fix(agent): run sandbox commands directly instead of via node's entrypoint

docker/agent-sandbox/Dockerfile

@@ -92,3 +92,11 @@ ENV DISABLE_AUTOUPDATER=1
 # same image — the actual agent container never runs iptables itself and
 # holds no networking capabilities at all.
 WORKDIR /workspace
+
+# The node base image's entrypoint runs any command it can't find as a Node
+# script, so a misspelled agent (`-- claude.`) failed with "Cannot find
+# module '/workspace/claude.'". Every command this image runs is a real
+# executable (the agent, the netns holder's `sleep`, `agent docker shell`'s
+# bash), so run them directly: a typo now fails with Docker's own
+# "executable file not found in $PATH".
+ENTRYPOINT []

src/handlers/run/docker_sandbox.rs

@@ -1568,6 +1568,13 @@ mod tests {
         assert!(SANDBOX_DOCKERFILE.contains("FROM"));
     }
 
+    #[test]
+    fn sandbox_dockerfile_clears_the_node_base_entrypoint() {
+        assert!(SANDBOX_DOCKERFILE
+            .lines()
+            .any(|line| line.trim() == "ENTRYPOINT []"));
+    }
+
     #[test]
     fn agent_image_source_defaults_when_neither_field_is_set() {
         assert_eq!(