@sellable/install 0.1.408 → 0.1.410-wip.phase112015.boot-session.20260724150835

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.408
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835
 ARG MCP_PACKAGE=@sellable/mcp@0.1.644
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-Q2+bBeQCKy/tZ9hMslOZ1Tw/kTLKBjiv77zQqX38IFrNevLiOhRG4rsxvVPqfHkOIIOSKFl/ECTgFD0pcmhAXg==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.408" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.644" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.408" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.408' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.644') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.410-wip.phase112015.boot-session.20260724150835' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.644') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.408', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.644', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.644', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.408` is
+`@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.408 .
+  --tag sellable-agent-host:0.1.410-wip.phase112015.boot-session.20260724150835 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -5,7 +5,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.710-uat.refill-zero-shot.20260723123117
 ARG MCP_INTEGRITY=sha512-KvIRcIPQR/3iviWNcpq4EgrR/gEuOOqV9fngbaF/Ch/E7bBx0oAsFDu+0YrKvPc+l95ia/ddyvxWmpuRpMGHGw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.408
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835
 ARG HERMES_VERSION=0.19.0
 ARG MCP_TRUST_ROOT_B64
 ARG TIRITH_VERSION=0.3.3
@@ -42,7 +42,7 @@ RUN test -n "${MCP_TRUST_ROOT_B64}" \
              /etc/cont-init.d/02-reconcile-profiles \
     && npm cache clean --force
 
-COPY mcp-context-proxy.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs fly-runtime-identity.mjs \
+COPY mcp-context-proxy.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs fly-runtime-identity.mjs \
   /usr/local/lib/sellable-agent/
 COPY fly-customer-image/customer-runtime.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs
 COPY fly-customer-image/rootfs/ /

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -19,6 +19,12 @@ import {
   clearCustomerRuntimeSecrets,
   installCustomerRuntimeSecrets,
 } from "../fly-customer-worker.mjs";
+import {
+  FLY_CUSTOMER_MODEL_ID,
+  FLY_CUSTOMER_MODEL_PROVIDER,
+  FLY_CUSTOMER_MODEL_REASONING_EFFORT,
+  parseFlyCustomerModelCredential,
+} from "../fly-customer-model.mjs";
 import {
   createFlyCustomerControlClient,
   dropFlyRuntimePrivileges,
@@ -51,10 +57,11 @@ const RUNTIME_GENERATION = Number(
     process.env.SELLABLE_RUNTIME_GENERATION ??
     "0"
 );
+const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.19.0";
 const INSTALLER_PACKAGE =
   process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ??
-  "@sellable/install@0.1.408";
+  "@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ??
   "@sellable/mcp@0.1.710-uat.refill-zero-shot.20260723123117";
@@ -354,6 +361,7 @@ function writeRuntimeHermesConfig({
   const testModelOrigin = allowTestProviders()
     ? process.env.SELLABLE_AGENT_TEST_MODEL_ORIGIN
     : null;
+  const modelCredential = parseFlyCustomerModelCredential(secrets.modelCodex);
   atomicJson(runtimeConfigPath, {
     ...baseConfig,
     ...(testModelOrigin
@@ -375,7 +383,14 @@ function writeRuntimeHermesConfig({
             },
           ],
         }
-      : {}),
+      : {
+          model: {
+            default: FLY_CUSTOMER_MODEL_ID,
+            provider: FLY_CUSTOMER_MODEL_PROVIDER,
+            reasoning_effort: FLY_CUSTOMER_MODEL_REASONING_EFFORT,
+            generation: desired.modelCredentialGeneration,
+          },
+        }),
     mcp_servers: {
       ...baseConfig.mcp_servers,
       sellable: {
@@ -400,8 +415,6 @@ function writeRuntimeHermesConfig({
       },
     },
   });
-  const modelAuthPath = join(secretRoot, "auth.json");
-  atomicFile(modelAuthPath, secrets.modelCodex, 0o600);
   const gatesPath = join(secretRoot, "gates.json");
   atomicJson(gatesPath, {
     lifecycle: "ON",
@@ -425,8 +438,8 @@ function writeRuntimeHermesConfig({
     runtimeHome: runtimeConfigRoot,
     runtimeConfigPath,
     runtimeMcpPath,
-    modelAuthPath,
     gatesPath,
+    modelCredential,
   };
 }
 
@@ -464,7 +477,6 @@ function applicationRuntimeEnv({ desired, runtimeConfig, secrets }) {
     HOME: DATA_ROOT,
     HERMES_HOME: DATA_ROOT,
     HERMES_CONFIG_PATH: runtimeConfig.runtimeConfigPath,
-    HERMES_AUTH_PATH: runtimeConfig.modelAuthPath,
     CODEX_HOME: join(SECRET_ROOT, desired.profileId),
     SELLABLE_AGENT_RUNTIME: "1",
     SELLABLE_AGENT_RUNTIME_GATE_FILE: runtimeConfig.gatesPath,
@@ -475,10 +487,15 @@ function applicationRuntimeEnv({ desired, runtimeConfig, secrets }) {
     SLACK_STRICT_MENTION: "true",
     SLACK_ALLOW_BOTS: "false",
     ...(allowTestProviders()
-      ? { SELLABLE_AGENT_TEST_MODEL_KEY: secrets.modelCodex }
-      : {}),
+      ? {
+          SELLABLE_AGENT_TEST_MODEL_KEY:
+            runtimeConfig.modelCredential.apiKey,
+        }
+      : { OPENAI_API_KEY: runtimeConfig.modelCredential.apiKey }),
     NO_COLOR: "1",
   };
+  delete env.OPENAI_BASE_URL;
+  delete env.OPENROUTER_API_KEY;
   delete env.SLACK_APP_TOKEN;
   delete env.SLACK_BOT_TOKEN;
   return env;
@@ -870,6 +887,7 @@ async function main() {
     runtimeId: RUNTIME_ID,
     audience: AUDIENCE,
     identity,
+    bootSessionId: BOOT_SESSION_ID,
     oidcToken,
   });
   oidcToken = null;
@@ -899,6 +917,7 @@ async function main() {
           runtimeId: RUNTIME_ID,
           audience: AUDIENCE,
           identity,
+          bootSessionId: BOOT_SESSION_ID,
           runtimeGeneration: RUNTIME_GENERATION,
         });
         exchange = renewed.exchange;

package/lib/sellable-agent/fly-customer-model.mjs

@@ -0,0 +1,33 @@
+export const FLY_CUSTOMER_MODEL_PROVIDER = "openai-api";
+export const FLY_CUSTOMER_MODEL_ID = "gpt-5.6-sol";
+export const FLY_CUSTOMER_MODEL_REASONING_EFFORT = "high";
+
+const MODEL_CREDENTIAL_KEYS = ["OPENAI_API_KEY", "authMode"];
+const OPENAI_API_KEY = /^sk-[A-Za-z0-9_-]{16,512}$/;
+
+export function parseFlyCustomerModelCredential(secret) {
+  let value;
+  try {
+    value = JSON.parse(secret);
+  } catch {
+    throw new Error("customer_model_credential_rejected");
+  }
+  if (
+    !value ||
+    typeof value !== "object" ||
+    Array.isArray(value) ||
+    Object.keys(value).sort().join("\0") !==
+      [...MODEL_CREDENTIAL_KEYS].sort().join("\0") ||
+    value.authMode !== "api-key" ||
+    typeof value.OPENAI_API_KEY !== "string" ||
+    !OPENAI_API_KEY.test(value.OPENAI_API_KEY)
+  ) {
+    throw new Error("customer_model_credential_rejected");
+  }
+  return Object.freeze({
+    provider: FLY_CUSTOMER_MODEL_PROVIDER,
+    model: FLY_CUSTOMER_MODEL_ID,
+    reasoningEffort: FLY_CUSTOMER_MODEL_REASONING_EFFORT,
+    apiKey: value.OPENAI_API_KEY,
+  });
+}

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -13,6 +13,7 @@ import {
   writeFileSync,
 } from "node:fs";
 import { basename, dirname, isAbsolute, join, relative } from "node:path";
+import { parseFlyCustomerModelCredential } from "./fly-customer-model.mjs";
 
 const SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
 const SHA256 = /^[a-f0-9]{64}$/;
@@ -150,6 +151,13 @@ function validEnvelope(envelope, contract, expected) {
     envelope.generation !== expected[contract.generation]
   )
     return false;
+  if (contract.purpose === "model-codex-auth") {
+    try {
+      parseFlyCustomerModelCredential(envelope.secret);
+    } catch {
+      return false;
+    }
+  }
   return BINDING_KEYS.every(
     (key) =>
       envelope.binding[key] ===

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -319,6 +319,7 @@ function exactHttpsOrigin(value) {
  *   runtimeId: string;
  *   audience: string;
  *   identity: { publicKeyPem: string; publicKeyHash: string };
+ *   bootSessionId: string;
  *   oidcToken?: string | null;
  *   env?: NodeJS.ProcessEnv;
  *   fetchImpl?: typeof fetch;
@@ -329,6 +330,7 @@ export async function exchangeFlyCustomerIdentity({
   runtimeId,
   audience,
   identity,
+  bootSessionId,
   oidcToken = null,
   env = process.env,
   fetchImpl = fetch,
@@ -340,6 +342,13 @@ export async function exchangeFlyCustomerIdentity({
   if (!identity || !SHA256.test(identity.publicKeyHash ?? "")) {
     throw new Error("fly_runtime_public_key_rejected");
   }
+  if (
+    !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(
+      bootSessionId ?? ""
+    )
+  ) {
+    throw new Error("fly_boot_session_invalid");
+  }
   const workloadToken =
     oidcToken === null
       ? await obtainFlyOidcToken({ audience, env })
@@ -352,7 +361,11 @@ export async function exchangeFlyCustomerIdentity({
         authorization: `${FLY_OIDC_AUTHORIZATION_SCHEME} ${workloadToken}`,
         "content-type": "application/json",
       },
-      body: JSON.stringify({ runtimeId, publicKeyPem: identity.publicKeyPem }),
+      body: JSON.stringify({
+        runtimeId,
+        publicKeyPem: identity.publicKeyPem,
+        bootSessionId,
+      }),
       signal: AbortSignal.timeout(15_000),
     }
   );
@@ -476,6 +489,7 @@ export async function renewFlyCustomerControlSession({
   runtimeId,
   audience,
   identity,
+  bootSessionId,
   runtimeGeneration,
   obtainOidcTokenImpl = obtainFlyOidcToken,
   exchangeFlyCustomerIdentityImpl = exchangeFlyCustomerIdentity,
@@ -484,6 +498,9 @@ export async function renewFlyCustomerControlSession({
   if (
     !Number.isSafeInteger(runtimeGeneration) ||
     runtimeGeneration < 1 ||
+    !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(
+      bootSessionId ?? ""
+    ) ||
     typeof obtainOidcTokenImpl !== "function" ||
     typeof exchangeFlyCustomerIdentityImpl !== "function" ||
     typeof createFlyCustomerControlClientImpl !== "function"
@@ -498,6 +515,7 @@ export async function renewFlyCustomerControlSession({
       runtimeId,
       audience,
       identity,
+      bootSessionId,
       oidcToken,
     });
   } finally {

package/lib/sellable-agent/host-bootstrap.mjs

@@ -39,7 +39,7 @@ const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
 const INSTALLER_PACKAGE =
-  "@sellable/install@0.1.408";
+  "@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835";
 const MCP_PACKAGE = "@sellable/mcp@0.1.644";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1514,7 +1514,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
       pinned.installerPackage !==
-        "@sellable/install@0.1.408" ||
+        "@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.644" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -24,6 +24,11 @@ import {
   resolve,
 } from "node:path";
 import { HERMES_AGENT_BRIDGE_CONTRACT } from "./hermes-bridge.mjs";
+import {
+  FLY_CUSTOMER_MODEL_ID,
+  FLY_CUSTOMER_MODEL_PROVIDER,
+  FLY_CUSTOMER_MODEL_REASONING_EFFORT,
+} from "./fly-customer-model.mjs";
 
 export const PROFILE_MATERIALIZER_PORTS = Object.freeze({
   hostAppSecret: ["resolveHostSecret"],
@@ -188,7 +193,7 @@ function validateDesired(desired) {
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
     desired.installerPackage !==
-      "@sellable/install@0.1.408" ||
+      "@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.644" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||
@@ -2121,7 +2126,9 @@ function nativeSlackCustomerFiles(desired) {
       runtimeInstallAllowed: false,
     },
     model: {
-      authFile: `${runtimeSecretRoot}/auth.json`,
+      provider: FLY_CUSTOMER_MODEL_PROVIDER,
+      default: FLY_CUSTOMER_MODEL_ID,
+      reasoning_effort: FLY_CUSTOMER_MODEL_REASONING_EFFORT,
       generation: desired.modelCredentialGeneration,
     },
     slack: {

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -26,7 +26,7 @@ import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
 export const PINNED_INSTALL_PACKAGE =
-  "@sellable/install@0.1.408";
+  "@sellable/install@0.1.410-wip.phase112015.boot-session.20260724150835";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.644";
 
 export function deriveAgentProfileId(workspaceId, agentId, hostId) {
@@ -613,7 +613,7 @@ function inspectProvisionedProfile({
       manifest.serviceCredentialReference !== serviceCredentialReference ||
       manifest.installerPackage !== PINNED_INSTALL_PACKAGE ||
       manifest.installerVersion !==
-        "0.1.408" ||
+        "0.1.410-wip.phase112015.boot-session.20260724150835" ||
       manifest.mcpPackage !== PINNED_MCP_PACKAGE ||
       manifest.credentialKeyVersion !== credentialKeyVersion ||
       !/^[a-f0-9]{16}$/.test(manifest.credentialFingerprint) ||
@@ -827,7 +827,7 @@ function successReceipt({
     subject: `agent-profile:${observed.profileId}`,
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.408",
+      installVersion: "0.1.410-wip.phase112015.boot-session.20260724150835",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },
@@ -875,7 +875,7 @@ function failure(code, stages, extra = {}, request = null) {
       : "agent-profile:unbound",
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.408",
+      installVersion: "0.1.410-wip.phase112015.boot-session.20260724150835",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.408",
+  "version": "0.1.410-wip.phase112015.boot-session.20260724150835",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {