refactor(isolation): simplify agent session isolation and remove legacy home-isolation helpers

.agents/skills/multi-agent-mux-resume/scripts/resume_session.sh

@@ -9,7 +9,7 @@ usage() {
 Usage: $0 --workspace <path> --agent <claude|agy|hermes|cline> --session <name> [--dry-run]
 
 Options:
-  --dry-run   Simulates resume flow (resolves binary, environment, isolation) without writing
+  --dry-run   Simulates resume flow (resolves binary, environment) without writing
               any updates to YAML or DB. Safe to execute inside active write transactions.
 EOF
 }
@@ -60,45 +60,6 @@ if herdr has-session -t "$SESSION_NAME" 2>/dev/null; then
   exit 0
 fi
 
-# 3. Resolve isolation settings for this session
-ISO_ROOT=""
-ISO_ENV=""
-ISO_ARGS=""
-
-ISO_DATA=$(env_python "$AGENT_SESSIONS_YAML" SESSION_NAME="$SESSION_NAME" <<'PYEOF'
-import os, json, yaml, sqlite3
-name = os.environ['SESSION_NAME']
-yaml_path = os.environ['YAML_PATH']
-db_path = os.path.splitext(yaml_path)[0] + '.db'
-d = {}
-try:
-    if os.path.exists(db_path):
-        conn = sqlite3.connect(db_path, timeout=60.0)
-        row = conn.execute('SELECT data FROM sessions WHERE name=?', (name,)).fetchone()
-        if row:
-            s = json.loads(row[0])
-            print(json.dumps(s.get('isolation') or {}))
-            raise SystemExit(0)
-    elif os.path.exists(yaml_path):
-        with open(yaml_path) as f:
-            d = yaml.safe_load(f) or {}
-except Exception:
-    pass
-for s in d.get('herdr_sessions', []):
-    if s.get('name') == name:
-        print(json.dumps(s.get('isolation') or {}))
-        raise SystemExit(0)
-print("{}")
-PYEOF
-)
-
-ISO_ROOT=$(printf '%s' "$ISO_DATA" | python3 -c 'import sys,json; print(json.load(sys.stdin).get("root",""))')
-if [ -n "$ISO_ROOT" ]; then
-  ISO_ENV="$(isolation_env_prefix "$AGENT" "$ISO_ROOT")"
-  ISO_ARGS="$(isolation_cmd_args "$AGENT" "$ISO_ROOT")"
-  echo "Re-applying isolation: root=$ISO_ROOT env=$ISO_ENV args=$ISO_ARGS"
-fi
-
 # Resolve absolute path of the agent command to prevent herdr PATH inheritance issues (especially on macOS)
 RESOLVED_BIN="$AGENT"
 if [ "$AGENT" = "cline" ]; then
@@ -116,7 +77,7 @@ if [ "$(uname)" = "Darwin" ] && [ -f "$RESOLVED_BIN" ]; then
   xattr -d com.apple.quarantine "$RESOLVED_BIN" 2>/dev/null || true
 fi
 
-# Determine CMD_FULL with isolation applied
+# Determine CMD_FULL
 case "$AGENT" in
   claude) CMD_FULL="${RESOLVED_BIN} --dangerously-skip-permissions -r $UUID" ;;
   agy)    CMD_FULL="${RESOLVED_BIN} --dangerously-skip-permissions --conversation $UUID" ;;
@@ -125,20 +86,6 @@ case "$AGENT" in
   *)      echo "ERROR: unsupported agent: $AGENT" >&2; exit 2 ;;
 esac
 
-# Prepend env prefix and append command args (T4)
-if [ -n "$ISO_ENV" ]; then
-  CMD_FULL="$ISO_ENV $CMD_FULL"
-fi
-if [ -n "$ISO_ARGS" ]; then
-  CMD_FULL="$CMD_FULL $ISO_ARGS"
-fi
-
-# Validate isolation root if it was configured
-if [ -n "$ISO_ROOT" ] && [ ! -d "$ISO_ROOT" ]; then
-  echo "ERROR: Isolation root directory does not exist: $ISO_ROOT" >&2
-  exit 1
-fi
-
 # Validate binary exists and is executable
 if [ -f "$RESOLVED_BIN" ] || [[ "$RESOLVED_BIN" == /* ]] || [[ "$RESOLVED_BIN" == ~/* ]]; then
   if [ ! -x "$RESOLVED_BIN" ]; then