@agentworkforce/cli 0.13.0 → 0.15.0

package/CHANGELOG.md

@@ -12,11 +12,36 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `agentworkforce agent` now records launch metadata for direct harness
   launches; opt out with `--no-launch-metadata` or
   `AGENTWORKFORCE_LAUNCH_METADATA=0`.
-- `agentworkforce create` now opens `persona-maker@best`, supports `--to` and
-  `--save-default`, and passes `TARGET_DIR` / `CREATE_MODE` persona inputs.
+- `agentworkforce create` now opens `persona-maker@best`, supports
+  `--save-in-directory=<target>` and `--save-default`, and passes
+  `TARGET_DIR` / `CREATE_MODE` persona inputs.
 - Persona source config supports `defaultCreateTarget` for the implicit create target.
 - `--version`/`-v` now prints the CLI package version.
 
+### Changed
+
+- `agentworkforce create` now defaults to writing into
+  `<cwd>/.agentworkforce/workforce/personas` unconditionally, creating the
+  directory if it does not already exist. The previous behavior fell back to
+  the user persona dir when no cwd-local workforce existed; pass
+  `--save-in-directory=<target>` (or set `defaultCreateTarget` in the source
+  config) to author somewhere else.
+- The previous `--to <target>` flag has been renamed to
+  `--save-in-directory=<target>` (also accepted as
+  `--save-in-directory <target>`). The old name is no longer recognized.
+
+## [0.15.0] - 2026-05-08
+
+### Released
+
+- v0.15.0
+
+## [0.14.0] - 2026-05-08
+
+### Released
+
+- v0.14.0
+
 ## [0.13.0] - 2026-05-08
 
 ### Released

package/README.md

@@ -6,7 +6,7 @@ built-in one from `/personas/`, or an installed/local one that extends a lower
 source.
 
 ```
-agentworkforce create [--to <target>] [--save-default] [--install-in-repo] [--no-launch-metadata]
+agentworkforce create [--save-in-directory=<target>] [--save-default] [--install-in-repo] [--no-launch-metadata]
 agentworkforce agent [--install-in-repo] [--no-launch-metadata] <persona>[@<tier>]
 agentworkforce list [flags]
 agentworkforce show <persona>[@<tier>]
@@ -68,7 +68,7 @@ Unknown persona prints the full catalog with each entry's origin.
 ## Create
 
 ```
-agentworkforce create [--to <target>] [--save-default] [--install-in-repo] [--no-launch-metadata]
+agentworkforce create [--save-in-directory=<target>] [--save-default] [--install-in-repo] [--no-launch-metadata]
 ```
 
 `create` is the persona-authoring entry point. It runs `persona-maker@best`
@@ -94,32 +94,33 @@ Targets:
 
 Default target resolution:
 
-1. `--to <target>` wins.
-2. If `<cwd>/.agentworkforce/workforce` exists, use `cwd`.
-3. Else use `defaultCreateTarget` from `~/.agentworkforce/workforce/config.json`.
-4. Else use `user`.
+1. `--save-in-directory=<target>` wins.
+2. Else use `defaultCreateTarget` from `~/.agentworkforce/workforce/config.json`.
+3. Else use `cwd` (`<cwd>/.agentworkforce/workforce/personas`).
 
-`--save-default` persists the resolved target as `defaultCreateTarget` in the
-source config. This is only consulted when no cwd-local workforce directory is
-present.
+The cwd persona directory is created (`mkdir -p`) when it does not exist, so a
+fresh project can run `agentworkforce create` without any setup. To author
+personas anywhere else, pass `--save-in-directory=<target>` on the command line
+(the value can also be passed as `--save-in-directory <target>`), or use
+`--save-default` once to persist a different default in the source config.
 
 Examples:
 
 ```sh
-# Create in the project-local persona directory when present, otherwise user dir
+# Create in <cwd>/.agentworkforce/workforce/personas (created if missing)
 agentworkforce create
 
 # Force the user persona directory
-agentworkforce create --to user
+agentworkforce create --save-in-directory=user
 
 # Create in a configured persona source
-agentworkforce create --to dir:1
+agentworkforce create --save-in-directory=dir:1
 
 # Create in an explicit checked-out persona directory and make that the default
-agentworkforce create --to ../team-personas/personas --save-default
+agentworkforce create --save-in-directory=../team-personas/personas --save-default
 
 # Create a built-in persona in this repo's /personas catalog
-agentworkforce create --to library
+agentworkforce create --save-in-directory=library
 ```
 
 ### Examples
@@ -350,7 +351,7 @@ personas work as plain JSON files in the default user location, or from any
 checked-out repo you add as a source directory.
 
 The same config may also carry `defaultCreateTarget`, used by `agentworkforce create`
-when no cwd-local workforce directory exists:
+to override its default of `cwd`:
 
 ```json
 {
@@ -359,10 +360,12 @@ when no cwd-local workforce directory exists:
 }
 ```
 
-Valid `defaultCreateTarget` values are the same values accepted by `create --to`:
-`cwd`, `user`, `dir:n`, `library`, or an explicit path. Use
-`agentworkforce create --to <target> --save-default` to write it without editing
-JSON by hand.
+Valid `defaultCreateTarget` values are the same values accepted by
+`create --save-in-directory=<target>`: `cwd`, `user`, `dir:n`, `library`, or an
+explicit path. When this key is unset, `agentworkforce create` writes to
+`<cwd>/.agentworkforce/workforce/personas` (creating it if missing). Use
+`agentworkforce create --save-in-directory=<target> --save-default` to write
+the override without editing JSON by hand.
 
 `sources add` appends by default. `--position <n>` inserts at the 1-based
 position among configurable directories, so `--position 1` gives that directory
@@ -552,9 +555,9 @@ Local personas live in the source cascade and do not require built-in catalog
 integration:
 
 ```sh
-agentworkforce create --to user
-agentworkforce create --to cwd
-agentworkforce create --to dir:1
+agentworkforce create --save-in-directory=user
+agentworkforce create --save-in-directory=cwd
+agentworkforce create --save-in-directory=dir:1
 ```
 
 The persona maker receives `TARGET_DIR` and `CREATE_MODE=local`, so it
@@ -581,7 +584,7 @@ Built-in personas live in the repo's `/personas` catalog and require full
 workload-router integration:
 
 ```sh
-agentworkforce create --to library
+agentworkforce create --save-in-directory=library
 ```
 
 The persona maker receives `CREATE_MODE=built-in`, so it should write
@@ -783,15 +786,47 @@ mount rules (`.agentignore` / `.agentreadonly`) for that.
 - **Tool patterns** are passed through verbatim; use the harness's native
   grammar. For Claude Code: `Bash(<pattern>)`, `mcp__<server>` (all tools
   from that server), `mcp__<server>__<tool>` (specific tool).
-- **Harness support today:** only `claude` is wired (flags: `--allowedTools`,
-  `--disallowedTools`, `--permission-mode`). codex and opencode emit a
-  warning and fall back to their defaults when `permissions` is set.
+- **Harness support today:** only `claude` is wired for `permissions` (flags:
+  `--allowedTools`, `--disallowedTools`, `--permission-mode`). codex and
+  opencode emit a warning and fall back to their defaults when `permissions`
+  is set.
 - **Cascade merge:** `allow` and `deny` are unions across layers (deduped on
   merge); `mode` is replaced by the topmost layer that sets it. So the
   library can declare the minimum-viable allow list, a user or configured
   persona source can layer shared denies, and cwd can add per-project patterns
   — they all compose.
 
+## Codex Sandbox Settings
+
+Codex-backed tiers can set Codex launch policy inside `harnessSettings`:
+
+```jsonc
+{
+  "tiers": {
+    "best": {
+      "harness": "codex",
+      "model": "openai-codex/gpt-5.3-codex",
+      "systemPrompt": "…",
+      "harnessSettings": {
+        "reasoning": "high",
+        "timeoutSeconds": 1200,
+        "sandboxMode": "workspace-write",
+        "approvalPolicy": "on-request",
+        "workspaceWriteNetworkAccess": true,
+        "webSearch": true
+      }
+    }
+  }
+}
+```
+
+`sandboxMode` maps to Codex `--sandbox` (`read-only`, `workspace-write`, or
+`danger-full-access`), `approvalPolicy` maps to `--ask-for-approval`,
+`workspaceWriteNetworkAccess` maps to
+`-c sandbox_workspace_write.network_access=<bool>`, and `webSearch` maps to
+`--search`. Prefer `workspace-write` plus `workspaceWriteNetworkAccess` for
+package or registry discovery so filesystem writes stay sandboxed.
+
 ### Example: PostHog with auto-approve
 
 The built-in `posthog` persona declares `permissions.allow = ["mcp__posthog"]`

package/dist/cli.d.ts

@@ -168,7 +168,7 @@ export interface AgentFlags {
     noLaunchMetadata: boolean;
 }
 export interface CreateFlags extends AgentFlags {
-    to?: string;
+    saveInDirectory?: string;
     saveDefault: boolean;
 }
 export declare function parseAgentArgs(args: readonly string[]): {

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAiBA,OAAO,EAQL,KAAK,OAAO,EAEZ,KAAK,YAAY,EACjB,KAAK,gBAAgB,EAIrB,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AA6BzC,OAAO,EAAe,KAAK,aAAa,EAAmB,MAAM,qBAAqB,CAAC;AAqIvF,eAAO,MAAM,WAAW,QAAuB,CAAC;AAChD,eAAO,MAAM,eAAe,uBAAuB,CAAC;AAmDpD;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAExF;AAyJD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUhE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAe5D;AAED;;;kDAGkD;AAClD,eAAO,MAAM,sBAAsB,gFAUzB,CAAC;AAEX;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,2JAiBjC,CAAC;AAEX,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,sBAAsB,CAqBzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAU7E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAuCxF;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,SAAS,EAAE,WAAW,GAAG,WAAW,CAAC;IACrC,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,aAAa,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,gBAAgB,GAC1B;IAAE,OAAO,CAAC,EAAE,eAAe,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAyDjD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,GACjB,MAAM,CAkBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,aAAa,UAAQ,GACpB;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAKvB;AA8pBD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CA+B5E;AAqmBD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,EAAE,CAmBrD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IACJ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC5B,GACL,OAAO,CAWT;AAiGD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAiE1C;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACvD,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CA4BA;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACxD,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAgEA"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAiBA,OAAO,EAQL,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,gBAAgB,EAIrB,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AA6BzC,OAAO,EAAe,KAAK,aAAa,EAAmB,MAAM,qBAAqB,CAAC;AAwIvF,eAAO,MAAM,WAAW,QAAuB,CAAC;AAChD,eAAO,MAAM,eAAe,uBAAuB,CAAC;AAkGpD;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAExF;AAyJD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUhE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAe5D;AAED;;;kDAGkD;AAClD,eAAO,MAAM,sBAAsB,gFAUzB,CAAC;AAEX;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,2JAiBjC,CAAC;AAEX,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,sBAAsB,CAqBzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAU7E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAuCxF;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,SAAS,EAAE,WAAW,GAAG,WAAW,CAAC;IACrC,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,aAAa,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,gBAAgB,GAC1B;IAAE,OAAO,CAAC,EAAE,eAAe,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAyDjD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,MAAM,GACjB,MAAM,CAkBR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,OAAO,EAChB,aAAa,UAAQ,GACpB;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAKvB;AA+pBD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CA+B5E;AA8mBD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,EAAE,CAmBrD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IACJ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC5B,GACL,OAAO,CAWT;AAiGD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAiE1C;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACvD,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CA4BA;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACxD,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC,CAwEA"}

package/dist/cli.js

@@ -19,13 +19,16 @@ Commands:
   create [flags]     Opens persona-maker@best for creating a new
                       persona, with target path passed as persona inputs.
                       Flags:
-                        --to <target>       Storage target: cwd, user, dir:n,
+                        --save-in-directory=<target>
+                                            Storage target: cwd, user, dir:n,
                                             library, or an explicit path.
-                                            Default: cwd when
-                                            .agentworkforce/workforce exists,
-                                            otherwise config defaultCreateTarget,
-                                            otherwise user.
-                        --save-default      Persist --to as defaultCreateTarget in
+                                            Default: cwd
+                                            (<cwd>/.agentworkforce/workforce/personas);
+                                            the directory is created if missing.
+                                            Override via this flag, or pin a
+                                            different default with --save-default.
+                        --save-default      Persist --save-in-directory as
+                                            defaultCreateTarget in
                                             ~/.agentworkforce/workforce/config.json.
                         --install-in-repo   Same behavior as agent.
                         --no-launch-metadata
@@ -113,7 +116,7 @@ configured persona dir is ~/.agentworkforce/workforce/personas.
 
 Examples:
   agentworkforce create
-  agentworkforce create --to user
+  agentworkforce create --save-in-directory=user
   agentworkforce agent npm-provenance-publisher@best
   agentworkforce agent my-posthog@best
   agentworkforce agent review@best-value
@@ -148,6 +151,44 @@ const local = loadLocalPersonas();
 for (const warning of local.warnings) {
     process.stderr.write(`warning: ${warning}\n`);
 }
+function collectKnownPersonas() {
+    const byName = new Map();
+    for (const spec of local.byId.values()) {
+        byName.set(spec.id, {
+            name: spec.id,
+            description: spec.description
+        });
+    }
+    for (const spec of Object.values(personaCatalog)) {
+        if (byName.has(spec.id))
+            continue;
+        byName.set(spec.id, {
+            name: spec.id,
+            description: spec.description
+        });
+    }
+    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+function formatNameDescriptionTable(rows) {
+    const headers = {
+        name: 'NAME',
+        description: 'DESCRIPTION'
+    };
+    const rendered = rows.map((r) => ({
+        name: r.name,
+        description: r.description.replace(/\s+/g, ' ').trim()
+    }));
+    const nameWidth = Math.max(headers.name.length, ...rendered.map((r) => r.name.length));
+    const termWidth = process.stderr.isTTY && typeof process.stderr.columns === 'number'
+        ? process.stderr.columns
+        : 120;
+    const descBudget = Math.max(headers.description.length, Math.max(32, termWidth - nameWidth - 3));
+    const truncate = (text) => text.length <= descBudget
+        ? text
+        : `${text.slice(0, Math.max(1, descBudget - 3)).trimEnd()}...`;
+    const line = (row) => `${row.name.padEnd(nameWidth)} | ${truncate(row.description)}`.trimEnd();
+    return [line(headers), ...rendered.map(line)].join('\n');
+}
 function resolveSpec(key) {
     const localSpec = local.byId.get(key);
     if (localSpec)
@@ -158,15 +199,9 @@ function resolveSpec(key) {
     const byId = Object.values(personaCatalog).find((p) => p.id === key);
     if (byId)
         return byId;
-    const repoListing = Object.values(personaCatalog)
-        .slice()
-        .sort((a, b) => a.id.localeCompare(b.id))
-        .map((p) => `  ${p.id}  (intent: ${p.intent})`);
-    const localListing = [...local.byId.values()]
-        .sort((a, b) => a.id.localeCompare(b.id))
-        .map((p) => `  ${p.id}  (${local.sources.get(p.id) ?? 'local'})`);
-    const listing = [...repoListing, ...localListing].join('\n');
-    return { error: `Unknown persona "${key}". Known personas:\n${listing}` };
+    return {
+        error: `Unknown persona "${key}". Known personas:\n${formatNameDescriptionTable(collectKnownPersonas())}`
+    };
 }
 function parseSelector(sel) {
     const at = sel.indexOf('@');
@@ -732,6 +767,7 @@ async function runInteractive(selection, options) {
         personaId,
         model: runtime.model,
         systemPrompt: runtime.systemPrompt,
+        harnessSettings: runtime.harnessSettings,
         mcpServers: resolvedMcp,
         permissions: effectiveSelection.permissions,
         ...(installRoot !== undefined ? { pluginDirs: [installRoot] } : {})
@@ -1478,7 +1514,7 @@ function runList(args) {
             return false;
         if (applyRecommended) {
             const rule = recommendedByIntent[r.intent];
-            if (!rule || r.rating !== rule.tier)
+            if (r.rating !== (rule?.tier ?? 'best-value'))
                 return false;
         }
         return true;
@@ -1686,6 +1722,18 @@ function formatPersonaShow(spec, source, tiers, tierNote) {
         lines.push(`  model:    ${rt.model}`);
         lines.push(`  reasoning: ${rt.harnessSettings.reasoning}`);
         lines.push(`  timeout:  ${rt.harnessSettings.timeoutSeconds}s`);
+        if (rt.harnessSettings.sandboxMode) {
+            lines.push(`  sandbox:  ${rt.harnessSettings.sandboxMode}`);
+        }
+        if (rt.harnessSettings.approvalPolicy) {
+            lines.push(`  approvals: ${rt.harnessSettings.approvalPolicy}`);
+        }
+        if (rt.harnessSettings.workspaceWriteNetworkAccess !== undefined) {
+            lines.push(`  network:  ${rt.harnessSettings.workspaceWriteNetworkAccess}`);
+        }
+        if (rt.harnessSettings.webSearch !== undefined) {
+            lines.push(`  webSearch: ${rt.harnessSettings.webSearch}`);
+        }
         lines.push('  systemPrompt:');
         lines.push(indent(rt.systemPrompt, '    '));
     }
@@ -1717,10 +1765,7 @@ function runHarnessCheck() {
     process.exit(0);
 }
 function defaultCreateTargetSelector() {
-    if (existsSync(join(process.cwd(), '.agentworkforce', 'workforce'))) {
-        return 'cwd';
-    }
-    return loadPersonaSourceConfig().defaultCreateTarget ?? 'user';
+    return loadPersonaSourceConfig().defaultCreateTarget ?? 'cwd';
 }
 function resolveCreateTarget(rawTarget) {
     const raw = rawTarget?.trim() || defaultCreateTargetSelector();
@@ -1744,7 +1789,7 @@ function resolveCreateTarget(rawTarget) {
     if (raw === 'library') {
         const dir = resolvePath(process.cwd(), 'personas');
         if (!existsSync(dir)) {
-            die('create: --to library requires running from the AgentWorkforce repo root, where ./personas exists.');
+            die('create: --save-in-directory=library requires running from the AgentWorkforce repo root, where ./personas exists.');
         }
         return {
             raw,
@@ -2042,17 +2087,27 @@ export function parseCreateArgs(args) {
             flags.noLaunchMetadata = true;
             continue;
         }
-        if (arg === '--to') {
-            flags.to = valueOf(i, arg);
+        if (arg === '--save-in-directory') {
+            const value = valueOf(i, arg).trim();
+            if (!value)
+                die('create: --save-in-directory requires a non-empty value.');
+            flags.saveInDirectory = value;
             i += 1;
             continue;
         }
+        if (arg.startsWith('--save-in-directory=')) {
+            const value = arg.slice('--save-in-directory='.length).trim();
+            if (!value)
+                die('create: --save-in-directory requires a non-empty value.');
+            flags.saveInDirectory = value;
+            continue;
+        }
         if (arg === '--save-default') {
             flags.saveDefault = true;
             continue;
         }
         if (arg === '-h' || arg === '--help') {
-            process.stdout.write('Usage: agentworkforce create [--to <cwd|user|dir:n|library|path>] [--save-default] [--install-in-repo] [--no-launch-metadata]\n');
+            process.stdout.write('Usage: agentworkforce create [--save-in-directory=<cwd|user|dir:n|library|path>] [--save-default] [--install-in-repo] [--no-launch-metadata]\n');
             process.exit(0);
         }
         positional.push(arg);
@@ -2061,7 +2116,7 @@ export function parseCreateArgs(args) {
     if (unexpected) {
         die(`create: unexpected argument "${unexpected}". The create command always runs ${CREATE_SELECTOR}; use "agentworkforce agent <persona>[@<tier>]" to run another persona.`);
     }
-    const target = resolveCreateTarget(flags.to);
+    const target = resolveCreateTarget(flags.saveInDirectory);
     ensureCreateTargetDir(target);
     if (flags.saveDefault)
         saveDefaultCreateTarget(target);