agental 0.2.0 → 0.4.0

package/dist/cli.js

@@ -46,7 +46,7 @@ import { parseArgs } from "node:util";
 
 // ../src/cli-build.ts
 var PUBLISHED = true;
-var CLI_VERSION = true ? "0.2.0" : "dev";
+var CLI_VERSION = true ? "0.4.0" : "dev";
 var DEFAULT_API_URL = true ? "https://agental.io" : "http://127.0.0.1:8741";
 var PACKAGE_NAME = "agental";
 var USER_AGENT = `agental-cli/${CLI_VERSION}`;
@@ -560,13 +560,13 @@ function expiryFrom(given, now = Date.now()) {
   }
   return new Date(moment).toISOString();
 }
-async function templateIdsOf(client, words) {
-  if (words.every((word) => word.startsWith("tpl_"))) {
-    return words;
+async function templateIdsOf(client, words2) {
+  if (words2.every((word) => word.startsWith("tpl_"))) {
+    return words2;
   }
   const body = await ask2(client, "GET", "/v1/templates");
   const templates = Array.isArray(body?.templates) ? body.templates : [];
-  return words.map((word) => {
+  return words2.map((word) => {
     if (word.startsWith("tpl_")) {
       return word;
     }
@@ -1238,8 +1238,8 @@ async function sshConnect(client, args) {
 // ../src/cli-onboard.ts
 var SKILLS_CLI = "skills@1.7.2";
 var READY_MS = 3 * 60 * 1e3;
-var PLAN_MS = 15 * 60 * 1e3;
-var PLAN_LOOK_MS = 3e3;
+var CARD_MS = 15 * 60 * 1e3;
+var CARD_LOOK_MS = 3e3;
 async function api(base, key2, method, pathname, body, headers = {}) {
   let response;
   try {
@@ -1436,34 +1436,34 @@ async function atTheLimit(base, key2, term, message) {
   process.exitCode = 1;
   return null;
 }
-async function startPlan(base, key2, term, message) {
+async function saveCard(base, key2, term, message) {
   const policy = await api(base, key2, "GET", "/v1/policy");
-  const plans = String(policy.body["consoleUrl"] ?? "");
+  const page = String(policy.body["consoleUrl"] ?? "");
   term.say(`
   ${bold("No new sandbox:")} ${message}`);
   if (!term.interactive) {
-    term.say(`  Plans: ${plans}
+    term.say(`  Save a card: ${page}
 `);
     return false;
   }
-  if (!await yes(`  Choose a plan in your browser now? [Y/n] `)) {
-    term.say(`  Choose one when you like: ${plans}
+  if (!await yes(`  Save a card in your browser now? Nothing is charged, and the free plan gives $10 of credit. [Y/n] `)) {
+    term.say(`  Save one when you like: ${page}
 `);
     return false;
   }
-  openBrowser(plans);
-  term.say(`  ${dim("If it did not open:")} ${plans}`);
-  term.say(`  ${dim("waiting for your plan to start\u2026 (Ctrl-C to stop)")}`);
-  const until = Date.now() + PLAN_MS;
+  openBrowser(page);
+  term.say(`  ${dim("If it did not open:")} ${page}`);
+  term.say(`  ${dim("waiting for your card to be saved\u2026 (Ctrl-C to stop)")}`);
+  const until = Date.now() + CARD_MS;
   while (Date.now() < until) {
-    await sleep(PLAN_LOOK_MS);
+    await sleep(CARD_LOOK_MS);
     const billing2 = await api(base, key2, "GET", "/v1/billing").catch(() => null);
     if (billing2?.status === 200 && billing2.body["needsPlan"] === false) {
-      term.say(`  ${done("your plan has started")}`);
+      term.say(`  ${done("your card is saved")}`);
       return true;
     }
   }
-  term.say(`  No plan started in ${PLAN_MS / 6e4} minutes. Run the command again once it has.
+  term.say(`  No card saved in ${CARD_MS / 6e4} minutes. Run the command again once it is.
 `);
   return false;
 }
@@ -1483,7 +1483,7 @@ async function newSandbox(base, key2, term) {
     return await atTheLimit(base, key2, term, errorOf(made).message);
   }
   if (made.status === 402 && errorOf(made).code === "billing_required") {
-    if (await startPlan(base, key2, term, errorOf(made).message)) {
+    if (await saveCard(base, key2, term, errorOf(made).message)) {
       return await newSandbox(base, key2, term);
     }
     process.exitCode = 1;
@@ -1654,9 +1654,9 @@ async function ask4(client, method, pathname, body) {
 function pad(text, width) {
   return text.length >= width ? `${text.slice(0, width - 1)}\u2026 ` : text.padEnd(width + 1);
 }
-function print2(json, body, words) {
+function print2(json, body, words2) {
   process.stdout.write(json ? `${JSON.stringify(body, null, 2)}
-` : words);
+` : words2);
 }
 async function organizations(client) {
   const listed = (await ask4(client, "GET", "/v1/organizations"))["organizations"];
@@ -1734,8 +1734,8 @@ agental org use ${organization.id} signs this command in to it.
 async function actingTeam(client) {
   const { organizations: list3, acting } = await organizations(client);
   const team = list3.find((organization) => organization.id === acting);
-  if (!team || team.personal) {
-    throw new Error("This command's key acts in your own organization, which has no other members. agental org use <team> signs it in to a team.");
+  if (!team) {
+    throw new Error("This command's key acts in no organization you are in. agental org use <organization> signs it in to one.");
   }
   return team;
 }
@@ -1850,11 +1850,11 @@ function runOf(run2) {
   const code = run2.exitCode === null ? "" : ` (exit ${run2.exitCode})`;
   return `${run2.outcome}${code} ${at2(run2.dueAt)}`;
 }
-function commandLine(words) {
-  if (words.length === 1) {
-    return words[0] ?? "";
+function commandLine(words2) {
+  if (words2.length === 1) {
+    return words2[0] ?? "";
   }
-  return words.map((word) => /^[A-Za-z0-9_./:=@%+,-]+$/.test(word) ? word : `'${word.replace(/'/g, `'\\''`)}'`).join(" ");
+  return words2.map((word) => /^[A-Za-z0-9_./:=@%+,-]+$/.test(word) ? word : `'${word.replace(/'/g, `'\\''`)}'`).join(" ");
 }
 function timeoutMsOf(text) {
   const match = /^([1-9][0-9]*)(s|m|h|d)$/.exec(text.trim());
@@ -1884,6 +1884,9 @@ function fieldsOf(options) {
   if (options["keep-memory"] && options["disk-only"]) {
     throw new Error("Give --keep-memory or --disk-only, not both.");
   }
+  if (options["delete-after"] && options["keep-sandbox"]) {
+    throw new Error("Give --delete-after or --keep-sandbox, not both.");
+  }
   if (options.overlap !== void 0 && !OVERLAPS.includes(options.overlap)) {
     throw new Error(`--overlap is skip, replace or parallel, not ${options.overlap}.`);
   }
@@ -1900,7 +1903,8 @@ function fieldsOf(options) {
     ...options.timeout === void 0 ? {} : { timeoutMs: timeoutMsOf(options.timeout) },
     ...options.overlap === void 0 ? {} : { overlap: options.overlap },
     ...ifStopped === void 0 ? {} : { ifStopped },
-    ...options["keep-memory"] ? { keepMemory: true } : options["disk-only"] ? { keepMemory: false } : {}
+    ...options["keep-memory"] ? { keepMemory: true } : options["disk-only"] ? { keepMemory: false } : {},
+    ...options["delete-after"] ? { deleteAfter: true } : options["keep-sandbox"] ? { deleteAfter: false } : {}
   };
 }
 function print3(schedule2, json) {
@@ -1915,7 +1919,7 @@ function print3(schedule2, json) {
     ["command", schedule2.command],
     ["when", whenOf(schedule2)],
     ["if stopped", ifStoppedOf(schedule2)],
-    ["overlap", schedule2.overlap],
+    ...schedule2.at ? [["after", schedule2.deleteAfter ? "deletes the sandbox, if the command exits 0" : "keeps the sandbox"]] : [["overlap", schedule2.overlap]],
     ["timeout", `${Math.round(schedule2.timeoutMs / 1e3)}s`],
     ["next", schedule2.enabled ? schedule2.nextRunAt === null ? afterOf(schedule2) : at2(schedule2.nextRunAt) : schedule2.pausedReason ? `paused: ${schedule2.pausedReason}` : "paused"],
     ["last run", runOf(schedule2.lastRun)]
@@ -2018,7 +2022,7 @@ async function schedule(client, positionals, options) {
                 at2(run2.dueAt),
                 run2.outcome,
                 run2.exitCode === null ? "-" : String(run2.exitCode),
-                run2.startedSandbox ? run2.stoppedSandbox === null ? "started, left running" : `started, stopped (${run2.stoppedSandbox})` : "-",
+                run2.deletedSandbox ? run2.startedSandbox ? "started, deleted" : "deleted" : run2.startedSandbox ? run2.stoppedSandbox === null ? "started, left running" : `started, stopped (${run2.stoppedSandbox})` : "-",
                 run2.commandId ?? (run2.reason ?? "-")
               ])
             ])
@@ -2043,7 +2047,7 @@ async function schedule(client, positionals, options) {
       } else {
         const changes = { ...fieldsOf(options), ...command.length > 0 ? { command: commandLine(command) } : {} };
         if (Object.keys(changes).length === 0) {
-          throw new Error("schedule update needs something to change: --every, --cron, --at, --tz, --name, --timeout, --overlap, --if-stopped, --keep-memory or --disk-only, or a new command after --.");
+          throw new Error("schedule update needs something to change: --every, --cron, --at, --tz, --name, --timeout, --overlap, --if-stopped, --keep-memory or --disk-only, --delete-after or --keep-sandbox, or a new command after --.");
         }
         print3(await ask5(client, "PATCH", path4, changes), options.json);
       }
@@ -2066,7 +2070,8 @@ var LIFECYCLE_EVENTS = [
   "sandbox.auto_stop_set",
   "sandbox.labels_changed",
   "sandbox.scheduled_run",
-  "sandbox.schedule_paused"
+  "sandbox.schedule_paused",
+  "sandbox.low_cpu"
 ];
 var WEBHOOK_EVENTS = [...LIFECYCLE_EVENTS, "prompt.created"];
 var EMAIL_EVENTS = ["email.received", "email.delivered", "email.bounced"];
@@ -2367,12 +2372,19 @@ var MICROS_PER_DOLLAR = 1e6;
 function plan(id, dollarsPerMonth, sizes, runningUnits, freeBurstUnits) {
   return { id, dollarsPerMonth, includedMicros: dollarsPerMonth * MICROS_PER_DOLLAR, sizes, runningUnits, freeBurstUnits };
 }
-var PLANS = [
-  plan("plan20", 20, ["tiny", "small"], 20, 20),
+var FREE_PLAN = plan("free", 0, ["tiny", "small"], 20, 20);
+var PAID_PLANS = [
   plan("plan100", 100, ["tiny", "small", "medium"], 100, 100),
   plan("plan500", 500, MACHINE_SIZE_NAMES, 600, 200),
   plan("plan2000", 2e3, MACHINE_SIZE_NAMES, 2e3, 400)
 ];
+var PLANS = [FREE_PLAN, ...PAID_PLANS];
+var FREE = {
+  /** The credit given once, in millionths of a US dollar. It does not expire. */
+  creditMicros: 10 * MICROS_PER_DOLLAR,
+  /** Small sandboxes an account on the free plan runs and starts at once before it has paid for anything. */
+  unpaidUnits: 2
+};
 var TOP_UP_DOLLARS = { min: 15, max: 1e5 };
 var TOP_UP_BONUS = { fromDollars: 200, fromPercent: 2, toDollars: 1e4, toPercent: 25 };
 function topUpBonusPercent(dollars) {
@@ -2394,6 +2406,100 @@ function topUpByDollars(dollars) {
 }
 var TOP_UPS = [20, 50, 100, 250, 500, 1e3, 5e3, 1e4].map((dollars) => topUpByDollars(dollars));
 
+// ../src/sandbox-where.ts
+var TERMS = /* @__PURE__ */ new Set(["status", "size", "region", "template", "tag", "archived", "memory", "outbound", "stops", "made-by", "activity"]);
+function words(text) {
+  const found = [];
+  for (const match of text.matchAll(/(?:[^\s"]+|"[^"]*")+/g)) {
+    found.push(match[0].replace(/"/g, ""));
+  }
+  return found;
+}
+function whereQuery(text, query = new URLSearchParams()) {
+  const plain2 = [];
+  for (const word of words(text)) {
+    const time = /^(made|stopped)([<>])(.+)$/.exec(word);
+    if (time) {
+      const [, what, side, at4] = time;
+      if (what === "made") {
+        query.append(side === ">" ? "createdAfter" : "createdBefore", at4);
+      } else if (side === "<") {
+        query.append("stoppedBefore", at4);
+      } else {
+        throw new Error(`${word}: stopped takes < only, for sandboxes stopped before a time.`);
+      }
+      continue;
+    }
+    const pair = /^(-?)([a-z0-9][a-z0-9_.-]*):(.*)$/.exec(word);
+    if (!pair) {
+      plain2.push(word);
+      continue;
+    }
+    const [, not, key2, value] = pair;
+    if (value === "") {
+      throw new Error(`${word}: say a value after the colon.`);
+    }
+    if (!TERMS.has(key2)) {
+      query.append(`${not ? "notMetadata" : "metadata"}[${key2}]`, value);
+      continue;
+    }
+    if (not && key2 !== "tag" && key2 !== "activity") {
+      throw new Error(`${word}: only tags, activity and metadata keys can be left out with -.`);
+    }
+    switch (key2) {
+      case "status":
+        for (const each of value.split(",")) {
+          if (each === "starting") {
+            query.append("status", "creating");
+            query.append("status", "restoring");
+          } else if (each === "failed") {
+            query.append("status", "error");
+          } else if (each === "archived") {
+            query.append("status", "stopped");
+            query.set("archived", "true");
+          } else {
+            query.append("status", each);
+          }
+        }
+        break;
+      case "template":
+        query.append("templateId", value);
+        break;
+      case "tag":
+        for (const each of value.split(",")) {
+          query.append(not ? "notTag" : "tag", each);
+        }
+        break;
+      case "memory":
+        if (value !== "kept" && value !== "lost") {
+          throw new Error(`${word}: memory is kept or lost.`);
+        }
+        query.set("memoryKept", value === "kept" ? "true" : "false");
+        break;
+      case "made-by":
+        query.append("createdBy", value);
+        break;
+      case "activity":
+        for (const each of value.split(",")) {
+          query.append(not ? "notActivity" : "activity", each);
+        }
+        break;
+      case "archived":
+        query.set("archived", value);
+        break;
+      case "stops":
+        query.set("stops", value);
+        break;
+      default:
+        query.append(key2, value);
+    }
+  }
+  if (plain2.length > 0) {
+    query.set("q", plain2.join(" "));
+  }
+  return query;
+}
+
 // ../src/cli.ts
 var DEFAULT_URL = DEFAULT_API_URL;
 var SSH_COMMANDS = {
@@ -2506,7 +2612,7 @@ async function main() {
       expires: { type: "string" },
       "keep-streams": { type: "boolean" },
       "keep-memory": { type: "boolean" },
-      // agental schedule: when it runs, in what time zone, how long a run may take, and what it does when it is stopped or the last still runs.
+      // agental schedule: when it runs, in what time zone, how long a run may take, what it does when it is stopped or the last still runs, and whether a one-off deletes its sandbox after.
       every: { type: "string" },
       cron: { type: "string" },
       tz: { type: "string" },
@@ -2514,12 +2620,16 @@ async function main() {
       overlap: { type: "string" },
       "if-stopped": { type: "string" },
       "disk-only": { type: "boolean" },
+      "delete-after": { type: "boolean" },
+      "keep-sandbox": { type: "boolean" },
       ttl: { type: "string" },
       "max-burst-fee": { type: "string" },
       in: { type: "string" },
       never: { type: "boolean", default: false },
       outbound: { type: "string" },
       allow: { type: "string", multiple: true },
+      // Where a sandbox's web traffic leaves, as agental create takes it: box, or residential:<country>[:sticky|rotating].
+      egress: { type: "string" },
       "ssh-key": { type: "string", multiple: true },
       none: { type: "boolean", default: false },
       host: { type: "string", multiple: true },
@@ -2545,6 +2655,11 @@ async function main() {
       // Metadata as <key>=<value>, given again for each key.
       meta: { type: "string", multiple: true },
       anywhere: { type: "boolean", default: false },
+      where: { type: "string" },
+      facets: { type: "string" },
+      yes: { type: "boolean", default: false },
+      confirm: { type: "string" },
+      sort: { type: "string" },
       role: { type: "string" },
       "revoke-keys": { type: "boolean", default: false },
       help: { type: "boolean", short: "h", default: false }
@@ -2560,7 +2675,13 @@ async function main() {
       await create({ ...values, template: once(values.template, "--template") });
       return;
     case "list":
-      await list2(values.json, labelsFilter(values));
+      await list2(values.json, whereQuery(values.where ?? "", labelsFilter(values)), values.sort, values.limit);
+      return;
+    case "jobs":
+      await jobs(positionals.slice(1), values.json);
+      return;
+    case "summary":
+      await summary(values.json, whereQuery(values.where ?? "", labelsFilter(values)), values.facets);
       return;
     case "tags":
       await labels("tags", "sandbox", positionals.slice(1), values.json);
@@ -2575,15 +2696,30 @@ async function main() {
       await exec(positionals.slice(1));
       return;
     case "delete":
+      if (values.where !== void 0 && positionals[1] !== void 0) {
+        throw new Error("delete takes a sandbox's ID or --where, not both");
+      }
+      if (values.where !== void 0) {
+        await bulk("delete", whereQuery(values.where, labelsFilter(values)), {}, values.yes === true, values.json, values.confirm);
+        return;
+      }
       await remove2(positionals[1]);
       return;
     case "start":
+      if (values.where !== void 0) {
+        await bulk("start", whereQuery(values.where, labelsFilter(values)), {}, values.yes === true, values.json);
+        return;
+      }
       await lifecycle("start", positionals[1], maxBurstFeeHeaders(values["max-burst-fee"]));
       return;
     case "auto-stop":
       await autoStop(positionals[1], values.in, values.at, values.never === true, values.json);
       return;
     case "stop":
+      if (values.where !== void 0) {
+        await bulk("stop", whereQuery(values.where, labelsFilter(values)), values["keep-memory"] === true ? { keepMemory: true } : {}, values.yes === true, values.json);
+        return;
+      }
       await lifecycle("stop", positionals[1], {}, values["keep-memory"] === true ? { keepMemory: true } : void 0);
       return;
     case "recover":
@@ -2641,6 +2777,9 @@ async function main() {
     case "network":
       await network(positionals.slice(1), values);
       return;
+    case "egress":
+      await egress(positionals.slice(1), values);
+      return;
     case "templates":
       await listTemplates(values.json);
       return;
@@ -2746,6 +2885,7 @@ async function create(values) {
     );
   }
   const allow = values.allow === void 0 ? void 0 : listedIn(values.allow);
+  const egressAsked = values.egress === void 0 ? void 0 : egressFrom(values.egress.split(":"), "--egress takes box, or residential:<country>, as residential:de or residential:us:rotating.");
   const sshKeys2 = values["ssh-key"] === void 0 ? void 0 : publicKeysFrom(values["ssh-key"]);
   const box = boxNamed(values.box);
   const templateId = values.template === void 0 ? void 0 : (await templateNamed(values.template)).id;
@@ -2759,6 +2899,7 @@ async function create(values) {
       ...templateId ? { templateId } : {},
       ...regionsOption(values.region),
       ...allow ? { network: { allow } } : {},
+      ...egressAsked ? { egress: egressAsked } : {},
       ...ttlSeconds === void 0 ? {} : { ttlSeconds },
       ...sshKeys2 === void 0 ? {} : { sshKeys: sshKeys2 },
       ...given
@@ -2888,20 +3029,39 @@ async function regions(asJson) {
   }
   process.stdout.write("* where a sandbox is made when no region is named\n");
 }
-async function list2(asJson, filter) {
-  const response = await request(`/v1/sandboxes${filter.size > 0 ? `?${filter}` : ""}`, { method: "GET" });
-  const body = await readBody(response);
-  if (!response.ok) {
-    fail(response.status, body);
-  }
-  const sandboxes = readSandboxes(body);
+async function list2(asJson, filter, sort, limit) {
+  const sandboxes = [];
+  let cursor = null;
+  do {
+    const query = new URLSearchParams(filter);
+    if (sort !== void 0) {
+      query.set("sort", sort);
+    }
+    query.set("limit", limit ?? "200");
+    if (cursor !== null) {
+      query.set("cursor", cursor);
+    }
+    const response = await request(`/v1/sandboxes?${query}`, { method: "GET" });
+    const body = await readBody(response);
+    if (!response.ok) {
+      fail(response.status, body);
+    }
+    sandboxes.push(...readSandboxes(body));
+    const next = body && typeof body === "object" ? body["nextCursor"] : null;
+    cursor = typeof next === "string" ? next : null;
+    if (limit !== void 0 && cursor !== null) {
+      process.stderr.write(`There are more. --cursor is not taken here: drop --limit to list them all, or ask GET /v1/sandboxes?${query.toString().replace(/&?cursor=[^&]*/, "")}&cursor=${cursor}
+`);
+      cursor = null;
+    }
+  } while (cursor !== null);
   if (asJson) {
     process.stdout.write(`${JSON.stringify(sandboxes, null, 2)}
 `);
     return;
   }
   if (sandboxes.length === 0) {
-    process.stdout.write(filter.size > 0 ? "No sandboxes with those tags and metadata.\n" : "No sandboxes.\n");
+    process.stdout.write(filter.size > 0 ? "No sandboxes match.\n" : "No sandboxes.\n");
     return;
   }
   const names = sandboxes.some((sandbox) => typeof sandbox["templateId"] === "string") ? await templateNames() : /* @__PURE__ */ new Map();
@@ -2927,6 +3087,165 @@ async function list2(asJson, filter) {
 `);
   }
 }
+function dollarsOf(micros) {
+  return `$${(micros / 1e6).toFixed(4)}`;
+}
+async function summary(asJson, filter, facets) {
+  const query = new URLSearchParams(filter);
+  if (facets !== void 0) {
+    query.set("facets", facets);
+  }
+  const response = await request(`/v1/sandbox-summary${query.size > 0 ? `?${query}` : ""}`, { method: "GET" });
+  const body = await readBody(response);
+  if (!response.ok) {
+    fail(response.status, body);
+  }
+  if (asJson) {
+    process.stdout.write(`${JSON.stringify(body, null, 2)}
+`);
+    return;
+  }
+  const read2 = body;
+  const line = (name, money2) => `${pad2(name)} ${String(money2.count).padStart(6)}  ${dollarsOf(money2.microsPerHour).padStart(11)} an hour  ${dollarsOf(money2.microsPerHour * 24).padStart(11)} a day  ${dollarsOf(money2.spentMicros).padStart(11)} today
+`;
+  for (const [state2, money2] of Object.entries(read2.byState)) {
+    if (money2.count > 0) {
+      process.stdout.write(line(state2, money2));
+    }
+  }
+  process.stdout.write(line("total", read2.total));
+  const running = read2.byState["running"];
+  if (running && running.count > 0) {
+    process.stdout.write(`Stopped, the ${running.count} running would cost ${dollarsOf(read2.ifStopped.microsPerHour)} an hour, ${dollarsOf(running.microsPerHour - read2.ifStopped.microsPerHour)} less.
+`);
+  }
+  process.stdout.write("A day is at the rate of now. Today is the UTC day, and spent is for these sandboxes alone: the account's month is on Billing.\n");
+  for (const [field, facet] of Object.entries(read2.facets ?? {})) {
+    process.stdout.write(`
+${field}
+`);
+    for (const each of facet.values) {
+      process.stdout.write(`  ${pad2(each.value)} ${String(each.count).padStart(6)}  ${dollarsOf(each.microsPerHour).padStart(11)} an hour
+`);
+    }
+    if (facet.more > 0) {
+      process.stdout.write(`  and ${facet.more} more
+`);
+    }
+  }
+}
+function filterOf(query) {
+  const filter = {};
+  for (const [name, value] of query) {
+    filter[name] = [...filter[name] ?? [], value];
+  }
+  return filter;
+}
+async function typedCount(count) {
+  const { createInterface: createInterface2 } = await import("node:readline/promises");
+  const lines = createInterface2({ input: process.stdin, output: process.stderr });
+  try {
+    return (await lines.question(`They cannot be brought back. Type ${count} to delete them: `)).trim();
+  } finally {
+    lines.close();
+  }
+}
+async function confirmed(question) {
+  if (!process.stdin.isTTY) {
+    return false;
+  }
+  const { createInterface: createInterface2 } = await import("node:readline/promises");
+  const lines = createInterface2({ input: process.stdin, output: process.stderr });
+  try {
+    return /^y(es)?$/i.test((await lines.question(`${question} [y/N] `)).trim());
+  } finally {
+    lines.close();
+  }
+}
+async function bulk(action, filter, options, yes2, asJson, confirm) {
+  const previewed = await request("/v1/sandbox-jobs/preview", { method: "POST", body: JSON.stringify({ action, options, select: { filter: filterOf(filter) } }) });
+  const preview = await readBody(previewed);
+  if (!previewed.ok) {
+    fail(previewed.status, preview);
+  }
+  const read2 = preview;
+  process.stderr.write(`${action === "stop" ? "Stop" : action === "start" ? "Start" : "Delete"} ${read2.count} ${read2.count === 1 ? "sandbox" : "sandboxes"}: ${read2.sample.map((each) => each.name).join(", ")}${read2.count > read2.sample.length ? `, and ${read2.count - read2.sample.length} more` : ""}.
+`);
+  process.stderr.write(`They cost ${dollarsOf(read2.microsPerHour.now)} an hour now, and ${dollarsOf(read2.microsPerHour.after)} an hour after.
+`);
+  let count = null;
+  if (action === "delete") {
+    const given = confirm ?? (process.stdin.isTTY ? await typedCount(read2.count) : "");
+    if (given !== String(read2.count)) {
+      process.stderr.write(`Nothing was deleted. Type ${read2.count}, or send --confirm ${read2.count}, to delete them.
+`);
+      process.exitCode = 1;
+      return;
+    }
+    count = read2.count;
+  } else if (!yes2 && !await confirmed("Go on?")) {
+    process.stderr.write("Nothing was done. --yes goes on without asking.\n");
+    return;
+  }
+  const made = await request("/v1/sandbox-jobs", { method: "POST", headers: { "Idempotency-Key": `cli-${read2.id}` }, body: JSON.stringify({ previewId: read2.id, ...count === null ? {} : { confirm: count } }) });
+  let job = await readBody(made);
+  if (!made.ok) {
+    fail(made.status, job);
+  }
+  while (job.state === "running") {
+    process.stderr.write(`\r${job.id}: ${job.counts["done"] ?? 0} done, ${job.counts["skipped"] ?? 0} skipped, ${job.counts["failed"] ?? 0} failed of ${job.total}`);
+    await new Promise((resolve) => setTimeout(resolve, 1e3));
+    const read3 = await request(`/v1/sandbox-jobs/${job.id}`, { method: "GET" });
+    job = await readBody(read3);
+    if (!read3.ok) {
+      fail(read3.status, job);
+    }
+  }
+  process.stderr.write("\n");
+  if (asJson) {
+    process.stdout.write(`${JSON.stringify(job, null, 2)}
+`);
+    return;
+  }
+  process.stdout.write(`${job.id} ${job.state}: ${job.counts["done"] ?? 0} done, ${job.counts["skipped"] ?? 0} skipped, ${job.counts["failed"] ?? 0} failed, ${job.counts["uncertain"] ?? 0} uncertain, of ${job.total}.
+`);
+  for (const problem of job.problems) {
+    process.stdout.write(`  ${problem.sandboxId} ${problem.state}${problem.reason ? `: ${problem.reason}` : ""}
+`);
+  }
+}
+async function jobs(positionals, asJson) {
+  const [verb, id] = positionals;
+  const path4 = verb === void 0 || verb === "list" ? "/v1/sandbox-jobs" : verb === "show" && id ? `/v1/sandbox-jobs/${encodeURIComponent(id)}` : verb === "cancel" && id ? `/v1/sandbox-jobs/${encodeURIComponent(id)}/cancel` : null;
+  if (path4 === null) {
+    throw new Error("jobs takes list, show <job-id> or cancel <job-id>");
+  }
+  const response = await request(path4, { method: verb === "cancel" ? "POST" : "GET" });
+  const body = await readBody(response);
+  if (!response.ok) {
+    fail(response.status, body);
+  }
+  if (asJson) {
+    process.stdout.write(`${JSON.stringify(body, null, 2)}
+`);
+    return;
+  }
+  const listed = verb === void 0 || verb === "list" ? body.jobs ?? [] : [body];
+  if (listed.length === 0) {
+    process.stdout.write("No jobs.\n");
+    return;
+  }
+  for (const job of listed) {
+    process.stdout.write(`${job.id} ${pad2(job.action)} ${pad2(job.state)} ${job.counts["done"] ?? 0}/${job.total} done, ${job.counts["failed"] ?? 0} failed, ${job.counts["skipped"] ?? 0} skipped  ${job.createdAt}
+`);
+    if (listed.length === 1) {
+      for (const problem of job.problems) {
+        process.stdout.write(`  ${problem.sandboxId} ${problem.state}${problem.reason ? `: ${problem.reason}` : ""}
+`);
+      }
+    }
+  }
+}
 async function exec(positionals) {
   const id = positionals[0];
   const command = positionals.slice(1);
@@ -3371,7 +3690,7 @@ function labelsInWords(body) {
   return [`tags:       ${tags.length > 0 ? tags.join(", ") : "none"}`, `metadata:   ${metadata.length > 0 ? metadata.join(", ") : "none"}`, ""].join("\n");
 }
 async function labels(what, holder, positionals, asJson) {
-  const [named, action, ...words] = positionals;
+  const [named, action, ...words2] = positionals;
   const command = `${holder === "template" ? "template " : ""}${what}`;
   const usage = what === "tags" ? `${command} <${holder}> [add|rm <tag>...]` : `${command} <${holder}> [set <key>=<value>... | unset <key>...]`;
   if (!named) {
@@ -3383,7 +3702,7 @@ async function labels(what, holder, positionals, asJson) {
   if (action === void 0) {
     body = await call2(path4, { method: "GET" });
   } else if (what === "tags" && (action === "add" || action === "rm")) {
-    const tags = listedIn(words).map((tag) => tag.toLowerCase());
+    const tags = listedIn(words2).map((tag) => tag.toLowerCase());
     if (tags.length === 0) {
       throw new Error(`${command} ${action} requires <tag>...`);
     }
@@ -3395,10 +3714,10 @@ async function labels(what, holder, positionals, asJson) {
       body = await call2(`${path4}/tags/${encodeURIComponent(tag)}`, { method: action === "add" ? "PUT" : "DELETE" });
     }
   } else if (what === "meta" && (action === "set" || action === "unset")) {
-    if (words.length === 0) {
+    if (words2.length === 0) {
       throw new Error(`${command} ${action} requires ${action === "set" ? "<key>=<value>" : "<key>"}...`);
     }
-    const metadata = action === "set" ? metadataGiven(words) : Object.fromEntries(words.map((key2) => [key2, null]));
+    const metadata = action === "set" ? metadataGiven(words2) : Object.fromEntries(words2.map((key2) => [key2, null]));
     body = await call2(path4, { method: "PATCH", body: JSON.stringify({ metadata }) });
   } else {
     throw new Error(`${command} takes ${usage}`);
@@ -3444,6 +3763,72 @@ async function network(positionals, values) {
     ].join("\n")
   );
 }
+function egressFrom(words2, how) {
+  const [via, country, session, ...more] = words2.map((word) => word.trim());
+  if (via === "box" && country === void 0) {
+    return { via: "box" };
+  }
+  if (via !== "residential" || country === void 0 || !/^[a-zA-Z]{2}$/.test(country) || more.length > 0 || session !== void 0 && session !== "sticky" && session !== "rotating") {
+    throw new Error(how);
+  }
+  return { via: "residential", country: country.toLowerCase(), ...session === void 0 ? {} : { session } };
+}
+function egressInWords(body) {
+  if (body?.via !== "residential") {
+    return "from its server (box)";
+  }
+  return `residential, from ${String(body.country ?? "").toUpperCase()}, ${body.session === "rotating" ? "a new address each connection" : "one address kept (sticky)"}`;
+}
+async function egress(positionals, values) {
+  const [first, ...rest] = positionals;
+  const print4 = (body2, words2) => {
+    process.stdout.write(values.json ? `${JSON.stringify(body2, null, 2)}
+` : words2);
+  };
+  if (first === void 0 || first === "use-case" || first === "budget") {
+    let body2;
+    if (first === "use-case") {
+      const useCase = rest.join(" ").trim();
+      if (useCase === "") {
+        throw new Error('egress use-case takes what your sandboxes will use residential addresses for, in a few sentences, as agental egress use-case "Our agents test sign-up flows from the countries we sell in."');
+      }
+      body2 = await call2("/v1/egress/use-case", { method: "PUT", body: JSON.stringify({ useCase }) });
+    } else if (first === "budget") {
+      const given = rest[0];
+      const dollars = given === void 0 || given.trim() === "" ? Number.NaN : Number(given.replace(/^\$/, ""));
+      if (rest.length !== 1 || given !== "default" && (!Number.isFinite(dollars) || dollars < 0)) {
+        throw new Error("egress budget takes the most residential traffic may cost in a month, in US dollars, as agental egress budget 20, or default.");
+      }
+      body2 = await call2("/v1/egress/budget", { method: "PUT", body: JSON.stringify({ budgetMicros: given === "default" ? null : Math.round(dollars * 1e6) }) });
+    } else {
+      body2 = await call2("/v1/egress", { method: "GET" });
+    }
+    const account3 = body2 && typeof body2 === "object" ? body2 : {};
+    const number = (name) => typeof account3[name] === "number" ? account3[name] : 0;
+    const missing = Array.isArray(account3["missing"]) ? account3["missing"].map(String) : [];
+    const needs = {
+      plan: "a plan of Fleet ($100 a month) or larger: agental billing",
+      card: "a card saved: agental billing card",
+      use_case: 'what your sandboxes will use it for: agental egress use-case "<what for>"'
+    };
+    const refused = account3["refused"];
+    const lines = !account3["offered"] ? ["Residential egress is not offered here."] : [
+      `residential: ${account3["enabled"] ? "on for this account" : refused ? `refused: ${String(refused.reason ?? "")}` : "not yet"}`,
+      ...missing.map((need) => `  needs ${needs[need] ?? need}`),
+      `price:       ${money(number("microsPerGb"))} a GB, both directions counted`,
+      `this month:  ${money(number("spentMicros"))} of a ${money(number("budgetMicros"))} budget${account3["budgetSet"] ? "" : " (the default)"}`,
+      ...account3["blocked"] && account3["blocked"] !== "refused" ? [`blocked now: ${String(account3["blocked"]).replaceAll("_", " ")}`] : []
+    ];
+    print4(body2, `${lines.join("\n")}
+`);
+    return;
+  }
+  const path4 = `/v1/sandboxes/${encodeURIComponent(first)}/egress`;
+  const how = `egress takes <sandbox-id>, and then nothing, box, or residential <country> [sticky|rotating], as agental egress ${first} residential de.`;
+  const body = await call2(path4, rest.length === 0 ? { method: "GET" } : { method: "PUT", body: JSON.stringify(egressFrom(rest, how)) });
+  print4(body, `${first}: ${egressInWords(body)}
+`);
+}
 function templateSshInWords(ssh2) {
   const keys = ssh2.keys.length === 1 ? "1 key" : `${ssh2.keys.length} keys`;
   return `${ssh2.enabled ? "on" : "off"} as a sandbox is made, ${keys} let in`;
@@ -3513,7 +3898,6 @@ function showTemplate(each) {
     // Said only where some are. An API from before variables could be kept out of the sandbox says nothing of them.
     ...each.hidden && each.hidden.length > 0 ? [`kept out:   ${list3(each.hidden)}`] : [],
     `files:      ${list3(each.files)}`,
-    `repo:       ${each.repo ? `${each.repo.name} ${each.repo.url}` : "none"}`,
     // An API from before templates held rules says nothing of one.
     ...each.network ? [`network:    ${ruleInWords(each.network)}`] : [],
     // An API from before templates gave SSH says nothing of it.
@@ -3526,10 +3910,10 @@ function showTemplate(each) {
 }
 async function template(positionals, values) {
   const [action, first, ...rest] = positionals;
-  const usage = "template takes create, show, rename, delete, start, repo, network, ssh, ssh-keys, tags, meta, sandboxes, apply, of or put. agental help says how.";
-  const print4 = (body, words) => {
+  const usage = "template takes create, show, rename, delete, start, network, egress, ssh, ssh-keys, tags, meta, sandboxes, apply, of or put. agental help says how.";
+  const print4 = (body, words2) => {
     process.stdout.write(values.json ? `${JSON.stringify(body, null, 2)}
-` : words);
+` : words2);
   };
   const need = (word, what) => {
     if (!word) {
@@ -3589,20 +3973,6 @@ async function template(positionals, values) {
 `);
       return;
     }
-    case "repo": {
-      const found = await templateNamed(need(first, "<template>"));
-      const path4 = `/v1/templates/${encodeURIComponent(found.id)}/repo`;
-      if (values.remove) {
-        await call2(path4, { method: "DELETE" });
-        process.stdout.write(`${found.name} links to no repository
-`);
-        return;
-      }
-      const repo = rest.length === 0 ? await call2(path4, { method: "GET" }) : await call2(path4, { method: "PUT", body: JSON.stringify({ name: need(rest[0], "<template> <name> <url>"), url: need(rest[1], "<template> <name> <url>") }) });
-      print4(repo, repo ? `repo: ${repo.name} ${repo.url}
-` : "repo: none\n");
-      return;
-    }
     case "network": {
       const found = await templateNamed(need(first, "<template>"));
       const path4 = `/v1/templates/${encodeURIComponent(found.id)}/network`;
@@ -3630,6 +4000,15 @@ ${mode === void 0 ? "" : "A sandbox on it takes this when it next starts, or now
       );
       return;
     }
+    case "egress": {
+      const found = await templateNamed(need(first, "<template>"));
+      const path4 = `/v1/templates/${encodeURIComponent(found.id)}/egress`;
+      const how = `template egress takes <template>, and then nothing, box, or residential <country> [sticky|rotating], as agental template egress ${first ?? ""} residential de.`;
+      const set = await call2(path4, rest.length === 0 ? { method: "GET" } : { method: "PUT", body: JSON.stringify(egressFrom(rest, how)) });
+      print4(set, `${found.name}: ${egressInWords(set)}${rest.length === 0 ? "" : ", for sandboxes made from it from now on"}
+`);
+      return;
+    }
     case "ssh": {
       const found = await templateNamed(need(first, "<template>"));
       const path4 = `/v1/templates/${encodeURIComponent(found.id)}/ssh`;
@@ -3728,19 +4107,19 @@ async function keptOutNow(path4) {
 }
 async function secrets(positionals, values) {
   const usage = "secrets requires <sandbox-id>, or --template <template>, and then nothing, get, set, hosts, unset, get-file, put-file or rm-file";
-  const words = [...positionals];
+  const words2 = [...positionals];
   let base;
   let sandboxId;
   if (values.template !== void 0) {
     base = `/v1/templates/${encodeURIComponent((await templateNamed(values.template)).id)}/secrets`;
   } else {
-    sandboxId = words.shift();
+    sandboxId = words2.shift();
     if (!sandboxId) {
       throw new Error(usage);
     }
     base = `/v1/sandboxes/${encodeURIComponent(sandboxId)}/secrets`;
   }
-  const [action, ...args] = words;
+  const [action, ...args] = words2;
   const fileQuery = (path4) => {
     if (!path4) {
       throw new Error(`secrets ${action ?? ""} requires <path>`);
@@ -4015,14 +4394,14 @@ async function ci(positionals, options) {
       return;
     }
     if (body.repositories.length === 0) {
-      process.stdout.write(`No repository has a pool yet. Connect GitHub in the console (Settings, GitHub), then ask for runs-on: agental-medium in a workflow. Each pool keeps ${body.defaultPoolMax} sandboxes of each size.
+      process.stdout.write(`No repository has a pool yet. Connect GitHub in the console (Settings, GitHub), then ask for runs-on: agental (its template's size, medium with none) or agental-<size> in a workflow. Each pool keeps ${body.defaultPoolMax} sandboxes of each size.
 `);
       return;
     }
     for (const item of body.repositories) {
       const busy = item.sandboxes.filter((sandbox) => sandbox.busy).length;
       process.stdout.write(
-        `${item.repository}  pool ${item.poolMax ?? `${body.defaultPoolMax} (default)`}  template ${item.templateId ?? "runs-on (empty)"}  ${item.sandboxes.length} sandboxes, ${busy} busy
+        `${item.repository}  pool ${item.poolMax ?? `${body.defaultPoolMax} (default)`}  template ${item.templateId ?? "runs-on (empty)"}  agental is ${item.size}  ${item.sandboxes.length} sandboxes, ${busy} busy
 `
       );
     }
@@ -4132,7 +4511,7 @@ async function telemetry(positionals, given, asJson) {
 }
 async function billing(positionals, asJson) {
   const [what, amount, ...rest] = positionals;
-  const usage = "billing takes nothing, prices, top-up <dollars>, or auto-reload <dollars | off>";
+  const usage = "billing takes nothing, prices, card, top-up <dollars>, or auto-reload <dollars | off>";
   if (rest.length > 0 || what !== "top-up" && what !== "auto-reload" && amount !== void 0) {
     throw new Error(usage);
   }
@@ -4149,6 +4528,17 @@ async function billing(positionals, asJson) {
       print4(body, () => describePrices(body));
       return;
     }
+    case "card": {
+      const body = await asked("/v1/billing/checkout", { method: "POST", body: JSON.stringify({ card: true }) });
+      print4(
+        body,
+        () => body.url ? `Save a card for the free plan at:
+${body.url}
+Nothing is charged. Once it is saved, the account is given its credit, once, and may run sandboxes: agental billing shows it within a minute.
+` : "Nothing to save.\n"
+      );
+      return;
+    }
     case "top-up": {
       const dollars = Number(amount);
       if (amount === void 0 || !/^\d+$/.test(amount) || dollars <= 0) {
@@ -4196,19 +4586,27 @@ function dayOf(iso) {
 }
 function describeBilling(body) {
   const lines = [];
-  const live = body.status === "trialing" || body.status === "active" || body.status === "past_due";
-  if (live && body.plan) {
-    const free = body.status === "trialing" ? body.freeMonth ?? { endsAt: body.period?.end ?? null } : null;
-    lines.push([
-      "Plan",
-      free ? `$${body.plan.dollarsPerMonth} a month, free until ${dayOf(free.endsAt)}, ${body.cancelAtPeriodEnd ? "and it ends then" : "then charged"}` : `$${body.plan.dollarsPerMonth} a month, ${body.cancelAtPeriodEnd ? "ends" : "renews"} ${dayOf(body.period?.end ?? null)}`
-    ]);
-    const parts = [
-      ...(body.mailMicros ?? 0) > 0 ? [`${money(body.mailMicros ?? 0)} by email`] : [],
-      ...(body.stoppedMicros ?? 0) > 0 ? [`${money(body.stoppedMicros ?? 0)} by stopped sandboxes`] : [],
-      ...(body.snapshotMicros ?? 0) > 0 ? [`${money(body.snapshotMicros ?? 0)} by snapshots past the free ones`] : []
-    ];
-    lines.push(["Used", `${money(body.usedMicros)} this month at list price${parts.length > 0 ? `, ${parts.join(" and ")} of it` : ""}`]);
+  const free = body.free ?? null;
+  if (free && body.plan) {
+    lines.push(["Plan", "free: nothing a month. What runs is paid from your credits, at list price."]);
+    if (!free.cardSaved) {
+      lines.push(["Card", "none saved. Save one, charged nothing, to run sandboxes and be given the free plan's credit: agental billing card."]);
+    } else if (!free.paid) {
+      lines.push(["At once", `${free.unpaidUnits} small sandboxes until you buy a top-up, then ${(body.plan.runningUnits ?? 20).toLocaleString("en-US")}. A tiny counts half.`]);
+    }
+    lines.push(["Used", `${money(body.usedMicros)} this month at list price${usedParts(body)}`]);
+    lines.push(["Credits left", `${money(body.topUpMicros)}, the free credit and top-ups. They do not expire.`]);
+    if ((body.carriedMicros ?? 0) > 0) {
+      lines.push(["Owed", `${money(body.carriedMicros ?? 0)} an earlier month ran past your credits, taken from the next top-up first`]);
+    }
+    if (body.autoReload) {
+      lines.push(["Auto-reload", describeAutoReload(body.autoReload)]);
+    } else if (body.canAutoReload) {
+      lines.push(["Auto-reload", "off. agental billing auto-reload <dollars> charges your saved card for a top-up when your credits run out."]);
+    }
+  } else if (body.plan && (body.status === "active" || body.status === "past_due")) {
+    lines.push(["Plan", `$${body.plan.dollarsPerMonth} a month, ${body.cancelAtPeriodEnd ? "ends" : "renews"} ${dayOf(body.period?.end ?? null)}`]);
+    lines.push(["Used", `${money(body.usedMicros)} this month at list price${usedParts(body)}`]);
     if ((body.carriedMicros ?? 0) > 0) {
       lines.push(["Carried", `${money(body.carriedMicros ?? 0)} an earlier month could not pay, taken from this month's credits first`]);
     }
@@ -4224,15 +4622,18 @@ function describeBilling(body) {
       lines.push(["Auto-reload", "off. agental billing auto-reload <dollars> charges your saved card for a top-up when your credits run out."]);
     }
   } else {
-    lines.push(["Plan", body.enforced ? "none. A plan is needed to run a sandbox, and the $20 plan's first month is free: see Billing in the console." : "none. Plans are not required here yet."]);
+    lines.push(["Plan", "none. Plans are not required here yet."]);
   }
   if (!body.canRun && body.reason) {
-    lines.push(["Running", body.reason === "out_of_credit" ? "no: the plan's credits and the top-ups are used. agental billing top-up <dollars> buys more." : `no: ${body.reason}`]);
+    lines.push([
+      "Running",
+      body.reason === "out_of_credit" ? `no: ${free ? "your credits are" : "the plan's credits and the top-ups are"} used. agental billing top-up <dollars> buys more.` : body.reason === "billing_required" ? "no: save a card first, charged nothing, with agental billing card." : `no: ${body.reason}`
+    ]);
   }
   if (body.lapse) {
     lines.push([
       "Deleted on",
-      body.lapse.reason === "unpaid" ? `${dayOf(body.lapse.deletesAt)}: your sandboxes and snapshots, as the account owes for what it used past its plan. agental billing top-up <dollars> buys enough to pay it and keep them.` : `${dayOf(body.lapse.deletesAt)}: your sandboxes and snapshots, as the account has no plan. Start a plan from Billing in the console to keep them.`
+      body.lapse.reason === "unpaid" ? `${dayOf(body.lapse.deletesAt)}: your sandboxes and snapshots, as the account owes for what it used past its plan. agental billing top-up <dollars> buys enough to pay it and keep them.` : body.lapse.reason === "out_of_credit" ? `${dayOf(body.lapse.deletesAt)}: your sandboxes and snapshots, as your credits are used. agental billing top-up <dollars> keeps them.` : `${dayOf(body.lapse.deletesAt)}: your sandboxes and snapshots, as the account has no card saved. agental billing card saves one, charged nothing, to keep them.`
     ]);
   }
   if (body.testMode) {
@@ -4241,6 +4642,14 @@ function describeBilling(body) {
   return lines.map(([label, value]) => `${label.padEnd(14)}${value}
 `).join("");
 }
+function usedParts(body) {
+  const parts = [
+    ...(body.mailMicros ?? 0) > 0 ? [`${money(body.mailMicros ?? 0)} by email`] : [],
+    ...(body.stoppedMicros ?? 0) > 0 ? [`${money(body.stoppedMicros ?? 0)} by stopped sandboxes`] : [],
+    ...(body.snapshotMicros ?? 0) > 0 ? [`${money(body.snapshotMicros ?? 0)} by snapshots past the free ones`] : []
+  ];
+  return parts.length > 0 ? `, ${parts.join(" and ")} of it` : "";
+}
 function describeAutoReload(autoReload) {
   if (!autoReload) {
     return "off. Nothing is charged by itself when your credits run out.";
@@ -4257,7 +4666,14 @@ function describePrices(body) {
     for (const tier of body.tiers) {
       const sizes = tier.sizes === void 0 ? "" : tier.sizes.length === body.plans.length ? "every size" : tier.sizes.join(", ");
       const speed = tier.runningUnits !== void 0 && tier.freeBurstUnits !== void 0 ? `${tier.runningUnits.toLocaleString("en-US")} running, ${tier.freeBurstUnits.toLocaleString("en-US")} start free` : tier.burst ? `${(tier.burst.perQuarterMb / 1024).toLocaleString("en-US")} GiB per 15 minutes` : typeof tier.sandboxesAtOnce === "number" ? `${tier.sandboxesAtOnce.toLocaleString("en-US")} sandboxes at once` : "";
-      out.push(`  ${`$${tier.dollarsPerMonth.toLocaleString("en-US")}`.padEnd(8)}${`${wholeMoney(tier.includedMicros)} of credits`.padEnd(28)}${speed.padEnd(34)}${sizes}`.trimEnd());
+      const price = tier.dollarsPerMonth === 0 ? "Free" : `$${tier.dollarsPerMonth.toLocaleString("en-US")}`;
+      const included = tier.dollarsPerMonth === 0 ? "pay as you go" : `${wholeMoney(tier.includedMicros)} of credits`;
+      out.push(`  ${price.padEnd(8)}${included.padEnd(28)}${speed.padEnd(34)}${sizes}`.trimEnd());
+    }
+    if (body.free) {
+      out.push(
+        `  Free needs a card saved, charged nothing, and gives ${wholeMoney(body.free.creditMicros)} of credit once. It runs ${body.free.unpaidUnits} small sandboxes at once until you buy a top-up.`
+      );
     }
     if (body.tiers.some((tier) => tier.runningUnits !== void 0)) {
       out.push("  Counted in small sandboxes: a medium is 2, a large 4, a tiny half.");
@@ -4518,9 +4934,10 @@ Setting up
 
 Usage
   agental create --name <name> [--template <template>] [--size tiny|small|medium|large] [--region <region>[,<region>...]] [--ttl <time> | --ttl default] [--idempotency-key <key>]
-                 ${operator ? "[--box <name-or-id>] " : ""}[--allow <address>[,<address>...]] [--max-burst-fee <dollars>]
+                 ${operator ? "[--box <name-or-id>] " : ""}[--allow <address>[,<address>...]] [--egress box | residential:<country>[:sticky|rotating]] [--max-burst-fee <dollars>]
                  [--ssh-key <public-key-or-file>]... [--tag <tag>[,<tag>...]]... [--meta <key>=<value>]...
-  agental list [--tag <tag>[,<tag>...]]... [--meta <key>=<value>]... [--json]
+  agental summary [--where '<words>'] [--tag <tag>[,<tag>...]]... [--meta <key>=<value>]... [--facets <field>[,<field>...]] [--json]
+  agental list [--where '<words>'] [--tag <tag>[,<tag>...]]... [--meta <key>=<value>]... [--sort=<sort>] [--limit <n>] [--json]
   agental tags <sandbox-id> [add|rm <tag>...] [--json]
   agental meta <sandbox-id> [set <key>=<value>... | unset <key>...] [--json]
   agental regions [--json]
@@ -4528,17 +4945,22 @@ Usage
   agental delete <sandbox-id>
   agental start <sandbox-id> [--max-burst-fee <dollars>]
   agental stop <sandbox-id> [--keep-memory]
+  agental stop --where '<words>' [--keep-memory] [--yes]      every sandbox the words find, as one job
+  agental start --where '<words>' [--yes]
+  agental delete --where '<words>' [--confirm <count>]      asks for the count to be typed
+  agental jobs [list | show <job-id> | cancel <job-id>] [--json]
   agental recover <sandbox-id> [--max-burst-fee <dollars>]
   agental auto-stop <sandbox-id> [--in <time> | --at <date-time> | --never] [--json]
   agental network <sandbox-id> [--allow <address>[,<address>...] | --none] [--json]
+  agental egress <sandbox-id> [box | residential <country> [sticky | rotating]] [--json]
   agental templates [--json]
   agental template create <name> [--tag <tag>[,<tag>...]]... [--meta <key>=<value>]...
   agental template show <template> [--json]
   agental template rename <template> <new-name>
   agental template delete <template>
   agental template start <template> [--size tiny|small|medium|large] [--snapshot <snapshot-id> | --new-machine] [--ttl <time> | --ttl default]
-  agental template repo <template> [<name> <url> | --remove]
   agental template network <template> [open | blocked | allowlist <address>...] [--json]
+  agental template egress <template> [box | residential <country> [sticky | rotating]] [--json]
   agental template ssh <template> [on | off] [--json]
   agental template ssh-keys <template> [<public-key-or-file>... | --remove <key-id>] [--json]
   agental template tags <template> [add|rm <tag>...] [--json]
@@ -4560,11 +4982,12 @@ Usage
   agental data-retention [1 | 7 | 30 | 90 | never] [--json]
   agental schedules <sandbox-id> [--json]
   agental schedule add <sandbox-id> (--every 15m|1h|1d | --cron "<m h dom mon dow>" [--tz <zone>] | --at <date-time>) [--name <name>] [--timeout <time>]
-                       [--if-stopped start|skip] [--keep-memory] [--overlap skip|replace|parallel] [--json] -- <command> [args...]
+                       [--if-stopped start|skip] [--keep-memory] [--overlap skip|replace|parallel] [--delete-after] [--json] -- <command> [args...]
   agental schedule show|run|pause|resume|delete <sandbox-id> <schedule> [--json]
   agental schedule runs <sandbox-id> <schedule> [--limit <n>] [--json]
   agental schedule update <sandbox-id> <schedule> [--every <time> | --cron "<expr>" | --at <date-time>] [--tz <zone>] [--name <name>] [--timeout <time>]
-                          [--if-stopped start|skip] [--keep-memory | --disk-only] [--overlap skip|replace|parallel] [--json] [-- <command> [args...]]
+                          [--if-stopped start|skip] [--keep-memory | --disk-only] [--overlap skip|replace|parallel] [--delete-after | --keep-sandbox] [--json]
+                          [-- <command> [args...]]
   agental webhooks [--json]
   agental webhook add <url> (--events <kind>[,<kind>...] | --all) [--description <text>] [--json]
   agental webhook show <webhook-id> [--json]
@@ -4584,8 +5007,10 @@ Usage
   agental key show <key> [--json]
   agental key allow-from <key> (<address-or-range>... | --anywhere) [--json]
   agental key delete <key>
-  agental billing [prices | top-up <dollars> | auto-reload <dollars | off>] [--json]
+  agental billing [prices | card | top-up <dollars> | auto-reload <dollars | off>] [--json]
   agental burst [budget <dollars> | budget default] [--json]
+  agental egress [budget <dollars> | budget default] [--json]
+  agental egress use-case "<what your sandboxes will use it for>" [--json]
   agental account export [--out <file>]
   agental ssh <sandbox-id> [--tmux] [ssh options] [command...]
   agental scp [scp options] <source>... <target>
@@ -4647,7 +5072,7 @@ sandbox is not restarted, and what is sent to it, commands, files and SSH, is no
 create --allow gives a new sandbox its own from its first boot. These work where GET
 /v1/policy says networkPolicy.
 A template is what a sandbox is made as and held to: its start (a size, and a snapshot or a new
-machine), its variables and files, and a repository link. Every account has one named default,
+machine), its variables and files, and its outbound rule. Every account has one named default,
 which a sandbox is on when create names none. <template> is a template's id or its name. A
 sandbox's commands get its template's variables and files as they were when it last started,
 with its own on top: secrets <sandbox-id> sets its own, and secrets --template sets a
@@ -4700,8 +5125,10 @@ schedules lists the commands a sandbox runs on a schedule, with when each runs n
 last run ended. schedule add makes one: what comes after -- is its command, run by sh -c, and
 --every 5m, 15m, 1h or 1d, counted from now, never more often than every 5 minutes, or --cron
 with five fields in the time zone --tz names, UTC unless it does, says when; --at a date and time
-runs it once, as for a check to come back to. When a run finds the sandbox stopped it starts it,
-runs, and stops it again when the command ends, keeping its disk, or its memory too with
+runs it once, as for a check to come back to. With --at, --delete-after deletes the sandbox after
+the run, if the command exits 0, with a key that may delete it; a run that fails leaves it to be
+looked at, and update --keep-sandbox takes it back. When a run finds the sandbox stopped it
+starts it, runs, and stops it again when the command ends, keeping its disk, or its memory too with
 --keep-memory; with --if-stopped skip it runs only while the sandbox runs. A sandbox someone
 started again, sent a command or moved the stop of meanwhile is left running. While a run still
 goes the next is skipped; --overlap replace stops it instead, and parallel runs both. A run gets
@@ -4725,8 +5152,10 @@ tries.
 org lists the organizations you are in, your own and your teams, and marks the one this command
 acts in. A key acts in the organization it was made in, for good, so org use signs in again in
 the browser for a key made in the one given, by its id or name, and deletes the key the command
-had. org create makes a team with you as its owner; it has members besides its owners on the
-$500 or $2000 plan. members lists the team the command acts in, and members remove takes one
+had. Your own organization takes members on the $500 or $2000 plan, with you its only owner.
+org create makes a team besides, with you as its owner and a plan of its own; it has members
+besides its owners on the $500 or $2000 plan. members lists the organization the command acts
+in, your own or a team, and members remove takes one
 out by id or email; keys they made in it go on working, as a member's, until they are revoked,
 and --revoke-keys revokes them in the same step. invite asks an email address in, as a member or
 with --role admin; the invitation is open for seven days.
@@ -4754,8 +5183,12 @@ server it is on, which changes when it moves. On a network with IPv6 the API see
 address, so a key limited to IPv4 addresses alone is refused there.
 billing says where your account stands: its plan, what it has used this month at list price,
 what is left of the month's credits, and what is left of the top-ups, which are used
-after it and do not expire. prices lists the plans with the sizes each makes, the top-ups with
-their bonus and the hourly price of each size. top-up <dollars> starts buying credits for
+after it and do not expire. The free plan costs nothing a month and pays for what runs from
+credits alone; it makes tiny and small sandboxes. prices lists the plans with the sizes each
+makes, the top-ups with their bonus and the hourly price of each size. card prints the address
+of a page to save a card for the free plan: nothing is charged, and once it is saved the account
+is given $10 of credit, once. Until it buys a top-up it runs 2 small sandboxes at once, then 20.
+top-up <dollars> starts buying credits for
 any whole number of dollars from 15 to 100,000, and prints the address of the page to pay on.
 From $200 a top-up adds a bonus, 2% there and growing to 25% at $10,000: $500 adds $537.
 Nothing is charged until it is paid there. auto-reload <dollars> has the card saved at your

package/package.json

@@ -1,10 +1,15 @@
 {
   "name": "agental",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "The agental command: Linux sandboxes for your agents, from the terminal. npx agental@latest signs you in and installs the agent skills.",
   "license": "MIT",
   "author": "VERTIXER LTD",
   "homepage": "https://agental.io/docs/cli",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/honzabit/agental.git",
+    "directory": "cli"
+  },
   "bugs": {
     "email": "squad@agental.io"
   },