@sellable/install 0.1.578-wip.phase170.20260809.2 → 0.1.578

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.578-wip.phase170.20260809.2
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.577
 ARG MCP_PACKAGE=@sellable/mcp@0.1.858
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-8yiUhwMbBk/KxZAXGXTsEHiN8XeB/qCqNgfApew0rhViJqiLlDN8oS67pZW5iB5gdmeuv4du0jx9Lhq/blr9hQ==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.578-wip.phase170.20260809.2" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.577" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.858" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.578-wip.phase170.202608
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.578-wip.phase170.20260809.2' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.858') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.577' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.858') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.578-wip.phase170.20260809.2', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.858', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.577', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.858', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.578-wip.phase170.20260809.2` is
+`@sellable/install@0.1.577` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.578-wip.phase170.20260809.2 .
+  --tag sellable-agent-host:0.1.577 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -86,8 +86,6 @@ COPY hermes-bridge.mjs /usr/local/lib/sellable-agent/hermes-bridge.mjs
 COPY hermes-memory-snapshot.mjs /usr/local/lib/sellable-agent/hermes-memory-snapshot.mjs
 COPY fly-soul-bridge.mjs /usr/local/lib/sellable-agent/fly-soul-bridge.mjs
 COPY fly-soul-bridge-exec.mjs /usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs
-COPY fly-skills-bridge.mjs /usr/local/lib/sellable-agent/fly-skills-bridge.mjs
-COPY fly-skills-bridge-exec.mjs /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs
 COPY soul-artifact-validator.mjs /usr/local/lib/sellable-agent/soul-artifact-validator.mjs
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
@@ -109,18 +107,9 @@ RUN node --input-type=module -e \
       'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs").then(({ runFlySoulBridgeExecCli }) => runFlySoulBridgeExecCli());' \
       > /usr/local/bin/sellable-soul-bridge-exec \
     && chmod 0555 /usr/local/bin/sellable-soul-bridge-exec \
-    && printf '%s\n' \
-      '#!/usr/bin/env node' \
-      'import("file:///usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs").then(({ runFlySkillsBridgeExecCli }) => runFlySkillsBridgeExecCli());' \
-      > /usr/local/bin/sellable-skills-bridge-exec \
-    && chmod 0555 /usr/local/bin/sellable-skills-bridge-exec \
     && sha256sum /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
       > /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-    && sha256sum /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
-      > /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-      /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 \
       /usr/local/lib/sellable-agent/admin-runtime/admin-runtime.mjs \
@@ -133,8 +122,6 @@ RUN node --input-type=module -e \
       /usr/local/lib/sellable-agent/hermes-memory-snapshot.mjs \
       /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
       /usr/local/lib/sellable-agent/soul-artifact-validator.mjs \
       /opt/sellable/bin/hermes-memory-dirty \
       /opt/sellable/bin/hermes-endpoint-cron \

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -622,78 +622,6 @@ function installAdminModelConfig(profileRoot, modelConfig) {
   }
 }
 
-const ADMIN_LIVE_SKILLS_CONFIG_KEYS = Object.freeze([
-  "disabled",
-  "platform_disabled",
-]);
-
-function adminPreservedSkillsIdentity(profileRoot) {
-  if (!existsSync(profileRoot)) return null;
-  const entries = [];
-  const skillsRoot = join(profileRoot, "skills");
-  const walk = (directory, relativePath = "") => {
-    for (const name of readdirSync(directory).sort()) {
-      const nextRelative = relativePath ? `${relativePath}/${name}` : name;
-      if (nextRelative === "sellable") continue;
-      const path = join(directory, name);
-      const stat = lstatSync(path);
-      if (stat.isSymbolicLink()) {
-        throw new Error("admin_runtime_live_skills_symlink_rejected");
-      }
-      if (stat.isDirectory()) walk(path, nextRelative);
-      else if (stat.isFile()) {
-        entries.push({
-          path: nextRelative,
-          sha256: sha256(readFileSync(path)),
-        });
-      } else throw new Error("admin_runtime_live_skills_entry_rejected");
-    }
-  };
-  if (existsSync(skillsRoot)) walk(skillsRoot);
-  const configPath = join(profileRoot, "config.yaml");
-  let disabled = {};
-  if (existsSync(configPath)) {
-    const document = parseDocument(readFileSync(configPath, "utf8"));
-    if (document.errors.length > 0) {
-      throw new Error("admin_runtime_live_skills_config_rejected");
-    }
-    const skills = document.toJS()?.skills;
-    if (skills && typeof skills === "object" && !Array.isArray(skills)) {
-      disabled = Object.fromEntries(
-        ADMIN_LIVE_SKILLS_CONFIG_KEYS.filter((key) =>
-          Object.prototype.hasOwnProperty.call(skills, key)
-        ).map((key) => [key, skills[key]])
-      );
-    }
-  }
-  return sha256(canonicalJson({ disabled, entries }));
-}
-
-function mergeAdminLiveSkillsConfig(sourceRoot, targetRoot) {
-  const sourcePath = join(sourceRoot, "config.yaml");
-  const targetPath = join(targetRoot, "config.yaml");
-  if (!existsSync(sourcePath) || !existsSync(targetPath)) return;
-  const sourceDocument = parseDocument(readFileSync(sourcePath, "utf8"));
-  const targetDocument = parseDocument(readFileSync(targetPath, "utf8"));
-  if (sourceDocument.errors.length > 0 || targetDocument.errors.length > 0) {
-    throw new Error("admin_runtime_live_skills_config_rejected");
-  }
-  const sourceSkills = sourceDocument.toJS()?.skills;
-  if (
-    !sourceSkills ||
-    typeof sourceSkills !== "object" ||
-    Array.isArray(sourceSkills)
-  ) {
-    return;
-  }
-  for (const key of ADMIN_LIVE_SKILLS_CONFIG_KEYS) {
-    if (Object.prototype.hasOwnProperty.call(sourceSkills, key)) {
-      targetDocument.setIn(["skills", key], structuredClone(sourceSkills[key]));
-    }
-  }
-  atomicPrivateFile(targetPath, targetDocument.toString());
-}
-
 async function materializeAdminProfile({
   profileContract,
   settingsRoot,
@@ -799,6 +727,7 @@ async function materializeAdminProfile({
       },
     });
     installAdminModelConfig(stageRoot, modelConfig);
+    mergeHermesState(profileHome, stageRoot);
     installAdminHermesMemoryHook(stageRoot);
     stageAdminRuntimeTree(stageRoot);
     return stage;
@@ -822,16 +751,6 @@ async function materializeAdminProfile({
           rmSync(stageRoot, { recursive: true, force: true });
           return { status: "RESTAGE", stagedAuthority: finalAuthority };
         }
-        const liveSkillsIdentity = adminPreservedSkillsIdentity(profileHome);
-        mergeHermesState(profileHome, stageRoot);
-        mergeAdminLiveSkillsConfig(profileHome, stageRoot);
-        if (
-          liveSkillsIdentity !== null &&
-          adminPreservedSkillsIdentity(stageRoot) !== liveSkillsIdentity
-        ) {
-          rmSync(stageRoot, { recursive: true, force: true });
-          return { status: "RESTAGE", stagedAuthority: finalAuthority };
-        }
         const stagedSoulPath = join(stageRoot, "SOUL.md");
         const stagedSoul = lstatSync(stagedSoulPath);
         const stagedSoulBytes = readFileSync(stagedSoulPath);

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,7 +6,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.858
 ARG MCP_INTEGRITY=sha512-8yiUhwMbBk/KxZAXGXTsEHiN8XeB/qCqNgfApew0rhViJqiLlDN8oS67pZW5iB5gdmeuv4du0jx9Lhq/blr9hQ==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.578-wip.phase170.20260809.2
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.577
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG HERMES_VERSION=0.20.0
 ARG TIRITH_VERSION=0.3.3
@@ -59,7 +59,7 @@ RUN --mount=type=secret,id=mcp_trust_root,required=true \
              /etc/cont-init.d/02-reconcile-profiles \
     && npm cache clean --force
 
-COPY mcp-context-proxy.mjs mcp-runtime-binding.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs fly-soul-bridge-exec.mjs fly-skills-bridge.mjs fly-skills-bridge-exec.mjs soul-artifact-validator.mjs model-auth-reconciler.mjs model-auth-canary-reseed.mjs model-health-reporter.mjs \
+COPY mcp-context-proxy.mjs mcp-runtime-binding.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs fly-soul-bridge-exec.mjs soul-artifact-validator.mjs model-auth-reconciler.mjs model-auth-canary-reseed.mjs model-health-reporter.mjs \
   /usr/local/lib/sellable-agent/
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
@@ -86,18 +86,9 @@ RUN node --input-type=module -e \
       'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs").then(({ runFlySoulBridgeExecCli }) => runFlySoulBridgeExecCli());' \
       > /usr/local/bin/sellable-soul-bridge-exec \
     && chmod 0555 /usr/local/bin/sellable-soul-bridge-exec \
-    && printf '%s\n' \
-      '#!/usr/bin/env node' \
-      'import("file:///usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs").then(({ runFlySkillsBridgeExecCli }) => runFlySkillsBridgeExecCli());' \
-      > /usr/local/bin/sellable-skills-bridge-exec \
-    && chmod 0555 /usr/local/bin/sellable-skills-bridge-exec \
     && sha256sum /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
       > /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-    && sha256sum /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
-      > /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-      /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 /usr/local/lib/sellable-agent/*.mjs \
     && chmod 0555 /opt/sellable/bin/hermes-memory-dirty /opt/sellable/bin/hermes-endpoint-cron \

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -94,7 +94,7 @@ const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
   process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ??
-  "@sellable/install@0.1.578-wip.phase170.20260809.2";
+  "@sellable/install@0.1.577";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ??
   "@sellable/mcp@0.1.858";

package/lib/sellable-agent/hermes-bridge.mjs

@@ -1584,113 +1584,6 @@ export function patchHermesSourceFile(patchKind, source) {
     return patched;
   }
 
-  if (patchKind === "skills-cache-freshness-v020") {
-    let patched = replaceExactlyOnce(
-      source,
-      "        sig.append((str(d), m))",
-      [
-        "        skill_files = []",
-        "        for root, dirs, files in os.walk(d, followlinks=False):",
-        "            dirs[:] = sorted(",
-        "                name for name in dirs",
-        "                if not os.path.islink(os.path.join(root, name))",
-        "            )",
-        '            if "SKILL.md" not in files:',
-        "                continue",
-        '            skill_path = os.path.join(root, "SKILL.md")',
-        "            try:",
-        "                skill_stat = os.stat(skill_path, follow_symlinks=False)",
-        "                skill_files.append(",
-        "                    (skill_path, skill_stat.st_mtime_ns, skill_stat.st_size)",
-        "                )",
-        "            except OSError:",
-        "                continue",
-        "        sig.append((str(d), m, tuple(skill_files)))",
-      ].join("\n"),
-      "v0.20 live SKILL.md signature"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "    disabled = set() if skip_disabled else _get_disabled_skill_names()",
-      [
-        "    disabled = _get_disabled_skill_names()",
-        "    filtered_disabled = set() if skip_disabled else disabled",
-      ].join("\n"),
-      "v0.20 shared disabled signature"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "                if name in disabled:\n                    continue",
-      "                if name in filtered_disabled:\n                    continue",
-      "v0.20 filtered disabled behavior"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "    skills = []\n    seen_names: set = set()",
-      [
-        "    # A signature change invalidates both filtered and unfiltered",
-        "    # variants together; neither waits for the 30-second TTL.",
-        "    if cached is not None and cached[0] != signature:",
-        "        _SKILLS_CACHE.clear()",
-        "",
-        "    skills = []",
-        "    seen_names: set = set()",
-      ].join("\n"),
-      "v0.20 both-variant cache invalidation"
-    );
-    return patched;
-  }
-
-  if (patchKind === "skills-prompt-freshness-v020") {
-    let patched = replaceExactlyOnce(
-      source,
-      "_SKILLS_PROMPT_CACHE_LOCK = threading.Lock()",
-      [
-        "_SKILLS_PROMPT_CACHE_LOCK = threading.Lock()",
-        "_SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE = None",
-      ].join("\n"),
-      "v0.20 prompt signature state"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "    disabled = get_disabled_skill_names(_platform_hint or None)\n    cache_key = (",
-      [
-        "    disabled = get_disabled_skill_names(_platform_hint or None)",
-        "    signature_roots = [skills_dir, *external_dirs]",
-        "    live_signature = tuple(",
-        "        (",
-        "            str(root),",
-        "            tuple(",
-        "                (path, tuple(values))",
-        "                for path, values in sorted(_build_skills_manifest(root).items())",
-        "            ),",
-        "        )",
-        "        for root in signature_roots",
-        "        if root.exists()",
-        "    )",
-        "    cache_key = (",
-      ].join("\n"),
-      "v0.20 prompt live signature"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "        tuple(sorted(compact_categories or ())),\n    )\n    with _SKILLS_PROMPT_CACHE_LOCK:\n        cached = _SKILLS_PROMPT_CACHE.get(cache_key)",
-      [
-        "        tuple(sorted(compact_categories or ())),",
-        "        live_signature,",
-        "    )",
-        "    global _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE",
-        "    with _SKILLS_PROMPT_CACHE_LOCK:",
-        "        if _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE != live_signature:",
-        "            _SKILLS_PROMPT_CACHE.clear()",
-        "            _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE = live_signature",
-        "        cached = _SKILLS_PROMPT_CACHE.get(cache_key)",
-      ].join("\n"),
-      "v0.20 prompt cache invalidation"
-    );
-    return patched;
-  }
-
   throw new HermesAgentBridgeError(
     "HERMES_BRIDGE_UNKNOWN_PATCH_KIND",
     `Unknown Hermes bridge patch kind: ${patchKind}`,
@@ -1949,22 +1842,6 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT = normalizeContract({
       patchedSha256:
         "90c98514a8c6c4078dacdd67a92cf749bd174ec2c074226163c6cb07ca3df59f",
     },
-    {
-      path: "tools/skills_tool.py",
-      patchKind: "skills-cache-freshness-v020",
-      sourceSha256:
-        "6cfe456c8872c91309083694290e5e2cbdb64a1b2f4ac9c2cb38973fab2228ab",
-      patchedSha256:
-        "9a1b1417879d9aac6d5b6e1713237193009e2d67dbc691db35ef5940e94f9397",
-    },
-    {
-      path: "agent/prompt_builder.py",
-      patchKind: "skills-prompt-freshness-v020",
-      sourceSha256:
-        "2a8a8b2b6c0ff830349f68b5c2f26bf2c9871ae03caf516cff3628c00b5769c7",
-      patchedSha256:
-        "4a55eb6dd4e79d35fca9fd02544444576c892ca02dfebb0c97954156cc470fdb",
-    },
   ],
 });
 

package/lib/sellable-agent/host-bootstrap.mjs

@@ -39,7 +39,7 @@ const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
 const INSTALLER_PACKAGE =
-  "@sellable/install@0.1.578-wip.phase170.20260809.2";
+  "@sellable/install@0.1.577";
 const MCP_PACKAGE = "@sellable/mcp@0.1.858";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -29,7 +29,6 @@ import {
   relative,
   resolve,
 } from "node:path";
-import { readSkillsProofObservation } from "./fly-skills-bridge.mjs";
 import {
   commitRetainedProfilePromotion,
   computeAgentProfileDigest,
@@ -78,11 +77,6 @@ const SECRET_PATTERN =
   /sat_[A-Za-z0-9_-]+|xox[bap]-[A-Za-z0-9-]+|asec\.v1\.|authorization[_-]?code|access[_-]?token|refresh[_-]?token/i;
 const STATE_FILE = "worker-state.json";
 
-export function attachSkillsProofObservation(observed, profileRoot) {
-  const skills = readSkillsProofObservation(profileRoot);
-  return skills ? { ...observed, skills } : observed;
-}
-
 function stableJson(value) {
   if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
   if (value && typeof value === "object") {
@@ -1546,8 +1540,10 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.578-wip.phase170.20260809.2" ||
-      pinned.mcpPackage !== "@sellable/mcp@0.1.858" ||
+      pinned.installerPackage !==
+        "@sellable/install@0.1.577" ||
+      pinned.mcpPackage !==
+        "@sellable/mcp@0.1.858" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||
       !Number.isSafeInteger(slack.generation) ||
@@ -2352,10 +2348,7 @@ export function createLocalPinnedActionPorts(config, dependencies = {}) {
       observed.process.uid !== config.runtimeUid
     )
       throw new Error("runtime observation identity rejected");
-    return attachSkillsProofObservation(
-      observed,
-      join(realpathSync(config.profilesRoot), context.profileId)
-    );
+    return observed;
   };
   const ensureRefreshTarget = async () => {
     if (refreshPrepared) return;