@zeroxyz/cli 1.6.0 → 1.8.0

package/README.md

@@ -4,17 +4,26 @@ The `zero` CLI lets AI agents discover, call, and review capabilities indexed by
 
 ## Install
 
-The recommended way to install and initialize Zero skill and hooks is via Agent Plugins — see the Zero agent plugin at [github.com/officialzeroxyz/zero-plugins](https://github.com/officialzeroxyz/zero-plugins). The npm package installs just the CLI:
+The npm package is the bootstrap and manual CLI. Agent sessions should run through
+the Zero plugin's managed runner, which auto-updates at `~/.zero/runtime/bin/zero`.
 
 ```bash
 npm install -g @zeroxyz/cli
+zero init
+zero auth login
 ```
 
+`zero init` installs the Zero plugin through supported harness CLIs when they are
+callable from the current shell (`codex`, `claude`, `gemini`, `openclaw`). If no
+plugin install succeeds, it falls back to the standalone skill/hook install under
+`~/.claude` and `~/.agents`, with hooks registered in `~/.claude/settings.json`
+and `~/.codex/hooks.json`.
+
 ## Breaking changes
 
 ### 1.0.0
 
-- **`zero init` no longer does anything.** It used to generate a local wallet and copy skills/hooks into your agent tools; it now just prints a pointer to the [Zero agent plugin](https://github.com/officialzeroxyz/zero-plugins). The bundled skill is no longer shipped in this package — fetch it from [zero.xyz/SKILL.md](https://zero.xyz/SKILL.md) for a manual install. `zero uninstall` still removes anything a pre-1.0 `zero init` left behind.
+- **`zero init` no longer creates a local wallet.** It installs the Zero plugin when possible and otherwise writes the standalone skill/hooks. `zero uninstall` removes the standalone files; host plugin installs are managed by their harnesses.
 - **`zero welcome` was removed.** The welcome bonus is claimed by signing in (`zero auth login`).
 - **The legacy `privateKey` field in `~/.zero/config.json` is no longer an identity and never pays.** Wallets created by a pre-1.0 `zero init` stop signing requests and payments. Pick one of:
   - **Recommended:** sign in and sweep the old wallet's funds into your managed Zero wallet:
@@ -53,6 +62,19 @@ zero review <runId> --success --accuracy 5 --value 4 --reliability 5
 
 ## Commands
 
+### `zero init`
+
+Bootstrap Zero for agent harnesses.
+
+```bash
+zero init                         # target every supported agent
+zero init --agent codex           # only Codex
+zero init --agent claude,codex    # comma-separated or repeat --agent
+zero init --agent standalone      # only standalone skills + Claude/Codex hooks
+zero init --no-fallback           # fail instead of writing standalone fallback
+zero init --dry-run               # preview actions
+```
+
 ### `zero auth`
 
 Sign in and out of Zero. Signing in provisions a managed Zero wallet that signs your payments.

package/dist/index.js

@@ -52631,12 +52631,12 @@ var require_array = __commonJS({
       if (Array.isArray(values)) {
         arrayValues = values;
       } else if (values && typeof values === "object") {
-        let unique = {};
+        let unique2 = {};
         arrayValues = coders.map((coder) => {
           const name = coder.localName;
           (0, index_js_1.assert)(name, "cannot encode object for signature with missing names", "INVALID_ARGUMENT", { argument: "values", info: { coder }, value: values });
-          (0, index_js_1.assert)(!unique[name], "cannot encode object for signature with duplicate names", "INVALID_ARGUMENT", { argument: "values", info: { coder }, value: values });
-          unique[name] = true;
+          (0, index_js_1.assert)(!unique2[name], "cannot encode object for signature with duplicate names", "INVALID_ARGUMENT", { argument: "values", info: { coder }, value: values });
+          unique2[name] = true;
           return values[name];
         });
       } else {
@@ -55096,10 +55096,10 @@ var require_dist = __commonJS({
                 }
               }
               check_fenced(norm);
-              let unique = Array_from(new Set(chars));
-              let [g2] = determine_group(unique);
+              let unique2 = Array_from(new Set(chars));
+              let [g2] = determine_group(unique2);
               check_group(g2, chars);
-              check_whole(g2, unique);
+              check_whole(g2, unique2);
               type2 = g2.N;
             }
           }
@@ -55110,10 +55110,10 @@ var require_dist = __commonJS({
         return info;
       });
     }
-    function check_whole(group, unique) {
+    function check_whole(group, unique2) {
       let maker;
       let shared = [];
-      for (let cp of unique) {
+      for (let cp of unique2) {
         let whole = WHOLE_MAP.get(cp);
         if (whole === UNIQUE_PH) return;
         if (whole) {
@@ -55132,9 +55132,9 @@ var require_dist = __commonJS({
         }
       }
     }
-    function determine_group(unique) {
+    function determine_group(unique2) {
       let groups = GROUPS;
-      for (let cp of unique) {
+      for (let cp of unique2) {
         let gs = groups.filter((g2) => group_has_cp(g2, cp));
         if (!gs.length) {
           if (!GROUPS.some((g2) => group_has_cp(g2, cp))) {
@@ -76582,7 +76582,7 @@ init_esm_shims();
 
 // package.json
 var package_default = {
-  version: "1.6.0"};
+  version: "1.8.0"};
 
 // src/app.ts
 init_esm_shims();
@@ -77590,7 +77590,7 @@ init_esm_shims();
 // ../sdk/dist/index.js
 init_esm_shims();
 
-// ../sdk/dist/chunk-RY3VFSIE.js
+// ../sdk/dist/chunk-W7JBWVWW.js
 init_esm_shims();
 
 // ../../node_modules/.pnpm/viem@2.52.2_bufferutil@4.1.0_typescript@5.9.3_utf-8-validate@6.0.6_zod@4.3.6/node_modules/viem/_esm/index.js
@@ -143081,6 +143081,76 @@ var ZeroConfigurationError = class extends ZeroError {
     this.name = "ZeroConfigurationError";
   }
 };
+var asSchemaNode = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : null;
+var extractInputEnvelope = (bodySchema, method) => {
+  const root = asSchemaNode(bodySchema);
+  if (!root) return {};
+  const props = asSchemaNode(root.properties);
+  if (!props) return {};
+  const inputProps = asSchemaNode(asSchemaNode(props.input)?.properties);
+  if (inputProps) {
+    return {
+      queryParams: asSchemaNode(inputProps.queryParams) ?? void 0,
+      body: asSchemaNode(inputProps.body) ?? void 0
+    };
+  }
+  const upperMethod = method.toUpperCase();
+  const isGetLike = upperMethod === "GET" || upperMethod === "DELETE";
+  return isGetLike ? { queryParams: root } : { body: root };
+};
+var unwrapTransportEnvelope = (request22) => {
+  const input = asSchemaNode(asSchemaNode(request22)?.input);
+  if (!input || input.type !== "http") return request22;
+  const body = input.body;
+  const hasBody = body !== void 0 && body !== null && !(typeof body === "object" && Object.keys(body).length === 0);
+  if (hasBody) return body;
+  const qp = asSchemaNode(input.queryParams);
+  if (qp && Object.keys(qp).length > 0) return qp;
+  return null;
+};
+var GET_LIKE = /* @__PURE__ */ new Set(["GET", "HEAD", "DELETE"]);
+var appendQueryParams = (url4, params) => {
+  const entries = Object.entries(params).filter(([, v]) => v != null);
+  if (entries.length === 0) return url4;
+  try {
+    const u2 = new URL(url4);
+    for (const [k3, v] of entries) u2.searchParams.set(k3, String(v));
+    return u2.toString();
+  } catch {
+    const qs = entries.map(
+      ([k3, v]) => `${encodeURIComponent(k3)}=${encodeURIComponent(String(v))}`
+    ).join("&");
+    return url4.includes("?") ? `${url4}&${qs}` : `${url4}?${qs}`;
+  }
+};
+var normalizeTransportEnvelopeRequest = (url4, opts) => {
+  const { method, body } = opts;
+  if (typeof body !== "string") return { url: url4, method, body };
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return { url: url4, method, body };
+  }
+  const input = asSchemaNode(asSchemaNode(parsed)?.input);
+  if (!input || input.type !== "http") return { url: url4, method, body };
+  const innerBody = input.body;
+  const hasInnerBody = innerBody !== void 0 && innerBody !== null && !(typeof innerBody === "object" && Object.keys(innerBody).length === 0);
+  const verb = (method ?? (typeof input.method === "string" ? input.method : void 0) ?? (hasInnerBody ? "POST" : "GET")).toUpperCase();
+  if (GET_LIKE.has(verb)) {
+    const qp = asSchemaNode(input.queryParams);
+    return {
+      url: qp ? appendQueryParams(url4, qp) : url4,
+      method: verb,
+      body: void 0
+    };
+  }
+  return {
+    url: url4,
+    method: verb,
+    body: hasInnerBody ? JSON.stringify(innerBody) : void 0
+  };
+};
 var KNOWN_EIP712_DOMAINS = {
   // Base mainnet USDC. On-chain `name()` is "USD Coin" (NOT "USDC")
   // — verified via the contract's name() / version().
@@ -144092,7 +144162,7 @@ var Payments = class {
   };
 };
 var package_default2 = {
-  version: "0.5.0"
+  version: "0.6.0"
 };
 var SDK_VERSION2 = package_default2.version;
 var userWalletDtoSchema = external_exports3.object({
@@ -144807,6 +144877,30 @@ var listRunsResponseSchema = external_exports3.object({
   runs: external_exports3.array(runListItemSchema),
   nextCursor: external_exports3.string().nullable()
 });
+var runDetailSchema = external_exports3.object({
+  runId: external_exports3.string(),
+  status: external_exports3.number().nullable(),
+  latencyMs: external_exports3.number().nullable(),
+  errorClass: external_exports3.string().nullable(),
+  createdAt: external_exports3.coerce.date(),
+  cost: external_exports3.object({ amount: external_exports3.string(), asset: external_exports3.string().nullable() }).nullable(),
+  payment: external_exports3.object({
+    protocol: external_exports3.string(),
+    chain: external_exports3.string().nullable(),
+    txHash: external_exports3.string().nullable(),
+    mode: external_exports3.string().nullable()
+  }).nullable(),
+  capability: external_exports3.object({
+    uid: external_exports3.string(),
+    slug: external_exports3.string(),
+    name: external_exports3.string(),
+    url: external_exports3.string(),
+    method: external_exports3.string(),
+    whatItDoes: external_exports3.string().nullable(),
+    tags: external_exports3.array(external_exports3.string())
+  }),
+  reviewed: external_exports3.boolean()
+});
 var createReviewResponseSchema = external_exports3.object({
   reviewId: external_exports3.string(),
   recorded: external_exports3.boolean(),
@@ -144886,6 +144980,15 @@ var Runs = class {
       listRunsResponseSchema
     );
   };
+  get = (runId, opts = {}) => request2(
+    this.client,
+    {
+      method: "GET",
+      path: `/v1/runs/${runId}`,
+      signal: opts.signal
+    },
+    runDetailSchema
+  );
   review = (input, opts = {}) => request2(
     this.client,
     {
@@ -145410,17 +145513,23 @@ var withDefaultContentType = (headers, body) => {
 var clientFetch = async (client, url4, opts = {}) => {
   const startedAt = Date.now();
   const capabilityIdRequested = opts.capabilityId !== void 0;
-  const method = opts.method ?? (opts.body !== void 0 ? "POST" : "GET");
+  const normalized = normalizeTransportEnvelopeRequest(url4, {
+    method: opts.method,
+    body: opts.body
+  });
+  const requestUrl = normalized.url;
+  const requestBody = normalized.body;
+  const method = normalized.method ?? (requestBody !== void 0 ? "POST" : "GET");
   const { canRecord: canRecordForResolve } = resolveRecordingClient(
     client,
     opts
   );
-  const resolvePromise = !capabilityIdRequested && canRecordForResolve ? client.capabilities.resolveByUrl(redactUrl2(url4), method).catch(() => null) : Promise.resolve(null);
-  const probeHeaders = withDefaultContentType(opts.headers, opts.body);
+  const resolvePromise = !capabilityIdRequested && canRecordForResolve ? client.capabilities.resolveByUrl(redactUrl2(requestUrl), method).catch(() => null) : Promise.resolve(null);
+  const probeHeaders = withDefaultContentType(opts.headers, requestBody);
   const requestInit = {
     method,
     headers: probeHeaders,
-    body: opts.body,
+    body: requestBody,
     signal: opts.signal
   };
   const configuredFetch = buildConfiguredFetch(client, {
@@ -145431,7 +145540,7 @@ var clientFetch = async (client, url4, opts = {}) => {
   const skipReasons = [];
   const warnings = [];
   try {
-    response = await configuredFetch(url4, requestInit);
+    response = await configuredFetch(requestUrl, requestInit);
   } catch (err) {
     if (err instanceof ZeroTimeoutError) {
       await recordTimeoutRun(
@@ -145461,13 +145570,13 @@ var clientFetch = async (client, url4, opts = {}) => {
       const payCall = requirement.protocol === "x402" ? client.payments.pay : client.payments.payMpp;
       try {
         const paid = await payCall({
-          url: url4,
+          url: requestUrl,
           method,
           // Fresh clone for the paid retry — same rationale as
           // the probe-side clone above. Re-derives the default
           // Content-Type so the paid leg matches the probe.
-          headers: withDefaultContentType(opts.headers, opts.body),
-          body: opts.body,
+          headers: withDefaultContentType(opts.headers, requestBody),
+          body: requestBody,
           maxPay: opts.maxPay,
           account: opts.account,
           signal: opts.signal,
@@ -145724,6 +145833,9 @@ var searchResultSchema = external_exports3.object({
   cost: external_exports3.object({ amount: external_exports3.string(), asset: external_exports3.string() }),
   reviewCount: external_exports3.number().optional(),
   rating: ratingSchema,
+  // All-time activation count (non-deleted runs), mirroring capabilities.ts.
+  // Optional so a response from an older API deploy still parses (ZERO-385).
+  activationCount: external_exports3.number().optional(),
   availabilityStatus: external_exports3.enum(["healthy", "unknown", "down"]).nullable().optional(),
   /**
    * @deprecated The API no longer emits `displayStatus`; it has been replaced
@@ -146645,7 +146757,7 @@ var fetchCommand = (appContext) => new Command("fetch").description(
         headers["content-type"] = Buffer.isBuffer(resolvedBody) ? sniffJsonShape(resolvedBody) ? "application/json" : "application/octet-stream" : "application/json";
       }
       const log2 = (msg) => console.error(`  ${msg}`);
-      const method = options.method ? options.method.toUpperCase() : resolvedMethodFromCapability && !resolvedBody ? resolvedMethodFromCapability.toUpperCase() : resolvedBody ? "POST" : "GET";
+      const method = options.method ? options.method.toUpperCase() : resolvedMethodFromCapability ? resolvedMethodFromCapability.toUpperCase() : resolvedBody ? "POST" : "GET";
       const explicitCapabilityCtx = options.capability ? stateService.findSearchContextByCapability(options.capability) : null;
       const urlCtx = stateService.findSearchContextByUrl(resolvedUrl, {
         matchTemplate: (template) => {
@@ -147137,22 +147249,6 @@ var sampleValueFor = (fieldName, propSchema, depth = 0) => {
   }
 };
 var placeholderFor = (fieldName, propSchema) => String(sampleValueFor(fieldName, propSchema));
-var extractInputEnvelope = (bodySchema, method) => {
-  const root = asNode(bodySchema);
-  if (!root) return {};
-  const props = asNode(root.properties);
-  if (!props) return {};
-  const inputProps = asNode(asNode(props.input)?.properties);
-  if (inputProps) {
-    return {
-      queryParams: asNode(inputProps.queryParams) ?? void 0,
-      body: asNode(inputProps.body) ?? void 0
-    };
-  }
-  const upperMethod = method.toUpperCase();
-  const isGetLike = upperMethod === "GET" || upperMethod === "DELETE";
-  return isGetLike ? { queryParams: root } : { body: root };
-};
 var schemaTypeLabel = (node) => {
   const t = node.type;
   if (typeof t === "string") return t;
@@ -147291,16 +147387,6 @@ var buildResponseSection = (capability) => {
   }
   return [];
 };
-var unwrapTransportEnvelope = (req) => {
-  const input = asNode(asNode(req)?.input);
-  if (!input || input.type !== "http") return req;
-  const body = input.body;
-  const hasBody = body !== void 0 && body !== null && !(typeof body === "object" && Object.keys(body).length === 0);
-  if (hasBody) return body;
-  const qp = asNode(input.queryParams);
-  if (qp && Object.keys(qp).length > 0) return qp;
-  return null;
-};
 var buildVerifiedExampleSection = (capability) => {
   const req = capability.example?.request;
   if (req === void 0 || req === null) return [];
@@ -147508,9 +147594,251 @@ var sectionDivider = () => {
   console.log("");
 };
 
+// src/util/json-config-file.ts
+init_esm_shims();
+var updateJsonConfigFile = (path3, update2, options = {}) => {
+  let config2 = {};
+  if (existsSync(path3)) {
+    try {
+      config2 = JSON.parse(readFileSync(path3, "utf-8"));
+    } catch {
+      return { status: "unparseable", path: path3 };
+    }
+  } else if (!options.createIfMissing) {
+    return { status: "missing", path: path3 };
+  }
+  const changed = update2(config2);
+  if (!changed) return { status: "unchanged", path: path3 };
+  mkdirSync(dirname(path3), { recursive: true });
+  writeFileSync(path3, `${JSON.stringify(config2, null, 2)}
+`);
+  return { status: "updated", path: path3 };
+};
+
 // src/commands/init-command.ts
 var SKILL_DIRS = [".claude/skills", ".agents/skills"];
 var ZERO_SANDBOX_DOMAIN = "*.zero.xyz";
+var CLAUDE_SETTINGS_PATH = ".claude/settings.json";
+var CODEX_HOOKS_PATH = ".codex/hooks.json";
+var PLUGIN_AGENTS = ["codex", "claude", "gemini", "openclaw"];
+var INIT_AGENTS = [...PLUGIN_AGENTS, "standalone"];
+var initAgentSchema = zod_default.enum(INIT_AGENTS);
+var HARNESS_SPECS = {
+  claude: {
+    agent: "claude",
+    displayName: "Claude Code",
+    executable: "claude",
+    installCommands: [
+      {
+        label: "add marketplace",
+        command: "claude",
+        args: ["plugin", "marketplace", "add", "officialzeroxyz/zero-plugins"],
+        required: false
+      },
+      {
+        label: "install plugin",
+        command: "claude",
+        args: ["plugin", "install", "zero@zero-plugins"]
+      }
+    ],
+    manualInstructions: [
+      "Claude Code Desktop: open the Code tab, choose Customize, then add a Personal plugin marketplace from officialzeroxyz/zero-plugins.",
+      "After it syncs, click the + icon on the Zero plugin, then start a new session and ask Claude to help set up and test Zero."
+    ]
+  },
+  codex: {
+    agent: "codex",
+    displayName: "Codex",
+    executable: "codex",
+    installCommands: [
+      {
+        label: "add marketplace",
+        command: "codex",
+        args: ["plugin", "marketplace", "add", "officialzeroxyz/zero-plugins"],
+        required: false
+      },
+      {
+        label: "install plugin",
+        command: "codex",
+        args: ["plugin", "add", "zero@zero-plugins"]
+      }
+    ],
+    manualInstructions: [
+      "Codex app: open Plugins in the sidebar, click +, then add marketplace officialzeroxyz/zero-plugins.",
+      "Select the Zero filter, click Add plugin on Zero, then start a new chat and ask Codex to help set up and test Zero."
+    ]
+  },
+  gemini: {
+    agent: "gemini",
+    displayName: "Gemini CLI",
+    executable: "gemini",
+    installCommands: [
+      {
+        label: "install extension",
+        command: "gemini",
+        args: [
+          "extensions",
+          "install",
+          "https://github.com/officialzeroxyz/zero-plugins",
+          "--auto-update"
+        ]
+      }
+    ],
+    manualInstructions: [
+      "Gemini CLI: run this from a shell where `gemini` is on PATH: gemini extensions install https://github.com/officialzeroxyz/zero-plugins --auto-update"
+    ]
+  },
+  openclaw: {
+    agent: "openclaw",
+    displayName: "OpenClaw",
+    executable: "openclaw",
+    installCommands: [
+      {
+        label: "install plugin",
+        command: "openclaw",
+        args: [
+          "plugins",
+          "install",
+          "zero",
+          "--marketplace",
+          "officialzeroxyz/zero-plugins"
+        ]
+      }
+    ],
+    manualInstructions: [
+      "OpenClaw: run this from a shell where `openclaw` is on PATH: openclaw plugins install zero --marketplace officialzeroxyz/zero-plugins"
+    ]
+  }
+};
+var unique = (items) => [...new Set(items)];
+var parseAgentValues = (values) => {
+  if (!values || values.length === 0) {
+    return {
+      kind: "default",
+      requestedAgents: [...PLUGIN_AGENTS],
+      pluginAgents: [...PLUGIN_AGENTS]
+    };
+  }
+  const parsed = unique(
+    values.flatMap(
+      (value) => value.split(",").map((part) => part.trim().toLowerCase()).filter(Boolean)
+    )
+  );
+  if (parsed.length === 0) {
+    throw new Error("Pass at least one agent name to --agent");
+  }
+  const agents = parsed.map((value) => {
+    const result = initAgentSchema.safeParse(value);
+    if (!result.success) {
+      throw new Error(
+        `Unknown agent "${value}". Expected one of: ${INIT_AGENTS.join(", ")}`
+      );
+    }
+    return result.data;
+  });
+  if (agents.includes("standalone") && agents.length > 1) {
+    throw new Error(
+      "`standalone` cannot be combined with other --agent values; run it separately."
+    );
+  }
+  if (agents[0] === "standalone") {
+    return { kind: "standalone", requestedAgents: agents, pluginAgents: [] };
+  }
+  return {
+    kind: "specific",
+    requestedAgents: agents,
+    pluginAgents: agents
+  };
+};
+var collectAgentOption = (value, previous = []) => [
+  ...previous,
+  value
+];
+var commandSummary = (command, args) => [command, ...args].join(" ");
+var commandOutput = (result) => {
+  const chunks = [result.stderr, result.stdout].map((chunk) => typeof chunk === "string" ? chunk.trim() : "").filter(Boolean);
+  return chunks.join("\n").trim();
+};
+var commandErrorDetail = (result, fallback2) => {
+  if (result.error) return result.error.message;
+  const output = commandOutput(result);
+  if (output.length > 0) return truncateError(output);
+  if (result.signal) return `${fallback2} exited via signal ${result.signal}`;
+  return `${fallback2} exited with status ${result.status ?? "unknown"}`;
+};
+var isCommandCallable = (command) => {
+  if (process.platform === "win32") {
+    const result2 = spawnSync("where.exe", [command], {
+      encoding: "utf8",
+      stdio: "ignore"
+    });
+    return result2.status === 0;
+  }
+  const result = spawnSync("/bin/sh", ["-c", `command -v ${command}`], {
+    encoding: "utf8",
+    stdio: "ignore"
+  });
+  return result.status === 0;
+};
+var installHarnessPlugin = (spec, options) => {
+  if (options.dryRun) {
+    for (const step of spec.installCommands) {
+      stepInfo(`would run: ${commandSummary(step.command, step.args)}`);
+    }
+    return {
+      agent: spec.agent,
+      displayName: spec.displayName,
+      status: "would_install",
+      detail: "dry run"
+    };
+  }
+  let optionalFailure;
+  for (const step of spec.installCommands) {
+    if (options.verbose) {
+      stepInfo(`running: ${commandSummary(step.command, step.args)}`);
+    }
+    const result = spawnSync(step.command, step.args, {
+      encoding: "utf8",
+      stdio: "pipe",
+      env: process.env
+    });
+    if (result.status === 0) continue;
+    const detail = commandErrorDetail(result, step.label);
+    if (step.required === false) {
+      optionalFailure = `${step.label}: ${detail}`;
+      if (options.verbose) stepInfo(`${optionalFailure}; continuing`);
+      continue;
+    }
+    return {
+      agent: spec.agent,
+      displayName: spec.displayName,
+      status: "failed",
+      detail
+    };
+  }
+  return {
+    agent: spec.agent,
+    displayName: spec.displayName,
+    status: "installed",
+    detail: optionalFailure ? `installed; ignored ${optionalFailure}` : void 0
+  };
+};
+var printManualInstructions = (spec) => {
+  for (const line of spec.manualInstructions) {
+    console.log(`      ${color.gray("\xB7")} ${color.dim(line)}`);
+  }
+};
+var fallbackReason = (selection, detectedAgents, results) => {
+  if (selection.kind === "standalone")
+    return "--agent standalone was requested";
+  if (selection.kind === "default" && detectedAgents.length === 0) {
+    return "no supported harness CLIs were callable in this shell";
+  }
+  if (results.every((result) => result.status === "skipped_unavailable")) {
+    return "no requested harness CLIs were callable in this shell";
+  }
+  return "no plugin install succeeded";
+};
 var PLUGIN_HOOKS_ROOT = "${CLAUDE_PLUGIN_ROOT}/hooks";
 var SCRIPT_NAME_PATTERN = /\$\{CLAUDE_PLUGIN_ROOT\}\/hooks\/([a-z0-9][a-z0-9-]*\.sh)/;
 var fetchText = async (url4) => {
@@ -147575,59 +147903,7 @@ var installHookScripts = async (home, hooksJson, webBase, verbose) => {
     })
   );
 };
-var registerHooksInClaudeSettings = (home, hooksJson, verbose) => {
-  const hooksDir = join(home, ".zero", "hooks");
-  const settingsPath = join(home, ".claude", "settings.json");
-  let settings = {};
-  if (existsSync(settingsPath)) {
-    try {
-      settings = JSON.parse(readFileSync(settingsPath, "utf-8"));
-    } catch {
-      stepWarn(
-        "Hooks not registered",
-        `${settingsPath} is not valid JSON \u2014 fix it and re-run \`zero init\``
-      );
-      return false;
-    }
-  }
-  if (!settings.hooks || typeof settings.hooks !== "object") {
-    settings.hooks = {};
-  }
-  const hooks = settings.hooks;
-  for (const [event, entries] of Object.entries(hooksJson.hooks)) {
-    for (const entry of entries ?? []) {
-      const scripts = entryScriptNames(entry);
-      if (scripts.length === 0) {
-        if (verbose) {
-          stepInfo(`${event}: entry has no plugin hook script \u2014 skipped`);
-        }
-        continue;
-      }
-      const rewritten = {
-        ...entry,
-        hooks: (entry.hooks ?? []).map((hook) => ({
-          ...hook,
-          command: typeof hook.command === "string" ? hook.command.replaceAll(PLUGIN_HOOKS_ROOT, hooksDir) : hook.command
-        }))
-      };
-      if (!Array.isArray(hooks[event])) hooks[event] = [];
-      const list2 = hooks[event];
-      const existingIdx = list2.findIndex((existing) => {
-        const existingHooks = existing?.hooks;
-        if (!Array.isArray(existingHooks)) return false;
-        return existingHooks.some(
-          (h2) => typeof h2.command === "string" && scripts.some((s) => h2.command.includes(s))
-        );
-      });
-      if (existingIdx >= 0) {
-        list2[existingIdx] = rewritten;
-        if (verbose) stepInfo(`${event}: ${scripts.join(", ")} entry replaced`);
-      } else {
-        list2.push(rewritten);
-        if (verbose) stepInfo(`${event}: ${scripts.join(", ")} entry appended`);
-      }
-    }
-  }
+var ensureZeroSandboxAllowlist = (settings, verbose) => {
   if (!settings.sandbox || typeof settings.sandbox !== "object") {
     settings.sandbox = {};
   }
@@ -147646,86 +147922,326 @@ var registerHooksInClaudeSettings = (home, hooksJson, verbose) => {
       stepInfo(`sandbox.network.allowedDomains += ${ZERO_SANDBOX_DOMAIN}`);
     }
   }
-  mkdirSync(join(home, ".claude"), { recursive: true });
-  writeFileSync(settingsPath, `${JSON.stringify(settings, null, 2)}
-`);
+};
+var registerHooksInJsonFile = (home, hooksJson, target, verbose) => {
+  const hooksDir = join(home, ".zero", "hooks");
+  const configPath = join(home, target.relativePath);
+  const result = updateJsonConfigFile(
+    configPath,
+    (config2) => {
+      if (!config2.hooks || typeof config2.hooks !== "object") {
+        config2.hooks = {};
+      }
+      const hooks = config2.hooks;
+      for (const [event, entries] of Object.entries(hooksJson.hooks)) {
+        for (const entry of entries ?? []) {
+          const scripts = entryScriptNames(entry);
+          if (scripts.length === 0) {
+            if (verbose) {
+              stepInfo(`${event}: entry has no plugin hook script \u2014 skipped`);
+            }
+            continue;
+          }
+          const rewritten = {
+            ...entry,
+            hooks: (entry.hooks ?? []).map((hook) => ({
+              ...hook,
+              command: typeof hook.command === "string" ? hook.command.replaceAll(PLUGIN_HOOKS_ROOT, hooksDir) : hook.command
+            }))
+          };
+          if (!Array.isArray(hooks[event])) hooks[event] = [];
+          const list2 = hooks[event];
+          const existingIdx = list2.findIndex((existing) => {
+            const existingHooks = existing?.hooks;
+            if (!Array.isArray(existingHooks)) return false;
+            return existingHooks.some(
+              (h2) => typeof h2.command === "string" && scripts.some((s) => h2.command.includes(s))
+            );
+          });
+          if (existingIdx >= 0) {
+            list2[existingIdx] = rewritten;
+            if (verbose) {
+              stepInfo(`${event}: ${scripts.join(", ")} entry replaced`);
+            }
+          } else {
+            list2.push(rewritten);
+            if (verbose) {
+              stepInfo(`${event}: ${scripts.join(", ")} entry appended`);
+            }
+          }
+        }
+      }
+      if (target.includeSandboxAllowlist) {
+        ensureZeroSandboxAllowlist(config2, verbose);
+      }
+      return true;
+    },
+    { createIfMissing: true }
+  );
+  if (result.status === "unparseable") {
+    stepWarn(
+      "Hooks not registered",
+      `${configPath} is not valid JSON \u2014 fix it and re-run \`zero init\``
+    );
+    return false;
+  }
   return true;
 };
+var runStandaloneInit = async (appContext, options = {}) => {
+  const verbose = options.verbose ?? false;
+  options.onStep?.("fetch");
+  console.log("");
+  console.log(`  ${color.boldCyan("Installing standalone Zero fallback")}`);
+  console.log("");
+  console.log(color.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log("");
+  const home = homedir();
+  const webBase = appContext.env.ZERO_WEB_URL;
+  const [skillMd, hooksJsonRaw] = await Promise.all([
+    fetchText(`${webBase}/SKILL.md`),
+    fetchText(`${webBase}/hooks.json`)
+  ]);
+  let hooksJson;
+  try {
+    hooksJson = JSON.parse(hooksJsonRaw);
+  } catch {
+    throw new Error(`${webBase}/hooks.json is not valid JSON`);
+  }
+  if (!hooksJson?.hooks || typeof hooksJson.hooks !== "object") {
+    throw new Error(`${webBase}/hooks.json has no "hooks" object`);
+  }
+  if (verbose) {
+    stepInfo(`fetched ${webBase}/SKILL.md and ${webBase}/hooks.json`);
+  }
+  options.onStep?.("skill");
+  const skillsDirs = unique([
+    ...SKILL_DIRS.map((dir) => join(home, dir)),
+    ...(options.skillsDir ?? []).map((dir) => expandHome(dir, home))
+  ]);
+  const skillsInstalled = installSkill(skillsDirs, skillMd, verbose);
+  if (skillsInstalled.length === 0) {
+    throw new Error("could not write the Zero skill to any skills directory");
+  }
+  stepSuccess("Skill installed", `${skillsInstalled.length} locations`);
+  options.onStep?.("hooks");
+  const hookScriptsInstalled = await installHookScripts(
+    home,
+    hooksJson,
+    webBase,
+    verbose
+  );
+  stepSuccess("Hook scripts installed", "~/.zero/hooks");
+  options.onStep?.("settings");
+  const settingsRegistered = registerHooksInJsonFile(
+    home,
+    hooksJson,
+    {
+      relativePath: CLAUDE_SETTINGS_PATH,
+      includeSandboxAllowlist: true
+    },
+    verbose
+  );
+  if (settingsRegistered) {
+    stepSuccess("Hooks registered", "~/.claude/settings.json");
+  }
+  const codexHooksRegistered = registerHooksInJsonFile(
+    home,
+    hooksJson,
+    {
+      relativePath: CODEX_HOOKS_PATH,
+      includeSandboxAllowlist: false
+    },
+    verbose
+  );
+  if (codexHooksRegistered) {
+    stepSuccess("Codex hooks registered", "~/.codex/hooks.json");
+  }
+  return {
+    skillsInstalled,
+    hookScriptsInstalled,
+    settingsRegistered,
+    codexHooksRegistered
+  };
+};
+var statusLabel = (result) => {
+  switch (result.status) {
+    case "installed":
+      return "plugin installed";
+    case "skipped_unavailable":
+      return "skipped unavailable";
+    case "failed":
+      return "failed";
+    case "would_install":
+      return "would install";
+  }
+};
+var printRunnerModelNote = () => {
+  console.log(
+    `  ${color.dim("Agent sessions use the auto-updated managed runner at ~/.zero/runtime/bin/zero.")}`
+  );
+  console.log(
+    `  ${color.dim("The global npm `zero` is the bootstrap and manual CLI; it does not replace the managed runner.")}`
+  );
+};
 var runInit = async (appContext, options = {}) => {
   const verbose = options.verbose ?? false;
+  const dryRun = options.dryRun ?? false;
+  const fallbackAllowed = options.fallback ?? true;
+  const selection = parseAgentValues(options.agent);
+  const requestedAgents = selection.requestedAgents;
+  let currentStep = "plugins";
   appContext.services.analyticsService.capture("init_started", {});
-  let currentStep = "fetch";
   try {
     console.log("");
-    console.log(`  ${color.boldCyan("Installing Zero")}`);
+    console.log(`  ${color.boldCyan("Initializing Zero")}`);
     console.log("");
     console.log(color.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
     console.log("");
-    const home = homedir();
-    const webBase = appContext.env.ZERO_WEB_URL;
-    const [skillMd, hooksJsonRaw] = await Promise.all([
-      fetchText(`${webBase}/SKILL.md`),
-      fetchText(`${webBase}/hooks.json`)
-    ]);
-    let hooksJson;
-    try {
-      hooksJson = JSON.parse(hooksJsonRaw);
-    } catch {
-      throw new Error(`${webBase}/hooks.json is not valid JSON`);
-    }
-    if (!hooksJson?.hooks || typeof hooksJson.hooks !== "object") {
-      throw new Error(`${webBase}/hooks.json has no "hooks" object`);
-    }
-    if (verbose) {
-      stepInfo(`fetched ${webBase}/SKILL.md and ${webBase}/hooks.json`);
+    console.log(`  Requested agents: ${requestedAgents.join(", ")}`);
+    if (dryRun) stepInfo("dry run: no plugin commands or file writes will run");
+    const detectedAgents = selection.kind === "standalone" ? [] : selection.pluginAgents.filter(
+      (agent) => isCommandCallable(HARNESS_SPECS[agent].executable)
+    );
+    if (selection.kind === "default") {
+      console.log(
+        `  Detected callable harnesses: ${detectedAgents.length > 0 ? detectedAgents.join(", ") : "none"}`
+      );
     }
-    currentStep = "skill";
-    const skillsDirs = [
-      .../* @__PURE__ */ new Set([
-        ...SKILL_DIRS.map((dir) => join(home, dir)),
-        ...(options.skillsDir ?? []).map((dir) => expandHome(dir, home))
-      ])
-    ];
-    const skillsInstalled = installSkill(skillsDirs, skillMd, verbose);
-    if (skillsInstalled.length === 0) {
-      throw new Error("could not write the Zero skill to any skills directory");
+    console.log("");
+    const pluginResults = [];
+    if (selection.kind !== "standalone") {
+      for (const agent of selection.pluginAgents) {
+        const spec = HARNESS_SPECS[agent];
+        if (!detectedAgents.includes(agent)) {
+          const result2 = {
+            agent,
+            displayName: spec.displayName,
+            status: "skipped_unavailable",
+            detail: `\`${spec.executable}\` is not callable in this shell`
+          };
+          pluginResults.push(result2);
+          stepSkip(
+            `${spec.displayName}: ${statusLabel(result2)}`,
+            result2.detail
+          );
+          if (selection.kind === "specific") {
+            printManualInstructions(spec);
+          }
+          continue;
+        }
+        const result = installHarnessPlugin(spec, { dryRun, verbose });
+        pluginResults.push(result);
+        if (result.status === "installed") {
+          stepSuccess(
+            `${spec.displayName}: ${statusLabel(result)}`,
+            result.detail
+          );
+        } else if (result.status === "would_install") {
+          stepSkip(
+            `${spec.displayName}: ${statusLabel(result)}`,
+            result.detail
+          );
+        } else {
+          stepWarn(
+            `${spec.displayName}: ${statusLabel(result)}`,
+            result.detail
+          );
+        }
+      }
     }
-    stepSuccess("Skill installed", `${skillsInstalled.length} locations`);
-    currentStep = "hooks";
-    const hookScriptsInstalled = await installHookScripts(
-      home,
-      hooksJson,
-      webBase,
-      verbose
-    );
-    stepSuccess("Hook scripts installed", "~/.zero/hooks");
-    currentStep = "settings";
-    const settingsRegistered = registerHooksInClaudeSettings(
-      home,
-      hooksJson,
-      verbose
+    const pluginSucceeded = pluginResults.some(
+      (result) => result.status === "installed" || result.status === "would_install"
     );
-    if (settingsRegistered) {
-      stepSuccess("Hooks registered", "~/.claude/settings.json");
+    let standaloneFallbackReason;
+    let standaloneFallbackUsed = false;
+    let standaloneResult = {
+      skillsInstalled: [],
+      hookScriptsInstalled: [],
+      settingsRegistered: false,
+      codexHooksRegistered: false
+    };
+    if (selection.kind === "standalone" || !pluginSucceeded) {
+      standaloneFallbackReason = fallbackReason(
+        selection,
+        detectedAgents,
+        pluginResults
+      );
+      if (!fallbackAllowed && selection.kind !== "standalone") {
+        throw new Error(
+          `No Zero plugin install succeeded and --no-fallback was set (${standaloneFallbackReason}).`
+        );
+      }
+      standaloneFallbackUsed = !dryRun;
+      sectionDivider();
+      const fallbackVerb = dryRun ? "would be used" : "used";
+      console.log(
+        `  Standalone fallback ${fallbackVerb}: ${standaloneFallbackReason}.`
+      );
+      if (dryRun) {
+        stepInfo("would install/update ~/.claude/skills/zero");
+        stepInfo("would install/update ~/.agents/skills/zero");
+        stepInfo(
+          "would register current standalone hooks in ~/.claude/settings.json and ~/.codex/hooks.json"
+        );
+      } else {
+        standaloneResult = await runStandaloneInit(appContext, {
+          verbose,
+          skillsDir: options.skillsDir,
+          onStep: (step) => {
+            currentStep = step;
+          }
+        });
+      }
+    } else {
+      sectionDivider();
+      console.log(
+        "  Standalone fallback not used: at least one harness plugin install succeeded."
+      );
     }
     currentStep = "complete";
     appContext.services.analyticsService.capture("init_completed", {
       // biome-ignore lint/style/useNamingConvention: snake_case for analytics
-      skills_installed: skillsInstalled,
+      requested_agents: requestedAgents,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      detected_harnesses: detectedAgents,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      plugin_installs: pluginResults.map((result) => ({
+        agent: result.agent,
+        status: result.status
+      })),
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      standalone_fallback_used: standaloneFallbackUsed,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      standalone_fallback_reason: standaloneFallbackReason,
       // biome-ignore lint/style/useNamingConvention: snake_case for analytics
-      skills_installed_count: skillsInstalled.length,
+      dry_run: dryRun,
       // biome-ignore lint/style/useNamingConvention: snake_case for analytics
-      hook_scripts_installed: hookScriptsInstalled,
+      skills_installed: standaloneResult.skillsInstalled,
       // biome-ignore lint/style/useNamingConvention: snake_case for analytics
-      settings_registered: settingsRegistered
+      skills_installed_count: standaloneResult.skillsInstalled.length,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      hook_scripts_installed: standaloneResult.hookScriptsInstalled,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      settings_registered: standaloneResult.settingsRegistered,
+      // biome-ignore lint/style/useNamingConvention: snake_case for analytics
+      codex_hooks_registered: standaloneResult.codexHooksRegistered
     });
     sectionDivider();
-    console.log(`  ${color.boldGreen("Zero is set up.")}`);
+    console.log(`  ${color.boldGreen("Zero init complete.")}`);
     console.log(
       `  ${color.dim("Next: sign in with `zero auth login` \u2014 it prints a URL to approve in your browser.")}`
     );
+    printRunnerModelNote();
     console.log("");
-    return { skillsInstalled, hookScriptsInstalled, settingsRegistered };
+    return {
+      ...standaloneResult,
+      requestedAgents,
+      detectedAgents,
+      pluginResults,
+      standaloneFallbackUsed,
+      standaloneFallbackReason,
+      dryRun
+    };
   } catch (err) {
     appContext.services.analyticsService.capture("init_failed", {
       step: currentStep,
@@ -147735,7 +148251,18 @@ var runInit = async (appContext, options = {}) => {
   }
 };
 var initCommand = (appContext) => new Command("init").description(
-  "Install the Zero skill and hooks for the agent harnesses on this machine"
+  "Install the Zero plugin for supported agents, with a standalone skill/hook fallback"
+).option(
+  "--agent <agent>",
+  "Agent target: codex, claude, gemini, openclaw, or standalone. Repeat or comma-separate values. Omit to target every supported agent.",
+  collectAgentOption,
+  []
+).option(
+  "--no-fallback",
+  "Do not install standalone skills/hooks if plugin install does not succeed"
+).option(
+  "--dry-run",
+  "Show what would be installed without running commands or writing files"
 ).option(
   "-v, --verbose",
   "Explain why each install step was taken or skipped"
@@ -148055,6 +148582,49 @@ var formatPayment = (payment) => {
   const mode = payment.mode ? ` (${payment.mode})` : "";
   return `${payment.protocol}${chain2}${mode}`;
 };
+var formatDetail = (r2) => {
+  const lines = [];
+  const when = r2.createdAt.toISOString().replace("T", " ").slice(0, 19);
+  lines.push(`Run:        ${r2.runId}`);
+  lines.push(`When:       ${when}`);
+  lines.push(`Status:     ${r2.status ?? "\u2014"}`);
+  lines.push(`Latency:    ${r2.latencyMs != null ? `${r2.latencyMs}ms` : "\u2014"}`);
+  lines.push(`Result:     ${r2.errorClass ?? "\u2014"}`);
+  lines.push(`Reviewed:   ${r2.reviewed ? "yes" : "no"}`);
+  lines.push("");
+  lines.push(`Capability: ${r2.capability.name} (${r2.capability.slug})`);
+  lines.push(`URL:        ${r2.capability.method} ${r2.capability.url}`);
+  if (r2.capability.whatItDoes)
+    lines.push(`What:       ${r2.capability.whatItDoes}`);
+  if (r2.capability.tags.length > 0)
+    lines.push(`Tags:       ${r2.capability.tags.join(", ")}`);
+  if (r2.cost) {
+    const { amount: amount2, asset } = r2.cost;
+    lines.push(`Cost:       ${asset ? `${amount2} ${asset}` : amount2}`);
+  }
+  if (r2.payment) {
+    const chain2 = r2.payment.chain ? `:${r2.payment.chain}` : "";
+    const mode = r2.payment.mode ? ` (${r2.payment.mode})` : "";
+    const tx = r2.payment.txHash ? `  tx=${r2.payment.txHash}` : "";
+    lines.push(`Payment:    ${r2.payment.protocol}${chain2}${mode}${tx}`);
+  }
+  return lines.join("\n");
+};
+var runsDetailCommand = (appContext) => new Command("detail").description("Show full metadata for a single run").argument("<runId>", "Run ID (run_\u2026)").option("--json", "Output raw JSON to stdout").action(async (runId, _opts, cmd) => {
+  const { json: json3 } = cmd.opts();
+  try {
+    const { client } = appContext.services;
+    const run = await client.runs.get(runId);
+    if (json3) {
+      console.log(JSON.stringify(run, null, 2));
+      return;
+    }
+    console.log(formatDetail(run));
+  } catch (err) {
+    console.error(err instanceof Error ? err.message : "Failed");
+    process.exitCode = 1;
+  }
+});
 var runsCommand = (appContext) => new Command("runs").description("List your recent capability runs").addHelpText(
   "after",
   `
@@ -148065,8 +148635,9 @@ Examples:
   zero runs                            # most recent runs
   zero runs --unreviewed               # filter to runs without a review
   zero runs --capability translate-en  # filter to one capability (uid or slug)
-  zero runs --json                     # full structured output for scripts`
-).option("--capability <id>", "Filter by capability uid or slug").option("--unreviewed", "Only show runs without a review").option(
+  zero runs --json                     # full structured output for scripts
+  zero runs detail <runId>             # full metadata for a single run`
+).addCommand(runsDetailCommand(appContext)).option("--capability <id>", "Filter by capability uid or slug").option("--unreviewed", "Only show runs without a review").option(
   "--limit <n>",
   "Max rows (1-100, default 25)",
   (v) => Number.parseInt(v, 10)
@@ -148308,6 +148879,8 @@ var HOOK_FILES = [
   "ensure-runner.sh"
 ];
 var ZERO_SANDBOX_DOMAIN2 = "*.zero.xyz";
+var CLAUDE_SETTINGS_PATH2 = ".claude/settings.json";
+var CODEX_HOOKS_PATH2 = ".codex/hooks.json";
 var LEGACY_SKILL_NAMES = ["zero"];
 var removeSkills = (home, verbose = false) => {
   const skillNames = LEGACY_SKILL_NAMES;
@@ -148333,30 +148906,17 @@ var removeSkills = (home, verbose = false) => {
   return removed;
 };
 var removeHooks = (home, verbose = false) => {
-  let settingsChanged = false;
-  const settingsPath = join(home, ".claude", "settings.json");
-  if (!existsSync(settingsPath)) {
-    if (verbose) stepInfo(`${settingsPath} not found \u2014 no settings to clean`);
-  } else {
-    let settings = null;
-    try {
-      settings = JSON.parse(readFileSync(settingsPath, "utf-8"));
-    } catch {
-      if (verbose) {
-        stepInfo(`${settingsPath} was unparseable JSON \u2014 leaving it untouched`);
-      }
-    }
-    if (settings) {
-      settingsChanged = stripZeroFromSettings(settings, verbose);
-      if (settingsChanged) {
-        writeFileSync(settingsPath, `${JSON.stringify(settings, null, 2)}
-`);
-        if (verbose) stepInfo(`rewrote ${settingsPath} without Zero entries`);
-      } else if (verbose) {
-        stepInfo(`no Zero entries found in ${settingsPath}`);
-      }
-    }
-  }
+  const claudeSettingsChanged = stripZeroFromJsonFile(
+    join(home, CLAUDE_SETTINGS_PATH2),
+    verbose,
+    true
+  );
+  const codexHooksChanged = stripZeroFromJsonFile(
+    join(home, CODEX_HOOKS_PATH2),
+    verbose,
+    false
+  );
+  const settingsChanged = claudeSettingsChanged || codexHooksChanged;
   let scriptsRemoved = 0;
   const zeroHooksDir = join(home, ".zero", "hooks");
   if (existsSync(zeroHooksDir)) {
@@ -148376,7 +148936,29 @@ var removeHooks = (home, verbose = false) => {
   }
   return { settingsChanged, scriptsRemoved };
 };
-var stripZeroFromSettings = (settings, verbose) => {
+var stripZeroFromJsonFile = (settingsPath, verbose, removeSandboxAllowlist) => {
+  const result = updateJsonConfigFile(
+    settingsPath,
+    (settings) => stripZeroFromSettings(settings, verbose, removeSandboxAllowlist)
+  );
+  if (result.status === "missing") {
+    if (verbose) stepInfo(`${settingsPath} not found \u2014 no settings to clean`);
+    return false;
+  }
+  if (result.status === "unparseable") {
+    if (verbose) {
+      stepInfo(`${settingsPath} was unparseable JSON \u2014 leaving it untouched`);
+    }
+    return false;
+  }
+  if (result.status === "updated") {
+    if (verbose) stepInfo(`rewrote ${settingsPath} without Zero entries`);
+    return true;
+  }
+  if (verbose) stepInfo(`no Zero entries found in ${settingsPath}`);
+  return false;
+};
+var stripZeroFromSettings = (settings, verbose, removeSandboxAllowlist) => {
   let changed = false;
   const hooks = settings.hooks && typeof settings.hooks === "object" ? settings.hooks : null;
   if (hooks) {
@@ -148389,24 +148971,26 @@ var stripZeroFromSettings = (settings, verbose) => {
     }
     if (Object.keys(hooks).length === 0) delete settings.hooks;
   }
-  const sandbox = settings.sandbox && typeof settings.sandbox === "object" ? settings.sandbox : null;
-  const network = sandbox?.network && typeof sandbox.network === "object" ? sandbox.network : null;
-  if (network && Array.isArray(network.allowedDomains)) {
-    const domains = network.allowedDomains;
-    const next = domains.filter((d3) => d3 !== ZERO_SANDBOX_DOMAIN2);
-    if (next.length !== domains.length) {
-      changed = true;
-      if (verbose) {
-        stepInfo(`sandbox.network.allowedDomains -= ${ZERO_SANDBOX_DOMAIN2}`);
-      }
-      if (next.length === 0) {
-        delete network.allowedDomains;
-        if (sandbox && Object.keys(network).length === 0)
-          delete sandbox.network;
-        if (sandbox && Object.keys(sandbox).length === 0)
-          delete settings.sandbox;
-      } else {
-        network.allowedDomains = next;
+  if (removeSandboxAllowlist) {
+    const sandbox = settings.sandbox && typeof settings.sandbox === "object" ? settings.sandbox : null;
+    const network = sandbox?.network && typeof sandbox.network === "object" ? sandbox.network : null;
+    if (network && Array.isArray(network.allowedDomains)) {
+      const domains = network.allowedDomains;
+      const next = domains.filter((d3) => d3 !== ZERO_SANDBOX_DOMAIN2);
+      if (next.length !== domains.length) {
+        changed = true;
+        if (verbose) {
+          stepInfo(`sandbox.network.allowedDomains -= ${ZERO_SANDBOX_DOMAIN2}`);
+        }
+        if (next.length === 0) {
+          delete network.allowedDomains;
+          if (sandbox && Object.keys(network).length === 0)
+            delete sandbox.network;
+          if (sandbox && Object.keys(sandbox).length === 0)
+            delete settings.sandbox;
+        } else {
+          network.allowedDomains = next;
+        }
       }
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@zeroxyz/cli",
-	"version": "1.6.0",
+	"version": "1.8.0",
 	"type": "module",
 	"bin": {
 		"zero": "dist/index.js",