joonecli 0.2.0 → 0.2.2

package/dist/__tests__/config.test.js

@@ -32,6 +32,7 @@ describe("Config Manager", () => {
         expect(config.maxTokens).toBe(4096);
         expect(config.temperature).toBe(0);
         expect(config.streaming).toBe(true);
+        expect(config.executionMode).toBe("host");
     });
     // ─── RED Test #2: saveConfig roundtrips with loadConfig ───
     it("saves config to disk and loads it back correctly", () => {

package/dist/__tests__/config.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,qDAAqD;AACrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE1E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,2DAA2D;IAC3D,IAAI,OAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IACvB,IAAI,iBAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAChE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,yCAAyC;QACzC,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,kBAAkB;QAClB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAE3E,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAEtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAE7D,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG;YACb,GAAG,cAAc;YACjB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,iBAAiB;YACzB,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAE/B,wBAAwB;QACxB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7C,6CAA6C;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,iDAAiD;QACjD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,oEAAoE;IAEpE,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,kCAAkC;QAClC,MAAM,WAAW,GAAG;YAClB,GAAG,cAAc;YACjB,QAAQ,EAAE,WAAW;SACtB,CAAC;QACF,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAEpC,kBAAkB;QAClB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc;YACd,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/__tests__/config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,qDAAqD;AACrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE1E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,2DAA2D;IAC3D,IAAI,OAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IACvB,IAAI,iBAAqC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAChE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,yCAAyC;QACzC,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,kBAAkB;QAClB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAE3E,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAEtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAE7D,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG;YACb,GAAG,cAAc;YACjB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,iBAAiB;YACzB,SAAS,EAAE,KAAK;SACjB,CAAC;QAEF,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAE/B,wBAAwB;QACxB,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7C,6CAA6C;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,iDAAiD;QACjD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,oEAAoE;IAEpE,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,kCAAkC;QAClC,MAAM,WAAW,GAAG;YAClB,GAAG,cAAc;YACjB,QAAQ,EAAE,WAAW;SACtB,CAAC;QACF,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAEpC,kBAAkB;QAClB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,cAAc;YACd,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,WAAW,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/installHostDeps.test.js

@@ -0,0 +1,45 @@
+import { describe, it, expect } from "vitest";
+import { installHostDependenciesTool } from "../tools/installHostDeps.js";
+describe("InstallHostDependenciesTool (Security)", () => {
+    it("allows permitted package manager commands", async () => {
+        // We test with a dummy emitter to just ensure it doesn't fail early
+        // We can't easily mock execAsync purely without mocking module, 
+        // but we can check if it gets past the security check and fails on execution 
+        // (meaning it was allowed). Better yet, we can mock exec if needed, but for now 
+        // we'll just check the error message structure if it fails.
+        // Actually, since this runs a real command, let's use a safe one or expect an execution error, not a security error.
+    });
+    it("blocks unknown binary", async () => {
+        const result = await installHostDependenciesTool.invoke({
+            command: "malicious_binary install foo",
+        });
+        expect(typeof result).toBe("string");
+        expect(result).toMatch(/Security Error/i);
+        expect(result).toMatch(/is not allowed/);
+    });
+    it("blocks disallowed subcommands for allowed binary", async () => {
+        const result = await installHostDependenciesTool.invoke({
+            command: "npm publish",
+        });
+        expect(typeof result).toBe("string");
+        expect(result).toMatch(/Security Error/i);
+        expect(result).toMatch(/npm publish/);
+    });
+    it("blocks forbidden shell operators", async () => {
+        const result = await installHostDependenciesTool.invoke({
+            command: "npm install express && rm -rf /",
+        });
+        expect(typeof result).toBe("string");
+        expect(result).toMatch(/Security Error/i);
+        expect(result).toMatch(/forbidden shell operators/);
+    });
+    it("blocks backticks", async () => {
+        const result = await installHostDependenciesTool.invoke({
+            command: "npm install `whoami`",
+        });
+        expect(typeof result).toBe("string");
+        expect(result).toMatch(/Security Error/i);
+        expect(result).toMatch(/forbidden shell operators/);
+    });
+});
+//# sourceMappingURL=installHostDeps.test.js.map

package/dist/__tests__/installHostDeps.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installHostDeps.test.js","sourceRoot":"","sources":["../../src/__tests__/installHostDeps.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACvD,oEAAoE;QACpE,iEAAiE;QACjE,8EAA8E;QAC9E,iFAAiF;QACjF,4DAA4D;QAC5D,qHAAqH;IACzH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC;YACpD,OAAO,EAAE,8BAA8B;SAC1C,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC;YACpD,OAAO,EAAE,aAAa;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC;YACpD,OAAO,EAAE,iCAAiC;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC;YACpD,OAAO,EAAE,sBAAsB;SAClC,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/__tests__/whitelistedBackend.test.js

@@ -0,0 +1,18 @@
+import { describe, it, expect } from "vitest";
+import { WhitelistedLocalShellBackend } from "../sandbox/whitelistedBackend.js";
+describe("WhitelistedLocalShellBackend", () => {
+    it("allows safe commands", async () => {
+        const backend = new WhitelistedLocalShellBackend({ rootDir: process.cwd() });
+        const result = await backend.execute("echo hello");
+        expect(result.output).toMatch(/hello/i);
+        expect(result.exitCode).toBe(0); // Works on Windows native echo
+    });
+    it("blocks dangerous commands", async () => {
+        const backend = new WhitelistedLocalShellBackend({ rootDir: process.cwd() });
+        const result = await backend.execute("rm -rf /");
+        expect(result.exitCode).toBe(1);
+        expect(result.output).toMatch(/Security Error/i);
+        expect(result.output).toMatch(/not allowed/i);
+    });
+});
+//# sourceMappingURL=whitelistedBackend.test.js.map

package/dist/__tests__/whitelistedBackend.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whitelistedBackend.test.js","sourceRoot":"","sources":["../../src/__tests__/whitelistedBackend.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAEhF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE7E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE7E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/cli/config.d.ts

@@ -30,6 +30,8 @@ export interface JooneConfig {
     compactModel?: string;
     /** Override model for sub-agents (default: auto-selected fast model from same provider). */
     subAgentModel?: string;
+    /** Execution mode: 'host' (local shell) or 'sandbox' (secure cloud). */
+    executionMode?: "host" | "sandbox";
 }
 /**
  * Sensible defaults — Anthropic Claude as the default provider.

package/dist/cli/config.js

@@ -10,6 +10,7 @@ export const DEFAULT_CONFIG = {
     temperature: 0,
     streaming: true,
     permissionMode: "auto",
+    executionMode: "host",
 };
 /**
  * Maps provider names to their expected environment variable for the API key.

package/dist/cli/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAoClC;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,0BAA0B;IACjC,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,IAAI;IACf,cAAc,EAAE,MAAM;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAA2B;IAChD,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,iBAAiB;IAC1B,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,mBAAmB;IAC9B,QAAQ,EAAE,kBAAkB;IAC5B,yCAAyC;CAC1C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,IAAI,MAAmB,CAAC;IAExB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;YACvD,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,UAAU,mBAAmB,CAAC,CAAC;YAClF,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,MAAmB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC5D,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK,EAAE,sCAAsC;KACpD,CAAC,CAAC;IAEH,oEAAoE;IACpE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/cli/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAsClC;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgB;IACzC,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,0BAA0B;IACjC,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,IAAI;IACf,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAA2B;IAChD,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,iBAAiB;IAC1B,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,mBAAmB;IAC9B,QAAQ,EAAE,kBAAkB;IAC5B,yCAAyC;CAC1C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,IAAI,MAAmB,CAAC;IAExB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;YACvD,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sCAAsC,UAAU,mBAAmB,CAAC,CAAC;YAClF,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IACD,uEAAuE;IACvE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,MAAmB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC5D,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK,EAAE,sCAAsC;KACpD,CAAC,CAAC;IAEH,oEAAoE;IACpE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;IAChD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC"}

package/dist/cli/index.js

@@ -6,23 +6,7 @@ import * as os from "node:os";
 import chalk from "chalk";
 import { intro, outro, select, text, password, confirm, spinner, isCancel, cancel, } from "@clack/prompts";
 import { loadConfig, saveConfig } from "./config.js";
-import { createModel } from "./modelFactory.js";
-import { installProvider, uninstallProvider } from "./providers.js";
-import { tryEnableLangSmithFromConfig } from "../tracing/langsmith.js";
-import { TraceAnalyzer } from "../tracing/analyzer.js";
-import { SessionTracer } from "../tracing/sessionTracer.js";
-import { SandboxManager } from "../sandbox/manager.js";
-import { MiddlewarePipeline } from "../middleware/pipeline.js";
-import { LoopDetectionMiddleware } from "../middleware/loopDetection.js";
-import { CommandSanitizerMiddleware } from "../middleware/commandSanitizer.js";
-import { ExecutionHarness } from "../core/agentLoop.js";
-import { SessionStore } from "../core/sessionStore.js";
-import { SessionResumer } from "../core/sessionResumer.js";
-import { PermissionMiddleware } from "../middleware/permission.js";
-import { AskUserQuestionTool } from "../tools/askUser.js";
-import { createDefaultAgentRegistry } from "../agents/builtinAgents.js";
-import { SubAgentManager } from "../core/subAgent.js";
-import { createSpawnAgentTools } from "../tools/spawnAgent.js";
+import { StartupBenchmark } from "./startupBenchmark.js";
 const CONFIG_PATH = path.join(os.homedir(), ".joone", "config.json");
 const SUPPORTED_PROVIDERS = [
     { value: "anthropic", label: "Anthropic", hint: "Claude 4, 3.5 Sonnet, Opus, Haiku" },
@@ -82,6 +66,14 @@ const PROVIDER_MODELS = {
     ],
 };
 const program = new Command();
+const startupBenchmark = new StartupBenchmark();
+startupBenchmark.mark("cli:entry");
+async function loadModelFactory() {
+    return import("./modelFactory.js");
+}
+async function loadProviderManager() {
+    return import("./providers.js");
+}
 program
     .name("joone")
     .description("An autonomous coding agent powered by prompt caching and harness engineering")
@@ -218,6 +210,7 @@ async function runOnboarding() {
         langsmithKey = existingConfig.langsmithApiKey ?? "";
     const s = spinner();
     try {
+        const { installProvider } = await loadProviderManager();
         s.start(`Downloading and installing the ${provider} provider package...`);
         await installProvider(provider);
         s.stop(`Installed ${provider} provider package!`);
@@ -279,6 +272,7 @@ providerCmd
     const s = spinner();
     s.start(`Installing ${providerName}...`);
     try {
+        const { installProvider } = await loadProviderManager();
         await installProvider(providerName);
         s.stop(`Successfully installed ${providerName}`);
     }
@@ -295,6 +289,7 @@ providerCmd
     const s = spinner();
     s.start(`Uninstalling ${providerName}...`);
     try {
+        const { uninstallProvider } = await loadProviderManager();
         await uninstallProvider(providerName);
         s.stop(`Successfully uninstalled ${providerName}`);
     }
@@ -343,9 +338,11 @@ program
     .command("start", { isDefault: true })
     .description("Start a new Joone agent session")
     .option("--no-stream", "Disable streaming output")
+    .option("--benchmark-startup", "Print startup timing milestones and exit")
     .option("-r, --resume <sessionId>", "Resume a previous session by ID")
     .action(async (options) => {
     let config = loadConfig(CONFIG_PATH);
+    startupBenchmark.mark("cli:config-loaded");
     // Auto-trigger onboarding if no API key is configured
     if (!config.apiKey && config.provider !== "ollama") {
         console.log(chalk.yellow("\n  ⚠ No configuration found.") +
@@ -355,6 +352,7 @@ program
     if (options.stream === false) {
         config.streaming = false;
     }
+    const { tryEnableLangSmithFromConfig } = await import("../tracing/langsmith.js");
     const tracingEnabled = tryEnableLangSmithFromConfig(config);
     console.log(chalk.cyan("\n  ◆ joone") +
         chalk.dim(" v0.1.0\n") +
@@ -363,54 +361,18 @@ program
         chalk.dim("  ├ Stream:   ") + chalk.white(config.streaming ? "on" : "off") + "\n" +
         chalk.dim("  └ Tracing:  ") + (tracingEnabled ? chalk.green("LangSmith") : chalk.dim("local only")) + "\n");
     try {
-        const model = await createModel(config);
-        const pipeline = new MiddlewarePipeline();
-        pipeline.use(new LoopDetectionMiddleware(3));
-        pipeline.use(new CommandSanitizerMiddleware());
-        pipeline.use(new PermissionMiddleware(config.permissionMode ?? "auto"));
-        const tracer = new SessionTracer();
-        const { bindSandbox } = await import("../tools/index.js");
-        const s = spinner();
-        s.start("Initializing Sandbox Environment...");
-        const sandboxManager = new SandboxManager({
-            template: config.sandboxTemplate,
-            apiKey: config.e2bApiKey,
-            openSandboxApiKey: config.openSandboxApiKey,
-            openSandboxDomain: config.openSandboxDomain,
-        });
-        await sandboxManager.create();
-        const { FileSync } = await import("../sandbox/sync.js");
-        const fileSync = new FileSync(process.cwd());
-        bindSandbox(sandboxManager, fileSync);
-        // Sync user-level skills into the sandbox
-        const { SkillLoader } = await import("../skills/loader.js");
-        const skillLoader = new SkillLoader();
-        const skillPaths = skillLoader.getDiscoveryPaths();
-        await fileSync.syncSkillsToSandbox(sandboxManager, skillPaths);
-        s.stop("Sandbox initialized");
-        // For the CLI, we start by loading the CORE tools
-        // Advanced tools (search, browser, etc.) will be dynamically loaded by the agent later
-        // via the SearchToolsTool when the registry is fully integrated
-        const { CORE_TOOLS } = await import("../tools/index.js");
-        let tools = [...CORE_TOOLS, AskUserQuestionTool];
-        // Initialize Sub-Agent Orchestration
-        const agentRegistry = createDefaultAgentRegistry();
-        const subAgentModelName = config.subAgentModel ?? config.model;
-        // Use the config to determine sub-agent model, with FAST_MODEL_DEFAULTS fallback
-        const { resolveFastModel } = await import("../core/compactor.js");
-        const resolvedSubModel = resolveFastModel(config.provider, config.model, config.subAgentModel);
-        const subAgentLlm = await createModel({ ...config, model: resolvedSubModel });
-        const subAgentManager = new SubAgentManager(agentRegistry, tools, subAgentLlm);
-        const spawnAgentTools = createSpawnAgentTools(subAgentManager, agentRegistry);
-        tools = [...tools, ...spawnAgentTools];
         let initialState;
         let sessionId = undefined;
+        let cleanupRuntime = async () => { };
+        let pendingStartupBenchmarkReport;
         if (options.resume) {
             const s = spinner();
             s.start(`Loading session ${chalk.bold(options.resume)}...`);
+            const { SessionStore } = await import("../core/sessionStore.js");
             const store = new SessionStore();
             try {
                 const payload = await store.loadSession(options.resume);
+                const { SessionResumer } = await import("../core/sessionResumer.js");
                 const resumer = new SessionResumer(process.cwd());
                 initialState = resumer.prepareForResume(payload);
                 sessionId = options.resume;
@@ -425,22 +387,52 @@ program
         else {
             initialState = {
                 globalSystemInstructions: `You are Joone, a highly capable autonomous coding agent. 
-You run in a hybrid environment: you have read/write access to the host machine for code edits, but all code execution, testing, and dependency installation MUST happen in the isolated E2B sandbox for safety.
-Always use 'bash' to run terminal commands. Never read or write outside the current project directory unless explicitly requested.
+You run in a hybrid environment based on user configuration. You execute commands using 'bash' and can safely evaluate tests and install dependencies.
+Always use the tools provided to you. Never read or write outside the current project directory unless explicitly requested.
 
 IMPORTANT CAPABILITIES:
 - You have access to an 'ask_user_question' tool. Use it to ask the user for clarification, preferences, or approval before making significant changes.
 - Some tool calls may require user approval before execution, depending on the user's permission settings. If a tool call is denied, try an alternative approach or ask the user for guidance.
 - You have access to Skills — reusable instruction sets for specialized tasks. Use 'search_skills' to discover them and 'load_skill' to activate their instructions.`,
-                projectMemory: "No project context loaded yet.",
+                projectMemory: `Initial working directory: ${process.cwd()}`,
                 sessionContext: `Environment: ${process.platform}\nCWD: ${process.cwd()}`,
                 conversationHistory: []
             };
         }
-        const boundLlm = "bindTools" in model && typeof model.bindTools === "function"
-            ? model.bindTools(tools)
-            : model;
-        const harness = new ExecutionHarness(boundLlm, tools, pipeline, tracer, config.provider, config.model, sessionId);
+        const createHarness = async () => {
+            startupBenchmark.mark("runtime:harness-init-start");
+            const { createModel } = await loadModelFactory();
+            const model = await createModel(config);
+            startupBenchmark.mark("runtime:model-ready");
+            const { SessionTracer } = await import("../tracing/sessionTracer.js");
+            const tracer = new SessionTracer();
+            let sandboxManager;
+            const { bindSandbox, CORE_TOOLS } = await import("../tools/index.js");
+            if (config.executionMode !== "host") {
+                const { SandboxManager } = await import("../sandbox/manager.js");
+                sandboxManager = new SandboxManager({
+                    template: config.sandboxTemplate,
+                    apiKey: config.e2bApiKey,
+                    openSandboxApiKey: config.openSandboxApiKey,
+                    openSandboxDomain: config.openSandboxDomain,
+                });
+                await sandboxManager.create();
+                const { FileSync } = await import("../sandbox/sync.js");
+                const fileSync = new FileSync(process.cwd());
+                bindSandbox(sandboxManager, fileSync);
+            }
+            const { askUserQuestionTool } = await import("../tools/askUser.js");
+            const tools = [...CORE_TOOLS, askUserQuestionTool];
+            const { ExecutionHarness } = await import("../core/agentLoop.js");
+            const harness = new ExecutionHarness(model, tools, tracer, config.provider, config.model, sessionId, config.maxTokens, config.permissionMode, config.executionMode);
+            cleanupRuntime = async () => {
+                tracer.save();
+                if (sandboxManager) {
+                    await sandboxManager.destroy();
+                }
+            };
+            return harness;
+        };
         const { render } = await import("ink");
         const React = await import("react");
         const { App } = await import("../ui/App.js");
@@ -450,14 +442,21 @@ IMPORTANT CAPABILITIES:
             provider: config.provider,
             model: config.model,
             streaming: config.streaming,
-            harness,
+            createHarness,
             initialState,
             maxTokens: config.maxTokens,
+            benchmarkStartup: Boolean(options.benchmarkStartup),
+            onStartupBenchmarkMark: (name) => startupBenchmark.mark(name),
+            onStartupBenchmarkComplete: () => {
+                pendingStartupBenchmarkReport = startupBenchmark.format("Joone Startup Benchmark");
+            },
         }));
+        startupBenchmark.mark("ui:render-mounted");
         await waitUntilExit();
-        // Cleanup
-        tracer.save();
-        await sandboxManager.destroy();
+        if (pendingStartupBenchmarkReport) {
+            console.log(`\n${pendingStartupBenchmarkReport}\n`);
+        }
+        await cleanupRuntime();
     }
     catch (error) {
         if (error instanceof Error) {
@@ -474,6 +473,7 @@ program
     .command("sessions")
     .description("List all persistent sessions available for resumption")
     .action(async () => {
+    const { SessionStore } = await import("../core/sessionStore.js");
     const store = new SessionStore();
     const sessions = await store.listSessions();
     if (sessions.length === 0) {
@@ -494,7 +494,7 @@ program
 program
     .command("analyze [sessionId]")
     .description("Analyze a session trace for performance insights")
-    .action((sessionId) => {
+    .action(async (sessionId) => {
     let tracePath;
     const tracesDir = path.join(os.homedir(), ".joone", "traces");
     if (sessionId) {
@@ -521,6 +521,8 @@ program
         process.exit(1);
     }
     try {
+        const { SessionTracer } = await import("../tracing/sessionTracer.js");
+        const { TraceAnalyzer } = await import("../tracing/analyzer.js");
         const trace = SessionTracer.load(tracePath);
         const analyzer = new TraceAnalyzer(trace);
         const report = analyzer.analyze();
@@ -541,6 +543,7 @@ program
         console.error(chalk.red("\n  ✗ LangSmith API key is missing. Run `joone config` to set it.\n"));
         process.exit(1);
     }
+    const { tryEnableLangSmithFromConfig } = await import("../tracing/langsmith.js");
     tryEnableLangSmithFromConfig(config);
     console.log(chalk.cyan("\n  ◆ joone evals") + chalk.dim(` (Model: ${config.model})\n`));
     try {
@@ -551,29 +554,33 @@ program
         s.start("Verifying baseline dataset...");
         const datasetName = await ensureBaselineDataset();
         s.stop(`Dataset verified: ${chalk.white(datasetName)}`);
+        const { createModel } = await loadModelFactory();
         const model = await createModel(config);
-        const pipeline = new MiddlewarePipeline();
-        pipeline.use(new LoopDetectionMiddleware(3));
-        pipeline.use(new CommandSanitizerMiddleware());
+        const { SessionTracer } = await import("../tracing/sessionTracer.js");
         const tracer = new SessionTracer();
         const { bindSandbox, CORE_TOOLS } = await import("../tools/index.js");
         const tools = [...CORE_TOOLS];
         s.start("Running evaluations across dataset (this may take a few minutes)...");
         // We define a target function that the generic `evaluate` engine will call for each example
         const agentTargetFn = async (inputs) => {
+            const { ExecutionHarness } = await import("../core/agentLoop.js");
             const runTracer = new SessionTracer();
-            const harness = new ExecutionHarness(model, tools, pipeline, runTracer);
-            // Initialize an empty sandbox just for this run
-            const sandboxManager = new SandboxManager({
-                template: config.sandboxTemplate,
-                apiKey: config.e2bApiKey,
-                openSandboxApiKey: config.openSandboxApiKey,
-                openSandboxDomain: config.openSandboxDomain,
-            });
-            await sandboxManager.create();
-            const { FileSync } = await import("../sandbox/sync.js");
-            const fileSync = new FileSync(process.cwd());
-            bindSandbox(sandboxManager, fileSync);
+            const harness = new ExecutionHarness(model, tools, runTracer, config.provider, config.model, undefined, config.maxTokens, config.permissionMode, config.executionMode);
+            let sandboxManager;
+            if (config.executionMode !== "host") {
+                const { SandboxManager } = await import("../sandbox/manager.js");
+                // Initialize an empty sandbox just for this run
+                sandboxManager = new SandboxManager({
+                    template: config.sandboxTemplate,
+                    apiKey: config.e2bApiKey,
+                    openSandboxApiKey: config.openSandboxApiKey,
+                    openSandboxDomain: config.openSandboxDomain,
+                });
+                await sandboxManager.create();
+                const { FileSync } = await import("../sandbox/sync.js");
+                const fileSync = new FileSync(process.cwd());
+                bindSandbox(sandboxManager, fileSync);
+            }
             const { HumanMessage, AIMessage, ToolMessage } = await import("@langchain/core/messages");
             let conversationHistory = [
                 new HumanMessage(inputs.instruction)
@@ -582,30 +589,32 @@ program
             let turnCount = 0;
             const MAX_TURNS = 15; // Anti-doom-loop for evals
             try {
-                while (turnCount < MAX_TURNS) {
+                const state = {
+                    globalSystemInstructions: `You are Joone, a highly capable autonomous coding agent. 
+You run in a hybrid environment based on user configuration. You execute commands using 'bash' and can safely evaluate tests and install dependencies.
+Always use the tools provided to you. Never read or write outside the current project directory unless explicitly requested.`,
+                    projectMemory: `Evaluation run.\nInitial working directory: ${process.cwd()}`,
+                    sessionContext: `Environment: ${process.platform}\nCWD: ${process.cwd()}`,
+                    conversationHistory
+                };
+                const stream = harness.run(state);
+                for await (const event of stream) {
                     turnCount++;
-                    const state = {
-                        globalSystemInstructions: `You are Joone, a highly capable autonomous coding agent. 
-You run in a hybrid environment: you have read/write access to the host machine for code edits, but all code execution, testing, and dependency installation MUST happen in the isolated E2B sandbox for safety.
-Always use 'bash' to run terminal commands. Never read or write outside the current project directory unless explicitly requested.`,
-                        projectMemory: "Evaluation run.",
-                        sessionContext: `Environment: ${process.platform}\nCWD: ${process.cwd()}`,
-                        conversationHistory
-                    };
-                    const response = await harness.step(state);
-                    conversationHistory.push(response);
-                    if (response.content && typeof response.content === "string") {
-                        finalOutput += response.content + "\n";
-                    }
-                    if (!response.tool_calls || response.tool_calls.length === 0) {
-                        break; // Task complete
+                    if (event.event === "on_chat_model_end" && event.data?.output) {
+                        const msg = event.data.output;
+                        if (msg.content && typeof msg.content === "string") {
+                            finalOutput += msg.content + "\n";
+                        }
+                        if (msg.tool_calls && msg.tool_calls.length > 0) {
+                            // LangGraph will automatically execute the tools under the hood
+                            // We don't need to manually executeToolCalls here!
+                        }
                     }
-                    const toolResults = await harness.executeToolCalls(response, state);
-                    conversationHistory.push(...toolResults);
                 }
             }
             catch (e) {
-                await sandboxManager.destroy();
+                if (sandboxManager)
+                    await sandboxManager.destroy();
                 throw e; // LangSmith catches this for the error evaluation
             }
             // Gather metrics
@@ -620,15 +629,19 @@ Always use 'bash' to run terminal commands. Never read or write outside the curr
             // Check sandbox for uploaded/created files before ripping it down
             let fileManifest = [];
             try {
-                const result = await sandboxManager.exec(`find /workspace -type f`);
-                if (result.stdout) {
-                    fileManifest = result.stdout.split('\n').map((l) => l.trim()).filter(Boolean);
+                if (sandboxManager) {
+                    const result = await sandboxManager.exec(`find /workspace -type f`);
+                    if (result.stdout) {
+                        fileManifest = result.stdout.split('\n').map((l) => l.trim()).filter(Boolean);
+                    }
                 }
             }
             catch {
                 // Ignore, fallback to empty array
             }
-            await sandboxManager.destroy();
+            if (sandboxManager) {
+                await sandboxManager.destroy();
+            }
             return {
                 finalOutput,
                 metrics,