nomarmy 0.1.0-alpha.0

package/config/agents.yml.example

@@ -0,0 +1,63 @@
+# ~/.config/nomarmy/agents.yml (or $NOMARMY_CONFIG_DIR/agents.yml)
+#
+# Every model a nomArmy job can run on, by name. You rarely edit this by
+# hand: `nomarmy agents add` walks through each kind (key registration,
+# vendor logins, a real test call) and writes it for you.
+#
+# An api or subscription agent is an ACCOUNT, not a model. The model is
+# picked per role (`nomarmy army assign sr-dev codex gpt-6-astra`, or `auto`
+# to let the General choose per job), or by the General on a job; `model`
+# here is only an optional default. Nothing ever picks between agents at
+# random.
+#
+# `local` (the coder slot) is built in; you only list it to change it.
+#
+# Security: this file never holds a credential. An api agent names the
+# environment variable its key was registered from (the key itself lives in
+# OpenClaw's own store); a subscription agent's login lives in the vendor
+# CLI's own session or your OS keychain. nomArmy refuses to load this file
+# if another OS account owns it or can write to it.
+
+agents:
+  # The local model's gpt slot (NOMARMY_WORKER_MODEL_FALLBACK).
+  local-gpt:
+    kind: local
+    slot: gpt
+
+  # A metered API key. provider is one of: xai, openai, anthropic,
+  # deepinfra, bedrock / azure-openai / openai-compatible (need base_url),
+  # or openclaw for any other OpenClaw provider by id:
+  #   provider: openclaw
+  #   openclaw_provider: deepseek
+  #   plugin: clawhub:@openclaw/deepseek-provider   # if it isn't built in
+  grok:
+    kind: api
+    provider: xai
+    model: grok-4.7                 # optional default
+    auth_env: NOMARMY_XAI_API_KEY   # the variable's NAME, never the key
+    thinking: high                  # true = follow the job, false = off, or a fixed level
+    # max_concurrent: 2
+    # context_window: 500000        # only for a model newer than OpenClaw's catalog
+
+  # ONE person's own subscription, never pooled: every job on it must name
+  # this owner in on_behalf_of. Set up with `nomarmy agents add subscription
+  # claude|codex|meta`.
+  claude:
+    kind: subscription
+    provider: claude-cli            # Claude Pro/Max/Team seat
+    owner: "you@example.com"
+  codex:
+    kind: subscription
+    provider: openai                # ChatGPT plan, via the Codex login
+    owner: "you@example.com"
+  muse:
+    kind: subscription
+    provider: meta                  # Muse Code subscription
+    owner: "you@example.com"
+    # max_concurrent: 1             # the default for a subscription
+
+# One OpenClaw provider id holds one credential. OpenAI, Meta and xAI use the
+# same id for the subscription and the API key, so an api agent and a
+# subscription agent on the same provider are refused. Here, `grok` (xai)
+# means you can't also add an xAI subscription agent. Claude never collides:
+# its subscription is claude-cli, its API key is anthropic.

package/config/common.env

@@ -0,0 +1,31 @@
+NOMARMY_MODEL_REPO=ggml-org/gpt-oss-20b-GGUF
+NOMARMY_MODEL_QUANT=MXFP4
+NOMARMY_MODEL_ALIAS=gpt-oss-20b
+# Whether the configured model has a thinking/reasoning mode at all --
+# Coder-Next does not. `nomarmy connect` reads this (and NOMARMY_WORKER_MODEL
+# below) to keep the MCP registration's worker-routing env vars in sync with
+# whatever model is actually configured here, instead of the two silently
+# drifting apart (the exact bug this fixes: NOMARMY_WORKER_MODEL sat unused
+# in this file for every model choice until now).
+NOMARMY_MODEL_THINKING=true
+NOMARMY_LLAMA_HOST=127.0.0.1
+NOMARMY_LLAMA_PORT=8080
+NOMARMY_LLAMA_CONTEXT=65536
+NOMARMY_LLAMA_PARALLEL=1
+NOMARMY_MAX_WORKERS=1
+NOMARMY_AGENT_IMAGE=openclaw-nomarmy-coder:bookworm
+NOMARMY_INSTALL_ROOT=$HOME/.local/share/nomarmy-local-agents
+
+# Execution layer: 'local' runs llama-server on this machine, 'bedrock' calls a
+# hosted OpenAI-compatible endpoint. Profiles override this.
+NOMARMY_EXECUTION=local
+
+# Worker model routing. The MCP server composes "<provider>/<model>" for
+# OpenClaw, so these are the only place model identity is declared.
+NOMARMY_WORKER_PROVIDER=llama-cpp
+NOMARMY_WORKER_MODEL=gpt-oss-20b
+NOMARMY_WORKER_MODEL_FALLBACK=gpt-oss-20b
+
+# 'frontier' means the coordinator outranks the workers it reviews, which is
+# what policies/reviewer.md assumes. 'degraded' is the explicit opt-out.
+NOMARMY_ORCHESTRATOR_TRUST=frontier

package/config/profiles/bedrock-cheap.env

@@ -0,0 +1,26 @@
+# DEGRADED-ACCEPTANCE PROFILE: read policies/reviewer.md before using.
+#
+# Orchestrator and workers are the same capability class, so the coordinator is
+# grading output from a peer rather than from below. Acceptance stops being an
+# independent check. Use only where a wrong accept is cheap and reversible, and
+# never for security decisions, architecture, or anything heading for a release.
+#
+# Note this path cannot be Claude Code: CLAUDE_CODE_USE_BEDROCK only routes
+# Anthropic models. The coordinator here is OpenClaw driving the same MCP server.
+NOMARMY_PROFILE=bedrock-cheap
+NOMARMY_EXECUTION=bedrock
+
+NOMARMY_BEDROCK_REGION=eu-west-2
+
+# --- Orchestrator -----------------------------------------------------------
+NOMARMY_ORCHESTRATOR_RUNTIME=openclaw
+NOMARMY_ORCHESTRATOR_MODEL=qwen.qwen3-coder-next
+NOMARMY_ORCHESTRATOR_TRUST=degraded
+
+# --- Workers ----------------------------------------------------------------
+NOMARMY_WORKER_PROVIDER=bedrock
+NOMARMY_WORKER_AUTH_CHOICE=openai-compatible-existing-server
+NOMARMY_WORKER_MODEL=qwen.qwen3-coder-next
+NOMARMY_WORKER_MODEL_FALLBACK=nvidia.nemotron-nano-3-30b
+
+NOMARMY_MAX_WORKERS=4

package/config/profiles/bedrock.env

@@ -0,0 +1,28 @@
+# Bedrock-hosted orchestrator and workers. No local inference, so this profile
+# carries no GPU or OS requirement and runs anywhere AWS credentials resolve.
+NOMARMY_PROFILE=bedrock
+NOMARMY_EXECUTION=bedrock
+
+# Region, models and worker count honour an environment override; the value here
+# is the default. Base URL is derived from the region unless you set it.
+NOMARMY_BEDROCK_REGION=eu-west-2
+# NOMARMY_BEDROCK_BASE_URL=https://bedrock-runtime.eu-west-2.amazonaws.com/openai/v1
+
+# --- Orchestrator -----------------------------------------------------------
+# Claude Opus 5 served from Bedrock. The coordinator still outranks the workers
+# it reviews, so policies/orchestrator.md and policies/reviewer.md hold as written.
+NOMARMY_ORCHESTRATOR_RUNTIME=claude-code
+NOMARMY_ORCHESTRATOR_MODEL=eu.anthropic.claude-opus-5
+NOMARMY_ORCHESTRATOR_TRUST=frontier
+
+# --- Workers ----------------------------------------------------------------
+# Bedrock model IDs. Confirm against `aws bedrock list-foundation-models`;
+# scripts/verify-install.sh checks these are invokable in your account.
+NOMARMY_WORKER_PROVIDER=bedrock
+NOMARMY_WORKER_AUTH_CHOICE=openai-compatible-existing-server
+NOMARMY_WORKER_MODEL=qwen.qwen3-coder-next
+NOMARMY_WORKER_MODEL_FALLBACK=nvidia.nemotron-3-super-120b
+
+# Hosted inference removes the VRAM ceiling; the practical limit is now your
+# Bedrock TPM quota and your budget. Still measure before raising further.
+NOMARMY_MAX_WORKERS=4

package/config/profiles/cpu-linux.env

@@ -0,0 +1,8 @@
+# Generic Linux CPU-only worker. Use where CUDA is unavailable.
+# Retained as the constrained profile: 16K context, one worker.
+NOMARMY_PROFILE=cpu-linux
+NOMARMY_LLAMA_GPU_LAYERS=0
+NOMARMY_LLAMA_THREADS=8
+NOMARMY_LLAMA_CONTEXT=16384
+NOMARMY_LLAMA_PARALLEL=1
+NOMARMY_MAX_WORKERS=1

package/config/profiles/dgx-spark.env

@@ -0,0 +1,12 @@
+# NVIDIA DGX Spark / GB10 Grace Blackwell, Linux ARM64, CUDA.
+# Start conservative; raise parallelism only after E2E passes and memory is measured.
+#
+# NOTE: -c is divided across -np, so 65536 with 2 slots gives each nom 32K,
+# below the v1.3 64K-per-nom target. Run `nomarmy sizing` on the machine and
+# apply what it recommends rather than trusting these defaults.
+NOMARMY_PROFILE=dgx-spark
+NOMARMY_LLAMA_GPU_LAYERS=999
+NOMARMY_LLAMA_THREADS=16
+NOMARMY_LLAMA_CONTEXT=65536
+NOMARMY_LLAMA_PARALLEL=2
+NOMARMY_MAX_WORKERS=2

package/config/profiles/macbook-pro.env

@@ -0,0 +1,9 @@
+# Apple Silicon / Metal. Conservative defaults for 64 GB unified memory.
+NOMARMY_PROFILE=macbook-pro
+NOMARMY_LLAMA_GPU_LAYERS=999
+NOMARMY_LLAMA_THREADS=12
+# v1.3 raises this from 32K: the autonomous explore/implement/test/repair loop
+# needs more room than a one-shot edit. 64 GB unified memory carries 64K.
+NOMARMY_LLAMA_CONTEXT=65536
+NOMARMY_LLAMA_PARALLEL=1
+NOMARMY_MAX_WORKERS=1

package/config/profiles/nvidia-linux.env

@@ -0,0 +1,9 @@
+# Generic NVIDIA Linux/CUDA worker. Tune for available VRAM/system memory.
+NOMARMY_PROFILE=nvidia-linux
+NOMARMY_LLAMA_GPU_LAYERS=999
+NOMARMY_LLAMA_THREADS=12
+# Conservative for unknown VRAM. Raise to 65536 for the v1.3 autonomous loop
+# where the card allows: NOMARMY_LLAMA_CONTEXT=65536 ./install.sh --profile nvidia-linux
+NOMARMY_LLAMA_CONTEXT=32768
+NOMARMY_LLAMA_PARALLEL=1
+NOMARMY_MAX_WORKERS=1

package/docker/Dockerfile

@@ -0,0 +1,15 @@
+FROM node:24-bookworm-slim
+ENV DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    bash ca-certificates curl git jq python3 python3-pip python3-venv ripgrep \
+    && rm -rf /var/lib/apt/lists/*
+# node:24-bookworm-slim already ships a non-root "node" user at uid/gid 1000,
+# the same uid this Dockerfile used to try to create a "sandbox" user at.
+# useradd silently failed on every build (masked by `|| true`), so `USER
+# sandbox` below referred to a user that was never actually created --
+# `docker run` for any command failed with "unable to find user sandbox: no
+# matching entries in passwd file." Use the user the base image already
+# provides instead of colliding with it.
+USER node
+WORKDIR /workspace
+CMD ["sleep", "infinity"]

package/docker/Dockerfile.go

@@ -0,0 +1,29 @@
+FROM node:24-bookworm-slim
+ENV DEBIAN_FRONTEND=noninteractive
+# Same base as docker/Dockerfile plus a Go toolchain -- the worker's own
+# tool-calling harness needs Node regardless of the target repo's language.
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    bash ca-certificates curl git jq python3 python3-pip python3-venv ripgrep \
+    && rm -rf /var/lib/apt/lists/*
+# Debian bookworm's packaged golang-go lags stable Go by multiple years
+# (verified live: apt installed 1.19 here while go.dev's stable was 1.27) --
+# same reasoning as using rustup instead of apt for Rust in Dockerfile.rust.
+# Pinned, not "latest", for a reproducible build; bump GO_VERSION by hand
+# periodically against https://go.dev/dl/.
+ENV GO_VERSION=1.27.1
+RUN ARCH="$(dpkg --print-architecture)" \
+    && case "$ARCH" in \
+         amd64) GOARCH=amd64 ;; \
+         arm64) GOARCH=arm64 ;; \
+         *) echo "unsupported architecture for Go install: $ARCH" >&2; exit 1 ;; \
+       esac \
+    && curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-${GOARCH}.tar.gz" -o /tmp/go.tgz \
+    && tar -C /usr/local -xzf /tmp/go.tgz \
+    && rm /tmp/go.tgz
+ENV PATH="/usr/local/go/bin:${PATH}"
+ENV GOPATH=/home/node/go
+ENV PATH="${GOPATH}/bin:${PATH}"
+USER node
+RUN mkdir -p "${GOPATH}"
+WORKDIR /workspace
+CMD ["sleep", "infinity"]

package/docker/Dockerfile.rust

@@ -0,0 +1,19 @@
+FROM node:24-bookworm-slim
+ENV DEBIAN_FRONTEND=noninteractive
+# Same base as docker/Dockerfile plus a Rust toolchain -- the worker's own
+# tool-calling harness needs Node regardless of the target repo's language.
+# Debian bookworm's packaged rustc/cargo lags stable Rust noticeably, and
+# real Cargo.toml files routinely need a recent edition/toolchain, so this
+# uses rustup (network access is fine here -- this is the BUILD step,
+# offline, on the host; the running container it produces still gets
+# --network none like every other job sandbox).
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    bash ca-certificates curl git jq python3 python3-pip python3-venv ripgrep build-essential \
+    && rm -rf /var/lib/apt/lists/*
+USER node
+ENV RUSTUP_HOME=/home/node/.rustup
+ENV CARGO_HOME=/home/node/.cargo
+ENV PATH="${CARGO_HOME}/bin:${PATH}"
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stable
+WORKDIR /workspace
+CMD ["sleep", "infinity"]

package/e2e.sh

@@ -0,0 +1,153 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck disable=SC1091
+source "$ROOT/scripts/lib.sh"
+
+PROFILE=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --profile)
+      PROFILE="$2"
+      shift 2
+      ;;
+    *)
+      echo "Unknown arg $1"
+      exit 2
+      ;;
+  esac
+done
+
+load_profile "$PROFILE"
+
+echo "=== nomArmy E2E: $NOMARMY_PROFILE ==="
+
+"$ROOT/scripts/start-inference.sh" "$NOMARMY_PROFILE"
+
+if nomarmy_is_cloud; then
+  echo "INFO hosted inference at $NOMARMY_BEDROCK_BASE_URL"
+
+  # Reachability and model entitlement are an AWS concern on this path, so the
+  # provider listing stands in for the local health and discovery checks.
+  openclaw models list --provider "$NOMARMY_WORKER_PROVIDER" \
+    | grep -q "$NOMARMY_WORKER_MODEL"
+
+  echo "PASS model discovery"
+else
+  curl -fsS \
+    "http://$NOMARMY_LLAMA_HOST:$NOMARMY_LLAMA_PORT/health" \
+    >/dev/null
+
+  echo "PASS inference health"
+
+  MODELS="$(
+    curl -fsS \
+      "http://$NOMARMY_LLAMA_HOST:$NOMARMY_LLAMA_PORT/v1/models"
+  )"
+
+  echo "$MODELS" | grep -q "$NOMARMY_MODEL_ALIAS"
+
+  echo "PASS model discovery"
+fi
+
+# Under $HOME, not the system tmpdir: Podman Machine on macOS only allows
+# bind-mounting paths under the host home directory, and the cleanup step
+# below bind-mounts this directory into a container.
+TMP="$(mktemp -d "$HOME/.nomarmy-e2e.XXXXXX")"
+
+cleanup() {
+  local exit_code=$?
+
+  if [[ -n "${TMP:-}" && -d "$TMP" ]]; then
+
+    # OpenClaw's Podman sandbox may create files that the host user
+    # cannot delete directly. Use a disposable container to clean
+    # the temporary workspace first.
+    if command -v podman >/dev/null 2>&1 && podman info >/dev/null 2>&1; then
+      podman run --rm \
+        -v "$TMP:/cleanup" \
+        alpine:3.20 \
+        sh -c '
+          find /cleanup -mindepth 1 -maxdepth 1 -exec rm -rf -- {} + \
+            2>/dev/null || true
+        ' \
+        >/dev/null 2>&1 || true
+    fi
+
+    rm -rf "$TMP" 2>/dev/null || true
+
+    if [[ -d "$TMP" ]]; then
+      echo "WARN: E2E temporary directory could not be completely removed:"
+      echo "      $TMP"
+    fi
+  fi
+
+  exit "$exit_code"
+}
+
+trap cleanup EXIT INT TERM
+
+cd "$TMP"
+
+git init -q
+git config user.email e2e@nomarmy.local
+git config user.name "nomArmy E2E"
+
+cat > calc.js <<'JS'
+export function add(a,b){ return a-b; }
+JS
+
+cat > test.mjs <<'JS'
+import { add } from './calc.js';
+
+if (add(2,3)!==5) {
+  console.error('FAIL');
+  process.exit(1);
+}
+
+console.log('PASS');
+JS
+
+cat > package.json <<'JSON'
+{
+  "type": "module",
+  "scripts": {
+    "test": "node test.mjs"
+  }
+}
+JSON
+
+git add .
+git commit -qm baseline
+
+PROMPT='Fix the bug so npm test passes. Work only in the workspace. Run npm test. Do not run git. Final response MUST begin with exactly four lines: STATUS: done | partial | blocked; CHANGES: <brief>; VERIFICATION: pass | partial | failed - <brief>; NOT DONE: <list or none>.'
+
+OUT="$TMP/openclaw.json"
+
+openclaw agent exec "$PROMPT" \
+  --model "$NOMARMY_WORKER_PROVIDER/$NOMARMY_WORKER_MODEL" \
+  --cwd "$TMP" \
+  --code-mode direct \
+  --local-model-lean \
+  --thinking off \
+  --timeout 600 \
+  --json \
+  > "$OUT"
+
+# Independent verification. We do not trust the worker's claim
+# that its implementation is correct.
+npm test
+
+grep -Eq 'STATUS: (done|partial|blocked)' "$OUT"
+echo "PASS worker report contract"
+
+# The worker must have actually modified the implementation.
+if git diff --exit-code -- calc.js >/dev/null; then
+  echo "ERROR: worker made no code change"
+  exit 1
+fi
+
+echo "PASS autonomous edit + verification"
+echo "=== E2E PASS ==="

package/install.sh

@@ -0,0 +1,125 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck disable=SC1091
+source "$ROOT/scripts/lib.sh"
+PROFILE=""
+WITH_CLAUDE=1
+while [[ $# -gt 0 ]]; do case "$1" in --profile) PROFILE="$2"; shift 2;; --no-claude) WITH_CLAUDE=0; shift;; *) echo "Unknown arg: $1"; exit 2;; esac; done
+load_profile "$PROFILE"
+echo "==> nomArmy install ($NOMARMY_PROFILE)"
+OS_NAME="$(uname -s)"
+case "$OS_NAME" in
+  Darwin)
+    need brew || { echo 'ERROR: Homebrew is required on macOS. Install it from https://brew.sh, then rerun.'; exit 1; }
+    command -v curl >/dev/null 2>&1 || brew install curl
+    command -v git >/dev/null 2>&1 || brew install git
+    command -v node >/dev/null 2>&1 || brew install node
+    if ! nomarmy_is_cloud; then
+      command -v xcode-select >/dev/null 2>&1 && xcode-select -p >/dev/null 2>&1 || { echo 'ERROR: Xcode Command Line Tools are required. Run: xcode-select --install'; exit 1; }
+      command -v cmake >/dev/null 2>&1 || brew install cmake
+    fi
+    # A Homebrew formula, not a cask -- installs headlessly like curl/git/node,
+    # no manual first-launch the way Docker Desktop needs.
+    command -v podman >/dev/null 2>&1 || brew install podman
+    ;;
+  Linux)
+    if nomarmy_is_cloud; then
+      # No local model is built or served, so the C++ toolchain is not needed.
+      need curl; need git; need node; need npm
+    else
+      if ! command -v cmake >/dev/null 2>&1 || ! command -v c++ >/dev/null 2>&1 || ! command -v curl >/dev/null 2>&1 || ! command -v git >/dev/null 2>&1 || ! command -v node >/dev/null 2>&1 || ! command -v npm >/dev/null 2>&1; then install_build_dependencies; fi
+      need curl; need git; need cmake; need c++; need node; need npm
+      if [[ "$NOMARMY_PROFILE" == dgx-spark || "$NOMARMY_PROFILE" == nvidia-linux ]]; then need nvidia-smi; need nvcc; fi
+    fi
+    # Podman runs rootless, directly on the host kernel here -- no daemon to
+    # enable or start, unlike Docker Engine.
+    command -v podman >/dev/null 2>&1 || install_podman
+    ;;
+  MINGW*|MSYS*|CYGWIN*|Windows_NT)
+    cat >&2 <<'MSG'
+ERROR: install.sh does not run natively on Windows. Three options, and the usual
+advice is not always the better one:
+
+  1. WSL2, then run the Linux install inside your distro (supported path)
+     Podman runs natively inside the WSL2 distro itself -- nothing to install
+     on the Windows host, and no Docker Desktop licensing exposure there.
+     Note: WSL2 defaults to ~50% of host RAM, shared across every distro. On
+     a 32 GB machine that caps the model at ~16 GB. Raise it in
+     %UserProfile%\.wslconfig, which needs `wsl --shutdown` and will restart
+     every running container.
+
+  2. Native Windows llama.cpp built from source, then point nomArmy at it.
+     Gets the full host RAM. Needs a C++ toolchain:
+       winget install Microsoft.VisualStudio.2022.BuildTools --override \
+         "--wait --passive --add Microsoft.VisualStudio.Workload.VCTools --includeRecommended"
+     Prebuilt llama.cpp Windows binaries are NOT a reliable shortcut: on some
+     CPUs every compute backend crashes at startup (access violation) while
+     non-compute binaries run fine. The cause is dynamic backend loading, so
+     build it statically instead -- these flags are verified working:
+       cmake -S . -B build -G Ninja -DCMAKE_BUILD_TYPE=Release \
+         -DGGML_BACKEND_DL=OFF -DBUILD_SHARED_LIBS=OFF \
+         -DGGML_NATIVE=ON -DLLAMA_CURL=OFF
+     GGML_BACKEND_DL=OFF is the one that matters: it links the CPU backend in
+     rather than probing for it at runtime.
+
+  3. Run workers on a Bedrock profile and skip local inference entirely:
+       ./install.sh --profile bedrock
+
+Run `nomarmy sizing` on the host first -- it reports which of these your
+hardware can actually support before you commit to one.
+MSG
+    exit 1
+    ;;
+  *)
+    echo "ERROR: $OS_NAME is not a supported host. See the README for supported platforms." >&2
+    exit 1
+    ;;
+esac
+need node; need npm
+
+# The nomarmy CLI and the MCP server both import from lib/, which has real
+# dependencies. Without this a fresh clone cannot run `nomarmy` at all -- the
+# first import of `yaml` fails. This is separate from the copy the worker setup
+# scripts install into $NOMARMY_AGENT_INSTALL_DIR.
+echo '==> Installing nomArmy dependencies'
+(cd "$ROOT" && npm install --omit=dev --no-audit --no-fund)
+
+# Put `nomarmy` on PATH. Non-fatal by design: linking needs a writable npm
+# global prefix, and the CLI is equally usable as `node bin/nomarmy.mjs`.
+if (cd "$ROOT" && npm link >/dev/null 2>&1); then
+  echo '==> Linked the nomarmy CLI onto PATH'
+else
+  echo 'NOTE: could not link the nomarmy CLI (npm global prefix not writable).'
+  echo "      Run it directly instead: node $ROOT/bin/nomarmy.mjs <command>"
+fi
+# The sandbox is required on every profile, cloud included: it is what keeps
+# repository content away from host credentials. Podman readiness (starting
+# the macOS VM if needed) is verified later, in scripts/setup-sandbox.sh --
+# on a fresh macOS install nothing has initialized that VM yet at this point.
+if nomarmy_is_cloud; then need aws || { echo 'ERROR: the AWS CLI is required for cloud profiles.'; exit 1; }; fi
+"$ROOT/scripts/install-llama-cpp.sh" "$NOMARMY_PROFILE"
+if ! command -v openclaw >/dev/null 2>&1; then
+  echo '==> Installing OpenClaw (non-interactive)'
+  curl -fsSL https://openclaw.ai/install.sh | bash -s -- --no-onboard
+  export PATH="$HOME/.local/bin:$HOME/.npm-global/bin:$PATH"
+fi
+need openclaw
+if ! nomarmy_is_cloud; then openclaw plugins install @openclaw/llama-cpp-provider || true; fi
+"$ROOT/scripts/start-inference.sh" "$NOMARMY_PROFILE"
+# Sandbox before provider config: configure-openclaw.sh refuses to store a real
+# Bedrock credential unless the coder sandbox is already network-isolated.
+"$ROOT/scripts/setup-sandbox.sh"
+"$ROOT/scripts/configure-openclaw.sh" "$NOMARMY_PROFILE"
+if [[ "$WITH_CLAUDE" == 1 ]]; then
+  if command -v claude >/dev/null 2>&1; then node "$ROOT/bin/nomarmy.mjs" connect claude; else echo 'NOTE: Claude Code not found; worker stack installed. Install Claude Code then run: nomarmy connect claude'; fi
+fi
+if command -v codex >/dev/null 2>&1; then node "$ROOT/bin/nomarmy.mjs" connect codex; else echo 'NOTE: Codex not found; run: nomarmy connect codex (after installing Codex)'; fi
+"$ROOT/scripts/verify-install.sh" "$NOMARMY_PROFILE"
+if nomarmy_is_cloud && [[ "${NOMARMY_ORCHESTRATOR_RUNTIME:-}" == "claude-code" ]]; then
+  echo
+  echo "==> Next: point the orchestrator at Bedrock"
+  echo "    ./scripts/configure-orchestrator.sh $NOMARMY_PROFILE          # print the settings"
+  echo "    ./scripts/configure-orchestrator.sh $NOMARMY_PROFILE --apply  # write them to Claude Code"
+fi
+echo "==> Install complete. Run: ./e2e.sh --profile $NOMARMY_PROFILE"