@sellable/install 0.1.327 → 0.1.328

package/bin/sellable-install.mjs

@@ -22,6 +22,14 @@ import {
   REQUIRED_SELLABLE_MCP_TOOLS,
   verifySellableMcpRuntime,
 } from "../lib/runtime-verify.mjs";
+import {
+  activateCodexCandidateSelection,
+  installCodexCandidateCache,
+  readCodexPluginSelection,
+  resolveCodexPluginSelectionPaths,
+  restoreCodexPluginSelection,
+  snapshotCodexPluginSelection,
+} from "../lib/codex-plugin-selection.mjs";
 
 const DEFAULT_API_URL = "https://app.sellable.dev";
 const DEFAULT_SERVER_PACKAGE =
@@ -40,7 +48,7 @@ function getInstallVersion() {
   }
 }
 
-const CODEX_PLUGIN_VERSION = "0.1.54";
+const CODEX_PLUGIN_VERSION = "0.1.58";
 const CODEX_PLUGIN_COMPAT_VERSIONS = [
   "0.1.8",
   "0.1.9",
@@ -79,6 +87,8 @@ const CODEX_PLUGIN_COMPAT_VERSIONS = [
   "0.1.51",
   "0.1.52",
   "0.1.53",
+  "0.1.54",
+  "0.1.55",
 ];
 const RAW_INSTALL_PACKAGE_SPEC =
   process.env.SELLABLE_INSTALL_PACKAGE_SPEC || "@sellable/install@latest";
@@ -170,6 +180,8 @@ Commands:
                            Save the ask-first prompt-sharing preference.
   setup claude-permissions --allow-common-setup
                            Add common Sellable Bash permissions to Claude settings.
+  codex plugin-selection snapshot|install-cache|activate|restore|status
+                           Approval-gated Phase 98 exact-cache selection controls.
   hermes profile bootstrap  Create a profile-local Hermes config, Sellable auth config,
                            configs dir, skills, and optional Slack .env.
   uninstall                Remove Sellable host config and installed artifacts.
@@ -179,6 +191,8 @@ Options:
   --server <mode>           package, local, or hosted. Default: package
   --token <token>           Sellable API token. Also reads SELLABLE_TOKEN.
   --workspace-id <id>       Sellable workspace id. Also reads SELLABLE_WORKSPACE_ID.
+  --require-workspace-lock  For Hermes customer profiles, fail closed unless
+                            SELLABLE_LOCK_WORKSPACE_ID is present in MCP env.
   --api-url <url>           Sellable API URL. Default: ${DEFAULT_API_URL}
   --sellable-config-path <path>
                             Profile-scoped Sellable config path. Also reads SELLABLE_CONFIG_PATH.
@@ -199,7 +213,6 @@ Options:
 Auth:
   Install is auth-free by default. Sign in happens on the first run of
   /sellable:create-campaign, /sellable:create-evergreen-campaigns,
-  /sellable:find-leads,
   /sellable:foundation, /sellable:content, /sellable:create-post,
   /sellable:refresh-sender-engagement, or /sellable:refill-sends in Claude Code,
   Codex, or Hermes,
@@ -218,9 +231,20 @@ Hermes profile bootstrap:
 
   Bootstrap writes <profileRoot>/config.yaml, <profileRoot>/sellable/config.json,
   <profileRoot>/sellable/configs, Sellable Hermes skills, and optional
-  <profileRoot>/.env Slack token keys. Use customer-scoped Sellable credentials
-  for customer profiles; a shared admin token is weaker isolation and should
-  remain internal-only.
+  <profileRoot>/.env Slack token and channel-scope keys. For customer profiles,
+  pass --slack-home-channel; bootstrap defaults SLACK_ALLOWED_CHANNELS to that
+  exact channel id unless --slack-allowed-channels is supplied. Use
+  customer-scoped Sellable credentials and customer-scoped Slack credentials for
+  customer profiles; shared admin tokens are weaker isolation and should remain
+  internal-only. Bootstrap writes SELLABLE_REQUIRE_WORKSPACE_LOCK=1 whenever a
+  workspace id is supplied, so a customer profile fails closed if the workspace
+  lock is later removed or not yet provisioned.
+
+Hermes shared Slack dispatcher:
+  Shared listener setup and route-registry validation are internal Sellable
+  Admin responsibilities. This customer-facing installer only bootstraps a
+  profile-local Sellable runtime after Sellable Admin provisions the profile
+  and dispatcher route.
 `;
 }
 
@@ -1095,35 +1119,6 @@ const CREATE_CAMPAIGN_ALLOWED_TOOLS = [
   "mcp__sellable__start_campaign",
 ];
 
-const FIND_LEADS_ALLOWED_TOOLS = [
-  "mcp__sellable__get_auth_status",
-  "mcp__sellable__start_cli_login",
-  "mcp__sellable__wait_for_cli_login",
-  "mcp__sellable__get_active_workspace",
-  "mcp__sellable__list_workspaces",
-  "mcp__sellable__set_active_workspace",
-  "mcp__sellable__get_subskill_prompt",
-  "mcp__sellable__get_subskill_asset",
-  "mcp__sellable__search_subskill_prompts",
-  "mcp__sellable__get_provider_prompt",
-  "mcp__sellable__bootstrap_find_leads",
-  "mcp__sellable__get_find_leads_run",
-  "mcp__sellable__update_find_leads_run",
-  "mcp__sellable__wait_for_find_leads_run",
-  "mcp__sellable__cancel_find_leads",
-  "mcp__sellable__reissue_find_leads_watch_link",
-  "mcp__sellable__preflight_find_leads_provider",
-  "mcp__sellable__lookup_sales_nav_filter",
-  "mcp__sellable__search_sales_nav",
-  "mcp__sellable__search_prospeo",
-  "mcp__sellable__search_signals",
-  "mcp__sellable__select_promising_posts",
-  "mcp__sellable__import_leads",
-  "mcp__sellable__wait_for_lead_list_ready",
-  "mcp__sellable__get_rows_minimal",
-  "mcp__sellable__export_table_csv",
-];
-
 const CREATE_EVERGREEN_CAMPAIGNS_ALLOWED_TOOLS = [
   ...CREATE_CAMPAIGN_ALLOWED_TOOLS,
   "mcp__sellable__setup_evergreen_campaigns",
@@ -1677,7 +1672,7 @@ Treat host capabilities as concrete functions, not prose conventions:
   import and before dispatching Message Drafting only.
 - \`launch_message_drafting\`: Claude Code uses \`Task\` with \`subagent_type\`
   \`post-find-leads-message-scout\` when listed; Codex uses the returned
-  compatibility agent or a generic \`gpt-5.5\` / \`xhigh\` Message Drafting agent.
+  compatibility agent or a generic \`gpt-5.6-sol\` / \`high\` Message Drafting agent.
 
 If a required interactive question function or MCP loader is missing, stop and
 explain the Sellable install/reload problem. Source and filter work use
@@ -1939,17 +1934,6 @@ then retry \`get_subskill_prompt\`.
 `, host, "create-campaign");
 }
 
-function findLeadsSkillMd(host = "shared") {
-  const here = dirname(fileURLToPath(import.meta.url));
-  const templatePath = join(here, "..", "skill-templates", "find-leads.md");
-  if (!existsSync(templatePath)) {
-    throw new Error(
-      "Find Leads skill template is missing or stale. Reinstall @sellable/install and retry."
-    );
-  }
-  return stampInstalledHost(readFileSync(templatePath, "utf8"), host, "find-leads");
-}
-
 function createAbTestSkillMd(host = "shared") {
   try {
     const here = dirname(fileURLToPath(import.meta.url));
@@ -2066,7 +2050,55 @@ then retry \`get_subskill_prompt\`.
 `, host, "create-evergreen-campaigns");
 }
 
-function refillSendsSkillMd(host = "shared") {
+const REFILL_SENDS_FALLBACK_CONTRACT = `<!-- REFILL_CONTRACT_GENERATED:START -->
+contractVersion: 2.0.0
+cacheVersion: refill-contract-v1
+contractHash: e54ba0f80bc534fd70fd8c10c1caab109fe9a91c205cfc423f5f6735cd53fdc1
+scope: workspace_id, target_date, sender_selectors, campaign_selectors, approval_mode, contract_identity, installed_identity
+gates: approval_packet, one_primitive, fresh_reread, normalized_accounting, prep_circuit
+forbidden: direct_send, raw_scheduler_write, campaign_create, campaign_archive_delete, threshold_lowering, unselected_source_mutation, unapproved_campaign_start, sender_config_write
+terminal: projected_full, concrete_blocker, deadline_reached, iteration_limit, operator_stopped
+ready_buffer_exists_is_not_complete
+mcpPackageVersion: installed MCP package spec in host MCP config
+installPackageVersion: ${getInstallVersion()}
+codexPluginVersion: ${CODEX_PLUGIN_VERSION}
+<!-- REFILL_CONTRACT_GENERATED:END -->`;
+
+function refillReleaseIdentityBlock(host, opts = {}) {
+  const match = /^@sellable\/mcp@(.+)$/.exec(opts.mcpPackage || "");
+  const mcpVersion = match?.[1] || String(opts.mcpPackage || "unknown");
+  const pluginVersion = host === "codex" ? CODEX_PLUGIN_VERSION : "not-applicable";
+  const cacheIdentity =
+    host === "codex"
+      ? `codex-plugin:${pluginVersion}|mcp:${mcpVersion}`
+      : `${host}-host|mcp:${mcpVersion}`;
+  return `## Installed release identity
+
+expectedMcpPackageVersion: ${mcpVersion}
+expectedInstallPackageVersion: ${getInstallVersion()}
+expectedCodexPluginVersion: ${pluginVersion}
+expectedPluginCacheIdentity: ${cacheIdentity}
+
+Immediately after \`get_auth_status\`, require
+\`update.mcp.currentVersion\` to equal \`${mcpVersion}\`. If it is missing or
+different, stop with \`installed_mcp_identity_mismatch\` before any product mutation.
+Do not call \`get_refill_target_plan\`, \`refill_sends\`, or another mutating
+workflow tool. Explain that Codex is still using a stale Sellable MCP runtime,
+then fully quit and reopen Codex Desktop and start a new thread.`;
+}
+
+function stampRefillReleaseIdentity(markdown, host, opts) {
+  const marker = markdown.includes("## Bootstrap and execute")
+    ? "## Bootstrap and execute"
+    : "## Bootstrap";
+  if (!markdown.includes(marker)) return markdown;
+  return markdown.replace(
+    marker,
+    `${refillReleaseIdentityBlock(host, opts)}\n\n${marker}`
+  );
+}
+
+function refillSendsSkillMd(host = "shared", opts = {}) {
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const templatePath = join(
@@ -2075,11 +2107,18 @@ function refillSendsSkillMd(host = "shared") {
       "skill-templates",
       "refill-sends.md"
     );
-    if (existsSync(templatePath)) {
+    if (
+      process.env.SELLABLE_FORCE_REFILL_TEMPLATE_MISSING !== "1" &&
+      existsSync(templatePath)
+    ) {
       return stampInstalledHost(
-        addOrReplaceAllowedTools(
-          readFileSync(templatePath, "utf8"),
-          REFILL_SENDS_ALLOWED_TOOLS
+        stampRefillReleaseIdentity(
+          addOrReplaceAllowedTools(
+            readFileSync(templatePath, "utf8"),
+            REFILL_SENDS_ALLOWED_TOOLS
+          ),
+          host,
+          opts
         ),
         host,
         "refill-sends"
@@ -2088,7 +2127,7 @@ function refillSendsSkillMd(host = "shared") {
   } catch {
     // fall through to hardcoded fallback below
   }
-  return stampInstalledHost(`---
+  return stampInstalledHost(stampRefillReleaseIdentity(`---
 name: refill-sends
 description: Refill Sellable sender sends through the approval-gated refill workflow.
 visibility: public
@@ -2098,6 +2137,14 @@ ${allowedToolsYaml(REFILL_SENDS_ALLOWED_TOOLS)}
 
 # Sellable Refill Sends
 
+${REFILL_SENDS_FALLBACK_CONTRACT}
+
+fallbackSource: embedded
+
+Load \`refill-sends-workflow\`, then \`core/flow.v1.json\`, then
+\`core/contract.v2.json\`, each through the Sellable MCP prompt tools until
+\`hasMore:false\`. Fail closed on unsupported major or stale contract hash.
+
 Use this as the customer-facing entrypoint for the Sellable \`refill-sends\`
 workflow. It supports \`--yolo\` and optional repeated \`--sender <name-or-id>\`
 selectors. It also supports \`--target-date YYYY-MM-DD\` to fill one exact
@@ -2127,9 +2174,9 @@ Desktop, then start a new thread.
 
 1. Call \`mcp__sellable__get_auth_status({})\`.
 2. Resolve the target workspace id from the user request, automation config, or install-time workspace mapping. Pass \`workspaceId\` on every scheduled or \`--yolo\` refill tool call. Missing \`workspaceId\` in scheduled or \`--yolo\` mode is a blocker; return \`WORKSPACE_REQUIRED\` instead of running against shared config state. Do not solve automation workspace uncertainty by changing the shared active workspace.
-3. Normalize invocation arguments with \`mcp__sellable__refill_sends({ yolo, executionMode, requireWorkspace, workspaceId, senders, senderIds, senderNames, targetDate, untilDate })\` when the host exposes typed MCP tools. Type shape: \`refill_sends({ yolo?: boolean, executionMode?: "manual" | "scheduled" | "yolo", requireWorkspace?: boolean, workspaceId?: string, senders?: string[], senderIds?: string[], senderNames?: string[], horizonSendDays?: number, untilDate?: "YYYY-MM-DD", targetDate?: "YYYY-MM-DD" })\`.
+3. Normalize invocation arguments with \`mcp__sellable__refill_sends({ yolo, executionMode, requireWorkspace, workspaceId, senders, senderIds, senderNames, actionTypes, targetDate, untilDate })\` when the host exposes typed MCP tools. Type shape: \`refill_sends({ yolo?: boolean, executionMode?: "manual" | "scheduled" | "yolo", requireWorkspace?: boolean, workspaceId?: string, senders?: string[], senderIds?: string[], senderNames?: string[], actionTypes?: ("send_invite" | "send_inmail_closed")[], horizonSendDays?: number, untilDate?: "YYYY-MM-DD", targetDate?: "YYYY-MM-DD" })\`.
 4. Clover scheduled automation example: \`mcp__sellable__refill_sends({ yolo:false, executionMode:"scheduled", requireWorkspace:true, workspaceId:"cmlq1v8ms0000jx04ang4hi7e" })\`, then \`mcp__sellable__get_refill_target_plan({ intent:"plain", approvalMode:"mark_ready", workspaceId:"cmlq1v8ms0000jx04ang4hi7e" })\`.
-5. Call \`mcp__sellable__get_refill_target_plan({ workspaceId, senders, senderIds, senderNames, targetDate, untilDate })\` before any mutation. Render \`target.eligibleSenderLedger\`, \`target.senderRefillPlans[]\`, and \`target.globalActionQueue\` as the structured packet. Preserve the labels \`Need to prepare\`, \`Goal\`, \`Already sent\`, \`Scheduled\`, \`Ready and waiting to be scheduled\`, and \`Still need\`. In \`--yolo\`, \`mcp__sellable__refill_sends\` maintains a run-local \`refreshedPaidInmailSenderIds\` set, refreshes stale/missing paid InMail facts for each selected paid-InMail sender at most once, reruns \`get_refill_target_plan\`, and returns \`autoPaidInmailRefresh\` plus the post-refresh \`targetPlan\` before choosing the next prep/source-copy/bounded-approval/read-only wait action. Refill ladder: approve generated rows only through the explicit bounded approval gate, process existing same-campaign unenriched/unprepared rows before source work, then same-source copy, then provider-aligned source-more. New source/provider switches change reply-rate baseline and are manual alternates, not \`--yolo\` side effects. Do not present paid-credit refresh as the next operator action after \`refill_sends\` returns that post-refresh plan. For exact-date proof, \`mcp__sellable__get_scheduler_fill_capacity\` is read-only and tells how many cells the scheduler will try to place for a sender/action/date. When ready rows cover the target but scheduled rows do not, \`mcp__sellable__run_scheduler_sweep({ workspaceId, action:"run" })\` may request immediate placement within existing gates and returns a receipt, but it never sends or bypasses limits. If the returned target is already complete, stop with the no-op receipt. If ready rows cover the target but scheduled rows do not, keep the run open in the read-only scheduler wait/re-read loop until projected coverage fills, a concrete non-scheduler blocker appears, or Christian explicitly stops/statuses the run.
+5. Call \`mcp__sellable__get_refill_target_plan({ workspaceId, senders, senderIds, senderNames, actionTypes, targetDate, untilDate })\` before any mutation. Render \`target.eligibleSenderLedger\`, \`target.senderRefillPlans[]\`, and \`target.globalActionQueue\` as the structured packet. Preserve the labels \`Need to prepare\`, \`Goal\`, \`Already sent\`, \`Scheduled\`, \`Ready and waiting to be scheduled\`, and \`Still need\`. In \`--yolo\`, \`mcp__sellable__refill_sends\` maintains a run-local \`refreshedPaidInmailSenderIds\` set, refreshes stale/missing paid InMail facts for each selected paid-InMail sender at most once, reruns \`get_refill_target_plan\`, and returns \`autoPaidInmailRefresh\` plus the post-refresh \`targetPlan\` before choosing the next prep/source-copy/bounded-approval/read-only wait or exact-date sweep action. Refill ladder: approve generated rows only through the explicit bounded approval gate, process existing same-campaign unenriched/unprepared rows before source work, then same-source copy, then provider-aligned source-more. New source/provider switches change reply-rate baseline and are manual alternates, not \`--yolo\` side effects. Do not present paid-credit refresh as the next operator action after \`refill_sends\` returns that post-refresh plan. For exact-date proof, \`mcp__sellable__get_scheduler_fill_capacity\` is read-only and tells how many cells the scheduler will try to place for a sender/action/date. When the planner returns a request-scoped exact-date scheduler sweep, execute \`mcp__sellable__run_scheduler_sweep({ workspaceId, action:"run", targetDate, requestKey, targetShapeRevision })\` once, capture its receipt, and fully reread before another action. It may schedule eligible workspace cells through existing gates, but it never sends directly or bypasses limits. If the returned target is already complete, stop with the no-op receipt. Only non-exact or no-sweep waits use the read-only scheduler wait/re-read loop until projected coverage fills, a concrete non-scheduler blocker appears, or Christian explicitly stops/statuses the run.
 6. Load the canonical prompt and deterministic flow asset via
    \`mcp__sellable__get_subskill_prompt({ subskillName: "refill-sends" })\`,
    then load \`mcp__sellable__get_subskill_prompt({ subskillName: "refill-sends-workflow" })\`,
@@ -2140,15 +2187,14 @@ Desktop, then start a new thread.
    facts are present, refresh exact selected sender facts once, rerun
    \`get_refill_target_plan\`, and only then enter \`wait_for_scheduler\` if
    freshness is clean.
-7. Follow the canonical prompt exactly. Do not launch, start, archive, delete,
-   or write scheduler rows as part of refill sends.
+7. Follow the canonical prompt exactly. Do not directly send, bypass scheduler gates, or raw-write scheduler fields. Only the exact rendered paused-campaign start and request-scoped scheduler sweep may use their existing product-gated paths; do not launch, archive, or delete unrelated work.
 
 ## MCP Prompt Fallback
 
 If exact subskill lookup fails, use
 \`mcp__sellable__search_subskill_prompts({ query: "refill-sends", includePublic: true, includeInternal: true })\`,
 then retry \`get_subskill_prompt\`.
-`, host, "refill-sends");
+`, host, opts), host, "refill-sends");
 }
 
 function refreshSenderEngagementSkillMd(host = "shared") {
@@ -2660,14 +2706,8 @@ will change or after they approve the settings update.
 `;
 }
 
-function codexPluginSkills() {
+function codexPluginSkills(opts = {}) {
   return [
-    {
-      dir: "sellable-find-leads",
-      displayName: "Sellable Find Leads",
-      description: "Find prospects and build a live exportable lead list",
-      skillMd: findLeadsSkillMd("codex"),
-    },
     {
       dir: "sellable-create-campaign",
       displayName: "Sellable Create Campaign",
@@ -2715,7 +2755,7 @@ function codexPluginSkills() {
       dir: "sellable-refill-sends",
       displayName: "Sellable Refill Sends",
       description: "Refill sender sends with approval-gated campaign selection",
-      skillMd: refillSendsSkillMd("codex"),
+      skillMd: refillSendsSkillMd("codex", opts),
     },
   ];
 }
@@ -2906,16 +2946,8 @@ then retry \`get_subskill_prompt\`.
   );
 }
 
-function hermesSkillDefinitions() {
+function hermesSkillDefinitions(opts = {}) {
   return [
-    {
-      commandName: "find-leads",
-      dir: hermesCommandName("find-leads"),
-      skillMd: normalizeHermesSkillMarkdown(
-        findLeadsSkillMd("hermes"),
-        "find-leads"
-      ),
-    },
     {
       commandName: "create-campaign",
       dir: hermesCommandName("create-campaign"),
@@ -2971,7 +3003,7 @@ function hermesSkillDefinitions() {
       commandName: "refill-sends",
       dir: hermesCommandName("refill-sends"),
       skillMd: normalizeHermesSkillMarkdown(
-        refillSendsSkillMd("hermes"),
+        refillSendsSkillMd("hermes", opts),
         "refill-sends"
       ),
     },
@@ -3099,8 +3131,8 @@ function generateCodexAgentToml(agent) {
   const codex = agent.codex;
   return `name = ${quoteToml(agent.name)}
 description = ${quoteToml(codex.description)}
-model = ${quoteToml(codex.model || "gpt-5.5")}
-model_reasoning_effort = ${quoteToml(codex.modelReasoningEffort || "xhigh")}
+model = ${quoteToml(codex.model || "gpt-5.6-sol")}
+model_reasoning_effort = ${quoteToml(codex.modelReasoningEffort || "high")}
 sandbox_mode = ${quoteToml(codex.sandboxMode || "read-only")}
 nickname_candidates = ${tomlArray(codex.nicknameCandidates || [agent.displayName])}
 developer_instructions = ${tomlMultilineString(agent.prompt)}
@@ -3164,17 +3196,8 @@ ${stripFrontmatter(command.skillMd)}
 `;
 }
 
-function claudeCommands() {
+function claudeCommands(opts = {}) {
   return [
-    {
-      name: "find-leads",
-      title: "Find Leads",
-      filename: join("sellable", "find-leads.md"),
-      description: "Find prospects and build a live exportable Sellable lead list.",
-      argumentHint: "[target audience, provider, or lead-list goal]",
-      skillMd: findLeadsSkillMd("claude"),
-      allowedTools: ["AskUserQuestion", ...FIND_LEADS_ALLOWED_TOOLS],
-    },
     {
       name: "create-campaign",
       title: "Create Campaign",
@@ -3229,7 +3252,7 @@ function claudeCommands() {
       description:
         "Refill Sellable sender sends through the approval-gated refill workflow.",
       argumentHint: "[--yolo] [--sender name-or-id ...]",
-      skillMd: refillSendsSkillMd("claude"),
+      skillMd: refillSendsSkillMd("claude", opts),
       allowedTools: ["AskUserQuestion", ...REFILL_SENDS_ALLOWED_TOOLS],
     },
     {
@@ -3254,7 +3277,7 @@ function claudeCommands() {
 }
 
 function writeCodexPluginSkills(pluginRoot, opts) {
-  const skills = codexPluginSkills();
+  const skills = codexPluginSkills(opts);
   const currentSkillDirs = new Set(skills.map((skill) => skill.dir));
   const skillsRoot = join(pluginRoot, "skills");
 
@@ -3318,7 +3341,7 @@ function writeClaudeCustomAgents(opts) {
 
 function writeClaudeCommands(opts) {
   const home = claudeHome();
-  for (const command of claudeCommands()) {
+  for (const command of claudeCommands(opts)) {
     writeFile(join(home, "commands", command.filename), command.content, opts);
   }
 }
@@ -3559,8 +3582,19 @@ const WATCH_MODE_DRIVER_ENV = {
 };
 
 function mcpEnvForHost(host, opts) {
+  const mcpVersionMatch = /^@sellable\/mcp@(.+)$/.exec(opts.mcpPackage || "");
+  const mcpVersion = mcpVersionMatch?.[1] || String(opts.mcpPackage || "unknown");
+  const pluginVersion = host === "codex" ? CODEX_PLUGIN_VERSION : "not-applicable";
+  const cacheIdentity =
+    host === "codex"
+      ? `codex-plugin:${CODEX_PLUGIN_VERSION}|mcp:${mcpVersion}`
+      : `${host}-host|mcp:${mcpVersion}`;
   const env = {
     SELLABLE_WATCH_MODE_DRIVER: host,
+    SELLABLE_INSTALL_PACKAGE_VERSION: getInstallVersion(),
+    SELLABLE_MCP_PACKAGE_VERSION: mcpVersion,
+    SELLABLE_CODEX_PLUGIN_VERSION: pluginVersion,
+    SELLABLE_PLUGIN_CACHE_IDENTITY: cacheIdentity,
   };
   if (opts.server === "hosted") return env;
   if (opts.sellableConfigPath) {
@@ -3569,6 +3603,12 @@ function mcpEnvForHost(host, opts) {
   if (opts.sellableConfigsDir) {
     env.SELLABLE_CONFIGS_DIR = opts.sellableConfigsDir;
   }
+  if (opts.lockWorkspaceId) {
+    env.SELLABLE_LOCK_WORKSPACE_ID = opts.lockWorkspaceId;
+  }
+  if (opts.requireWorkspaceLock) {
+    env.SELLABLE_REQUIRE_WORKSPACE_LOCK = "1";
+  }
   return env;
 }
 
@@ -3813,7 +3853,7 @@ function writeHermesMcpServer(opts) {
 
 function installHermesSkills(opts) {
   const root = hermesSkillsRoot(opts);
-  for (const skill of hermesSkillDefinitions()) {
+  for (const skill of hermesSkillDefinitions(opts)) {
     const skillRoot = join(root, skill.dir);
     writeFile(join(skillRoot, "SKILL.md"), skill.skillMd, opts);
     if (skill.soulMd) {
@@ -3853,6 +3893,12 @@ function parseHermesProfileBootstrapArgs(argv) {
     apiUrl: process.env.SELLABLE_API_URL || DEFAULT_API_URL,
     slackBotToken: process.env.SLACK_BOT_TOKEN || "",
     slackAppToken: process.env.SLACK_APP_TOKEN || "",
+    slackHomeChannel: process.env.SLACK_HOME_CHANNEL || "",
+    slackHomeChannelName: process.env.SLACK_HOME_CHANNEL_NAME || "",
+    slackAllowedChannels: process.env.SLACK_ALLOWED_CHANNELS || "",
+    slackFreeResponseChannels: process.env.SLACK_FREE_RESPONSE_CHANNELS || "",
+    slackAllowedUsers: process.env.SLACK_ALLOWED_USERS || "",
+    slackRequireMention: process.env.SLACK_REQUIRE_MENTION || "",
     server: process.env.SELLABLE_INSTALL_SERVER || "package",
     mcpPackage: DEFAULT_SERVER_PACKAGE,
     localCommand: process.env.SELLABLE_MCP_LOCAL_COMMAND || "",
@@ -3861,6 +3907,7 @@ function parseHermesProfileBootstrapArgs(argv) {
     force: false,
     overwriteEnv: false,
     allowDuplicateSlackTokens: false,
+    requireWorkspaceLock: false,
     verbose: false,
   };
 
@@ -3885,6 +3932,12 @@ function parseHermesProfileBootstrapArgs(argv) {
     else if (arg === "--api-url") opts.apiUrl = next();
     else if (arg === "--slack-bot-token") opts.slackBotToken = next();
     else if (arg === "--slack-app-token") opts.slackAppToken = next();
+    else if (arg === "--slack-home-channel") opts.slackHomeChannel = next();
+    else if (arg === "--slack-home-channel-name") opts.slackHomeChannelName = next();
+    else if (arg === "--slack-allowed-channels") opts.slackAllowedChannels = next();
+    else if (arg === "--slack-free-response-channels") opts.slackFreeResponseChannels = next();
+    else if (arg === "--slack-allowed-users") opts.slackAllowedUsers = next();
+    else if (arg === "--slack-require-mention") opts.slackRequireMention = next();
     else if (arg === "--server") opts.server = next();
     else if (arg === "--mcp-package") {
       opts.mcpPackage = normalizeWindowsPackageSpec(next());
@@ -3893,7 +3946,9 @@ function parseHermesProfileBootstrapArgs(argv) {
     else if (arg === "--json") opts.json = true;
     else if (arg === "--force") opts.force = true;
     else if (arg === "--overwrite-env") opts.overwriteEnv = true;
-    else if (arg === "--allow-duplicate-slack-tokens") {
+    else if (arg === "--require-workspace-lock") {
+      opts.requireWorkspaceLock = true;
+    } else if (arg === "--allow-duplicate-slack-tokens") {
       opts.allowDuplicateSlackTokens = true;
     } else if (arg === "--verbose") opts.verbose = true;
     else {
@@ -3986,6 +4041,111 @@ function renderEnvFile({ entries, passthrough }) {
   return `${lines.join("\n")}${lines.length ? "\n" : ""}`;
 }
 
+function normalizeSlackChannelIds(value, key) {
+  const raw = String(value || "").trim();
+  if (!raw) return "";
+  const ids = raw
+    .split(",")
+    .map((item) => item.trim())
+    .filter(Boolean);
+  if (ids.length === 0) return "";
+
+  for (const id of ids) {
+    if (
+      id === "*" ||
+      /^all$/i.test(id) ||
+      id.startsWith("#") ||
+      /\s/.test(id) ||
+      !/^[A-Z][A-Z0-9]{8,}$/.test(id)
+    ) {
+      throw new Error(
+        `${key} must be comma-separated Slack channel IDs, not names, wildcards, or free text. Bad value: ${id}`
+      );
+    }
+  }
+  return [...new Set(ids)].join(",");
+}
+
+function normalizeSlackSingleChannelId(value, key) {
+  const normalized = normalizeSlackChannelIds(value, key);
+  if (normalized.includes(",")) {
+    throw new Error(`${key} must be a single Slack channel ID`);
+  }
+  return normalized;
+}
+
+function normalizeSlackUserIds(value, key) {
+  const raw = String(value || "").trim();
+  if (!raw) return "";
+  const ids = raw
+    .split(",")
+    .map((item) => item.trim())
+    .filter(Boolean);
+  if (ids.length === 0) return "";
+
+  for (const id of ids) {
+    if (!/^[UW][A-Z0-9]{8,}$/.test(id)) {
+      throw new Error(`${key} must be comma-separated Slack user IDs. Bad value: ${id}`);
+    }
+  }
+  return [...new Set(ids)].join(",");
+}
+
+function normalizeSlackChannelName(value, key) {
+  const raw = String(value || "").trim();
+  if (!raw) return "";
+  if (raw.startsWith("#") || /[\s,]/.test(raw)) {
+    throw new Error(`${key} must be a Slack channel name without #, spaces, or commas`);
+  }
+  return raw;
+}
+
+function normalizeSlackBoolean(value, key) {
+  const raw = String(value || "").trim().toLowerCase();
+  if (!raw) return "";
+  if (raw !== "true" && raw !== "false") {
+    throw new Error(`${key} must be true or false`);
+  }
+  return raw;
+}
+
+function buildSlackProfileEnv(parsed) {
+  const homeChannel = normalizeSlackSingleChannelId(
+    parsed.slackHomeChannel,
+    "SLACK_HOME_CHANNEL"
+  );
+  const explicitAllowedChannels = normalizeSlackChannelIds(
+    parsed.slackAllowedChannels,
+    "SLACK_ALLOWED_CHANNELS"
+  );
+  const allowedChannels = explicitAllowedChannels || homeChannel;
+
+  return {
+    SLACK_BOT_TOKEN: parsed.slackBotToken.trim(),
+    SLACK_APP_TOKEN: parsed.slackAppToken.trim(),
+    SLACK_HOME_CHANNEL: homeChannel,
+    SLACK_HOME_CHANNEL_NAME: normalizeSlackChannelName(
+      parsed.slackHomeChannelName,
+      "SLACK_HOME_CHANNEL_NAME"
+    ),
+    // Customer Hermes profiles must fail closed to their channel. If the caller
+    // supplies only a home channel, we treat that as the allowlist too.
+    SLACK_ALLOWED_CHANNELS: allowedChannels,
+    SLACK_FREE_RESPONSE_CHANNELS: normalizeSlackChannelIds(
+      parsed.slackFreeResponseChannels,
+      "SLACK_FREE_RESPONSE_CHANNELS"
+    ),
+    SLACK_ALLOWED_USERS: normalizeSlackUserIds(
+      parsed.slackAllowedUsers,
+      "SLACK_ALLOWED_USERS"
+    ),
+    SLACK_REQUIRE_MENTION: normalizeSlackBoolean(
+      parsed.slackRequireMention,
+      "SLACK_REQUIRE_MENTION"
+    ),
+  };
+}
+
 function findDuplicateSlackTokenProfiles(profileRoot, slackTokens) {
   const duplicates = [];
   const profilesRoot = dirname(profileRoot);
@@ -4038,10 +4198,16 @@ function runHermesProfileBootstrap(argv) {
     const sellableConfigsDir = join(profileRoot, "sellable", "configs");
     const envPath = join(profileRoot, ".env");
     const { token, source: tokenSource } = readBootstrapToken(parsed);
+    const slackEnv = buildSlackProfileEnv(parsed);
     const slackTokens = {
-      SLACK_BOT_TOKEN: parsed.slackBotToken.trim(),
-      SLACK_APP_TOKEN: parsed.slackAppToken.trim(),
+      SLACK_BOT_TOKEN: slackEnv.SLACK_BOT_TOKEN,
+      SLACK_APP_TOKEN: slackEnv.SLACK_APP_TOKEN,
     };
+    const slackEnvKeys = Object.entries(slackEnv)
+      .filter(([, value]) => value)
+      .map(([key]) => key);
+    const requireWorkspaceLock =
+      parsed.requireWorkspaceLock || Boolean(parsed.workspaceId);
     const opts = {
       ...parsed,
       host: "hermes",
@@ -4051,6 +4217,8 @@ function runHermesProfileBootstrap(argv) {
       token,
       tokenSource,
       workspaceId: parsed.workspaceId,
+      lockWorkspaceId: parsed.workspaceId,
+      requireWorkspaceLock,
       apiUrl: parsed.apiUrl,
     };
 
@@ -4075,6 +4243,17 @@ function runHermesProfileBootstrap(argv) {
         apiUrl: opts.apiUrl,
         activeWorkspaceId: parsed.workspaceId || null,
         activeWorkspaceName: parsed.workspaceName || null,
+        workspaceLock: parsed.workspaceId
+          ? {
+              enabled: true,
+              workspaceId: parsed.workspaceId,
+              required: requireWorkspaceLock,
+            }
+          : {
+              enabled: false,
+              workspaceId: null,
+              required: requireWorkspaceLock,
+            },
         tokenPresent: Boolean(token),
         tokenSource,
         tokenFingerprint: tokenFingerprint(token),
@@ -4083,11 +4262,29 @@ function runHermesProfileBootstrap(argv) {
         keys: Object.entries(slackTokens)
           .filter(([, value]) => value)
           .map(([key]) => key),
+        envKeys: slackEnvKeys,
         fingerprints: Object.fromEntries(
           Object.entries(slackTokens)
             .filter(([, value]) => value)
             .map(([key, value]) => [key, tokenFingerprint(value)])
         ),
+        scope: {
+          homeChannel: slackEnv.SLACK_HOME_CHANNEL || null,
+          homeChannelName: slackEnv.SLACK_HOME_CHANNEL_NAME || null,
+          allowedChannels: slackEnv.SLACK_ALLOWED_CHANNELS
+            ? slackEnv.SLACK_ALLOWED_CHANNELS.split(",")
+            : [],
+          freeResponseChannels: slackEnv.SLACK_FREE_RESPONSE_CHANNELS
+            ? slackEnv.SLACK_FREE_RESPONSE_CHANNELS.split(",")
+            : [],
+          allowedUsersCount: slackEnv.SLACK_ALLOWED_USERS
+            ? slackEnv.SLACK_ALLOWED_USERS.split(",").length
+            : 0,
+          requireMention:
+            slackEnv.SLACK_REQUIRE_MENTION === ""
+              ? null
+              : slackEnv.SLACK_REQUIRE_MENTION === "true",
+        },
       },
       created: [],
       updated: [],
@@ -4132,7 +4329,7 @@ function runHermesProfileBootstrap(argv) {
     if (existsSync(envPath)) {
       envState = parseEnvLines(readFileSync(envPath, "utf8"));
     }
-    for (const [key, value] of Object.entries(slackTokens)) {
+    for (const [key, value] of Object.entries(slackEnv)) {
       if (!value) continue;
       const existing = envState.entries.get(key);
       if (existing && existing !== value && !opts.overwriteEnv) {
@@ -4192,8 +4389,8 @@ function runHermesProfileBootstrap(argv) {
       mkdirSync(sellableConfigsDir, { recursive: true, mode: 0o700 });
       writeHermesProfileSellableConfig(sellableConfigPath, nextAuth, opts);
       installHermes(opts);
-      if (Object.values(slackTokens).some(Boolean)) {
-        for (const [key, value] of Object.entries(slackTokens)) {
+      if (Object.values(slackEnv).some(Boolean)) {
+        for (const [key, value] of Object.entries(slackEnv)) {
           if (value) envState.entries.set(key, value);
         }
         writeFile(envPath, renderEnvFile(envState), opts, 0o600);
@@ -4208,16 +4405,31 @@ function runHermesProfileBootstrap(argv) {
       hermesConfigPath(opts)
     );
     (skillsExisted ? summary.updated : summary.created).push(hermesSkillsRoot(opts));
-    if (Object.values(slackTokens).some(Boolean)) {
+    if (Object.values(slackEnv).some(Boolean)) {
       (envExisted ? summary.updated : summary.created).push(envPath);
     } else {
-      summary.skipped.push("Slack env: no Slack tokens supplied");
+      summary.skipped.push("Slack env: no Slack tokens or channel scope supplied");
+    }
+    if (slackEnv.SLACK_HOME_CHANNEL && !parsed.slackAllowedChannels.trim()) {
+      summary.warnings.push(
+        "Slack scope defaulted SLACK_ALLOWED_CHANNELS to SLACK_HOME_CHANNEL for fail-closed profile listening."
+      );
+    }
+    if (slackEnv.SLACK_BOT_TOKEN && !slackEnv.SLACK_APP_TOKEN) {
+      summary.warnings.push(
+        "Slack bot token is present without SLACK_APP_TOKEN; outbound Slack sends may work, but native Hermes Socket Mode listening still requires an xapp app-level token with connections:write."
+      );
     }
     if (!token) {
       summary.warnings.push(
         `Manual auth pending. Run: sellable auth set <token> --workspace-id <workspace_id> --sellable-config-path ${sellableConfigPath}`
       );
     }
+    if (requireWorkspaceLock && !parsed.workspaceId) {
+      summary.warnings.push(
+        "Sellable MCP will fail closed until sellable-admin provisions SELLABLE_LOCK_WORKSPACE_ID for this customer profile."
+      );
+    }
 
     if (opts.json) {
       console.log(JSON.stringify(summary, null, 2));
@@ -5220,8 +5432,7 @@ function printNextSteps(installedHosts, authReused) {
   console.log("");
 
   if (hasClaude) {
-  printAgentBox("Using Claude Code?", "claude", [
-    { label: "Find Leads", command: "/sellable:find-leads" },
+    printAgentBox("Using Claude Code?", "claude", [
       { label: "Campaign", command: "/sellable:create-campaign" },
       { label: "Evergreen", command: "/sellable:create-evergreen-campaigns" },
       { label: "Foundation", command: "/sellable:foundation" },
@@ -5234,8 +5445,7 @@ function printNextSteps(installedHosts, authReused) {
     console.log("");
   }
   if (hasCodex) {
-  printAgentBox("Using Codex?", "codex", [
-    { label: "Find Leads", command: "$sellable:find-leads" },
+    printAgentBox("Using Codex?", "codex", [
       { label: "Campaign", command: "$sellable:create-campaign" },
       { label: "Evergreen", command: "$sellable:create-evergreen-campaigns" },
       { label: "Foundation", command: "$sellable:foundation" },
@@ -5247,8 +5457,7 @@ function printNextSteps(installedHosts, authReused) {
     console.log("");
   }
   if (hasHermes) {
-  printAgentBox("Using Hermes?", "hermes", [
-    { label: "Find Leads", command: "/sellable-find-leads" },
+    printAgentBox("Using Hermes?", "hermes", [
       { label: "Campaign", command: "/sellable-create-campaign" },
       { label: "A/B Test", command: "/sellable-create-ab-test" },
       { label: "Evergreen", command: "/sellable-create-evergreen-campaigns" },
@@ -5618,25 +5827,22 @@ async function main() {
       if (workspaceId) {
         console.log(`  activeWorkspaceId: ${workspaceId}`);
       }
-       console.log(`  Continue in your agent:`);
-       console.log(`    Claude Code: /sellable:find-leads`);
-       console.log(`    Claude Code: /sellable:create-campaign`);
+      console.log(`  Continue in your agent:`);
+      console.log(`    Claude Code: /sellable:create-campaign`);
       console.log(`    Claude Code: /sellable:create-evergreen-campaigns`);
       console.log(`    Claude Code: /sellable:foundation`);
       console.log(`    Claude Code: /sellable:content`);
       console.log(`    Claude Code: /sellable:create-post`);
       console.log(`    Claude Code: /sellable:refresh-sender-engagement`);
       console.log(`    Claude Code: /sellable:refill-sends`);
-       console.log(`    Codex: $sellable:find-leads`);
-       console.log(`    Codex: $sellable:create-campaign`);
+      console.log(`    Codex: $sellable:create-campaign`);
       console.log(`    Codex: $sellable:create-evergreen-campaigns`);
       console.log(`    Codex: $sellable:foundation`);
       console.log(`    Codex: $sellable:content`);
       console.log(`    Codex: $sellable:create-post`);
       console.log(`    Codex: $sellable:refresh-sender-engagement`);
       console.log(`    Codex: $sellable:refill-sends`);
-       console.log(`    Hermes: /sellable-find-leads`);
-       console.log(`    Hermes: /sellable-create-campaign`);
+      console.log(`    Hermes: /sellable-create-campaign`);
       console.log(`    Hermes: /sellable-create-evergreen-campaigns`);
       console.log(`    Hermes: /sellable-foundation`);
       console.log(`    Hermes: /sellable-content`);
@@ -5693,6 +5899,73 @@ async function main() {
       printCreateCommandHint();
       process.exit(0);
     }
+    if (rawArgs[0] === "codex" && rawArgs[1] === "plugin-selection") {
+      const command = rawArgs[2];
+      const flags = new Map();
+      for (let index = 3; index < rawArgs.length; index += 2) {
+        const flag = rawArgs[index];
+        const value = rawArgs[index + 1];
+        if (!flag?.startsWith("--") || !value || value.startsWith("--")) {
+          throw new Error(`Invalid Codex plugin-selection option: ${flag ?? "<missing>"}`);
+        }
+        flags.set(flag, value);
+      }
+      const required = (name) => {
+        const value = flags.get(name);
+        if (!value) throw new Error(`Missing value for ${name}`);
+        return value;
+      };
+      const paths = resolveCodexPluginSelectionPaths({ home: homedir() });
+      let result;
+      if (command === "status") {
+        result = readCodexPluginSelection({ paths, stableVersion: flags.get("--stable-version") });
+      } else if (command === "snapshot") {
+        result = snapshotCodexPluginSelection({
+          paths,
+          snapshotRoot: required("--snapshot-root"),
+        });
+      } else if (command === "install-cache") {
+        result = installCodexCandidateCache({
+          paths,
+          sourcePluginRoot: required("--source"),
+          version: required("--version"),
+        });
+      } else if (command === "activate") {
+        result = activateCodexCandidateSelection({
+          paths,
+          snapshotManifestPath: required("--snapshot"),
+          expectedSnapshotHash: required("--snapshot-hash"),
+          candidateVersion: required("--candidate-version"),
+          expectedCandidateHash: required("--candidate-hash"),
+          approvalId: required("--approval-id"),
+          approvedAt: required("--approved-at"),
+          restoreBy: required("--restore-by"),
+          now: required("--now"),
+        });
+      } else if (command === "restore") {
+        result = restoreCodexPluginSelection({
+          paths,
+          snapshotManifestPath: required("--snapshot"),
+          expectedSnapshotHash: required("--snapshot-hash"),
+          activationPath: required("--activation"),
+          now: required("--now"),
+          recoveryReason: flags.get("--recovery-reason") || undefined,
+          taskEvidence:
+            flags.has("--task-id") && flags.has("--resolved-candidate-hash")
+              ? {
+                  taskId: flags.get("--task-id"),
+                  resolvedCandidateHash: flags.get("--resolved-candidate-hash"),
+                }
+              : undefined,
+        });
+      } else {
+        throw new Error(
+          "Usage: sellable codex plugin-selection snapshot|install-cache|activate|restore|status"
+        );
+      }
+      console.log(JSON.stringify(result, null, 2));
+      process.exit(0);
+    }
     if (
       rawArgs[0] === "hermes" &&
       rawArgs[1] === "profile" &&