@sellable/install 0.1.309 → 0.1.310

package/README.md

@@ -119,6 +119,7 @@ It creates:
 /srv/hermes/profiles/acme/sellable/config.json
 /srv/hermes/profiles/acme/sellable/configs/
 /srv/hermes/profiles/acme/skills/sellable/
+/srv/hermes/bin/entrypoint-acme.sh
 /srv/hermes/profiles/acme/.env        # only when Slack token inputs are supplied
 ```
 
@@ -129,6 +130,19 @@ For profile paths under a gateway root such as
 Hermes Desktop command autocomplete scans the gateway/root skill config, not
 only the selected profile's local skill tree.
 
+Bootstrap also writes `/srv/hermes/bin/entrypoint-acme.sh`. Point the Hermes
+Docker service at that script when this profile should be the Desktop/dashboard
+default:
+
+```yaml
+entrypoint: ["/opt/data/bin/entrypoint-acme.sh"]
+```
+
+The wrapper starts `hermes gateway run` when needed, then intentionally runs
+`hermes -p acme dashboard --isolated`. Without `--isolated`, Hermes OS chat can
+see `/sellable-*` commands while Hermes Desktop autocomplete misses them because
+the dashboard backend is not scoped to the selected profile.
+
 If no token is supplied, bootstrap still creates a pending
 `sellable/config.json` so the profile path is concrete from the first MCP
 launch. Finish auth with:

package/bin/sellable-install.mjs

@@ -3676,6 +3676,74 @@ function hermesGatewayConfigPath(opts = {}) {
   return join(root, "config.yaml");
 }
 
+function hermesDashboardEntrypointPath(opts = {}, profile = "") {
+  const root = hermesGatewayRoot(opts);
+  if (!root) return null;
+  const safeProfile = String(profile || basenameSafe(hermesHome(opts))).replace(
+    /[^A-Za-z0-9_.-]/g,
+    "_"
+  );
+  return join(root, "bin", `entrypoint-${safeProfile}.sh`);
+}
+
+function hermesDashboardCommand(profile) {
+  return `hermes -p ${profile} dashboard --isolated --host 0.0.0.0 --port 4860 --no-open --skip-build`;
+}
+
+function hermesDashboardEntrypointContent(opts, profile) {
+  const quotedProfile = shellQuote(profile);
+  const quotedProfileRoot = shellQuote(hermesHome(opts));
+  const gatewayRoot = hermesGatewayRoot(opts);
+  const quotedGatewayRoot = shellQuote(gatewayRoot || dirname(hermesHome(opts)));
+  const quotedDashboardLog = shellQuote(join(hermesHome(opts), "logs", "dashboard.log"));
+  return `#!/usr/bin/env bash
+set -euo pipefail
+
+# This file is generated by sellable hermes profile bootstrap.
+# It preserves the Hostinger image startup shape, but launches the dashboard in
+# an isolated Sellable profile. Without --isolated, Hermes OS chat can see
+# profile skills while Desktop slash autocomplete stays on the default profile.
+profile=${quotedProfile}
+profile_root=${quotedProfileRoot}
+gateway_root=${quotedGatewayRoot}
+dashboard_log=${quotedDashboardLog}
+dashboard_port="\${HERMES_DASHBOARD_PORT:-4860}"
+run_as=()
+if command -v gosu >/dev/null 2>&1; then
+  run_as=(gosu hermes)
+fi
+
+chown -R hermes:hermes "$gateway_root" 2>/dev/null || true
+mkdir -p "$gateway_root/logs" "$profile_root/logs"
+chown -R hermes:hermes "$gateway_root/logs" "$profile_root/logs" 2>/dev/null || true
+
+if [[ -f "$gateway_root/config.yaml" ]]; then
+  if ! pgrep -f "hermes gateway run" >/dev/null 2>&1; then
+    "\${run_as[@]}" nohup hermes gateway run >>"$gateway_root/logs/gateway.log" 2>&1 </dev/null &
+  fi
+fi
+
+for v in ADMIN_USERNAME ADMIN_PASSWORD; do
+  if [[ -z "\${!v:-}" ]]; then
+    echo "missing required environment variable $v" >&2
+    exit 1
+  fi
+done
+
+export HERMES_DASHBOARD_BASIC_AUTH_USERNAME="$ADMIN_USERNAME"
+export HERMES_DASHBOARD_BASIC_AUTH_PASSWORD="$ADMIN_PASSWORD"
+
+exec "\${run_as[@]}" hermes -p "$profile" dashboard --isolated --host 0.0.0.0 --port "$dashboard_port" --no-open --skip-build >>"$dashboard_log" 2>&1
+`;
+}
+
+function writeHermesDashboardEntrypoint(opts, profile) {
+  const path = hermesDashboardEntrypointPath(opts, profile);
+  if (!path) return null;
+  writeFile(path, hermesDashboardEntrypointContent(opts, profile), opts, 0o755);
+  return path;
+}
+
 function hermesLikelyInstalled() {
   return (
     Boolean(process.env.HERMES_HOME?.trim()) ||
@@ -4054,6 +4122,7 @@ function runHermesProfileBootstrap(argv) {
         sellableConfigsDir,
         skillsRoot: hermesSkillsRoot(opts),
         gatewayConfigPath: hermesGatewayConfigPath(opts),
+        hermesDashboardEntrypointPath: hermesDashboardEntrypointPath(opts, profile),
       },
       auth: {
         apiUrl: opts.apiUrl,
@@ -4073,6 +4142,12 @@ function runHermesProfileBootstrap(argv) {
             .map(([key, value]) => [key, tokenFingerprint(value)])
         ),
       },
+      dashboard: {
+        command: hermesDashboardCommand(profile),
+        composeEntrypoint: hermesDashboardEntrypointPath(opts, profile)
+          ? `entrypoint: ["${hermesDashboardEntrypointPath(opts, profile)}"]`
+          : null,
+      },
       created: [],
       updated: [],
       preserved: [],
@@ -4140,6 +4215,10 @@ function runHermesProfileBootstrap(argv) {
     const hermesConfigExisted = existsSync(hermesConfigPath(opts));
     const gatewayConfigPath = hermesGatewayConfigPath(opts);
     const gatewayConfigExisted = gatewayConfigPath ? existsSync(gatewayConfigPath) : false;
+    const dashboardEntrypointPath = hermesDashboardEntrypointPath(opts, profile);
+    const dashboardEntrypointExisted = dashboardEntrypointPath
+      ? existsSync(dashboardEntrypointPath)
+      : false;
     const skillsExisted = existsSync(hermesSkillsRoot(opts));
     const authExisted = existsSync(sellableConfigPath);
     const configsDirExisted = existsSync(sellableConfigsDir);
@@ -4178,6 +4257,7 @@ function runHermesProfileBootstrap(argv) {
       mkdirSync(sellableConfigsDir, { recursive: true, mode: 0o700 });
       writeHermesProfileSellableConfig(sellableConfigPath, nextAuth, opts);
       installHermes(opts);
+      writeHermesDashboardEntrypoint(opts, profile);
       if (Object.values(slackTokens).some(Boolean)) {
         for (const [key, value] of Object.entries(slackTokens)) {
           if (value) envState.entries.set(key, value);
@@ -4198,6 +4278,15 @@ function runHermesProfileBootstrap(argv) {
         gatewayConfigPath
       );
     }
+    if (dashboardEntrypointPath) {
+      (dashboardEntrypointExisted ? summary.updated : summary.created).push(
+        dashboardEntrypointPath
+      );
+    } else {
+      summary.skipped.push(
+        "Hermes dashboard entrypoint: profile root is not under a gateway profiles directory"
+      );
+    }
     (skillsExisted ? summary.updated : summary.created).push(hermesSkillsRoot(opts));
     if (Object.values(slackTokens).some(Boolean)) {
       (envExisted ? summary.updated : summary.created).push(envPath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.309",
+  "version": "0.1.310",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {