@sellable/install 0.1.472 → 0.1.473

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -1134,15 +1134,22 @@ function adminAgentServiceEnvironment(claim) {
   ) {
     throw new Error("admin_runtime_agent_service_environment_rejected");
   }
-  return buildAdminAgentServiceEnvironment({
-    agentKind: claim.agentKind,
-    workspaceId: operation.workspaceId,
-    agentId: operation.agentId,
-    serviceCredentialGeneration: service.credentialGeneration,
-    policyHash: service.policyHash,
-    selectedChannelIds: [
-      ...new Set(bindings.map((binding) => binding.channelId)),
-    ].sort(),
+  return Object.freeze({
+    ...buildAdminAgentServiceEnvironment({
+      agentKind: claim.agentKind,
+      workspaceId: operation.workspaceId,
+      agentId: operation.agentId,
+      serviceCredentialGeneration: service.credentialGeneration,
+      policyHash: service.policyHash,
+      selectedChannelIds: [
+        ...new Set(bindings.map((binding) => binding.channelId)),
+      ].sort(),
+    }),
+    // Admin intentionally has no customer workspace lock. This explicit kind
+    // lets Product MCP distinguish that omission from a partially materialized
+    // customer profile while the signed Agent service context remains the home
+    // workspace authority.
+    SELLABLE_AGENT_SERVER_AUTHENTICATED_KIND: "ADMIN",
   });
 }
 
@@ -1795,8 +1802,13 @@ async function startNativeGateway({ profile, claim }) {
     env: {
       ...adminToolEnv(adminHomeLayout(profile.profileHome)),
       ...adminAgentServiceEnvironment(claim),
-      HOME: SECRET_ROOT,
+      // Keep model/tool credentials in the root-owned runtime directory, but
+      // place ordinary terminal output under the durable profile. Hermes
+      // denies /run as an attachment source, so using SECRET_ROOT as HOME made
+      // valid MEDIA directives degrade into text-only Slack messages.
+      HOME: profile.profileHome,
       HERMES_HOME: DATA_ROOT,
+      HERMES_WRITE_SAFE_ROOT: DATA_ROOT,
       SELLABLE_HERMES_PROFILE_ID: profile.profile,
       CODEX_HOME: SECRET_ROOT,
       NO_COLOR: "1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.472",
+  "version": "0.1.473",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {