@sellable/install 0.1.523-wip.phase166.20260806003733 → 0.1.526

package/container/Dockerfile

@@ -3,13 +3,13 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.523-wip.phase166.20260806003733
-ARG MCP_PACKAGE=@sellable/mcp@0.1.830-wip.phase166.20260806003733
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.526
+ARG MCP_PACKAGE=@sellable/mcp@0.1.760-wip.phase143.20260727100513
 ARG INSTALLER_INTEGRITY
-ARG MCP_INTEGRITY=sha512-F10IHQTvgRYPlbGRx8j3FRdUP4rR9cgrigN8bkjhB+6akE63iDXcCbYNmG7b2ShsPlMhxhgvXDa/A4//CoIRWQ==
+ARG MCP_INTEGRITY=sha512-muNXHuRnLTfsnW+MQUvK+p0VBZETDKeevr70iRliXyqE3/SLrZQJLL1laJzMo+qiUs9jMXMHdKOQfQqLiwJvtg==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.523-wip.phase166.20260806003733" \
-    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.830-wip.phase166.20260806003733" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.526" \
+    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.760-wip.phase143.20260727100513" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.523-wip.phase166.202608
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.523-wip.phase166.20260806003733' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.830-wip.phase166.20260806003733') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.526' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.760-wip.phase143.20260727100513') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.523-wip.phase166.20260806003733', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.830-wip.phase166.20260806003733', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.526', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.760-wip.phase143.20260727100513', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.523-wip.phase166.20260806003733` is
+`@sellable/install@0.1.526` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.523-wip.phase166.20260806003733 .
+  --tag sellable-agent-host:0.1.526 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/external-runtime-builder.mjs

@@ -28,7 +28,7 @@ import {
 
 const MANIFEST_VERSION = "sellable-agent-external-runtime-closure/v1";
 const MCP_PACKAGE = "@sellable/mcp";
-const MCP_VERSION = "0.1.830-wip.phase166.20260806003733";
+const MCP_VERSION = "0.1.760-wip.phase143.20260727100513";
 const SAFE_COMPONENT = /^[A-Za-z0-9@._+-]+$/;
 const HERMES_EXCLUDES = new Set([".git", ".playwright", "node_modules"]);
 

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -1,21 +1,20 @@
-# syntax=docker/dockerfile:1.7
 ARG HERMES_IMAGE=nousresearch/hermes-agent@sha256:c0cab4e3711bcb27a312be1b3776254fc06fd50d5f7a6b8017915fc7171cb39e
 FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG MCP_PACKAGE=@sellable/mcp@0.1.830-wip.phase166.20260806003733
-ARG MCP_INTEGRITY=sha512-F10IHQTvgRYPlbGRx8j3FRdUP4rR9cgrigN8bkjhB+6akE63iDXcCbYNmG7b2ShsPlMhxhgvXDa/A4//CoIRWQ==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.523-wip.phase166.20260806003733
+ARG MCP_PACKAGE=@sellable/mcp@0.1.811-wip.phase169.20260805145230
+ARG MCP_INTEGRITY=sha512-ygNtAiYCdMM3dlTZHMiaAo5aasw4cuhphkxHSvHzF4T9FRFgR3BQodKCsqYz7EfN0nHrDUnsrzcjWedYFQUT0A==
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.526
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG HERMES_VERSION=0.20.0
+ARG MCP_TRUST_ROOT_B64
 ARG TIRITH_VERSION=0.3.3
 ARG PLAYWRIGHT_VERSION=1.62.1
 ARG PLAYWRIGHT_BROWSER_REVISION=1234
 ARG TIRITH_ARCHIVE_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2
 
-RUN --mount=type=secret,id=mcp_trust_root,required=true \
-    test -s /run/secrets/mcp_trust_root \
+RUN test -n "${MCP_TRUST_ROOT_B64}" \
     && mkdir -p /usr/local/lib/sellable-agent/external-runtime/mcp \
                 /usr/local/share/sellable-agent \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -29,8 +28,9 @@ RUN --mount=type=secret,id=mcp_trust_root,required=true \
     && ln -s ../node_modules/.bin/sellable-mcp \
          /usr/local/lib/sellable-agent/external-runtime/mcp/bin/sellable-mcp \
     && test -x /usr/local/lib/sellable-agent/external-runtime/mcp/bin/sellable-mcp \
-    && install -o root -g root -m 0444 /run/secrets/mcp_trust_root \
-         /usr/local/share/sellable-agent/mcp-turn-trust-root.pem \
+    && printf '%s' "${MCP_TRUST_ROOT_B64}" | base64 -d \
+         > /usr/local/share/sellable-agent/mcp-turn-trust-root.pem \
+    && chmod 0444 /usr/local/share/sellable-agent/mcp-turn-trust-root.pem \
     && npm install --prefix /usr/local/lib/sellable-agent/external-runtime/playwright \
          --omit=dev --ignore-scripts --no-audit --no-fund "playwright@${PLAYWRIGHT_VERSION}" \
     && ln -s /usr/local/lib/sellable-agent/external-runtime/playwright/node_modules/.bin/playwright \
@@ -63,18 +63,14 @@ COPY mcp-context-proxy.mjs fly-customer-model.mjs fly-customer-worker.mjs profil
   /usr/local/lib/sellable-agent/
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
-COPY fly-customer-image/model-auth-store.mjs /usr/local/lib/sellable-agent/fly-customer-image/model-auth-store.mjs
-COPY fly-customer-image/hermes-runs-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs
-COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs
 COPY fly-customer-image/customer-runtime.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs
+COPY fly-customer-image/model-auth-store.mjs /usr/local/lib/sellable-agent/fly-customer-image/model-auth-store.mjs
 COPY fly-customer-image/rootfs/ /
 
 RUN node --input-type=module -e \
       'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
-    && node --input-type=module -e \
-      'await import("/usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs");' \
     && printf '%s\n' \
       '#!/usr/bin/env node' \
       'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge.mjs").then(({ runSoulBridgeCli }) => runSoulBridgeCli());' \
@@ -97,7 +93,6 @@ RUN node --input-type=module -e \
 
 LABEL io.sellable.runtime.kind="customer" \
       io.sellable.runtime.listener="native-dedicated-slack" \
-      io.sellable.runtime.api-server="authenticated-loopback-127.0.0.1:8642" \
       io.sellable.runtime.installers="build-only"
 
 ENV HOME=/opt/data \