@sellable/install 0.1.454 → 0.1.456

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.454
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.456
 ARG MCP_PACKAGE=@sellable/mcp@0.1.760-wip.phase143.20260727100513
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-muNXHuRnLTfsnW+MQUvK+p0VBZETDKeevr70iRliXyqE3/SLrZQJLL1laJzMo+qiUs9jMXMHdKOQfQqLiwJvtg==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.454" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.456" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.760-wip.phase143.20260727100513" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.454" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.454' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.456' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.454', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.456', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.454` is
+`@sellable/install@0.1.456` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.454 .
+  --tag sellable-agent-host:0.1.456 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -1161,6 +1161,7 @@ function completionReceipt({
   settings,
   recovery,
   observedLifecycle,
+  memorySnapshot,
 }) {
   const identity = operationIdentity(claim, exchange);
   const routeGenerationDigest = flyRuntimeDigest(
@@ -1224,11 +1225,45 @@ function completionReceipt({
       { code: "NO_BOOT_INSTALL", status: "TRUE" },
     ],
     errorClass: "NONE",
-    auditIds: [`fly-admin-${claim.operation.id}`],
+    auditIds: [
+      `fly-admin-${claim.operation.id}`,
+      `hermes-memory-${
+        memorySnapshot.ok ? memorySnapshot.status : memorySnapshot.code
+      }`.toLowerCase(),
+    ],
     adminRuntimeProof,
   };
 }
 
+async function flushHermesSnapshot({ client, profileId, profileRoot }) {
+  try {
+    markHermesSnapshotDirty(profileRoot);
+    return await reconcileHermesSnapshot({
+      profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+      hermesVersion: "0.19.0",
+      debounceMs: 0,
+      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
+        client.putMemorySnapshot(
+          {
+            archiveDigest,
+            archiveBytes,
+            hermesVersion: "0.19.0",
+            sourceProfileId,
+          },
+          bytes
+        ),
+    });
+  } catch {
+    return {
+      ok: false,
+      status: "PENDING_RETRY",
+      code: "hermes_snapshot_flush_failed",
+    };
+  }
+}
+
 function desiredLifecycleForClaim(claim) {
   switch (claim.operation.action) {
     case "INSTANTIATE":
@@ -1708,16 +1743,43 @@ async function runAdminProduction() {
     exchange,
   });
   const controller = new AbortController();
-  const stop = () => controller.abort();
-  process.once("SIGINT", stop);
-  process.once("SIGTERM", stop);
   let activeGateway = null;
   let activeLaunch = null;
+  let shutdownMemorySnapshot = null;
+  const beginShutdownSnapshot = () => {
+    if (!activeLaunch || shutdownMemorySnapshot) return;
+    const launch = activeLaunch;
+    const gateway = activeGateway;
+    shutdownMemorySnapshot = (async () => {
+      try {
+        await stopNativeGateway(gateway);
+        if (activeGateway === gateway) activeGateway = null;
+        return await flushHermesSnapshot({
+          client,
+          profileId: launch.profile.profile,
+          profileRoot: launch.profile.profileHome,
+        });
+      } catch {
+        return {
+          ok: false,
+          status: "PENDING_RETRY",
+          code: "hermes_snapshot_shutdown_failed",
+        };
+      }
+    })();
+  };
+  const stop = () => {
+    controller.abort();
+    beginShutdownSnapshot();
+  };
+  process.once("SIGINT", stop);
+  process.once("SIGTERM", stop);
   let operationHeartbeat = null;
   let failures = 0;
   while (!controller.signal.aborted) {
     try {
       const claim = await client.claim(60);
+      if (controller.signal.aborted) break;
       if (!claim) {
         if (activeLaunch) {
           await reconcileHermesSnapshot({
@@ -1860,7 +1922,11 @@ async function runAdminProduction() {
         soul: exactSoul(claim),
         slack: nativeSlackProfileInput(claim, installed),
       });
-      markHermesSnapshotDirty(profile.profileHome);
+      const memorySnapshot = await flushHermesSnapshot({
+        client,
+        profileId: profile.profile,
+        profileRoot: profile.profileHome,
+      });
       const settings = settingsProof(
         imported.receipt.generationRoot,
         imported.receipt.settingsDigest
@@ -1890,6 +1956,7 @@ async function runAdminProduction() {
         settings,
         recovery,
         observedLifecycle: desiredLifecycle,
+        memorySnapshot,
       });
       operationHeartbeat.assertHealthy();
       const candidateLaunch =
@@ -1944,6 +2011,16 @@ async function runAdminProduction() {
       await sleep(Math.min(30_000, 500 * 2 ** failures));
     }
   }
+  beginShutdownSnapshot();
+  const finalMemorySnapshot = await shutdownMemorySnapshot;
+  if (finalMemorySnapshot?.ok === false) {
+    process.stderr.write(
+      `${JSON.stringify({
+        ok: false,
+        code: finalMemorySnapshot.code,
+      })}\n`
+    );
+  }
   await stopNativeGateway(activeGateway);
   clearRuntimeSecrets();
 }

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -5,7 +5,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.789-wip.phase159.20260729223403
 ARG MCP_INTEGRITY=sha512-KoheQcAQe/c8xzhF3R1ls6nQd11bcQqM3ykOUlzzNX5kykO7rO8RR2KsOvomwMv2Nn5VzvZZx6rGrle/6woKfw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.454
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.456
 ARG HERMES_VERSION=0.19.0
 ARG MCP_TRUST_ROOT_B64
 ARG TIRITH_VERSION=0.3.3

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -68,7 +68,7 @@ const RUNTIME_GENERATION = Number(
 );
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.19.0";
-const INSTALLER_PACKAGE = process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.454";
+const INSTALLER_PACKAGE = process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.456";
 const MCP_PACKAGE = process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.789-wip.phase159.20260729223403";
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
@@ -874,7 +874,13 @@ async function proveApplication({
   };
 }
 
-function completionReceipt({ claim, exchange, desired, proof }) {
+function completionReceipt({
+  claim,
+  exchange,
+  desired,
+  proof,
+  memorySnapshot,
+}) {
   const identity = operationIdentity(claim, exchange);
   const observedLifecycle =
     claim.operation.action === "INSTANTIATE" ? "OFF" : "ON";
@@ -916,10 +922,44 @@ function completionReceipt({ claim, exchange, desired, proof }) {
       { code: "DEDICATED_SLACK_APP", status: "TRUE" },
     ],
     errorClass: "NONE",
-    auditIds: [`fly-${claim.operation.id}`],
+    auditIds: [
+      `fly-${claim.operation.id}`,
+      `hermes-memory-${
+        memorySnapshot.ok ? memorySnapshot.status : memorySnapshot.code
+      }`.toLowerCase(),
+    ],
   };
 }
 
+async function flushHermesSnapshot({ client, profileId, profileRoot }) {
+  try {
+    markHermesSnapshotDirty(profileRoot);
+    return await reconcileHermesSnapshot({
+      profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+      hermesVersion: HERMES_VERSION,
+      debounceMs: 0,
+      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
+        client.putMemorySnapshot(
+          {
+            archiveDigest,
+            archiveBytes,
+            hermesVersion: HERMES_VERSION,
+            sourceProfileId,
+          },
+          bytes
+        ),
+    });
+  } catch {
+    return {
+      ok: false,
+      status: "PENDING_RETRY",
+      code: "hermes_snapshot_flush_failed",
+    };
+  }
+}
+
 async function processOperation({ claim, exchange, client }) {
   const trustRootPem = readFileSync(TRUST_ROOT, "utf8");
   const { desired, toolInclude } = compileDesired(claim, trustRootPem);
@@ -959,7 +999,11 @@ async function processOperation({ claim, exchange, client }) {
     hermesCli: HERMES,
   });
   if (!memoryCron.ok) throw new Error(memoryCron.code);
-  markHermesSnapshotDirty(profileRoot);
+  const memorySnapshot = await flushHermesSnapshot({
+    client,
+    profileId: desired.profileId,
+    profileRoot,
+  });
   const prove =
     claim.operation.action === "INSTANTIATE"
       ? proveProvisionedApplication
@@ -970,7 +1014,13 @@ async function processOperation({ claim, exchange, client }) {
     secrets,
     profileDigest: pristineProfile.manifest.profileDigest,
   });
-  const receipt = completionReceipt({ claim, exchange, desired, proof });
+  const receipt = completionReceipt({
+    claim,
+    exchange,
+    desired,
+    proof,
+    memorySnapshot,
+  });
   const completed = await client.complete(receipt);
   if (completed?.accepted !== true)
     throw new Error("customer_completion_rejected");
@@ -1055,11 +1105,36 @@ async function main() {
     exchange,
   });
   const controller = new AbortController();
-  const stop = () => controller.abort();
+  let activeRuntime = null;
+  let shutdownMemorySnapshot = null;
+  const beginShutdownSnapshot = () => {
+    if (!activeRuntime || shutdownMemorySnapshot) return;
+    const runtime = activeRuntime;
+    shutdownMemorySnapshot = (async () => {
+      try {
+        await stopNativeGateway(runtime.gateway);
+        runtime.gateway = null;
+        return await flushHermesSnapshot({
+          client,
+          profileId: runtime.desired.profileId,
+          profileRoot: runtime.profileRoot,
+        });
+      } catch {
+        return {
+          ok: false,
+          status: "PENDING_RETRY",
+          code: "hermes_snapshot_shutdown_failed",
+        };
+      }
+    })();
+  };
+  const stop = () => {
+    controller.abort();
+    beginShutdownSnapshot();
+  };
   process.once("SIGINT", stop);
   process.once("SIGTERM", stop);
   let failures = 0;
-  let activeRuntime = null;
   while (!controller.signal.aborted) {
     try {
       let claim;
@@ -1087,6 +1162,7 @@ async function main() {
         );
         continue;
       }
+      if (controller.signal.aborted) break;
       if (!claim) {
         if (activeRuntime) {
           await reconcileHermesSnapshot({
@@ -1135,6 +1211,16 @@ async function main() {
       await sleep(Math.min(30_000, 500 * 2 ** failures));
     }
   }
+  beginShutdownSnapshot();
+  const finalMemorySnapshot = await shutdownMemorySnapshot;
+  if (finalMemorySnapshot?.ok === false) {
+    process.stderr.write(
+      `${JSON.stringify({
+        ok: false,
+        code: finalMemorySnapshot.code,
+      })}\n`
+    );
+  }
   await stopNativeGateway(activeRuntime?.gateway);
   if (activeRuntime?.desired.profileId) {
     clearCustomerRuntimeSecrets({

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -700,14 +700,25 @@ export function createFlyCustomerControlClient({
       },
       "memory-snapshot-put"
     );
-    if (!signedUrlAccepted(begin?.signedUrl)) {
+    if (
+      !signedUrlAccepted(begin?.signedUrl) ||
+      typeof begin?.publishableKey !== "string" ||
+      begin.publishableKey.length < 16 ||
+      begin.publishableKey.length > 4096 ||
+      /\s/.test(begin.publishableKey)
+    ) {
       throw new WorkerControlResponseError(
         "memory_snapshot_upload_url_rejected"
       );
     }
     const uploaded = await fetchImpl(begin.signedUrl, {
       method: "PUT",
-      headers: { "content-type": "application/zip" },
+      headers: {
+        apikey: begin.publishableKey,
+        "cache-control": "max-age=3600",
+        "content-type": "application/zip",
+        "x-upsert": "true",
+      },
       body: archive,
       signal: AbortSignal.timeout(120_000),
     });

package/lib/sellable-agent/host-bootstrap.mjs

@@ -39,7 +39,7 @@ const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
 const INSTALLER_PACKAGE =
-  "@sellable/install@0.1.454";
+  "@sellable/install@0.1.456";
 const MCP_PACKAGE = "@sellable/mcp@0.1.760-wip.phase143.20260727100513";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1541,7 +1541,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
       pinned.installerPackage !==
-        "@sellable/install@0.1.454" ||
+        "@sellable/install@0.1.456" ||
       pinned.mcpPackage !==
         "@sellable/mcp@0.1.760-wip.phase143.20260727100513" ||
       !Array.isArray(policy.toolInclude) ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -198,7 +198,7 @@ function validateDesired(desired) {
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
     desired.installerPackage !==
-      "@sellable/install@0.1.454" ||
+      "@sellable/install@0.1.456" ||
     desired.mcpPackage !==
       "@sellable/mcp@0.1.760-wip.phase143.20260727100513" ||
     !Array.isArray(desired.toolInclude) ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -26,7 +26,7 @@ import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
 export const PINNED_INSTALL_PACKAGE =
-  "@sellable/install@0.1.454";
+  "@sellable/install@0.1.456";
 export const PINNED_MCP_PACKAGE =
   "@sellable/mcp@0.1.760-wip.phase143.20260727100513";
 
@@ -614,7 +614,7 @@ function inspectProvisionedProfile({
       manifest.serviceCredentialReference !== serviceCredentialReference ||
       manifest.installerPackage !== PINNED_INSTALL_PACKAGE ||
       manifest.installerVersion !==
-        "0.1.454" ||
+        "0.1.456" ||
       manifest.mcpPackage !== PINNED_MCP_PACKAGE ||
       manifest.credentialKeyVersion !== credentialKeyVersion ||
       !/^[a-f0-9]{16}$/.test(manifest.credentialFingerprint) ||
@@ -828,7 +828,7 @@ function successReceipt({
     subject: `agent-profile:${observed.profileId}`,
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.454",
+      installVersion: "0.1.456",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },
@@ -876,7 +876,7 @@ function failure(code, stages, extra = {}, request = null) {
       : "agent-profile:unbound",
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.454",
+      installVersion: "0.1.456",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.454",
+  "version": "0.1.456",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {