Add bun install and fix Cline launch

sandbox/agent

@@ -129,6 +129,10 @@ while IFS= read -r path; do
   case "$path" in "$HOME"/*) mkdir -p "$path" ;; esac
 done < <(jq -rs "$MERGE | .filesystem.allowWrite[]? | strings" "${ours[@]}")
 
+# srt sets TMPDIR to /tmp/claude, which nothing creates, unless told otherwise;
+# temp files then fail, and GTK aborts. /tmp is writable in every profile.
+export CLAUDE_CODE_TMPDIR=/tmp
+
 # Hermes' terminal reaches its gateway, in another sandbox, through a relay
 case "$profile" in
   hermes) exec "$srt" --settings "$settings" -- bash "$SANDBOX/hermes-bridge" "$real" "$@" ;;