{ pkgs, config, ... }:
{
  imports = [ ./harness-base.nix ];

  systemd.services.hive-ag3nt = {
    description = "hive-ag3nt harness";
    wantedBy = [ "multi-user.target" ];
    after = [ "network.target" ];
    # systemd units get a minimal PATH by default and don't inherit
    # `environment.systemPackages`. Pointing at `/run/current-system/sw`
    # gives the harness (and any tools claude shells out to via Bash)
    # access to everything declared in `systemPackages` — including
    # anything an agent adds to its own `agent.nix` — without having to
    # touch the service definition.
    path = [ "/run/current-system/sw" ];
    environment = {
      SHELL = "${pkgs.bashInteractive}/bin/bash";
      # Path to the merged agent static dist. The harness serves this
      # via `tower_http::ServeDir` for any request it doesn't route to
      # an API endpoint. `mergedDist` is the agent-default dist with
      # `hyperhive.frontend.extraFiles` layered on top — both come
      # from harness-base.nix.
      HIVE_STATIC_DIR = "${config.hyperhive.frontend.mergedDist}";
    };
    serviceConfig = {
      ExecStart = "${pkgs.hyperhive}/bin/hive-ag3nt serve";
      Restart = "on-failure";
      RestartSec = 2;
    };
  };
}