@sellable/install 0.1.308 → 0.1.310

package/README.md

@@ -119,9 +119,30 @@ It creates:
 /srv/hermes/profiles/acme/sellable/config.json
 /srv/hermes/profiles/acme/sellable/configs/
 /srv/hermes/profiles/acme/skills/sellable/
+/srv/hermes/bin/entrypoint-acme.sh
 /srv/hermes/profiles/acme/.env        # only when Slack token inputs are supplied
 ```
 
+For profile paths under a gateway root such as
+`/srv/hermes/profiles/acme`, bootstrap also registers
+`/srv/hermes/profiles/acme/skills/sellable` in the gateway root
+`/srv/hermes/config.yaml` as `skills.external_dirs`. Keep this behavior:
+Hermes Desktop command autocomplete scans the gateway/root skill config, not
+only the selected profile's local skill tree.
+
+Bootstrap also writes `/srv/hermes/bin/entrypoint-acme.sh`. Point the Hermes
+Docker service at that script when this profile should be the Desktop/dashboard
+default:
+
+```yaml
+entrypoint: ["/opt/data/bin/entrypoint-acme.sh"]
+```
+
+The wrapper starts `hermes gateway run` when needed, then intentionally runs
+`hermes -p acme dashboard --isolated`. Without `--isolated`, Hermes OS chat can
+see `/sellable-*` commands while Hermes Desktop autocomplete misses them because
+the dashboard backend is not scoped to the selected profile.
+
 If no token is supplied, bootstrap still creates a pending
 `sellable/config.json` so the profile path is concrete from the first MCP
 launch. Finish auth with:

package/bin/sellable-install.mjs

@@ -13,7 +13,7 @@ import {
   writeFileSync,
 } from "node:fs";
 import { homedir } from "node:os";
-import { dirname, join, relative, resolve } from "node:path";
+import { basename, dirname, join, relative, resolve } from "node:path";
 import { stdout as output } from "node:process";
 import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
@@ -3663,6 +3663,87 @@ function hermesSkillsRoot(opts = {}) {
   return join(hermesHome(opts), "skills", "sellable");
 }
 
+function hermesGatewayRoot(opts = {}) {
+  const profileRoot = hermesHome(opts);
+  const profilesRoot = dirname(profileRoot);
+  if (basename(profilesRoot) !== "profiles") return null;
+  return dirname(profilesRoot);
+}
+
+function hermesGatewayConfigPath(opts = {}) {
+  const root = hermesGatewayRoot(opts);
+  if (!root) return null;
+  return join(root, "config.yaml");
+}
+
+function hermesDashboardEntrypointPath(opts = {}, profile = "") {
+  const root = hermesGatewayRoot(opts);
+  if (!root) return null;
+  const safeProfile = String(profile || basenameSafe(hermesHome(opts))).replace(
+    /[^A-Za-z0-9_.-]/g,
+    "_"
+  );
+  return join(root, "bin", `entrypoint-${safeProfile}.sh`);
+}
+
+function hermesDashboardCommand(profile) {
+  return `hermes -p ${profile} dashboard --isolated --host 0.0.0.0 --port 4860 --no-open --skip-build`;
+}
+
+function hermesDashboardEntrypointContent(opts, profile) {
+  const quotedProfile = shellQuote(profile);
+  const quotedProfileRoot = shellQuote(hermesHome(opts));
+  const gatewayRoot = hermesGatewayRoot(opts);
+  const quotedGatewayRoot = shellQuote(gatewayRoot || dirname(hermesHome(opts)));
+  const quotedDashboardLog = shellQuote(join(hermesHome(opts), "logs", "dashboard.log"));
+  return `#!/usr/bin/env bash
+set -euo pipefail
+
+# This file is generated by sellable hermes profile bootstrap.
+# It preserves the Hostinger image startup shape, but launches the dashboard in
+# an isolated Sellable profile. Without --isolated, Hermes OS chat can see
+# profile skills while Desktop slash autocomplete stays on the default profile.
+profile=${quotedProfile}
+profile_root=${quotedProfileRoot}
+gateway_root=${quotedGatewayRoot}
+dashboard_log=${quotedDashboardLog}
+dashboard_port="\${HERMES_DASHBOARD_PORT:-4860}"
+run_as=()
+if command -v gosu >/dev/null 2>&1; then
+  run_as=(gosu hermes)
+fi
+
+chown -R hermes:hermes "$gateway_root" 2>/dev/null || true
+mkdir -p "$gateway_root/logs" "$profile_root/logs"
+chown -R hermes:hermes "$gateway_root/logs" "$profile_root/logs" 2>/dev/null || true
+
+if [[ -f "$gateway_root/config.yaml" ]]; then
+  if ! pgrep -f "hermes gateway run" >/dev/null 2>&1; then
+    "\${run_as[@]}" nohup hermes gateway run >>"$gateway_root/logs/gateway.log" 2>&1 </dev/null &
+  fi
+fi
+
+for v in ADMIN_USERNAME ADMIN_PASSWORD; do
+  if [[ -z "\${!v:-}" ]]; then
+    echo "missing required environment variable $v" >&2
+    exit 1
+  fi
+done
+
+export HERMES_DASHBOARD_BASIC_AUTH_USERNAME="$ADMIN_USERNAME"
+export HERMES_DASHBOARD_BASIC_AUTH_PASSWORD="$ADMIN_PASSWORD"
+
+exec "\${run_as[@]}" hermes -p "$profile" dashboard --isolated --host 0.0.0.0 --port "$dashboard_port" --no-open --skip-build >>"$dashboard_log" 2>&1
+`;
+}
+
+function writeHermesDashboardEntrypoint(opts, profile) {
+  const path = hermesDashboardEntrypointPath(opts, profile);
+  if (!path) return null;
+  writeFile(path, hermesDashboardEntrypointContent(opts, profile), opts, 0o755);
+  return path;
+}
+
 function hermesLikelyInstalled() {
   return (
     Boolean(process.env.HERMES_HOME?.trim()) ||
@@ -3742,6 +3823,38 @@ function writeHermesMcpServer(opts) {
   return configPath;
 }
 
+function writeHermesGatewaySkillDirectory(opts) {
+  const configPath = hermesGatewayConfigPath(opts);
+  if (!configPath || configPath === hermesConfigPath(opts)) return null;
+
+  const skillDir = hermesSkillsRoot(opts);
+  const raw = existsSync(configPath) ? readFileSync(configPath, "utf8") : "";
+  const config = parseHermesConfig(raw, configPath);
+  // Hermes Desktop slash autocomplete scans the gateway/root HERMES_HOME. A
+  // profile can execute its own skills without this, but Desktop will not show
+  // /sellable-* commands until the root scanner sees the profile skill dir.
+  const skills =
+    config.skills && typeof config.skills === "object" && !Array.isArray(config.skills)
+      ? config.skills
+      : {};
+  const current = Array.isArray(skills.external_dirs)
+    ? skills.external_dirs
+    : skills.external_dirs
+      ? [skills.external_dirs]
+      : [];
+  const externalDirs = current.includes(skillDir) ? current : [...current, skillDir];
+  const nextConfig = {
+    ...config,
+    skills: {
+      ...skills,
+      external_dirs: externalDirs,
+    },
+  };
+
+  writeHermesConfig(configPath, nextConfig, opts);
+  return { configPath, skillDir };
+}
+
 function installHermesSkills(opts) {
   const root = hermesSkillsRoot(opts);
   for (const skill of hermesSkillDefinitions()) {
@@ -3762,8 +3875,15 @@ function installHermes(opts) {
   try {
     skillsRoot = installHermesSkills(opts);
     const configPath = writeHermesMcpServer(opts);
+    const gateway = writeHermesGatewaySkillDirectory(opts);
     logVerbose(`${C.grey}+ Hermes config updated: ${configPath}${C.reset}`);
-    return { installed: true, configPath, skillsRoot };
+    return {
+      installed: true,
+      configPath,
+      skillsRoot,
+      gatewayConfigPath: gateway?.configPath || null,
+      gatewayExternalSkillsDir: gateway?.skillDir || null,
+    };
   } catch (err) {
     if (skillsRoot && !opts.dryRun) {
       rmSync(skillsRoot, { recursive: true, force: true });
@@ -4001,6 +4121,8 @@ function runHermesProfileBootstrap(argv) {
         sellableConfigPath,
         sellableConfigsDir,
         skillsRoot: hermesSkillsRoot(opts),
+        gatewayConfigPath: hermesGatewayConfigPath(opts),
+        hermesDashboardEntrypointPath: hermesDashboardEntrypointPath(opts, profile),
       },
       auth: {
         apiUrl: opts.apiUrl,
@@ -4020,6 +4142,12 @@ function runHermesProfileBootstrap(argv) {
             .map(([key, value]) => [key, tokenFingerprint(value)])
         ),
       },
+      dashboard: {
+        command: hermesDashboardCommand(profile),
+        composeEntrypoint: hermesDashboardEntrypointPath(opts, profile)
+          ? `entrypoint: ["${hermesDashboardEntrypointPath(opts, profile)}"]`
+          : null,
+      },
       created: [],
       updated: [],
       preserved: [],
@@ -4085,6 +4213,12 @@ function runHermesProfileBootstrap(argv) {
     }
 
     const hermesConfigExisted = existsSync(hermesConfigPath(opts));
+    const gatewayConfigPath = hermesGatewayConfigPath(opts);
+    const gatewayConfigExisted = gatewayConfigPath ? existsSync(gatewayConfigPath) : false;
+    const dashboardEntrypointPath = hermesDashboardEntrypointPath(opts, profile);
+    const dashboardEntrypointExisted = dashboardEntrypointPath
+      ? existsSync(dashboardEntrypointPath)
+      : false;
     const skillsExisted = existsSync(hermesSkillsRoot(opts));
     const authExisted = existsSync(sellableConfigPath);
     const configsDirExisted = existsSync(sellableConfigsDir);
@@ -4123,6 +4257,7 @@ function runHermesProfileBootstrap(argv) {
       mkdirSync(sellableConfigsDir, { recursive: true, mode: 0o700 });
       writeHermesProfileSellableConfig(sellableConfigPath, nextAuth, opts);
       installHermes(opts);
+      writeHermesDashboardEntrypoint(opts, profile);
       if (Object.values(slackTokens).some(Boolean)) {
         for (const [key, value] of Object.entries(slackTokens)) {
           if (value) envState.entries.set(key, value);
@@ -4138,6 +4273,20 @@ function runHermesProfileBootstrap(argv) {
     (hermesConfigExisted ? summary.updated : summary.created).push(
       hermesConfigPath(opts)
     );
+    if (gatewayConfigPath) {
+      (gatewayConfigExisted ? summary.updated : summary.created).push(
+        gatewayConfigPath
+      );
+    }
+    if (dashboardEntrypointPath) {
+      (dashboardEntrypointExisted ? summary.updated : summary.created).push(
+        dashboardEntrypointPath
+      );
+    } else {
+      summary.skipped.push(
+        "Hermes dashboard entrypoint: profile root is not under a gateway profiles directory"
+      );
+    }
     (skillsExisted ? summary.updated : summary.created).push(hermesSkillsRoot(opts));
     if (Object.values(slackTokens).some(Boolean)) {
       (envExisted ? summary.updated : summary.created).push(envPath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.308",
+  "version": "0.1.310",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {