@osfactory/har 0.1.1

package/dist/templates/har-boilerplate/justfile

@@ -0,0 +1,39 @@
+# Agent harness shortcuts — requires `just` (https://github.com/casey/just)
+
+set shell := ["bash", "-cu"]
+
+setup:
+    ./setup-infra.sh
+
+launch id:
+    ./launch.sh {{id}}
+
+teardown id:
+    ./teardown.sh {{id}}
+
+verify id:
+    ./verify.sh {{id}}
+
+verify-full id:
+    ./verify.sh {{id}} --full
+
+status:
+    #!/usr/bin/env bash
+    for id in 1 2 3 4 5; do
+        ./agent-cli.sh "$id" status 2>/dev/null || true
+    done
+
+launch-all count:
+    #!/usr/bin/env bash
+    for id in $(seq 1 {{count}}); do
+        ./launch.sh "$id"
+    done
+
+teardown-all:
+    #!/usr/bin/env bash
+    for id in 1 2 3 4 5; do
+        ./teardown.sh "$id" 2>/dev/null || true
+    done
+
+cli id cmd *args:
+    ./agent-cli.sh {{id}} {{cmd}} {{args}}

package/dist/templates/har-boilerplate/launch.sh

@@ -0,0 +1,229 @@
+#!/usr/bin/env bash
+# Launches a single agent instance with isolated ports, database, and PM2 processes.
+# Every launch starts a FRESH session: any previous session for the slot is torn
+# down (its branch is kept) and a new suffixed worktree is created from HEAD.
+#
+# Usage: ./.har/launch.sh <agent-id> [--no-worktree] [--claude] [--replace] [--force]
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/harness.env"
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/agent-slot.sh"
+
+AGENT_ID="${1:-}"
+USE_WORKTREE="${HARNESS_USE_WORKTREE:-true}"
+USE_CLAUDE=false
+FORCE=false
+REPLACE=false
+PURPOSE="${HAR_SESSION_PURPOSE:-}"
+
+for arg in "$@"; do
+  case "$arg" in
+    --no-worktree) USE_WORKTREE=false ;;
+    --worktree) USE_WORKTREE=true ;;
+    --claude)   USE_CLAUDE=true ;;
+    --replace)  REPLACE=true ;;
+    --force)    FORCE=true ;;
+    --purpose=*) PURPOSE="${arg#--purpose=}" ;;
+  esac
+done
+
+if [[ -z "$AGENT_ID" ]]; then
+  echo "Usage: $0 <agent-id> [--no-worktree] [--claude] [--replace] [--force] [--purpose=label]" >&2
+  echo "  agent-id must be between ${HARNESS_AGENT_SLOT_MIN} and ${HARNESS_AGENT_SLOT_MAX}" >&2
+  exit 1
+fi
+
+validate_agent_id "$AGENT_ID"
+
+log() { echo "==> [agent-$AGENT_ID] $*" >&2; }
+
+FE_PORT=$(( HARNESS_FE_BASE_PORT + AGENT_ID * 10 ))
+API_PORT=$(( HARNESS_API_BASE_PORT + AGENT_ID * 10 ))
+DEBUG_PORT=$(( 9200 + AGENT_ID * 10 ))
+DB_PORT="${AGENT_DB_PORT:-15432}"
+MINIO_PORT="${AGENT_MINIO_PORT:-19000}"
+BROWSER_PORT="${AGENT_BROWSER_PORT:-13001}"
+
+log "Ports: frontend=$FE_PORT api=$API_PORT debug=$DEBUG_PORT"
+
+# Replace any previous session for this slot — requires explicit confirmation.
+if slot_is_occupied "$AGENT_ID"; then
+  require_slot_replace_confirm "$AGENT_ID" "$FORCE" "$REPLACE"
+  log "Replacing previous session for slot ${AGENT_ID}..."
+  "$SCRIPT_DIR/teardown.sh" "$AGENT_ID" >&2
+fi
+
+# Ensure shared infra is running
+"$SCRIPT_DIR/setup-infra.sh"
+
+# Clone agent database from template
+if har_infra_enabled db && [ -n "${HARNESS_TEMPLATE_DB:-}" ]; then
+  AGENT_DB="agent_${AGENT_ID}"
+  PSQL="har_pg psql -d postgres"
+  if $PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '$AGENT_DB'" | grep -q 1; then
+    log "Database '$AGENT_DB' already exists."
+  else
+    log "Creating database '$AGENT_DB' from template..."
+    $PSQL -c "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname = '$HARNESS_TEMPLATE_DB' AND pid <> pg_backend_pid()" >/dev/null 2>&1 || true
+    har_pg createdb -T "$HARNESS_TEMPLATE_DB" "$AGENT_DB"
+    log "Database '$AGENT_DB' created."
+  fi
+fi
+
+# Create MinIO bucket
+if har_infra_enabled minio; then
+  MINIO_BUCKET="agent-${AGENT_ID}"
+  HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" -X PUT \
+    -u "minioadmin:minioadmin" \
+    "http://localhost:${MINIO_PORT}/${MINIO_BUCKET}/" 2>/dev/null) || true
+  log "MinIO bucket '$MINIO_BUCKET' ready (HTTP $HTTP_STATUS)."
+fi
+
+# Session worktree (default — use --no-worktree to work in repo root).
+# Name encodes what the session is based on: <base-branch>-<sha4>-har-agent-<id>-<rand4>.
+WORK_DIR="$REPO_ROOT"
+WORKTREE_DIR=""
+BRANCH=""
+SUFFIX=""
+BASE_BRANCH="$(git -C "$REPO_ROOT" rev-parse --abbrev-ref HEAD 2>/dev/null || echo "detached")"
+BASE_COMMIT="$(git -C "$REPO_ROOT" rev-parse HEAD 2>/dev/null || true)"
+if [ "$USE_WORKTREE" = true ]; then
+  SHORT_SHA="$(git -C "$REPO_ROOT" rev-parse --short=4 HEAD)"
+  SUFFIX="$(LC_ALL=C tr -dc 'a-z0-9' </dev/urandom 2>/dev/null | head -c 4 || true)"
+  [ -n "$SUFFIX" ] || SUFFIX="$(printf '%04d' $(( RANDOM % 10000 )))"
+  SESSION_NAME="${BASE_BRANCH//\//-}-${SHORT_SHA}-har-agent-${AGENT_ID}-${SUFFIX}"
+  BRANCH="$SESSION_NAME"
+  WORKTREE_DIR="$HOME/worktrees/${SESSION_NAME}"
+  log "Creating session worktree at $WORKTREE_DIR (branch $BRANCH)..."
+  git -C "$REPO_ROOT" worktree add "$WORKTREE_DIR" -b "$BRANCH"
+  # Worktrees are always rooted at the git repo — if this project lives in a
+  # subdirectory (monorepo), point WORK_DIR at the project inside the worktree.
+  REL_PREFIX="$(git -C "$REPO_ROOT" rev-parse --show-prefix 2>/dev/null || true)"
+  WORK_DIR="${WORKTREE_DIR%/}/${REL_PREFIX}"
+  WORK_DIR="${WORK_DIR%/}"
+else
+  log "Using repo root (worktree disabled)"
+fi
+
+# Install dependencies (fresh worktrees have no node_modules — PM2 config needs them at load time)
+if [ -f "$WORK_DIR/package.json" ] && [ ! -d "$WORK_DIR/node_modules" ]; then
+  log "Installing dependencies in $WORK_DIR..."
+  (cd "$WORK_DIR" && npm install --silent)
+elif [ -f "$WORK_DIR/go.mod" ] && [ ! -d "$WORK_DIR/vendor" ]; then
+  log "Go module detected in work dir (run go mod download if needed)"
+fi
+
+# Monorepo: file:/workspace deps may resolve modules from the repo root — install there too
+if [ -n "${REL_PREFIX:-}" ] && [ -f "$WORKTREE_DIR/package.json" ] && [ ! -d "$WORKTREE_DIR/node_modules" ]; then
+  log "Installing monorepo root dependencies in $WORKTREE_DIR..."
+  (cd "$WORKTREE_DIR" && npm install --silent)
+fi
+
+# Generate .env.agent.N
+# Keep harness-generated files out of accidental `git add -A` commits in repos
+# whose .gitignore doesn't know about har (applies to all worktrees too).
+GIT_EXCLUDE="$(git -C "$REPO_ROOT" rev-parse --git-common-dir 2>/dev/null)/info/exclude"
+if [ -n "$GIT_EXCLUDE" ] && [ -d "$(dirname "$GIT_EXCLUDE")" ]; then
+  for pattern in '.env.agent.*' 'ecosystem.agent.*.config.cjs'; do
+    grep -qxF "$pattern" "$GIT_EXCLUDE" 2>/dev/null || echo "$pattern" >> "$GIT_EXCLUDE"
+  done
+fi
+
+ENV_FILE="$WORK_DIR/.env.agent.${AGENT_ID}"
+log "Generating $ENV_FILE..."
+AGENT_ID="$AGENT_ID" \
+API_PORT="$API_PORT" \
+FE_PORT="$FE_PORT" \
+DEBUG_PORT="$DEBUG_PORT" \
+DB_PORT="$DB_PORT" \
+MINIO_PORT="$MINIO_PORT" \
+BROWSER_PORT="$BROWSER_PORT" \
+REPO_ROOT="$WORK_DIR" \
+  envsubst '${AGENT_ID} ${API_PORT} ${FE_PORT} ${DEBUG_PORT} ${DB_PORT} ${MINIO_PORT} ${BROWSER_PORT} ${REPO_ROOT}' \
+  < "$SCRIPT_DIR/env.template" > "$ENV_FILE"
+
+# Generate PM2 ecosystem config
+ECOSYSTEM_FILE="$WORK_DIR/ecosystem.agent.${AGENT_ID}.config.cjs"
+log "Generating $ECOSYSTEM_FILE..."
+AGENT_ID="$AGENT_ID" \
+FE_PORT="$FE_PORT" \
+DEBUG_PORT="$DEBUG_PORT" \
+  envsubst '${AGENT_ID} ${FE_PORT} ${DEBUG_PORT}' \
+  < "$SCRIPT_DIR/ecosystem.agent.template.cjs" > "$ECOSYSTEM_FILE"
+
+# Stop existing processes for this agent
+npx --yes pm2 delete "/^agent-${AGENT_ID}-/" 2>/dev/null || true
+
+# Start PM2 processes
+log "Starting PM2 processes..."
+cd "$WORK_DIR"
+npx pm2 start "$ECOSYSTEM_FILE"
+npx pm2 save --force >/dev/null 2>&1 || true
+
+# Health check
+if [ -n "${HARNESS_HEALTH_CHECK_PATH:-}" ]; then
+  HEALTH_URL="http://localhost:${API_PORT}${HARNESS_HEALTH_CHECK_PATH}"
+  log "Waiting for health check at $HEALTH_URL..."
+  TIMEOUT=60
+  ELAPSED=0
+  while [ "$ELAPSED" -lt "$TIMEOUT" ]; do
+    HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" "$HEALTH_URL" 2>/dev/null) || true
+    if [ "$HTTP_CODE" = "200" ]; then
+      log "Health check passed!"
+      break
+    fi
+    sleep 2
+    ELAPSED=$((ELAPSED + 2))
+  done
+  if [ "$ELAPSED" -ge "$TIMEOUT" ]; then
+    log "Warning: Health check did not pass within ${TIMEOUT}s."
+    log "Check logs: ./.har/agent-cli.sh $AGENT_ID logs"
+  fi
+fi
+
+# Record the session in the slot registry — the source of truth for where
+# this slot's code lives (status/verify/teardown resolve through it).
+SLOT_AGENT_ID="$AGENT_ID" \
+SLOT_MODE="$([ "$USE_WORKTREE" = true ] && echo worktree || echo root)" \
+SLOT_WORK_DIR="$WORK_DIR" \
+SLOT_SUFFIX="${SUFFIX:-}" \
+SLOT_WORKTREE_PATH="${WORKTREE_DIR:-}" \
+SLOT_BRANCH="${BRANCH:-}" \
+SLOT_BASE_BRANCH="${BASE_BRANCH:-}" \
+SLOT_BASE_COMMIT="${BASE_COMMIT:-}" \
+SLOT_PURPOSE="${PURPOSE}" \
+SLOT_PORTS_JSON="{\"frontend\":${FE_PORT},\"api\":${API_PORT},\"debug\":${DEBUG_PORT}}" \
+SLOT_PREVIEW_URLS_JSON="{\"frontend\":\"http://localhost:${FE_PORT}\",\"api\":\"http://localhost:${API_PORT}\"}" \
+  write_slot_registry
+
+# Launch Claude Code in tmux (optional)
+if [ "$USE_CLAUDE" = true ]; then
+  TMUX_SESSION="agent-${AGENT_ID}"
+  if tmux has-session -t "$TMUX_SESSION" 2>/dev/null; then
+    tmux kill-session -t "$TMUX_SESSION"
+  fi
+  tmux new-session -d -s "$TMUX_SESSION" -c "$WORK_DIR" "claude"
+  log "Claude session: tmux attach -t $TMUX_SESSION"
+fi
+
+echo ""
+log "Agent $AGENT_ID is ready!"
+log ""
+log "  WORK DIR (make ALL file edits under this path — never the main checkout):"
+log "    ${WORK_DIR}"
+if [ "$USE_WORKTREE" = true ]; then
+  log "  Branch:    ${BRANCH} (based on ${BASE_BRANCH} @ ${BASE_COMMIT})"
+fi
+log "  Frontend:  http://localhost:${FE_PORT}"
+log "  API:       http://localhost:${API_PORT}"
+har_infra_enabled db && log "  Database:  agent_${AGENT_ID} @ localhost:${DB_PORT}"
+log ""
+log "  Edits under the work dir hot-reload in the running slot;"
+log "  use ./.har/agent-cli.sh $AGENT_ID restart if a change doesn't take."
+log "  Verify:    ./.har/verify.sh $AGENT_ID"
+log "  Teardown:  ./.har/teardown.sh $AGENT_ID   (keeps the branch)"

package/dist/templates/har-boilerplate/setup-infra.sh

@@ -0,0 +1,102 @@
+#!/usr/bin/env bash
+# Sets up shared infrastructure for all agents.
+# Starts the docker compose services listed in HARNESS_INFRA_SERVICES, creates
+# the template database (when "db" is enabled), and starts optional shared app
+# services (ecosystem.shared.config.cjs). One instance serves every agent slot.
+# Idempotent — safe to run multiple times.
+#
+# Usage: ./.har/setup-infra.sh
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+COMPOSE_FILE="$SCRIPT_DIR/docker-compose.agent.yml"
+
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/harness.env"
+
+COMPOSE_PROJECT="har-${HARNESS_PROJECT_NAME}"
+DB_PORT="${AGENT_DB_PORT:-15432}"
+PSQL="har_pg psql -d postgres"
+
+log() { echo "==> $*" >&2; }
+
+SERVICES="${HARNESS_INFRA_SERVICES:-}"
+
+if [ -n "$SERVICES" ]; then
+  log "Starting shared infrastructure (project: $COMPOSE_PROJECT): $SERVICES"
+  AGENT_DB_PORT="$DB_PORT" \
+  AGENT_MINIO_PORT="${AGENT_MINIO_PORT:-19000}" \
+  AGENT_MINIO_CONSOLE_PORT="${AGENT_MINIO_CONSOLE_PORT:-19001}" \
+  AGENT_BROWSER_PORT="${AGENT_BROWSER_PORT:-13001}" \
+  AGENT_MAILPIT_WEB_PORT="${AGENT_MAILPIT_WEB_PORT:-18025}" \
+  AGENT_MAILPIT_SMTP_PORT="${AGENT_MAILPIT_SMTP_PORT:-11025}" \
+    docker compose -p "$COMPOSE_PROJECT" -f "$COMPOSE_FILE" up -d $SERVICES
+else
+  log "No shared infra services enabled in harness.env (HARNESS_INFRA_SERVICES)"
+fi
+
+# Wait for PostgreSQL and prepare the template database
+if har_infra_enabled db; then
+  log "Waiting for PostgreSQL on port $DB_PORT..."
+  for i in $(seq 1 30); do
+    if har_pg pg_isready -q 2>/dev/null; then
+      log "PostgreSQL is ready."
+      break
+    fi
+    if [ "$i" = "30" ]; then
+      echo "Error: PostgreSQL did not become ready within 30 seconds." >&2
+      exit 1
+    fi
+    sleep 1
+  done
+
+  log "Enabling pg_stat_statements extension..."
+  $PSQL -c "CREATE EXTENSION IF NOT EXISTS pg_stat_statements" 2>/dev/null || true
+
+  if [ -n "${HARNESS_TEMPLATE_DB:-}" ]; then
+    if $PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '$HARNESS_TEMPLATE_DB'" | grep -q 1; then
+      log "Template database '$HARNESS_TEMPLATE_DB' already exists. Skipping creation."
+    else
+      log "Creating template database '$HARNESS_TEMPLATE_DB'..."
+      $PSQL -c "CREATE DATABASE $HARNESS_TEMPLATE_DB"
+
+      if [ -n "${HARNESS_DB_MIGRATE_CMD:-}" ] && [ "$HARNESS_DB_MIGRATE_CMD" != "echo 'TODO: set migrate command'" ]; then
+        log "Running migrations..."
+        PGPASSWORD=password PGHOST=localhost PGPORT="$DB_PORT" PGUSER=postgres \
+          PGDATABASE="$HARNESS_TEMPLATE_DB" \
+          bash -c "cd '$REPO_ROOT' && $HARNESS_DB_MIGRATE_CMD"
+      fi
+
+      if [ -n "${HARNESS_DB_SEED_CMD:-}" ] && [ "$HARNESS_DB_SEED_CMD" != "echo 'TODO: set seed command'" ]; then
+        log "Running seeds..."
+        PGPASSWORD=password PGHOST=localhost PGPORT="$DB_PORT" PGUSER=postgres \
+          PGDATABASE="$HARNESS_TEMPLATE_DB" \
+          bash -c "cd '$REPO_ROOT' && $HARNESS_DB_SEED_CMD"
+      fi
+
+      log "Marking '$HARNESS_TEMPLATE_DB' as a PostgreSQL template..."
+      $PSQL -c "UPDATE pg_database SET datistemplate = true WHERE datname = '$HARNESS_TEMPLATE_DB'"
+      log "Template database ready: $HARNESS_TEMPLATE_DB"
+    fi
+  fi
+fi
+
+# Shared app services — supporting services of a monolith/monorepo that agents
+# depend on but do not modify. Started ONCE on fixed ports, shared by all slots.
+# Create .har/ecosystem.shared.config.cjs (PM2 format, processes named
+# "har-shared-<name>") only when the primary app needs sibling services running.
+SHARED_ECOSYSTEM="$SCRIPT_DIR/ecosystem.shared.config.cjs"
+if [ -f "$SHARED_ECOSYSTEM" ]; then
+  log "Starting shared app services from ecosystem.shared.config.cjs..."
+  (cd "$REPO_ROOT" && npx --yes pm2 startOrReload "$SHARED_ECOSYSTEM" >/dev/null)
+  log "Shared app services running (pm2 ls | grep har-shared-)."
+fi
+
+echo ""
+log "Infrastructure is ready."
+har_infra_enabled db               && log "  PostgreSQL: localhost:$DB_PORT"
+har_infra_enabled minio            && log "  MinIO:      http://localhost:${AGENT_MINIO_CONSOLE_PORT:-19001}"
+har_infra_enabled headless-browser && log "  Browser:    http://localhost:${AGENT_BROWSER_PORT:-13001}"
+har_infra_enabled mailpit          && log "  Mailpit:    http://localhost:${AGENT_MAILPIT_WEB_PORT:-18025}"
+exit 0

package/dist/templates/har-boilerplate/stages/README.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+# Optional per-stage scripts live here.
+# Example: ./.har/stages/browser-e2e.sh <agent-id>
+#
+# Register custom stages in .har/stages.json with a project-owned command:
+#   "command": "./.har/stages/browser-e2e.sh {agentId}"
+
+echo "Add stage scripts under .har/stages/ and register them in stages.json." >&2
+exit 1

package/dist/templates/har-boilerplate/stages.json

@@ -0,0 +1,67 @@
+{
+  "version": "1",
+  "agentSlots": {
+    "min": 1,
+    "max": 5
+  },
+  "stages": [
+    {
+      "id": "setup-infra",
+      "kind": "setup",
+      "description": "Shared infrastructure (Docker, template DB)",
+      "command": "./.har/setup-infra.sh"
+    },
+    {
+      "id": "launch",
+      "kind": "launch",
+      "description": "Launch an isolated agent environment slot",
+      "command": "./.har/launch.sh {agentId}",
+      "artifacts": [
+        {
+          "path": ".env.agent.{agentId}",
+          "kind": "file",
+          "description": "Generated per-agent environment file"
+        }
+      ]
+    },
+    {
+      "id": "verify",
+      "kind": "verify",
+      "description": "Verification pipeline (quick by default; --full adds lint and browser-e2e when installed)",
+      "command": "./.har/verify.sh {agentId}",
+      "acceptsArgs": ["--full"],
+      "artifacts": [
+        {
+          "path": ".har/artifacts",
+          "kind": "directory",
+          "description": "Optional verification outputs such as reports, traces, screenshots, and logs"
+        }
+      ]
+    },
+    {
+      "id": "status",
+      "kind": "inspect",
+      "description": "Inspect a running agent environment slot",
+      "command": "./.har/agent-cli.sh {agentId} status",
+      "artifacts": [
+        {
+          "path": ".har/logs",
+          "kind": "directory",
+          "description": "Optional harness logs"
+        }
+      ]
+    },
+    {
+      "id": "logs",
+      "kind": "inspect",
+      "description": "Read recent logs for an agent slot",
+      "command": "./.har/agent-cli.sh {agentId} logs"
+    },
+    {
+      "id": "teardown",
+      "kind": "teardown",
+      "description": "Stop processes and release agent slot resources",
+      "command": "./.har/teardown.sh {agentId}"
+    }
+  ]
+}

package/dist/templates/har-boilerplate/teardown.sh

@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+# Safely tears down one agent: stops PM2, drops DB, removes bucket, cleans up files.
+# The session's git branch is KEPT by default so you can push it / open a PR —
+# pass --delete-branch to remove it too.
+#
+# Usage: ./.har/teardown.sh <agent-id> [--delete-branch]
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/harness.env"
+# shellcheck source=/dev/null
+source "$SCRIPT_DIR/agent-slot.sh"
+
+AGENT_ID="${1:?Usage: teardown.sh <agent-id> [--delete-branch]}"
+DELETE_BRANCH=false
+
+for arg in "${@:2}"; do
+  case "$arg" in
+    --delete-branch) DELETE_BRANCH=true ;;
+  esac
+done
+
+validate_agent_id "$AGENT_ID"
+
+echo "==> Tearing down agent ${AGENT_ID}..."
+
+# Resolve the session from the registry; fall back to the legacy fixed path so
+# pre-registry sessions stay removable.
+REGISTRY_FILE="$(slot_registry_file "$AGENT_ID")"
+WORKTREE_PATH=""
+WORK_DIR=""
+BRANCH=""
+if [ -f "$REGISTRY_FILE" ]; then
+  WORKTREE_PATH="$(read_slot_field "$REGISTRY_FILE" worktreePath || true)"
+  WORK_DIR="$(read_slot_field "$REGISTRY_FILE" workDir || true)"
+  BRANCH="$(read_slot_field "$REGISTRY_FILE" branch || true)"
+fi
+[ -n "$WORKTREE_PATH" ] || WORKTREE_PATH="$HOME/worktrees/${HARNESS_PROJECT_NAME}-agent-${AGENT_ID}"
+
+npx --yes pm2 delete "/^agent-${AGENT_ID}-/" 2>/dev/null || true
+echo "✓ Stopped PM2 processes"
+
+if har_infra_enabled db; then
+  har_pg psql -d postgres -c \
+    "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname='agent_${AGENT_ID}';" \
+    >/dev/null 2>&1 || true
+  har_pg dropdb --if-exists "agent_${AGENT_ID}" 2>/dev/null || true
+  echo "✓ Dropped database: agent_${AGENT_ID}"
+fi
+
+if har_infra_enabled minio; then
+  curl -sf -X DELETE "http://minioadmin:minioadmin@localhost:19000/agent-${AGENT_ID}?force=true" \
+    >/dev/null 2>&1 || true
+  echo "✓ Removed MinIO bucket: agent-${AGENT_ID}"
+fi
+
+rm -f "$REPO_ROOT/.env.agent.${AGENT_ID}"
+rm -f "$REPO_ROOT/ecosystem.agent.${AGENT_ID}.config.cjs"
+if [ -n "$WORK_DIR" ] && [ -d "$WORK_DIR" ]; then
+  rm -f "$WORK_DIR/.env.agent.${AGENT_ID}"
+  rm -f "$WORK_DIR/ecosystem.agent.${AGENT_ID}.config.cjs"
+fi
+
+if [ -d "$WORKTREE_PATH" ]; then
+  rm -f "$WORKTREE_PATH/.env.agent.${AGENT_ID}"
+  rm -f "$WORKTREE_PATH/ecosystem.agent.${AGENT_ID}.config.cjs"
+  git -C "$REPO_ROOT" worktree remove "$WORKTREE_PATH" --force 2>/dev/null || rm -rf "$WORKTREE_PATH"
+  echo "✓ Removed worktree: $WORKTREE_PATH"
+fi
+git -C "$REPO_ROOT" worktree prune 2>/dev/null || true
+
+if [ -n "$BRANCH" ]; then
+  if [ "$DELETE_BRANCH" = true ]; then
+    git -C "$REPO_ROOT" branch -D "$BRANCH" 2>/dev/null || true
+    echo "✓ Deleted branch: $BRANCH"
+  else
+    echo "✓ Kept branch: $BRANCH (push it or delete with: git branch -D $BRANCH)"
+  fi
+fi
+
+remove_slot_registry "$AGENT_ID"
+
+echo "✓ Agent ${AGENT_ID} torn down"