseState(s) {
+  switch (s) {
+    case "idle":
+      return "idle";
+    case "waiting":
+      return "waiting";
+    case "working":
+    case "compacting":
+      return "working";
+    case null:
+      return null;
+    // end-plan / question / error / unknown: a live session expecting attention
+    // — never auto-pause it (maps to a non-idle, non-candidate state).
+    default:
+      return "unknown";
+  }
+}
+function msSince2(iso) {
+  const t = Date.parse(iso);
+  return Number.isNaN(t) ? null : Date.now() - t;
+}
+function toEpoch(iso) {
+  const t = Date.parse(iso);
+  return Number.isNaN(t) ? 0 : t;
+}
+var INSPECT_TIMEOUT_MS = 15e3;
+var PAUSE_TIMEOUT_MS = 3e4;
+function runDocker(args, timeoutMs) {
+  return new Promise((resolve2) => {
+    const child = (0, import_node_child_process9.spawn)("docker", args, { stdio: ["ignore", "pipe", "pipe"] });
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const finish = (exitCode) => {
+      if (settled) return;
+      settled = true;
+      resolve2({ exitCode, stdout, stderr });
+    };
+    const timer = setTimeout(() => {
+      child.kill("SIGTERM");
+      stderr += `
+relay: docker ${args.join(" ")} timed out after ${String(timeoutMs)}ms
+`;
+      finish(124);
+    }, timeoutMs);
+    child.stdout?.on("data", (c3) => {
+      stdout += c3.toString("utf8");
+    });
+    child.stderr?.on("data", (c3) => {
+      stderr += c3.toString("utf8");
+    });
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      stderr += String(err.message ?? err);
+      finish(127);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      finish(code ?? -1);
+    });
+  });
+}
+async function inspectContainerState(name) {
+  const r = await runDocker(["inspect", "--format", "{{.State.Status}}", name], INSPECT_TIMEOUT_MS);
+  if (r.exitCode !== 0) return "missing";
+  switch (r.stdout.trim()) {
+    case "running":
+      return "running";
+    case "paused":
+      return "paused";
+    case "created":
+    case "exited":
+    case "dead":
+    case "restarting":
+    case "removing":
+      return "stopped";
+    default:
+      return "missing";
+  }
+}
+async function pauseContainer(name) {
+  const r = await runDocker(["pause", name], PAUSE_TIMEOUT_MS);
+  if (r.exitCode !== 0) {
+    throw new Error(r.stderr.trim() || `docker pause ${name} exited ${String(r.exitCode)}`);
+  }
+}
+
 // src/bin.ts
 var program2 = new Command();
 program2.name("agentbox-relay").description("Host-side HTTP relay for box\u2192host events and RPCs").version("0.0.0");