cmd/

Command runeward is the CLI entrypoint: it resolves declarative profiles and provisions governed agent sandboxes.

Command runeward-agent runs the in-sandbox agent HTTP server, exposing shell, code, and file operations confined to a workspace root.

Command runeward-browser is the in-sandbox stateful browser driver, driven over CDP.

Command runeward-egress is a deny-by-default forward proxy enforcing an egress.Policy on sandbox traffic (via HTTP_PROXY/HTTPS_PROXY).