@clipboard-health/groundcrew 4.48.0 → 4.48.2

package/dist/lib/codexConfigRelocation.d.ts

@@ -0,0 +1,60 @@
+/**
+ * How an agent that cannot run with a read-only config home is pointed at a
+ * relocated, per-launch writable home instead. The safehouse launch stages a
+ * temp dir, seeds it with the minimal files the agent needs to authenticate +
+ * keep its config, exports `configDirEnv` to that dir, and grants it write.
+ * Credential files that Codex refreshes are copied back by the host after the
+ * agent exits, without granting the sandbox the whole real home.
+ *
+ * Empirically validated on macOS: codex hard-fails to launch
+ * with a read-only `~/.codex` ("failed to initialize in-process app-server
+ * client") and authenticates from a file (`auth.json`), so relocating
+ * `CODEX_HOME` + seeding `auth.json`/`config.toml` both unblocks it and closes
+ * persistence.
+ */
+export interface AgentConfigRelocation {
+    /** Env var that points the agent at a relocated config home. */
+    configDirEnv: string;
+    /** Home-relative dir the seed files come from (the agent's real home). */
+    sourceHomeRelativeDir: string;
+    /** Files (relative to `sourceHomeRelativeDir`) seeded into the relocated home. */
+    seedFiles: readonly string[];
+    /** Seed files whose writes must persist back to the source store. */
+    persistedFiles: readonly string[];
+}
+/**
+ * Return the config-relocation spec for an agent, or `undefined` when the
+ * agent has no registered relocation (claude, unknown agents) — the caller
+ * then runs that agent against its real home.
+ */
+export declare function agentConfigRelocation(agent: string): AgentConfigRelocation | undefined;
+export interface StagedAgentConfigHome {
+    /** The relocated, writable config/state home staged for this launch. */
+    configDir: string;
+    /** Env var (e.g. `CODEX_HOME`) that points the agent at `configDir`. */
+    configDirEnv: {
+        name: string;
+        value: string;
+    };
+    /** Files the host copies back after the sandboxed agent exits. */
+    writeBackFiles: readonly StagedAgentConfigWriteBack[];
+}
+interface StagedAgentConfigWriteBack {
+    baselinePath: string;
+    sourcePath: string;
+    stagedPath: string;
+}
+/**
+ * Stage + seed a relocated, writable config home for an agent that cannot run
+ * with a read-only config home (codex's `CODEX_HOME`) under the safehouse
+ * runner. `parentDir` must already exist (the caller stages it inside a
+ * dedicated per-launch temp dir); the config home itself is created here.
+ */
+export declare function stageRelocatedAgentConfigHome(input: {
+    agent: string;
+    relocation: AgentConfigRelocation;
+    parentDir: string;
+    sourceConfigDir: string;
+}): StagedAgentConfigHome;
+export {};
+//# sourceMappingURL=codexConfigRelocation.d.ts.map

package/dist/lib/codexConfigRelocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexConfigRelocation.d.ts","sourceRoot":"","sources":["../../src/lib/codexConfigRelocation.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,qBAAqB;IACpC,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,qEAAqE;IACrE,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAaD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAEtF;AAED,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,kEAAkE;IAClE,cAAc,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACvD;AAED,UAAU,0BAA0B;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,qBAAqB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,qBAAqB,CAexB"}

package/dist/lib/codexConfigRelocation.js

@@ -0,0 +1,70 @@
+import { copyFileSync, existsSync, mkdirSync, realpathSync } from "node:fs";
+import path from "node:path";
+const AGENT_CONFIG_RELOCATIONS = {
+    codex: {
+        configDirEnv: "CODEX_HOME",
+        sourceHomeRelativeDir: ".codex",
+        // auth.json carries the ChatGPT OAuth tokens (codex reads creds from a file,
+        // not the keychain); config.toml preserves the user's codex configuration.
+        seedFiles: ["auth.json", "config.toml"],
+        persistedFiles: ["auth.json"],
+    },
+};
+/**
+ * Return the config-relocation spec for an agent, or `undefined` when the
+ * agent has no registered relocation (claude, unknown agents) — the caller
+ * then runs that agent against its real home.
+ */
+export function agentConfigRelocation(agent) {
+    return AGENT_CONFIG_RELOCATIONS[agent.toLowerCase()];
+}
+/**
+ * Stage + seed a relocated, writable config home for an agent that cannot run
+ * with a read-only config home (codex's `CODEX_HOME`) under the safehouse
+ * runner. `parentDir` must already exist (the caller stages it inside a
+ * dedicated per-launch temp dir); the config home itself is created here.
+ */
+export function stageRelocatedAgentConfigHome(input) {
+    const configDir = path.join(input.parentDir, `${input.agent}-home`);
+    mkdirSync(configDir, { recursive: true });
+    const writeBackFiles = seedRelocatedConfigDir({
+        baselineDir: path.join(input.parentDir, "write-back-baseline"),
+        sourceDir: input.sourceConfigDir,
+        seedFiles: input.relocation.seedFiles,
+        persistedFiles: input.relocation.persistedFiles,
+        relocatedConfigDir: configDir,
+    });
+    return {
+        configDir,
+        configDirEnv: { name: input.relocation.configDirEnv, value: configDir },
+        writeBackFiles,
+    };
+}
+/**
+ * Seed the agent's minimal credential/config files into the relocated home.
+ * Best-effort per file: a missing source (e.g. the user isn't logged into the
+ * agent, or has no config) is skipped rather than aborting the launch — the
+ * agent then reports its own "not logged in" state, which is the correct signal.
+ */
+function seedRelocatedConfigDir(input) {
+    const writeBackFiles = [];
+    for (const file of input.seedFiles) {
+        const source = path.join(input.sourceDir, file);
+        if (!existsSync(source)) {
+            continue;
+        }
+        const destination = path.join(input.relocatedConfigDir, file);
+        copyFileSync(source, destination);
+        if (input.persistedFiles.includes(file)) {
+            const baselinePath = path.join(input.baselineDir, file);
+            mkdirSync(path.dirname(baselinePath), { recursive: true });
+            copyFileSync(source, baselinePath);
+            writeBackFiles.push({
+                baselinePath,
+                sourcePath: realpathSync(source),
+                stagedPath: destination,
+            });
+        }
+    }
+    return writeBackFiles;
+}

package/dist/lib/commandRunner.d.ts

@@ -4,6 +4,15 @@ export interface RunCommandOptions {
     timeoutMs?: number;
     stdio?: "captured" | "inherit";
     trim?: boolean;
+    /**
+     * Explicit subprocess env, replacing (not merging with) the inherited host
+     * env — matching `execFileSync`'s own semantics. Callers that want the host
+     * env plus overrides (e.g. relocating an agent's config-dir var) build that
+     * merge themselves before calling in, the same pattern the shell adapter
+     * uses for its own subprocess spawns. Only honored for the default
+     * (`captured`) mode — no caller needs it under `stdio: "inherit"` yet.
+     */
+    env?: NodeJS.ProcessEnv;
 }
 export declare function runCommand(command: string, arguments_: readonly string[], options: RunCommandOptions & {
     stdio: "inherit";

package/dist/lib/commandRunner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commandRunner.d.ts","sourceRoot":"","sources":["../../src/lib/commandRunner.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GAChD,IAAI,CAAC;AACR,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE,iBAAiB,GAAG;IAAE,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GACnD,MAAM,CAAC;AA8BV,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GAChD,OAAO,CAAC,SAAS,CAAC,CAAC;AACtB,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE,iBAAiB,GAAG;IAAE,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GACnD,OAAO,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"commandRunner.d.ts","sourceRoot":"","sources":["../../src/lib/commandRunner.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GAChD,IAAI,CAAC;AACR,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE,iBAAiB,GAAG;IAAE,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GACnD,MAAM,CAAC;AA+BV,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,EAAE,iBAAiB,GAAG;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GAChD,OAAO,CAAC,SAAS,CAAC,CAAC;AACtB,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,CAAC,EAAE,iBAAiB,GAAG;IAAE,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,GACnD,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/lib/commandRunner.js

@@ -23,6 +23,7 @@ export function runCommand(command, arguments_, options = {}) {
             maxBuffer: RUN_MAX_BUFFER_BYTES,
             stdio: ["ignore", "pipe", "pipe"],
             timeout: options.timeoutMs ?? DEFAULT_RUN_TIMEOUT_MS,
+            ...(options.env === undefined ? {} : { env: options.env }),
         });
         return options.trim === false ? output : output.trim();
     }

package/dist/lib/config.d.ts

@@ -55,18 +55,14 @@ export type WorkspaceKindSetting = "auto" | "cmux" | "tmux" | "zellij";
 export declare const WORKSPACE_KIND_SETTINGS: readonly WorkspaceKindSetting[];
 /**
  * Concrete local isolation backend selected for a launch. `safehouse` is
- * macOS-only (clearance HTTP-egress + sandbox profile); `srt` is Anthropic's
- * sandbox-runtime (macOS `sandbox-exec` + Linux `bubblewrap`, with a built-in
- * network allowlist) — a fast, non-Docker option on both macOS and Linux/WSL;
- * `sdx` is Docker Sandboxes (`sbx` CLI) — works on Linux and macOS and is the
- * only known option that lets the agent use Docker safely without exposing the
- * host socket; `none` is an explicit unsandboxed escape hatch.
+ * macOS-only (clearance HTTP-egress + sandbox profile); `sdx` is Docker
+ * Sandboxes (`sbx` CLI) on Linux and macOS; `none` is an explicit unsandboxed
+ * escape hatch.
  */
-export type LocalRunner = "safehouse" | "srt" | "sdx" | "none";
+export type LocalRunner = "safehouse" | "sdx" | "none";
 /**
  * User-facing local runner setting. `auto` resolves at launch time:
- * macOS picks `safehouse`, Linux picks `sdx`. `srt` and `none` are never
- * picked implicitly — both are opt-in via an explicit `local.runner`.
+ * macOS picks `safehouse`, Linux picks `sdx`. `none` is never picked implicitly.
  */
 export type LocalRunnerSetting = LocalRunner | "auto";
 export declare const LOCAL_RUNNER_SETTINGS: readonly LocalRunnerSetting[];
@@ -314,7 +310,7 @@ export interface Config {
          * Network egress posture for local launches. Defaults to `"allowlisted"`.
          * With the safehouse runner, `"allowlisted"` uses Clearance and `"open"`
          * keeps the filesystem sandbox while running bare `safehouse` with
-         * unrestricted network egress. `srt`/`sdx`/`none` ignore this setting.
+         * unrestricted network egress. `sdx`/`none` ignore this setting.
          */
         networkEgress?: NetworkEgressSetting;
         /**
@@ -336,8 +332,8 @@ export interface Config {
             enable?: string[];
         };
         /**
-         * Host directories re-opened read-only inside the sandbox (safehouse +
-         * srt), for toolchains the sandbox profile masks but does not re-open.
+         * Host directories re-opened read-only inside the safehouse sandbox, for
+         * toolchains the sandbox profile masks but does not re-open.
          * `~` is expanded. Defaults to tfenv's config root so `terraform`/`tfenv`
          * work in the sandbox; set your own list to add or replace entries.
          */

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,QAAQ,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAKzD,CAAC;AAEX;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAMrD,CAAC;AAEX;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,MAAM,CAAC;AAE1D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAGzD,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,KAAK,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAC/D,KAAK,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAAG;IAC1E,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AACF,KAAK,mBAAmB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;;;GASG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2HAA2H;IAC3H,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,MAAM;IACrB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB;;;WAGG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;QACnD;;;;;WAKG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,YAAY,CAAC;KACtB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,kBAAkB,CAAC;QAC5B;;;;;WAKG;QACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC;;;WAGG;QACH,SAAS,CAAC,EAAE;YACV;;;;;;;;;;eAUG;YACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;SACnB,CAAC;QACF;;;;;WAKG;QACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,OAAO,CAAC,EAAE;QACR;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,4DAA4D;QAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,0EAA0E;QAC1E,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,6EAA6E;QAC7E,YAAY,EAAE,eAAe,EAAE,CAAC;QAChC,8EAA8E;QAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,4EAA4E;QAC5E,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;IACF,QAAQ,EAAE;QACR,KAAK,EAAE,YAAY,CAAC;KACrB,CAAC;IACF,YAAY,EAAE;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;OAGG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAC;QAC3B;;;WAGG;QACH,aAAa,EAAE,oBAAoB,CAAC;QACpC;;;WAGG;QACH,SAAS,EAAE;YACT,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;SAC3B,CAAC;QACF,sFAAsF;QACtF,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE9D;AAED,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;CAChC;AA0TD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,OAAO,CAE1F;AAyJD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AAumBD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CA+B5E;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAGpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAO1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,QAAQ,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvE,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAKzD,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAKrD,CAAC;AAEX;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG,MAAM,CAAC;AAE1D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAGzD,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjD,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,KAAK,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAC/D,KAAK,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,GAAG;IAC1E,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AACF,KAAK,mBAAmB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;;;GASG;AACH;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2HAA2H;IAC3H,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,MAAM;IACrB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB;;;WAGG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC;QACnD;;;;;WAKG;QACH,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,KAAK,CAAC,EAAE,YAAY,CAAC;KACtB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;KACnD,CAAC;IACF,OAAO,CAAC,EAAE;QACR,mEAAmE;QACnE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;WAIG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;OAIG;IACH,KAAK,CAAC,EAAE;QACN,MAAM,CAAC,EAAE,kBAAkB,CAAC;QAC5B;;;;;WAKG;QACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;QACrC;;;WAGG;QACH,SAAS,CAAC,EAAE;YACV;;;;;;;;;;eAUG;YACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;SACnB,CAAC;QACF;;;;;WAKG;QACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,OAAO,CAAC,EAAE;QACR;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,GAAG,EAAE;QACH,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,4DAA4D;QAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,0EAA0E;QAC1E,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,6EAA6E;QAC7E,YAAY,EAAE,eAAe,EAAE,CAAC;QAChC,8EAA8E;QAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,4EAA4E;QAC5E,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC,CAAC;IACF,QAAQ,EAAE;QACR,KAAK,EAAE,YAAY,CAAC;KACrB,CAAC;IACF,YAAY,EAAE;QACZ,iBAAiB,EAAE,MAAM,CAAC;QAC1B,wBAAwB,EAAE,MAAM,CAAC;QACjC,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;KAC9C,CAAC;IACF,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;OAGG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,KAAK,EAAE;QACL,MAAM,EAAE,kBAAkB,CAAC;QAC3B;;;WAGG;QACH,aAAa,EAAE,oBAAoB,CAAC;QACpC;;;WAGG;QACH,SAAS,EAAE;YACT,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;SAC3B,CAAC;QACF,sFAAsF;QACtF,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE9D;AAED,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IACjC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;CAChC;AA0TD;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,OAAO,CAE1F;AAyJD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EACtC,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AAumBD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CA+B5E;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAGpE"}

package/dist/lib/config.js

@@ -24,7 +24,6 @@ export const WORKSPACE_KIND_SETTINGS = [
 export const LOCAL_RUNNER_SETTINGS = [
     "auto",
     "safehouse",
-    "srt",
     "sdx",
     "none",
 ];
@@ -53,7 +52,7 @@ const DEFAULT_GIT = {
 };
 /**
  * Read-only sandbox dirs granted by default: tfenv's config root, which the
- * safehouse/srt profiles mask but don't re-open. `~` expands at normalization.
+ * safehouse profiles mask but don't re-open. `~` expands at normalization.
  */
 const DEFAULT_LOCAL_READ_ONLY_DIRS = ["~/.config/tfenv"];
 function normalizeLocal(userLocal) {

package/dist/lib/gitCommonDir.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Resolve the worktree's shared git directory from the checkout itself.
+ * This supports both native worktrees and externally provisioned worktrees
+ * whose git storage lives outside the checkout tree.
+ */
+export declare function resolveGitCommonDir(worktreeDir: string): string;
+//# sourceMappingURL=gitCommonDir.d.ts.map

package/dist/lib/gitCommonDir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitCommonDir.d.ts","sourceRoot":"","sources":["../../src/lib/gitCommonDir.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAQ/D"}

package/dist/lib/gitCommonDir.js

@@ -0,0 +1,15 @@
+import { runCommand } from "./commandRunner.js";
+/**
+ * Resolve the worktree's shared git directory from the checkout itself.
+ * This supports both native worktrees and externally provisioned worktrees
+ * whose git storage lives outside the checkout tree.
+ */
+export function resolveGitCommonDir(worktreeDir) {
+    return runCommand("git", [
+        "-C",
+        worktreeDir,
+        "rev-parse",
+        "--path-format=absolute",
+        "--git-common-dir",
+    ]);
+}

package/dist/lib/host.d.ts

@@ -14,12 +14,6 @@ export interface HostCapabilities {
     hasTmux: boolean;
     /** True when the `zellij` binary is on PATH. */
     hasZellij: boolean;
-    /** True when the `bubblewrap` binary is on PATH (Linux srt dependency). */
-    hasBubblewrap: boolean;
-    /** True when the `socat` binary is on PATH (Linux srt dependency). */
-    hasSocat: boolean;
-    /** True when the `rg` (ripgrep) binary is on PATH (Linux srt dependency). */
-    hasRipgrep: boolean;
     /** True when the host platform is macOS. Safehouse is macOS-only. */
     isMacOS: boolean;
     /** True when the host platform is Linux. */
@@ -30,14 +24,6 @@ export interface HostCapabilities {
      * or WSL before creating a worktree.
      */
     isSafehouseSupported: boolean;
-    /**
-     * True when srt (Anthropic sandbox-runtime) is supportable on this
-     * platform. srt uses `sandbox-exec` on macOS and `bubblewrap` on Linux,
-     * so this tracks "macOS || Linux"; WSL inherits the Linux path. The srt
-     * binary itself ships as a groundcrew dependency, so there is no PATH
-     * probe — but the Linux backend additionally needs bubblewrap/socat/rg.
-     */
-    isSrtSupported: boolean;
     /**
      * True when sdx (Docker Sandboxes) is supportable on this platform —
      * sbx is published for both macOS and Linux, so this stays in sync with

package/dist/lib/host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/lib/host.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,YAAY,EAAE,OAAO,CAAC;IACtB,gEAAgE;IAChE,MAAM,EAAE,OAAO,CAAC;IAChB,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,aAAa,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,UAAU,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc1F;AAED,wBAAsB,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4B5F"}
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/lib/host.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,YAAY,EAAE,OAAO,CAAC;IACtB,gEAAgE;IAChE,MAAM,EAAE,OAAO,CAAC;IAChB,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,8CAA8C;IAC9C,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAc1F;AAED,wBAAsB,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqB5F"}

package/dist/lib/host.js

@@ -28,15 +28,12 @@ export async function which(cmd, signal) {
 export async function detectHostCapabilities(signal) {
     const isMacOS = process.platform === "darwin";
     const isLinux = process.platform === "linux";
-    const [safehouse, sbx, cmux, tmux, zellij, bubblewrap, socat, ripgrep] = await Promise.all([
+    const [safehouse, sbx, cmux, tmux, zellij] = await Promise.all([
         which("safehouse", signal),
         which("sbx", signal),
         which("cmux", signal),
         which("tmux", signal),
         which("zellij", signal),
-        which("bwrap", signal),
-        which("socat", signal),
-        which("rg", signal),
     ]);
     return {
         hasSafehouse: safehouse !== undefined,
@@ -44,13 +41,9 @@ export async function detectHostCapabilities(signal) {
         hasCmux: cmux !== undefined,
         hasTmux: tmux !== undefined,
         hasZellij: zellij !== undefined,
-        hasBubblewrap: bubblewrap !== undefined,
-        hasSocat: socat !== undefined,
-        hasRipgrep: ripgrep !== undefined,
         isMacOS,
         isLinux,
         isSafehouseSupported: isMacOS,
-        isSrtSupported: isMacOS || isLinux,
         isSdxSupported: isMacOS || isLinux,
     };
 }

package/dist/lib/launchCommand.d.ts

@@ -20,30 +20,11 @@ export declare function withResumeArgs(definition: AgentDefinition, resumeArgs:
  *   exercise the catch branch.
  */
 export declare function resolveSafehouseClearancePath(baseUrl?: string): string;
-/**
- * Resolve the `srt` CLI shipped by `@anthropic-ai/sandbox-runtime` (a pinned
- * groundcrew dependency) via Node's module resolution, reading the package's
- * `bin` field so the path survives version bumps that move the entry point.
- * The resolved `dist/cli.js` carries a `#!/usr/bin/env node` shebang and npm
- * marks it executable, so it is exec'd directly like the safehouse wrapper.
- *
- * @param baseUrl - **Test-only seam.** Production callers must omit this so the
- *   helper resolves from this module's URL. Tests pass an invalid value to
- *   exercise the catch branch.
- */
-export declare function resolveSrtBinPath(baseUrl?: string): string;
-/**
- * Extract the `srt` entry from a package manifest's `bin` field, which npm
- * allows as either a bare string (single-bin packages) or a name→path map.
- */
-export declare function srtBinEntry(manifest: {
-    bin?: string | Record<string, string>;
-}): string;
 export declare function isEnvironmentAssignment(token: string): boolean;
 /**
  * Infer the agent's command basename from a agent `cmd` (skipping a leading
  * `env`/`KEY=val` prefix). Safehouse uses it to pick the matching `.sb`
- * profile; srt uses it to pick the agent's credential profile in `srtPolicy`.
+ * profile.
  */
 export declare function inferAgentCommandName(agentCmd: string): string;
 export type WorkerEnvironment = Readonly<{
@@ -64,6 +45,33 @@ export interface SafehouseAgentIntegration {
      * cmux activity-reporting hooks for a Claude agent).
      */
     agentArgs?: readonly string[];
+    /**
+     * Extra **writable** safehouse `--add-dirs` paths contributed by the
+     * integration (e.g. codex's relocated `CODEX_HOME` under safehouse, which
+     * the agent must read AND write session/state into — unlike
+     * `addDirsReadOnly`). Merged into the agent wrap's `--add-dirs` alongside
+     * `safehouseAgentAddDirs`; never granted to the repo-controlled
+     * prepareWorktree wrap.
+     */
+    addDirs?: readonly string[];
+    /**
+     * Files copied from their staged sandbox location back to the source store
+     * by the host after the agent exits. This keeps credential refreshes without
+     * granting the sandbox write access to the source config home.
+     */
+    writeBackFiles?: readonly SafehouseAgentWriteBack[];
+    /**
+     * Extra paths torn down (`rm -rf`) once the agent wrap exits — success or
+     * failure — folded into the same EXIT trap that already cleans up the
+     * profile-shim dir. Empty/undefined for integrations that stage nothing
+     * (Claude), which leaves the trap's shape unchanged.
+     */
+    teardownPaths?: readonly string[];
+}
+interface SafehouseAgentWriteBack {
+    baselinePath: string;
+    sourcePath: string;
+    stagedPath: string;
 }
 interface LaunchCommandArguments {
     definition: AgentDefinition;
@@ -72,8 +80,8 @@ interface LaunchCommandArguments {
     /**
      * Directory the agent and prepareWorktree hook cwd into (the `cd`/`-w`
      * target). Equals `worktreeDir` unless the repo recipe sets a `workdir`, in
-     * which case it is the subproject dir. The `{{worktree}}` template and the srt
-     * filesystem grants keep using `worktreeDir` (the whole checkout).
+     * which case it is the subproject dir. The `{{worktree}}` template keeps using
+     * `worktreeDir` (the whole checkout).
      */
     workingDir: string;
     /**
@@ -94,7 +102,7 @@ interface LaunchCommandArguments {
      * Operator-only, per-repository setup command run on the HOST shell (never a
      * sandbox), before `prepareWorktreeCommand` and the agent. Resolved by the
      * caller from `knownRepositories[].unsandboxedHooks.prepareWorktree` in
-     * crew.config.ts. Emitted for the safehouse, srt, and none runners; the sdx
+     * crew.config.ts. Emitted for the safehouse and none runners; the sdx
      * runner rejects it (no host to run it on).
      */
     prepareWorktreeUnsandboxedCommand?: string | undefined;
@@ -106,7 +114,7 @@ interface LaunchCommandArguments {
     runner: LocalRunner;
     /**
      * Network egress posture. The safehouse runner uses `"allowlisted"` for the
-     * Clearance shim and `"open"` for bare `safehouse`; srt/sdx/unwrapped paths
+     * Clearance shim and `"open"` for bare `safehouse`; sdx/unwrapped paths
      * ignore it.
      */
     networkEgress: NetworkEgressSetting;
@@ -117,34 +125,6 @@ interface LaunchCommandArguments {
      * on one host and sdx on another without config edits.
      */
     sandboxName?: string | undefined;
-    /**
-     * Absolute path to the profile-neutral srt settings JSON for the
-     * prepareWorktree wrap (no agent credential grants). Required when
-     * `runner === "srt"`. Staged in `srtSettingsDir`.
-     */
-    srtPrepareSettingsFile?: string | undefined;
-    /**
-     * Absolute path to the full agent srt settings JSON for the agent wrap.
-     * Required when `runner === "srt"`. Staged in `srtSettingsDir`.
-     */
-    srtAgentSettingsFile?: string | undefined;
-    /**
-     * Absolute temp dir holding the srt settings files. Required when
-     * `runner === "srt"`; torn down by the launch command after srt exits.
-     */
-    srtSettingsDir?: string | undefined;
-    /**
-     * Env var that points the agent at its relocated, writable config home
-     * (e.g. `{ name: "CODEX_HOME", value: "<settingsDir>/codex-home" }`).
-     * Injected into the agent wrap's `env -i` (with an explicit value, not a
-     * host-env passthrough) so the agent writes state to the staged dir instead
-     * of its read-only real home. Only the agent wrap gets it — the prepare wrap
-     * runs the repo hook, not the agent. Undefined for read-only agents (claude).
-     */
-    srtAgentConfigDirEnv?: {
-        name: string;
-        value: string;
-    } | undefined;
     /**
      * Extra filesystem paths granted read/write to the safehouse sandbox via
      * `--add-dirs`, beyond safehouse's automatic cwd grant. Resolved (and deduped)

package/dist/lib/launchCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launchCommand.d.ts","sourceRoot":"","sources":["../../src/lib/launchCommand.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe,CAE/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAcvF;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAgB3E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,MAAM,CAMvF;AAgOD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA8B9D;AAMD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC,CAAC;AAEH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,iBAAiB,CAMpB;AAwCD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED,UAAU,sBAAsB;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;;;;OAMG;IACH,iCAAiC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACnE;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxD;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAClE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CAuC7E"}
+{"version":3,"file":"launchCommand.d.ts","sourceRoot":"","sources":["../../src/lib/launchCommand.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe,CAE/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,GAAE,MAAwB,GAAG,MAAM,CAcvF;AA4OD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA8B9D;AAMD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC,CAAC;AAEH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,iBAAiB,CAMpB;AAwCD,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACpD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,UAAU,uBAAuB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,sBAAsB;IAC9B,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C;;;;;;OAMG;IACH,iCAAiC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,aAAa,EAAE,oBAAoB,CAAC;IACpC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxD;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9D;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAClE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1C;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,MAAM,CAoC7E"}