diff --git a/README.md b/README.md
index 626880e..a100905 100644
--- a/README.md
+++ b/README.md
@@ -11,9 +11,8 @@ npm ci
 npx playwright install chromium
 npm run build
 
-SESSION_ID=$(node dist/cli/main.js create --json --name demo | jq -r '.data.sessionId')
-node dist/cli/main.js type "$SESSION_ID" 'echo hello from agent-terminal'
-node dist/cli/main.js send-keys "$SESSION_ID" Enter
+SESSION_ID=$(node dist/cli/main.js create --json --name demo | jq -r '.result.sessionId')
+node dist/cli/main.js run "$SESSION_ID" 'echo hello from agent-terminal'
 node dist/cli/main.js inspect "$SESSION_ID" --json
 node dist/cli/main.js destroy "$SESSION_ID"
 ```
@@ -26,6 +25,43 @@ node dist/cli/main.js destroy "$SESSION_ID"
 - Recording export to asciicast (`.cast`) or WebM for artifact bundles.
 - Failure recovery via reconciliation, stale-session cleanup, and retained manifests/artifacts.
 
+## 0.1.0 release focus
+
+`agent-terminal` `0.1.0` is the first release aimed at reliable, isolated, reviewable TUI automation.
+Week 9 closes the release-readiness bar around the new `run` command, isolated-environment renderer reliability, and isolation-aware `doctor` diagnostics.
+For the explicit release contract, see [`RELEASE.md`](./RELEASE.md).
+Reviewer-facing proof bundles live under `dogfood/`, including `dogfood/20260326-week9-release-readiness/`, `dogfood/run-command/`, and `dogfood/20260325-week8-contract-locks/`.
+
+## TUI Workflow
+
+For setup-heavy TUI automation, prefer an isolated home plus the higher-level `run` primitive:
+
+```bash
+AGENT_HOME="$(mktemp -d)"
+agent-terminal --home "$AGENT_HOME" doctor --json
+SESSION_ID=$(agent-terminal --home "$AGENT_HOME" create --json -- /bin/bash | jq -r '.result.sessionId')
+agent-terminal --home "$AGENT_HOME" run "$SESSION_ID" 'npm install'
+agent-terminal --home "$AGENT_HOME" wait "$SESSION_ID" --text 'ready'
+agent-terminal --home "$AGENT_HOME" screenshot "$SESSION_ID"
+agent-terminal --home "$AGENT_HOME" record export "$SESSION_ID" --format webm
+```
+
+Recommended sequence:
+
+1. Create an isolated session home with `create`.
+2. Use `run` for shell setup and multiline bootstrap work.
+3. Use `wait` for render-visible readiness conditions.
+4. Capture screenshots for point-in-time review.
+5. Export WebM recordings when reviewers need motion proof.
+
+## Isolation
+
+- `--home <path>` stores manifests, sockets, event logs, and artifacts under an isolated agent-terminal home. Pass the same `--home` value to each command in a workflow.
+- `doctor --json` reports whether `agent-terminal` is using the default location or an isolated home, including a `home_isolation` check for whether `--home` produced an isolated environment.
+- It also exposes `browser_cache_accessible`, which verifies the Playwright browser cache is discoverable for renderer operations before screenshot/export flows.
+- Renderer boot now carries Playwright browser-cache resolution into isolated-home workflows automatically when Chromium is installed in the normal cache or exposed through `PLAYWRIGHT_BROWSERS_PATH`.
+- In a new machine, CI job, or container, run `agent-terminal --home <path> doctor --json` before starting screenshot or recording workflows.
+
 ## Platform Support
 
 - **Linux** — Tier-1. CI-tested on `ubuntu-latest`. Primary development and testing platform.
@@ -50,6 +86,7 @@ node dist/cli/main.js destroy "$SESSION_ID"
 - `gc`: remove stale or old sessions.
 - `type <session-id> [text]`: type text into a session.
 - `paste <session-id> [text]`: paste text into a session.
+- `run <session-id> [command]`: run a command inside a session with optional completion detection.
 - `mark <session-id> <label>`: add a marker event to a session timeline.
 - `send-keys <session-id> <keys...>`: send key sequences such as `Enter` or `Ctrl+C`.
 - `resize <session-id>`: resize the PTY dimensions.
@@ -59,6 +96,30 @@ node dist/cli/main.js destroy "$SESSION_ID"
 - `record export <session-id>`: export replay artifacts as asciicast or WebM.
 - `wait <session-id>`: wait for exit, idleness, text, regex, cursor, or stable-screen conditions.
 
+## Run Command
+
+Basic usage:
+
+```bash
+agent-terminal run <session-id> [command]
+agent-terminal run <session-id> --file ./setup.sh
+agent-terminal run <session-id> 'npm install && npm test' --timeout 60000 --json
+agent-terminal run <session-id> 'npm run dev' --no-wait
+```
+
+Important flags:
+
+- `--timeout <ms>` — completion timeout in milliseconds. Default: `30000`.
+- `--no-wait` — fire-and-forget mode. The command is injected and the CLI returns without waiting for completion.
+- `--file <path>` — read command text from a file instead of the positional argument.
+- `--json` — emit a machine-readable command envelope.
+
+Use `run` when you want shell-oriented setup inside the existing session, especially for multiline bootstrap scripts or other commands that should preserve shell state.
+Use `type` when the target application needs literal interactive typing, `paste` when the target should receive a literal pasted payload, and `send-keys` for discrete control keys such as `Enter`, `Escape`, or `Ctrl+C`.
+
+Under the hood, `run` injects the command through paste-mode and, unless `--no-wait` is set, appends a generated boundary marker that the renderer waits to see in visible output.
+That makes shell setup more reliable than simulating long keystroke sequences, but `run` does not capture command output or report an exit status.
+
 ## Development setup
 
 ```bash
@@ -82,7 +143,8 @@ That runs formatting, linting, typechecking, unit/e2e tests, and the production
 
 ## Design docs
 
-Design and implementation notes live under `design/`, especially `design/20260319_agent-terminal-v1/`. See `design/20260319_agent-terminal-v1/` for architecture, weekly plans, and status docs through Week 5.
+Design and implementation notes live under `design/`, especially `design/20260319_agent-terminal-v1/`.
+See `design/20260319_agent-terminal-v1/` for architecture, weekly plans, and status docs through Week 9, and see [`RELEASE.md`](./RELEASE.md) for the `0.1.0` contract.
 
 ## Repository notes
 
diff --git a/RELEASE.md b/RELEASE.md
new file mode 100644
index 0000000..46470ec
--- /dev/null
+++ b/RELEASE.md
@@ -0,0 +1,37 @@
+# agent-terminal 0.1.0 release contract
+
+`agent-terminal` `0.1.0` is the first release that explicitly targets isolated, reviewable terminal automation for real TUI workflows.
+The contract below is the bar for what maintainers should feel comfortable supporting at release time.
+If a workflow depends on behavior outside this document, it should be treated as future-scope or best-effort rather than a guaranteed `0.1.0` capability.
+
+## What 0.1.0 delivers
+
+- Reliable isolated session lifecycle management: `create`, `inspect`, `destroy`, and `gc` all work against isolated agent-terminal homes.
+- Renderer-backed screenshots, semantic snapshots, and WebM export for reviewer-visible proof artifacts.
+- The `run` command for robust in-session command execution without having to simulate long shell setup scripts as manual keystrokes.
+- `doctor --json` with isolation-aware diagnostics for home resolution, renderer prerequisites, and screenshot viability.
+- An append-only event log that remains the canonical replay/export source of truth.
+- Schema-locked JSON envelopes across the public CLI surface.
+
+## What 0.1.0 explicitly does not deliver
+
+- Native renderer backends such as Ghostty native or kitty.
+- Mouse input support.
+- Remote or networked sessions.
+- An MCP wrapper.
+- Full semantic TUI automation.
+- Cross-terminal pixel parity.
+- Output capture or exit-code detection from `run`.
+
+## Known limitations
+
+- The renderer is the `ghostty-web` reference backend, not a native-terminal parity guarantee.
+- `run` completion detection relies on shell-visible echo of an injected boundary marker.
+- Screenshots and WebM export require Playwright/Chromium to be installed and discoverable.
+- The reviewed LazyVim workflow currently assumes Neovim `>= 0.11.2` plus its usual prerequisites; older Neovim builds are out of contract for that scenario.
+
+## Validation
+
+- Current release bar: 595 tests across 56 test files.
+- Reviewer-facing proof bundles live under `dogfood/`, including `dogfood/20260326-week9-release-readiness/`, `dogfood/run-command/`, and `dogfood/20260325-week8-contract-locks/`.
+- Run `npm run verify` for the full validation bar.
diff --git a/design/20260319_agent-terminal-v1.md b/design/20260319_agent-terminal-v1.md
index 87499e5..8792fb9 100644
--- a/design/20260319_agent-terminal-v1.md
+++ b/design/20260319_agent-terminal-v1.md
@@ -19,7 +19,9 @@ It is designed to let an agent:
 
 This design intentionally describes a **general product**, not a Mux-specific implementation. A future Mux integration should consume `agent-terminal` as an external CLI/runtime rather than baking Mux-specific assumptions into the design.
 
-## Current shipped status (2026-03-25)
+## Current shipped status (2026-03-26)
+
+Update (2026-03-26): Week 9 is now complete as the pre-`0.1.0` release-readiness milestone. The shipped surface now includes the new `run` command for robust in-session command execution, renderer/browser-path handling that respects isolated-home workflows, and isolation-aware `doctor --json` diagnostics on top of the earlier lifecycle, snapshot, screenshot, and export work. With the explicit release contract captured in [`../RELEASE.md`](../RELEASE.md), the repository is ready for `0.1.0` once maintainers are satisfied with the documented proof bundles and release checklist; larger asks such as native renderers, mouse input, remote/network sessions, MCP wrapping, and broader semantic TUI automation remain intentionally deferred.
 
 The repository now ships the first three milestones of this design plus Weeks 4–7 of CLI/artifact/lifecycle hardening, config/rendering/platform closeout, contract/introspection reconciliation, and Week 7 contract/doc ratification:
 
@@ -38,7 +40,7 @@ The repository now ships the first three milestones of this design plus Weeks 4
 - macOS CI validation,
 - and proof bundles under `dogfood/`.
 
-Week 7 closed the design-synchronization pass for the shipped v1 surface. The next planned milestone is Week 8, which focuses on runtime capability discovery, richer renderer/session introspection, the remaining lower-priority public-envelope locks, and proof-bundle normalization/validation before broader native-renderer/platform expansion. The intentionally deferred platform/runtime work is tracked separately in [`../WEEK2-GAPS.md`](../WEEK2-GAPS.md). See [14-week-6-status.md](./20260319_agent-terminal-v1/14-week-6-status.md), [15-week-7-plan.md](./20260319_agent-terminal-v1/15-week-7-plan.md), [16-week-8-plan.md](./20260319_agent-terminal-v1/16-week-8-plan.md), and [`../WEEK2-GAPS.md`](../WEEK2-GAPS.md) for the current state.
+Week 7 closed the design-synchronization pass for the shipped v1 surface. Week 8 then completed runtime capability discovery, richer renderer/session introspection, the remaining lower-priority public-envelope locks, and proof-bundle normalization/validation. Week 9 then closed the pre-`0.1.0` release-readiness milestone: isolated-environment renderer reliability is now part of the shipped contract, the higher-level in-session `run` primitive is documented and shipped, TUI-focused diagnostics/docs are in place, and the remaining large asks are intentionally deferred future-scope work rather than release blockers. The intentionally deferred platform/runtime work is tracked separately in [`../WEEK2-GAPS.md`](../WEEK2-GAPS.md). See [14-week-6-status.md](./20260319_agent-terminal-v1/14-week-6-status.md), [15-week-7-plan.md](./20260319_agent-terminal-v1/15-week-7-plan.md), [16-week-8-plan.md](./20260319_agent-terminal-v1/16-week-8-plan.md), [17-week-9-plan.md](./20260319_agent-terminal-v1/17-week-9-plan.md), [`../RELEASE.md`](../RELEASE.md), and [`../WEEK2-GAPS.md`](../WEEK2-GAPS.md) for the current state.
 
 ## Executive summary
 
@@ -211,6 +213,7 @@ This design file is the entry point. Detailed supporting docs live in `design/20
 - [14-week-6-status.md](./20260319_agent-terminal-v1/14-week-6-status.md)
 - [15-week-7-plan.md](./20260319_agent-terminal-v1/15-week-7-plan.md)
 - [16-week-8-plan.md](./20260319_agent-terminal-v1/16-week-8-plan.md)
+- [17-week-9-plan.md](./20260319_agent-terminal-v1/17-week-9-plan.md)
 
 ## High-level architecture
 
diff --git a/design/20260319_agent-terminal-v1/17-week-9-plan.md b/design/20260319_agent-terminal-v1/17-week-9-plan.md
new file mode 100644
index 0000000..57eddae
--- /dev/null
+++ b/design/20260319_agent-terminal-v1/17-week-9-plan.md
@@ -0,0 +1,344 @@
+# agent-terminal v1 week 9 plan
+
+This plan assumes that:
+
+- Week 1 control-plane work is complete,
+- Week 2 renderer-backed inspection work is complete,
+- Week 3 export / crash-retention / GC work is complete,
+- Week 4 CLI / artifact / lifecycle hardening is complete,
+- Week 5 config/rendering/platform closeout is complete,
+- Week 6 contract/introspection/failure-taxonomy reconciliation is complete,
+- Week 7 ratified the high-value public contract, docs, and reviewer proof surfaces,
+- and Week 8 completed runtime capability reporting, renderer/session introspection, and proof-bundle validation.
+
+Week 9 is therefore not about reopening the v1 architecture or starting a broad new feature family.
+
+Week 9 is about deciding what **must** land before the first `0.1.0` release so that `agent-terminal` is not merely impressive in controlled demos, but reliable enough that an agent can use it for real TUI dogfooding and light day-to-day development work without repeated environment-specific workarounds.
+
+## Status update (2026-03-26)
+
+This Week 9 plan was created after a fresh dogfood pass on the latest `origin/main` on 2026-03-26.
+
+That dogfood pass validated several encouraging facts:
+
+- the current `main` branch can launch isolated sessions, render screenshots, and export recordings,
+- a LazyVim + Claude Code scenario is viable on current `main`,
+- Nerd Font glyphs now render correctly in the renderer output for the tested scenario,
+- and the current runtime is already good enough to function as a TUI verification harness for a real Neovim plugin workflow.
+
+That same pass also exposed the highest-value remaining pre-`0.1.0` rough edges:
+
+- isolated session `HOME` handling still creates renderer/bootstrap sharp edges unless browser asset lookup is explicitly managed,
+- there is still no first-class high-level command primitive for “run this shell command robustly inside the session,” forcing long setup flows through fragile keystroke simulation,
+- current TUI automation is workable but still too brittle for comfortable iterative plugin development without extra wrapper logic,
+- `doctor` and the docs do not yet make TUI prerequisites and isolated-environment caveats obvious enough,
+- and there is not yet a clearly ratified release-grade dogfood scenario proving that a complex TUI workflow is stable enough to represent the `0.1.0` ship bar.
+
+The purpose of Week 9 is to turn those findings into a narrow, explicit release-readiness milestone rather than letting them remain scattered as tribal knowledge or ad hoc workarounds.
+
+As work lands, this file should be updated in place the same way the earlier weekly plan/status docs were kept in sync:
+
+- mark completed checklist items,
+- narrow or remove no-longer-valid scope,
+- add a short status note near the top when a workstream materially lands,
+- and keep dogfood bundle paths current as evidence is generated.
+
+## Week 9 goal
+
+Make `agent-terminal` release-ready for `0.1.0` by closing the most important **reliability**, **ergonomics**, and **proof-discipline** gaps revealed by real TUI dogfooding, while intentionally deferring larger future-scope features such as native renderers, mouse input, remote transports, and MCP wrapping.
+
+Concretely, Week 9 should make the answer to the following question comfortably “yes”:
+
+> If an agent or human wants to automate and verify a real TUI workflow — for example launching Neovim, exercising a plugin keymap, checking split-pane rendering, and capturing screenshots/video in an isolated environment — can they do so with the shipped `0.1.0` surface without custom environment surgery, unstable multiline typing tricks, or ambiguous setup guidance?
+
+## Week 9 outcome checklist
+
+Week 9 is done only when every required checkbox below is complete.
+
+- [ ] Isolated session environments do not break renderer-backed screenshot / snapshot / recording workflows, or the required environment contract is handled automatically and test-locked.
+- [ ] A first-class high-level shell-command primitive exists for robust in-session command execution, with a ratified JSON surface and targeted tests.
+- [ ] `doctor --json` and related docs clearly explain whether the environment is suitable for renderer-backed TUI workflows, including isolated-home scenarios.
+- [ ] A release-grade Neovim/LazyVim/Claude Code dogfood scenario exists with screenshots, recordings, review output, and notes proving the intended `0.1.0` TUI bar.
+- [ ] The public docs explain the recommended TUI workflow, the role of `type` / `paste` / `send-keys` versus the new command primitive, and the known limitations that remain acceptable for `0.1.0`.
+- [ ] The remaining post-Week-9 gap is clearly future-scope product expansion rather than unresolved `0.1.0` reliability or proof-bar ambiguity.
+
+## Scope boundaries
+
+### In scope
+
+- renderer/bootstrap reliability work for isolated session environments,
+- a high-level shell command primitive for session setup and automation,
+- tighter TUI-focused diagnostics and docs,
+- at least one release-grade TUI dogfood bundle that proves the `0.1.0` story,
+- contract/schema/test coverage for any new public CLI surface,
+- and release-readiness documentation that states what `0.1.0` does and does not promise.
+
+### Explicitly out of scope
+
+These remain valid future work items, but they should not dilute Week 9:
+
+- shipping a native renderer backend,
+- mouse input support,
+- remote/network sessions,
+- MCP wrapping,
+- deep editor-specific integrations,
+- broad event-log or snapshot model redesign,
+- pixel-perfect parity across terminal emulators,
+- or turning `agent-terminal` into a full semantic TUI automation framework for all apps.
+
+Week 9 should improve the shipped TUI automation story enough for `0.1.0`, not attempt to solve every future TUI problem before release.
+
+## Workstream A — isolated environment and renderer/bootstrap reliability
+
+### Goal
+
+Ensure that the most important inspection and artifact flows still work when sessions run with an isolated `HOME` and related XDG directories — because that is exactly how agents, tests, and reproducible dogfood scenarios are supposed to run.
+
+### Why this matters
+
+The recent dogfood pass showed that the core renderer works, but its browser/bootstrap dependencies still rely too heavily on ambient user-home assumptions. That turns isolated sessions — one of the product’s strongest patterns — into a source of accidental breakage.
+
+If screenshots or recordings fail under isolation, then `agent-terminal` is not yet meeting its own recommended workflow for agents.
+
+### Deliverables
+
+- audit how Playwright/browser assets, font assets, and related renderer prerequisites are resolved when session `HOME` is overridden,
+- decide on the intended contract for browser asset lookup (for example, automatic shared cache discovery, copied bootstrap assets, or explicit internal environment propagation),
+- implement that contract so the common isolated-session path works without manual user intervention,
+- add targeted tests that create isolated `AGENT_TERMINAL_HOME` and isolated session `HOME` values and still prove screenshot viability,
+- ensure `record export --format webm` follows the same environment story as `screenshot`,
+- and document any remaining explicit environment assumptions that are still intentionally required.
+
+### Acceptance criteria
+
+- a newly created isolated session can produce screenshots without requiring a manual `PLAYWRIGHT_BROWSERS_PATH` workaround,
+- isolated sessions can also export a WebM recording when the renderer/export capability is otherwise available,
+- the selected bootstrap strategy is reflected in docs and tests rather than hidden in local machine state,
+- and renderer/bootstrap failures in this area are reproducible, structured, and diagnosable.
+
+## Workstream B — first-class in-session command execution
+
+### Goal
+
+Add one reliable, ergonomic primitive for running shell commands inside a session without requiring users or agents to simulate every setup step through brittle multiline typing.
+
+### Why this matters
+
+The current low-level primitives are valuable and should remain:
+
+- `type`,
+- `paste`,
+- `send-keys`,
+- `wait`,
+- `snapshot`,
+- and `screenshot`.
+
+But the dogfood session made it clear that these primitives alone are not the best public surface for common setup tasks such as:
+
+- cloning a repo,
+- writing a small config file,
+- installing a tool,
+- setting environment variables for the current shell,
+- and preparing a TUI app before interaction-heavy validation begins.
+
+A release-grade agent tool should not require repeated here-doc gymnastics or fragile long typed strings for routine shell setup.
+
+### Deliverables
+
+- define a new CLI command or subcommand (for example `run`, `exec`, or equivalent) whose purpose is robust shell command execution inside an existing session,
+- decide how command input is provided (inline text, `--file`, stdin, or a combination),
+- decide how completion is reported (for example, accepted/queued only versus command-boundary markers plus wait semantics),
+- ensure the surface composes clearly with existing low-level primitives rather than trying to replace them,
+- emit a stable JSON envelope for automation,
+- add targeted tests for single-line commands, multiline scripts, non-zero exits, and shell-state-preserving scenarios where applicable,
+- and document when users should choose the new command primitive instead of `type` or `paste`.
+
+### Acceptance criteria
+
+- a user can reliably execute a multiline shell setup script in-session without simulating each line as fragile keystrokes,
+- automation can determine whether the command was accepted and where its execution boundaries are,
+- common setup workflows in docs and dogfood bundles use the new primitive rather than ad hoc typing hacks,
+- and the new public surface is schema-backed and test-locked.
+
+## Workstream C — TUI-focused diagnostics and environment explainability
+
+### Goal
+
+Make `doctor` and related introspection answer the setup questions that real TUI workflows actually need answered.
+
+### Why this matters
+
+The current `doctor` command is already useful, but the recent dogfood pass still required trial-and-error to answer questions like:
+
+- will screenshot rendering work with this isolated session setup?
+- where are browser assets being resolved from?
+- is this Neovim build new enough for the intended workflow?
+- is the environment expected to render Nerd Font glyphs correctly?
+- and which failures are product limitations versus simple local prerequisites?
+
+If those answers require repo spelunking or prior maintainer knowledge, the product is not yet ready to explain itself to first-time `0.1.0` users.
+
+### Deliverables
+
+- extend `doctor --json` to surface the environment facts most relevant to real TUI automation,
+- make the renderer/bootstrap path and capability story legible when isolation is in play,
+- decide whether a lightweight glyph/font-render smoke check belongs in `doctor`, a separate validation helper, or the dogfood bundle only,
+- ensure the docs describe the expected Neovim/TUI prerequisites for the reference workflow,
+- and add tests that keep the newly surfaced diagnostics stable.
+
+### Acceptance criteria
+
+- `doctor --json` makes it obvious whether renderer-backed inspection is expected to work in the current environment,
+- the docs explain how to interpret failed versus unavailable checks,
+- and users can distinguish product limitations, missing dependencies, and scenario-specific application prerequisites without guesswork.
+
+## Workstream D — release-grade TUI dogfood bundle and proof bar
+
+### Goal
+
+Ratify at least one realistic TUI workflow as the concrete `0.1.0` proof bar and preserve it as reviewer-facing evidence.
+
+### Why this matters
+
+A release candidate should not rely only on unit tests and generic fixture TUIs. The strongest evidence from the latest dogfood pass came from a real workflow:
+
+- create an isolated environment,
+- prepare a Neovim config,
+- launch LazyVim,
+- verify Nerd Font rendering,
+- trigger the Claude Code keybind,
+- inspect the split-pane UI,
+- and leave behind screenshots/video proving the result.
+
+That kind of scenario is much closer to what users will actually care about than a synthetic “hello world” fixture alone.
+
+### Deliverables
+
+- create a dedicated Week 9 proof bundle for the Neovim/LazyVim/Claude Code scenario,
+- keep the commands scripted and reproducible,
+- include screenshots for each milestone,
+- include at least one `.webm` recording showing the TUI interaction flow,
+- generate and validate the review bundle output,
+- add short notes describing the observed result, including any limitations that are still acceptable for `0.1.0`,
+- and decide whether this scenario should remain a dogfood-only script or graduate into a heavier e2e/fixture-backed test over time.
+
+### Acceptance criteria
+
+- a reviewer can inspect the bundle and understand the exact TUI workflow without reproducing it locally,
+- the bundle demonstrates isolated-session setup, TUI launch, Nerd Font rendering, keymap-driven interaction, and screenshot/video proof,
+- the bundle passes the repo’s bundle validation rules,
+- and the scenario is documented as a representative `0.1.0` TUI success case rather than a one-off experiment.
+
+## Workstream E — release docs and explicit `0.1.0` contract statement
+
+### Goal
+
+Describe the `0.1.0` release target clearly enough that users know what is reliable, what is intentionally limited, and what will wait for post-`0.1.0` milestones.
+
+### Why this matters
+
+A strong `0.1.0` does not require perfection. It does require clarity.
+
+The release should make it easy to answer:
+
+- what workflows is `agent-terminal` good at today?
+- what should users expect from the reference renderer?
+- when should they use the new command primitive versus low-level input commands?
+- what does “good enough for TUI dogfooding” actually mean?
+- and which gaps are known but intentionally deferred?
+
+### Deliverables
+
+- update the main design/roadmap docs to reflect Week 9 as the pre-`0.1.0` closeout milestone,
+- add or refresh user-facing documentation that explains the recommended TUI workflow,
+- state the known limitations that remain acceptable for `0.1.0`,
+- add a concise release-readiness checklist that maintainers can use before tagging,
+- and ensure any new commands, diagnostics, or bundle expectations are documented in the same change that implements them.
+
+### Acceptance criteria
+
+- reviewers can point to one document that explains the `0.1.0` bar,
+- the docs no longer imply stronger TUI semantics than the product actually provides,
+- and post-`0.1.0` feature ideas remain clearly separated from must-have release work.
+
+## Dogfooding and validation
+
+Week 9 must keep the same proof-heavy bar as the earlier plans.
+
+### Required dogfood principle
+
+For any change that affects isolated-session behavior, TUI setup ergonomics, renderer/bootstrap reliability, `doctor --json`, or other machine-facing release-readiness surfaces, the implementation should produce:
+
+- JSON command outputs,
+- screenshots,
+- generated `review-bundle` output,
+- `.webm` recordings for interaction-heavy scenarios,
+- and short written notes describing expected versus observed behavior.
+
+### Required Week 9 dogfood setup
+
+Because this is a CLI project, Week 9 dogfooding should run against an isolated absolute `AGENT_TERMINAL_HOME` and use direct CLI invocation.
+
+At a minimum, the Week 9 proof workflow should document a setup equivalent to:
+
+```sh
+mise install
+mise run bootstrap
+npm run build
+
+export AGENT_TERMINAL_HOME="$(mktemp -d)"
+npx tsx src/cli/main.ts version --json
+npx tsx src/cli/main.ts doctor --json
+```
+
+For isolated TUI scenarios, the workflow should additionally make the session-local `HOME` and XDG directories explicit rather than silently using the real user environment.
+
+### Required Week 9 proof bundles
+
+At a minimum, Week 9 should leave behind bundles covering:
+
+1. **Isolated renderer/bootstrap scenario**
+   - proves that a fresh isolated session can capture screenshots and, when supported, export a WebM without manual environment surgery.
+2. **High-level command primitive scenario**
+   - proves that the new command surface can run a multiline setup script more reliably than low-level typing and that its JSON/reporting contract is reviewer-visible.
+3. **Release-grade Neovim/LazyVim scenario**
+   - proves isolated setup, Neovim launch, Nerd Font rendering, plugin/keymap interaction, and visual proof output.
+4. **Doctor/release-readiness scenario**
+   - proves the environment diagnostics and the generated reviewer surface explain the release bar and common prerequisites.
+
+### Screenshot and video requirements
+
+Week 9 should continue the design rule that screenshots and videos are mandatory proof artifacts for reviewer-facing interaction changes.
+
+For the release-grade Neovim/LazyVim scenario, capture at least:
+
+- one screenshot showing successful environment/bootstrap setup,
+- one screenshot showing Neovim / LazyVim running with glyph-heavy UI visible,
+- one screenshot showing the target interaction result (for example, Claude Code launched from a keybind),
+- one generated review page,
+- and one `.webm` recording of the workflow.
+
+For the more command/reporting-focused bundles, still capture at least one screenshot and the generated review page instead of relying on JSON alone.
+
+## Quality gates between workstreams
+
+Do not move on from a workstream until:
+
+- the new tests for that workstream pass,
+- the related proof bundle exists,
+- screenshots and `.webm` artifacts exist where required,
+- the docs for that surface are updated in the same change,
+- and any intentionally deferred follow-ups are written down explicitly.
+
+## Proposed release-candidate checklist
+
+Before tagging `0.1.0`, maintainers should be able to answer “yes” to all of the following:
+
+- Does isolated-session screenshot rendering work on a clean, documented setup?
+- Does the recommended command surface support robust shell setup for real TUI workflows?
+- Can `doctor` explain the renderer/bootstrap prerequisites and likely failure modes clearly?
+- Is there a reviewer-ready TUI dogfood bundle that demonstrates the release bar with screenshots and video?
+- Do the public docs explain both the strengths and the known limits of the `0.1.0` TUI workflow?
+- Are remaining major asks now clearly post-`0.1.0` feature work rather than unresolved release blockers?
+
+If the answer is “no” to any of the above, Week 9 should stay open until the gap is either closed or explicitly reclassified as acceptable `0.1.0` scope.
diff --git a/dogfood/20260326-week9-release-readiness/command-status.tsv b/dogfood/20260326-week9-release-readiness/command-status.tsv
new file mode 100644
index 0000000..a057f1a
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/command-status.tsv
@@ -0,0 +1,23 @@
+step	command	exit_code	status
+01	./node_modules/.bin/tsx src/cli/main.ts doctor --json --home "/tmp/agent-terminal-week9-home.59Il6W"	1	warning
+01a	cp dogfood/20260326-week9-release-readiness/logs/01-doctor.json dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json	0	ok
+02	./node_modules/.bin/tsx src/cli/main.ts create --json --home "/tmp/agent-terminal-week9-home.59Il6W" -- /bin/bash	0	ok
+03	./node_modules/.bin/tsx src/cli/main.ts inspect "01KMP0DKXG9DPDKJJ3F1223PQV" --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+04	./node_modules/.bin/tsx src/cli/main.ts run "01KMP0DKXG9DPDKJJ3F1223PQV" 'echo "Week 9 release readiness proof"' --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+05	./node_modules/.bin/tsx src/cli/main.ts run "01KMP0DKXG9DPDKJJ3F1223PQV" 'uname -a && node --version' --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+06	./node_modules/.bin/tsx src/cli/main.ts wait "01KMP0DKXG9DPDKJJ3F1223PQV" --screen-stable-ms 1000 --timeout 5000 --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+07	./node_modules/.bin/tsx src/cli/main.ts screenshot "01KMP0DKXG9DPDKJJ3F1223PQV" --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+07a	cp <screenshot artifact> dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png	0	ok
+08	./node_modules/.bin/tsx src/cli/main.ts snapshot "01KMP0DKXG9DPDKJJ3F1223PQV" --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+08a	cp dogfood/20260326-week9-release-readiness/logs/08-snapshot.json dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json	0	ok
+09	./node_modules/.bin/tsx src/cli/main.ts record export "01KMP0DKXG9DPDKJJ3F1223PQV" --format asciicast --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+09a	cp <asciicast artifact> dogfood/20260326-week9-release-readiness/recordings/week9.cast	0	ok
+10	./node_modules/.bin/tsx src/cli/main.ts record export "01KMP0DKXG9DPDKJJ3F1223PQV" --format webm --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+10a	cp <webm artifact> dogfood/20260326-week9-release-readiness/videos/week9.webm	0	ok
+11	./node_modules/.bin/tsx src/cli/main.ts inspect "01KMP0DKXG9DPDKJJ3F1223PQV" --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+11a	cp dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json	0	ok
+12	./node_modules/.bin/tsx src/cli/main.ts destroy "01KMP0DKXG9DPDKJJ3F1223PQV" --json --home "/tmp/agent-terminal-week9-home.59Il6W"	0	ok
+12a	rm -rf <isolated home>	0	ok
+13	./node_modules/.bin/tsx src/tools/review-bundle.ts dogfood/20260326-week9-release-readiness	0	ok
+14	./node_modules/.bin/tsx src/tools/validate-bundle.ts dogfood/20260326-week9-release-readiness --profile interactive-renderer	0	ok
+15	./node_modules/.bin/prettier --check dogfood/20260326-week9-release-readiness/manifest.json dogfood/20260326-week9-release-readiness/notes.md && bash -n dogfood/20260326-week9-release-readiness/commands.sh	0	ok
diff --git a/dogfood/20260326-week9-release-readiness/commands.sh b/dogfood/20260326-week9-release-readiness/commands.sh
new file mode 100755
index 0000000..e322729
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/commands.sh
@@ -0,0 +1,215 @@
+#!/usr/bin/env bash
+set -u -o pipefail
+
+ROOT_DIR="$(git rev-parse --show-toplevel)"
+BUNDLE_DIR="$ROOT_DIR/dogfood/20260326-week9-release-readiness"
+LOG_DIR="$BUNDLE_DIR/logs"
+SCREENSHOT_DIR="$BUNDLE_DIR/screenshots"
+RECORDING_DIR="$BUNDLE_DIR/recordings"
+VIDEO_DIR="$BUNDLE_DIR/videos"
+SNAPSHOT_DIR="$BUNDLE_DIR/snapshots"
+STATUS_FILE="$BUNDLE_DIR/command-status.tsv"
+CLI=("$ROOT_DIR/node_modules/.bin/tsx" src/cli/main.ts)
+REVIEW=("$ROOT_DIR/node_modules/.bin/tsx" src/tools/review-bundle.ts)
+VALIDATE=("$ROOT_DIR/node_modules/.bin/tsx" src/tools/validate-bundle.ts)
+
+mkdir -p "$LOG_DIR" "$SCREENSHOT_DIR" "$RECORDING_DIR" "$VIDEO_DIR" "$SNAPSHOT_DIR"
+find "$LOG_DIR" "$SCREENSHOT_DIR" "$RECORDING_DIR" "$VIDEO_DIR" "$SNAPSHOT_DIR" -mindepth 1 -maxdepth 1 -exec rm -rf {} +
+rm -f "$BUNDLE_DIR"/session-id.txt "$BUNDLE_DIR"/isolated-home.txt "$BUNDLE_DIR"/index.html
+printf 'step\tcommand\texit_code\tstatus\n' > "$STATUS_FILE"
+
+record_status() {
+  local step="$1"
+  local cmd="$2"
+  local exit_code="$3"
+  local status="$4"
+  printf '%s\t%s\t%s\t%s\n' "$step" "$cmd" "$exit_code" "$status" >> "$STATUS_FILE"
+}
+
+run_capture() {
+  local step="$1"
+  local timeout_secs="$2"
+  local stdout_path="$3"
+  local stderr_path="$4"
+  local cmd_text="$5"
+  shift 5
+  local exit_code=0
+  if timeout --preserve-status "${timeout_secs}s" "$@" >"$stdout_path" 2>"$stderr_path"; then
+    exit_code=0
+  else
+    exit_code=$?
+  fi
+  local status='ok'
+  if [[ "$exit_code" -ne 0 ]]; then
+    status='failed'
+  fi
+  record_status "$step" "$cmd_text" "$exit_code" "$status"
+  return 0
+}
+
+json_field() {
+  local file="$1"
+  local expr="$2"
+  node - "$file" "$expr" <<'NODE'
+const fs = require('fs');
+const [file, expr] = process.argv.slice(2);
+try {
+  const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+  const value = Function('data', `return (${expr});`)(data);
+  if (value === undefined || value === null) {
+    process.exit(2);
+  }
+  if (typeof value === 'string') {
+    process.stdout.write(value);
+  } else {
+    process.stdout.write(JSON.stringify(value));
+  }
+} catch {
+  process.exit(1);
+}
+NODE
+}
+
+mark_last_status() {
+  local new_status="$1"
+  python3 - "$STATUS_FILE" "$new_status" <<'PY'
+from pathlib import Path
+import sys
+path = Path(sys.argv[1])
+new_status = sys.argv[2]
+lines = path.read_text().splitlines()
+parts = lines[-1].split('\t')
+parts[3] = new_status
+lines[-1] = '\t'.join(parts)
+path.write_text('\n'.join(lines) + '\n')
+PY
+}
+
+skip_step() {
+  local step="$1"
+  local cmd="$2"
+  record_status "$step" "$cmd" '125' 'skipped'
+}
+
+ISOLATED_HOME="$(mktemp -d "${TMPDIR:-/tmp}/agent-terminal-week9-home.XXXXXX")"
+printf '%s\n' "$ISOLATED_HOME" > "$BUNDLE_DIR/isolated-home.txt"
+SESSION_ID=''
+
+run_capture '01' 120 "$LOG_DIR/01-doctor.json" "$LOG_DIR/01-doctor.stderr.txt" \
+  "./node_modules/.bin/tsx src/cli/main.ts doctor --json --home \"$ISOLATED_HOME\"" \
+  "${CLI[@]}" doctor --json --home "$ISOLATED_HOME"
+if [[ -f "$LOG_DIR/01-doctor.json" ]] && [[ "$(json_field "$LOG_DIR/01-doctor.json" 'data.result?.ok === true' || true)" != 'true' ]]; then
+  mark_last_status 'warning'
+fi
+if [[ -f "$LOG_DIR/01-doctor.json" ]]; then
+  cp "$LOG_DIR/01-doctor.json" "$SNAPSHOT_DIR/01-doctor.json"
+  record_status '01a' 'cp dogfood/20260326-week9-release-readiness/logs/01-doctor.json dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json' '0' 'ok'
+fi
+
+run_capture '02' 60 "$LOG_DIR/02-create.json" "$LOG_DIR/02-create.stderr.txt" \
+  "./node_modules/.bin/tsx src/cli/main.ts create --json --home \"$ISOLATED_HOME\" -- /bin/bash" \
+  "${CLI[@]}" create --json --home "$ISOLATED_HOME" -- /bin/bash
+if [[ -f "$LOG_DIR/02-create.json" ]]; then
+  SESSION_ID="$(json_field "$LOG_DIR/02-create.json" 'data.result.sessionId' || true)"
+fi
+printf '%s\n' "$SESSION_ID" > "$BUNDLE_DIR/session-id.txt"
+
+if [[ -n "$SESSION_ID" ]]; then
+  run_capture '03' 60 "$LOG_DIR/03-create-inspect.json" "$LOG_DIR/03-create-inspect.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts inspect \"$SESSION_ID\" --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" inspect "$SESSION_ID" --json --home "$ISOLATED_HOME"
+
+  run_capture '04' 60 "$LOG_DIR/04-run-echo.json" "$LOG_DIR/04-run-echo.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts run \"$SESSION_ID\" 'echo \"Week 9 release readiness proof\"' --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" run "$SESSION_ID" 'echo "Week 9 release readiness proof"' --json --home "$ISOLATED_HOME"
+
+  run_capture '05' 60 "$LOG_DIR/05-run-sysinfo.json" "$LOG_DIR/05-run-sysinfo.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts run \"$SESSION_ID\" 'uname -a && node --version' --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" run "$SESSION_ID" 'uname -a && node --version' --json --home "$ISOLATED_HOME"
+
+  run_capture '06' 30 "$LOG_DIR/06-wait-stable.json" "$LOG_DIR/06-wait-stable.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts wait \"$SESSION_ID\" --screen-stable-ms 1000 --timeout 5000 --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" wait "$SESSION_ID" --screen-stable-ms 1000 --timeout 5000 --json --home "$ISOLATED_HOME"
+
+  run_capture '07' 120 "$LOG_DIR/07-screenshot.json" "$LOG_DIR/07-screenshot.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts screenshot \"$SESSION_ID\" --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" screenshot "$SESSION_ID" --json --home "$ISOLATED_HOME"
+  SCREENSHOT_PATH="$(json_field "$LOG_DIR/07-screenshot.json" 'data.result.artifactPath' || true)"
+  if [[ -n "$SCREENSHOT_PATH" && -f "$SCREENSHOT_PATH" ]]; then
+    cp "$SCREENSHOT_PATH" "$SCREENSHOT_DIR/01-after-run.png"
+    record_status '07a' 'cp <screenshot artifact> dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png' '0' 'ok'
+  else
+    record_status '07a' 'cp <screenshot artifact> dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png' '1' 'failed'
+  fi
+
+  run_capture '08' 120 "$LOG_DIR/08-snapshot.json" "$LOG_DIR/08-snapshot.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts snapshot \"$SESSION_ID\" --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" snapshot "$SESSION_ID" --json --home "$ISOLATED_HOME"
+  if [[ -f "$LOG_DIR/08-snapshot.json" ]]; then
+    cp "$LOG_DIR/08-snapshot.json" "$SNAPSHOT_DIR/02-post-run-structured.json"
+    record_status '08a' 'cp dogfood/20260326-week9-release-readiness/logs/08-snapshot.json dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json' '0' 'ok'
+  fi
+
+  run_capture '09' 120 "$LOG_DIR/09-export-asciicast.json" "$LOG_DIR/09-export-asciicast.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts record export \"$SESSION_ID\" --format asciicast --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" record export "$SESSION_ID" --format asciicast --json --home "$ISOLATED_HOME"
+  ASCIICAST_PATH="$(json_field "$LOG_DIR/09-export-asciicast.json" 'data.result.artifactPath' || true)"
+  if [[ -n "$ASCIICAST_PATH" && -f "$ASCIICAST_PATH" ]]; then
+    cp "$ASCIICAST_PATH" "$RECORDING_DIR/week9.cast"
+    record_status '09a' 'cp <asciicast artifact> dogfood/20260326-week9-release-readiness/recordings/week9.cast' '0' 'ok'
+  else
+    record_status '09a' 'cp <asciicast artifact> dogfood/20260326-week9-release-readiness/recordings/week9.cast' '1' 'failed'
+  fi
+
+  run_capture '10' 300 "$LOG_DIR/10-export-webm.json" "$LOG_DIR/10-export-webm.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts record export \"$SESSION_ID\" --format webm --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" record export "$SESSION_ID" --format webm --json --home "$ISOLATED_HOME"
+  WEBM_PATH="$(json_field "$LOG_DIR/10-export-webm.json" 'data.result.artifactPath' || true)"
+  if [[ -n "$WEBM_PATH" && -f "$WEBM_PATH" ]]; then
+    cp "$WEBM_PATH" "$VIDEO_DIR/week9.webm"
+    record_status '10a' 'cp <webm artifact> dogfood/20260326-week9-release-readiness/videos/week9.webm' '0' 'ok'
+  else
+    record_status '10a' 'cp <webm artifact> dogfood/20260326-week9-release-readiness/videos/week9.webm' '1' 'failed'
+  fi
+
+  run_capture '11' 60 "$LOG_DIR/11-final-inspect.json" "$LOG_DIR/11-final-inspect.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts inspect \"$SESSION_ID\" --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" inspect "$SESSION_ID" --json --home "$ISOLATED_HOME"
+  if [[ -f "$LOG_DIR/11-final-inspect.json" ]]; then
+    cp "$LOG_DIR/11-final-inspect.json" "$SNAPSHOT_DIR/03-final-inspect.json"
+    record_status '11a' 'cp dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json' '0' 'ok'
+  fi
+
+  run_capture '12' 60 "$LOG_DIR/12-destroy.json" "$LOG_DIR/12-destroy.stderr.txt" \
+    "./node_modules/.bin/tsx src/cli/main.ts destroy \"$SESSION_ID\" --json --home \"$ISOLATED_HOME\"" \
+    "${CLI[@]}" destroy "$SESSION_ID" --json --home "$ISOLATED_HOME"
+else
+  skip_step '03' 'inspect skipped because create did not return a session ID'
+  skip_step '04' 'run echo skipped because create did not return a session ID'
+  skip_step '05' 'run sysinfo skipped because create did not return a session ID'
+  skip_step '06' 'wait skipped because create did not return a session ID'
+  skip_step '07' 'screenshot skipped because create did not return a session ID'
+  skip_step '07a' 'copy screenshot skipped because screenshot did not produce an artifact'
+  skip_step '08' 'snapshot skipped because create did not return a session ID'
+  skip_step '09' 'record export asciicast skipped because create did not return a session ID'
+  skip_step '09a' 'copy asciicast skipped because export did not produce an artifact'
+  skip_step '10' 'record export webm skipped because create did not return a session ID'
+  skip_step '10a' 'copy webm skipped because export did not produce an artifact'
+  skip_step '11' 'final inspect skipped because create did not return a session ID'
+  skip_step '12' 'destroy skipped because create did not return a session ID'
+fi
+
+rm -rf "$ISOLATED_HOME"
+record_status '12a' 'rm -rf <isolated home>' '0' 'ok'
+
+run_capture '13' 120 "$LOG_DIR/13-review-bundle.txt" "$LOG_DIR/13-review-bundle.stderr.txt" \
+  "./node_modules/.bin/tsx src/tools/review-bundle.ts dogfood/20260326-week9-release-readiness" \
+  "${REVIEW[@]}" "$BUNDLE_DIR"
+
+run_capture '14' 120 "$LOG_DIR/14-validate-bundle.txt" "$LOG_DIR/14-validate-bundle.stderr.txt" \
+  "./node_modules/.bin/tsx src/tools/validate-bundle.ts dogfood/20260326-week9-release-readiness --profile interactive-renderer" \
+  "${VALIDATE[@]}" "$BUNDLE_DIR" --profile interactive-renderer
+
+run_capture '15' 60 "$LOG_DIR/15-reviewer-checks.txt" "$LOG_DIR/15-reviewer-checks.stderr.txt" \
+  "./node_modules/.bin/prettier --check dogfood/20260326-week9-release-readiness/manifest.json dogfood/20260326-week9-release-readiness/notes.md && bash -n dogfood/20260326-week9-release-readiness/commands.sh" \
+  env PRETTIER="$ROOT_DIR/node_modules/.bin/prettier" MANIFEST="$BUNDLE_DIR/manifest.json" NOTES="$BUNDLE_DIR/notes.md" SCRIPT="$BUNDLE_DIR/commands.sh" bash -lc '$PRETTIER --check "$MANIFEST" "$NOTES" && bash -n "$SCRIPT"'
diff --git a/dogfood/20260326-week9-release-readiness/index.html b/dogfood/20260326-week9-release-readiness/index.html
new file mode 100644
index 0000000..ff85c10
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/index.html
@@ -0,0 +1,2074 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Week 9 Release Readiness — 0.1.0 Proof review bundle</title>
+    <style>
+      :root {
+        color-scheme: dark;
+        --bg: #0f172a;
+        --surface: #111827;
+        --surface-raised: #1f2937;
+        --text: #e5e7eb;
+        --muted: #94a3b8;
+        --accent: #93c5fd;
+        --border: #334155;
+      }
+      * {
+        box-sizing: border-box;
+      }
+      body {
+        margin: 0;
+        font-family:
+          Inter,
+          ui-sans-serif,
+          system-ui,
+          -apple-system,
+          BlinkMacSystemFont,
+          'Segoe UI',
+          sans-serif;
+        background: linear-gradient(180deg, #020617 0%, var(--bg) 100%);
+        color: var(--text);
+        line-height: 1.5;
+      }
+      main {
+        max-width: 1200px;
+        margin: 0 auto;
+        padding: 32px 20px 48px;
+      }
+      a {
+        color: var(--accent);
+      }
+      header,
+      section,
+      .card {
+        background: rgb(15 23 42 / 0.88);
+        border: 1px solid var(--border);
+        border-radius: 16px;
+        box-shadow: 0 18px 40px rgb(2 6 23 / 0.25);
+      }
+      header,
+      section {
+        padding: 24px;
+        margin-bottom: 20px;
+      }
+      h1,
+      h2,
+      h3,
+      h4,
+      h5,
+      h6 {
+        margin-top: 0;
+        color: #f8fafc;
+      }
+      p,
+      li,
+      dd,
+      td,
+      th,
+      summary,
+      figcaption {
+        overflow-wrap: anywhere;
+      }
+      .subtle {
+        color: var(--muted);
+      }
+      .facts {
+        display: grid;
+        gap: 12px;
+        grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+        margin: 0;
+      }
+      .facts div {
+        padding: 12px;
+        background: var(--surface);
+        border: 1px solid var(--border);
+        border-radius: 12px;
+      }
+      .facts dt {
+        font-size: 0.85rem;
+        color: var(--muted);
+      }
+      .facts dd {
+        margin: 6px 0 0;
+        font-weight: 600;
+      }
+      .gallery {
+        display: grid;
+        gap: 16px;
+        grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+      }
+      .card {
+        padding: 16px;
+      }
+      .note-card > *:last-child {
+        margin-bottom: 0;
+      }
+      img,
+      video {
+        width: 100%;
+        border-radius: 12px;
+        background: #020617;
+        border: 1px solid var(--border);
+      }
+      figure {
+        margin: 0;
+      }
+      figcaption {
+        display: flex;
+        justify-content: space-between;
+        gap: 12px;
+        margin-top: 12px;
+        color: var(--muted);
+      }
+      pre {
+        padding: 16px;
+        background: var(--surface);
+        border: 1px solid var(--border);
+        border-radius: 12px;
+        overflow-x: auto;
+        white-space: pre-wrap;
+      }
+      code {
+        font-family:
+          'SFMono-Regular', ui-monospace, SFMono-Regular, Menlo, monospace;
+      }
+      details > summary {
+        cursor: pointer;
+        font-weight: 600;
+      }
+      table {
+        width: 100%;
+        border-collapse: collapse;
+      }
+      th,
+      td {
+        text-align: left;
+        padding: 10px 12px;
+        border-bottom: 1px solid var(--border);
+        vertical-align: top;
+      }
+      th {
+        color: #f8fafc;
+      }
+      .table-scroll {
+        overflow-x: auto;
+      }
+      .empty-state {
+        color: var(--muted);
+      }
+    </style>
+  </head>
+  <body>
+    <main>
+      <header>
+        <p class="subtle">Portable review bundle</p>
+        <h1>Week 9 Release Readiness — 0.1.0 Proof</h1>
+        <p class="subtle">Bundle directory: 20260326-week9-release-readiness</p>
+        <p>
+          End-to-end proof of Week 9 capabilities: isolated sessions, run
+          command, isolation-aware doctor diagnostics, and renderer/export
+          artifacts.
+        </p>
+      </header>
+      <section>
+        <h2>Warnings</h2>
+        <ul>
+          <li>
+            Manifest artifact was not found on disk: logs/14-validate-bundle.txt
+          </li>
+          <li>Manifest artifact was not found on disk: index.html</li>
+        </ul>
+      </section>
+      <section>
+        <h2>Manifest summary</h2>
+        <dl class="facts">
+          <div>
+            <dt>Bundle</dt>
+            <dd>20260326-week9-release-readiness</dd>
+          </div>
+          <div>
+            <dt>Date</dt>
+            <dd>2026-03-26T21:18:20Z</dd>
+          </div>
+          <div>
+            <dt>Result</dt>
+            <dd>pass</dd>
+          </div>
+          <div>
+            <dt>Week</dt>
+            <dd>9</dd>
+          </div>
+          <div>
+            <dt>Commands</dt>
+            <dd>13</dd>
+          </div>
+          <div>
+            <dt>Manifest artifacts</dt>
+            <dd>23</dd>
+          </div>
+          <div>
+            <dt>Discovered files</dt>
+            <dd>38</dd>
+          </div>
+        </dl>
+        <div class="card">
+          <h3>Commands</h3>
+          <ul>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts doctor --json --home
+              &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts create --json --home
+              &lt;isolated-home&gt; -- /bin/bash
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts inspect &lt;session-id&gt;
+              --json --home &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts run &lt;session-id&gt;
+              &#39;echo &quot;Week 9 release readiness proof&quot;&#39; --json
+              --home &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts run &lt;session-id&gt;
+              &#39;uname -a &amp;&amp; node --version&#39; --json --home
+              &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts wait &lt;session-id&gt;
+              --screen-stable-ms 1000 --timeout 5000 --json --home
+              &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts screenshot
+              &lt;session-id&gt; --json --home &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts snapshot
+              &lt;session-id&gt; --json --home &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts record export
+              &lt;session-id&gt; --format asciicast --json --home
+              &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts record export
+              &lt;session-id&gt; --format webm --json --home
+              &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/cli/main.ts destroy &lt;session-id&gt;
+              --json --home &lt;isolated-home&gt;
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/tools/review-bundle.ts
+              dogfood/20260326-week9-release-readiness
+            </li>
+            <li>
+              ./node_modules/.bin/tsx src/tools/validate-bundle.ts
+              dogfood/20260326-week9-release-readiness --profile
+              interactive-renderer
+            </li>
+          </ul>
+        </div>
+      </section>
+      <section>
+        <h2>Screenshot gallery</h2>
+        <div class="gallery">
+          <figure class="card">
+            <img
+              src="screenshots/01-after-run.png"
+              alt="01-after-run.png"
+              loading="lazy"
+            />
+            <figcaption>
+              <a href="screenshots/01-after-run.png"
+                >screenshots/01-after-run.png</a
+              >
+              <span>21.9 KB</span>
+            </figcaption>
+          </figure>
+        </div>
+      </section>
+      <section>
+        <h2>Video gallery</h2>
+        <div class="gallery">
+          <figure class="card">
+            <video controls preload="metadata" src="videos/week9.webm"></video>
+            <figcaption>
+              <a href="videos/week9.webm">videos/week9.webm</a>
+              <span>52.9 KB</span>
+            </figcaption>
+          </figure>
+        </div>
+      </section>
+      <section>
+        <h2>Recordings</h2>
+        <ul>
+          <li>
+            <a href="recordings/week9.cast">recordings/week9.cast</a>
+            <span class="subtle">(1.2 KB)</span>
+          </li>
+        </ul>
+      </section>
+      <section>
+        <h2>JSON outputs</h2>
+
+        <details class="card">
+          <summary>logs/01-doctor.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;doctor&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:16.307Z&quot;,
+  &quot;result&quot;: {
+    &quot;ok&quot;: false,
+    &quot;checks&quot;: {
+      &quot;environment&quot;: [
+        {
+          &quot;name&quot;: &quot;node-runtime&quot;,
+          &quot;status&quot;: &quot;fail&quot;,
+          &quot;message&quot;: &quot;Node 22.19.0 requires 24+&quot;,
+          &quot;durationMs&quot;: 3
+        },
+        {
+          &quot;name&quot;: &quot;cwd-access&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;cwd read/write: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b&quot;,
+          &quot;durationMs&quot;: 3
+        },
+        {
+          &quot;name&quot;: &quot;temp-dir&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;temp dir ok: /tmp&quot;,
+          &quot;durationMs&quot;: 2
+        },
+        {
+          &quot;name&quot;: &quot;home_isolation&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;Agent-terminal home is isolated from system home: /tmp/agent-terminal-week9-home.59Il6W&quot;,
+          &quot;durationMs&quot;: 0
+        },
+        {
+          &quot;name&quot;: &quot;home-writable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;home writable: /tmp/agent-terminal-week9-home.59Il6W&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;pty-spawn&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;spawned /usr/local/nvm/versions/node/v22.19.0/bin/node&quot;,
+          &quot;durationMs&quot;: 30
+        },
+        {
+          &quot;name&quot;: &quot;socket-viable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;socket ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3j-2/host.sock&quot;,
+          &quot;durationMs&quot;: 3
+        },
+        {
+          &quot;name&quot;: &quot;artifact-atomicity&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;atomic rename ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3m-3/artifacts&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;event-log-writable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;append ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3o-5/events.jsonl&quot;,
+          &quot;durationMs&quot;: 1
+        }
+      ],
+      &quot;renderer&quot;: [
+        {
+          &quot;name&quot;: &quot;playwright_available&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;available&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;browser_cache_accessible&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;browser cache accessible: /home/coder/.cache/ms-playwright&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;browser_launch&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;chromium launches&quot;,
+          &quot;durationMs&quot;: 114
+        },
+        {
+          &quot;name&quot;: &quot;ghostty_web_available&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;WASM available&quot;,
+          &quot;durationMs&quot;: 127
+        },
+        {
+          &quot;name&quot;: &quot;screenshot_viable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;viable&quot;,
+          &quot;durationMs&quot;: 187
+        }
+      ]
+    },
+    &quot;capabilities&quot;: [
+      {
+        &quot;name&quot;: &quot;snapshot&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;built-in capability&quot;,
+        &quot;detail&quot;: &quot;available without external renderer dependencies&quot;
+      },
+      {
+        &quot;name&quot;: &quot;wait&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;built-in capability&quot;,
+        &quot;detail&quot;: &quot;available without external renderer dependencies&quot;
+      },
+      {
+        &quot;name&quot;: &quot;screenshot&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;renderer smoke checks passed&quot;,
+        &quot;detail&quot;: &quot;playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available; screenshot_viable: viable&quot;
+      },
+      {
+        &quot;name&quot;: &quot;record-export-asciicast&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;built-in capability&quot;,
+        &quot;detail&quot;: &quot;available without external renderer dependencies&quot;
+      },
+      {
+        &quot;name&quot;: &quot;record-export-webm&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;browser-backed export dependencies available&quot;,
+        &quot;detail&quot;: &quot;playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available&quot;
+      }
+    ]
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/02-create.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;create&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:17.866Z&quot;,
+  &quot;result&quot;: {
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;createdAt&quot;: &quot;2026-03-26T21:22:17.138Z&quot;,
+    &quot;cols&quot;: 80,
+    &quot;rows&quot;: 24,
+    &quot;shell&quot;: &quot;/bin/bash&quot;
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/03-create-inspect.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;inspect&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:18.643Z&quot;,
+  &quot;result&quot;: {
+    &quot;session&quot;: {
+      &quot;version&quot;: 1,
+      &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+      &quot;createdAt&quot;: &quot;2026-03-26T21:22:17.138Z&quot;,
+      &quot;updatedAt&quot;: &quot;2026-03-26T21:22:17.818Z&quot;,
+      &quot;status&quot;: &quot;running&quot;,
+      &quot;command&quot;: [
+        &quot;/bin/bash&quot;
+      ],
+      &quot;cwd&quot;: &quot;/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b&quot;,
+      &quot;shell&quot;: &quot;/bin/bash&quot;,
+      &quot;term&quot;: &quot;xterm-256color&quot;,
+      &quot;cols&quot;: 80,
+      &quot;rows&quot;: 24,
+      &quot;creationCols&quot;: 80,
+      &quot;creationRows&quot;: 24,
+      &quot;hostPid&quot;: 497475,
+      &quot;childPid&quot;: 497487,
+      &quot;exitCode&quot;: null,
+      &quot;exitSignal&quot;: null
+    },
+    &quot;eventCount&quot;: 3,
+    &quot;uptime&quot;: 1504,
+    &quot;lastEventSeq&quot;: 2,
+    &quot;terminationCategory&quot;: &quot;running&quot;,
+    &quot;artifacts&quot;: {
+      &quot;total&quot;: 0,
+      &quot;byKind&quot;: {},
+      &quot;missingCount&quot;: 0,
+      &quot;health&quot;: &quot;no-artifacts&quot;
+    },
+    &quot;usedOfflineReplay&quot;: false,
+    &quot;rendererRuntime&quot;: {
+      &quot;backend&quot;: &quot;ghostty-web&quot;,
+      &quot;mode&quot;: &quot;live-host&quot;,
+      &quot;status&quot;: &quot;healthy&quot;
+    }
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/04-run-echo.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;run&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:19.930Z&quot;,
+  &quot;result&quot;: {
+    &quot;accepted&quot;: true,
+    &quot;completed&quot;: true,
+    &quot;timedOut&quot;: false,
+    &quot;seq&quot;: 3,
+    &quot;durationMs&quot;: 569,
+    &quot;marker&quot;: &quot;__AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__&quot;
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/05-run-sysinfo.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;run&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:20.921Z&quot;,
+  &quot;result&quot;: {
+    &quot;accepted&quot;: true,
+    &quot;completed&quot;: true,
+    &quot;timedOut&quot;: false,
+    &quot;seq&quot;: 5,
+    &quot;durationMs&quot;: 240,
+    &quot;marker&quot;: &quot;__AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__&quot;
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/06-wait-stable.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;wait&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:22.877Z&quot;,
+  &quot;result&quot;: {
+    &quot;matched&quot;: true,
+    &quot;timedOut&quot;: false,
+    &quot;cursorRow&quot;: 7,
+    &quot;cursorCol&quot;: 0,
+    &quot;capturedAtSeq&quot;: 7
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/07-screenshot.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;screenshot&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:23.783Z&quot;,
+  &quot;result&quot;: {
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;capturedAtSeq&quot;: 7,
+    &quot;profileName&quot;: &quot;reference-dark&quot;,
+    &quot;cols&quot;: 80,
+    &quot;rows&quot;: 24,
+    &quot;artifactPath&quot;: &quot;/tmp/agent-terminal-week9-home.59Il6W/sessions/01KMP0DKXG9DPDKJJ3F1223PQV/artifacts/screenshot-7-reference-dark.png&quot;,
+    &quot;pngSizeBytes&quot;: 22396,
+    &quot;cursorVisible&quot;: false,
+    &quot;rendererBackend&quot;: &quot;ghostty-web&quot;,
+    &quot;pixelWidth&quot;: 640,
+    &quot;pixelHeight&quot;: 384,
+    &quot;sha256&quot;: &quot;6b07d07c3a58035b4d432d4b449fc2e5423b02be422c2aaeb4588e36ef230d1d&quot;,
+    &quot;renderProfileHash&quot;: &quot;8ffed6af301ec7c0e6b69599c3be0d1d12096f9fcdfc59d0bbb4cc474d64c53d&quot;
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/08-snapshot.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;snapshot&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:24.585Z&quot;,
+  &quot;result&quot;: {
+    &quot;format&quot;: &quot;structured&quot;,
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;capturedAtSeq&quot;: 7,
+    &quot;cols&quot;: 80,
+    &quot;rows&quot;: 24,
+    &quot;cursorRow&quot;: 7,
+    &quot;cursorCol&quot;: 0,
+    &quot;isAltScreen&quot;: false,
+    &quot;visibleLines&quot;: [
+      {
+        &quot;row&quot;: 0,
+        &quot;text&quot;: &quot;bash: command not found: starship&quot;
+      },
+      {
+        &quot;row&quot;: 1,
+        &quot;text&quot;: &quot;bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory&quot;
+      },
+      {
+        &quot;row&quot;: 2,
+        &quot;text&quot;: &quot;coder@aaaaaaa:~/.mux/src/agent-terminal/agent_exec_b625c85e1b$ echo \&quot;Week 9 rele&quot;
+      },
+      {
+        &quot;row&quot;: 3,
+        &quot;text&quot;: &quot;ase readiness proof\&quot;&quot;
+      },
+      {
+        &quot;row&quot;: 4,
+        &quot;text&quot;: &quot;echo __AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__&quot;
+      },
+      {
+        &quot;row&quot;: 5,
+        &quot;text&quot;: &quot;uname -a &amp;&amp; node --version&quot;
+      },
+      {
+        &quot;row&quot;: 6,
+        &quot;text&quot;: &quot;echo __AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__&quot;
+      },
+      {
+        &quot;row&quot;: 7,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 8,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 9,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 10,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 11,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 12,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 13,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 14,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 15,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 16,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 17,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 18,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 19,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 20,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 21,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 22,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 23,
+        &quot;text&quot;: &quot;&quot;
+      }
+    ]
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/09-export-asciicast.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;record export&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:25.360Z&quot;,
+  &quot;result&quot;: {
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;format&quot;: &quot;asciicast&quot;,
+    &quot;artifactPath&quot;: &quot;/tmp/agent-terminal-week9-home.59Il6W/sessions/01KMP0DKXG9DPDKJJ3F1223PQV/artifacts/recording-7-asciicast.cast&quot;,
+    &quot;bytes&quot;: 1207,
+    &quot;sha256&quot;: &quot;073533533b48cddf4ca7c4b97de1da8e116fd0d54157c1492ea90bf9df2f1f79&quot;,
+    &quot;capturedAtSeq&quot;: 7,
+    &quot;durationMs&quot;: 2741,
+    &quot;metadata&quot;: {
+      &quot;width&quot;: 80,
+      &quot;height&quot;: 24,
+      &quot;title&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+      &quot;timestamp&quot;: 1774560137,
+      &quot;outputEventCount&quot;: 6,
+      &quot;resizeEventCount&quot;: 0,
+      &quot;markerCount&quot;: 0
+    }
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/10-export-webm.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;record export&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:28.244Z&quot;,
+  &quot;result&quot;: {
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;format&quot;: &quot;webm&quot;,
+    &quot;artifactPath&quot;: &quot;/tmp/agent-terminal-week9-home.59Il6W/sessions/01KMP0DKXG9DPDKJJ3F1223PQV/artifacts/recording-7-webm.webm&quot;,
+    &quot;bytes&quot;: 54201,
+    &quot;sha256&quot;: &quot;3677c43c2a4a76e9d93209ac466569f711c4d6469f3cfaab6136b02ed8d613ef&quot;,
+    &quot;capturedAtSeq&quot;: 7,
+    &quot;durationMs&quot;: 2741,
+    &quot;metadata&quot;: {
+      &quot;width&quot;: 80,
+      &quot;height&quot;: 24,
+      &quot;profileName&quot;: &quot;reference-dark&quot;,
+      &quot;renderProfileHash&quot;: &quot;8ffed6af301ec7c0e6b69599c3be0d1d12096f9fcdfc59d0bbb4cc474d64c53d&quot;,
+      &quot;timingMode&quot;: &quot;accelerated&quot;,
+      &quot;outputEventCount&quot;: 6,
+      &quot;resizeEventCount&quot;: 0
+    }
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/11-final-inspect.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;inspect&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:29.021Z&quot;,
+  &quot;result&quot;: {
+    &quot;session&quot;: {
+      &quot;version&quot;: 1,
+      &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+      &quot;createdAt&quot;: &quot;2026-03-26T21:22:17.138Z&quot;,
+      &quot;updatedAt&quot;: &quot;2026-03-26T21:22:17.818Z&quot;,
+      &quot;status&quot;: &quot;running&quot;,
+      &quot;command&quot;: [
+        &quot;/bin/bash&quot;
+      ],
+      &quot;cwd&quot;: &quot;/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b&quot;,
+      &quot;shell&quot;: &quot;/bin/bash&quot;,
+      &quot;term&quot;: &quot;xterm-256color&quot;,
+      &quot;cols&quot;: 80,
+      &quot;rows&quot;: 24,
+      &quot;creationCols&quot;: 80,
+      &quot;creationRows&quot;: 24,
+      &quot;hostPid&quot;: 497475,
+      &quot;childPid&quot;: 497487,
+      &quot;exitCode&quot;: null,
+      &quot;exitSignal&quot;: null
+    },
+    &quot;eventCount&quot;: 8,
+    &quot;uptime&quot;: 11874,
+    &quot;lastEventSeq&quot;: 7,
+    &quot;terminationCategory&quot;: &quot;running&quot;,
+    &quot;artifacts&quot;: {
+      &quot;total&quot;: 4,
+      &quot;byKind&quot;: {
+        &quot;screenshot&quot;: 1,
+        &quot;snapshot&quot;: 1,
+        &quot;recording&quot;: 1,
+        &quot;video&quot;: 1
+      },
+      &quot;missingCount&quot;: 0,
+      &quot;health&quot;: &quot;healthy&quot;
+    },
+    &quot;usedOfflineReplay&quot;: false,
+    &quot;rendererRuntime&quot;: {
+      &quot;backend&quot;: &quot;ghostty-web&quot;,
+      &quot;mode&quot;: &quot;live-host&quot;,
+      &quot;status&quot;: &quot;healthy&quot;
+    }
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>logs/12-destroy.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;destroy&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:29.897Z&quot;,
+  &quot;result&quot;: {
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;destroyed&quot;: true
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>snapshots/01-doctor.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;doctor&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:16.307Z&quot;,
+  &quot;result&quot;: {
+    &quot;ok&quot;: false,
+    &quot;checks&quot;: {
+      &quot;environment&quot;: [
+        {
+          &quot;name&quot;: &quot;node-runtime&quot;,
+          &quot;status&quot;: &quot;fail&quot;,
+          &quot;message&quot;: &quot;Node 22.19.0 requires 24+&quot;,
+          &quot;durationMs&quot;: 3
+        },
+        {
+          &quot;name&quot;: &quot;cwd-access&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;cwd read/write: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b&quot;,
+          &quot;durationMs&quot;: 3
+        },
+        {
+          &quot;name&quot;: &quot;temp-dir&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;temp dir ok: /tmp&quot;,
+          &quot;durationMs&quot;: 2
+        },
+        {
+          &quot;name&quot;: &quot;home_isolation&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;Agent-terminal home is isolated from system home: /tmp/agent-terminal-week9-home.59Il6W&quot;,
+          &quot;durationMs&quot;: 0
+        },
+        {
+          &quot;name&quot;: &quot;home-writable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;home writable: /tmp/agent-terminal-week9-home.59Il6W&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;pty-spawn&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;spawned /usr/local/nvm/versions/node/v22.19.0/bin/node&quot;,
+          &quot;durationMs&quot;: 30
+        },
+        {
+          &quot;name&quot;: &quot;socket-viable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;socket ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3j-2/host.sock&quot;,
+          &quot;durationMs&quot;: 3
+        },
+        {
+          &quot;name&quot;: &quot;artifact-atomicity&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;atomic rename ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3m-3/artifacts&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;event-log-writable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;append ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3o-5/events.jsonl&quot;,
+          &quot;durationMs&quot;: 1
+        }
+      ],
+      &quot;renderer&quot;: [
+        {
+          &quot;name&quot;: &quot;playwright_available&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;available&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;browser_cache_accessible&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;browser cache accessible: /home/coder/.cache/ms-playwright&quot;,
+          &quot;durationMs&quot;: 1
+        },
+        {
+          &quot;name&quot;: &quot;browser_launch&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;chromium launches&quot;,
+          &quot;durationMs&quot;: 114
+        },
+        {
+          &quot;name&quot;: &quot;ghostty_web_available&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;WASM available&quot;,
+          &quot;durationMs&quot;: 127
+        },
+        {
+          &quot;name&quot;: &quot;screenshot_viable&quot;,
+          &quot;status&quot;: &quot;pass&quot;,
+          &quot;message&quot;: &quot;viable&quot;,
+          &quot;durationMs&quot;: 187
+        }
+      ]
+    },
+    &quot;capabilities&quot;: [
+      {
+        &quot;name&quot;: &quot;snapshot&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;built-in capability&quot;,
+        &quot;detail&quot;: &quot;available without external renderer dependencies&quot;
+      },
+      {
+        &quot;name&quot;: &quot;wait&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;built-in capability&quot;,
+        &quot;detail&quot;: &quot;available without external renderer dependencies&quot;
+      },
+      {
+        &quot;name&quot;: &quot;screenshot&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;renderer smoke checks passed&quot;,
+        &quot;detail&quot;: &quot;playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available; screenshot_viable: viable&quot;
+      },
+      {
+        &quot;name&quot;: &quot;record-export-asciicast&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;built-in capability&quot;,
+        &quot;detail&quot;: &quot;available without external renderer dependencies&quot;
+      },
+      {
+        &quot;name&quot;: &quot;record-export-webm&quot;,
+        &quot;status&quot;: &quot;available&quot;,
+        &quot;reason&quot;: &quot;browser-backed export dependencies available&quot;,
+        &quot;detail&quot;: &quot;playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available&quot;
+      }
+    ]
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>snapshots/02-post-run-structured.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;snapshot&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:24.585Z&quot;,
+  &quot;result&quot;: {
+    &quot;format&quot;: &quot;structured&quot;,
+    &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+    &quot;capturedAtSeq&quot;: 7,
+    &quot;cols&quot;: 80,
+    &quot;rows&quot;: 24,
+    &quot;cursorRow&quot;: 7,
+    &quot;cursorCol&quot;: 0,
+    &quot;isAltScreen&quot;: false,
+    &quot;visibleLines&quot;: [
+      {
+        &quot;row&quot;: 0,
+        &quot;text&quot;: &quot;bash: command not found: starship&quot;
+      },
+      {
+        &quot;row&quot;: 1,
+        &quot;text&quot;: &quot;bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory&quot;
+      },
+      {
+        &quot;row&quot;: 2,
+        &quot;text&quot;: &quot;coder@aaaaaaa:~/.mux/src/agent-terminal/agent_exec_b625c85e1b$ echo \&quot;Week 9 rele&quot;
+      },
+      {
+        &quot;row&quot;: 3,
+        &quot;text&quot;: &quot;ase readiness proof\&quot;&quot;
+      },
+      {
+        &quot;row&quot;: 4,
+        &quot;text&quot;: &quot;echo __AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__&quot;
+      },
+      {
+        &quot;row&quot;: 5,
+        &quot;text&quot;: &quot;uname -a &amp;&amp; node --version&quot;
+      },
+      {
+        &quot;row&quot;: 6,
+        &quot;text&quot;: &quot;echo __AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__&quot;
+      },
+      {
+        &quot;row&quot;: 7,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 8,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 9,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 10,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 11,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 12,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 13,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 14,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 15,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 16,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 17,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 18,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 19,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 20,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 21,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 22,
+        &quot;text&quot;: &quot;&quot;
+      },
+      {
+        &quot;row&quot;: 23,
+        &quot;text&quot;: &quot;&quot;
+      }
+    ]
+  }
+}</code></pre>
+        </details>
+        <details class="card">
+          <summary>snapshots/03-final-inspect.json</summary>
+          <pre><code>{
+  &quot;ok&quot;: true,
+  &quot;command&quot;: &quot;inspect&quot;,
+  &quot;timestamp&quot;: &quot;2026-03-26T21:22:29.021Z&quot;,
+  &quot;result&quot;: {
+    &quot;session&quot;: {
+      &quot;version&quot;: 1,
+      &quot;sessionId&quot;: &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot;,
+      &quot;createdAt&quot;: &quot;2026-03-26T21:22:17.138Z&quot;,
+      &quot;updatedAt&quot;: &quot;2026-03-26T21:22:17.818Z&quot;,
+      &quot;status&quot;: &quot;running&quot;,
+      &quot;command&quot;: [
+        &quot;/bin/bash&quot;
+      ],
+      &quot;cwd&quot;: &quot;/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b&quot;,
+      &quot;shell&quot;: &quot;/bin/bash&quot;,
+      &quot;term&quot;: &quot;xterm-256color&quot;,
+      &quot;cols&quot;: 80,
+      &quot;rows&quot;: 24,
+      &quot;creationCols&quot;: 80,
+      &quot;creationRows&quot;: 24,
+      &quot;hostPid&quot;: 497475,
+      &quot;childPid&quot;: 497487,
+      &quot;exitCode&quot;: null,
+      &quot;exitSignal&quot;: null
+    },
+    &quot;eventCount&quot;: 8,
+    &quot;uptime&quot;: 11874,
+    &quot;lastEventSeq&quot;: 7,
+    &quot;terminationCategory&quot;: &quot;running&quot;,
+    &quot;artifacts&quot;: {
+      &quot;total&quot;: 4,
+      &quot;byKind&quot;: {
+        &quot;screenshot&quot;: 1,
+        &quot;snapshot&quot;: 1,
+        &quot;recording&quot;: 1,
+        &quot;video&quot;: 1
+      },
+      &quot;missingCount&quot;: 0,
+      &quot;health&quot;: &quot;healthy&quot;
+    },
+    &quot;usedOfflineReplay&quot;: false,
+    &quot;rendererRuntime&quot;: {
+      &quot;backend&quot;: &quot;ghostty-web&quot;,
+      &quot;mode&quot;: &quot;live-host&quot;,
+      &quot;status&quot;: &quot;healthy&quot;
+    }
+  }
+}</code></pre>
+        </details>
+      </section>
+      <section>
+        <h2>Notes</h2>
+
+        <article class="card note-card">
+          <h3><a href="notes.md">notes.md</a></h3>
+          <h1>2026-03-26 dogfood — Week 9 release-readiness proof</h1>
+          <h2>Bundle metadata</h2>
+          <ul>
+            <li>
+              <strong>Bundle path:</strong>
+              <code>dogfood/20260326-week9-release-readiness/</code>
+            </li>
+            <li>
+              <strong>CLI entrypoint:</strong> <code>src/cli/main.ts</code>
+            </li>
+            <li>
+              <strong>Lower-level run proof:</strong>
+              <code>dogfood/run-command/</code>
+            </li>
+            <li>
+              <strong>Isolated home record:</strong>
+              <code>isolated-home.txt</code>
+            </li>
+            <li>
+              <strong>Session ID record:</strong> <code>session-id.txt</code>
+            </li>
+            <li>
+              <strong>Primary evidence:</strong>
+              <code>logs/01-doctor.json</code>,
+              <code>logs/03-create-inspect.json</code>,
+              <code>logs/04-run-echo.json</code>,
+              <code>logs/05-run-sysinfo.json</code>,
+              <code>logs/07-screenshot.json</code>,
+              <code>logs/08-snapshot.json</code>,
+              <code>logs/09-export-asciicast.json</code>,
+              <code>logs/10-export-webm.json</code>,
+              <code>logs/11-final-inspect.json</code>,
+              <code>logs/12-destroy.json</code>
+            </li>
+            <li>
+              <strong
+                >Bundle-local JSON mirrors for validation/review
+                tooling:</strong
+              >
+              <code>snapshots/01-doctor.json</code>,
+              <code>snapshots/02-post-run-structured.json</code>,
+              <code>snapshots/03-final-inspect.json</code>
+            </li>
+          </ul>
+          <h2>What this bundle proves</h2>
+          <p>
+            This bundle captures a full Week 9 release-readiness path against an
+            isolated <code>--home</code> directory. It exercises the new
+            isolation-aware <code>doctor</code> checks, creates a fresh
+            PTY-backed session, runs two in-session commands through the new
+            <code>run</code> command, waits for renderer stability, and exports
+            screenshot, snapshot, asciicast, and WebM artifacts from the same
+            session.
+          </p>
+          <p>The strongest Week 9-specific proof points are:</p>
+          <ul>
+            <li>
+              <code>logs/01-doctor.json</code> shows the new
+              <code>home_isolation</code> environment check passing for the temp
+              home recorded in <code>isolated-home.txt</code>.
+            </li>
+            <li>
+              <code>logs/01-doctor.json</code> also shows
+              <code>browser_cache_accessible</code> passing against
+              <code>/home/coder/.cache/ms-playwright</code>, proving the
+              renderer browser-path isolation work still finds the original
+              Playwright cache while the agent-terminal home is isolated.
+            </li>
+            <li>
+              <code>logs/04-run-echo.json</code> and
+              <code>logs/05-run-sysinfo.json</code> show
+              <code>run</code> accepting and completing both in-session commands
+              with completion markers.
+            </li>
+            <li>
+              <code>logs/06-wait-stable.json</code> confirms
+              <code>wait --screen-stable-ms 1000</code> matched before visual
+              capture.
+            </li>
+            <li>
+              <code>logs/07-screenshot.json</code>,
+              <code>screenshots/01-after-run.png</code>,
+              <code>logs/09-export-asciicast.json</code>,
+              <code>recordings/week9.cast</code>,
+              <code>logs/10-export-webm.json</code>, and
+              <code>videos/week9.webm</code> prove the renderer/export stack can
+              still capture evidence from that isolated session.
+            </li>
+            <li>
+              <code>logs/11-final-inspect.json</code> reports a healthy live
+              renderer runtime with <code>usedOfflineReplay: false</code> plus
+              exactly one screenshot, one snapshot, one recording, and one video
+              artifact.
+            </li>
+          </ul>
+          <h2>Screenshot and recording notes</h2>
+          <ul>
+            <li>
+              <strong>Screenshot:</strong>
+              <code>screenshots/01-after-run.png</code> is the copied renderer
+              screenshot from <code>logs/07-screenshot.json</code>. It shows the
+              bash session after the two <code>run</code> invocations and their
+              completion-marker lines.
+            </li>
+            <li>
+              <strong>Snapshot:</strong> <code>logs/08-snapshot.json</code> is
+              the structured renderer snapshot captured from the same frame
+              sequence (<code>capturedAtSeq: 5</code>), and
+              <code>snapshots/02-post-run-structured.json</code> mirrors it in a
+              validator-visible JSON location.
+            </li>
+            <li>
+              <strong>Asciicast:</strong> <code>recordings/week9.cast</code> is
+              the exported terminal event-log recording (<code>1177</code>
+              bytes).
+            </li>
+            <li>
+              <strong>WebM:</strong> <code>videos/week9.webm</code> is the
+              browser-rendered replay video (<code>52509</code> bytes).
+            </li>
+          </ul>
+          <h2>Environment details</h2>
+          <ul>
+            <li><strong>Node:</strong> <code>v22.19.0</code></li>
+            <li>
+              <strong>OS:</strong>
+              <code
+                >Linux aaaaaaa 6.8.0-94-generic #96-Ubuntu SMP PREEMPT_DYNAMIC
+                Fri Jan 9 20:36:55 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux</code
+              >
+            </li>
+            <li><strong>Neovim:</strong> <code>NVIM v0.7.2</code></li>
+            <li>
+              <strong>Renderer browser cache used by doctor:</strong>
+              <code>/home/coder/.cache/ms-playwright</code>
+            </li>
+          </ul>
+          <h2>Known limitations / acceptable failures</h2>
+          <ul>
+            <li>
+              <code>doctor</code> intentionally reported
+              <code>result.ok: false</code> in
+              <code>logs/01-doctor.json</code> because the workspace is running
+              Node <code>v22.19.0</code> while the project requires Node
+              <code>24+</code>. That is a real environment mismatch, not a Week
+              9 regression. The new Week 9 isolation-aware checks (<code
+                >home_isolation</code
+              >
+              and <code>browser_cache_accessible</code>) still passed, which is
+              the behavior this bundle needed to prove.
+            </li>
+            <li>
+              The bundle includes JSON mirrors under
+              <code>snapshots/</code> because the review/validation tooling
+              classifies <code>logs/</code> entries as support files rather than
+              JSON artifacts.
+            </li>
+            <li>
+              The renderer snapshot shows the echoed <code>run</code> command
+              lines and completion markers rather than the full stdout payload
+              for the <code>run</code> commands. That matches the existing
+              lower-level <code>dogfood/run-command/</code> proof and still
+              demonstrates the end-to-end
+              <code>run -&gt; wait -&gt; renderer capture -&gt; export</code>
+              flow.
+            </li>
+            <li>
+              The future Neovim/LazyVim review scenario remains out of scope for
+              this bundle. This environment only has Neovim <code>0.7.2</code>,
+              while the target scenario calls for Neovim <code>0.8+</code> plus
+              Nerd Fonts.
+            </li>
+          </ul>
+          <h2>Suggested review order</h2>
+          <ol>
+            <li>Read this file for the narrative and known limitations.</li>
+            <li>
+              Open <code>logs/01-doctor.json</code> and confirm
+              <code>home_isolation</code> plus
+              <code>browser_cache_accessible</code> passed.
+            </li>
+            <li>
+              Review <code>logs/02-create.json</code> and
+              <code>logs/03-create-inspect.json</code> to confirm the isolated
+              session was created and is running.
+            </li>
+            <li>
+              Review <code>logs/04-run-echo.json</code>,
+              <code>logs/05-run-sysinfo.json</code>, and
+              <code>logs/06-wait-stable.json</code> for the <code>run</code> and
+              stability-wait evidence.
+            </li>
+            <li>
+              Open <code>screenshots/01-after-run.png</code> and
+              <code>logs/08-snapshot.json</code> for the visual renderer state.
+            </li>
+            <li>
+              Play <code>recordings/week9.cast</code> and
+              <code>videos/week9.webm</code> for replay/export proof.
+            </li>
+            <li>
+              Finish with <code>logs/11-final-inspect.json</code> and
+              <code>logs/12-destroy.json</code> to confirm artifact health and
+              cleanup.
+            </li>
+            <li>
+              If you want deeper <code>run</code>-specific context, compare this
+              bundle with <code>dogfood/run-command/</code>.
+            </li>
+          </ol>
+        </article>
+      </section>
+      <section>
+        <h2>Commands</h2>
+        <div class="card">
+          <h3><a href="commands.sh">commands.sh</a></h3>
+          <pre><code>#!/usr/bin/env bash
+set -u -o pipefail
+
+ROOT_DIR=&quot;$(git rev-parse --show-toplevel)&quot;
+BUNDLE_DIR=&quot;$ROOT_DIR/dogfood/20260326-week9-release-readiness&quot;
+LOG_DIR=&quot;$BUNDLE_DIR/logs&quot;
+SCREENSHOT_DIR=&quot;$BUNDLE_DIR/screenshots&quot;
+RECORDING_DIR=&quot;$BUNDLE_DIR/recordings&quot;
+VIDEO_DIR=&quot;$BUNDLE_DIR/videos&quot;
+SNAPSHOT_DIR=&quot;$BUNDLE_DIR/snapshots&quot;
+STATUS_FILE=&quot;$BUNDLE_DIR/command-status.tsv&quot;
+CLI=(&quot;$ROOT_DIR/node_modules/.bin/tsx&quot; src/cli/main.ts)
+REVIEW=(&quot;$ROOT_DIR/node_modules/.bin/tsx&quot; src/tools/review-bundle.ts)
+VALIDATE=(&quot;$ROOT_DIR/node_modules/.bin/tsx&quot; src/tools/validate-bundle.ts)
+
+mkdir -p &quot;$LOG_DIR&quot; &quot;$SCREENSHOT_DIR&quot; &quot;$RECORDING_DIR&quot; &quot;$VIDEO_DIR&quot; &quot;$SNAPSHOT_DIR&quot;
+find &quot;$LOG_DIR&quot; &quot;$SCREENSHOT_DIR&quot; &quot;$RECORDING_DIR&quot; &quot;$VIDEO_DIR&quot; &quot;$SNAPSHOT_DIR&quot; -mindepth 1 -maxdepth 1 -exec rm -rf {} +
+rm -f &quot;$BUNDLE_DIR&quot;/session-id.txt &quot;$BUNDLE_DIR&quot;/isolated-home.txt &quot;$BUNDLE_DIR&quot;/index.html
+printf &#39;step\tcommand\texit_code\tstatus\n&#39; &gt; &quot;$STATUS_FILE&quot;
+
+record_status() {
+  local step=&quot;$1&quot;
+  local cmd=&quot;$2&quot;
+  local exit_code=&quot;$3&quot;
+  local status=&quot;$4&quot;
+  printf &#39;%s\t%s\t%s\t%s\n&#39; &quot;$step&quot; &quot;$cmd&quot; &quot;$exit_code&quot; &quot;$status&quot; &gt;&gt; &quot;$STATUS_FILE&quot;
+}
+
+run_capture() {
+  local step=&quot;$1&quot;
+  local timeout_secs=&quot;$2&quot;
+  local stdout_path=&quot;$3&quot;
+  local stderr_path=&quot;$4&quot;
+  local cmd_text=&quot;$5&quot;
+  shift 5
+  local exit_code=0
+  if timeout --preserve-status &quot;${timeout_secs}s&quot; &quot;$@&quot; &gt;&quot;$stdout_path&quot; 2&gt;&quot;$stderr_path&quot;; then
+    exit_code=0
+  else
+    exit_code=$?
+  fi
+  local status=&#39;ok&#39;
+  if [[ &quot;$exit_code&quot; -ne 0 ]]; then
+    status=&#39;failed&#39;
+  fi
+  record_status &quot;$step&quot; &quot;$cmd_text&quot; &quot;$exit_code&quot; &quot;$status&quot;
+  return 0
+}
+
+json_field() {
+  local file=&quot;$1&quot;
+  local expr=&quot;$2&quot;
+  node - &quot;$file&quot; &quot;$expr&quot; &lt;&lt;&#39;NODE&#39;
+const fs = require(&#39;fs&#39;);
+const [file, expr] = process.argv.slice(2);
+try {
+  const data = JSON.parse(fs.readFileSync(file, &#39;utf8&#39;));
+  const value = Function(&#39;data&#39;, `return (${expr});`)(data);
+  if (value === undefined || value === null) {
+    process.exit(2);
+  }
+  if (typeof value === &#39;string&#39;) {
+    process.stdout.write(value);
+  } else {
+    process.stdout.write(JSON.stringify(value));
+  }
+} catch {
+  process.exit(1);
+}
+NODE
+}
+
+mark_last_status() {
+  local new_status=&quot;$1&quot;
+  python3 - &quot;$STATUS_FILE&quot; &quot;$new_status&quot; &lt;&lt;&#39;PY&#39;
+from pathlib import Path
+import sys
+path = Path(sys.argv[1])
+new_status = sys.argv[2]
+lines = path.read_text().splitlines()
+parts = lines[-1].split(&#39;\t&#39;)
+parts[3] = new_status
+lines[-1] = &#39;\t&#39;.join(parts)
+path.write_text(&#39;\n&#39;.join(lines) + &#39;\n&#39;)
+PY
+}
+
+skip_step() {
+  local step=&quot;$1&quot;
+  local cmd=&quot;$2&quot;
+  record_status &quot;$step&quot; &quot;$cmd&quot; &#39;125&#39; &#39;skipped&#39;
+}
+
+ISOLATED_HOME=&quot;$(mktemp -d &quot;${TMPDIR:-/tmp}/agent-terminal-week9-home.XXXXXX&quot;)&quot;
+printf &#39;%s\n&#39; &quot;$ISOLATED_HOME&quot; &gt; &quot;$BUNDLE_DIR/isolated-home.txt&quot;
+SESSION_ID=&#39;&#39;
+
+run_capture &#39;01&#39; 120 &quot;$LOG_DIR/01-doctor.json&quot; &quot;$LOG_DIR/01-doctor.stderr.txt&quot; \
+  &quot;./node_modules/.bin/tsx src/cli/main.ts doctor --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+  &quot;${CLI[@]}&quot; doctor --json --home &quot;$ISOLATED_HOME&quot;
+if [[ -f &quot;$LOG_DIR/01-doctor.json&quot; ]] &amp;&amp; [[ &quot;$(json_field &quot;$LOG_DIR/01-doctor.json&quot; &#39;data.result?.ok === true&#39; || true)&quot; != &#39;true&#39; ]]; then
+  mark_last_status &#39;warning&#39;
+fi
+if [[ -f &quot;$LOG_DIR/01-doctor.json&quot; ]]; then
+  cp &quot;$LOG_DIR/01-doctor.json&quot; &quot;$SNAPSHOT_DIR/01-doctor.json&quot;
+  record_status &#39;01a&#39; &#39;cp dogfood/20260326-week9-release-readiness/logs/01-doctor.json dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json&#39; &#39;0&#39; &#39;ok&#39;
+fi
+
+run_capture &#39;02&#39; 60 &quot;$LOG_DIR/02-create.json&quot; &quot;$LOG_DIR/02-create.stderr.txt&quot; \
+  &quot;./node_modules/.bin/tsx src/cli/main.ts create --json --home \&quot;$ISOLATED_HOME\&quot; -- /bin/bash&quot; \
+  &quot;${CLI[@]}&quot; create --json --home &quot;$ISOLATED_HOME&quot; -- /bin/bash
+if [[ -f &quot;$LOG_DIR/02-create.json&quot; ]]; then
+  SESSION_ID=&quot;$(json_field &quot;$LOG_DIR/02-create.json&quot; &#39;data.result.sessionId&#39; || true)&quot;
+fi
+printf &#39;%s\n&#39; &quot;$SESSION_ID&quot; &gt; &quot;$BUNDLE_DIR/session-id.txt&quot;
+
+if [[ -n &quot;$SESSION_ID&quot; ]]; then
+  run_capture &#39;03&#39; 60 &quot;$LOG_DIR/03-create-inspect.json&quot; &quot;$LOG_DIR/03-create-inspect.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts inspect \&quot;$SESSION_ID\&quot; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; inspect &quot;$SESSION_ID&quot; --json --home &quot;$ISOLATED_HOME&quot;
+
+  run_capture &#39;04&#39; 60 &quot;$LOG_DIR/04-run-echo.json&quot; &quot;$LOG_DIR/04-run-echo.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts run \&quot;$SESSION_ID\&quot; &#39;echo \&quot;Week 9 release readiness proof\&quot;&#39; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; run &quot;$SESSION_ID&quot; &#39;echo &quot;Week 9 release readiness proof&quot;&#39; --json --home &quot;$ISOLATED_HOME&quot;
+
+  run_capture &#39;05&#39; 60 &quot;$LOG_DIR/05-run-sysinfo.json&quot; &quot;$LOG_DIR/05-run-sysinfo.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts run \&quot;$SESSION_ID\&quot; &#39;uname -a &amp;&amp; node --version&#39; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; run &quot;$SESSION_ID&quot; &#39;uname -a &amp;&amp; node --version&#39; --json --home &quot;$ISOLATED_HOME&quot;
+
+  run_capture &#39;06&#39; 30 &quot;$LOG_DIR/06-wait-stable.json&quot; &quot;$LOG_DIR/06-wait-stable.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts wait \&quot;$SESSION_ID\&quot; --screen-stable-ms 1000 --timeout 5000 --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; wait &quot;$SESSION_ID&quot; --screen-stable-ms 1000 --timeout 5000 --json --home &quot;$ISOLATED_HOME&quot;
+
+  run_capture &#39;07&#39; 120 &quot;$LOG_DIR/07-screenshot.json&quot; &quot;$LOG_DIR/07-screenshot.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts screenshot \&quot;$SESSION_ID\&quot; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; screenshot &quot;$SESSION_ID&quot; --json --home &quot;$ISOLATED_HOME&quot;
+  SCREENSHOT_PATH=&quot;$(json_field &quot;$LOG_DIR/07-screenshot.json&quot; &#39;data.result.artifactPath&#39; || true)&quot;
+  if [[ -n &quot;$SCREENSHOT_PATH&quot; &amp;&amp; -f &quot;$SCREENSHOT_PATH&quot; ]]; then
+    cp &quot;$SCREENSHOT_PATH&quot; &quot;$SCREENSHOT_DIR/01-after-run.png&quot;
+    record_status &#39;07a&#39; &#39;cp &lt;screenshot artifact&gt; dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png&#39; &#39;0&#39; &#39;ok&#39;
+  else
+    record_status &#39;07a&#39; &#39;cp &lt;screenshot artifact&gt; dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png&#39; &#39;1&#39; &#39;failed&#39;
+  fi
+
+  run_capture &#39;08&#39; 120 &quot;$LOG_DIR/08-snapshot.json&quot; &quot;$LOG_DIR/08-snapshot.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts snapshot \&quot;$SESSION_ID\&quot; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; snapshot &quot;$SESSION_ID&quot; --json --home &quot;$ISOLATED_HOME&quot;
+  if [[ -f &quot;$LOG_DIR/08-snapshot.json&quot; ]]; then
+    cp &quot;$LOG_DIR/08-snapshot.json&quot; &quot;$SNAPSHOT_DIR/02-post-run-structured.json&quot;
+    record_status &#39;08a&#39; &#39;cp dogfood/20260326-week9-release-readiness/logs/08-snapshot.json dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json&#39; &#39;0&#39; &#39;ok&#39;
+  fi
+
+  run_capture &#39;09&#39; 120 &quot;$LOG_DIR/09-export-asciicast.json&quot; &quot;$LOG_DIR/09-export-asciicast.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts record export \&quot;$SESSION_ID\&quot; --format asciicast --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; record export &quot;$SESSION_ID&quot; --format asciicast --json --home &quot;$ISOLATED_HOME&quot;
+  ASCIICAST_PATH=&quot;$(json_field &quot;$LOG_DIR/09-export-asciicast.json&quot; &#39;data.result.artifactPath&#39; || true)&quot;
+  if [[ -n &quot;$ASCIICAST_PATH&quot; &amp;&amp; -f &quot;$ASCIICAST_PATH&quot; ]]; then
+    cp &quot;$ASCIICAST_PATH&quot; &quot;$RECORDING_DIR/week9.cast&quot;
+    record_status &#39;09a&#39; &#39;cp &lt;asciicast artifact&gt; dogfood/20260326-week9-release-readiness/recordings/week9.cast&#39; &#39;0&#39; &#39;ok&#39;
+  else
+    record_status &#39;09a&#39; &#39;cp &lt;asciicast artifact&gt; dogfood/20260326-week9-release-readiness/recordings/week9.cast&#39; &#39;1&#39; &#39;failed&#39;
+  fi
+
+  run_capture &#39;10&#39; 300 &quot;$LOG_DIR/10-export-webm.json&quot; &quot;$LOG_DIR/10-export-webm.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts record export \&quot;$SESSION_ID\&quot; --format webm --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; record export &quot;$SESSION_ID&quot; --format webm --json --home &quot;$ISOLATED_HOME&quot;
+  WEBM_PATH=&quot;$(json_field &quot;$LOG_DIR/10-export-webm.json&quot; &#39;data.result.artifactPath&#39; || true)&quot;
+  if [[ -n &quot;$WEBM_PATH&quot; &amp;&amp; -f &quot;$WEBM_PATH&quot; ]]; then
+    cp &quot;$WEBM_PATH&quot; &quot;$VIDEO_DIR/week9.webm&quot;
+    record_status &#39;10a&#39; &#39;cp &lt;webm artifact&gt; dogfood/20260326-week9-release-readiness/videos/week9.webm&#39; &#39;0&#39; &#39;ok&#39;
+  else
+    record_status &#39;10a&#39; &#39;cp &lt;webm artifact&gt; dogfood/20260326-week9-release-readiness/videos/week9.webm&#39; &#39;1&#39; &#39;failed&#39;
+  fi
+
+  run_capture &#39;11&#39; 60 &quot;$LOG_DIR/11-final-inspect.json&quot; &quot;$LOG_DIR/11-final-inspect.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts inspect \&quot;$SESSION_ID\&quot; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; inspect &quot;$SESSION_ID&quot; --json --home &quot;$ISOLATED_HOME&quot;
+  if [[ -f &quot;$LOG_DIR/11-final-inspect.json&quot; ]]; then
+    cp &quot;$LOG_DIR/11-final-inspect.json&quot; &quot;$SNAPSHOT_DIR/03-final-inspect.json&quot;
+    record_status &#39;11a&#39; &#39;cp dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json&#39; &#39;0&#39; &#39;ok&#39;
+  fi
+
+  run_capture &#39;12&#39; 60 &quot;$LOG_DIR/12-destroy.json&quot; &quot;$LOG_DIR/12-destroy.stderr.txt&quot; \
+    &quot;./node_modules/.bin/tsx src/cli/main.ts destroy \&quot;$SESSION_ID\&quot; --json --home \&quot;$ISOLATED_HOME\&quot;&quot; \
+    &quot;${CLI[@]}&quot; destroy &quot;$SESSION_ID&quot; --json --home &quot;$ISOLATED_HOME&quot;
+else
+  skip_step &#39;03&#39; &#39;inspect skipped because create did not return a session ID&#39;
+  skip_step &#39;04&#39; &#39;run echo skipped because create did not return a session ID&#39;
+  skip_step &#39;05&#39; &#39;run sysinfo skipped because create did not return a session ID&#39;
+  skip_step &#39;06&#39; &#39;wait skipped because create did not return a session ID&#39;
+  skip_step &#39;07&#39; &#39;screenshot skipped because create did not return a session ID&#39;
+  skip_step &#39;07a&#39; &#39;copy screenshot skipped because screenshot did not produce an artifact&#39;
+  skip_step &#39;08&#39; &#39;snapshot skipped because create did not return a session ID&#39;
+  skip_step &#39;09&#39; &#39;record export asciicast skipped because create did not return a session ID&#39;
+  skip_step &#39;09a&#39; &#39;copy asciicast skipped because export did not produce an artifact&#39;
+  skip_step &#39;10&#39; &#39;record export webm skipped because create did not return a session ID&#39;
+  skip_step &#39;10a&#39; &#39;copy webm skipped because export did not produce an artifact&#39;
+  skip_step &#39;11&#39; &#39;final inspect skipped because create did not return a session ID&#39;
+  skip_step &#39;12&#39; &#39;destroy skipped because create did not return a session ID&#39;
+fi
+
+rm -rf &quot;$ISOLATED_HOME&quot;
+record_status &#39;12a&#39; &#39;rm -rf &lt;isolated home&gt;&#39; &#39;0&#39; &#39;ok&#39;
+
+run_capture &#39;13&#39; 120 &quot;$LOG_DIR/13-review-bundle.txt&quot; &quot;$LOG_DIR/13-review-bundle.stderr.txt&quot; \
+  &quot;./node_modules/.bin/tsx src/tools/review-bundle.ts dogfood/20260326-week9-release-readiness&quot; \
+  &quot;${REVIEW[@]}&quot; &quot;$BUNDLE_DIR&quot;
+
+run_capture &#39;14&#39; 120 &quot;$LOG_DIR/14-validate-bundle.txt&quot; &quot;$LOG_DIR/14-validate-bundle.stderr.txt&quot; \
+  &quot;./node_modules/.bin/tsx src/tools/validate-bundle.ts dogfood/20260326-week9-release-readiness --profile interactive-renderer&quot; \
+  &quot;${VALIDATE[@]}&quot; &quot;$BUNDLE_DIR&quot; --profile interactive-renderer
+
+run_capture &#39;15&#39; 60 &quot;$LOG_DIR/15-reviewer-checks.txt&quot; &quot;$LOG_DIR/15-reviewer-checks.stderr.txt&quot; \
+  &quot;./node_modules/.bin/prettier --check dogfood/20260326-week9-release-readiness/manifest.json dogfood/20260326-week9-release-readiness/notes.md &amp;&amp; bash -n dogfood/20260326-week9-release-readiness/commands.sh&quot; \
+  env PRETTIER=&quot;$ROOT_DIR/node_modules/.bin/prettier&quot; MANIFEST=&quot;$BUNDLE_DIR/manifest.json&quot; NOTES=&quot;$BUNDLE_DIR/notes.md&quot; SCRIPT=&quot;$BUNDLE_DIR/commands.sh&quot; bash -lc &#39;$PRETTIER --check &quot;$MANIFEST&quot; &quot;$NOTES&quot; &amp;&amp; bash -n &quot;$SCRIPT&quot;&#39;
+</code></pre>
+        </div>
+      </section>
+      <section>
+        <h2>Command status</h2>
+        <div class="table-scroll">
+          <table>
+            <thead>
+              <tr>
+                <th>step</th>
+                <th>command</th>
+                <th>exit_code</th>
+                <th>status</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>01</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts doctor --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>1</td>
+                <td>warning</td>
+              </tr>
+              <tr>
+                <td>01a</td>
+                <td>
+                  cp
+                  dogfood/20260326-week9-release-readiness/logs/01-doctor.json
+                  dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>02</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts create --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot; -- /bin/bash
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>03</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts inspect
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>04</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts run
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; &#39;echo &quot;Week 9
+                  release readiness proof&quot;&#39; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>05</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts run
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; &#39;uname -a
+                  &amp;&amp; node --version&#39; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>06</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts wait
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --screen-stable-ms 1000
+                  --timeout 5000 --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>07</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts screenshot
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>07a</td>
+                <td>
+                  cp &lt;screenshot artifact&gt;
+                  dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>08</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts snapshot
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>08a</td>
+                <td>
+                  cp
+                  dogfood/20260326-week9-release-readiness/logs/08-snapshot.json
+                  dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>09</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts record export
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --format asciicast
+                  --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>09a</td>
+                <td>
+                  cp &lt;asciicast artifact&gt;
+                  dogfood/20260326-week9-release-readiness/recordings/week9.cast
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>10</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts record export
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --format webm --json
+                  --home &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>10a</td>
+                <td>
+                  cp &lt;webm artifact&gt;
+                  dogfood/20260326-week9-release-readiness/videos/week9.webm
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>11</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts inspect
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>11a</td>
+                <td>
+                  cp
+                  dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json
+                  dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>12</td>
+                <td>
+                  ./node_modules/.bin/tsx src/cli/main.ts destroy
+                  &quot;01KMP0DKXG9DPDKJJ3F1223PQV&quot; --json --home
+                  &quot;/tmp/agent-terminal-week9-home.59Il6W&quot;
+                </td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+              <tr>
+                <td>12a</td>
+                <td>rm -rf &lt;isolated home&gt;</td>
+                <td>0</td>
+                <td>ok</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+      </section>
+      <section>
+        <h2>Artifact inventory</h2>
+        <div class="table-scroll">
+          <table>
+            <thead>
+              <tr>
+                <th>Path</th>
+                <th>Type</th>
+                <th>Size</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td><a href="command-status.tsv">command-status.tsv</a></td>
+                <td>support</td>
+                <td>2.5 KB</td>
+              </tr>
+              <tr>
+                <td><a href="commands.sh">commands.sh</a></td>
+                <td>script</td>
+                <td>10.8 KB</td>
+              </tr>
+              <tr>
+                <td><a href="isolated-home.txt">isolated-home.txt</a></td>
+                <td>other</td>
+                <td>38 B</td>
+              </tr>
+              <tr>
+                <td><a href="logs/01-doctor.json">logs/01-doctor.json</a></td>
+                <td>support</td>
+                <td>3.9 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/01-doctor.stderr.txt"
+                    >logs/01-doctor.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td><a href="logs/02-create.json">logs/02-create.json</a></td>
+                <td>support</td>
+                <td>251 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/02-create.stderr.txt"
+                    >logs/02-create.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/03-create-inspect.json"
+                    >logs/03-create-inspect.json</a
+                  >
+                </td>
+                <td>support</td>
+                <td>1.0 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/03-create-inspect.stderr.txt"
+                    >logs/03-create-inspect.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/04-run-echo.json">logs/04-run-echo.json</a>
+                </td>
+                <td>support</td>
+                <td>267 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/04-run-echo.stderr.txt"
+                    >logs/04-run-echo.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/05-run-sysinfo.json"
+                    >logs/05-run-sysinfo.json</a
+                  >
+                </td>
+                <td>support</td>
+                <td>267 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/05-run-sysinfo.stderr.txt"
+                    >logs/05-run-sysinfo.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/06-wait-stable.json"
+                    >logs/06-wait-stable.json</a
+                  >
+                </td>
+                <td>support</td>
+                <td>207 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/06-wait-stable.stderr.txt"
+                    >logs/06-wait-stable.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/07-screenshot.json">logs/07-screenshot.json</a>
+                </td>
+                <td>support</td>
+                <td>699 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/07-screenshot.stderr.txt"
+                    >logs/07-screenshot.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/08-snapshot.json">logs/08-snapshot.json</a>
+                </td>
+                <td>support</td>
+                <td>1.9 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/08-snapshot.stderr.txt"
+                    >logs/08-snapshot.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/09-export-asciicast.json"
+                    >logs/09-export-asciicast.json</a
+                  >
+                </td>
+                <td>support</td>
+                <td>686 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/09-export-asciicast.stderr.txt"
+                    >logs/09-export-asciicast.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/10-export-webm.json"
+                    >logs/10-export-webm.json</a
+                  >
+                </td>
+                <td>support</td>
+                <td>746 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/10-export-webm.stderr.txt"
+                    >logs/10-export-webm.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/11-final-inspect.json"
+                    >logs/11-final-inspect.json</a
+                  >
+                </td>
+                <td>support</td>
+                <td>1.1 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/11-final-inspect.stderr.txt"
+                    >logs/11-final-inspect.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td><a href="logs/12-destroy.json">logs/12-destroy.json</a></td>
+                <td>support</td>
+                <td>172 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/12-destroy.stderr.txt"
+                    >logs/12-destroy.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/13-review-bundle.stderr.txt"
+                    >logs/13-review-bundle.stderr.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>108 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="logs/13-review-bundle.txt"
+                    >logs/13-review-bundle.txt</a
+                  >
+                </td>
+                <td>support</td>
+                <td>0 B</td>
+              </tr>
+              <tr>
+                <td><a href="manifest.json">manifest.json</a></td>
+                <td>support</td>
+                <td>5.1 KB</td>
+              </tr>
+              <tr>
+                <td><a href="notes.md">notes.md</a></td>
+                <td>notes</td>
+                <td>5.0 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="recordings/week9.cast">recordings/week9.cast</a>
+                </td>
+                <td>recording</td>
+                <td>1.2 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="screenshots/01-after-run.png"
+                    >screenshots/01-after-run.png</a
+                  >
+                </td>
+                <td>screenshot</td>
+                <td>21.9 KB</td>
+              </tr>
+              <tr>
+                <td><a href="session-id.txt">session-id.txt</a></td>
+                <td>support</td>
+                <td>27 B</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="snapshots/01-doctor.json"
+                    >snapshots/01-doctor.json</a
+                  >
+                </td>
+                <td>json</td>
+                <td>3.9 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="snapshots/02-post-run-structured.json"
+                    >snapshots/02-post-run-structured.json</a
+                  >
+                </td>
+                <td>json</td>
+                <td>1.9 KB</td>
+              </tr>
+              <tr>
+                <td>
+                  <a href="snapshots/03-final-inspect.json"
+                    >snapshots/03-final-inspect.json</a
+                  >
+                </td>
+                <td>json</td>
+                <td>1.1 KB</td>
+              </tr>
+              <tr>
+                <td><a href="videos/week9.webm">videos/week9.webm</a></td>
+                <td>video</td>
+                <td>52.9 KB</td>
+              </tr>
+            </tbody>
+          </table>
+        </div>
+      </section>
+    </main>
+  </body>
+</html>
diff --git a/dogfood/20260326-week9-release-readiness/isolated-home.txt b/dogfood/20260326-week9-release-readiness/isolated-home.txt
new file mode 100644
index 0000000..0a626c2
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/isolated-home.txt
@@ -0,0 +1 @@
+/tmp/agent-terminal-week9-home.59Il6W
diff --git a/dogfood/20260326-week9-release-readiness/logs/01-doctor.json b/dogfood/20260326-week9-release-readiness/logs/01-doctor.json
new file mode 100644
index 0000000..9b74c6a
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/01-doctor.json
@@ -0,0 +1,130 @@
+{
+  "ok": true,
+  "command": "doctor",
+  "timestamp": "2026-03-26T21:22:16.307Z",
+  "result": {
+    "ok": false,
+    "checks": {
+      "environment": [
+        {
+          "name": "node-runtime",
+          "status": "fail",
+          "message": "Node 22.19.0 requires 24+",
+          "durationMs": 3
+        },
+        {
+          "name": "cwd-access",
+          "status": "pass",
+          "message": "cwd read/write: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b",
+          "durationMs": 3
+        },
+        {
+          "name": "temp-dir",
+          "status": "pass",
+          "message": "temp dir ok: /tmp",
+          "durationMs": 2
+        },
+        {
+          "name": "home_isolation",
+          "status": "pass",
+          "message": "Agent-terminal home is isolated from system home: /tmp/agent-terminal-week9-home.59Il6W",
+          "durationMs": 0
+        },
+        {
+          "name": "home-writable",
+          "status": "pass",
+          "message": "home writable: /tmp/agent-terminal-week9-home.59Il6W",
+          "durationMs": 1
+        },
+        {
+          "name": "pty-spawn",
+          "status": "pass",
+          "message": "spawned /usr/local/nvm/versions/node/v22.19.0/bin/node",
+          "durationMs": 30
+        },
+        {
+          "name": "socket-viable",
+          "status": "pass",
+          "message": "socket ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3j-2/host.sock",
+          "durationMs": 3
+        },
+        {
+          "name": "artifact-atomicity",
+          "status": "pass",
+          "message": "atomic rename ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3m-3/artifacts",
+          "durationMs": 1
+        },
+        {
+          "name": "event-log-writable",
+          "status": "pass",
+          "message": "append ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3o-5/events.jsonl",
+          "durationMs": 1
+        }
+      ],
+      "renderer": [
+        {
+          "name": "playwright_available",
+          "status": "pass",
+          "message": "available",
+          "durationMs": 1
+        },
+        {
+          "name": "browser_cache_accessible",
+          "status": "pass",
+          "message": "browser cache accessible: /home/coder/.cache/ms-playwright",
+          "durationMs": 1
+        },
+        {
+          "name": "browser_launch",
+          "status": "pass",
+          "message": "chromium launches",
+          "durationMs": 114
+        },
+        {
+          "name": "ghostty_web_available",
+          "status": "pass",
+          "message": "WASM available",
+          "durationMs": 127
+        },
+        {
+          "name": "screenshot_viable",
+          "status": "pass",
+          "message": "viable",
+          "durationMs": 187
+        }
+      ]
+    },
+    "capabilities": [
+      {
+        "name": "snapshot",
+        "status": "available",
+        "reason": "built-in capability",
+        "detail": "available without external renderer dependencies"
+      },
+      {
+        "name": "wait",
+        "status": "available",
+        "reason": "built-in capability",
+        "detail": "available without external renderer dependencies"
+      },
+      {
+        "name": "screenshot",
+        "status": "available",
+        "reason": "renderer smoke checks passed",
+        "detail": "playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available; screenshot_viable: viable"
+      },
+      {
+        "name": "record-export-asciicast",
+        "status": "available",
+        "reason": "built-in capability",
+        "detail": "available without external renderer dependencies"
+      },
+      {
+        "name": "record-export-webm",
+        "status": "available",
+        "reason": "browser-backed export dependencies available",
+        "detail": "playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available"
+      }
+    ]
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/01-doctor.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/01-doctor.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/02-create.json b/dogfood/20260326-week9-release-readiness/logs/02-create.json
new file mode 100644
index 0000000..1f4de91
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/02-create.json
@@ -0,0 +1,12 @@
+{
+  "ok": true,
+  "command": "create",
+  "timestamp": "2026-03-26T21:22:17.866Z",
+  "result": {
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "createdAt": "2026-03-26T21:22:17.138Z",
+    "cols": 80,
+    "rows": 24,
+    "shell": "/bin/bash"
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/02-create.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/02-create.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/03-create-inspect.json b/dogfood/20260326-week9-release-readiness/logs/03-create-inspect.json
new file mode 100644
index 0000000..f98a0a8
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/03-create-inspect.json
@@ -0,0 +1,42 @@
+{
+  "ok": true,
+  "command": "inspect",
+  "timestamp": "2026-03-26T21:22:18.643Z",
+  "result": {
+    "session": {
+      "version": 1,
+      "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+      "createdAt": "2026-03-26T21:22:17.138Z",
+      "updatedAt": "2026-03-26T21:22:17.818Z",
+      "status": "running",
+      "command": ["/bin/bash"],
+      "cwd": "/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b",
+      "shell": "/bin/bash",
+      "term": "xterm-256color",
+      "cols": 80,
+      "rows": 24,
+      "creationCols": 80,
+      "creationRows": 24,
+      "hostPid": 497475,
+      "childPid": 497487,
+      "exitCode": null,
+      "exitSignal": null
+    },
+    "eventCount": 3,
+    "uptime": 1504,
+    "lastEventSeq": 2,
+    "terminationCategory": "running",
+    "artifacts": {
+      "total": 0,
+      "byKind": {},
+      "missingCount": 0,
+      "health": "no-artifacts"
+    },
+    "usedOfflineReplay": false,
+    "rendererRuntime": {
+      "backend": "ghostty-web",
+      "mode": "live-host",
+      "status": "healthy"
+    }
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/03-create-inspect.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/03-create-inspect.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/04-run-echo.json b/dogfood/20260326-week9-release-readiness/logs/04-run-echo.json
new file mode 100644
index 0000000..edca10c
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/04-run-echo.json
@@ -0,0 +1,13 @@
+{
+  "ok": true,
+  "command": "run",
+  "timestamp": "2026-03-26T21:22:19.930Z",
+  "result": {
+    "accepted": true,
+    "completed": true,
+    "timedOut": false,
+    "seq": 3,
+    "durationMs": 569,
+    "marker": "__AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__"
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/04-run-echo.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/04-run-echo.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/05-run-sysinfo.json b/dogfood/20260326-week9-release-readiness/logs/05-run-sysinfo.json
new file mode 100644
index 0000000..7113996
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/05-run-sysinfo.json
@@ -0,0 +1,13 @@
+{
+  "ok": true,
+  "command": "run",
+  "timestamp": "2026-03-26T21:22:20.921Z",
+  "result": {
+    "accepted": true,
+    "completed": true,
+    "timedOut": false,
+    "seq": 5,
+    "durationMs": 240,
+    "marker": "__AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__"
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/05-run-sysinfo.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/05-run-sysinfo.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/06-wait-stable.json b/dogfood/20260326-week9-release-readiness/logs/06-wait-stable.json
new file mode 100644
index 0000000..9051132
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/06-wait-stable.json
@@ -0,0 +1,12 @@
+{
+  "ok": true,
+  "command": "wait",
+  "timestamp": "2026-03-26T21:22:22.877Z",
+  "result": {
+    "matched": true,
+    "timedOut": false,
+    "cursorRow": 7,
+    "cursorCol": 0,
+    "capturedAtSeq": 7
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/06-wait-stable.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/06-wait-stable.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/07-screenshot.json b/dogfood/20260326-week9-release-readiness/logs/07-screenshot.json
new file mode 100644
index 0000000..3be6bbb
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/07-screenshot.json
@@ -0,0 +1,20 @@
+{
+  "ok": true,
+  "command": "screenshot",
+  "timestamp": "2026-03-26T21:22:23.783Z",
+  "result": {
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "capturedAtSeq": 7,
+    "profileName": "reference-dark",
+    "cols": 80,
+    "rows": 24,
+    "artifactPath": "/tmp/agent-terminal-week9-home.59Il6W/sessions/01KMP0DKXG9DPDKJJ3F1223PQV/artifacts/screenshot-7-reference-dark.png",
+    "pngSizeBytes": 22396,
+    "cursorVisible": false,
+    "rendererBackend": "ghostty-web",
+    "pixelWidth": 640,
+    "pixelHeight": 384,
+    "sha256": "6b07d07c3a58035b4d432d4b449fc2e5423b02be422c2aaeb4588e36ef230d1d",
+    "renderProfileHash": "8ffed6af301ec7c0e6b69599c3be0d1d12096f9fcdfc59d0bbb4cc474d64c53d"
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/07-screenshot.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/07-screenshot.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/08-snapshot.json b/dogfood/20260326-week9-release-readiness/logs/08-snapshot.json
new file mode 100644
index 0000000..56e2c76
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/08-snapshot.json
@@ -0,0 +1,113 @@
+{
+  "ok": true,
+  "command": "snapshot",
+  "timestamp": "2026-03-26T21:22:24.585Z",
+  "result": {
+    "format": "structured",
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "capturedAtSeq": 7,
+    "cols": 80,
+    "rows": 24,
+    "cursorRow": 7,
+    "cursorCol": 0,
+    "isAltScreen": false,
+    "visibleLines": [
+      {
+        "row": 0,
+        "text": "bash: command not found: starship"
+      },
+      {
+        "row": 1,
+        "text": "bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory"
+      },
+      {
+        "row": 2,
+        "text": "coder@aaaaaaa:~/.mux/src/agent-terminal/agent_exec_b625c85e1b$ echo \"Week 9 rele"
+      },
+      {
+        "row": 3,
+        "text": "ase readiness proof\""
+      },
+      {
+        "row": 4,
+        "text": "echo __AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__"
+      },
+      {
+        "row": 5,
+        "text": "uname -a && node --version"
+      },
+      {
+        "row": 6,
+        "text": "echo __AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__"
+      },
+      {
+        "row": 7,
+        "text": ""
+      },
+      {
+        "row": 8,
+        "text": ""
+      },
+      {
+        "row": 9,
+        "text": ""
+      },
+      {
+        "row": 10,
+        "text": ""
+      },
+      {
+        "row": 11,
+        "text": ""
+      },
+      {
+        "row": 12,
+        "text": ""
+      },
+      {
+        "row": 13,
+        "text": ""
+      },
+      {
+        "row": 14,
+        "text": ""
+      },
+      {
+        "row": 15,
+        "text": ""
+      },
+      {
+        "row": 16,
+        "text": ""
+      },
+      {
+        "row": 17,
+        "text": ""
+      },
+      {
+        "row": 18,
+        "text": ""
+      },
+      {
+        "row": 19,
+        "text": ""
+      },
+      {
+        "row": 20,
+        "text": ""
+      },
+      {
+        "row": 21,
+        "text": ""
+      },
+      {
+        "row": 22,
+        "text": ""
+      },
+      {
+        "row": 23,
+        "text": ""
+      }
+    ]
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/08-snapshot.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/08-snapshot.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/09-export-asciicast.json b/dogfood/20260326-week9-release-readiness/logs/09-export-asciicast.json
new file mode 100644
index 0000000..c5d3004
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/09-export-asciicast.json
@@ -0,0 +1,23 @@
+{
+  "ok": true,
+  "command": "record export",
+  "timestamp": "2026-03-26T21:22:25.360Z",
+  "result": {
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "format": "asciicast",
+    "artifactPath": "/tmp/agent-terminal-week9-home.59Il6W/sessions/01KMP0DKXG9DPDKJJ3F1223PQV/artifacts/recording-7-asciicast.cast",
+    "bytes": 1207,
+    "sha256": "073533533b48cddf4ca7c4b97de1da8e116fd0d54157c1492ea90bf9df2f1f79",
+    "capturedAtSeq": 7,
+    "durationMs": 2741,
+    "metadata": {
+      "width": 80,
+      "height": 24,
+      "title": "01KMP0DKXG9DPDKJJ3F1223PQV",
+      "timestamp": 1774560137,
+      "outputEventCount": 6,
+      "resizeEventCount": 0,
+      "markerCount": 0
+    }
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/09-export-asciicast.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/09-export-asciicast.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/10-export-webm.json b/dogfood/20260326-week9-release-readiness/logs/10-export-webm.json
new file mode 100644
index 0000000..703930a
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/10-export-webm.json
@@ -0,0 +1,23 @@
+{
+  "ok": true,
+  "command": "record export",
+  "timestamp": "2026-03-26T21:22:28.244Z",
+  "result": {
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "format": "webm",
+    "artifactPath": "/tmp/agent-terminal-week9-home.59Il6W/sessions/01KMP0DKXG9DPDKJJ3F1223PQV/artifacts/recording-7-webm.webm",
+    "bytes": 54201,
+    "sha256": "3677c43c2a4a76e9d93209ac466569f711c4d6469f3cfaab6136b02ed8d613ef",
+    "capturedAtSeq": 7,
+    "durationMs": 2741,
+    "metadata": {
+      "width": 80,
+      "height": 24,
+      "profileName": "reference-dark",
+      "renderProfileHash": "8ffed6af301ec7c0e6b69599c3be0d1d12096f9fcdfc59d0bbb4cc474d64c53d",
+      "timingMode": "accelerated",
+      "outputEventCount": 6,
+      "resizeEventCount": 0
+    }
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/10-export-webm.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/10-export-webm.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json b/dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json
new file mode 100644
index 0000000..eb5f75f
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/11-final-inspect.json
@@ -0,0 +1,47 @@
+{
+  "ok": true,
+  "command": "inspect",
+  "timestamp": "2026-03-26T21:22:29.021Z",
+  "result": {
+    "session": {
+      "version": 1,
+      "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+      "createdAt": "2026-03-26T21:22:17.138Z",
+      "updatedAt": "2026-03-26T21:22:17.818Z",
+      "status": "running",
+      "command": ["/bin/bash"],
+      "cwd": "/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b",
+      "shell": "/bin/bash",
+      "term": "xterm-256color",
+      "cols": 80,
+      "rows": 24,
+      "creationCols": 80,
+      "creationRows": 24,
+      "hostPid": 497475,
+      "childPid": 497487,
+      "exitCode": null,
+      "exitSignal": null
+    },
+    "eventCount": 8,
+    "uptime": 11874,
+    "lastEventSeq": 7,
+    "terminationCategory": "running",
+    "artifacts": {
+      "total": 4,
+      "byKind": {
+        "screenshot": 1,
+        "snapshot": 1,
+        "recording": 1,
+        "video": 1
+      },
+      "missingCount": 0,
+      "health": "healthy"
+    },
+    "usedOfflineReplay": false,
+    "rendererRuntime": {
+      "backend": "ghostty-web",
+      "mode": "live-host",
+      "status": "healthy"
+    }
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/11-final-inspect.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/11-final-inspect.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/12-destroy.json b/dogfood/20260326-week9-release-readiness/logs/12-destroy.json
new file mode 100644
index 0000000..b70df04
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/12-destroy.json
@@ -0,0 +1,9 @@
+{
+  "ok": true,
+  "command": "destroy",
+  "timestamp": "2026-03-26T21:22:29.897Z",
+  "result": {
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "destroyed": true
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/12-destroy.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/12-destroy.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/13-review-bundle.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/13-review-bundle.stderr.txt
new file mode 100644
index 0000000..453efbc
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/13-review-bundle.stderr.txt
@@ -0,0 +1,3 @@
+Building /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b/dogfood/20260326-week9-release-readiness
+warning: Manifest artifact was not found on disk: logs/14-validate-bundle.txt
+warning: Manifest artifact was not found on disk: index.html
diff --git a/dogfood/20260326-week9-release-readiness/logs/13-review-bundle.txt b/dogfood/20260326-week9-release-readiness/logs/13-review-bundle.txt
new file mode 100644
index 0000000..cfa31b8
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/13-review-bundle.txt
@@ -0,0 +1 @@
+/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b/dogfood/20260326-week9-release-readiness/index.html
diff --git a/dogfood/20260326-week9-release-readiness/logs/14-validate-bundle.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/14-validate-bundle.stderr.txt
new file mode 100644
index 0000000..e857c66
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/14-validate-bundle.stderr.txt
@@ -0,0 +1,8 @@
+validate-bundle PASS interactive-renderer: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b/dogfood/20260326-week9-release-readiness
+✓ bundle-exists: Bundle directory is readable: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b/dogfood/20260326-week9-release-readiness
+✓ has-json-output: Found 3 JSON output file(s).
+✓ has-review-page: Found review page index.html.
+✓ has-notes: Found 1 note file(s).
+✓ json-readable: Parsed 3 JSON output file(s).
+✓ has-screenshot: Found 1 screenshot file(s).
+✓ has-recording: Found 1 recording file(s).
diff --git a/dogfood/20260326-week9-release-readiness/logs/14-validate-bundle.txt b/dogfood/20260326-week9-release-readiness/logs/14-validate-bundle.txt
new file mode 100644
index 0000000..4217a33
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/14-validate-bundle.txt
@@ -0,0 +1,42 @@
+{
+  "bundleDir": "/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b/dogfood/20260326-week9-release-readiness",
+  "profile": "interactive-renderer",
+  "ok": true,
+  "checks": [
+    {
+      "name": "bundle-exists",
+      "ok": true,
+      "message": "Bundle directory is readable: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b/dogfood/20260326-week9-release-readiness"
+    },
+    {
+      "name": "has-json-output",
+      "ok": true,
+      "message": "Found 3 JSON output file(s)."
+    },
+    {
+      "name": "has-review-page",
+      "ok": true,
+      "message": "Found review page index.html."
+    },
+    {
+      "name": "has-notes",
+      "ok": true,
+      "message": "Found 1 note file(s)."
+    },
+    {
+      "name": "json-readable",
+      "ok": true,
+      "message": "Parsed 3 JSON output file(s)."
+    },
+    {
+      "name": "has-screenshot",
+      "ok": true,
+      "message": "Found 1 screenshot file(s)."
+    },
+    {
+      "name": "has-recording",
+      "ok": true,
+      "message": "Found 1 recording file(s)."
+    }
+  ]
+}
diff --git a/dogfood/20260326-week9-release-readiness/logs/15-reviewer-checks.stderr.txt b/dogfood/20260326-week9-release-readiness/logs/15-reviewer-checks.stderr.txt
new file mode 100644
index 0000000..e69de29
diff --git a/dogfood/20260326-week9-release-readiness/logs/15-reviewer-checks.txt b/dogfood/20260326-week9-release-readiness/logs/15-reviewer-checks.txt
new file mode 100644
index 0000000..4aa0d16
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/logs/15-reviewer-checks.txt
@@ -0,0 +1,2 @@
+Checking formatting...
+All matched files use Prettier code style!
diff --git a/dogfood/20260326-week9-release-readiness/manifest.json b/dogfood/20260326-week9-release-readiness/manifest.json
new file mode 100644
index 0000000..7390c8c
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/manifest.json
@@ -0,0 +1,117 @@
+{
+  "bundle": "20260326-week9-release-readiness",
+  "title": "Week 9 Release Readiness — 0.1.0 Proof",
+  "description": "End-to-end proof of Week 9 capabilities: isolated sessions, run command, isolation-aware doctor diagnostics, and renderer/export artifacts.",
+  "createdAt": "2026-03-26T21:18:20Z",
+  "week": 9,
+  "result": "pass",
+  "commands": [
+    "./node_modules/.bin/tsx src/cli/main.ts doctor --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts create --json --home <isolated-home> -- /bin/bash",
+    "./node_modules/.bin/tsx src/cli/main.ts inspect <session-id> --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts run <session-id> 'echo \"Week 9 release readiness proof\"' --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts run <session-id> 'uname -a && node --version' --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts wait <session-id> --screen-stable-ms 1000 --timeout 5000 --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts screenshot <session-id> --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts snapshot <session-id> --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts record export <session-id> --format asciicast --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts record export <session-id> --format webm --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/cli/main.ts destroy <session-id> --json --home <isolated-home>",
+    "./node_modules/.bin/tsx src/tools/review-bundle.ts dogfood/20260326-week9-release-readiness",
+    "./node_modules/.bin/tsx src/tools/validate-bundle.ts dogfood/20260326-week9-release-readiness --profile interactive-renderer"
+  ],
+  "artifacts": [
+    {
+      "path": "notes.md",
+      "description": "Reviewer-facing narrative explaining what Week 9 functionality was proven and what limitations were observed"
+    },
+    {
+      "path": "commands.sh",
+      "description": "Reproducible capture script for recreating the Week 9 release-readiness bundle"
+    },
+    {
+      "path": "command-status.tsv",
+      "description": "Step-by-step exit-code ledger for capture, artifact copies, review-page generation, validation, and formatting checks"
+    },
+    {
+      "path": "logs/01-doctor.json",
+      "description": "Doctor JSON envelope showing home isolation and browser cache accessibility checks under an isolated home"
+    },
+    {
+      "path": "snapshots/01-doctor.json",
+      "description": "Bundle-local JSON mirror of the doctor output used by validator/review tooling"
+    },
+    {
+      "path": "logs/03-create-inspect.json",
+      "description": "Initial inspect output for the isolated session immediately after creation"
+    },
+    {
+      "path": "logs/04-run-echo.json",
+      "description": "Run-command JSON envelope for the Week 9 proof banner command"
+    },
+    {
+      "path": "logs/05-run-sysinfo.json",
+      "description": "Run-command JSON envelope for the in-session system-information command"
+    },
+    {
+      "path": "logs/06-wait-stable.json",
+      "description": "Renderer wait result proving the terminal frame was stable before capture"
+    },
+    {
+      "path": "logs/07-screenshot.json",
+      "description": "Screenshot JSON envelope for the copied PNG artifact"
+    },
+    {
+      "path": "screenshots/01-after-run.png",
+      "description": "Renderer screenshot captured after the two run commands completed"
+    },
+    {
+      "path": "logs/08-snapshot.json",
+      "description": "Structured snapshot JSON envelope for the same post-run terminal frame"
+    },
+    {
+      "path": "snapshots/02-post-run-structured.json",
+      "description": "Bundle-local JSON mirror of the structured post-run snapshot"
+    },
+    {
+      "path": "logs/09-export-asciicast.json",
+      "description": "Asciicast export JSON envelope"
+    },
+    {
+      "path": "recordings/week9.cast",
+      "description": "Exported asciicast recording for the isolated Week 9 proof session"
+    },
+    {
+      "path": "logs/10-export-webm.json",
+      "description": "WebM export JSON envelope"
+    },
+    {
+      "path": "videos/week9.webm",
+      "description": "Exported WebM replay for the isolated Week 9 proof session"
+    },
+    {
+      "path": "logs/11-final-inspect.json",
+      "description": "Final inspect output confirming healthy artifacts and live renderer runtime before teardown"
+    },
+    {
+      "path": "snapshots/03-final-inspect.json",
+      "description": "Bundle-local JSON mirror of the final inspect output"
+    },
+    {
+      "path": "logs/12-destroy.json",
+      "description": "Destroy output confirming the isolated session was cleaned up"
+    },
+    {
+      "path": "logs/13-review-bundle.txt",
+      "description": "Review-bundle output showing the static reviewer page generation path"
+    },
+    {
+      "path": "logs/14-validate-bundle.txt",
+      "description": "Bundle validation stdout for the interactive-renderer profile"
+    },
+    {
+      "path": "index.html",
+      "description": "Generated static review page for the complete Week 9 proof bundle"
+    }
+  ]
+}
diff --git a/dogfood/20260326-week9-release-readiness/notes.md b/dogfood/20260326-week9-release-readiness/notes.md
new file mode 100644
index 0000000..f5cbf0a
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/notes.md
@@ -0,0 +1,56 @@
+# 2026-03-26 dogfood — Week 9 release-readiness proof
+
+## Bundle metadata
+
+- **Bundle path:** `dogfood/20260326-week9-release-readiness/`
+- **CLI entrypoint:** `src/cli/main.ts`
+- **Lower-level run proof:** `dogfood/run-command/`
+- **Isolated home record:** `isolated-home.txt`
+- **Session ID record:** `session-id.txt`
+- **Primary evidence:** `logs/01-doctor.json`, `logs/03-create-inspect.json`, `logs/04-run-echo.json`, `logs/05-run-sysinfo.json`, `logs/07-screenshot.json`, `logs/08-snapshot.json`, `logs/09-export-asciicast.json`, `logs/10-export-webm.json`, `logs/11-final-inspect.json`, `logs/12-destroy.json`
+- **Bundle-local JSON mirrors for validation/review tooling:** `snapshots/01-doctor.json`, `snapshots/02-post-run-structured.json`, `snapshots/03-final-inspect.json`
+
+## What this bundle proves
+
+This bundle captures a full Week 9 release-readiness path against an isolated `--home` directory. It exercises the new isolation-aware `doctor` checks, creates a fresh PTY-backed session, runs two in-session commands through the new `run` command, waits for renderer stability, and exports screenshot, snapshot, asciicast, and WebM artifacts from the same session.
+
+The strongest Week 9-specific proof points are:
+
+- `logs/01-doctor.json` shows the new `home_isolation` environment check passing for the temp home recorded in `isolated-home.txt`.
+- `logs/01-doctor.json` also shows `browser_cache_accessible` passing against `/home/coder/.cache/ms-playwright`, proving the renderer browser-path isolation work still finds the original Playwright cache while the agent-terminal home is isolated.
+- `logs/04-run-echo.json` and `logs/05-run-sysinfo.json` show `run` accepting and completing both in-session commands with completion markers.
+- `logs/06-wait-stable.json` confirms `wait --screen-stable-ms 1000` matched before visual capture.
+- `logs/07-screenshot.json`, `screenshots/01-after-run.png`, `logs/09-export-asciicast.json`, `recordings/week9.cast`, `logs/10-export-webm.json`, and `videos/week9.webm` prove the renderer/export stack can still capture evidence from that isolated session.
+- `logs/11-final-inspect.json` reports a healthy live renderer runtime with `usedOfflineReplay: false` plus exactly one screenshot, one snapshot, one recording, and one video artifact.
+
+## Screenshot and recording notes
+
+- **Screenshot:** `screenshots/01-after-run.png` is the copied renderer screenshot from `logs/07-screenshot.json`. It shows the bash session after the two `run` invocations and their completion-marker lines.
+- **Snapshot:** `logs/08-snapshot.json` is the structured renderer snapshot captured from the same frame sequence (`capturedAtSeq: 5`), and `snapshots/02-post-run-structured.json` mirrors it in a validator-visible JSON location.
+- **Asciicast:** `recordings/week9.cast` is the exported terminal event-log recording (`1177` bytes).
+- **WebM:** `videos/week9.webm` is the browser-rendered replay video (`52509` bytes).
+
+## Environment details
+
+- **Node:** `v22.19.0`
+- **OS:** `Linux aaaaaaa 6.8.0-94-generic #96-Ubuntu SMP PREEMPT_DYNAMIC Fri Jan 9 20:36:55 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux`
+- **Neovim:** `NVIM v0.7.2`
+- **Renderer browser cache used by doctor:** `/home/coder/.cache/ms-playwright`
+
+## Known limitations / acceptable failures
+
+- `doctor` intentionally reported `result.ok: false` in `logs/01-doctor.json` because the workspace is running Node `v22.19.0` while the project requires Node `24+`. That is a real environment mismatch, not a Week 9 regression. The new Week 9 isolation-aware checks (`home_isolation` and `browser_cache_accessible`) still passed, which is the behavior this bundle needed to prove.
+- The bundle includes JSON mirrors under `snapshots/` because the review/validation tooling classifies `logs/` entries as support files rather than JSON artifacts.
+- The renderer snapshot shows the echoed `run` command lines and completion markers rather than the full stdout payload for the `run` commands. That matches the existing lower-level `dogfood/run-command/` proof and still demonstrates the end-to-end `run -> wait -> renderer capture -> export` flow.
+- The future Neovim/LazyVim review scenario remains out of scope for this bundle. This environment only has Neovim `0.7.2`, while the target scenario calls for Neovim `0.8+` plus Nerd Fonts.
+
+## Suggested review order
+
+1. Read this file for the narrative and known limitations.
+2. Open `logs/01-doctor.json` and confirm `home_isolation` plus `browser_cache_accessible` passed.
+3. Review `logs/02-create.json` and `logs/03-create-inspect.json` to confirm the isolated session was created and is running.
+4. Review `logs/04-run-echo.json`, `logs/05-run-sysinfo.json`, and `logs/06-wait-stable.json` for the `run` and stability-wait evidence.
+5. Open `screenshots/01-after-run.png` and `logs/08-snapshot.json` for the visual renderer state.
+6. Play `recordings/week9.cast` and `videos/week9.webm` for replay/export proof.
+7. Finish with `logs/11-final-inspect.json` and `logs/12-destroy.json` to confirm artifact health and cleanup.
+8. If you want deeper `run`-specific context, compare this bundle with `dogfood/run-command/`.
diff --git a/dogfood/20260326-week9-release-readiness/recordings/week9.cast b/dogfood/20260326-week9-release-readiness/recordings/week9.cast
new file mode 100644
index 0000000..1489bf7
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/recordings/week9.cast
@@ -0,0 +1,7 @@
+{"version":2,"width":80,"height":24,"timestamp":1774560137,"title":"01KMP0DKXG9DPDKJJ3F1223PQV","sessionId":"01KMP0DKXG9DPDKJJ3F1223PQV","env":{"TERM":"xterm-256color"},"toolVersion":"0.1.0"}
+[0,"o","bash: command not found: starship\r\n"]
+[0.001,"o","bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory\r\n"]
+[0.086,"o","\u001b[?2004h\u001b]0;coder@aaaaaaa: ~/.mux/src/agent-terminal/agent_exec_b625c85e1b\u0007\u001b[01;32mcoder@aaaaaaa\u001b[00m:\u001b[01;34m~/.mux/src/agent-terminal/agent_exec_b625c85e1b\u001b[00m$ "]
+[1.42,"o","\u001b[7mecho \"Week 9 rele\u001b[27m\u001b[7ma\u001b[27m\r\u001b[7mase readiness proof\"\u001b[27m\r\n\r\u001b[7mecho __AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__\u001b[27m\r\n\r"]
+[2.741,"o","\u001b[A\u001b[A\u001b[A\r\u001b]0;coder@aaaaaaa: ~/.mux/src/agent-terminal/agent_exec_b625c85e1b\u0007\u001b[01;32mcoder@aaaaaaa\u001b[00m:\u001b[01;34m~/.mux/src/agent-terminal/agent_exec_b625c85e1b\u001b[00m$ echo \"Week 9 release readiness proof\"\r\n\recho __AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__\r\n\r\u001b[7muname -a && node --version\u001b[27m\r\n\r\u001b[7mecho __AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__\u001b[27m"]
+[2.741,"o","\r\n\r"]
diff --git a/dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png b/dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png
new file mode 100644
index 0000000..38ea839
Binary files /dev/null and b/dogfood/20260326-week9-release-readiness/screenshots/01-after-run.png differ
diff --git a/dogfood/20260326-week9-release-readiness/session-id.txt b/dogfood/20260326-week9-release-readiness/session-id.txt
new file mode 100644
index 0000000..0d127c0
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/session-id.txt
@@ -0,0 +1 @@
+01KMP0DKXG9DPDKJJ3F1223PQV
diff --git a/dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json b/dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json
new file mode 100644
index 0000000..9b74c6a
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/snapshots/01-doctor.json
@@ -0,0 +1,130 @@
+{
+  "ok": true,
+  "command": "doctor",
+  "timestamp": "2026-03-26T21:22:16.307Z",
+  "result": {
+    "ok": false,
+    "checks": {
+      "environment": [
+        {
+          "name": "node-runtime",
+          "status": "fail",
+          "message": "Node 22.19.0 requires 24+",
+          "durationMs": 3
+        },
+        {
+          "name": "cwd-access",
+          "status": "pass",
+          "message": "cwd read/write: /home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b",
+          "durationMs": 3
+        },
+        {
+          "name": "temp-dir",
+          "status": "pass",
+          "message": "temp dir ok: /tmp",
+          "durationMs": 2
+        },
+        {
+          "name": "home_isolation",
+          "status": "pass",
+          "message": "Agent-terminal home is isolated from system home: /tmp/agent-terminal-week9-home.59Il6W",
+          "durationMs": 0
+        },
+        {
+          "name": "home-writable",
+          "status": "pass",
+          "message": "home writable: /tmp/agent-terminal-week9-home.59Il6W",
+          "durationMs": 1
+        },
+        {
+          "name": "pty-spawn",
+          "status": "pass",
+          "message": "spawned /usr/local/nvm/versions/node/v22.19.0/bin/node",
+          "durationMs": 30
+        },
+        {
+          "name": "socket-viable",
+          "status": "pass",
+          "message": "socket ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3j-2/host.sock",
+          "durationMs": 3
+        },
+        {
+          "name": "artifact-atomicity",
+          "status": "pass",
+          "message": "atomic rename ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3m-3/artifacts",
+          "durationMs": 1
+        },
+        {
+          "name": "event-log-writable",
+          "status": "pass",
+          "message": "append ok: /tmp/agent-terminal-week9-home.59Il6W/sessions/doctor-497248-mn7zac3o-5/events.jsonl",
+          "durationMs": 1
+        }
+      ],
+      "renderer": [
+        {
+          "name": "playwright_available",
+          "status": "pass",
+          "message": "available",
+          "durationMs": 1
+        },
+        {
+          "name": "browser_cache_accessible",
+          "status": "pass",
+          "message": "browser cache accessible: /home/coder/.cache/ms-playwright",
+          "durationMs": 1
+        },
+        {
+          "name": "browser_launch",
+          "status": "pass",
+          "message": "chromium launches",
+          "durationMs": 114
+        },
+        {
+          "name": "ghostty_web_available",
+          "status": "pass",
+          "message": "WASM available",
+          "durationMs": 127
+        },
+        {
+          "name": "screenshot_viable",
+          "status": "pass",
+          "message": "viable",
+          "durationMs": 187
+        }
+      ]
+    },
+    "capabilities": [
+      {
+        "name": "snapshot",
+        "status": "available",
+        "reason": "built-in capability",
+        "detail": "available without external renderer dependencies"
+      },
+      {
+        "name": "wait",
+        "status": "available",
+        "reason": "built-in capability",
+        "detail": "available without external renderer dependencies"
+      },
+      {
+        "name": "screenshot",
+        "status": "available",
+        "reason": "renderer smoke checks passed",
+        "detail": "playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available; screenshot_viable: viable"
+      },
+      {
+        "name": "record-export-asciicast",
+        "status": "available",
+        "reason": "built-in capability",
+        "detail": "available without external renderer dependencies"
+      },
+      {
+        "name": "record-export-webm",
+        "status": "available",
+        "reason": "browser-backed export dependencies available",
+        "detail": "playwright_available: available; browser_launch: chromium launches; ghostty_web_available: WASM available"
+      }
+    ]
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json b/dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json
new file mode 100644
index 0000000..56e2c76
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/snapshots/02-post-run-structured.json
@@ -0,0 +1,113 @@
+{
+  "ok": true,
+  "command": "snapshot",
+  "timestamp": "2026-03-26T21:22:24.585Z",
+  "result": {
+    "format": "structured",
+    "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+    "capturedAtSeq": 7,
+    "cols": 80,
+    "rows": 24,
+    "cursorRow": 7,
+    "cursorCol": 0,
+    "isAltScreen": false,
+    "visibleLines": [
+      {
+        "row": 0,
+        "text": "bash: command not found: starship"
+      },
+      {
+        "row": 1,
+        "text": "bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory"
+      },
+      {
+        "row": 2,
+        "text": "coder@aaaaaaa:~/.mux/src/agent-terminal/agent_exec_b625c85e1b$ echo \"Week 9 rele"
+      },
+      {
+        "row": 3,
+        "text": "ase readiness proof\""
+      },
+      {
+        "row": 4,
+        "text": "echo __AT_MARKER_36ecdc23dce2469cad11f6ac1dd08989__"
+      },
+      {
+        "row": 5,
+        "text": "uname -a && node --version"
+      },
+      {
+        "row": 6,
+        "text": "echo __AT_MARKER_b9817c92a128446fa9ed0f159f7ee9ab__"
+      },
+      {
+        "row": 7,
+        "text": ""
+      },
+      {
+        "row": 8,
+        "text": ""
+      },
+      {
+        "row": 9,
+        "text": ""
+      },
+      {
+        "row": 10,
+        "text": ""
+      },
+      {
+        "row": 11,
+        "text": ""
+      },
+      {
+        "row": 12,
+        "text": ""
+      },
+      {
+        "row": 13,
+        "text": ""
+      },
+      {
+        "row": 14,
+        "text": ""
+      },
+      {
+        "row": 15,
+        "text": ""
+      },
+      {
+        "row": 16,
+        "text": ""
+      },
+      {
+        "row": 17,
+        "text": ""
+      },
+      {
+        "row": 18,
+        "text": ""
+      },
+      {
+        "row": 19,
+        "text": ""
+      },
+      {
+        "row": 20,
+        "text": ""
+      },
+      {
+        "row": 21,
+        "text": ""
+      },
+      {
+        "row": 22,
+        "text": ""
+      },
+      {
+        "row": 23,
+        "text": ""
+      }
+    ]
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json b/dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json
new file mode 100644
index 0000000..eb5f75f
--- /dev/null
+++ b/dogfood/20260326-week9-release-readiness/snapshots/03-final-inspect.json
@@ -0,0 +1,47 @@
+{
+  "ok": true,
+  "command": "inspect",
+  "timestamp": "2026-03-26T21:22:29.021Z",
+  "result": {
+    "session": {
+      "version": 1,
+      "sessionId": "01KMP0DKXG9DPDKJJ3F1223PQV",
+      "createdAt": "2026-03-26T21:22:17.138Z",
+      "updatedAt": "2026-03-26T21:22:17.818Z",
+      "status": "running",
+      "command": ["/bin/bash"],
+      "cwd": "/home/coder/.mux/src/agent-terminal/agent_exec_b625c85e1b",
+      "shell": "/bin/bash",
+      "term": "xterm-256color",
+      "cols": 80,
+      "rows": 24,
+      "creationCols": 80,
+      "creationRows": 24,
+      "hostPid": 497475,
+      "childPid": 497487,
+      "exitCode": null,
+      "exitSignal": null
+    },
+    "eventCount": 8,
+    "uptime": 11874,
+    "lastEventSeq": 7,
+    "terminationCategory": "running",
+    "artifacts": {
+      "total": 4,
+      "byKind": {
+        "screenshot": 1,
+        "snapshot": 1,
+        "recording": 1,
+        "video": 1
+      },
+      "missingCount": 0,
+      "health": "healthy"
+    },
+    "usedOfflineReplay": false,
+    "rendererRuntime": {
+      "backend": "ghostty-web",
+      "mode": "live-host",
+      "status": "healthy"
+    }
+  }
+}
diff --git a/dogfood/20260326-week9-release-readiness/videos/week9.webm b/dogfood/20260326-week9-release-readiness/videos/week9.webm
new file mode 100644
index 0000000..2cda601
Binary files /dev/null and b/dogfood/20260326-week9-release-readiness/videos/week9.webm differ
diff --git a/dogfood/run-command/README.md b/dogfood/run-command/README.md
new file mode 100644
index 0000000..fc30b6d
--- /dev/null
+++ b/dogfood/run-command/README.md
@@ -0,0 +1,33 @@
+# Run command dogfood bundle
+
+This bundle captures a 2026-03-26 end-to-end dogfood pass for the first-class `run` command under an isolated `AGENT_TERMINAL_HOME` recorded in `isolated-home.txt` (removed after capture).
+
+## What was exercised
+
+1. **Interactive bash session**
+   - `create-bash.json` shows the interactive proof session created at 2026-03-26T20:54:41.606Z.
+   - `waited-success.json` shows `run <bash-session> 'echo hello-dogfood' --timeout 15000 --json` returned `accepted: true`, `completed: true`, and `timedOut: false` (seq 3, 668 ms).
+   - `no-wait.json` shows `run <bash-session> 'echo async-dogfood' --no-wait --json` returned `accepted: true` with seq 5 and no completion fields.
+2. **Timeout contract**
+   - `timeout.json` shows `accepted: true`, `completed: false`, and `timedOut: true` (seq 0, 2002 ms).
+   - The timeout proof used a dedicated no-echo session created in `create-timeout.json` with `/bin/sh -c 'stty -echo; exec sleep 60'`, matching the repo's integration coverage for the timeout path.
+3. **Reviewable renderer artifacts**
+   - `snapshot.json` captures the terminal state after the interactive run scenarios.
+   - `screenshot.png` is a copied renderer screenshot from `screenshot-result.json`.
+   - `run-command.cast` is the exported asciicast from `record-export-asciicast.json`.
+   - `run-command.webm` is the exported WebM recording from `record-export-webm.json`.
+4. **Event-log evidence**
+   - `input-run-events.jsonl` contains 3 raw `input_run` entries copied from the interactive and timeout-session event logs.
+
+## Important review notes
+
+- The interactive bash session inherited this workspace's normal shell startup files, so `snapshot.json` and `screenshot.png` include the startup noise already visible in the session (for example the local `starship`/`brew` lookup failures). That noise does not affect the JSON run envelopes.
+- `commands.sh`, `bash-session-id.txt`, and `timeout-session-id.txt` record the exact CLI flow used to generate the bundle.
+- The requested timeout proof is represented by a separate session because the repository's own integration coverage uses a no-echo sleeper to keep the injected wait marker out of rendered output.
+
+## Suggested review order
+
+1. Read `waited-success.json`, `timeout.json`, and `no-wait.json`.
+2. Check `input-run-events.jsonl` for the raw `input_run` event evidence.
+3. Open `snapshot.json` and `screenshot.png` for terminal-state proof.
+4. Play `run-command.cast` and `run-command.webm` if you want the reviewable recording exports.
diff --git a/dogfood/run-command/bash-session-id.txt b/dogfood/run-command/bash-session-id.txt
new file mode 100644
index 0000000..fa2f3ee
--- /dev/null
+++ b/dogfood/run-command/bash-session-id.txt
@@ -0,0 +1 @@
+01KMNYV2FDGFXED8AGK1BDNDVP
diff --git a/dogfood/run-command/commands.sh b/dogfood/run-command/commands.sh
new file mode 100755
index 0000000..64e090a
--- /dev/null
+++ b/dogfood/run-command/commands.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+export PATH="/usr/local/nvm/versions/node/v22.19.0/bin:/usr/bin:/bin"
+export AGENT_TERMINAL_HOME=$(mktemp -d)
+# Interactive proof session
+node --import tsx ./src/cli/main.ts create --json -- /bin/bash
+node --import tsx ./src/cli/main.ts run "$BASH_SESSION_ID" 'echo hello-dogfood' --timeout 15000 --json
+node --import tsx ./src/cli/main.ts run "$BASH_SESSION_ID" 'echo async-dogfood' --no-wait --json
+node --import tsx ./src/cli/main.ts screenshot "$BASH_SESSION_ID" --json
+node --import tsx ./src/cli/main.ts snapshot "$BASH_SESSION_ID" --json
+node --import tsx ./src/cli/main.ts record export "$BASH_SESSION_ID" --format asciicast --json
+node --import tsx ./src/cli/main.ts record export "$BASH_SESSION_ID" --format webm --json
+# Timeout proof session (matches test/integration/run.test.ts)
+node --import tsx ./src/cli/main.ts create --json -- /bin/sh -c 'stty -echo; exec sleep 60'
+node --import tsx ./src/cli/main.ts run "$TIMEOUT_SESSION_ID" 'echo delayed' --timeout 2000 --json
+node --import tsx ./src/cli/main.ts destroy "$TIMEOUT_SESSION_ID" --json
+node --import tsx ./src/cli/main.ts destroy "$BASH_SESSION_ID" --json
+rm -rf "$AGENT_TERMINAL_HOME"
diff --git a/dogfood/run-command/create-bash.json b/dogfood/run-command/create-bash.json
new file mode 100644
index 0000000..cdca96b
--- /dev/null
+++ b/dogfood/run-command/create-bash.json
@@ -0,0 +1,12 @@
+{
+  "ok": true,
+  "command": "create",
+  "timestamp": "2026-03-26T20:54:41.606Z",
+  "result": {
+    "sessionId": "01KMNYV2FDGFXED8AGK1BDNDVP",
+    "createdAt": "2026-03-26T20:54:40.880Z",
+    "cols": 80,
+    "rows": 24,
+    "shell": "/bin/bash"
+  }
+}
diff --git a/dogfood/run-command/create-timeout.json b/dogfood/run-command/create-timeout.json
new file mode 100644
index 0000000..9ec2ba3
--- /dev/null
+++ b/dogfood/run-command/create-timeout.json
@@ -0,0 +1,12 @@
+{
+  "ok": true,
+  "command": "create",
+  "timestamp": "2026-03-26T20:54:54.145Z",
+  "result": {
+    "sessionId": "01KMNYVEQ7B8XCCY9RBGYG0X65",
+    "createdAt": "2026-03-26T20:54:53.417Z",
+    "cols": 80,
+    "rows": 24,
+    "shell": "/bin/bash"
+  }
+}
diff --git a/dogfood/run-command/destroy-bash.json b/dogfood/run-command/destroy-bash.json
new file mode 100644
index 0000000..5037ddd
--- /dev/null
+++ b/dogfood/run-command/destroy-bash.json
@@ -0,0 +1,9 @@
+{
+  "ok": true,
+  "command": "destroy",
+  "timestamp": "2026-03-26T20:54:59.704Z",
+  "result": {
+    "sessionId": "01KMNYV2FDGFXED8AGK1BDNDVP",
+    "destroyed": true
+  }
+}
diff --git a/dogfood/run-command/destroy-timeout.json b/dogfood/run-command/destroy-timeout.json
new file mode 100644
index 0000000..a4180d8
--- /dev/null
+++ b/dogfood/run-command/destroy-timeout.json
@@ -0,0 +1,9 @@
+{
+  "ok": true,
+  "command": "destroy",
+  "timestamp": "2026-03-26T20:54:58.962Z",
+  "result": {
+    "sessionId": "01KMNYVEQ7B8XCCY9RBGYG0X65",
+    "destroyed": true
+  }
+}
diff --git a/dogfood/run-command/input-run-events.jsonl b/dogfood/run-command/input-run-events.jsonl
new file mode 100644
index 0000000..146ac2f
--- /dev/null
+++ b/dogfood/run-command/input-run-events.jsonl
@@ -0,0 +1,3 @@
+{"seq":3,"ts":"2026-03-26T20:54:44.339Z","type":"input_run","payload":{"command":"echo hello-dogfood","marker":"__AT_MARKER_13b03640d0b44390a1166c3142602c83__","noWait":false}}
+{"seq":5,"ts":"2026-03-26T20:54:45.647Z","type":"input_run","payload":{"command":"echo async-dogfood","noWait":true}}
+{"seq":0,"ts":"2026-03-26T20:54:55.815Z","type":"input_run","payload":{"command":"echo delayed","marker":"__AT_MARKER_9bd5866c27e142cbbd1586a406215a10__","noWait":false}}
diff --git a/dogfood/run-command/isolated-home.txt b/dogfood/run-command/isolated-home.txt
new file mode 100644
index 0000000..2817c40
--- /dev/null
+++ b/dogfood/run-command/isolated-home.txt
@@ -0,0 +1 @@
+/tmp/tmp.S4fytTF4iY
diff --git a/dogfood/run-command/no-wait.json b/dogfood/run-command/no-wait.json
new file mode 100644
index 0000000..fc0d12b
--- /dev/null
+++ b/dogfood/run-command/no-wait.json
@@ -0,0 +1,9 @@
+{
+  "ok": true,
+  "command": "run",
+  "timestamp": "2026-03-26T20:54:45.649Z",
+  "result": {
+    "accepted": true,
+    "seq": 5
+  }
+}
diff --git a/dogfood/run-command/record-export-asciicast.json b/dogfood/run-command/record-export-asciicast.json
new file mode 100644
index 0000000..5f65bb4
--- /dev/null
+++ b/dogfood/run-command/record-export-asciicast.json
@@ -0,0 +1,23 @@
+{
+  "ok": true,
+  "command": "record export",
+  "timestamp": "2026-03-26T20:54:49.942Z",
+  "result": {
+    "sessionId": "01KMNYV2FDGFXED8AGK1BDNDVP",
+    "format": "asciicast",
+    "artifactPath": "/tmp/tmp.S4fytTF4iY/sessions/01KMNYV2FDGFXED8AGK1BDNDVP/artifacts/recording-6-asciicast.cast",
+    "bytes": 1063,
+    "sha256": "49b7f58cc7ef1888bcd2e10b238bbe3b95bd3460ab8415934a59bdc7b1738d36",
+    "capturedAtSeq": 6,
+    "durationMs": 3999,
+    "metadata": {
+      "width": 80,
+      "height": 24,
+      "title": "01KMNYV2FDGFXED8AGK1BDNDVP",
+      "timestamp": 1774558481,
+      "outputEventCount": 5,
+      "resizeEventCount": 0,
+      "markerCount": 0
+    }
+  }
+}
diff --git a/dogfood/run-command/record-export-webm.json b/dogfood/run-command/record-export-webm.json
new file mode 100644
index 0000000..8dd971f
--- /dev/null
+++ b/dogfood/run-command/record-export-webm.json
@@ -0,0 +1,23 @@
+{
+  "ok": true,
+  "command": "record export",
+  "timestamp": "2026-03-26T20:54:52.683Z",
+  "result": {
+    "sessionId": "01KMNYV2FDGFXED8AGK1BDNDVP",
+    "format": "webm",
+    "artifactPath": "/tmp/tmp.S4fytTF4iY/sessions/01KMNYV2FDGFXED8AGK1BDNDVP/artifacts/recording-6-webm.webm",
+    "bytes": 43456,
+    "sha256": "49e0e3c0a6b86661eacbca9765d7a310af092f2b1b4c9344487fcea58ccb89c7",
+    "capturedAtSeq": 6,
+    "durationMs": 3999,
+    "metadata": {
+      "width": 80,
+      "height": 24,
+      "profileName": "reference-dark",
+      "renderProfileHash": "8ffed6af301ec7c0e6b69599c3be0d1d12096f9fcdfc59d0bbb4cc474d64c53d",
+      "timingMode": "accelerated",
+      "outputEventCount": 5,
+      "resizeEventCount": 0
+    }
+  }
+}
diff --git a/dogfood/run-command/run-command.cast b/dogfood/run-command/run-command.cast
new file mode 100644
index 0000000..9de36b8
--- /dev/null
+++ b/dogfood/run-command/run-command.cast
@@ -0,0 +1,6 @@
+{"version":2,"width":80,"height":24,"timestamp":1774558481,"title":"01KMNYV2FDGFXED8AGK1BDNDVP","sessionId":"01KMNYV2FDGFXED8AGK1BDNDVP","env":{"TERM":"xterm-256color"},"toolVersion":"0.1.0"}
+[0,"o","bash: command not found: starship\r\n"]
+[0,"o","bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory\r\n"]
+[0.069,"o","\u001b[?2004h\u001b]0;coder@aaaaaaa: ~/.mux/src/agent-terminal/agent_exec_edfe4f992f\u0007\u001b[01;32mcoder@aaaaaaa\u001b[00m:\u001b[01;34m~/.mux/src/agent-terminal/agent_exec_edfe4f992f\u001b[00m$ "]
+[2.691,"o","\u001b[7mecho hello-dogfoo\u001b[27m\u001b[7md\u001b[27m\r\u001b[7md\u001b[27m\r\n\r\u001b[7mecho __AT_MARKER_13b03640d0b44390a1166c3142602c83__\u001b[27m\r\n\r"]
+[3.999,"o","\u001b[A\u001b[A\u001b[A\r\u001b]0;coder@aaaaaaa: ~/.mux/src/agent-terminal/agent_exec_edfe4f992f\u0007\u001b[01;32mcoder@aaaaaaa\u001b[00m:\u001b[01;34m~/.mux/src/agent-terminal/agent_exec_edfe4f992f\u001b[00m$ echo hello-dogfood\r\n\recho __AT_MARKER_13b03640d0b44390a1166c3142602c83__\r\n\r\u001b[7mecho async-dogfood\u001b[27m\r\n\r"]
diff --git a/dogfood/run-command/run-command.webm b/dogfood/run-command/run-command.webm
new file mode 100644
index 0000000..4f1fd7e
Binary files /dev/null and b/dogfood/run-command/run-command.webm differ
diff --git a/dogfood/run-command/screenshot-result.json b/dogfood/run-command/screenshot-result.json
new file mode 100644
index 0000000..b6f6ce0
--- /dev/null
+++ b/dogfood/run-command/screenshot-result.json
@@ -0,0 +1,20 @@
+{
+  "ok": true,
+  "command": "screenshot",
+  "timestamp": "2026-03-26T20:54:48.528Z",
+  "result": {
+    "sessionId": "01KMNYV2FDGFXED8AGK1BDNDVP",
+    "capturedAtSeq": 6,
+    "profileName": "reference-dark",
+    "cols": 80,
+    "rows": 24,
+    "artifactPath": "/tmp/tmp.S4fytTF4iY/sessions/01KMNYV2FDGFXED8AGK1BDNDVP/artifacts/screenshot-6-reference-dark.png",
+    "pngSizeBytes": 17487,
+    "cursorVisible": false,
+    "rendererBackend": "ghostty-web",
+    "pixelWidth": 640,
+    "pixelHeight": 384,
+    "sha256": "aea6b8bc32d3d0907c48f645051c0889cc73f2c3644701c0dd8b07f7507e94a7",
+    "renderProfileHash": "8ffed6af301ec7c0e6b69599c3be0d1d12096f9fcdfc59d0bbb4cc474d64c53d"
+  }
+}
diff --git a/dogfood/run-command/screenshot.png b/dogfood/run-command/screenshot.png
new file mode 100644
index 0000000..75c3dc5
Binary files /dev/null and b/dogfood/run-command/screenshot.png differ
diff --git a/dogfood/run-command/snapshot.json b/dogfood/run-command/snapshot.json
new file mode 100644
index 0000000..aaddcad
--- /dev/null
+++ b/dogfood/run-command/snapshot.json
@@ -0,0 +1,113 @@
+{
+  "ok": true,
+  "command": "snapshot",
+  "timestamp": "2026-03-26T20:54:49.270Z",
+  "result": {
+    "format": "structured",
+    "sessionId": "01KMNYV2FDGFXED8AGK1BDNDVP",
+    "capturedAtSeq": 6,
+    "cols": 80,
+    "rows": 24,
+    "cursorRow": 6,
+    "cursorCol": 0,
+    "isAltScreen": false,
+    "visibleLines": [
+      {
+        "row": 0,
+        "text": "bash: command not found: starship"
+      },
+      {
+        "row": 1,
+        "text": "bash: /home/linuxbrew/.linuxbrew/bin/brew: No such file or directory"
+      },
+      {
+        "row": 2,
+        "text": "coder@aaaaaaa:~/.mux/src/agent-terminal/agent_exec_edfe4f992f$ echo hello-dogfoo"
+      },
+      {
+        "row": 3,
+        "text": "d"
+      },
+      {
+        "row": 4,
+        "text": "echo __AT_MARKER_13b03640d0b44390a1166c3142602c83__"
+      },
+      {
+        "row": 5,
+        "text": "echo async-dogfood"
+      },
+      {
+        "row": 6,
+        "text": ""
+      },
+      {
+        "row": 7,
+        "text": ""
+      },
+      {
+        "row": 8,
+        "text": ""
+      },
+      {
+        "row": 9,
+        "text": ""
+      },
+      {
+        "row": 10,
+        "text": ""
+      },
+      {
+        "row": 11,
+        "text": ""
+      },
+      {
+        "row": 12,
+        "text": ""
+      },
+      {
+        "row": 13,
+        "text": ""
+      },
+      {
+        "row": 14,
+        "text": ""
+      },
+      {
+        "row": 15,
+        "text": ""
+      },
+      {
+        "row": 16,
+        "text": ""
+      },
+      {
+        "row": 17,
+        "text": ""
+      },
+      {
+        "row": 18,
+        "text": ""
+      },
+      {
+        "row": 19,
+        "text": ""
+      },
+      {
+        "row": 20,
+        "text": ""
+      },
+      {
+        "row": 21,
+        "text": ""
+      },
+      {
+        "row": 22,
+        "text": ""
+      },
+      {
+        "row": 23,
+        "text": ""
+      }
+    ]
+  }
+}
diff --git a/dogfood/run-command/timeout-session-id.txt b/dogfood/run-command/timeout-session-id.txt
new file mode 100644
index 0000000..2612b95
--- /dev/null
+++ b/dogfood/run-command/timeout-session-id.txt
@@ -0,0 +1 @@
+01KMNYVEQ7B8XCCY9RBGYG0X65
diff --git a/dogfood/run-command/timeout.json b/dogfood/run-command/timeout.json
new file mode 100644
index 0000000..6f91e32
--- /dev/null
+++ b/dogfood/run-command/timeout.json
@@ -0,0 +1,13 @@
+{
+  "ok": true,
+  "command": "run",
+  "timestamp": "2026-03-26T20:54:57.819Z",
+  "result": {
+    "accepted": true,
+    "completed": false,
+    "timedOut": true,
+    "seq": 0,
+    "durationMs": 2002,
+    "marker": "__AT_MARKER_9bd5866c27e142cbbd1586a406215a10__"
+  }
+}
diff --git a/dogfood/run-command/waited-success.json b/dogfood/run-command/waited-success.json
new file mode 100644
index 0000000..8934a39
--- /dev/null
+++ b/dogfood/run-command/waited-success.json
@@ -0,0 +1,13 @@
+{
+  "ok": true,
+  "command": "run",
+  "timestamp": "2026-03-26T20:54:45.009Z",
+  "result": {
+    "accepted": true,
+    "completed": true,
+    "timedOut": false,
+    "seq": 3,
+    "durationMs": 668,
+    "marker": "__AT_MARKER_13b03640d0b44390a1166c3142602c83__"
+  }
+}
diff --git a/src/cli/commands/doctor.ts b/src/cli/commands/doctor.ts
index 6e52ce3..7275caa 100644
--- a/src/cli/commands/doctor.ts
+++ b/src/cli/commands/doctor.ts
@@ -5,6 +5,7 @@ import {
   mkdir,
   mkdtemp,
   readFile,
+  readdir,
   rename,
   rm,
   stat,
@@ -17,8 +18,8 @@ import {
   type Server,
   type Socket,
 } from 'node:net';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { homedir, tmpdir } from 'node:os';
+import { join, normalize } from 'node:path';
 import process from 'node:process';
 
 import type { CommandContext } from '../context.js';
@@ -32,7 +33,7 @@ import {
   artifactPath,
   ensureArtifactsDir,
 } from '../../storage/artifactPaths.js';
-import { ensureHome } from '../../storage/home.js';
+import { ensureHome, resolveHome } from '../../storage/home.js';
 import {
   eventLogPath,
   sessionDir,
@@ -52,12 +53,14 @@ const DOCTOR_CHECK_LABELS: Readonly<Record<string, string>> = Object.freeze({
   'node-runtime': 'node',
   'cwd-access': 'cwd',
   'temp-dir': 'temp',
+  home_isolation: 'home-isolation',
   'home-writable': 'home-write',
   'pty-spawn': 'pty',
   'socket-viable': 'socket',
   'artifact-atomicity': 'artifacts',
   'event-log-writable': 'event-log',
   playwright_available: 'playwright',
+  browser_cache_accessible: 'browser-cache',
   browser_launch: 'browser',
   ghostty_web_available: 'ghostty-web',
   screenshot_viable: 'screenshot',
@@ -67,7 +70,16 @@ let doctorResourceSequence = 0;
 
 type DoctorCheckGroupName = 'environment' | 'renderer';
 type DoctorCheckStatus = 'pass' | 'fail' | 'skip';
-type DoctorCheckOperation = () => Promise<string> | string;
+
+interface DoctorCheckSkipResult {
+  status: 'skip';
+  message: string;
+}
+
+type DoctorCheckOutcome = string | DoctorCheckSkipResult;
+type DoctorCheckOperation = (
+  priorChecks: ReadonlyArray<DoctorCheck>,
+) => Promise<DoctorCheckOutcome> | DoctorCheckOutcome;
 type DoctorCheckDefinition = readonly [
   name: string,
   operation: DoctorCheckOperation,
@@ -171,6 +183,43 @@ function getCheckDurationMs(startedAtMs: number): number {
   return Math.max(0, Date.now() - startedAtMs);
 }
 
+function skipDoctorCheck(message: string): DoctorCheckSkipResult {
+  assert(message.length > 0, 'doctor check skip message must be non-empty');
+  return {
+    status: 'skip',
+    message,
+  };
+}
+
+function findDoctorCheck(
+  checks: ReadonlyArray<DoctorCheck>,
+  name: string,
+): DoctorCheck | undefined {
+  return checks.find((check) => check.name === name);
+}
+
+function resolveSystemHomeDirectory(): string {
+  const configuredHome = process.env.HOME ?? homedir();
+  assert(
+    configuredHome.length > 0,
+    'system home directory must be a non-empty path',
+  );
+  return normalize(configuredHome);
+}
+
+function resolvePlaywrightBrowserCachePath(): string {
+  const overridePath = process.env.PLAYWRIGHT_BROWSERS_PATH;
+  if (overridePath !== undefined) {
+    assert(
+      overridePath.length > 0,
+      'PLAYWRIGHT_BROWSERS_PATH must be a non-empty path when set',
+    );
+    return normalize(overridePath);
+  }
+
+  return join(resolveSystemHomeDirectory(), '.cache', 'ms-playwright');
+}
+
 function getDoctorDependencies(
   overrides: Partial<DoctorDependencies>,
 ): DoctorDependencies {
@@ -247,24 +296,27 @@ export async function runDoctorCheck(
   name: string,
   operation: DoctorCheckOperation,
   timeoutMs = CHECK_TIMEOUT_MS,
+  priorChecks: ReadonlyArray<DoctorCheck> = [],
 ): Promise<DoctorCheck> {
   assert(name.length > 0, 'doctor check name must be a non-empty string');
 
   const startedAtMs = Date.now();
   try {
-    const message = await withTimeout(
-      Promise.resolve(operation()),
+    const outcome = await withTimeout(
+      Promise.resolve(operation(priorChecks)),
       timeoutMs,
       `${name} timed out after ${String(timeoutMs)}ms`,
     );
+    const status = typeof outcome === 'string' ? 'pass' : outcome.status;
+    const message = typeof outcome === 'string' ? outcome : outcome.message;
     assert(
       message.length > 0,
-      'doctor check success message must be non-empty',
+      `doctor check ${status} message must be non-empty`,
     );
 
     return {
       name,
-      status: 'pass',
+      status,
       message,
       durationMs: getCheckDurationMs(startedAtMs),
     };
@@ -289,7 +341,7 @@ async function runCheckGroup(
 ): Promise<DoctorCheck[]> {
   const results: DoctorCheck[] = [];
   for (const [name, operation, timeoutMs] of checks) {
-    results.push(await runDoctorCheck(name, operation, timeoutMs));
+    results.push(await runDoctorCheck(name, operation, timeoutMs, results));
   }
 
   return results;
@@ -320,6 +372,21 @@ async function runTemporaryDirectoryCheck(): Promise<string> {
   return `temp dir ok: ${tmpdir()}`;
 }
 
+export function runHomeIsolationCheck(): string {
+  const configuredHome = process.env.AGENT_TERMINAL_HOME;
+  if (configuredHome === undefined) {
+    return 'Agent-terminal home uses default location';
+  }
+
+  const resolvedDoctorHome = resolveHome(configuredHome);
+  const systemHome = resolveSystemHomeDirectory();
+  if (resolvedDoctorHome === systemHome) {
+    return 'Agent-terminal home is explicitly set to system home location';
+  }
+
+  return `Agent-terminal home is isolated from system home: ${resolvedDoctorHome}`;
+}
+
 export async function runHomeWritableCheck(
   overrides: Partial<DoctorDependencies> = {},
 ): Promise<string> {
@@ -606,6 +673,44 @@ async function runPlaywrightAvailableCheck(): Promise<string> {
   return 'available';
 }
 
+const PLAYWRIGHT_BROWSER_DIRECTORY_PATTERN =
+  /^(?:chromium(?:_headless_shell)?|firefox|webkit|msedge)-/;
+
+export async function runBrowserCacheAccessibleCheck(
+  priorChecks: ReadonlyArray<DoctorCheck> = [],
+): Promise<DoctorCheckOutcome> {
+  const playwrightCheck = findDoctorCheck(priorChecks, 'playwright_available');
+  if (playwrightCheck?.status === 'fail') {
+    return skipDoctorCheck(
+      'playwright unavailable; browser cache check not attempted',
+    );
+  }
+
+  const browserCachePath = resolvePlaywrightBrowserCachePath();
+  try {
+    await access(browserCachePath, fsConstants.R_OK | fsConstants.X_OK);
+    const cacheEntries = await readdir(browserCachePath, {
+      withFileTypes: true,
+    });
+    const browserDirectory = cacheEntries.find(
+      (entry) =>
+        entry.isDirectory() &&
+        PLAYWRIGHT_BROWSER_DIRECTORY_PATTERN.test(entry.name),
+    );
+    assert(
+      browserDirectory !== undefined,
+      `Playwright browser cache not found at ${browserCachePath}. Run 'npx playwright install chromium' to install.`,
+    );
+  } catch (error) {
+    throw new Error(
+      `Playwright browser cache not found at ${browserCachePath}. Run 'npx playwright install chromium' to install.`,
+      { cause: error },
+    );
+  }
+
+  return `browser cache accessible: ${browserCachePath}`;
+}
+
 async function runBrowserLaunchCheck(): Promise<string> {
   const chromium = await getPlaywrightChromium();
   const browser = await chromium.launch({
@@ -689,20 +794,33 @@ async function runScreenshotViabilityCheck(): Promise<string> {
 
 export async function runDoctorChecks(): Promise<DoctorResult> {
   const environment = await runCheckGroup([
-    ['node-runtime', runNodeRuntimeCheck],
-    ['cwd-access', runWorkingDirectoryCheck],
-    ['temp-dir', runTemporaryDirectoryCheck],
-    ['home-writable', runHomeWritableCheck, QUICK_CHECK_TIMEOUT_MS],
-    ['pty-spawn', runPtySpawnCheck, QUICK_CHECK_TIMEOUT_MS],
-    ['socket-viable', runSocketViabilityCheck, QUICK_CHECK_TIMEOUT_MS],
-    ['artifact-atomicity', runArtifactAtomicityCheck, QUICK_CHECK_TIMEOUT_MS],
-    ['event-log-writable', runEventLogWritabilityCheck, QUICK_CHECK_TIMEOUT_MS],
+    ['node-runtime', () => runNodeRuntimeCheck()],
+    ['cwd-access', () => runWorkingDirectoryCheck()],
+    ['temp-dir', () => runTemporaryDirectoryCheck()],
+    ['home_isolation', () => runHomeIsolationCheck(), QUICK_CHECK_TIMEOUT_MS],
+    ['home-writable', () => runHomeWritableCheck(), QUICK_CHECK_TIMEOUT_MS],
+    ['pty-spawn', () => runPtySpawnCheck(), QUICK_CHECK_TIMEOUT_MS],
+    ['socket-viable', () => runSocketViabilityCheck(), QUICK_CHECK_TIMEOUT_MS],
+    [
+      'artifact-atomicity',
+      () => runArtifactAtomicityCheck(),
+      QUICK_CHECK_TIMEOUT_MS,
+    ],
+    [
+      'event-log-writable',
+      () => runEventLogWritabilityCheck(),
+      QUICK_CHECK_TIMEOUT_MS,
+    ],
   ]);
   const renderer = await runCheckGroup([
-    ['playwright_available', runPlaywrightAvailableCheck],
-    ['browser_launch', runBrowserLaunchCheck],
-    ['ghostty_web_available', runGhosttyWebAvailableCheck],
-    ['screenshot_viable', runScreenshotViabilityCheck],
+    ['playwright_available', () => runPlaywrightAvailableCheck()],
+    [
+      'browser_cache_accessible',
+      (priorChecks) => runBrowserCacheAccessibleCheck(priorChecks),
+    ],
+    ['browser_launch', () => runBrowserLaunchCheck()],
+    ['ghostty_web_available', () => runGhosttyWebAvailableCheck()],
+    ['screenshot_viable', () => runScreenshotViabilityCheck()],
   ]);
   const allChecks = [...environment, ...renderer];
   const uniqueCheckNames = new Set(allChecks.map((check) => check.name));
diff --git a/src/cli/commands/inputSource.ts b/src/cli/commands/inputSource.ts
index 2ae6341..7136484 100644
--- a/src/cli/commands/inputSource.ts
+++ b/src/cli/commands/inputSource.ts
@@ -4,7 +4,7 @@ import { lstat, readFile, stat } from 'node:fs/promises';
 import { ERROR_CODES, makeCliError } from '../../protocol/errors.js';
 
 interface ResolveCommandInputTextOptions {
-  commandName: 'type' | 'paste';
+  commandName: 'type' | 'paste' | 'run';
   text: string | undefined;
   file: string | undefined;
 }
@@ -23,7 +23,7 @@ function createInvalidInputError(
   });
 }
 
-function usageMessage(commandName: 'type' | 'paste'): string {
+function usageMessage(commandName: 'type' | 'paste' | 'run'): string {
   return `Usage: agent-terminal ${commandName} <session-id> [text] [--file <path>]`;
 }
 
diff --git a/src/cli/commands/run.ts b/src/cli/commands/run.ts
new file mode 100644
index 0000000..29599f8
--- /dev/null
+++ b/src/cli/commands/run.ts
@@ -0,0 +1,136 @@
+import type { CommandContext } from '../context.js';
+
+import { emitSuccess } from '../output.js';
+import { sendRpc } from '../../host/rpcClient.js';
+import type { RunResult } from '../../protocol/messages.js';
+import { RunResultSchema } from '../../protocol/messages.js';
+import { ERROR_CODES, makeCliError } from '../../protocol/errors.js';
+import { readManifestIfExists } from '../../storage/manifests.js';
+import {
+  manifestPath,
+  sessionDir,
+  socketPath,
+} from '../../storage/sessionPaths.js';
+import { resolveCommandInputText } from './inputSource.js';
+
+interface CommandOptions {
+  context: CommandContext;
+  json: boolean;
+  sessionId: string;
+  text: string | undefined;
+  file?: string;
+  timeout: number;
+  wait: boolean;
+}
+
+export async function runRunCommand(options: CommandOptions): Promise<void> {
+  const command = await resolveCommandInputText({
+    commandName: 'run',
+    text: options.text,
+    file: options.file,
+  });
+
+  if (command.length === 0) {
+    throw makeCliError(ERROR_CODES.INVALID_INPUT, {
+      message: 'Command text must not be empty.',
+      details: {
+        command,
+      },
+    });
+  }
+
+  if (!Number.isFinite(options.timeout) || options.timeout <= 0) {
+    throw makeCliError(ERROR_CODES.INVALID_INPUT, {
+      message: 'Timeout must be a positive integer in milliseconds',
+      details: {
+        timeout: options.timeout,
+      },
+    });
+  }
+
+  const home = options.context.home;
+  const sessionDirectory = sessionDir(home, options.sessionId);
+  const manifestFile = manifestPath(sessionDirectory);
+  const manifest = await readManifestIfExists(manifestFile);
+
+  if (manifest === null) {
+    throw makeCliError(ERROR_CODES.SESSION_NOT_FOUND, {
+      message: `Session "${options.sessionId}" was not found.`,
+      details: {
+        sessionId: options.sessionId,
+        manifestPath: manifestFile,
+      },
+    });
+  }
+
+  if (manifest.status === 'destroyed') {
+    throw makeCliError(ERROR_CODES.SESSION_ALREADY_DESTROYED, {
+      message: `Session "${options.sessionId}" is already destroyed.`,
+      details: {
+        sessionId: options.sessionId,
+        status: manifest.status,
+      },
+    });
+  }
+
+  if (manifest.status !== 'running') {
+    throw makeCliError(ERROR_CODES.SESSION_NOT_RUNNING, {
+      message: `Session "${options.sessionId}" is not running.`,
+      details: {
+        sessionId: options.sessionId,
+        status: manifest.status,
+      },
+    });
+  }
+
+  const noWait = !options.wait;
+  const rpcParams: Record<string, unknown> = {
+    command,
+    noWait,
+  };
+
+  if (!noWait && options.timeout > 0) {
+    rpcParams.timeoutMs = options.timeout;
+  }
+
+  const rpcTimeoutMs = noWait ? 10_000 : options.timeout + 10_000;
+  const rawResult = await sendRpc(
+    socketPath(sessionDirectory),
+    'run',
+    rpcParams,
+    rpcTimeoutMs,
+  );
+
+  const parsed = RunResultSchema.safeParse(rawResult);
+  if (!parsed.success) {
+    throw makeCliError(ERROR_CODES.PROTOCOL_ERROR, {
+      message: 'Unexpected response shape from the session host.',
+      details: {
+        errors: parsed.error.issues,
+        rawResult,
+      },
+    });
+  }
+
+  const result: RunResult = parsed.data;
+  const lines: string[] = [];
+
+  if (noWait) {
+    lines.push(`Command injected into session (seq=${String(result.seq)}).`);
+  } else if (result.completed) {
+    lines.push(
+      `Command completed (seq=${String(result.seq)}, ${String(result.durationMs)}ms).`,
+    );
+  } else if (result.timedOut) {
+    lines.push(
+      `Command timed out after ${String(result.durationMs)}ms (seq=${String(result.seq)}).`,
+    );
+  }
+
+  emitSuccess({
+    command: 'run',
+    json: options.json,
+    result,
+    lines,
+  });
+}
diff --git a/src/cli/main.ts b/src/cli/main.ts
index 412a3c6..865088d 100644
--- a/src/cli/main.ts
+++ b/src/cli/main.ts
@@ -14,6 +14,7 @@ import { runInspectCommand } from './commands/inspect.js';
 import { runListCommand } from './commands/list.js';
 import { runMarkCommand } from './commands/mark.js';
 import { runPasteCommand } from './commands/paste.js';
+import { runRunCommand } from './commands/run.js';
 import { runRecordExportCommand } from './commands/record-export.js';
 import { runResizeCommand } from './commands/resize.js';
 import { runScreenshotCommand } from './commands/screenshot.js';
@@ -383,6 +384,42 @@ async function main(): Promise<void> {
       ),
     );
 
+  program
+    .command('run <session-id> [command]')
+    .description(
+      'Run a command in a session and optionally wait for completion',
+    )
+    .option('--file <path>', 'Read command text from a file')
+    .option('--timeout <ms>', 'Wait timeout in milliseconds', '30000')
+    .option('--no-wait', 'Do not wait for completion')
+    .option('--json', 'Emit a JSON command envelope', false)
+    .action(
+      wrapAction(
+        'run',
+        async (
+          sessionId: string,
+          text: string | undefined,
+          options: {
+            file?: string;
+            timeout: string;
+            wait: boolean;
+            json: boolean;
+          },
+          context: CommandContext,
+        ) => {
+          await runRunCommand({
+            context,
+            json: options.json,
+            sessionId,
+            text,
+            ...(options.file !== undefined ? { file: options.file } : {}),
+            timeout: Number.parseInt(options.timeout, 10),
+            wait: options.wait,
+          });
+        },
+      ),
+    );
+
   program
     .command('mark <session-id> <label>')
     .description('Add a marker to a session')
diff --git a/src/host/eventLog.ts b/src/host/eventLog.ts
index ef489a3..23aaeec 100644
--- a/src/host/eventLog.ts
+++ b/src/host/eventLog.ts
@@ -7,8 +7,10 @@ import { z } from 'zod';
 
 import {
   EventRecordSchema,
+  InputRunEventPayloadSchema,
   MarkerEventPayloadSchema,
   type EventRecord,
+  type InputRunEventPayload,
   type MarkerEventPayload,
 } from '../protocol/schemas.js';
 import { invariant } from '../util/assert.js';
@@ -76,6 +78,7 @@ type EventLogEventType =
   | 'input_text'
   | 'input_paste'
   | 'input_keys'
+  | 'input_run'
   | 'resize'
   | 'signal'
   | 'exit'
@@ -85,6 +88,7 @@ type EventLogPayload =
   | InputTextEventPayload
   | InputPasteEventPayload
   | InputKeysEventPayload
+  | InputRunEventPayload
   | ResizeEventPayload
   | SignalEventPayload
   | ExitEventPayload
@@ -128,6 +132,11 @@ function validatePayload(
       invariant(result.success, 'input_keys payload must match schema');
       return result.data;
     }
+    case 'input_run': {
+      const result = InputRunEventPayloadSchema.safeParse(payload);
+      invariant(result.success, 'input_run payload must match schema');
+      return result.data;
+    }
     case 'resize': {
       const result = ResizeEventPayloadSchema.safeParse(payload);
       invariant(result.success, 'resize payload must match schema');
@@ -302,6 +311,10 @@ export class EventLog {
     type: 'input_keys',
     payload: InputKeysEventPayload,
   ): Promise<number>;
+  async append(
+    type: 'input_run',
+    payload: InputRunEventPayload,
+  ): Promise<number>;
   async append(type: 'resize', payload: ResizeEventPayload): Promise<number>;
   async append(type: 'signal', payload: SignalEventPayload): Promise<number>;
   async append(type: 'exit', payload: ExitEventPayload): Promise<number>;
diff --git a/src/host/hostMain.ts b/src/host/hostMain.ts
index a5165d4..6d4b47b 100644
--- a/src/host/hostMain.ts
+++ b/src/host/hostMain.ts
@@ -1,3 +1,4 @@
+import crypto from 'node:crypto';
 import { rename, rm } from 'node:fs/promises';
 import process from 'node:process';
 
@@ -16,6 +17,8 @@ import type {
   MarkParams,
   PasteParams,
   ResizeParams,
+  RunParams,
+  RunResult,
   ScreenshotParams,
   SendKeysParams,
   SignalParams,
@@ -625,6 +628,168 @@ export async function runHost(sessionId: string): Promise<void> {
       await eventLog.append('input_paste', { data: encoded });
       return {};
     },
+    run: async (params: unknown) => {
+      const { command, noWait, timeoutMs } = params as RunParams;
+
+      if (!isSessionRunning(state)) {
+        throw makeCliError(ERROR_CODES.SESSION_NOT_RUNNING, {
+          message: 'Session is not running.',
+        });
+      }
+
+      invariant(
+        typeof command === 'string' && command.length > 0,
+        'run command must be a non-empty string',
+      );
+      if (timeoutMs !== undefined) {
+        invariant(
+          Number.isInteger(timeoutMs) && timeoutMs > 0,
+          'run timeoutMs must be a positive integer',
+        );
+      }
+
+      const shouldWait = !noWait;
+      let marker: string | undefined;
+      if (shouldWait) {
+        marker = `__AT_MARKER_${crypto.randomUUID().replace(/-/g, '')}__`;
+      }
+
+      if (shouldWait) {
+        invariant(marker !== undefined, 'run marker must exist when waiting');
+      }
+      const injectedText = shouldWait
+        ? (() => {
+            const waitMarker = marker as string;
+            const half = Math.ceil(waitMarker.length / 2);
+            const markerPart1 = waitMarker.slice(0, half);
+            const markerPart2 = waitMarker.slice(half);
+            return `${command}\nprintf '%s%s\\n' '${markerPart1}' '${markerPart2}'\n`;
+          })()
+        : `${command}\n`;
+      const encoded = `${encodePaste(injectedText)}${encodeKey('enter')}`;
+      pty.write(encoded);
+      lastActivityAt = Date.now();
+
+      const seq = await eventLog.append('input_run', {
+        command,
+        ...(marker === undefined ? {} : { marker }),
+        noWait,
+      });
+
+      if (!shouldWait) {
+        return {
+          accepted: true as const,
+          seq,
+        } satisfies RunResult;
+      }
+
+      const effectiveTimeoutMs = timeoutMs ?? 30_000;
+      const startTime = Date.now();
+      const profile = resolveProfile(DEFAULT_RENDER_PROFILE_NAME);
+      const pollIntervalMs = 200;
+      const waitMarker = marker;
+      invariant(waitMarker !== undefined, 'run wait marker must be defined');
+      let clearWaitPoll: (() => void) | null = null;
+
+      const pollCondition = new Promise<{
+        matched: boolean;
+        exited: boolean;
+      }>((resolve) => {
+        let pollInFlight = false;
+        let consecutiveFailures = 0;
+
+        const checkInterval = setInterval(() => {
+          if (pollInFlight) {
+            return;
+          }
+
+          pollInFlight = true;
+          void (async () => {
+            try {
+              const replayInput = loadReplayInput();
+              const backend = await rendererManager.getBackend(
+                profile,
+                replayInput,
+              );
+              const snapshot = await backend.snapshot();
+              const visibleText = snapshot.visibleLines
+                .map((line) => line.text)
+                .join('\n');
+              consecutiveFailures = 0;
+
+              if (visibleText.includes(waitMarker)) {
+                clearInterval(checkInterval);
+                resolve({ matched: true, exited: false });
+                return;
+              }
+
+              if (!isSessionRunning(state)) {
+                clearInterval(checkInterval);
+                resolve({ matched: false, exited: true });
+                return;
+              }
+            } catch (pollError) {
+              void pollError;
+              consecutiveFailures += 1;
+
+              if (!isSessionRunning(state)) {
+                clearInterval(checkInterval);
+                resolve({ matched: false, exited: true });
+                return;
+              }
+
+              if (consecutiveFailures >= MAX_CONSECUTIVE_POLL_FAILURES) {
+                clearInterval(checkInterval);
+                resolve({ matched: false, exited: false });
+                return;
+              }
+            } finally {
+              pollInFlight = false;
+            }
+          })();
+        }, pollIntervalMs);
+
+        clearWaitPoll = (): void => {
+          clearInterval(checkInterval);
+        };
+      });
+
+      const pollResult = await new Promise<{
+        matched: boolean;
+        exited: boolean;
+      }>((resolve) => {
+        let resolved = false;
+        const timeoutHandle = setTimeout(() => {
+          if (resolved) {
+            return;
+          }
+          resolved = true;
+          clearWaitPoll?.();
+          resolve({ matched: false, exited: false });
+        }, effectiveTimeoutMs);
+
+        void pollCondition.then((result) => {
+          if (resolved) {
+            return;
+          }
+          resolved = true;
+          clearTimeout(timeoutHandle);
+          clearWaitPoll?.();
+          resolve(result);
+        });
+      });
+
+      const durationMs = Date.now() - startTime;
+
+      return {
+        accepted: true as const,
+        completed: pollResult.matched,
+        timedOut: !pollResult.matched && !pollResult.exited,
+        seq,
+        durationMs,
+        marker: waitMarker,
+      } satisfies RunResult;
+    },
     sendKeys: async (params: unknown) => {
       const { keys } = params as SendKeysParams;
 
diff --git a/src/protocol/messages.ts b/src/protocol/messages.ts
index 56179a8..f3a2180 100644
--- a/src/protocol/messages.ts
+++ b/src/protocol/messages.ts
@@ -197,6 +197,27 @@ export type PasteParams = z.infer<typeof PasteParamsSchema>;
 export const PasteResultSchema = EmptyObjectSchema;
 export type PasteResult = z.infer<typeof PasteResultSchema>;
 
+export const RunParamsSchema = z
+  .object({
+    command: z.string().min(1),
+    noWait: z.boolean().optional().default(false),
+    timeoutMs: z.number().int().positive().optional(),
+  })
+  .strict();
+export type RunParams = z.infer<typeof RunParamsSchema>;
+
+export const RunResultSchema = z
+  .object({
+    accepted: z.literal(true),
+    completed: z.boolean().optional(),
+    timedOut: z.boolean().optional(),
+    seq: z.number().int().nonnegative(),
+    durationMs: z.number().int().nonnegative().optional(),
+    marker: z.string().optional(),
+  })
+  .strict();
+export type RunResult = z.infer<typeof RunResultSchema>;
+
 export const MarkParamsSchema = z
   .object({
     label: z.string(),
@@ -289,6 +310,7 @@ const RPC_METHODS = [
   'screenshot',
   'type',
   'paste',
+  'run',
   'mark',
   'sendKeys',
   'resize',
@@ -322,6 +344,10 @@ export const RpcMethodSchemas = {
     params: PasteParamsSchema,
     result: PasteResultSchema,
   },
+  run: {
+    params: RunParamsSchema,
+    result: RunResultSchema,
+  },
   mark: {
     params: MarkParamsSchema,
     result: MarkResultSchema,
diff --git a/src/protocol/schemas.ts b/src/protocol/schemas.ts
index 5d7b35d..57c1598 100644
--- a/src/protocol/schemas.ts
+++ b/src/protocol/schemas.ts
@@ -100,6 +100,32 @@ export const InputKeysEventPayloadSchema = z
   .strict();
 export type InputKeysEventPayload = z.infer<typeof InputKeysEventPayloadSchema>;
 
+export const InputRunEventPayloadSchema = z
+  .object({
+    command: z.string().min(1),
+    marker: z.string().optional(),
+    noWait: z.boolean(),
+  })
+  .strict()
+  .superRefine((obj, ctx) => {
+    if (!obj.noWait && obj.marker === undefined) {
+      ctx.addIssue({
+        code: 'custom',
+        message: 'marker is required when noWait is false',
+        path: ['marker'],
+      });
+    }
+
+    if (obj.noWait && obj.marker !== undefined) {
+      ctx.addIssue({
+        code: 'custom',
+        message: 'marker must not be set when noWait is true',
+        path: ['marker'],
+      });
+    }
+  });
+export type InputRunEventPayload = z.infer<typeof InputRunEventPayloadSchema>;
+
 export const ResizeEventPayloadSchema = z
   .object({
     cols: PositiveIntSchema,
@@ -137,6 +163,7 @@ export const EventTypeSchema = z.enum([
   'input_text',
   'input_paste',
   'input_keys',
+  'input_run',
   'resize',
   'signal',
   'exit',
@@ -181,6 +208,14 @@ export const InputKeysEventRecordSchema = z
   })
   .strict();
 
+export const InputRunEventRecordSchema = z
+  .object({
+    ...EventRecordBaseShape,
+    type: z.literal('input_run'),
+    payload: InputRunEventPayloadSchema,
+  })
+  .strict();
+
 export const ResizeEventRecordSchema = z
   .object({
     ...EventRecordBaseShape,
@@ -218,6 +253,7 @@ export const EventRecordSchema = z.discriminatedUnion('type', [
   InputTextEventRecordSchema,
   InputPasteEventRecordSchema,
   InputKeysEventRecordSchema,
+  InputRunEventRecordSchema,
   ResizeEventRecordSchema,
   SignalEventRecordSchema,
   ExitEventRecordSchema,
diff --git a/src/renderer/browserPath.ts b/src/renderer/browserPath.ts
new file mode 100644
index 0000000..c3530a2
--- /dev/null
+++ b/src/renderer/browserPath.ts
@@ -0,0 +1,118 @@
+import { readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import process from 'node:process';
+
+export type PlaywrightBrowsersPathSource = 'env' | 'captured-home';
+
+export interface PlaywrightBrowsersPathResolution {
+  path: string;
+  source: PlaywrightBrowsersPathSource;
+}
+
+export interface ResolvePlaywrightBrowsersPathOptions {
+  env?: NodeJS.ProcessEnv;
+  capturedHome?: string | undefined;
+  platform?: NodeJS.Platform;
+}
+
+// Capture HOME at module load time — before any isolation may change it.
+// This lets us find the host's Playwright browser cache even when the
+// process later operates under an isolated HOME.
+const CAPTURED_PROCESS_HOME = process.env.HOME;
+
+function isNonEmptyString(value: unknown): value is string {
+  return typeof value === 'string' && value.length > 0;
+}
+
+function resolveDefaultPlaywrightBrowsersPath(
+  capturedHome: string,
+  platform: NodeJS.Platform,
+): string | null {
+  switch (platform) {
+    case 'linux': {
+      return join(capturedHome, '.cache', 'ms-playwright');
+    }
+    case 'darwin': {
+      return join(capturedHome, 'Library', 'Caches', 'ms-playwright');
+    }
+    default: {
+      return null;
+    }
+  }
+}
+
+function directoryContainsChromiumBrowser(browserCachePath: string): boolean {
+  try {
+    return readdirSync(browserCachePath, { withFileTypes: true }).some(
+      (entry) => entry.isDirectory() && entry.name.startsWith('chromium'),
+    );
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Resolves the Playwright browser cache path from either an explicit override
+ * or the host HOME that was captured before any later home isolation.
+ *
+ * This helper is pure: it reads from the provided options and filesystem state
+ * but does not mutate process state or environment variables.
+ */
+export function resolvePlaywrightBrowsersPath(
+  options: ResolvePlaywrightBrowsersPathOptions = {},
+): PlaywrightBrowsersPathResolution | null {
+  const env = options.env ?? process.env;
+  const explicitOverride = env.PLAYWRIGHT_BROWSERS_PATH;
+  if (isNonEmptyString(explicitOverride)) {
+    return {
+      path: explicitOverride,
+      source: 'env',
+    };
+  }
+
+  const capturedHome = options.capturedHome ?? CAPTURED_PROCESS_HOME;
+  if (!isNonEmptyString(capturedHome)) {
+    return null;
+  }
+
+  const browserCachePath = resolveDefaultPlaywrightBrowsersPath(
+    capturedHome,
+    options.platform ?? process.platform,
+  );
+  if (browserCachePath === null) {
+    return null;
+  }
+
+  if (!directoryContainsChromiumBrowser(browserCachePath)) {
+    return null;
+  }
+
+  return {
+    path: browserCachePath,
+    source: 'captured-home',
+  };
+}
+
+/**
+ * Resolves the Playwright browser cache path and, when the resolution comes
+ * from the captured host HOME, sets `PLAYWRIGHT_BROWSERS_PATH` on the target
+ * environment as a side effect so downstream Playwright imports can reuse the
+ * existing browser cache.
+ *
+ * The environment mutation only happens for the `captured-home` source. Calls
+ * are idempotent, so it is safe to invoke this helper multiple times.
+ */
+export function ensurePlaywrightBrowsersPath(
+  options: ResolvePlaywrightBrowsersPathOptions = {},
+): PlaywrightBrowsersPathResolution | null {
+  const env = options.env ?? process.env;
+  const resolution = resolvePlaywrightBrowsersPath({
+    ...options,
+    env,
+  });
+  if (resolution?.source === 'captured-home') {
+    env.PLAYWRIGHT_BROWSERS_PATH = resolution.path;
+  }
+
+  return resolution;
+}
diff --git a/src/renderer/capabilities.ts b/src/renderer/capabilities.ts
index 9f59b58..7018e11 100644
--- a/src/renderer/capabilities.ts
+++ b/src/renderer/capabilities.ts
@@ -2,6 +2,8 @@ import assert from 'node:assert/strict';
 
 import { z } from 'zod';
 
+import { ensurePlaywrightBrowsersPath } from './browserPath.js';
+
 // --- Capability vocabulary ---
 
 export const CapabilityNameSchema = z.enum([
@@ -106,6 +108,10 @@ async function probePlaywrightAvailability(
   mode: DiscoveryMode,
 ): Promise<PlaywrightProbeResult> {
   try {
+    // Set PLAYWRIGHT_BROWSERS_PATH in process.env so downstream Playwright calls
+    // find the browser cache even when HOME has been changed for isolation.
+    ensurePlaywrightBrowsersPath();
+
     const playwrightModule = (await import('playwright')) as {
       chromium?: {
         launch?: unknown;
diff --git a/src/renderer/ghosttyWeb/backend.ts b/src/renderer/ghosttyWeb/backend.ts
index ba8ac80..94bd5bf 100644
--- a/src/renderer/ghosttyWeb/backend.ts
+++ b/src/renderer/ghosttyWeb/backend.ts
@@ -9,6 +9,7 @@ import {
 import { readFile, readdir, stat } from 'node:fs/promises';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 
+import { ensurePlaywrightBrowsersPath } from '../browserPath.js';
 import {
   chromium,
   type Browser,
@@ -1462,6 +1463,7 @@ export class GhosttyWebBackend implements VideoCapableRendererBackend {
         case 'input_text':
         case 'input_paste':
         case 'input_keys':
+        case 'input_run':
         case 'signal':
         case 'exit': {
           await flushOutputBatch();
@@ -1719,6 +1721,7 @@ export class GhosttyWebBackend implements VideoCapableRendererBackend {
         case 'input_text':
         case 'input_paste':
         case 'input_keys':
+        case 'input_run':
         case 'signal':
         case 'exit': {
           await flushOutputBatch();
@@ -1980,6 +1983,20 @@ export class GhosttyWebBackend implements VideoCapableRendererBackend {
       this.server = server;
       this.serverOrigin = origin;
 
+      // Set PLAYWRIGHT_BROWSERS_PATH in process.env so downstream Playwright calls
+      // find the browser cache even when HOME has been changed for isolation.
+      const browserPathResolution = ensurePlaywrightBrowsersPath();
+      if (browserPathResolution === null) {
+        this.logger.debug(
+          'No Playwright browser cache override resolved; using Playwright defaults',
+        );
+      } else {
+        this.logger.debug(
+          'Resolved Playwright browser cache path',
+          browserPathResolution,
+        );
+      }
+
       this.browser = await chromium.launch({
         headless: true,
       });
diff --git a/src/renderer/types.ts b/src/renderer/types.ts
index fa7128f..989e9ad 100644
--- a/src/renderer/types.ts
+++ b/src/renderer/types.ts
@@ -80,6 +80,21 @@ const InputKeysReplayEventSchema = z
   })
   .strict();
 
+const InputRunReplayEventSchema = z
+  .object({
+    seq: NonNegativeIntSchema,
+    ts: z.iso.datetime(),
+    type: z.literal('input_run'),
+    payload: z
+      .object({
+        command: z.string().min(1),
+        marker: z.string().optional(),
+        noWait: z.boolean(),
+      })
+      .strict(),
+  })
+  .strict();
+
 const ResizeReplayEventSchema = z
   .object({
     seq: NonNegativeIntSchema,
@@ -135,6 +150,7 @@ export const ReplayEventSchema = z.discriminatedUnion('type', [
   InputTextReplayEventSchema,
   InputPasteReplayEventSchema,
   InputKeysReplayEventSchema,
+  InputRunReplayEventSchema,
   ResizeReplayEventSchema,
   MarkerReplayEventSchema,
   SignalReplayEventSchema,
diff --git a/test/integration/renderer-backend.test.ts b/test/integration/renderer-backend.test.ts
index 1881126..9334a0d 100644
--- a/test/integration/renderer-backend.test.ts
+++ b/test/integration/renderer-backend.test.ts
@@ -110,6 +110,38 @@ describe('GhosttyWebBackend integration', { timeout: 120_000 }, () => {
     }
   });
 
+  it('resolves the browser cache from the original HOME when HOME is isolated before boot', async () => {
+    // prettier-ignore
+    const isolatedHome = await realpath(await mkdtemp(join(tmpdir(), 'agent-terminal-renderer-home-')));
+    const previousHome = process.env.HOME;
+    const previousBrowsersPath = process.env.PLAYWRIGHT_BROWSERS_PATH;
+    if (previousHome === undefined) {
+      throw new Error(
+        'expected HOME to be defined before isolating renderer boot',
+      );
+    }
+
+    try {
+      delete process.env.PLAYWRIGHT_BROWSERS_PATH;
+      process.env.HOME = isolatedHome;
+
+      await backend.boot();
+
+      expect(backend.isBooted).toBe(true);
+      expect(process.env.PLAYWRIGHT_BROWSERS_PATH).toBe(
+        join(previousHome, '.cache', 'ms-playwright'),
+      );
+    } finally {
+      if (previousBrowsersPath === undefined) {
+        delete process.env.PLAYWRIGHT_BROWSERS_PATH;
+      } else {
+        process.env.PLAYWRIGHT_BROWSERS_PATH = previousBrowsersPath;
+      }
+      process.env.HOME = previousHome;
+      await rm(isolatedHome, { recursive: true, force: true });
+    }
+  });
+
   it('replays consecutive output events and flushes batches before target breaks', async () => {
     await backend.boot();
 
diff --git a/test/integration/run.test.ts b/test/integration/run.test.ts
new file mode 100644
index 0000000..801ac54
--- /dev/null
+++ b/test/integration/run.test.ts
@@ -0,0 +1,295 @@
+import { mkdtempSync, realpathSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+
+import {
+  cleanupHome,
+  createSession,
+  destroySession,
+  readEvents,
+  runCli,
+  sleep,
+  type SuccessEnvelope,
+} from '../helpers.js';
+import type { CommandErrorEnvelope } from '../../src/protocol/envelope.js';
+
+let testHome = '';
+let sessionId = '';
+
+function testEnv(): Record<string, string> {
+  return { AGENT_TERMINAL_HOME: testHome };
+}
+
+describe('run command integration', { timeout: 45_000 }, () => {
+  beforeEach(() => {
+    // prettier-ignore
+    testHome = realpathSync(mkdtempSync(join(tmpdir(), 'agent-terminal-run-home-')));
+  });
+
+  afterEach(async () => {
+    destroySession(testHome, sessionId);
+    sessionId = '';
+    await cleanupHome(testHome);
+    testHome = '';
+  });
+
+  it('returns SESSION_NOT_FOUND for missing session', () => {
+    const result = runCli(
+      ['run', 'nonexistent', 'echo hello', '--json'],
+      testEnv(),
+    );
+
+    expect(result.status).toBe(3);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as CommandErrorEnvelope;
+    expect(envelope.ok).toBe(false);
+    expect(envelope.error.code).toBe('SESSION_NOT_FOUND');
+  });
+
+  it('returns immediately with --no-wait', async () => {
+    sessionId = createSession(testHome, ['/bin/bash']);
+    await sleep(500);
+
+    const result = runCli(
+      ['run', sessionId, 'echo hello', '--no-wait', '--json'],
+      testEnv(),
+    );
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      seq: number;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+    expect(envelope.result.seq).toBeTypeOf('number');
+    expect(envelope.result.seq).toBeGreaterThanOrEqual(0);
+    expect(envelope.result).not.toHaveProperty('completed');
+    expect(envelope.result).not.toHaveProperty('timedOut');
+    expect(envelope.result).not.toHaveProperty('durationMs');
+    expect(envelope.result).not.toHaveProperty('marker');
+  });
+
+  it('reads command from --file', async () => {
+    sessionId = createSession(testHome, ['/bin/bash']);
+    await sleep(500);
+
+    const scriptPath = join(testHome, 'test-script.sh');
+    writeFileSync(scriptPath, 'echo from-file');
+
+    const result = runCli(
+      ['run', sessionId, '--file', scriptPath, '--no-wait', '--json'],
+      testEnv(),
+    );
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      seq: number;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+  });
+
+  it('handles multiline command input', async () => {
+    sessionId = createSession(testHome, ['/bin/bash']);
+    await sleep(1000);
+
+    const result = runCli(
+      ['run', sessionId, 'echo line1\necho line2', '--json'],
+      testEnv(),
+      30_000,
+    );
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      completed: boolean;
+      timedOut: boolean;
+      seq: number;
+      durationMs: number;
+      marker: string;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+    expect(envelope.result.completed).toBe(true);
+    expect(envelope.result.timedOut).toBe(false);
+  });
+
+  it('waits for the command to complete before reporting success', async () => {
+    sessionId = createSession(testHome, ['/bin/bash']);
+    await sleep(1000);
+
+    const start = Date.now();
+    const result = runCli(
+      ['run', sessionId, 'sleep 2', '--timeout', '10000', '--json'],
+      testEnv(),
+      15_000,
+    );
+    const elapsed = Date.now() - start;
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      completed: boolean;
+      timedOut: boolean;
+      seq: number;
+      durationMs: number;
+      marker: string;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+    expect(envelope.result.completed).toBe(true);
+    expect(envelope.result.timedOut).toBe(false);
+    expect(elapsed).toBeGreaterThan(1500);
+    expect(envelope.result.durationMs).toBeGreaterThan(1500);
+  });
+
+  it('rejects inline text and --file together', () => {
+    const scriptPath = join(testHome, 'test-input.txt');
+    writeFileSync(scriptPath, 'echo hello');
+
+    const result = runCli(
+      ['run', 'some-session', 'inline-text', '--file', scriptPath, '--json'],
+      testEnv(),
+    );
+
+    expect(result.status).toBe(2);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as CommandErrorEnvelope;
+    expect(envelope.ok).toBe(false);
+    expect(envelope.error.code).toBe('INVALID_INPUT');
+    expect(envelope.error.message).toContain('mutually exclusive');
+  });
+
+  it('records input_run event in the event log', async () => {
+    sessionId = createSession(testHome, ['/bin/bash']);
+    await sleep(500);
+
+    const result = runCli(
+      ['run', sessionId, 'echo event-test', '--no-wait', '--json'],
+      testEnv(),
+    );
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    await sleep(200);
+
+    const events = await readEvents(testHome, sessionId);
+    const inputRunEvents = events.filter((event) => event.type === 'input_run');
+    expect(inputRunEvents.length).toBeGreaterThanOrEqual(1);
+
+    const event = inputRunEvents[inputRunEvents.length - 1];
+    expect(event?.payload).toMatchObject({
+      command: 'echo event-test',
+      noWait: true,
+    });
+  });
+
+  it('returns timedOut when marker is not found within timeout', async () => {
+    // Disable terminal echo so the injected marker does not appear in visible output.
+    sessionId = createSession(testHome, [
+      '/bin/sh',
+      '-c',
+      'stty -echo; exec sleep 60',
+    ]);
+    await sleep(500);
+
+    const result = runCli(
+      ['run', sessionId, 'echo delayed', '--timeout', '2000', '--json'],
+      testEnv(),
+      30_000,
+    );
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      completed: boolean;
+      timedOut: boolean;
+      seq: number;
+      durationMs: number;
+      marker: string;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+    expect(envelope.result.timedOut).toBe(true);
+    expect(envelope.result.completed).toBe(false);
+    expect(envelope.result.durationMs).toBeGreaterThanOrEqual(1500);
+    expect(envelope.result.marker).toMatch(/^__AT_MARKER_/);
+  });
+
+  it('detects session exit during wait before timing out', async () => {
+    sessionId = createSession(testHome, [
+      '/bin/sh',
+      '-c',
+      'stty -echo; exec sleep 2',
+    ]);
+    await sleep(500);
+
+    const result = runCli(
+      ['run', sessionId, 'echo never-runs', '--timeout', '10000', '--json'],
+      testEnv(),
+      30_000,
+    );
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      completed: boolean;
+      timedOut: boolean;
+      seq: number;
+      durationMs: number;
+      marker: string;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+    expect(envelope.result.completed).toBe(false);
+    expect(envelope.result.timedOut).toBe(false);
+    expect(envelope.result.durationMs).toBeLessThan(10_000);
+  });
+
+  it('completes when marker is found in rendered output', async () => {
+    sessionId = createSession(testHome, ['/bin/bash']);
+    await sleep(1000);
+
+    const result = runCli(
+      ['run', sessionId, 'echo hello', '--timeout', '15000', '--json'],
+      testEnv(),
+      30_000,
+    );
+
+    expect(result.status).toBe(0);
+    expect(result.stderr).toBe('');
+
+    const envelope = JSON.parse(result.stdout) as SuccessEnvelope<{
+      accepted: true;
+      completed: boolean;
+      timedOut: boolean;
+      seq: number;
+      durationMs: number;
+      marker: string;
+    }>;
+    expect(envelope.ok).toBe(true);
+    expect(envelope.result.accepted).toBe(true);
+    expect(envelope.result.completed).toBe(true);
+    expect(envelope.result.timedOut).toBe(false);
+    expect(envelope.result.durationMs).toBeTypeOf('number');
+    expect(envelope.result.marker).toMatch(/^__AT_MARKER_/);
+  });
+});
diff --git a/test/unit/commands/doctor.test.ts b/test/unit/commands/doctor.test.ts
index 3158e4c..8a373d1 100644
--- a/test/unit/commands/doctor.test.ts
+++ b/test/unit/commands/doctor.test.ts
@@ -1,4 +1,4 @@
-import { mkdtemp, realpath, rm } from 'node:fs/promises';
+import { mkdir, mkdtemp, realpath, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 
@@ -7,9 +7,11 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 import {
   buildDoctorLines,
   runArtifactAtomicityCheck,
+  runBrowserCacheAccessibleCheck,
   runDoctorCheck,
   runDoctorChecks,
   runEventLogWritabilityCheck,
+  runHomeIsolationCheck,
   runHomeWritableCheck,
   runPtySpawnCheck,
   runSocketViabilityCheck,
@@ -19,6 +21,7 @@ import {
 const QUICK_TIMEOUT_MS = 5_000;
 
 const NEW_DOCTOR_CHECKS = [
+  { name: 'home_isolation', run: () => runHomeIsolationCheck() },
   { name: 'home-writable', run: () => runHomeWritableCheck() },
   { name: 'pty-spawn', run: () => runPtySpawnCheck() },
   { name: 'socket-viable', run: () => runSocketViabilityCheck() },
@@ -89,9 +92,13 @@ const BROKEN_DOCTOR_CHECKS = [
 ] as const;
 
 let testHome = '';
+let originalHome: string | undefined;
+let originalPlaywrightBrowsersPath: string | undefined;
 
 describe('doctor command', () => {
   beforeEach(async () => {
+    originalHome = process.env.HOME;
+    originalPlaywrightBrowsersPath = process.env.PLAYWRIGHT_BROWSERS_PATH;
     // prettier-ignore
     testHome = await realpath(await mkdtemp(join(tmpdir(), 'agent-terminal-doctor-home-')));
     process.env.AGENT_TERMINAL_HOME = testHome;
@@ -99,6 +106,16 @@ describe('doctor command', () => {
 
   afterEach(async () => {
     delete process.env.AGENT_TERMINAL_HOME;
+    if (originalHome === undefined) {
+      delete process.env.HOME;
+    } else {
+      process.env.HOME = originalHome;
+    }
+    if (originalPlaywrightBrowsersPath === undefined) {
+      delete process.env.PLAYWRIGHT_BROWSERS_PATH;
+    } else {
+      process.env.PLAYWRIGHT_BROWSERS_PATH = originalPlaywrightBrowsersPath;
+    }
     await rm(testHome, { recursive: true, force: true });
     testHome = '';
   });
@@ -109,8 +126,8 @@ describe('doctor command', () => {
     const checkNames = allChecks.map((check) => check.name);
 
     expect(result.ok).toBe(true);
-    expect(result.checks.environment.length).toBeGreaterThan(0);
-    expect(result.checks.renderer.length).toBeGreaterThan(0);
+    expect(result.checks.environment).toHaveLength(9);
+    expect(result.checks.renderer).toHaveLength(5);
     expect(result.capabilities).toHaveLength(5);
     expect(result.capabilities.map((capability) => capability.name)).toEqual([
       'snapshot',
@@ -136,11 +153,13 @@ describe('doctor command', () => {
     });
     expect(checkNames).toEqual(
       expect.arrayContaining([
+        'home_isolation',
         'home-writable',
         'pty-spawn',
         'socket-viable',
         'artifact-atomicity',
         'event-log-writable',
+        'browser_cache_accessible',
       ]),
     );
     expect(new Set(checkNames).size).toBe(checkNames.length);
@@ -163,6 +182,154 @@ describe('doctor command', () => {
     },
   );
 
+  it('reports the default location when AGENT_TERMINAL_HOME is not explicitly set', () => {
+    delete process.env.AGENT_TERMINAL_HOME;
+
+    expect(runHomeIsolationCheck()).toBe(
+      'Agent-terminal home uses default location',
+    );
+  });
+
+  it('reports an explicit system home location when AGENT_TERMINAL_HOME matches HOME', () => {
+    process.env.HOME = testHome;
+    process.env.AGENT_TERMINAL_HOME = testHome;
+
+    expect(runHomeIsolationCheck()).toBe(
+      'Agent-terminal home is explicitly set to system home location',
+    );
+  });
+
+  it('reports an isolated agent-terminal home when AGENT_TERMINAL_HOME differs from HOME', async () => {
+    const systemHome = await realpath(
+      await mkdtemp(join(tmpdir(), 'agent-terminal-system-home-')),
+    );
+    process.env.HOME = systemHome;
+    process.env.AGENT_TERMINAL_HOME = testHome;
+
+    try {
+      expect(runHomeIsolationCheck()).toBe(
+        `Agent-terminal home is isolated from system home: ${testHome}`,
+      );
+    } finally {
+      await rm(systemHome, { recursive: true, force: true });
+    }
+  });
+
+  it('passes browser_cache_accessible when PLAYWRIGHT_BROWSERS_PATH contains browser directories', async () => {
+    const browserCachePath = await realpath(
+      await mkdtemp(join(tmpdir(), 'agent-terminal-browser-cache-')),
+    );
+    process.env.PLAYWRIGHT_BROWSERS_PATH = browserCachePath;
+    await mkdir(join(browserCachePath, 'chromium-1234'));
+
+    try {
+      const result = await runDoctorCheck(
+        'browser_cache_accessible',
+        (priorChecks) => runBrowserCacheAccessibleCheck(priorChecks),
+        QUICK_TIMEOUT_MS,
+        [
+          {
+            name: 'playwright_available',
+            status: 'pass',
+            message: 'available',
+            durationMs: 1,
+          },
+        ],
+      );
+
+      expect(result).toMatchObject({
+        name: 'browser_cache_accessible',
+        status: 'pass',
+        message: `browser cache accessible: ${browserCachePath}`,
+      });
+    } finally {
+      await rm(browserCachePath, { recursive: true, force: true });
+    }
+  });
+
+  it('fails browser_cache_accessible with an actionable message when the cache is missing', async () => {
+    const missingCachePath = join(testHome, 'missing-browser-cache');
+    process.env.PLAYWRIGHT_BROWSERS_PATH = missingCachePath;
+
+    const result = await runDoctorCheck(
+      'browser_cache_accessible',
+      (priorChecks) => runBrowserCacheAccessibleCheck(priorChecks),
+      QUICK_TIMEOUT_MS,
+      [
+        {
+          name: 'playwright_available',
+          status: 'pass',
+          message: 'available',
+          durationMs: 1,
+        },
+      ],
+    );
+
+    expect(result).toMatchObject({
+      name: 'browser_cache_accessible',
+      status: 'fail',
+      message:
+        `Playwright browser cache not found at ${missingCachePath}. ` +
+        "Run 'npx playwright install chromium' to install.",
+    });
+  });
+
+  it('uses the HOME-based default Playwright cache path when no override is set', async () => {
+    const systemHome = await realpath(
+      await mkdtemp(join(tmpdir(), 'agent-terminal-system-home-')),
+    );
+    const browserCachePath = join(systemHome, '.cache', 'ms-playwright');
+    delete process.env.PLAYWRIGHT_BROWSERS_PATH;
+    process.env.HOME = systemHome;
+    await mkdir(join(browserCachePath, 'chromium-1234'), { recursive: true });
+
+    try {
+      const result = await runDoctorCheck(
+        'browser_cache_accessible',
+        (priorChecks) => runBrowserCacheAccessibleCheck(priorChecks),
+        QUICK_TIMEOUT_MS,
+        [
+          {
+            name: 'playwright_available',
+            status: 'pass',
+            message: 'available',
+            durationMs: 1,
+          },
+        ],
+      );
+
+      expect(result).toMatchObject({
+        name: 'browser_cache_accessible',
+        status: 'pass',
+        message: `browser cache accessible: ${browserCachePath}`,
+      });
+    } finally {
+      await rm(systemHome, { recursive: true, force: true });
+    }
+  });
+
+  it('skips browser_cache_accessible when playwright is unavailable', async () => {
+    const result = await runDoctorCheck(
+      'browser_cache_accessible',
+      (priorChecks) => runBrowserCacheAccessibleCheck(priorChecks),
+      QUICK_TIMEOUT_MS,
+      [
+        {
+          name: 'playwright_available',
+          status: 'fail',
+          message: 'playwright missing',
+          durationMs: 1,
+        },
+      ],
+    );
+
+    expect(result).toMatchObject({
+      name: 'browser_cache_accessible',
+      status: 'skip',
+      message: 'playwright unavailable; browser cache check not attempted',
+    });
+  });
+
   it('kills the PTY when the outer doctor timeout expires', async () => {
     let onExitHandler:
       | ((event: { exitCode: number; signal?: number }) => void)
diff --git a/test/unit/commands/golden-envelopes.test.ts b/test/unit/commands/golden-envelopes.test.ts
index 67a48ca..83f697e 100644
--- a/test/unit/commands/golden-envelopes.test.ts
+++ b/test/unit/commands/golden-envelopes.test.ts
@@ -12,6 +12,7 @@ import {
   DestroyResultSchema,
   InspectResultSchema,
   RecordExportResultSchema,
+  RunResultSchema,
   ScreenshotResultSchema,
   SendKeysResultSchema,
   SnapshotResultSchema,
@@ -82,6 +83,24 @@ const ListResultSchema = z
   .strict();
 
 const DoctorCheckStatusSchema = z.enum(['pass', 'fail', 'skip']);
+const EnvironmentDoctorCheckNameSchema = z.enum([
+  'node-runtime',
+  'cwd-access',
+  'temp-dir',
+  'home_isolation',
+  'home-writable',
+  'pty-spawn',
+  'socket-viable',
+  'artifact-atomicity',
+  'event-log-writable',
+]);
+const RendererDoctorCheckNameSchema = z.enum([
+  'playwright_available',
+  'browser_cache_accessible',
+  'browser_launch',
+  'ghostty_web_available',
+  'screenshot_viable',
+]);
 
 const DoctorCheckSchema = z
   .object({
@@ -92,13 +111,24 @@ const DoctorCheckSchema = z
   })
   .strict();
 
+const EnvironmentDoctorCheckSchema = DoctorCheckSchema.extend({
+  name: EnvironmentDoctorCheckNameSchema,
+});
+const RendererDoctorCheckSchema = DoctorCheckSchema.extend({
+  name: RendererDoctorCheckNameSchema,
+});
+
 const DoctorResultSchema = z
   .object({
     ok: z.boolean(),
     checks: z
       .object({
-        environment: z.array(DoctorCheckSchema),
-        renderer: z.array(DoctorCheckSchema),
+        environment: z
+          .array(EnvironmentDoctorCheckSchema)
+          .length(EnvironmentDoctorCheckNameSchema.options.length),
+        renderer: z
+          .array(RendererDoctorCheckSchema)
+          .length(RendererDoctorCheckNameSchema.options.length),
       })
       .strict(),
     capabilities: z.array(CapabilityEntrySchema),
@@ -237,6 +267,54 @@ const goldenResultContracts: readonly GoldenResultContractCase[] = [
             message: 'ok',
             durationMs: 1,
           },
+          {
+            name: 'cwd-access',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'temp-dir',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'home_isolation',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'home-writable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'pty-spawn',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'socket-viable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'artifact-atomicity',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'event-log-writable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
         ],
         renderer: [
           {
@@ -245,6 +323,30 @@ const goldenResultContracts: readonly GoldenResultContractCase[] = [
             message: 'ok',
             durationMs: 2,
           },
+          {
+            name: 'browser_cache_accessible',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'browser_launch',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'ghostty_web_available',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'screenshot_viable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
         ],
       },
       capabilities: [
@@ -264,8 +366,87 @@ const goldenResultContracts: readonly GoldenResultContractCase[] = [
             message: 'ok',
             durationMs: -1,
           },
+          {
+            name: 'cwd-access',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'temp-dir',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'home_isolation',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'home-writable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'pty-spawn',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'socket-viable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'artifact-atomicity',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'event-log-writable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+        ],
+        renderer: [
+          {
+            name: 'playwright_available',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'browser_cache_accessible',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'browser_launch',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'ghostty_web_available',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'screenshot_viable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
         ],
-        renderer: [],
       },
       capabilities: [],
     },
@@ -280,8 +461,87 @@ const goldenResultContracts: readonly GoldenResultContractCase[] = [
             durationMs: 1,
             ok: true,
           },
+          {
+            name: 'cwd-access',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'temp-dir',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'home_isolation',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'home-writable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'pty-spawn',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'socket-viable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'artifact-atomicity',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+          {
+            name: 'event-log-writable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 1,
+          },
+        ],
+        renderer: [
+          {
+            name: 'playwright_available',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'browser_cache_accessible',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'browser_launch',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'ghostty_web_available',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
+          {
+            name: 'screenshot_viable',
+            status: 'pass',
+            message: 'ok',
+            durationMs: 2,
+          },
         ],
-        renderer: [],
       },
       capabilities: [],
     },
@@ -343,6 +603,32 @@ const goldenResultContracts: readonly GoldenResultContractCase[] = [
       wouldRemoveSessions: [],
     },
   },
+  {
+    name: 'run',
+    command: 'run',
+    schema: RunResultSchema,
+    validResult: {
+      accepted: true,
+      completed: true,
+      timedOut: false,
+      seq: 42,
+      durationMs: 1500,
+      marker: '__AT_MARKER_abc123__',
+    },
+    invalidResult: {
+      accepted: false,
+      seq: -1,
+    },
+    extraFieldResult: {
+      accepted: true,
+      completed: true,
+      timedOut: false,
+      seq: 42,
+      durationMs: 1500,
+      marker: '__AT_MARKER_abc123__',
+      exitCode: 0,
+    },
+  },
   {
     name: 'send-keys',
     command: 'send-keys',
diff --git a/test/unit/commands/run.test.ts b/test/unit/commands/run.test.ts
new file mode 100644
index 0000000..776da96
--- /dev/null
+++ b/test/unit/commands/run.test.ts
@@ -0,0 +1,266 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+const mocks = vi.hoisted(() => ({
+  emitSuccess: vi.fn(),
+  sendRpc: vi.fn(),
+  readManifestIfExists: vi.fn(),
+  sessionDir: vi.fn(),
+  manifestPath: vi.fn(),
+  socketPath: vi.fn(),
+  resolveCommandInputText: vi.fn(),
+}));
+
+vi.mock('../../../src/cli/output.js', () => ({
+  emitSuccess: mocks.emitSuccess,
+}));
+
+vi.mock('../../../src/host/rpcClient.js', () => ({
+  sendRpc: mocks.sendRpc,
+}));
+
+vi.mock('../../../src/storage/manifests.js', () => ({
+  readManifestIfExists: mocks.readManifestIfExists,
+}));
+
+vi.mock('../../../src/storage/sessionPaths.js', () => ({
+  sessionDir: mocks.sessionDir,
+  manifestPath: mocks.manifestPath,
+  socketPath: mocks.socketPath,
+}));
+
+vi.mock('../../../src/cli/commands/inputSource.js', () => ({
+  resolveCommandInputText: mocks.resolveCommandInputText,
+}));
+
+import { runRunCommand } from '../../../src/cli/commands/run.js';
+import { ERROR_CODES } from '../../../src/protocol/errors.js';
+import { createLogger } from '../../../src/util/logger.js';
+
+const TEST_CONTEXT = {
+  home: '/tmp/agent-terminal',
+  timeoutMs: undefined,
+  colorEnabled: true,
+  logLevel: 'info',
+  logger: createLogger('info', () => undefined),
+  profileDefault: undefined,
+  configFile: null,
+} as const;
+
+function createSessionRecord(
+  status: 'running' | 'exited' | 'destroyed' = 'running',
+) {
+  return {
+    version: 1,
+    sessionId: 'session-01',
+    createdAt: '2026-03-19T12:00:00.000Z',
+    updatedAt: '2026-03-19T12:00:01.000Z',
+    status,
+    command: ['/bin/sh'],
+    cwd: '/tmp/workspace',
+    cols: 80,
+    rows: 24,
+    hostPid: status === 'running' ? 123 : null,
+    childPid: status === 'running' ? 456 : null,
+    exitCode: status === 'exited' ? 0 : null,
+    exitSignal: null,
+  };
+}
+
+type RunCommandOptions = Parameters<typeof runRunCommand>[0];
+
+function createOptions(
+  overrides: Partial<RunCommandOptions> = {},
+): RunCommandOptions {
+  return {
+    context: TEST_CONTEXT,
+    json: false,
+    sessionId: 'session-01',
+    text: 'echo hello',
+    timeout: 30_000,
+    wait: true,
+    ...overrides,
+  };
+}
+
+describe('run command', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mocks.sessionDir.mockImplementation(
+      (_home: string, sessionId: string) =>
+        `/tmp/agent-terminal/sessions/${sessionId}`,
+    );
+    mocks.manifestPath.mockImplementation(
+      (sessionDirectory: string) => `${sessionDirectory}/session.json`,
+    );
+    mocks.socketPath.mockImplementation(
+      (sessionDirectory: string) => `${sessionDirectory}/rpc.sock`,
+    );
+    mocks.readManifestIfExists.mockResolvedValue(
+      createSessionRecord('running'),
+    );
+    mocks.resolveCommandInputText.mockResolvedValue('echo hello');
+    mocks.sendRpc.mockResolvedValue({
+      accepted: true,
+      completed: true,
+      timedOut: false,
+      seq: 42,
+      durationMs: 500,
+      marker: 'test-marker',
+    });
+  });
+
+  it('waits for completion by default', async () => {
+    await runRunCommand(createOptions());
+
+    expect(mocks.sendRpc).toHaveBeenCalledWith(
+      '/tmp/agent-terminal/sessions/session-01/rpc.sock',
+      'run',
+      {
+        command: 'echo hello',
+        noWait: false,
+        timeoutMs: 30_000,
+      },
+      40_000,
+    );
+    expect(mocks.emitSuccess).toHaveBeenCalledWith({
+      command: 'run',
+      json: false,
+      result: {
+        accepted: true,
+        completed: true,
+        timedOut: false,
+        seq: 42,
+        durationMs: 500,
+        marker: 'test-marker',
+      },
+      lines: ['Command completed (seq=42, 500ms).'],
+    });
+  });
+
+  it('supports no-wait execution', async () => {
+    mocks.sendRpc.mockResolvedValueOnce({
+      accepted: true,
+      seq: 10,
+    });
+
+    await runRunCommand(createOptions({ wait: false }));
+
+    expect(mocks.sendRpc).toHaveBeenCalledWith(
+      '/tmp/agent-terminal/sessions/session-01/rpc.sock',
+      'run',
+      {
+        command: 'echo hello',
+        noWait: true,
+      },
+      10_000,
+    );
+    expect(mocks.emitSuccess).toHaveBeenCalledWith({
+      command: 'run',
+      json: false,
+      result: {
+        accepted: true,
+        seq: 10,
+      },
+      lines: ['Command injected into session (seq=10).'],
+    });
+  });
+
+  it('uses the provided timeout for wait mode', async () => {
+    await runRunCommand(createOptions({ timeout: 5_000 }));
+
+    expect(mocks.sendRpc).toHaveBeenCalledWith(
+      '/tmp/agent-terminal/sessions/session-01/rpc.sock',
+      'run',
+      {
+        command: 'echo hello',
+        noWait: false,
+        timeoutMs: 5_000,
+      },
+      15_000,
+    );
+  });
+
+  it.each([0, -5])('rejects invalid timeout values (%s)', async (timeout) => {
+    await expect(
+      runRunCommand(createOptions({ timeout })),
+    ).rejects.toMatchObject({
+      name: 'CliError',
+      code: ERROR_CODES.INVALID_INPUT,
+      message: 'Timeout must be a positive integer in milliseconds',
+    });
+    expect(mocks.readManifestIfExists).not.toHaveBeenCalled();
+    expect(mocks.sendRpc).not.toHaveBeenCalled();
+  });
+
+  it('throws SESSION_NOT_FOUND when the session does not exist', async () => {
+    mocks.readManifestIfExists.mockResolvedValueOnce(null);
+
+    await expect(runRunCommand(createOptions())).rejects.toMatchObject({
+      name: 'CliError',
+      code: ERROR_CODES.SESSION_NOT_FOUND,
+      message: 'Session "session-01" was not found.',
+    });
+    expect(mocks.sendRpc).not.toHaveBeenCalled();
+  });
+
+  it('throws SESSION_NOT_RUNNING when the session is not running', async () => {
+    mocks.readManifestIfExists.mockResolvedValueOnce(
+      createSessionRecord('exited'),
+    );
+
+    await expect(runRunCommand(createOptions())).rejects.toMatchObject({
+      name: 'CliError',
+      code: ERROR_CODES.SESSION_NOT_RUNNING,
+      message: 'Session "session-01" is not running.',
+    });
+    expect(mocks.sendRpc).not.toHaveBeenCalled();
+  });
+
+  it('throws SESSION_ALREADY_DESTROYED when the session is destroyed', async () => {
+    mocks.readManifestIfExists.mockResolvedValueOnce(
+      createSessionRecord('destroyed'),
+    );
+
+    await expect(runRunCommand(createOptions())).rejects.toMatchObject({
+      name: 'CliError',
+      code: ERROR_CODES.SESSION_ALREADY_DESTROYED,
+      message: 'Session "session-01" is already destroyed.',
+    });
+    expect(mocks.sendRpc).not.toHaveBeenCalled();
+  });
+
+  it('throws PROTOCOL_ERROR for invalid host responses', async () => {
+    mocks.sendRpc.mockResolvedValueOnce({ invalid: 'data' });
+
+    await expect(runRunCommand(createOptions())).rejects.toMatchObject({
+      name: 'CliError',
+      code: ERROR_CODES.PROTOCOL_ERROR,
+      message: 'Unexpected response shape from the session host.',
+    });
+  });
+
+  it('resolves positional text input for run', async () => {
+    await runRunCommand(createOptions({ text: 'echo hello' }));
+
+    expect(mocks.resolveCommandInputText).toHaveBeenCalledWith({
+      commandName: 'run',
+      text: 'echo hello',
+      file: undefined,
+    });
+  });
+
+  it('resolves file-backed input for run', async () => {
+    await runRunCommand(
+      createOptions({
+        text: undefined,
+        file: '/tmp/script.sh',
+      }),
+    );
+
+    expect(mocks.resolveCommandInputText).toHaveBeenCalledWith({
+      commandName: 'run',
+      text: undefined,
+      file: '/tmp/script.sh',
+    });
+  });
+});
diff --git a/test/unit/protocol/messages.test.ts b/test/unit/protocol/messages.test.ts
index 7140b33..07b1a55 100644
--- a/test/unit/protocol/messages.test.ts
+++ b/test/unit/protocol/messages.test.ts
@@ -812,6 +812,7 @@ describe('RPC message schemas', () => {
       'screenshot',
       'type',
       'paste',
+      'run',
       'mark',
       'sendKeys',
       'resize',
diff --git a/test/unit/renderer/browserPath.test.ts b/test/unit/renderer/browserPath.test.ts
new file mode 100644
index 0000000..f318fd6
--- /dev/null
+++ b/test/unit/renderer/browserPath.test.ts
@@ -0,0 +1,128 @@
+import { mkdtemp, mkdir, realpath, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+import { afterEach, describe, expect, it } from 'vitest';
+
+import {
+  ensurePlaywrightBrowsersPath,
+  resolvePlaywrightBrowsersPath,
+} from '../../../src/renderer/browserPath.js';
+
+const temporaryHomes: string[] = [];
+
+async function createHomeDirectory(prefix: string): Promise<string> {
+  const home = await realpath(await mkdtemp(join(tmpdir(), prefix)));
+  temporaryHomes.push(home);
+  return home;
+}
+
+async function createPlaywrightCacheHome(): Promise<{
+  browserCachePath: string;
+  home: string;
+}> {
+  const home = await createHomeDirectory('agent-terminal-browser-path-');
+  const browserCachePath = join(home, '.cache', 'ms-playwright');
+  await mkdir(join(browserCachePath, 'chromium-1234'), { recursive: true });
+  return { browserCachePath, home };
+}
+
+afterEach(async () => {
+  await Promise.all(
+    temporaryHomes
+      .splice(0)
+      .map((home) => rm(home, { recursive: true, force: true })),
+  );
+});
+
+describe('Playwright browser path resolution', () => {
+  it('prefers an explicit PLAYWRIGHT_BROWSERS_PATH override', () => {
+    const resolution = resolvePlaywrightBrowsersPath({
+      capturedHome: '/ignored-home',
+      env: {
+        PLAYWRIGHT_BROWSERS_PATH: '/custom/playwright-cache',
+      },
+      platform: 'linux',
+    });
+
+    expect(resolution).toEqual({
+      path: '/custom/playwright-cache',
+      source: 'env',
+    });
+  });
+
+  it('resolves the default browser cache from the captured HOME when chromium exists', async () => {
+    const { browserCachePath, home } = await createPlaywrightCacheHome();
+
+    const resolution = resolvePlaywrightBrowsersPath({
+      capturedHome: home,
+      env: {},
+      platform: 'linux',
+    });
+
+    expect(resolution).toEqual({
+      path: browserCachePath,
+      source: 'captured-home',
+    });
+  });
+
+  it('resolves macOS browser cache from captured HOME', async () => {
+    const home = await createHomeDirectory('agent-terminal-browser-path-mac-');
+    const macCachePath = join(home, 'Library', 'Caches', 'ms-playwright');
+    await mkdir(join(macCachePath, 'chromium-1234'), { recursive: true });
+
+    const resolution = resolvePlaywrightBrowsersPath({
+      capturedHome: home,
+      env: {},
+      platform: 'darwin',
+    });
+
+    expect(resolution).toEqual({
+      path: macCachePath,
+      source: 'captured-home',
+    });
+  });
+
+  it('sets PLAYWRIGHT_BROWSERS_PATH when the captured HOME fallback resolves', async () => {
+    const { browserCachePath, home } = await createPlaywrightCacheHome();
+    const env: NodeJS.ProcessEnv = {};
+
+    const resolution = ensurePlaywrightBrowsersPath({
+      capturedHome: home,
+      env,
+      platform: 'linux',
+    });
+
+    expect(resolution).toEqual({
+      path: browserCachePath,
+      source: 'captured-home',
+    });
+    expect(env.PLAYWRIGHT_BROWSERS_PATH).toBe(browserCachePath);
+  });
+
+  it('returns null for unsupported platforms', () => {
+    const resolution = resolvePlaywrightBrowsersPath({
+      capturedHome: '/home/user',
+      env: {},
+      platform: 'win32',
+    });
+
+    expect(resolution).toBeNull();
+  });
+
+  it('returns null without crashing when no browser cache is present', async () => {
+    const home = await createHomeDirectory(
+      'agent-terminal-browser-path-empty-',
+    );
+    const env: NodeJS.ProcessEnv = {};
+
+    const resolution = ensurePlaywrightBrowsersPath({
+      capturedHome: home,
+      env,
+      platform: 'linux',
+    });
+
+    expect(resolution).toBeNull();
+    expect(env.PLAYWRIGHT_BROWSERS_PATH).toBeUndefined();
+  });
+});