@mifune/agro 0.17.0-rc.1 → 0.18.0

package/dist/agro.js

@@ -7,7 +7,7 @@ var __export = (target, all) => {
 
 // src/cli.ts
 import { fileURLToPath } from "node:url";
-import { dirname as dirname10, join as join20, resolve as resolve13 } from "node:path";
+import { dirname as dirname10, join as join19, resolve as resolve11 } from "node:path";
 import { existsSync as existsSync23, mkdtempSync as mkdtempSync5, readFileSync as readFileSync13, rmSync as rmSync6 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 
@@ -531,7 +531,7 @@ function refuseUnsupported(installation, bin) {
       return new Error(`${at} \u2014 rebuild from the checkout: npm --prefix .agro/cli run build`);
     default:
       return new Error(
-        `unknown installation (${reason ?? target}) \u2014 install with npm install -g ${PACKAGE} or get-agro.sh`
+        `unknown installation (${reason ?? target}) \u2014 install with npm install -g ${PACKAGE} or install.sh`
       );
   }
 }
@@ -611,6 +611,15 @@ ${detail}`);
 function copyFile(deps, from, to) {
   deps.writeFile(to, deps.readFile(from), deps.stat(from).mode & 511);
 }
+var ABSOLUTE_NODE_SHEBANG = /^#!\/\S*\/node$/;
+function withPinnedShebang(current, artifact) {
+  const currentEnd = current.indexOf(10);
+  const artifactEnd = artifact.indexOf(10);
+  if (currentEnd < 0 || artifactEnd < 0) return artifact;
+  const firstLine = current.subarray(0, currentEnd);
+  if (!ABSOLUTE_NODE_SHEBANG.test(firstLine.toString("utf8"))) return artifact;
+  return Buffer.concat([firstLine, artifact.subarray(artifactEnd)]);
+}
 function removeQuietly(deps, path4, io) {
   try {
     deps.unlink(path4);
@@ -629,7 +638,7 @@ async function upgradeStandalone(installation, opts, deps, io) {
     deps.access(dir, constants.W_OK);
   } catch {
     throw new Error(
-      `${dir} is not writable; re-run as the user who owns ${target}, or reinstall into a writable directory with get-agro.sh`
+      `${dir} is not writable; re-run as the user who owns ${target}, or reinstall into a writable directory with install.sh`
     );
   }
   let artifact;
@@ -645,11 +654,11 @@ async function upgradeStandalone(installation, opts, deps, io) {
   let prevPresent = false;
   let replaced = false;
   try {
-    deps.writeFile(tmp, artifact, 493);
-    tmpPresent = true;
     if (artifact.subarray(0, 2).toString("utf8") !== "#!") {
       throw new Error(`invalid artifact from ${url}: no #! shebang`);
     }
+    deps.writeFile(tmp, withPinnedShebang(deps.readFile(target), artifact), 493);
+    tmpPresent = true;
     const probe = deps.runNode(tmp, ["--version"]);
     const available = versionOf(probe);
     if (parseSemver(available) === void 0) {
@@ -835,49 +844,6 @@ import { resolve as resolve3, sep } from "node:path";
 // src/lib/agro-config.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync4, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { basename as basename3, dirname as dirname2, resolve as resolve2 } from "node:path";
-
-// src/lib/runtimes/catalog.ts
-var CATALOG = [
-  {
-    id: "docker",
-    title: "Docker container",
-    tier: "container",
-    state: "active",
-    provisionable: true,
-    docsPath: "docs/runtimes/docker.md"
-  },
-  {
-    id: "microsandbox",
-    title: "MicroSandbox",
-    tier: "microvm",
-    state: "planned",
-    provisionable: false,
-    notProvisionableReason: (bin) => `microsandbox is not a provisionable runtime yet; see docs/rfcs/rfc-runtime-support.md. Inside a sandbox run \`${bin} tool install microsandbox\`.`,
-    docsPath: "docs/runtimes/microsandbox.md"
-  },
-  {
-    id: "openshell",
-    title: "NVIDIA OpenShell",
-    tier: "container",
-    state: "active",
-    provisionable: true,
-    docsPath: "docs/runtimes/openshell.md"
-  }
-];
-var RUNTIME_CATALOG = Object.freeze(
-  CATALOG.map((entry) => Object.freeze({ ...entry }))
-);
-var PROVISIONABLE_RUNTIMES = Object.freeze(
-  CATALOG.filter((entry) => entry.provisionable).map((entry) => entry.id)
-);
-function findRuntime(id) {
-  return RUNTIME_CATALOG.find((r) => r.id === id);
-}
-function runtimeIds() {
-  return RUNTIME_CATALOG.map((r) => r.id);
-}
-
-// src/lib/agro-config.ts
 var AGRO_CONFIG_FILE = NAMES.configFile;
 var AGRO_CONFIG_MODE = 420;
 var RESERVED_HOME_PATHS = [
@@ -899,7 +865,7 @@ var RESERVED_HOME_PATHS = [
   "/usr",
   "/var"
 ];
-var SANDBOX_RUNTIMES = PROVISIONABLE_RUNTIMES;
+var SANDBOX_RUNTIMES = ["docker"];
 function configCheckout(config) {
   const value = config.checkout ?? config.repo;
   return typeof value === "string" && value !== "" ? value : void 0;
@@ -928,13 +894,6 @@ function defaultAgroConfig(name) {
     composeOverrides: []
   };
 }
-function entryRuntime(root) {
-  try {
-    return readAgroConfig(agroConfigPath(root)).runtime ?? "docker";
-  } catch {
-    return "docker";
-  }
-}
 function readAgroConfig(path4) {
   if (!existsSync4(path4)) return defaultAgroConfig(basename3(dirname2(resolve2(path4))));
   let raw;
@@ -1324,8 +1283,8 @@ function redact(token) {
 async function ask(question) {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
   try {
-    return await new Promise((resolve14) => {
-      rl.question(`  ${question} `, (answer) => resolve14(answer.trim()));
+    return await new Promise((resolve12) => {
+      rl.question(`  ${question} `, (answer) => resolve12(answer.trim()));
     });
   } finally {
     rl.close();
@@ -1337,7 +1296,7 @@ async function askSecret(question) {
   process.stdin.setRawMode(true);
   process.stdin.resume();
   const bytes = [];
-  return await new Promise((resolve14) => {
+  return await new Promise((resolve12) => {
     const cleanup = () => {
       try {
         process.stdin.setRawMode(false);
@@ -1355,7 +1314,7 @@ async function askSecret(question) {
         } else if (byte === 13 || byte === 10) {
           cleanup();
           process.stdout.write("\n");
-          resolve14(Buffer.from(bytes).toString("utf8").trim());
+          resolve12(Buffer.from(bytes).toString("utf8").trim());
           return;
         } else if (byte === 127 || byte === 8) {
           if (bytes.length > 0) {
@@ -1405,10 +1364,10 @@ async function askSecretPiped(question) {
   };
   process.on("SIGINT", onSigint);
   try {
-    return await new Promise((resolve14) => {
+    return await new Promise((resolve12) => {
       rl.question(`  ${question} `, (answer) => {
         process.stdout.write("\n");
-        resolve14(answer.trim());
+        resolve12(answer.trim());
       });
     });
   } finally {
@@ -1453,10 +1412,10 @@ import { existsSync as existsSync6, mkdirSync as mkdirSync3, readdirSync as read
 import { dirname as dirname4, join as join4, resolve as resolve5, sep as sep2 } from "node:path";
 
 // agro-asset:/home/runner/work/agro/agro/.devcontainer/docker-compose.yml
-var docker_compose_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-sandbox-${SANDBOX_NAME:-agro}}\n    pull_policy: ${AGRO_PULL_POLICY:-missing}\n    container_name: ${SANDBOX_NAME:-agro}\n    build:\n      context: ${AGRO_REPO_DIR:-..}\n      dockerfile: .devcontainer/Dockerfile\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n      - ${AGRO_REPO_DIR:-..}:/home/sandbox/harness\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-test1234}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n    stdin_open: true\n    tty: true\n    cgroup: private\n    cap_add:\n      - SYS_ADMIN\n    security_opt:\n      - apparmor=unconfined\n    tmpfs:\n      - /run\n      - /run/lock\n      - /sys/fs\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
+var docker_compose_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-sandbox-${SANDBOX_NAME:-agro}}\n    pull_policy: ${AGRO_PULL_POLICY:-missing}\n    container_name: ${SANDBOX_NAME:-agro}\n    build:\n      context: ${AGRO_REPO_DIR:-..}\n      dockerfile: .devcontainer/Dockerfile\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n      - ${AGRO_REPO_DIR:-..}:/home/sandbox/harness\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-test1234}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n      - TYPESAFE_API_KEY=${TYPESAFE_API_KEY:-}\n    stdin_open: true\n    tty: true\n    cgroup: private\n    cap_add:\n      - SYS_ADMIN\n    security_opt:\n      - apparmor=unconfined\n    tmpfs:\n      - /run\n      - /run/lock\n      - /sys/fs\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
 
 // agro-asset:/home/runner/work/agro/agro/.devcontainer/docker-compose.image-only.yml
-var docker_compose_image_only_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-ghcr.io/mifunedev/agro:latest}\n    pull_policy: ${AGRO_PULL_POLICY:-always}\n    container_name: ${SANDBOX_NAME:-agro}\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-test1234}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n    stdin_open: true\n    tty: true\n    cgroup: private\n    cap_add:\n      - SYS_ADMIN\n    security_opt:\n      - apparmor=unconfined\n    tmpfs:\n      - /run\n      - /run/lock\n      - /sys/fs\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
+var docker_compose_image_only_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-ghcr.io/mifunedev/agro:latest}\n    pull_policy: ${AGRO_PULL_POLICY:-always}\n    container_name: ${SANDBOX_NAME:-agro}\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-test1234}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n      - TYPESAFE_API_KEY=${TYPESAFE_API_KEY:-}\n    stdin_open: true\n    tty: true\n    cgroup: private\n    cap_add:\n      - SYS_ADMIN\n    security_opt:\n      - apparmor=unconfined\n    tmpfs:\n      - /run\n      - /run/lock\n      - /sys/fs\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
 
 // agro-asset:/home/runner/work/agro/agro/.devcontainer/docker-compose.ssh.yml
 var docker_compose_ssh_default = 'services:\n  sandbox:\n    ports:\n      - "127.0.0.1:${SANDBOX_SSH_PORT:-2222}:22"\n';
@@ -1534,8 +1493,7 @@ if [ -f "$REPO_DIR/harness.yaml" ] && [ -f "$MIGRATOR" ]; then
   sh "$MIGRATOR" "$REPO_DIR" >&2 || true
 fi
 
-ENV_FILE="$REPO_DIR/.env"
-[ -f "$ENV_FILE" ] || ENV_FILE="$REPO_DIR/.devcontainer/.env"
+ENV_FILE="$(agro_env_file "$REPO_DIR")"
 
 compose_path() {
   case "$1" in
@@ -1682,6 +1640,14 @@ agro_config_file() {
   printf '%s\\n' "$1/$AGRO_CONFIG_FILE"
 }
 
+agro_env_file() {
+  if [ -f "$1/.env" ]; then
+    printf '%s\\n' "$1/.env"
+  else
+    printf '%s\\n' "$1/.devcontainer/.env"
+  fi
+}
+
 agro_env_value() {
   local key="AGRO_$1"
   printf '%s\\n' "\${!key:-}"
@@ -1786,9 +1752,6 @@ printf 'free\\n'
 exit 0
 `;
 
-// agro-asset:/home/runner/work/agro/agro/.devcontainer/openshell-policy.yaml
-var openshell_policy_default = "version: 1\n\nfilesystem_policy:\n  include_workdir: true\n  read_only:\n    - /bin\n    - /usr\n    - /lib\n    - /etc\n    - /opt\n    - /proc\n    - /var/log\n    - /dev/urandom\n  read_write:\n    - /home/sandbox\n    - /tmp\n    - /dev/null\n\nprocess:\n  run_as_user: sandbox\n  run_as_group: sandbox\n\nnetwork_policies:\n  github:\n    endpoints:\n      - host: github.com\n        port: 443\n        protocol: rest\n        enforcement: enforce\n        access: read-write\n      - host: api.github.com\n        port: 443\n        protocol: rest\n        enforcement: enforce\n        access: read-write\n      - host: release-assets.githubusercontent.com\n        port: 443\n        protocol: rest\n        enforcement: enforce\n        access: read-only\n    binaries:\n      - path: /usr/bin/git\n      - path: /usr/bin/gh\n      - path: /usr/bin/curl\n  npm:\n    endpoints:\n      - host: registry.npmjs.org\n        port: 443\n        protocol: rest\n        enforcement: enforce\n        access: read-only\n        allow_encoded_slash: true\n    binaries:\n      - path: /usr/local/bin/node\n  anthropic:\n    endpoints:\n      - host: api.anthropic.com\n        port: 443\n        protocol: rest\n        enforcement: enforce\n        access: read-write\n    binaries:\n      - path: /home/sandbox/.local/lib/node_modules/@anthropic-ai/claude-code/bin/*\n";
-
 // src/lib/registry.ts
 var SANDBOX_NAME_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
 var DEFAULT_NAME_PREFIX = "agro-sbx-";
@@ -1845,12 +1808,10 @@ function nextDefaultName(run = spawnRunner) {
     if (!taken.has(candidate)) return candidate;
   }
 }
-function openshellFiles(entry) {
-  return [{ dest: join4(entry, "openshell-policy.yaml"), body: openshell_policy_default, mode: 420 }];
-}
-function dockerFiles(entry, opts) {
+function materialize(root, opts = {}) {
+  const entry = resolve5(root);
   const scripts = join4(resolveProjectLayout(entry).controlDir, "scripts");
-  return [
+  const files = [
     {
       dest: join4(entry, ".devcontainer", "docker-compose.yml"),
       body: (opts.checkout ?? opts.repo) === void 0 ? docker_compose_image_only_default : docker_compose_default,
@@ -1862,10 +1823,6 @@ function dockerFiles(entry, opts) {
     { dest: join4(scripts, "paths.sh"), body: paths_default, mode: 420 },
     { dest: join4(scripts, "check-host-port.sh"), body: check_host_port_default, mode: 493 }
   ];
-}
-function materialize(root, opts = {}) {
-  const entry = resolve5(root);
-  const files = entryRuntime(entry) === "openshell" ? openshellFiles(entry) : dockerFiles(entry, opts);
   for (const file of files) {
     const dest = resolve5(file.dest);
     if (!dest.startsWith(entry + sep2)) {
@@ -2024,32 +1981,29 @@ function stripQuotes2(s) {
 // src/commands/lifecycle.ts
 import { existsSync as existsSync10, mkdtempSync, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
 import { tmpdir } from "node:os";
-import { basename as basename6, join as join6, sep as sep3 } from "node:path";
-
-// src/lib/execution/index.ts
-import { basename as basename4, resolve as resolve7 } from "node:path";
-
-// src/lib/version.ts
-var AGRO_VERSION = true ? "0.17.0-rc.1" : "0.0.0-dev";
-var OFFICIAL_IMAGE = "ghcr.io/mifunedev/agro";
-var RELEASE_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[a-z][a-z0-9]*\.[0-9]+)?$/;
-function parseReleaseVersion(value) {
-  const bare = value.startsWith("v") ? value.slice(1) : value;
-  return RELEASE_VERSION.test(bare) ? bare : void 0;
-}
-function officialImageRef(version) {
-  return `${OFFICIAL_IMAGE}:${RELEASE_VERSION.test(version) ? version : "latest"}`;
-}
+import { basename as basename4, join as join5, sep as sep3 } from "node:path";
 
 // src/lib/execution/detect.ts
 import { existsSync as existsSync9 } from "node:fs";
-var SANDBOX_MARKER_FILE = "/.dockerenv";
-var EXECUTION_TARGET_ENV = "AGRO_EXECUTION_TARGET";
-function runningInsideSandbox(env = process.env, fileExists = existsSync9) {
+var SANDBOX_MARKER_FILE = "/etc/agro/sandbox";
+var DOCKERENV_FILE = "/.dockerenv";
+function detectSandbox(env = process.env, fileExists = existsSync9) {
   const override = agroEnvValue(env, "EXECUTION_TARGET");
-  if (override === "local") return true;
-  if (override === "docker-compose") return false;
-  return fileExists(SANDBOX_MARKER_FILE) && (env.SANDBOX_NAME ?? "") !== "";
+  if (override === "local") return { inside: true, rule: "override" };
+  if (override === "docker-compose") return { inside: false, rule: "override" };
+  if (fileExists(SANDBOX_MARKER_FILE)) return { inside: true, rule: "marker" };
+  if (fileExists(DOCKERENV_FILE) && (env.SANDBOX_NAME ?? "") !== "") {
+    return { inside: true, rule: "fallback" };
+  }
+  return { inside: false, rule: "none" };
+}
+function runningInsideSandbox(env = process.env, fileExists = existsSync9) {
+  return detectSandbox(env, fileExists).inside;
+}
+function sandboxFallbackWarning(env = process.env, fileExists = existsSync9) {
+  if (detectSandbox(env, fileExists).rule !== "fallback") return void 0;
+  return `agro: warning: ${SANDBOX_MARKER_FILE} is missing; detected the sandbox from ${DOCKERENV_FILE} and SANDBOX_NAME. Upgrade the sandbox image.
+`;
 }
 
 // src/lib/execution/docker-compose-target.ts
@@ -2270,243 +2224,6 @@ function defaultIdentity() {
   return { name: info2.username, uid: info2.uid };
 }
 
-// src/lib/execution/openshell-target.ts
-import { join as join5 } from "node:path";
-var OPENSHELL_BIN = "openshell";
-var OPENSHELL_POLICY_FILE = "openshell-policy.yaml";
-var OPENSHELL_MAIN = "/usr/local/bin/openshell-main.sh";
-var OPENSHELL_WORKDIR = "/home/sandbox/harness";
-var OPENSHELL_USER = "sandbox";
-var OPENSHELL_PINNED_VERSION = "v0.1.2";
-var OPENSHELL_LOCAL_GATEWAY = "https://127.0.0.1:17670";
-var OPENSHELL_INSTALL_URL = "https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh";
-var LOGIN_SHELLS = /* @__PURE__ */ new Set(["zsh", "bash"]);
-var NOT_FOUND = /sandbox (?:'[^']*' )?not found/;
-var OPENSHELL_PHASES = [
-  "Unspecified",
-  "Provisioning",
-  "Ready",
-  "Error",
-  "Deleting",
-  "Unknown",
-  "Stopping",
-  "Stopped",
-  "Starting",
-  "Completed"
-];
-var OPENSHELL_PHASE_STATUS = Object.freeze({
-  Ready: "ready",
-  Provisioning: "starting",
-  Starting: "starting",
-  Stopping: "stopped",
-  Stopped: "stopped",
-  Deleting: "stopped",
-  Completed: "stopped",
-  Error: "failed",
-  Unknown: "failed",
-  Unspecified: "failed"
-});
-function createArgv(opts) {
-  return [
-    "sandbox",
-    "create",
-    "--name",
-    opts.name,
-    "--from",
-    opts.image,
-    "--policy",
-    join5(opts.entryRoot, OPENSHELL_POLICY_FILE),
-    "--env",
-    `${EXECUTION_TARGET_ENV}=local`,
-    "--env",
-    `SANDBOX_NAME=${opts.name}`,
-    "--detach",
-    "--",
-    OPENSHELL_MAIN
-  ];
-}
-function attachArgv(name, request = { argv: ["zsh"] }) {
-  return [
-    "sandbox",
-    "exec",
-    "-n",
-    name,
-    "--tty",
-    "--workdir",
-    request.cwd ?? OPENSHELL_WORKDIR,
-    ...envFlags(request.env),
-    "--",
-    ...asLoginShell(request.argv)
-  ];
-}
-function execArgv(name, request) {
-  return [
-    "sandbox",
-    "exec",
-    "-n",
-    name,
-    ...request.cwd !== void 0 ? ["--workdir", request.cwd] : [],
-    ...envFlags(request.env),
-    ...request.timeoutMs !== void 0 ? ["--timeout", String(Math.ceil(request.timeoutMs / 1e3))] : [],
-    "--",
-    ...request.argv
-  ];
-}
-function getArgv(name) {
-  return ["sandbox", "get", name, "-o", "json"];
-}
-function deleteArgv(name) {
-  return ["sandbox", "delete", name];
-}
-function parseOpenShellPhase(json) {
-  let parsed;
-  try {
-    parsed = JSON.parse(json);
-  } catch {
-    return "Unknown";
-  }
-  const phase = typeof parsed === "object" && parsed !== null ? parsed.phase : void 0;
-  return OPENSHELL_PHASES.find((known) => known === phase) ?? "Unknown";
-}
-function openshellSandboxMissing(output) {
-  return NOT_FOUND.test(output);
-}
-var OPENSHELL_VERB_HINTS = Object.freeze({
-  stop: (name) => `openshell sandbox stop ${name}`,
-  restart: (name) => `openshell sandbox stop ${name} && openshell sandbox start ${name}`,
-  logs: (name) => `openshell logs ${name}`,
-  ps: (name) => `openshell sandbox get ${name}`,
-  config: (name) => `openshell policy get ${name}`
-});
-function openshellInstallHint() {
-  return [
-    "install the OpenShell CLI on the host, then run the command again:",
-    `  curl -LsSf ${OPENSHELL_INSTALL_URL} | OPENSHELL_VERSION=${OPENSHELL_PINNED_VERSION} sh`,
-    "review-first alternative \u2014 download the script, inspect it, then run it:",
-    `  curl -LsSf -o openshell-install.sh ${OPENSHELL_INSTALL_URL}`,
-    "  less openshell-install.sh",
-    `  OPENSHELL_VERSION=${OPENSHELL_PINNED_VERSION} sh openshell-install.sh`
-  ].join("\n");
-}
-function openshellGatewayHint() {
-  return [
-    "the OpenShell gateway is not connected; start the local gateway and register it:",
-    "  systemctl --user restart openshell-gateway",
-    `  openshell gateway add ${OPENSHELL_LOCAL_GATEWAY} --local --name openshell`,
-    "then confirm with: openshell status"
-  ].join("\n");
-}
-function openshellCleanupHint(name) {
-  return `the OpenShell gateway can keep a failed sandbox record in the Error phase; if ${name} is not another sandbox, remove it with: openshell sandbox delete ${name}`;
-}
-function openshellPreflight(run) {
-  const version = run(OPENSHELL_BIN, ["--version"], { stdio: "capture" });
-  if (version.error?.code === "ENOENT") {
-    return { ok: false, reason: "missing-binary", hint: openshellInstallHint() };
-  }
-  assertSpawned(version, `${OPENSHELL_BIN} --version`);
-  const status = run(OPENSHELL_BIN, ["status", "-o", "json"], { stdio: "capture" });
-  assertSpawned(status, `${OPENSHELL_BIN} status`);
-  if (status.status !== 0 || !gatewayConnected(status.stdout ?? "")) {
-    return { ok: false, reason: "gateway-unreachable", hint: openshellGatewayHint() };
-  }
-  return { ok: true };
-}
-var OpenShellExecutionTarget = class {
-  kind = "openshell";
-  contractVersion = 1;
-  workspace;
-  name;
-  entryRoot;
-  image;
-  run;
-  env;
-  constructor(opts) {
-    this.name = opts.name;
-    this.entryRoot = opts.entryRoot;
-    this.image = opts.image;
-    this.run = opts.run ?? spawnRunner;
-    this.env = opts.env;
-    this.workspace = { hostRoot: opts.entryRoot, targetRoot: OPENSHELL_WORKDIR };
-  }
-  async provision() {
-    const argv = createArgv({ name: this.name, image: this.image, entryRoot: this.entryRoot });
-    this.runInherited(argv, "sandbox create");
-  }
-  async destroy() {
-    this.runInherited(deleteArgv(this.name), "sandbox delete");
-  }
-  async status() {
-    const r = this.run(OPENSHELL_BIN, getArgv(this.name), { stdio: "capture", ...this.childEnv() });
-    assertSpawned(r, this.what("sandbox get"));
-    if (r.status !== 0) {
-      if (openshellSandboxMissing(`${r.stdout ?? ""}
-${r.stderr ?? ""}`)) return "absent";
-      throw new ExecutionExitError(this.what("sandbox get"), r.status ?? 1);
-    }
-    return OPENSHELL_PHASE_STATUS[parseOpenShellPhase(r.stdout ?? "")];
-  }
-  async capabilities() {
-    return /* @__PURE__ */ new Set(["exec", "pty"]);
-  }
-  async exec(request) {
-    requireSandboxUser(request);
-    const inherit = request.stdio === "inherit";
-    const r = this.run(OPENSHELL_BIN, execArgv(this.name, request), {
-      stdio: inherit ? "inherit" : "capture",
-      ...this.childEnv()
-    });
-    assertSpawned(r, this.what("sandbox exec"));
-    return {
-      exitCode: r.status ?? 1,
-      stdout: r.stdout ?? "",
-      stderr: r.stderr ?? ""
-    };
-  }
-  attach(request) {
-    requireSandboxUser(request);
-    const r = this.run(OPENSHELL_BIN, attachArgv(this.name, request), { stdio: "inherit", ...this.childEnv() });
-    assertSpawned(r, this.what("sandbox exec"));
-    return r.status ?? 1;
-  }
-  describe() {
-    return `openshell sandbox ${this.name} (entry ${this.entryRoot})`;
-  }
-  runInherited(argv, verb) {
-    const r = this.run(OPENSHELL_BIN, argv, { stdio: "inherit", ...this.childEnv() });
-    assertSpawned(r, this.what(verb));
-    const code = r.status ?? 1;
-    if (code !== 0) throw new ExecutionExitError(this.what(verb), code);
-  }
-  childEnv() {
-    return this.env ? { env: this.env } : {};
-  }
-  what(verb) {
-    return `${OPENSHELL_BIN} ${verb} ${this.name}`;
-  }
-};
-function asLoginShell(argv) {
-  return argv.length === 1 && LOGIN_SHELLS.has(argv[0]) ? [argv[0], "-l"] : [...argv];
-}
-function envFlags(env) {
-  return Object.entries(env ?? {}).flatMap(([k, v]) => ["--env", `${k}=${v}`]);
-}
-function gatewayConnected(json) {
-  try {
-    const parsed = JSON.parse(json);
-    return typeof parsed === "object" && parsed !== null && parsed.status === "connected";
-  } catch {
-    return false;
-  }
-}
-function requireSandboxUser(request) {
-  if (request.user !== void 0 && request.user !== OPENSHELL_USER) {
-    throw new Error(
-      `the openshell runtime runs every command as "${OPENSHELL_USER}" and cannot run as "${request.user}"`
-    );
-  }
-}
-
 // src/lib/execution/status.ts
 var RUNTIME_ABSENT_STATUS = "no container runtime";
 async function resolveTargetStatus(target) {
@@ -2530,23 +2247,19 @@ function resolveExecutionTarget(opts) {
       ...opts.env ? { env: opts.env } : {}
     });
   }
-  if (entryRuntime(opts.projectRoot) === "openshell") {
-    const config = readAgroConfig(agroConfigPath(opts.projectRoot));
-    return new OpenShellExecutionTarget({
-      name: opts.container ?? nonEmpty(config.name) ?? basename4(resolve7(opts.projectRoot)),
-      entryRoot: opts.projectRoot,
-      image: openshellImage(config),
-      ...opts.run ? { run: opts.run } : {},
-      ...opts.env ? { env: opts.env } : {}
-    });
-  }
   return new DockerComposeExecutionTarget(opts);
 }
-function openshellImage(config) {
-  return nonEmpty(config.image?.ref) ?? officialImageRef(AGRO_VERSION);
+
+// src/lib/version.ts
+var AGRO_VERSION = true ? "0.18.0" : "0.0.0-dev";
+var OFFICIAL_IMAGE = "ghcr.io/mifunedev/agro";
+var RELEASE_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[a-z][a-z0-9]*\.[0-9]+)?$/;
+function parseReleaseVersion(value) {
+  const bare = value.startsWith("v") ? value.slice(1) : value;
+  return RELEASE_VERSION.test(bare) ? bare : void 0;
 }
-function nonEmpty(value) {
-  return value === void 0 || value === "" ? void 0 : value;
+function officialImageRef(version) {
+  return `${OFFICIAL_IMAGE}:${RELEASE_VERSION.test(version) ? version : "latest"}`;
 }
 
 // src/lib/config-render.ts
@@ -2612,103 +2325,13 @@ function renderComposeEnv(config) {
 `;
 }
 
-// src/lib/runtimes/verbs.ts
-import { basename as basename5, resolve as resolve8 } from "node:path";
-var viaCompose = Object.freeze({ action: "route", via: "compose" });
-var viaTarget = Object.freeze({ action: "route", via: "target" });
-function refuse(hint) {
-  return Object.freeze({ action: "refuse", hint });
-}
-var LIFECYCLE_COMMANDS = Object.freeze({
-  shell: "shell",
-  stop: "stop",
-  restart: "restart",
-  logs: "logs",
-  ps: "ps",
-  destroy: "destroy",
-  config: "compose config",
-  upgrade: "sandbox upgrade"
-});
-var DOCKER_VERBS = Object.freeze({
-  shell: viaTarget,
-  stop: viaCompose,
-  restart: viaCompose,
-  logs: viaCompose,
-  ps: viaCompose,
-  destroy: viaCompose,
-  config: viaCompose,
-  upgrade: viaTarget
-});
-var OPENSHELL_VERBS = Object.freeze({
-  shell: viaTarget,
-  stop: refuse(OPENSHELL_VERB_HINTS.stop),
-  restart: refuse(OPENSHELL_VERB_HINTS.restart),
-  logs: refuse(OPENSHELL_VERB_HINTS.logs),
-  ps: refuse(OPENSHELL_VERB_HINTS.ps),
-  destroy: viaTarget,
-  config: refuse(OPENSHELL_VERB_HINTS.config),
-  upgrade: refuse(
-    (name) => `${activeBin()} destroy ${name}, then ${activeBin()} sandbox install openshell --name ${name} --image=<ref>`
-  )
-});
-var RUNTIME_VERBS = Object.freeze({
-  docker: DOCKER_VERBS,
-  openshell: OPENSHELL_VERBS
-});
-function configuredEntryName(root) {
-  try {
-    const name = readAgroConfig(agroConfigPath(root)).name;
-    return name === "" ? void 0 : name;
-  } catch {
-    return void 0;
-  }
-}
-function entryDeclaredName(root) {
-  return configuredEntryName(root) ?? basename5(resolve8(root));
-}
-var RUNTIME_NAMING = Object.freeze({
-  docker: Object.freeze({
-    entryName: () => void 0,
-    shellFailure: (bin, name) => `container \`${name}\` not running? start it with \`${bin} sandbox install docker\``
-  }),
-  openshell: Object.freeze({
-    entryName: entryDeclaredName,
-    shellFailure: (bin, name) => `sandbox \`${name}\` did not accept the shell; check its status with \`${bin} sandbox list\``
-  })
-});
-function entrySandboxName(root) {
-  return RUNTIME_NAMING[entryRuntime(root)].entryName(root);
-}
-function shellFailureHint(runtime, bin, name) {
-  return RUNTIME_NAMING[runtime].shellFailure(bin, name);
-}
-var RuntimeUnsupportedError = class extends Error {
-  runtime;
-  verb;
-  hint;
-  constructor(runtime, verb, hint) {
-    const command = LIFECYCLE_COMMANDS[verb];
-    super(`${activeBin()} ${command}: the ${runtime} runtime does not support ${command}; run: ${hint}`);
-    this.name = "RuntimeUnsupportedError";
-    this.runtime = runtime;
-    this.verb = verb;
-    this.hint = hint;
-  }
-};
-function routeVerb(root, verb, name) {
-  const runtime = entryRuntime(root);
-  const policy = RUNTIME_VERBS[runtime][verb];
-  if (policy.action === "refuse") throw new RuntimeUnsupportedError(runtime, verb, policy.hint(name));
-  return { runtime, via: policy.via };
-}
-
 // src/commands/lifecycle.ts
 var COMPOSE_ENV_DIR_PREFIX = "oh-compose-env-";
 function composeEnvDir() {
-  return mkdtempSync(join6(tmpdir(), COMPOSE_ENV_DIR_PREFIX));
+  return mkdtempSync(join5(tmpdir(), COMPOSE_ENV_DIR_PREFIX));
 }
 function writeComposeEnv(root, dir) {
-  const file = join6(dir, "compose.env");
+  const file = join5(dir, "compose.env");
   writeFileSync5(file, renderComposeEnv(readAgroConfig(agroConfigPath(root))), {
     mode: 384,
     encoding: "utf8"
@@ -2766,7 +2389,7 @@ async function maybePromptDockerSocket(root, io, bin) {
   if (dockerSocketConfigured(root)) return;
   const interactive = process.stdin.isTTY === true || io.ask !== void 0;
   if (!interactive) return;
-  const envDir = join6(root, ".devcontainer");
+  const envDir = join5(root, ".devcontainer");
   if (!existsSync10(envDir)) return;
   const askFn = io.ask ?? ask;
   const answer = (await askFn(
@@ -2847,27 +2470,25 @@ async function runSandbox(opts, io) {
 function configuredContainerName(root) {
   return fromProcessEnv("SANDBOX_NAME") ?? configuredString(root, "name");
 }
-function sandboxName(root) {
-  return entrySandboxName(root) ?? configuredContainerName(root) ?? DEFAULT_CONTAINER_NAME;
-}
 function runShell(opts, io) {
   const run = opts.run ?? spawnRunner;
   const root = sandboxRoot(opts);
-  const name = sandboxName(root);
-  const { runtime } = routeVerb(root, "shell", name);
+  const name = configuredContainerName(root) ?? DEFAULT_CONTAINER_NAME;
   const target = resolveExecutionTarget({ projectRoot: root, container: name, run });
   let code;
   try {
     code = target.attach({ argv: ["zsh"], user: "sandbox" });
   } catch (err) {
     if (err instanceof ExecutionSpawnError && err.code === "ENOENT") {
-      throw new Error(`${runtime} is required for \`${opts.bin} shell\` but was not found on PATH`);
+      throw new Error(`docker is required for \`${opts.bin} shell\` but was not found on PATH`);
     }
     throw err;
   }
   if (code !== 0) {
-    io.stderr(`${shellFailureHint(runtime, opts.bin, name)}
-`);
+    io.stderr(
+      `container \`${name}\` not running? start it with \`${opts.bin} sandbox install docker\`
+`
+    );
   }
   return code;
 }
@@ -2884,7 +2505,6 @@ function composeVerbs() {
 function runComposeVerb(verb, opts, extra = []) {
   const run = opts.run ?? spawnRunner;
   const root = sandboxRoot(opts);
-  routeVerb(root, verb, sandboxName(root));
   const script = requireLifecycleScript(root, "docker-compose.sh");
   return withComposeEnvFile(root, (extraArgs) => {
     const r = run("bash", [script, ...extraArgs, ...COMPOSE_VERBS[verb], ...extra], {
@@ -2897,7 +2517,6 @@ function runComposeVerb(verb, opts, extra = []) {
 function runComposeConfig(opts, extra = []) {
   const run = opts.run ?? spawnRunner;
   const root = sandboxRoot(opts);
-  routeVerb(root, "config", sandboxName(root));
   const script = requireLifecycleScript(root, "docker-compose.sh");
   return withComposeEnvFile(root, (extraArgs) => {
     const r = run("bash", [script, ...extraArgs, "config", ...extra], { stdio: "inherit" });
@@ -2908,7 +2527,7 @@ function runComposeConfig(opts, extra = []) {
 function namedVolumes(root) {
   let text;
   try {
-    text = readFileSync7(join6(root, ".devcontainer", "docker-compose.yml"), "utf8");
+    text = readFileSync7(join5(root, ".devcontainer", "docker-compose.yml"), "utf8");
   } catch {
     return [];
   }
@@ -2924,23 +2543,11 @@ function namedVolumes(root) {
   return names;
 }
 function destroyConfirmationPhrase(root) {
-  return sandboxName(root);
-}
-async function destroyThroughTarget(root, name, run) {
-  const target = resolveExecutionTarget({ projectRoot: root, container: name, run });
-  if (target.destroy === void 0) throw new Error(`${target.describe()} cannot destroy its sandbox`);
-  try {
-    await target.destroy();
-    return 0;
-  } catch (err) {
-    if (err instanceof ExecutionExitError) return err.exitCode;
-    throw err;
-  }
+  return configuredContainerName(root) ?? DEFAULT_CONTAINER_NAME;
 }
 async function runDestroy(opts, io) {
   const root = sandboxRoot(opts);
   const name = destroyConfirmationPhrase(root);
-  const { via } = routeVerb(root, "destroy", name);
   if (opts.yes !== true) {
     const interactive = process.stdin.isTTY === true || io.ask !== void 0;
     if (!interactive) {
@@ -2955,14 +2562,7 @@ async function runDestroy(opts, io) {
 ${bold(`${opts.bin} destroy \u2014 ${name}`)}
 
 `);
-    if (via === "target") {
-      io.stdout(
-        `This deletes the sandbox \`${name}\` and everything inside it \u2014 every agent CLI
-login, the gh CLI token, and the SSH keys. Sign-in starts over.
-
-`
-      );
-    } else if (homePath !== void 0 && homePath !== "") {
+    if (homePath !== void 0 && homePath !== "") {
       io.stdout("`docker compose down -v` removes the containers.\n");
       io.stdout(
         `This sandbox keeps its home on a host bind at ${homePath}, which \`down -v\`
@@ -2993,7 +2593,7 @@ stay there. Delete that directory yourself if you also want them gone.
       return 1;
     }
   }
-  const code = via === "target" ? await destroyThroughTarget(root, name, opts.run ?? spawnRunner) : runComposeVerb("destroy", { ...opts, name: basename6(root) });
+  const code = runComposeVerb("destroy", { ...opts, name: basename4(root) });
   if (code === 0 && root.startsWith(registryRoot() + sep3)) {
     rmSync(root, { recursive: true, force: true });
     io.stdout(`removed the sandbox entry ${root}
@@ -3281,14 +2881,15 @@ function sameRemote(url, owner, name) {
 }
 
 // src/commands/secret.ts
+import { spawnSync as spawnSync3 } from "node:child_process";
 import { existsSync as existsSync12 } from "node:fs";
-import { join as join8 } from "node:path";
+import { join as join7 } from "node:path";
 
 // src/lib/gitignore.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname5, join as join7 } from "node:path";
+import { dirname as dirname5, join as join6 } from "node:path";
 function appendGitignoreLines(root, lines) {
-  const target = join7(root, ".gitignore");
+  const target = join6(root, ".gitignore");
   const existing = existsSync11(target) ? readFileSync8(target, "utf8") : "";
   const present = new Set(existing.split("\n").map((line) => line.trimEnd()));
   const added = [];
@@ -3312,8 +2913,16 @@ function appendGitignoreLines(root, lines) {
 function secretsRoot(opts) {
   return opts.sandbox === void 0 ? resolveProjectRoot(opts.cwd) : resolveSandboxRoot({ name: opts.sandbox });
 }
+function isGitIgnored(root, path4) {
+  const result = spawnSync3("git", ["check-ignore", "-q", "--no-index", path4], {
+    cwd: root,
+    stdio: "ignore"
+  });
+  return result.status === 0;
+}
 function ignoreSecretsFile(root) {
-  if (!existsSync12(join8(root, ".git"))) return;
+  if (!existsSync12(join7(root, ".git"))) return;
+  if (isGitIgnored(root, ".env")) return;
   appendGitignoreLines(root, [".env"]);
 }
 function secretKeyList() {
@@ -3371,10 +2980,10 @@ async function runSecretList(opts, io) {
 // src/commands/langfuse.ts
 import { copyFileSync as copyFileSync2, existsSync as existsSync14, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync2, readFileSync as readFileSync10, rmSync as rmSync2, unlinkSync as unlinkSync4 } from "node:fs";
 import { homedir as homedir2, tmpdir as tmpdir2 } from "node:os";
-import { dirname as dirname7, join as join11, relative } from "node:path";
+import { dirname as dirname7, join as join10, relative } from "node:path";
 
 // src/lib/tracing/harness-writers.ts
-import { join as join9 } from "node:path";
+import { join as join8 } from "node:path";
 
 // src/lib/tracing/writer.ts
 import { chmodSync, existsSync as existsSync13, mkdirSync as mkdirSync5, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "node:fs";
@@ -3419,13 +3028,13 @@ function isPlainObject(value) {
 // src/lib/tracing/harness-writers.ts
 var CODEX_TRACING_TAGS = ["codex"];
 function claudeCodeSettingsPath(home) {
-  return join9(home, ".claude", "settings.json");
+  return join8(home, ".claude", "settings.json");
 }
 function piTracingConfigPath(home) {
-  return join9(home, ".pi", "agent", "langfuse.json");
+  return join8(home, ".pi", "agent", "langfuse.json");
 }
 function codexTracingConfigPath(home) {
-  return join9(home, ".codex", "langfuse.json");
+  return join8(home, ".codex", "langfuse.json");
 }
 var claudeCodeTracingWriter = (home, settings) => {
   const path4 = claudeCodeSettingsPath(home);
@@ -3597,6 +3206,21 @@ var HARNESS_CATALOG = [
     kind: "installable",
     bypassPermissionsFlag: "--dangerously-skip-permissions"
   },
+  {
+    id: "fx",
+    title: "fx",
+    binary: "fx",
+    installArgv: [
+      "bash",
+      "-lc",
+      `set -o pipefail; curl -fsSL https://fx.sh/setup.sh | FX_INSTALL_DIR="${HARNESS_PREFIX_TOKEN}/bin" bash -s v0.0.13`
+    ],
+    installUser: "sandbox",
+    verifyArgv: ["fx", "--version"],
+    uninstallArgv: ["rm", "-f", `${HARNESS_PREFIX_TOKEN}/bin/fx`],
+    docsPath: "docs/harnesses/fx.md",
+    kind: "installable"
+  },
   {
     id: "t3code",
     title: "T3 Code",
@@ -3635,7 +3259,7 @@ function harnessBinPath(prefix) {
 }
 
 // src/lib/tracing/providers/langfuse.ts
-import { join as join10 } from "node:path";
+import { join as join9 } from "node:path";
 var LANGFUSE_FRAGMENT_KEYS = [
   "LANGFUSE_PUBLIC_KEY",
   "LANGFUSE_SECRET_KEY",
@@ -3643,7 +3267,7 @@ var LANGFUSE_FRAGMENT_KEYS = [
   "LANGFUSE_TRACING_ENVIRONMENT"
 ];
 function langfuseFragmentPath(home) {
-  return join10(home, ".config", "agro", "langfuse.env");
+  return join9(home, ".config", "agro", "langfuse.env");
 }
 function loadLangfuseCredentials(root) {
   const publicKey = readSecret(root, "LANGFUSE_PUBLIC_KEY");
@@ -3807,7 +3431,7 @@ function displayPath(home, path4) {
   return rel.startsWith("..") ? path4 : `~/${rel}`;
 }
 function withTempHome(fn) {
-  const dir = mkdtempSync2(join11(tmpdir2(), "agro-langfuse-"));
+  const dir = mkdtempSync2(join10(tmpdir2(), "agro-langfuse-"));
   try {
     return fn(dir);
   } finally {
@@ -3816,10 +3440,10 @@ function withTempHome(fn) {
 }
 function probeGeneratedFile(home, render) {
   const rel = withTempHome((scratch) => relative(scratch, render(scratch).path));
-  const path4 = join11(home, rel);
+  const path4 = join10(home, rel);
   if (!existsSync14(path4)) return { path: path4, state: "missing" };
   const outcome = withTempHome((scratch) => {
-    const copy = join11(scratch, rel);
+    const copy = join10(scratch, rel);
     mkdirSync6(dirname7(copy), { recursive: true });
     copyFileSync2(path4, copy);
     return render(scratch).outcome;
@@ -3882,7 +3506,7 @@ async function runLangfuseApply(opts, io) {
   return renderAll(ctx, resolved, io, opts.bin, "apply");
 }
 function zshenvWarning(home) {
-  const zshenv = join11(home, ".zshenv");
+  const zshenv = join10(home, ".zshenv");
   if (!existsSync14(zshenv)) return void 0;
   if (readFileSync10(zshenv, "utf8").includes("langfuse.env")) return void 0;
   return `~/.zshenv exists but does not source ${LANGFUSE_FRAGMENT_LABEL} \u2014 non-interactive shells will carry no Langfuse credentials; add the source block from .agro/install/.zshenv
@@ -4163,18 +3787,45 @@ async function runLangfuseSetup(opts, io) {
 // src/commands/sandbox.ts
 import { existsSync as existsSync16, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync3, rmSync as rmSync3, statSync as statSync4 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { join as join13, resolve as resolve9 } from "node:path";
+import { join as join12, resolve as resolve7 } from "node:path";
+
+// src/lib/runtimes/catalog.ts
+var RUNTIME_CATALOG = Object.freeze([
+  Object.freeze({
+    id: "docker",
+    title: "Docker container",
+    tier: "container",
+    state: "active",
+    provisionable: true,
+    docsPath: "docs/runtimes/overview.md"
+  }),
+  Object.freeze({
+    id: "microsandbox",
+    title: "MicroSandbox",
+    tier: "microvm",
+    state: "planned",
+    provisionable: false,
+    notProvisionableReason: (bin) => `microsandbox is not a provisionable runtime yet; see https://github.com/mifunedev/agro/issues/592. Inside a sandbox run \`${bin} tool install microsandbox\`.`,
+    docsPath: "docs/runtimes/microsandbox.md"
+  })
+]);
+function findRuntime(id) {
+  return RUNTIME_CATALOG.find((r) => r.id === id);
+}
+function runtimeIds() {
+  return RUNTIME_CATALOG.map((r) => r.id);
+}
 
 // src/lib/star-prompt.ts
 import { existsSync as existsSync15, mkdirSync as mkdirSync7, writeFileSync as writeFileSync8 } from "node:fs";
-import { join as join12 } from "node:path";
+import { join as join11 } from "node:path";
 var STAR_PROMPT_LINE = "\u2B50 If AGRO helps, star https://github.com/mifunedev/agro";
 var MARKER = "star-prompt-shown";
 function maybePrintStarPrompt(io, env = process.env, isTTY = process.stdout.isTTY === true, stateHome = resolveUserStateHome(env)) {
   if (env.AGRO_NO_STAR_PROMPT === "1") return;
   if (env.CI !== void 0 && env.CI !== "") return;
   if (!isTTY) return;
-  const marker = join12(stateHome, MARKER);
+  const marker = join11(stateHome, MARKER);
   if (existsSync15(marker)) return;
   io.stdout(`${STAR_PROMPT_LINE}
 `);
@@ -4189,7 +3840,7 @@ function maybePrintStarPrompt(io, env = process.env, isTTY = process.stdout.isTT
 // src/commands/sandbox-list.ts
 async function entryStatus(root, name, run) {
   try {
-    const target = resolveExecutionTarget({ projectRoot: root, container: entrySandboxName(root) ?? name, run });
+    const target = resolveExecutionTarget({ projectRoot: root, container: name, run });
     return await target.status();
   } catch {
     return "unknown";
@@ -4251,10 +3902,10 @@ function gitIdentity(run, key) {
   return (result.stdout ?? "").trim();
 }
 function isBuildCapable(repo) {
-  return repo !== void 0 && existsSync16(join13(repo, ".devcontainer", "Dockerfile"));
+  return repo !== void 0 && existsSync16(join12(repo, ".devcontainer", "Dockerfile"));
 }
 function prepareHomeMount(value) {
-  const path4 = resolve9(value);
+  const path4 = resolve7(value);
   if (existsSync16(path4)) {
     if (!statSync4(path4).isDirectory()) {
       throw new Error(`--home-mount path exists and is not a directory: ${path4}`);
@@ -4298,18 +3949,18 @@ function mergeSettings(...sources) {
   for (const source of present) overlaySettings(merged, source);
   return merged;
 }
-function nonEmpty2(value) {
+function nonEmpty(value) {
   return value === void 0 || value === "" ? void 0 : value;
 }
-function seedConfig(name, checkout, seed, run, runtime = "docker") {
+function seedConfig(name, checkout, seed, run) {
   const config = overlaySettings(defaultAgroConfig(name), seed);
   config.name = name;
-  config.runtime = runtime;
+  config.runtime = "docker";
   if (checkout !== void 0) config.checkout = checkout;
-  config.timezone = nonEmpty2(seed?.timezone) ?? hostTimezone();
+  config.timezone = nonEmpty(seed?.timezone) ?? hostTimezone();
   config.git = {
-    userName: nonEmpty2(seed?.git?.userName) ?? gitIdentity(run, "user.name"),
-    userEmail: nonEmpty2(seed?.git?.userEmail) ?? gitIdentity(run, "user.email")
+    userName: nonEmpty(seed?.git?.userName) ?? gitIdentity(run, "user.name"),
+    userEmail: nonEmpty(seed?.git?.userEmail) ?? gitIdentity(run, "user.email")
   };
   config.image = {
     ...config.image,
@@ -4350,7 +4001,7 @@ async function runWizard(config, io) {
     "Host path for /home/sandbox (blank keeps the Docker-managed volume)",
     config.storage?.homePath ?? ""
   );
-  if (homePath !== "") config.storage = { ...config.storage, homePath: resolve9(homePath) };
+  if (homePath !== "") config.storage = { ...config.storage, homePath: resolve7(homePath) };
 }
 async function runSandboxInstall(opts, io) {
   const run = opts.run ?? spawnRunner;
@@ -4367,8 +4018,7 @@ async function runSandboxInstall(opts, io) {
 `);
     return 1;
   }
-  if (runtime.id === "openshell") return await installOpenShell(opts, io, run);
-  const checkout = opts.checkout === void 0 ? void 0 : resolve9(opts.checkout);
+  const checkout = opts.checkout === void 0 ? void 0 : resolve7(opts.checkout);
   if (checkout !== void 0 && !existsSync16(checkout)) {
     io.stderr(`${opts.bin} sandbox install: --checkout directory does not exist: ${checkout}
 `);
@@ -4386,9 +4036,9 @@ async function runSandboxInstall(opts, io) {
   const config = seedConfig(name, checkout, mergeSettings(readEntryConfig(name), repoSeed), run);
   const buildRequested = config.image?.mode === "build" && opts.noBuild !== true && opts.image !== true && opts.imageRef === void 0;
   if (buildRequested && !isBuildCapable(configCheckout(config))) {
-    const target = configCheckout(config) ?? resolve9(opts.checkout ?? ".");
+    const target = configCheckout(config) ?? resolve7(opts.checkout ?? ".");
     io.stderr(
-      `${opts.bin} sandbox install: image.mode is "build" but ${join13(target, ".devcontainer", "Dockerfile")} does not exist \u2014 point --checkout <dir> at a harness checkout that has .devcontainer/Dockerfile, or set image.mode to "image" to run the prebuilt image
+      `${opts.bin} sandbox install: image.mode is "build" but ${join12(target, ".devcontainer", "Dockerfile")} does not exist \u2014 point --checkout <dir> at a harness checkout that has .devcontainer/Dockerfile, or set image.mode to "image" to run the prebuilt image
 `
     );
     return 1;
@@ -4432,7 +4082,7 @@ async function runSandboxInstall(opts, io) {
     ...useNoBuild ? { noBuild: true } : {}
   };
   if (opts.printArgv === true) {
-    const preview = mkdtempSync3(join13(tmpdir3(), "oh-sandbox-preview-"));
+    const preview = mkdtempSync3(join12(tmpdir3(), "oh-sandbox-preview-"));
     try {
       writeAgroConfig(preview, config);
       materialize(preview, { ...configCheckout(config) !== void 0 ? { checkout: configCheckout(config) } : {} });
@@ -4453,77 +4103,16 @@ async function runSandboxInstall(opts, io) {
   }
   return code;
 }
-async function installOpenShell(opts, io, run) {
-  const fail2 = (message) => {
-    io.stderr(`${opts.bin} sandbox install: ${message}
-`);
-    return 1;
-  };
-  const unsupported = (what) => fail2(`${what} is not supported on the openshell runtime`);
-  if (opts.checkout !== void 0) return unsupported("--checkout");
-  if (opts.homeMount !== void 0) return unsupported("--home-mount");
-  const name = opts.name ?? nextDefaultName(run);
-  try {
-    assertSandboxName(name);
-  } catch (error) {
-    return fail2(error instanceof Error ? error.message : String(error));
-  }
-  const config = seedConfig(name, void 0, readEntryConfig(name), run, "openshell");
-  if (configCheckout(config) !== void 0) return unsupported("checkout");
-  if (nonEmpty2(config.storage?.homePath) !== void 0) return unsupported("storage.homePath");
-  const imageChosen = opts.image === true || opts.imageRef !== void 0;
-  if (config.image?.mode === "build" && !imageChosen) {
-    return unsupported('image.mode "build"');
-  }
-  config.image = {
-    ...config.image,
-    mode: "image",
-    ...opts.imageRef !== void 0 ? { ref: opts.imageRef } : {}
-  };
-  const root = entryRoot(name);
-  const image = openshellImage(config);
-  if (opts.printArgv === true) {
-    io.stdout(`${[OPENSHELL_BIN, ...createArgv({ name, image, entryRoot: root })].join(" ")}
-`);
-    return 0;
-  }
-  if (runningInsideSandbox()) return fail2(new HostOnlyError(`\`${opts.bin} sandbox\``).message);
-  try {
-    const preflight = openshellPreflight(run);
-    if (!preflight.ok) return fail2(preflight.hint);
-  } catch (error) {
-    return fail2(error instanceof Error ? error.message : String(error));
-  }
-  const created = !existsSync16(root);
-  mkdirSync8(root, { recursive: true });
-  writeAgroConfig(root, config);
-  materialize(root);
-  try {
-    await new OpenShellExecutionTarget({ name, entryRoot: root, image, run }).provision();
-  } catch (error) {
-    if (created) rmSync3(root, { recursive: true, force: true });
-    io.stderr(`${opts.bin} sandbox install: ${error instanceof Error ? error.message : String(error)}
-`);
-    if (!(error instanceof ExecutionExitError)) return 1;
-    io.stderr(`${opts.bin} sandbox install: ${openshellCleanupHint(name)}
-`);
-    return error.exitCode;
-  }
-  io.stdout(`next: ${opts.bin} shell ${name}
-`);
-  maybePrintStarPrompt(io);
-  return 0;
-}
 
 // src/services/sandbox-upgrade.ts
 import { closeSync as closeSync2, existsSync as existsSync17, openSync as openSync2, readFileSync as readFileSync11, unlinkSync as unlinkSync5, writeSync } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join13 } from "node:path";
 function errorMessage(error) {
   return error instanceof Error ? error.message : String(error);
 }
 function conflictingDotenvImage(root, imageRef) {
-  const rootEnv = join14(root, ".env");
-  const fallbackEnv = join14(root, ".devcontainer", ".env");
+  const rootEnv = join13(root, ".env");
+  const fallbackEnv = join13(root, ".devcontainer", ".env");
   const file = existsSync17(rootEnv) ? rootEnv : fallbackEnv;
   if (!existsSync17(file)) return void 0;
   for (const line of readFileSync11(file, "utf8").split(/\r?\n/)) {
@@ -4561,8 +4150,7 @@ async function runSandboxUpgrade(opts, io) {
 `);
     return 1;
   }
-  routeVerb(root, "upgrade", entrySandboxName(root) ?? opts.name);
-  const lock = join14(root, ".sandbox-upgrade.lock");
+  const lock = join13(root, ".sandbox-upgrade.lock");
   let fd;
   try {
     fd = openSync2(lock, "wx", 384);
@@ -4677,10 +4265,6 @@ identity, SSH (with its host port), the host Docker socket, and the host path
 for /home/sandbox. With --checkout it seeds those answers from that
 checkout's ${stateNames(bin).configFile}.
 
-\`install openshell\` never prompts. The command needs the host \`openshell\` CLI
-and a connected gateway, and runs the prebuilt image. The command refuses
---checkout, --home-mount, and image.mode "build".
-
 Flags:
   --name <name>    Registry entry name (default: the lowest free ${DEFAULT_NAME_PREFIX}<n>)
   --checkout <dir> Bind this checkout into the sandbox and seed the defaults
@@ -4703,7 +4287,7 @@ Flags:
                    ${stateNames(bin).configFile} image.ref > ${officialImageRef(AGRO_VERSION)}
   --image=<ref>    Run a custom image (implies --image); conflicts with --version
   --no-build       Suppress the local build and reuse an existing image
-  --print-argv     Print the docker compose or openshell argv that would run, then exit
+  --print-argv     Print the docker compose argv that would run, then exit
                    without writing an entry
   --json           Machine-readable output (list)
 
@@ -4896,7 +4480,7 @@ async function runSandboxCommand(rest, bin) {
 // src/commands/harness.ts
 import { existsSync as existsSync20 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { delimiter as delimiter2, join as join17 } from "node:path";
+import { delimiter as delimiter2, join as join16 } from "node:path";
 
 // src/lib/docs.ts
 var SOURCE_DOCS_BASE = "https://github.com/mifunedev/agro/blob/main/";
@@ -4910,7 +4494,7 @@ function sourceDocsUrl(docsPath) {
 
 // src/lib/host-config.ts
 import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync12, renameSync as renameSync4, unlinkSync as unlinkSync6, writeFileSync as writeFileSync9 } from "node:fs";
-import { basename as basename7, dirname as dirname8, isAbsolute, join as join15, resolve as resolve10 } from "node:path";
+import { basename as basename5, dirname as dirname8, isAbsolute, join as join14, resolve as resolve8 } from "node:path";
 var HOST_CONFIG_MODE = 420;
 var HOST_CONFIG_FILE = "config.json";
 var WORKSPACES_SUBDIR = "workspaces";
@@ -4922,7 +4506,7 @@ function hostStateHome(env, home) {
   return resolveUserStateHome(env, home);
 }
 function hostConfigPath(env, home) {
-  return join15(hostStateHome(env, home), HOST_CONFIG_FILE);
+  return join14(hostStateHome(env, home), HOST_CONFIG_FILE);
 }
 function assertWorkspaceName(name) {
   if (!SANDBOX_NAME_PATTERN.test(name)) {
@@ -4932,14 +4516,14 @@ function assertWorkspaceName(name) {
   }
 }
 function workspacesRoot(env, home) {
-  return join15(hostStateHome(env, home), WORKSPACES_SUBDIR);
+  return join14(hostStateHome(env, home), WORKSPACES_SUBDIR);
 }
 function workspaceRoot(name, env, home) {
   assertWorkspaceName(name);
-  return join15(workspacesRoot(env, home), name);
+  return join14(workspacesRoot(env, home), name);
 }
 function defaultHarnessRoot(env, home) {
-  return join15(workspacesRoot(env, home), DEFAULT_WORKSPACE_NAME);
+  return join14(workspacesRoot(env, home), DEFAULT_WORKSPACE_NAME);
 }
 function validateHostConfig(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
@@ -5016,7 +4600,7 @@ function readHostConfig(env, home) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    throw new Error(`${basename7(path4)} is not valid JSON: ${path4}`);
+    throw new Error(`${basename5(path4)} is not valid JSON: ${path4}`);
   }
   return validateHostConfig(parsed);
 }
@@ -5039,15 +4623,15 @@ function writeHostConfig(config, env, home) {
   }
 }
 function resolveHarnessRoot(explicit, env, home) {
-  if (typeof explicit === "string" && explicit !== "") return resolve10(explicit);
+  if (typeof explicit === "string" && explicit !== "") return resolve8(explicit);
   const configured = readHostConfig(env, home).harnessRoot;
-  if (typeof configured === "string" && configured !== "") return resolve10(configured);
+  if (typeof configured === "string" && configured !== "") return resolve8(configured);
   return defaultHarnessRoot(env, home);
 }
 function recordHarnessRoot(root, env, home) {
   const config = readHostConfig(env, home);
   const recorded = config.harnessRoot;
-  if (typeof recorded === "string" && recorded !== "" && resolve10(recorded) === root) return;
+  if (typeof recorded === "string" && recorded !== "" && resolve8(recorded) === root) return;
   writeHostConfig({ ...config, harnessRoot: root }, env, home);
 }
 function fieldError2(path4, requirement) {
@@ -5056,7 +4640,7 @@ function fieldError2(path4, requirement) {
 
 // src/lib/host-workspace.ts
 import { existsSync as existsSync19, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, readdirSync as readdirSync3, renameSync as renameSync5, rmSync as rmSync4, statSync as statSync5 } from "node:fs";
-import { dirname as dirname9, join as join16, resolve as resolve11 } from "node:path";
+import { dirname as dirname9, join as join15, resolve as resolve9 } from "node:path";
 var AGRO_REPO_URL = "https://github.com/mifunedev/agro.git";
 var IGNORABLE_ENTRIES = [
   REGISTRY_SUBDIR,
@@ -5068,15 +4652,15 @@ function isDirectory3(path4) {
   return statSync5(path4, { throwIfNoEntry: false })?.isDirectory() === true;
 }
 function stateHomes(home) {
-  return STATE_HOME_DIRS.map((name) => join16(home, name));
+  return STATE_HOME_DIRS.map((name) => join15(home, name));
 }
 function stateHomeRootRefusal(bin, root, home, verb = "harness") {
-  const target = resolve11(root);
+  const target = resolve9(root);
   const enclosing = stateHomes(home).find((state) => target === state);
   if (enclosing === void 0) return void 0;
   return `${bin} ${verb}: the ${verb} root ${target} is the state home ${enclosing} itself.
 A workspace there collides with AGRO state and blocks every command run from ${home}.
-Move it out \u2014 for example \`mv ${enclosing} ${join16(home, "agro")}\` \u2014 then re-run this command.
+Move it out \u2014 for example \`mv ${enclosing} ${join15(home, "agro")}\` \u2014 then re-run this command.
 `;
 }
 function isIgnorableEntry(name) {
@@ -5093,24 +4677,24 @@ function cloneInto(target, run, root, ref) {
   assertCloned(run("git", ["clone", ...branch, AGRO_REPO_URL, target], { stdio: "inherit" }), root);
 }
 function cloneThroughStaging(root, run, ref) {
-  const staging = mkdtempSync4(join16(dirname9(root), "agro-clone-"));
+  const staging = mkdtempSync4(join15(dirname9(root), "agro-clone-"));
   try {
-    const checkout = join16(staging, "agro");
+    const checkout = join15(staging, "agro");
     cloneInto(checkout, run, root, ref);
     for (const name of readdirSync3(checkout)) {
-      const destination = join16(root, name);
+      const destination = join15(root, name);
       if (existsSync19(destination)) {
         throw new Error(`could not move ${name} into ${root} \u2014 the path already exists`);
       }
-      renameSync5(join16(checkout, name), destination);
+      renameSync5(join15(checkout, name), destination);
     }
   } finally {
     rmSync4(staging, { recursive: true, force: true });
   }
 }
 function ensureHostWorkspace(path4, run = spawnRunner, ref) {
-  const root = resolve11(path4);
-  if (existsSync19(join16(root, ".git"))) return { root, action: "reused" };
+  const root = resolve9(path4);
+  if (existsSync19(join15(root, ".git"))) return { root, action: "reused" };
   const stats = statSync5(root, { throwIfNoEntry: false });
   if (stats === void 0) {
     mkdirSync10(dirname9(root), { recursive: true });
@@ -5132,11 +4716,11 @@ function ensureHostWorkspace(path4, run = spawnRunner, ref) {
 function listHostWorkspaces(env, home) {
   const root = workspacesRoot(env, home);
   if (!isDirectory3(root)) return [];
-  return readdirSync3(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => SANDBOX_NAME_PATTERN.test(name)).filter((name) => existsSync19(join16(root, name, ".git"))).sort();
+  return readdirSync3(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => SANDBOX_NAME_PATTERN.test(name)).filter((name) => existsSync19(join15(root, name, ".git"))).sort();
 }
 function resolveExistingWorkspace(bin, verb, path4, env, home) {
-  const root = resolve11(path4);
-  if (existsSync19(join16(root, ".git"))) return { ok: true, root };
+  const root = resolve9(path4);
+  if (existsSync19(join15(root, ".git"))) return { ok: true, root };
   const existing = listHostWorkspaces(env, home);
   const inventory = existing.length === 0 ? "No host workspace exists yet.\n" : `Workspaces that exist: ${existing.join(", ")}
 `;
@@ -5166,7 +4750,7 @@ function targetFor(root, run, env) {
   });
 }
 function hostPrefix(home) {
-  return join17(home, ".local");
+  return join16(home, ".local");
 }
 function pathEntries(env) {
   return (env.PATH ?? "").split(delimiter2).filter((part) => part !== "");
@@ -5213,7 +4797,7 @@ async function sandboxMarkerExists(target, entry) {
   return r.exitCode === 0;
 }
 function hostBinaryUnderPrefix(entry, prefix) {
-  return existsSync20(join17(harnessBinPath(prefix), entry.binary));
+  return existsSync20(join16(harnessBinPath(prefix), entry.binary));
 }
 function stateOf(entry, installed, location) {
   return {
@@ -5234,7 +4818,7 @@ function probeableHost(env, home) {
     return void 0;
   }
   const prefix = hostPrefix(home);
-  if (!existsSync20(join17(root, ".git")) && !existsSync20(prefix)) return void 0;
+  if (!existsSync20(join16(root, ".git")) && !existsSync20(prefix)) return void 0;
   return { root, prefix };
 }
 async function collectStates(root, run, home, env, only) {
@@ -5330,10 +4914,20 @@ async function runHarnessStatus(name, opts, io) {
 function hermesTargetRoot(target) {
   return target.kind === "docker-compose" ? "/home/sandbox/harness" : target.workspace.targetRoot;
 }
+function shellPath(path4) {
+  return `'${path4.replaceAll("'", "'\\''")}'`;
+}
+function hermesLaunch(io, root) {
+  io.stdout(`Run Hermes in the AGRO workspace: HERMES_HOME=${shellPath(`${root}/.hermes`)} hermes
+`);
+}
+function hermesEnv(root) {
+  return { ...agroEnvPair("PROJECT_ROOT", root), HERMES_HOME: `${root}/.hermes` };
+}
 async function reconcileHermes(target, io, bin, user, root = hermesTargetRoot(target)) {
   const result = await target.exec({
     argv: remoteControlDirScript(root, "scripts/link-providers.sh", ["--init", "--hermes-only"]),
-    env: agroEnvPair("PROJECT_ROOT", root),
+    env: hermesEnv(root),
     ...user ? { user } : {},
     stdio: "inherit"
   });
@@ -5343,6 +4937,43 @@ async function reconcileHermes(target, io, bin, user, root = hermesTargetRoot(ta
   }
   return result.exitCode;
 }
+async function validateHermesHome(target, io, bin, user, inheritedHome, root = hermesTargetRoot(target)) {
+  const result = await target.exec({
+    argv: remoteControlDirScript(root, "scripts/hermes-workspace.sh", [
+      "check",
+      root,
+      `${root}/.hermes`,
+      inheritedHome ?? ""
+    ]),
+    env: hermesEnv(root),
+    ...user ? { user } : {},
+    stdio: "capture"
+  });
+  if (result.exitCode !== 0) {
+    io.stderr(result.stderr || `${bin} harness: could not validate Hermes runtime home; explicitly select HERMES_HOME=${shellPath(`${root}/.hermes`)} before retrying.
+`);
+  }
+  return result.exitCode;
+}
+async function configureHermes(target, io, bin, user, root = hermesTargetRoot(target)) {
+  const result = await target.exec({
+    argv: remoteControlDirScript(root, "scripts/hermes-workspace.sh", [
+      "configure",
+      root,
+      `${root}/.hermes`,
+      root,
+      "hermes"
+    ]),
+    env: hermesEnv(root),
+    ...user ? { user } : {},
+    stdio: "inherit"
+  });
+  if (result.exitCode !== 0) {
+    io.stderr(`${bin} harness: Hermes workspace configuration failed (exit ${result.exitCode}); run HERMES_HOME=${shellPath(`${root}/.hermes`)} hermes config set terminal.cwd ${shellPath(root)}
+`);
+  }
+  return result.exitCode;
+}
 function unreachableReason(status) {
   return runtimeIsAbsent(status) ? "No container runtime is on PATH." : `The sandbox is not running (${status}).`;
 }
@@ -5418,6 +5049,11 @@ async function installOnHost(entry, opts, io, run, status) {
 `);
   const prefix = hostPrefix(home);
   const target = hostTargetFor(root, prefix, run, env);
+  const hermes = entry.id === "hermes";
+  if (hermes) {
+    const code = await validateHermesHome(target, io, bin, void 0, env.HERMES_HOME, root);
+    if (code !== 0) return code;
+  }
   const linked = await target.exec({
     argv: remoteControlDirScript(root, "scripts/link-providers.sh", ["--init"]),
     env: agroEnvPair("PROJECT_ROOT", root),
@@ -5431,11 +5067,7 @@ Run: bash ${root}/.agro/scripts/link-providers.sh --init
     );
     return 1;
   }
-  const hermes = entry.id === "hermes";
-  const installEnv = hermes ? {
-    ...agroEnvPair("PROJECT_ROOT", root),
-    HERMES_HOME: `${root}/.hermes`
-  } : void 0;
+  const installEnv = hermes ? hermesEnv(root) : void 0;
   if (hermes) {
     const code = await reconcileHermes(target, io, bin, void 0, root);
     if (code !== 0) return code;
@@ -5449,6 +5081,10 @@ Run: bash ${root}/.agro/scripts/link-providers.sh --init
     return 1;
   }
   if (await probeInstalled(target, entry, prefix, void 0, installEnv) === true && (hasReceipt || !hostBinaryUnderPrefix(entry, prefix))) {
+    if (hermes) {
+      const code = await configureHermes(target, io, bin, void 0, root);
+      if (code !== 0) return code;
+    }
     io.stdout(`${entry.id}: already installed (${entry.binary})
 `);
     try {
@@ -5458,6 +5094,7 @@ Run: bash ${root}/.agro/scripts/link-providers.sh --init
 `);
       return 1;
     }
+    if (hermes) hermesLaunch(io, root);
     return 0;
   }
   io.stdout(`installing ${entry.title} on the host\u2026
@@ -5480,6 +5117,8 @@ Run: bash ${root}/.agro/scripts/link-providers.sh --init
     }
     const code = await reconcileHermes(target, io, bin, void 0, root);
     if (code !== 0) return code;
+    const configured = await configureHermes(target, io, bin, void 0, root);
+    if (configured !== 0) return configured;
   }
   const receipt = {
     prefix,
@@ -5510,7 +5149,8 @@ Run: bash ${root}/.agro/scripts/link-providers.sh --init
     io.stdout(`Add this line to your shell profile: export PATH="${harnessBinPath(prefix)}:$PATH"
 `);
   }
-  io.stdout(`Run ${entry.title} in the AGRO workspace: cd ${root} && ${harnessLaunchCommand(entry)}
+  if (hermes) hermesLaunch(io, root);
+  else io.stdout(`Run ${entry.title} in the AGRO workspace: cd ${root} && ${harnessLaunchCommand(entry)}
 `);
   return 0;
 }
@@ -5642,18 +5282,22 @@ async function runHarnessInstall(name, opts, io) {
     return await installOnHost(entry, opts, io, run, status);
   }
   const hermes = entry.id === "hermes";
-  const installEnv = hermes ? {
-    ...agroEnvPair("PROJECT_ROOT", hermesTargetRoot(target)),
-    HERMES_HOME: `${hermesTargetRoot(target)}/.hermes`
-  } : void 0;
+  const installEnv = hermes ? hermesEnv(hermesTargetRoot(target)) : void 0;
   if (hermes) {
+    const checked = await validateHermesHome(target, io, opts.bin, "sandbox", env.HERMES_HOME);
+    if (checked !== 0) return checked;
     const code = await reconcileHermes(target, io, opts.bin, "sandbox");
     if (code !== 0) return code;
   }
   const already = await probeInstalled(target, entry, SANDBOX_HARNESS_PREFIX, "sandbox", installEnv);
   if (already === true && await sandboxMarkerExists(target, entry)) {
+    if (hermes) {
+      const code = await configureHermes(target, io, opts.bin, "sandbox");
+      if (code !== 0) return code;
+    }
     io.stdout(`${entry.id}: already installed (${entry.binary})
 `);
+    if (hermes) hermesLaunch(io, hermesTargetRoot(target));
     return 0;
   }
   if (already === null) {
@@ -5681,6 +5325,8 @@ async function runHarnessInstall(name, opts, io) {
     }
     const code = await reconcileHermes(target, io, opts.bin, "sandbox");
     if (code !== 0) return code;
+    const configured = await configureHermes(target, io, opts.bin, "sandbox");
+    if (configured !== 0) return configured;
   }
   const marker = sandboxMarkerPath(entry);
   const marked = await target.exec({
@@ -5695,13 +5341,14 @@ async function runHarnessInstall(name, opts, io) {
   }
   io.stdout(`${entry.id}: installed \u2014 see ${sourceDocsUrl(entry.docsPath)} for authentication
 `);
+  if (hermes) hermesLaunch(io, hermesTargetRoot(target));
   return 0;
 }
 
 // src/commands/workspace.ts
 import { existsSync as existsSync21, rmSync as rmSync5 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { join as join18, resolve as resolve12 } from "node:path";
+import { join as join17, resolve as resolve10 } from "node:path";
 function homeOf2(opts) {
   return (opts.homedir ?? homedir4)();
 }
@@ -5710,7 +5357,7 @@ function messageOf2(error) {
 }
 function recordedRoot(env, home) {
   const configured = readHostConfig(env, home).harnessRoot;
-  return typeof configured === "string" && configured !== "" ? resolve12(configured) : void 0;
+  return typeof configured === "string" && configured !== "" ? resolve10(configured) : void 0;
 }
 function renderTable2(rows, io) {
   const header2 = ["WORKSPACE", "DEFAULT", "PATH"];
@@ -5735,7 +5382,7 @@ async function runWorkspaceCreate(name, opts, io) {
   let root;
   const chosen = name ?? DEFAULT_WORKSPACE_NAME;
   try {
-    root = opts.path !== void 0 ? resolve12(opts.path) : workspaceRoot(chosen, env, home);
+    root = opts.path !== void 0 ? resolve10(opts.path) : workspaceRoot(chosen, env, home);
   } catch (err) {
     io.stderr(`${bin} workspace: ${messageOf2(err)}
 `);
@@ -5749,7 +5396,7 @@ async function runWorkspaceCreate(name, opts, io) {
   let action;
   const preexisting = existsSync21(root);
   try {
-    if (!opts.json && !existsSync21(join18(root, ".git"))) {
+    if (!opts.json && !existsSync21(join17(root, ".git"))) {
       const at = opts.ref !== void 0 ? ` at ${opts.ref}` : "";
       io.stdout(`cloning ${AGRO_REPO_URL}${at} into ${root}\u2026
 `);
@@ -5794,7 +5441,7 @@ async function runWorkspaceList(opts, io) {
     const recorded = recordedRoot(env, home);
     const registry = workspacesRoot(env, home);
     rows = listHostWorkspaces(env, home).map((name) => {
-      const root = join18(registry, name);
+      const root = join17(registry, name);
       return { name, root, default: recorded === root };
     });
   } catch (err) {
@@ -5821,7 +5468,7 @@ async function runWorkspaceList(opts, io) {
 // src/commands/tool.ts
 import { existsSync as existsSync22 } from "node:fs";
 import { homedir as homedir5, userInfo as userInfo2 } from "node:os";
-import { delimiter as delimiter3, join as join19 } from "node:path";
+import { delimiter as delimiter3, join as join18 } from "node:path";
 
 // src/lib/tools/catalog.ts
 var TOOLS_DOC = "docs/installation.md";
@@ -6252,7 +5899,7 @@ function targetFor2(root, run, env) {
   });
 }
 function hostPrefix2(home) {
-  return join19(home, ".local");
+  return join18(home, ".local");
 }
 function sandboxMarkerPath2(entry) {
   return `${SANDBOX_HARNESS_PREFIX}/share/agro/tools/${entry.id}.installed`;
@@ -6266,7 +5913,7 @@ async function sandboxMarkerExists2(target, entry) {
   return r.exitCode === 0;
 }
 function hostBinaryUnderPrefix2(entry, prefix) {
-  return existsSync22(join19(harnessBinPath(prefix), entry.binary));
+  return existsSync22(join18(harnessBinPath(prefix), entry.binary));
 }
 function pathEntries2(env) {
   return (env.PATH ?? "").split(delimiter3).filter((part) => part !== "");
@@ -6346,7 +5993,7 @@ function probeableHost2(env, home) {
     return void 0;
   }
   const prefix = hostPrefix2(home);
-  if (!existsSync22(join19(root, ".git")) && !existsSync22(prefix)) return void 0;
+  if (!existsSync22(join18(root, ".git")) && !existsSync22(prefix)) return void 0;
   return { root, prefix };
 }
 async function collectRows(root, run, home, env, only) {
@@ -6820,11 +6467,11 @@ Remove ${entry.id} by hand: ${ROOT_TOOL_REMOVAL_DOCS}
 }
 
 // src/lib/remote.ts
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { spawnSync as spawnSync4 } from "node:child_process";
 var DEFAULT_REPO_URL = "https://github.com/mifunedev/agro";
 var DEFAULT_CLONE_TIMEOUT_MS = 12e4;
 var spawnRunner2 = (cmd, args, opts) => {
-  const r = spawnSync3(cmd, args, {
+  const r = spawnSync4(cmd, args, {
     env: opts.env,
     timeout: opts.timeoutMs,
     stdio: ["ignore", "ignore", "pipe"],
@@ -6882,8 +6529,37 @@ function fetchRemoteSource(opts) {
   return opts.destDir;
 }
 
+// src/command-table.ts
+var CONFIG_VERBS = ["show", "set", "repo"];
+var CONFIG_INTEGRATIONS = ["langfuse"];
+var SECRET_VERBS = ["set", "list"];
+var LANGFUSE_VERBS = ["apply", "status", "disable"];
+var SANDBOX_SUBCOMMANDS = ["install", "list", "upgrade"];
+var WORKSPACE_SUBCOMMANDS = ["create", "list"];
+var HARNESS_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
+var TOOL_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
+function isOneOf(values, value) {
+  return value !== void 0 && values.includes(value);
+}
+var AGRO_COMMANDS = Object.freeze({
+  config: [...CONFIG_VERBS, ...CONFIG_INTEGRATIONS],
+  secret: SECRET_VERBS,
+  langfuse: LANGFUSE_VERBS,
+  update: null,
+  "self-upgrade": null,
+  vendor: null,
+  sandbox: SANDBOX_SUBCOMMANDS,
+  shell: null,
+  compose: null,
+  workspace: WORKSPACE_SUBCOMMANDS,
+  harness: HARNESS_SUBCOMMANDS,
+  tool: TOOL_SUBCOMMANDS,
+  gateway: null,
+  ...Object.fromEntries(composeVerbs().map((verb) => [verb, null]))
+});
+
 // src/cli.ts
-var DEFAULT_SOURCE_CONTROL_DIR = resolve13(
+var DEFAULT_SOURCE_CONTROL_DIR = resolve11(
   dirname10(fileURLToPath(import.meta.url)),
   "../.."
 );
@@ -7018,7 +6694,7 @@ The upgrade follows whichever mechanism installed this executable:
   npm-managed    realpath under node_modules/${AGRO_PRODUCT.packageName}/: reads the registry
                  version with \`npm view\`, then runs
                  \`npm install -g --prefix <owning prefix> ${AGRO_PRODUCT.packageName}@<version>\`.
-  standalone     a plain file (get-agro.sh): downloads AGRO_JS_URL (default
+  standalone     a plain file (install.sh): downloads AGRO_JS_URL (default
                  ${DEFAULT_ARTIFACT_URL})
                  into the same directory, checks its shebang and \`--version\`,
                  renames it over the executable, and keeps <path>.prev until the
@@ -7276,7 +6952,6 @@ function extractSandboxFlag(command, rest) {
   }
   return { ok: true, args: sandbox === void 0 ? { rest: kept } : { rest: kept, sandbox } };
 }
-var LANGFUSE_VERBS = ["apply", "status", "disable"];
 function parseLangfuseArgs(rest, bin = AGRO_PRODUCT.bin) {
   if (rest.length === 0 || isHelpFlag2(rest[0])) return { ok: true, args: { help: true } };
   const [head, ...tail] = rest;
@@ -7293,7 +6968,6 @@ function parseLangfuseArgs(rest, bin = AGRO_PRODUCT.bin) {
   }
   return { ok: true, args: { help: false, verb: head } };
 }
-var CONFIG_VERBS = ["show", "set", "repo"];
 function parseConfigArgs(input, bin = AGRO_PRODUCT.bin) {
   const scoped = extractSandboxFlag(`${bin} config`, input);
   if (!scoped.ok) return scoped;
@@ -7345,7 +7019,6 @@ function parseConfigArgs(input, bin = AGRO_PRODUCT.bin) {
   }
   return { ok: true, args: { ...args, verb, key, value } };
 }
-var SECRET_VERBS = ["set", "list"];
 function parseSecretArgs(input, bin = AGRO_PRODUCT.bin) {
   const scoped = extractSandboxFlag(`${bin} secret`, input);
   if (!scoped.ok) return scoped;
@@ -7555,7 +7228,7 @@ function parseWorkspaceArgs(rest, bin = AGRO_PRODUCT.bin) {
     return { ok: false, error: `${bin} workspace: --ref requires a branch or tag` };
   }
   const [sub, name, ...extra] = positionals;
-  if (sub !== "create" && sub !== "list") {
+  if (!isOneOf(WORKSPACE_SUBCOMMANDS, sub)) {
     return {
       ok: false,
       error: `${bin} workspace: unknown subcommand "${sub}" \u2014 expected create or list`,
@@ -7641,7 +7314,7 @@ function parseHarnessArgs(rest, bin = AGRO_PRODUCT.bin) {
     };
   }
   const [sub, name, ...extra] = positionals;
-  if (sub !== "list" && sub !== "install" && sub !== "status" && sub !== "uninstall") {
+  if (!isOneOf(HARNESS_SUBCOMMANDS, sub)) {
     return {
       ok: false,
       error: `${bin} harness: unknown subcommand "${sub}" \u2014 expected list, install, uninstall, or status`,
@@ -7698,7 +7371,7 @@ function parseToolArgs(rest, bin = AGRO_PRODUCT.bin) {
     return { ok: false, error: `${bin} tool: --path requires a directory` };
   }
   const [sub, name, ...extra] = positionals;
-  if (sub !== "list" && sub !== "install" && sub !== "status" && sub !== "uninstall") {
+  if (!isOneOf(TOOL_SUBCOMMANDS, sub)) {
     return {
       ok: false,
       error: `${bin} tool: unknown subcommand "${sub}" \u2014 expected list, install, uninstall, or status`,
@@ -7731,18 +7404,18 @@ function parseGatewayArgs(rest) {
   return { ok: true, args: { help: false, passthrough: [...rest] } };
 }
 function bundledPayloadExists(bundled, exists = existsSync23) {
-  return exists(join20(bundled.sourceControlDir, "manifest.json"));
+  return exists(join19(bundled.sourceControlDir, "manifest.json"));
 }
 function resolveVendorSource(args, bundled, bin = AGRO_PRODUCT.bin) {
   const exists = bundled.exists ?? existsSync23;
   if (args.fromDir !== void 0) {
-    return { kind: "local", fromDir: resolve13(args.fromDir) };
+    return { kind: "local", fromDir: resolve11(args.fromDir) };
   }
   if (args.fromRemote) {
     return { kind: "remote", ref: args.ref };
   }
   if (bundledPayloadExists(bundled, exists)) {
-    return { kind: "local", fromDir: resolve13(bundled.sourceControlDir, "..") };
+    return { kind: "local", fromDir: resolve11(bundled.sourceControlDir, "..") };
   }
   return {
     kind: "remote",
@@ -7754,7 +7427,7 @@ function resolveVendorSource(args, bundled, bin = AGRO_PRODUCT.bin) {
 function readPayloadVersion(checkoutDir) {
   try {
     const parsed = JSON.parse(
-      readFileSync13(join20(resolveControlDir(checkoutDir), "cli", "package.json"), "utf8")
+      readFileSync13(join19(resolveControlDir(checkoutDir), "cli", "package.json"), "utf8")
     );
     if (parsed && typeof parsed.version === "string") return parsed.version;
   } catch {
@@ -7763,7 +7436,7 @@ function readPayloadVersion(checkoutDir) {
 }
 async function runWithRemoteSource(hooks, fn) {
   const fetch2 = hooks.fetch ?? fetchRemoteSource;
-  const mkdtemp = hooks.mkdtemp ?? (() => mkdtempSync5(join20(tmpdir4(), "oh-remote-")));
+  const mkdtemp = hooks.mkdtemp ?? (() => mkdtempSync5(join19(tmpdir4(), "oh-remote-")));
   const rm = hooks.rm ?? ((dir) => rmSync6(dir, { recursive: true, force: true }));
   const out = hooks.stdout ?? ((s) => process.stdout.write(s));
   const checkoutDir = mkdtemp();
@@ -7789,6 +7462,9 @@ async function main(argv) {
 `);
     return 0;
   }
+  if (!Object.hasOwn(AGRO_COMMANDS, first)) return unknownCommand(first, product);
+  const fallbackWarning = sandboxFallbackWarning();
+  if (fallbackWarning !== void 0) process.stderr.write(fallbackWarning);
   if (first === "config") {
     const parsed = parseConfigArgs(argv.slice(1), bin);
     if (!parsed.ok) {
@@ -8111,7 +7787,10 @@ async function main(argv) {
     }
     return runGateway(parsed.args.passthrough, { bin });
   }
-  process.stderr.write(`${bin}: unknown command "${first}"
+  return unknownCommand(first, product);
+}
+function unknownCommand(first, product) {
+  process.stderr.write(`${product.bin}: unknown command "${first}"
 
 `);
   printAgroHelp(product);
@@ -8123,19 +7802,7 @@ function lifecycleIo() {
     stderr: (s) => process.stderr.write(s)
   };
 }
-async function runCli(argv) {
-  try {
-    return await main(argv);
-  } catch (err) {
-    if (err instanceof RuntimeUnsupportedError) {
-      process.stderr.write(`${err.message}
-`);
-      return 1;
-    }
-    throw err;
-  }
-}
-runCli(process.argv.slice(2)).then(
+main(process.argv.slice(2)).then(
   (code) => process.exit(code),
   (err) => {
     const msg = err instanceof Error ? err.message : String(err);
@@ -8145,9 +7812,6 @@ runCli(process.argv.slice(2)).then(
   }
 );
 export {
-  CONFIG_VERBS,
-  LANGFUSE_VERBS,
-  SECRET_VERBS,
   bundledPayloadExists,
   extractSandboxFlag,
   isHelpFlag2 as isHelpFlag,
@@ -8180,7 +7844,6 @@ export {
   printVendorHelp,
   printWorkspaceHelp,
   resolveVendorSource,
-  runCli,
   runWithRemoteSource,
   runtimeLines
 };