@@ -41,8 +41,14 @@ if (retirement.status === 'retained') {
 if (retirement.status === 'retired') {
   const { cleanupRunnerLeasesForOwner } =
     await import('@agent-device/platform-apple/runner/operations');
+  const { setAppleRunnerHostEnvironment } =
+    await import('@agent-device/platform-apple/runner-owner');
+  const host = captureHostEnvironment(process);
+  // Runner configuration reads take the runtime's host (#3794); this script is the whole
+  // process here, so it seeds the runner state with the same host it enters as a command host.
+  setAppleRunnerHostEnvironment(host);
   await withCommandHost(
-    { host: captureHostEnvironment(process), requestEnv: undefined },
+    { host, requestEnv: undefined },
     async () => await cleanupRunnerLeasesForOwner(retirement.termination.identity),
   );
 }
 
@@ -73,6 +73,11 @@ async function writeXcuitestCacheMetadata(
 if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
   try {
     const host = captureHostEnvironment(process);
+    // Runner configuration reads take the runtime's host (#3794); this script is the whole
+    // process here, so it seeds the runner state with the same host it enters as a command host.
+    const { setAppleRunnerHostEnvironment } =
+      await import('@agent-device/platform-apple/runner-owner');
+    setAppleRunnerHostEnvironment(host);
     await withCommandHost(
       { host, requestEnv: undefined },
       async () => await writeXcuitestCacheMetadata(process.argv.slice(2), host.cwd),
 
@@ -46,6 +46,7 @@ async function runArgv(argv: string[]): Promise<SeenRequest[]> {
       client,
       command: argv[0] as CommandName,
       positionals: parsed.positionals,
+      env: process.env,
       flags: parsed.flags,
     });
   } catch {
 
@@ -266,7 +266,9 @@ test('post-action observation CLI output formatters follow descriptor traits', a
   for (const [command, format] of Object.entries(formatters)) {
     let text: string;
     try {
-      text = String((await format({ input: {}, result: settledResult })).text ?? '');
+      text = String(
+        (await format({ env: process.env, input: {}, result: settledResult })).text ?? '',
+      );
     } catch {
       // Formatters expecting a differently-shaped result (device lists) are
       // orthogonal to settle rendering — but a settle-capable formatter must
 
@@ -12,8 +12,14 @@ vi.mock('@agent-device/platform-android/mechanics', async (importOriginal) => {
   };
 });
 
-import { ANDROID_EMULATOR, IOS_SIMULATOR } from '@agent-device/test-kit';
-import { platformResourceCleanup } from '../../platform-runtime-resource-cleanup.ts';
+import {
+  ANDROID_EMULATOR,
+  IOS_SIMULATOR,
+  createLiveTestHostEnvironment,
+} from '@agent-device/test-kit';
+import { createPlatformResourceCleanup } from '../../platform-runtime-resource-cleanup.ts';
+
+const platformResourceCleanup = createPlatformResourceCleanup(createLiveTestHostEnvironment());
 
 beforeEach(() => {
   vi.clearAllMocks();
 
@@ -2,6 +2,7 @@ import { type ClaimRecoveryGatewayFactory } from '@agent-device/daemon-contracts
 import { createDaemonPlatformServices } from '../../platform-runtime-daemon-services.ts';
 import { createClaimRecoveryGatewayFor } from '../../platform-runtime-claim-recovery.ts';
 import type { DaemonPlatformServices } from '@agent-device/daemon';
+import { createLiveTestHostEnvironment } from '@agent-device/test-kit';
 
 /**
  * The port the production composition root builds, handed to a test the same way the shared router
@@ -22,5 +23,5 @@ export function composedPlatformServicesFixture(
  * passes its own factory.
  */
 export function composedClaimRecoveryGatewayFixture(): ClaimRecoveryGatewayFactory {
-  return createClaimRecoveryGatewayFor(process.env);
+  return createClaimRecoveryGatewayFor(createLiveTestHostEnvironment());
 }
@@ -19,7 +19,7 @@ vi.mock('@agent-device/platform-apple/runner/operations', async (importOriginal)
 // loses the mock this way starts the real local XCTest runner — whose stale-process cleanup
 // `pkill`s xcodebuild on the developer's host, failing whichever test is running when it lands.
 test('concurrent runner ports share one module resolution, so the mock always applies', async () => {
-  const tools = createAppleApplicationTools();
+  const tools = createAppleApplicationTools(process.env);
 
   await Promise.all([
     tools.detachRunnerSessionsForShutdown(),
 
@@ -10,7 +10,11 @@ import { createDurableResourceEnvelope } from '@agent-device/capture-kit';
 import { localRuntimeOwner } from '@agent-device/contracts/platform-runtime';
 import { runStaleDeviceClaimRelease } from '../platform-runtime-claim-recovery.ts';
 import { runCliCapture } from './cli-capture.ts';
-import { mkdtempForTestSync, pinOwnProcessStartTime } from '@agent-device/test-kit';
+import {
+  createLiveTestHostEnvironment,
+  mkdtempForTestSync,
+  pinOwnProcessStartTime,
+} from '@agent-device/test-kit';
 
 pinOwnProcessStartTime(hostProcess);
 
@@ -283,16 +287,20 @@ test('recovery is composed per claim from the stale owner state dir, never the c
     process.env.AGENT_DEVICE_CLAIMS_DIR = claimsDir;
 
     const composedFor: string[] = [];
-    const outcomes = await runStaleDeviceClaimRelease({}, process.env, (stateDir) => {
-      composedFor.push(stateDir);
-      return {
-        reconcile: async (claim) => {
-          assert.equal(claim.stateDir, stateDir);
-          return { status: 'reconciled' };
-        },
-        dispose: async () => {},
-      };
-    });
+    const outcomes = await runStaleDeviceClaimRelease(
+      {},
+      createLiveTestHostEnvironment(),
+      (stateDir) => {
+        composedFor.push(stateDir);
+        return {
+          reconcile: async (claim) => {
+            assert.equal(claim.stateDir, stateDir);
+            return { status: 'reconciled' };
+          },
+          dispose: async () => {},
+        };
+      },
+    );
 
     assert.deepEqual([...composedFor].sort(), [ownerDirA, ownerDirB].sort());
     assert.equal(outcomes.filter((outcome) => outcome.status === 'released').length, 2);
 
@@ -486,7 +486,10 @@ export function createAgentDeviceClient(
       symbols: async (options) => {
         const { symbolicateCrashArtifact } =
           await import('@agent-device/platform-apple/debug-symbols');
-        return symbolicateCrashArtifact({ cwd: options.cwd ?? config.cwd, ...options });
+        return symbolicateCrashArtifact({
+          ...options,
+          cwd: options.cwd ?? config.cwd ?? host.cwd,
+        });
       },
     },
     recording: {
 
@@ -190,6 +190,7 @@ async function runCliOnHost(argv: string[], deps: CliDeps, host: HostEnvironment
             await runWebCommand(positionals, {
               flags: ctx.effectiveFlags,
               stateDir: ctx.daemonPaths.baseDir,
+              host,
             }),
           );
           return;