@madarco/agentbox 0.13.0 → 0.15.0

package/runtime/relay/bin.cjs

@@ -3057,15 +3057,15 @@ var require_windows = __commonJS({
       }
       return false;
     }
-    function checkStat(stat, path6, options) {
-      if (!stat.isSymbolicLink() && !stat.isFile()) {
+    function checkStat(stat2, path6, options) {
+      if (!stat2.isSymbolicLink() && !stat2.isFile()) {
         return false;
       }
       return checkPathExt(path6, options);
     }
     function isexe(path6, options, cb) {
-      fs.stat(path6, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, path6, options));
+      fs.stat(path6, function(er, stat2) {
+        cb(er, er ? false : checkStat(stat2, path6, options));
       });
     }
     function sync(path6, options) {
@@ -3082,20 +3082,20 @@ var require_mode = __commonJS({
     isexe.sync = sync;
     var fs = require("fs");
     function isexe(path6, options, cb) {
-      fs.stat(path6, function(er, stat) {
-        cb(er, er ? false : checkStat(stat, options));
+      fs.stat(path6, function(er, stat2) {
+        cb(er, er ? false : checkStat(stat2, options));
       });
     }
     function sync(path6, options) {
       return checkStat(fs.statSync(path6), options);
     }
-    function checkStat(stat, options) {
-      return stat.isFile() && checkMode(stat, options);
+    function checkStat(stat2, options) {
+      return stat2.isFile() && checkMode(stat2, options);
     }
-    function checkMode(stat, options) {
-      var mod = stat.mode;
-      var uid = stat.uid;
-      var gid = stat.gid;
+    function checkMode(stat2, options) {
+      var mod = stat2.mode;
+      var uid = stat2.uid;
+      var gid = stat2.gid;
       var myUid = options.uid !== void 0 ? options.uid : process.getuid && process.getuid();
       var myGid = options.gid !== void 0 ? options.gid : process.getgid && process.getgid();
       var u2 = parseInt("100", 8);
@@ -11808,11 +11808,11 @@ var replacements = Object.entries(specialMainSymbols);
 // ../../node_modules/.pnpm/yoctocolors@2.1.2/node_modules/yoctocolors/base.js
 var import_node_tty = __toESM(require("tty"), 1);
 var hasColors = import_node_tty.default?.WriteStream?.prototype?.hasColors?.() ?? false;
-var format = (open, close) => {
+var format = (open2, close) => {
   if (!hasColors) {
     return (input) => input;
   }
-  const openCode = `\x1B[${open}m`;
+  const openCode = `\x1B[${open2}m`;
   const closeCode = `\x1B[${close}m`;
   return (input) => {
     const string = input + "";
@@ -18367,6 +18367,21 @@ var HostInitiatedTokens = class {
 var import_node_crypto2 = require("crypto");
 var PendingPrompts = class {
   entries = /* @__PURE__ */ new Map();
+  autoApprove = null;
+  /** Install the per-box auto-approve policy (relay server, once at startup). */
+  setAutoApprovePolicy(policy) {
+    this.autoApprove = policy;
+  }
+  /**
+   * True when this box opted into `box.autoApproveHostActions`. Records the
+   * bypass to the audit sink as a side effect so the caller short-circuits
+   * with a trail. Returns false when no policy is installed.
+   */
+  consumeAutoApprove(boxId, params) {
+    if (!this.autoApprove || !this.autoApprove.shouldAutoApprove(boxId)) return false;
+    this.autoApprove.audit(boxId, params);
+    return true;
+  }
   add(boxId, ev) {
     return new Promise((resolve2) => {
       this.entries.set(ev.id, {
@@ -18453,6 +18468,9 @@ async function askPrompt(prompts, subscribers, boxId, params, opts) {
   if (process.env.AGENTBOX_PROMPT === "off") {
     return { answer: "y" };
   }
+  if (prompts.consumeAutoApprove(boxId, params)) {
+    return { answer: "y" };
+  }
   const ev = { id: (0, import_node_crypto2.randomUUID)(), ...params };
   const promise = prompts.add(boxId, ev);
   subscribers.broadcast(boxId, "prompt-ask", ev);
@@ -18492,6 +18510,10 @@ async function resolveCloudBackend(name) {
     const pkg = "@agentbox/sandbox-vercel";
     return loadCloudBackend(pkg, async () => (await import(pkg)).vercelBackend);
   }
+  if (name === "e2b") {
+    const pkg = "@agentbox/sandbox-e2b";
+    return loadCloudBackend(pkg, async () => (await import(pkg)).e2bBackend);
+  }
   throw new Error(`no host executor for cloud backend '${name}'`);
 }
 async function loadCloudBackend(pkg, load2) {
@@ -19426,6 +19448,21 @@ function createRelayServer(opts) {
   const prompts = new PendingPrompts();
   const subscribers = new PromptSubscribers();
   const notices = new BoxNotices(subscribers);
+  prompts.setAutoApprovePolicy({
+    shouldAutoApprove: (boxId) => registry.get(boxId)?.autoApproveHostActions === true,
+    audit: (boxId, params) => {
+      events.append({
+        boxId,
+        type: "host-action-auto-approved",
+        payload: {
+          command: params.context?.command,
+          argv: params.context?.argv,
+          message: params.message
+        }
+      });
+      log(`auto-approved host action for ${boxId}: ${params.context?.command ?? params.message}`);
+    }
+  });
   const hostInitiatedTokens = new HostInitiatedTokens();
   let queuePoke = null;
   const host = opts.host ?? "0.0.0.0";
@@ -19613,11 +19650,22 @@ function createRelayServer(opts) {
           send(res, 400, { error: "cp.* requires {boxPath, hostPath} strings" });
           return;
         }
+        if (params.exclude !== void 0 && (!Array.isArray(params.exclude) || params.exclude.some((p) => typeof p !== "string"))) {
+          send(res, 400, { error: "cp.* exclude must be an array of strings" });
+          return;
+        }
         const direction = body.method === "cp.toHost" ? "box -> host" : "host -> box";
+        const pathDetail = body.method === "cp.toHost" ? `${params.boxPath} -> ${params.hostPath}` : `${params.hostPath} -> ${params.boxPath}`;
+        const detailParts = [pathDetail];
+        if (params.exclude && params.exclude.length > 0) {
+          detailParts.push(`exclude: ${params.exclude.join(", ")}`);
+        }
+        if (params.defaultExcludes === false) detailParts.push("(default excludes off)");
+        if (params.yes) detailParts.push("(over size limit \u2014 confirmed)");
         const verdict = await askPrompt(prompts, subscribers, reg.boxId, {
           kind: "confirm",
           message: `Allow cp (${direction}) on ${reg.name}?`,
-          detail: body.method === "cp.toHost" ? `${params.boxPath} -> ${params.hostPath}` : `${params.hostPath} -> ${params.boxPath}`,
+          detail: detailParts.join("\n"),
           defaultAnswer: "n",
           context: {
             command: body.method,
@@ -19783,7 +19831,8 @@ function createRelayServer(opts) {
         worktrees,
         previewUrl: typeof body.previewUrl === "string" && body.previewUrl.length > 0 ? body.previewUrl : void 0,
         previewToken: typeof body.previewToken === "string" && body.previewToken.length > 0 ? body.previewToken : void 0,
-        bridgeToken: typeof body.bridgeToken === "string" && body.bridgeToken.length > 0 ? body.bridgeToken : void 0
+        bridgeToken: typeof body.bridgeToken === "string" && body.bridgeToken.length > 0 ? body.bridgeToken : void 0,
+        autoApproveHostActions: body.autoApproveHostActions === true
       };
       registry.register(reg);
       log(
@@ -19891,6 +19940,15 @@ function createRelayServer(opts) {
       send(res, 200, { boxes: redacted });
       return;
     }
+    if (route === "GET /admin/prompts") {
+      const boxId = url.searchParams.get("boxId") ?? "";
+      if (boxId.length === 0) {
+        send(res, 400, { error: "missing boxId query param" });
+        return;
+      }
+      send(res, 200, { prompts: prompts.forBox(boxId) });
+      return;
+    }
     if (route === "GET /admin/prompts/stream") {
       const boxId = url.searchParams.get("boxId") ?? "";
       if (boxId.length === 0) {
@@ -20208,7 +20266,11 @@ async function handleCpRpc(reg, method, params) {
     };
   }
   const boxRef = `${reg.name}:${params.boxPath}`;
-  const argv = method === "cp.toHost" ? [process.execPath, entry, "cp", boxRef, params.hostPath] : [process.execPath, entry, "cp", params.hostPath, boxRef];
+  const flags = [];
+  for (const pat of params.exclude ?? []) flags.push("--exclude", pat);
+  if (params.defaultExcludes === false) flags.push("--no-default-excludes");
+  if (params.yes) flags.push("--yes");
+  const argv = method === "cp.toHost" ? [process.execPath, entry, "cp", boxRef, params.hostPath, ...flags] : [process.execPath, entry, "cp", params.hostPath, boxRef, ...flags];
   return runHostCommand(argv, CP_RPC_TIMEOUT_MS);
 }
 async function handleDownloadRpc(reg, kind) {
@@ -20306,8 +20368,8 @@ async function startRelayServer(opts) {
 }
 
 // src/autopause.ts
-var import_node_child_process8 = require("child_process");
-var import_promises16 = require("fs/promises");
+var import_node_child_process9 = require("child_process");
+var import_promises18 = require("fs/promises");
 
 // ../config/dist/index.js
 var import_yaml = __toESM(require_dist(), 1);
@@ -20325,15 +20387,18 @@ var BUILT_IN_DEFAULTS = {
     defaultCheckpointDaytona: "",
     defaultCheckpointHetzner: "",
     defaultCheckpointVercel: "",
+    defaultCheckpointE2b: "",
     size: "",
     sizeDocker: "",
     sizeDaytona: "",
     sizeHetzner: "",
     sizeVercel: "",
+    sizeE2b: "",
     withPlaywright: false,
     withEnv: false,
     resyncOnStart: true,
     vnc: true,
+    autoApproveHostActions: false,
     isolateClaudeConfig: false,
     isolateCodexConfig: false,
     isolateOpencodeConfig: false,
@@ -20342,6 +20407,7 @@ var BUILT_IN_DEFAULTS = {
     imageDaytona: "",
     imageHetzner: "",
     imageVercel: "",
+    imageE2b: "",
     // Mirrors BOX_IMAGE_REGISTRY in @agentbox/sandbox-docker. Empty disables the
     // registry pull (always build the docker base image locally).
     imageRegistry: "ghcr.io/madarco/agentbox/box",
@@ -20353,7 +20419,8 @@ var BUILT_IN_DEFAULTS = {
     bundleDepth: void 0,
     vercelVcpus: 2,
     vercelTimeoutMs: 27e5,
-    vercelNetworkPolicy: ""
+    vercelNetworkPolicy: "",
+    cpMaxBytes: 100 * 1024 * 1024
   },
   checkpoint: {
     maxLayers: 3
@@ -20409,7 +20476,8 @@ var BUILT_IN_DEFAULTS = {
     enabled: true,
     maxConcurrent: 5,
     maxWorking: 0,
-    idleGraceSeconds: 15
+    idleGraceSeconds: 15,
+    openIn: "none"
   },
   cloud: {
     useCurrentBranch: false
@@ -20423,8 +20491,8 @@ var KEY_REGISTRY = [
   {
     key: "box.provider",
     type: "enum",
-    enumValues: ["docker", "daytona", "hetzner", "vercel"],
-    description: "Sandbox backend new boxes are created on: local Docker containers, Daytona Cloud sandboxes, Hetzner Cloud VPSes, or Vercel Sandboxes."
+    enumValues: ["docker", "daytona", "hetzner", "vercel", "e2b"],
+    description: "Sandbox backend new boxes are created on: local Docker containers, Daytona Cloud sandboxes, Hetzner Cloud VPSes, Vercel Sandboxes, or E2B microVMs."
   },
   {
     key: "box.hostSnapshot",
@@ -20460,6 +20528,12 @@ var KEY_REGISTRY = [
     description: "Per-provider override of `box.defaultCheckpoint` for vercel. Wins over the global when set; set via `agentbox checkpoint set-default --provider vercel`.",
     advanced: true
   },
+  {
+    key: "box.defaultCheckpointE2b",
+    type: "string",
+    description: "Per-provider override of `box.defaultCheckpoint` for e2b. Wins over the global when set; set via `agentbox checkpoint set-default --provider e2b`.",
+    advanced: true
+  },
   {
     key: "box.size",
     type: "string",
@@ -20489,6 +20563,12 @@ var KEY_REGISTRY = [
     description: "Per-provider override of `box.size` for vercel. Reserved \u2014 vercel sizing is controlled via `box.vercelVcpus`.",
     advanced: true
   },
+  {
+    key: "box.sizeE2b",
+    type: "string",
+    description: "Per-provider override of `box.size` for e2b. Reserved \u2014 e2b sizing is template-level (set at `agentbox prepare --provider e2b` time via --vcpus / --memory).",
+    advanced: true
+  },
   {
     key: "checkpoint.maxLayers",
     type: "int",
@@ -20515,6 +20595,11 @@ var KEY_REGISTRY = [
     type: "bool",
     description: "Run the per-box Xvnc + noVNC stack."
   },
+  {
+    key: "box.autoApproveHostActions",
+    type: "bool",
+    description: "Auto-approve host-action confirmations (git push, cp host<->box, gh PR writes, checkpoint) for this box without an interactive prompt. Off by default; intended for unattended orchestration of trusted boxes. Each auto-approval is recorded as a relay event (visible in `agentbox agent` / the dashboard)."
+  },
   {
     key: "box.isolateClaudeConfig",
     type: "bool",
@@ -20560,6 +20645,12 @@ var KEY_REGISTRY = [
     description: "Per-provider override of `box.image` for vercel (snapshot id, e.g. `snap_\u2026`). Written by `agentbox prepare --provider vercel`.",
     advanced: true
   },
+  {
+    key: "box.imageE2b",
+    type: "string",
+    description: "Per-provider override of `box.image` for e2b (template id or `name:tag`, e.g. `agentbox-base:latest`). Written by `agentbox prepare --provider e2b`.",
+    advanced: true
+  },
   {
     key: "box.imageRegistry",
     type: "string",
@@ -20607,6 +20698,12 @@ var KEY_REGISTRY = [
     type: "int",
     description: "Max session length (ms) for new --provider vercel boxes before the VM auto-snapshots; persistent mode auto-resumes on the next call. Default 2700000 (45 min, the Hobby ceiling). Vercel-only."
   },
+  {
+    key: "box.cpMaxBytes",
+    type: "int",
+    description: "Max bytes a single host\u2192box copy may transfer after excludes, shared by `agentbox cp` (blocked with a size breakdown unless --yes) and each `carry:` entry (rejected at resolve time). Default 104857600 (100 MiB).",
+    advanced: true
+  },
   {
     key: "box.vercelNetworkPolicy",
     type: "string",
@@ -20754,6 +20851,12 @@ var KEY_REGISTRY = [
     type: "int",
     description: "Seconds an agent must stay non-working before it frees its working slot (debounce against brief idle flaps between turns). Only used when queue.maxWorking > 0."
   },
+  {
+    key: "queue.openIn",
+    type: "enum",
+    enumValues: ["none", "split", "window", "tab"],
+    description: "When a background `-i` job finishes creating its box, where the host relay opens an attached terminal onto it: `none` (default \u2014 open nothing, just queue), `split`, `window`, or `tab`. Honored only when the submitting shell runs inside tmux, cmux, or iTerm2 (the targeting is captured at submit time). Under cmux, `split` splits the pane you submitted from (falling back to the parent workspace, then a new workspace), `tab` adds a tab in the parent workspace, and `window` opens a separate workspace; iTerm2 opens relative to the frontmost window. Unlike `attach.openIn` there is no `same` mode \u2014 the box is created asynchronously, so it is always a fresh terminal."
+  },
   {
     key: "cloud.useCurrentBranch",
     type: "bool",
@@ -20900,210 +21003,18 @@ var GLOBAL_CONFIG_FILE = (0, import_path2.join)(STATE_DIR2, "config.yaml");
 var PROJECTS_DIR = (0, import_path2.join)(STATE_DIR2, "projects");
 var PROJECT_GC_COUNTER_FILE = (0, import_path3.join)(PROJECTS_DIR, ".gc.json");
 
-// src/autopause.ts
-function selectBoxesToPause(entries, cfg) {
-  if (!cfg.enabled) return [];
-  const runningCount = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
-  const excess = runningCount - cfg.maxRunningBoxes;
-  if (excess <= 0) return [];
-  const idleThresholdMs = cfg.idleMinutes * 6e4;
-  const candidates = entries.filter(
-    (e) => e.running && e.claudeState === "idle" && e.idleMs != null && e.idleMs >= idleThresholdMs
-  );
-  candidates.sort(
-    (a2, b) => b.idleMs - a2.idleMs || a2.createdAt - b.createdAt || (a2.boxId < b.boxId ? -1 : a2.boxId > b.boxId ? 1 : 0)
-  );
-  return candidates.slice(0, excess).map((e) => e.boxId);
-}
-async function loadAutopauseConfig() {
-  const d = BUILT_IN_DEFAULTS.autopause;
-  let global3 = {};
-  try {
-    global3 = parseUserConfig(await (0, import_promises16.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
-  } catch {
-  }
-  const a2 = global3.autopause ?? {};
-  return {
-    enabled: a2.enabled ?? d.enabled,
-    maxRunningBoxes: a2.maxRunningBoxes ?? d.maxRunningBoxes,
-    idleMinutes: a2.idleMinutes ?? d.idleMinutes
-  };
-}
-var DEFAULT_INTERVAL_MS = 6e4;
-function startAutopauseLoop(deps) {
-  const loadConfig = deps.loadConfig ?? loadAutopauseConfig;
-  const inspectStatus = deps.inspectStatus ?? inspectContainerState;
-  const pause = deps.pause ?? pauseContainer;
-  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS;
-  const { registry, statusStore, events, log } = deps;
-  let ticking = false;
-  let stopped = false;
-  let inFlight = Promise.resolve();
-  async function tick() {
-    if (ticking) return;
-    ticking = true;
-    try {
-      const cfg = await loadConfig();
-      if (!cfg.enabled) return;
-      const entries = [];
-      for (const reg of registry.list()) {
-        if (!reg.containerName) continue;
-        const state = await inspectStatus(reg.containerName);
-        const claude = readClaude(statusStore.get(reg.boxId));
-        const idleMs = claude.state === "idle" && claude.updatedAt ? msSince(claude.updatedAt) : null;
-        entries.push({
-          boxId: reg.boxId,
-          containerName: reg.containerName,
-          running: state === "running",
-          claudeState: claude.state,
-          idleMs,
-          createdAt: reg.createdAt ? toEpoch(reg.createdAt) : 0
-        });
-      }
-      const toPause = selectBoxesToPause(entries, cfg);
-      if (toPause.length === 0) return;
-      const byId = new Map(entries.map((e) => [e.boxId, e]));
-      const runningBefore = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
-      for (const boxId of toPause) {
-        const e = byId.get(boxId);
-        if (!e) continue;
-        try {
-          await pause(e.containerName);
-          const mins = e.idleMs != null ? Math.round(e.idleMs / 6e4) : null;
-          events.append({
-            boxId,
-            type: "autopause",
-            payload: {
-              containerName: e.containerName,
-              action: "paused",
-              idleMs: e.idleMs,
-              runningBefore,
-              max: cfg.maxRunningBoxes
-            }
-          });
-          log(
-            `autopause: paused box ${boxId} (${e.containerName})` + (mins != null ? ` after ~${String(mins)}m idle` : "") + `; running ${String(runningBefore)} -> target ${String(cfg.maxRunningBoxes)}`
-          );
-        } catch (err) {
-          const msg = err instanceof Error ? err.message : String(err);
-          log(`autopause: docker pause ${e.containerName} failed: ${msg}`);
-          events.append({
-            boxId,
-            type: "autopause",
-            payload: { containerName: e.containerName, action: "pause-failed", error: msg }
-          });
-        }
-      }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      log(`autopause: tick error: ${msg}`);
-    } finally {
-      ticking = false;
-    }
-  }
-  const timer = setInterval(() => {
-    if (stopped) return;
-    inFlight = tick();
-  }, intervalMs);
-  timer.unref();
-  return {
-    stop: async () => {
-      stopped = true;
-      clearInterval(timer);
-      await inFlight.catch(() => {
-      });
-    }
-  };
-}
-function readClaude(snap) {
-  const c3 = snap && typeof snap === "object" ? snap.claude : void 0;
-  if (!c3 || typeof c3 !== "object") return { state: null, updatedAt: null };
-  const o2 = c3;
-  const state = o2.state === "working" || o2.state === "idle" || o2.state === "waiting" || o2.state === "unknown" ? o2.state : null;
-  return { state, updatedAt: typeof o2.updatedAt === "string" ? o2.updatedAt : null };
-}
-function msSince(iso) {
-  const t = Date.parse(iso);
-  return Number.isNaN(t) ? null : Date.now() - t;
-}
-function toEpoch(iso) {
-  const t = Date.parse(iso);
-  return Number.isNaN(t) ? 0 : t;
-}
-var INSPECT_TIMEOUT_MS = 15e3;
-var PAUSE_TIMEOUT_MS = 3e4;
-function runDocker(args, timeoutMs) {
-  return new Promise((resolve2) => {
-    const child = (0, import_node_child_process8.spawn)("docker", args, { stdio: ["ignore", "pipe", "pipe"] });
-    let stdout = "";
-    let stderr = "";
-    let settled = false;
-    const finish = (exitCode) => {
-      if (settled) return;
-      settled = true;
-      resolve2({ exitCode, stdout, stderr });
-    };
-    const timer = setTimeout(() => {
-      child.kill("SIGTERM");
-      stderr += `
-relay: docker ${args.join(" ")} timed out after ${String(timeoutMs)}ms
-`;
-      finish(124);
-    }, timeoutMs);
-    child.stdout?.on("data", (c3) => {
-      stdout += c3.toString("utf8");
-    });
-    child.stderr?.on("data", (c3) => {
-      stderr += c3.toString("utf8");
-    });
-    child.on("error", (err) => {
-      clearTimeout(timer);
-      stderr += String(err.message ?? err);
-      finish(127);
-    });
-    child.on("close", (code) => {
-      clearTimeout(timer);
-      finish(code ?? -1);
-    });
-  });
-}
-async function inspectContainerState(name) {
-  const r = await runDocker(["inspect", "--format", "{{.State.Status}}", name], INSPECT_TIMEOUT_MS);
-  if (r.exitCode !== 0) return "missing";
-  switch (r.stdout.trim()) {
-    case "running":
-      return "running";
-    case "paused":
-      return "paused";
-    case "created":
-    case "exited":
-    case "dead":
-    case "restarting":
-    case "removing":
-      return "stopped";
-    default:
-      return "missing";
-  }
-}
-async function pauseContainer(name) {
-  const r = await runDocker(["pause", name], PAUSE_TIMEOUT_MS);
-  if (r.exitCode !== 0) {
-    throw new Error(r.stderr.trim() || `docker pause ${name} exited ${String(r.exitCode)}`);
-  }
-}
-
 // src/queue.ts
-var import_node_child_process9 = require("child_process");
-var import_promises17 = require("fs/promises");
+var import_node_child_process8 = require("child_process");
+var import_promises16 = require("fs/promises");
 var import_node_fs6 = require("fs");
 var import_node_path8 = require("path");
-var import_promises18 = require("timers/promises");
+var import_promises17 = require("timers/promises");
 var QUEUE_DIR = (0, import_node_path8.join)(STATE_DIR, "queue");
 async function loadQueueConfig() {
   const d = BUILT_IN_DEFAULTS.queue;
   let global3 = {};
   try {
-    global3 = parseUserConfig(await (0, import_promises17.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
+    global3 = parseUserConfig(await (0, import_promises16.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
   } catch {
   }
   const q = global3.queue ?? {};
@@ -21115,25 +21026,32 @@ async function loadQueueConfig() {
   };
 }
 async function writeJob(job) {
-  await (0, import_promises17.mkdir)(QUEUE_DIR, { recursive: true });
+  await (0, import_promises16.mkdir)(QUEUE_DIR, { recursive: true });
   const final = (0, import_node_path8.join)(QUEUE_DIR, `${job.id}.json`);
   const tmp = `${final}.tmp.${String(process.pid)}.${String(Date.now())}`;
-  await (0, import_promises17.writeFile)(tmp, JSON.stringify(job, null, 2) + "\n", "utf8");
-  await (0, import_promises17.rename)(tmp, final);
+  await (0, import_promises16.writeFile)(tmp, JSON.stringify(job, null, 2) + "\n", "utf8");
+  await (0, import_promises16.rename)(tmp, final);
 }
 async function readJob(id) {
   try {
-    const raw = await (0, import_promises17.readFile)((0, import_node_path8.join)(QUEUE_DIR, `${id}.json`), "utf8");
+    const raw = await (0, import_promises16.readFile)((0, import_node_path8.join)(QUEUE_DIR, `${id}.json`), "utf8");
     return JSON.parse(raw);
   } catch (err) {
     if (err.code === "ENOENT") return null;
     throw err;
   }
 }
+async function deleteJob(id) {
+  try {
+    await (0, import_promises16.unlink)((0, import_node_path8.join)(QUEUE_DIR, `${id}.json`));
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+  }
+}
 async function loadQueue() {
   let entries;
   try {
-    entries = await (0, import_promises17.readdir)(QUEUE_DIR);
+    entries = await (0, import_promises16.readdir)(QUEUE_DIR);
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -21142,7 +21060,7 @@ async function loadQueue() {
   for (const name of entries) {
     if (!name.endsWith(".json")) continue;
     try {
-      const raw = await (0, import_promises17.readFile)((0, import_node_path8.join)(QUEUE_DIR, name), "utf8");
+      const raw = await (0, import_promises16.readFile)((0, import_node_path8.join)(QUEUE_DIR, name), "utf8");
       out.push(JSON.parse(raw));
     } catch {
     }
@@ -21216,22 +21134,23 @@ function parseTime(iso) {
   const t = Date.parse(iso);
   return Number.isNaN(t) ? 0 : t;
 }
-function msSince2(iso) {
+function msSince(iso) {
   if (!iso) return null;
   const t = Date.parse(iso);
   return Number.isNaN(t) ? null : Date.now() - t;
 }
-var DEFAULT_INTERVAL_MS2 = 2e3;
+var DEFAULT_INTERVAL_MS = 2e3;
 function startQueueLoop(deps) {
   const loadConfig = deps.loadConfig ?? loadQueueConfig;
   const countRunning = deps.countRunning ?? defaultCountRunningBoxes;
   const spawnWorker = deps.spawnWorker ?? defaultSpawnWorker;
-  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS2;
+  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS;
   const { log, onStatusChange } = deps;
   const countWorking = deps.countWorking ?? (deps.registry && deps.statusStore ? (idleGraceMs) => defaultCountWorkingBoxes(deps.registry, deps.statusStore, idleGraceMs) : null);
   let ticking = false;
   let stopped = false;
   let warnedNoWorkingDeps = false;
+  let lastSweepAt = 0;
   let inFlight = recoverOrphanedWorkers(log, onStatusChange).catch((err) => {
     log(`queue: orphan recovery failed: ${err instanceof Error ? err.message : String(err)}`);
   });
@@ -21241,6 +21160,13 @@ function startQueueLoop(deps) {
     try {
       const cfg = await loadConfig();
       if (!cfg.enabled) return;
+      const now = Date.now();
+      if (now - lastSweepAt >= SWEEP_INTERVAL_MS) {
+        lastSweepAt = now;
+        await sweepTerminalJobs(log, now).catch((err) => {
+          log(`queue: sweep failed: ${err instanceof Error ? err.message : String(err)}`);
+        });
+      }
       const jobs = await loadQueue();
       const hasQueued = jobs.some((j) => j.status === "queued");
       if (!hasQueued) return;
@@ -21343,6 +21269,21 @@ async function recoverOrphanedWorkers(log, onChange) {
     log(`queue: recovered orphan job ${j.id} (pid ${String(j.pid ?? "?")} not alive) -> failed`);
   }
 }
+var TERMINAL_RETENTION_MS = 60 * 60 * 1e3;
+var SWEEP_INTERVAL_MS = 60 * 1e3;
+var TERMINAL_STATUSES = ["done", "failed", "cancelled"];
+async function sweepTerminalJobs(log, now) {
+  const jobs = await loadQueue();
+  let swept = 0;
+  for (const j of jobs) {
+    if (!TERMINAL_STATUSES.includes(j.status)) continue;
+    const since = Date.parse(j.finishedAt ?? j.createdAt);
+    if (Number.isNaN(since) || now - since < TERMINAL_RETENTION_MS) continue;
+    await deleteJob(j.id);
+    swept += 1;
+  }
+  if (swept > 0) log(`queue: swept ${String(swept)} stale terminal manifest(s)`);
+}
 function processAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -21359,8 +21300,8 @@ async function defaultCountWorkingBoxes(registry, statusStore, idleGraceMs) {
     return {
       key: b.boxId,
       agentState: active.state,
-      sinceUpdateMs: msSince2(active.updatedAt),
-      sinceCreateMs: msSince2(b.createdAt)
+      sinceUpdateMs: msSince(active.updatedAt),
+      sinceCreateMs: msSince(b.createdAt)
     };
   });
   const count2 = countWorkingSlots(entries, idleGraceMs);
@@ -21432,7 +21373,7 @@ async function uncachedBoxStateCount() {
 }
 function inspectDockerState(containerName) {
   return new Promise((resolveP) => {
-    const child = (0, import_node_child_process9.spawn)("docker", ["inspect", "--format", "{{.State.Status}}", containerName], {
+    const child = (0, import_node_child_process8.spawn)("docker", ["inspect", "--format", "{{.State.Status}}", containerName], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     let out = "";
@@ -21466,9 +21407,9 @@ async function defaultSpawnWorker(job) {
       `AGENTBOX_CLI_ENTRY not set or missing (${String(entry)}); cannot spawn queue worker`
     );
   }
-  await (0, import_promises17.mkdir)((0, import_node_path8.join)(STATE_DIR, "logs"), { recursive: true });
+  await (0, import_promises16.mkdir)((0, import_node_path8.join)(STATE_DIR, "logs"), { recursive: true });
   const fd = (0, import_node_fs6.openSync)(job.logPath, "a");
-  const child = (0, import_node_child_process9.spawn)(process.execPath, [entry, "_run-queued-job", job.id], {
+  const child = (0, import_node_child_process8.spawn)(process.execPath, [entry, "_run-queued-job", job.id], {
     detached: true,
     stdio: ["ignore", fd, fd],
     env: process.env
@@ -21482,6 +21423,212 @@ async function defaultSpawnWorker(job) {
 }
 var QUEUE_LOGS_DIR = (0, import_node_path8.join)(STATE_DIR, "logs");
 
+// src/autopause.ts
+function selectBoxesToPause(entries, cfg) {
+  if (!cfg.enabled) return [];
+  const runningCount = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
+  const excess = runningCount - cfg.maxRunningBoxes;
+  if (excess <= 0) return [];
+  const idleThresholdMs = cfg.idleMinutes * 6e4;
+  const candidates = entries.filter(
+    (e) => e.running && e.claudeState === "idle" && e.idleMs != null && e.idleMs >= idleThresholdMs
+  );
+  candidates.sort(
+    (a2, b) => b.idleMs - a2.idleMs || a2.createdAt - b.createdAt || (a2.boxId < b.boxId ? -1 : a2.boxId > b.boxId ? 1 : 0)
+  );
+  return candidates.slice(0, excess).map((e) => e.boxId);
+}
+async function loadAutopauseConfig() {
+  const d = BUILT_IN_DEFAULTS.autopause;
+  let global3 = {};
+  try {
+    global3 = parseUserConfig(await (0, import_promises18.readFile)(GLOBAL_CONFIG_FILE, "utf8"), GLOBAL_CONFIG_FILE);
+  } catch {
+  }
+  const a2 = global3.autopause ?? {};
+  return {
+    enabled: a2.enabled ?? d.enabled,
+    maxRunningBoxes: a2.maxRunningBoxes ?? d.maxRunningBoxes,
+    idleMinutes: a2.idleMinutes ?? d.idleMinutes
+  };
+}
+var DEFAULT_INTERVAL_MS2 = 6e4;
+function startAutopauseLoop(deps) {
+  const loadConfig = deps.loadConfig ?? loadAutopauseConfig;
+  const inspectStatus = deps.inspectStatus ?? inspectContainerState;
+  const pause = deps.pause ?? pauseContainer;
+  const intervalMs = deps.intervalMs ?? DEFAULT_INTERVAL_MS2;
+  const { registry, statusStore, events, log } = deps;
+  let ticking = false;
+  let stopped = false;
+  let inFlight = Promise.resolve();
+  async function tick() {
+    if (ticking) return;
+    ticking = true;
+    try {
+      const cfg = await loadConfig();
+      if (!cfg.enabled) return;
+      const entries = [];
+      for (const reg of registry.list()) {
+        if (!reg.containerName) continue;
+        const state = await inspectStatus(reg.containerName);
+        const active = readPauseState(statusStore.get(reg.boxId));
+        const idleMs = active.state === "idle" && active.updatedAt ? msSince2(active.updatedAt) : null;
+        entries.push({
+          boxId: reg.boxId,
+          containerName: reg.containerName,
+          running: state === "running",
+          claudeState: active.state,
+          idleMs,
+          createdAt: reg.createdAt ? toEpoch(reg.createdAt) : 0
+        });
+      }
+      const toPause = selectBoxesToPause(entries, cfg);
+      if (toPause.length === 0) return;
+      const byId = new Map(entries.map((e) => [e.boxId, e]));
+      const runningBefore = entries.reduce((n2, e) => e.running ? n2 + 1 : n2, 0);
+      for (const boxId of toPause) {
+        const e = byId.get(boxId);
+        if (!e) continue;
+        try {
+          await pause(e.containerName);
+          const mins = e.idleMs != null ? Math.round(e.idleMs / 6e4) : null;
+          events.append({
+            boxId,
+            type: "autopause",
+            payload: {
+              containerName: e.containerName,
+              action: "paused",
+              idleMs: e.idleMs,
+              runningBefore,
+              max: cfg.maxRunningBoxes
+            }
+          });
+          log(
+            `autopause: paused box ${boxId} (${e.containerName})` + (mins != null ? ` after ~${String(mins)}m idle` : "") + `; running ${String(runningBefore)} -> target ${String(cfg.maxRunningBoxes)}`
+          );
+        } catch (err) {
+          const msg = err instanceof Error ? err.message : String(err);
+          log(`autopause: docker pause ${e.containerName} failed: ${msg}`);
+          events.append({
+            boxId,
+            type: "autopause",
+            payload: { containerName: e.containerName, action: "pause-failed", error: msg }
+          });
+        }
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      log(`autopause: tick error: ${msg}`);
+    } finally {
+      ticking = false;
+    }
+  }
+  const timer = setInterval(() => {
+    if (stopped) return;
+    inFlight = tick();
+  }, intervalMs);
+  timer.unref();
+  return {
+    stop: async () => {
+      stopped = true;
+      clearInterval(timer);
+      await inFlight.catch(() => {
+      });
+    }
+  };
+}
+function readPauseState(snap) {
+  const active = readActiveAgent(snap);
+  return { state: coarsePauseState(active.state), updatedAt: active.updatedAt };
+}
+function coarsePauseState(s) {
+  switch (s) {
+    case "idle":
+      return "idle";
+    case "waiting":
+      return "waiting";
+    case "working":
+    case "compacting":
+      return "working";
+    case null:
+      return null;
+    // end-plan / question / error / unknown: a live session expecting attention
+    // — never auto-pause it (maps to a non-idle, non-candidate state).
+    default:
+      return "unknown";
+  }
+}
+function msSince2(iso) {
+  const t = Date.parse(iso);
+  return Number.isNaN(t) ? null : Date.now() - t;
+}
+function toEpoch(iso) {
+  const t = Date.parse(iso);
+  return Number.isNaN(t) ? 0 : t;
+}
+var INSPECT_TIMEOUT_MS = 15e3;
+var PAUSE_TIMEOUT_MS = 3e4;
+function runDocker(args, timeoutMs) {
+  return new Promise((resolve2) => {
+    const child = (0, import_node_child_process9.spawn)("docker", args, { stdio: ["ignore", "pipe", "pipe"] });
+    let stdout = "";
+    let stderr = "";
+    let settled = false;
+    const finish = (exitCode) => {
+      if (settled) return;
+      settled = true;
+      resolve2({ exitCode, stdout, stderr });
+    };
+    const timer = setTimeout(() => {
+      child.kill("SIGTERM");
+      stderr += `
+relay: docker ${args.join(" ")} timed out after ${String(timeoutMs)}ms
+`;
+      finish(124);
+    }, timeoutMs);
+    child.stdout?.on("data", (c3) => {
+      stdout += c3.toString("utf8");
+    });
+    child.stderr?.on("data", (c3) => {
+      stderr += c3.toString("utf8");
+    });
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      stderr += String(err.message ?? err);
+      finish(127);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      finish(code ?? -1);
+    });
+  });
+}
+async function inspectContainerState(name) {
+  const r = await runDocker(["inspect", "--format", "{{.State.Status}}", name], INSPECT_TIMEOUT_MS);
+  if (r.exitCode !== 0) return "missing";
+  switch (r.stdout.trim()) {
+    case "running":
+      return "running";
+    case "paused":
+      return "paused";
+    case "created":
+    case "exited":
+    case "dead":
+    case "restarting":
+    case "removing":
+      return "stopped";
+    default:
+      return "missing";
+  }
+}
+async function pauseContainer(name) {
+  const r = await runDocker(["pause", name], PAUSE_TIMEOUT_MS);
+  if (r.exitCode !== 0) {
+    throw new Error(r.stderr.trim() || `docker pause ${name} exited ${String(r.exitCode)}`);
+  }
+}
+
 // src/bin.ts
 var program2 = new Command();
 program2.name("agentbox-relay").description("Host-side HTTP relay for box\u2192host events and RPCs").version("0.0.0");