@sellable/install 0.1.458 → 0.1.459

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.458
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.459
 ARG MCP_PACKAGE=@sellable/mcp@0.1.760-wip.phase143.20260727100513
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-muNXHuRnLTfsnW+MQUvK+p0VBZETDKeevr70iRliXyqE3/SLrZQJLL1laJzMo+qiUs9jMXMHdKOQfQqLiwJvtg==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.458" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.459" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.760-wip.phase143.20260727100513" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.458" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.458' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.459' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.458', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.459', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.458` is
+`@sellable/install@0.1.459` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.458 .
+  --tag sellable-agent-host:0.1.459 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -5,7 +5,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.789-wip.phase159.20260729223403
 ARG MCP_INTEGRITY=sha512-KoheQcAQe/c8xzhF3R1ls6nQd11bcQqM3ykOUlzzNX5kykO7rO8RR2KsOvomwMv2Nn5VzvZZx6rGrle/6woKfw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.458
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.459
 ARG HERMES_VERSION=0.19.0
 ARG MCP_TRUST_ROOT_B64
 ARG TIRITH_VERSION=0.3.3

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -68,8 +68,11 @@ const RUNTIME_GENERATION = Number(
 );
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.19.0";
-const INSTALLER_PACKAGE = process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.458";
-const MCP_PACKAGE = process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.789-wip.phase159.20260729223403";
+const INSTALLER_PACKAGE =
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.459";
+const MCP_PACKAGE =
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ??
+  "@sellable/mcp@0.1.789-wip.phase159.20260729223403";
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -271,6 +274,42 @@ function operationIdentity(claim, exchange) {
   };
 }
 
+function startOperationHeartbeat({ claim, exchange, client }) {
+  const identity = operationIdentity(claim, exchange);
+  let stopped = false;
+  let failure = null;
+  let inFlight = Promise.resolve();
+  const beat = () => {
+    if (stopped) return;
+    inFlight = client
+      .heartbeat({ ...identity, leaseSeconds: 60 })
+      .then((value) => {
+        if (value?.renewed !== true) {
+          throw new Error("customer_runtime_heartbeat_rejected");
+        }
+      })
+      .catch((error) => {
+        failure =
+          error instanceof Error
+            ? error
+            : new Error("customer_runtime_heartbeat_failed");
+      });
+  };
+  const timer = setInterval(beat, 20_000);
+  beat();
+  return {
+    assertHealthy() {
+      if (failure) throw failure;
+    },
+    async stop() {
+      stopped = true;
+      clearInterval(timer);
+      await inFlight;
+      if (failure) throw failure;
+    },
+  };
+}
+
 async function consumeSecrets({ claim, exchange, client, desired }) {
   const identity = operationIdentity(claim, exchange);
   const consume = async (descriptor) => {
@@ -1134,6 +1173,7 @@ async function main() {
   };
   process.once("SIGINT", stop);
   process.once("SIGTERM", stop);
+  let operationHeartbeat = null;
   let failures = 0;
   while (!controller.signal.aborted) {
     try {
@@ -1196,10 +1236,25 @@ async function main() {
         await sleep(1_000);
         continue;
       }
+      operationHeartbeat = startOperationHeartbeat({
+        claim,
+        exchange,
+        client,
+      });
       await stopNativeGateway(activeRuntime?.gateway);
       activeRuntime = await processOperation({ claim, exchange, client });
+      operationHeartbeat.assertHealthy();
+      await operationHeartbeat.stop();
+      operationHeartbeat = null;
       failures = 0;
     } catch (error) {
+      try {
+        await operationHeartbeat?.stop();
+      } catch (heartbeatError) {
+        error = heartbeatError;
+      } finally {
+        operationHeartbeat = null;
+      }
       failures = Math.min(failures + 1, 6);
       process.stderr.write(
         `${JSON.stringify({

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -19,6 +19,7 @@ import {
 } from "node:fs";
 import { isAbsolute, join } from "node:path";
 import { promisify } from "node:util";
+import { Upload as TusUpload } from "tus-js-client";
 
 const execFileAsync = promisify(execFile);
 const SHA256 = /^[a-f0-9]{64}$/;
@@ -520,6 +521,141 @@ class WorkerControlResponseError extends Error {
   }
 }
 
+const TUS_CHUNK_BYTES = 6 * 1024 * 1024;
+const TUS_TOKEN_REFRESH_MS = 45_000;
+const TUS_RETRY_DELAYS_MS = [0, 3_000, 5_000, 10_000, 20_000];
+
+function tusUploadAccepted(value) {
+  try {
+    const endpoint = new URL(value?.resumableUrl);
+    return (
+      endpoint.protocol === "https:" &&
+      endpoint.username === "" &&
+      endpoint.password === "" &&
+      endpoint.search === "" &&
+      endpoint.hash === "" &&
+      /^[a-z0-9-]+\.storage\.supabase\.co$/.test(endpoint.hostname) &&
+      endpoint.pathname === "/storage/v1/upload/resumable/sign" &&
+      typeof value?.signedUploadToken === "string" &&
+      value.signedUploadToken.length >= 32 &&
+      value.signedUploadToken.length <= 16_384 &&
+      !/\s/.test(value.signedUploadToken) &&
+      value.bucketName === "agent-hermes-backups-v1" &&
+      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:customer|admin)\/archives\/[a-f0-9]{64}\.zip$/.test(
+        value?.objectName ?? ""
+      )
+    );
+  } catch {
+    return false;
+  }
+}
+
+function tusFailureCode(error) {
+  const response = error?.originalResponse;
+  const status = Number(response?.getStatus?.());
+  if (!Number.isSafeInteger(status) || status < 100 || status > 599) {
+    return "hermes_snapshot_upload_failed";
+  }
+  let detail = "";
+  try {
+    detail = String(response.getBody?.() ?? "")
+      .slice(0, 4_096)
+      .toLowerCase();
+  } catch {}
+  const category = /mime|content.?type/.test(detail)
+    ? "mime"
+    : /row.?level|policy|\brls\b/.test(detail)
+      ? "policy"
+      : /payload|too.?large|file.?size|size.?limit|maximum size/.test(detail)
+        ? "size"
+        : /bucket/.test(detail)
+          ? "bucket"
+          : /upsert|duplicate|already.?exists/.test(detail)
+            ? "upsert"
+            : /token|signature|signed|(?:^|\W)exp(?:\W|$)/.test(detail)
+              ? "token"
+              : /api.?key|jwt|authorization|unauthorized|forbidden/.test(detail)
+                ? "auth"
+                : "other";
+  return `hermes_snapshot_upload_failed_http_${status}_${category}`;
+}
+
+export function uploadSupabaseSignedTus({
+  archive,
+  initial,
+  refresh,
+  now = Date.now,
+  UploadImpl = TusUpload,
+}) {
+  if (
+    !Buffer.isBuffer(archive) ||
+    archive.byteLength < 1 ||
+    !tusUploadAccepted(initial) ||
+    typeof refresh !== "function" ||
+    typeof now !== "function" ||
+    typeof UploadImpl !== "function"
+  ) {
+    return Promise.reject(
+      new WorkerControlResponseError("memory_snapshot_upload_url_rejected")
+    );
+  }
+  const identity = {
+    resumableUrl: initial.resumableUrl,
+    bucketName: initial.bucketName,
+    objectName: initial.objectName,
+  };
+  let token = initial.signedUploadToken;
+  let issuedAt = now();
+  return new Promise((resolve, reject) => {
+    let upload;
+    const fail = (error) => {
+      reject(new WorkerControlResponseError(tusFailureCode(error)));
+    };
+    try {
+      upload = new UploadImpl(archive, {
+        endpoint: identity.resumableUrl,
+        retryDelays: TUS_RETRY_DELAYS_MS,
+        headers: { "x-signature": token },
+        uploadDataDuringCreation: true,
+        storeFingerprintForResuming: false,
+        removeFingerprintOnSuccess: true,
+        metadata: {
+          bucketName: identity.bucketName,
+          objectName: identity.objectName,
+          contentType: "application/zip",
+          cacheControl: "3600",
+        },
+        chunkSize: TUS_CHUNK_BYTES,
+        async onBeforeRequest(request) {
+          if (now() - issuedAt >= TUS_TOKEN_REFRESH_MS) {
+            const next = await refresh();
+            if (
+              !tusUploadAccepted(next) ||
+              next.resumableUrl !== identity.resumableUrl ||
+              next.bucketName !== identity.bucketName ||
+              next.objectName !== identity.objectName
+            ) {
+              throw new WorkerControlResponseError(
+                "memory_snapshot_upload_url_rejected"
+              );
+            }
+            token = next.signedUploadToken;
+            issuedAt = now();
+          }
+          request.setHeader("x-signature", token);
+        },
+        onError: fail,
+        onSuccess() {
+          resolve({ uploadUrl: upload.url });
+        },
+      });
+      upload.start();
+    } catch (error) {
+      fail(error);
+    }
+  });
+}
+
 function workerControlVerbCode(verb) {
   return String(verb).replaceAll("-", "_");
 }
@@ -594,6 +730,7 @@ export function createFlyCustomerControlClient({
   exchange,
   fetchImpl = fetch,
   retryDelayMs = 150,
+  tusUploadImpl = uploadSupabaseSignedTus,
 }) {
   const endpoint = exactHttpsOrigin(origin);
   if (
@@ -682,30 +819,6 @@ export function createFlyCustomerControlClient({
       return false;
     }
   };
-  const uploadFailureCode = async (response) => {
-    let detail = "";
-    try {
-      detail = (await response.text()).slice(0, 4_096).toLowerCase();
-    } catch {}
-    const category = /mime|content.?type/.test(detail)
-      ? "mime"
-      : /row.?level|policy|\brls\b/.test(detail)
-        ? "policy"
-        : /payload|too.?large|file.?size|size.?limit/.test(detail)
-          ? "size"
-          : /bucket/.test(detail)
-            ? "bucket"
-            : /upsert|duplicate|already.?exists/.test(detail)
-              ? "upsert"
-              : /token|signature|signed/.test(detail)
-                ? "token"
-                : /api.?key|jwt|authorization|unauthorized|forbidden/.test(
-                      detail
-                    )
-                  ? "auth"
-                  : "other";
-    return `hermes_snapshot_upload_failed_http_${response.status}_${category}`;
-  };
   const putMemorySnapshot = async (metadata, archive) => {
     if (
       !metadataAccepted(metadata) ||
@@ -716,41 +829,32 @@ export function createFlyCustomerControlClient({
     ) {
       throw new WorkerControlResponseError("memory_snapshot_upload_rejected");
     }
-    const begin = await memorySnapshotControl(
-      "PUT",
-      {
-        schemaVersion: "sellable-hermes-snapshot-upload/v1",
-        ...metadata,
-      },
-      "memory-snapshot-put"
-    );
-    if (
-      !signedUrlAccepted(begin?.signedUrl) ||
-      typeof begin?.publishableKey !== "string" ||
-      begin.publishableKey.length < 16 ||
-      begin.publishableKey.length > 4096 ||
-      /\s/.test(begin.publishableKey)
-    ) {
+    const beginUpload = async () => {
+      const value = await memorySnapshotControl(
+        "PUT",
+        {
+          schemaVersion: "sellable-hermes-snapshot-upload/v1",
+          ...metadata,
+        },
+        "memory-snapshot-put"
+      );
+      if (
+        !tusUploadAccepted(value) ||
+        !value.objectName.endsWith(`/${metadata.archiveDigest}.zip`)
+      ) {
+        throw new WorkerControlResponseError(
+          "memory_snapshot_upload_url_rejected"
+        );
+      }
+      return value;
+    };
+    const begin = await beginUpload();
+    if (typeof tusUploadImpl !== "function") {
       throw new WorkerControlResponseError(
         "memory_snapshot_upload_url_rejected"
       );
     }
-    const uploaded = await fetchImpl(begin.signedUrl, {
-      method: "PUT",
-      headers: {
-        apikey: begin.publishableKey,
-        authorization: `Bearer ${begin.publishableKey}`,
-        "cache-control": "max-age=3600",
-        "content-type": "application/zip",
-        "x-upsert": "true",
-      },
-      body: archive,
-      signal: AbortSignal.timeout(120_000),
-    });
-    if (!uploaded.ok) {
-      throw new WorkerControlResponseError(await uploadFailureCode(uploaded));
-    }
-    await uploaded.arrayBuffer();
+    await tusUploadImpl({ archive, initial: begin, refresh: beginUpload });
     const committed = await memorySnapshotControl(
       "POST",
       {

package/lib/sellable-agent/host-bootstrap.mjs

@@ -39,7 +39,7 @@ const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
 const INSTALLER_PACKAGE =
-  "@sellable/install@0.1.458";
+  "@sellable/install@0.1.459";
 const MCP_PACKAGE = "@sellable/mcp@0.1.760-wip.phase143.20260727100513";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1541,7 +1541,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
       pinned.installerPackage !==
-        "@sellable/install@0.1.458" ||
+        "@sellable/install@0.1.459" ||
       pinned.mcpPackage !==
         "@sellable/mcp@0.1.760-wip.phase143.20260727100513" ||
       !Array.isArray(policy.toolInclude) ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -198,7 +198,7 @@ function validateDesired(desired) {
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
     desired.installerPackage !==
-      "@sellable/install@0.1.458" ||
+      "@sellable/install@0.1.459" ||
     desired.mcpPackage !==
       "@sellable/mcp@0.1.760-wip.phase143.20260727100513" ||
     !Array.isArray(desired.toolInclude) ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -26,7 +26,7 @@ import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
 export const PINNED_INSTALL_PACKAGE =
-  "@sellable/install@0.1.458";
+  "@sellable/install@0.1.459";
 export const PINNED_MCP_PACKAGE =
   "@sellable/mcp@0.1.760-wip.phase143.20260727100513";
 
@@ -614,7 +614,7 @@ function inspectProvisionedProfile({
       manifest.serviceCredentialReference !== serviceCredentialReference ||
       manifest.installerPackage !== PINNED_INSTALL_PACKAGE ||
       manifest.installerVersion !==
-        "0.1.458" ||
+        "0.1.459" ||
       manifest.mcpPackage !== PINNED_MCP_PACKAGE ||
       manifest.credentialKeyVersion !== credentialKeyVersion ||
       !/^[a-f0-9]{16}$/.test(manifest.credentialFingerprint) ||
@@ -828,7 +828,7 @@ function successReceipt({
     subject: `agent-profile:${observed.profileId}`,
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.458",
+      installVersion: "0.1.459",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },
@@ -876,7 +876,7 @@ function failure(code, stages, extra = {}, request = null) {
       : "agent-profile:unbound",
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.458",
+      installVersion: "0.1.459",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.458",
+  "version": "0.1.459",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {
@@ -29,6 +29,7 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.25.2",
+    "tus-js-client": "^4.3.1",
     "yaml": "^2.8.1"
   },
   "keywords": [