@sellable/install 0.1.578-wip.phase170.20260809.2 → 0.1.579

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.578-wip.phase170.20260809.2
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.577
 ARG MCP_PACKAGE=@sellable/mcp@0.1.858
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-8yiUhwMbBk/KxZAXGXTsEHiN8XeB/qCqNgfApew0rhViJqiLlDN8oS67pZW5iB5gdmeuv4du0jx9Lhq/blr9hQ==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.578-wip.phase170.20260809.2" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.577" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.858" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.578-wip.phase170.202608
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.578-wip.phase170.20260809.2' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.858') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.577' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.858') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.578-wip.phase170.20260809.2', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.858', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.577', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.858', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.578-wip.phase170.20260809.2` is
+`@sellable/install@0.1.577` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.578-wip.phase170.20260809.2 .
+  --tag sellable-agent-host:0.1.577 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -86,8 +86,6 @@ COPY hermes-bridge.mjs /usr/local/lib/sellable-agent/hermes-bridge.mjs
 COPY hermes-memory-snapshot.mjs /usr/local/lib/sellable-agent/hermes-memory-snapshot.mjs
 COPY fly-soul-bridge.mjs /usr/local/lib/sellable-agent/fly-soul-bridge.mjs
 COPY fly-soul-bridge-exec.mjs /usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs
-COPY fly-skills-bridge.mjs /usr/local/lib/sellable-agent/fly-skills-bridge.mjs
-COPY fly-skills-bridge-exec.mjs /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs
 COPY soul-artifact-validator.mjs /usr/local/lib/sellable-agent/soul-artifact-validator.mjs
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
@@ -109,18 +107,9 @@ RUN node --input-type=module -e \
       'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs").then(({ runFlySoulBridgeExecCli }) => runFlySoulBridgeExecCli());' \
       > /usr/local/bin/sellable-soul-bridge-exec \
     && chmod 0555 /usr/local/bin/sellable-soul-bridge-exec \
-    && printf '%s\n' \
-      '#!/usr/bin/env node' \
-      'import("file:///usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs").then(({ runFlySkillsBridgeExecCli }) => runFlySkillsBridgeExecCli());' \
-      > /usr/local/bin/sellable-skills-bridge-exec \
-    && chmod 0555 /usr/local/bin/sellable-skills-bridge-exec \
     && sha256sum /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
       > /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-    && sha256sum /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
-      > /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-      /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 \
       /usr/local/lib/sellable-agent/admin-runtime/admin-runtime.mjs \
@@ -133,8 +122,6 @@ RUN node --input-type=module -e \
       /usr/local/lib/sellable-agent/hermes-memory-snapshot.mjs \
       /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
       /usr/local/lib/sellable-agent/soul-artifact-validator.mjs \
       /opt/sellable/bin/hermes-memory-dirty \
       /opt/sellable/bin/hermes-endpoint-cron \

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -606,6 +606,21 @@ function installAdminModelConfig(profileRoot, modelConfig) {
     modelConfig.credential_pool_strategies
   );
   document.set("fallback_providers", modelConfig.fallback_providers);
+  if (document.get("provider_routing") === undefined) {
+    // OpenRouter provider selection defaults to highest throughput; an
+    // explicit admin config value wins.
+    document.set("provider_routing", { sort: "throughput" });
+  }
+  const currentAuxiliary = document.toJS().auxiliary ?? {};
+  if (!currentAuxiliary.vision) {
+    // Non-vision main models need a working vision auxiliary; the Nous
+    // portal has no credentials on these machines, so image input would
+    // silently fail without this default.
+    document.set("auxiliary", {
+      ...currentAuxiliary,
+      vision: { provider: "openrouter", model: "google/gemini-3.5-flash" },
+    });
+  }
   atomicPrivateFile(path, document.toString());
   const readback = parseDocument(readFileSync(path, "utf8")).toJS();
   if (
@@ -622,78 +637,6 @@ function installAdminModelConfig(profileRoot, modelConfig) {
   }
 }
 
-const ADMIN_LIVE_SKILLS_CONFIG_KEYS = Object.freeze([
-  "disabled",
-  "platform_disabled",
-]);
-
-function adminPreservedSkillsIdentity(profileRoot) {
-  if (!existsSync(profileRoot)) return null;
-  const entries = [];
-  const skillsRoot = join(profileRoot, "skills");
-  const walk = (directory, relativePath = "") => {
-    for (const name of readdirSync(directory).sort()) {
-      const nextRelative = relativePath ? `${relativePath}/${name}` : name;
-      if (nextRelative === "sellable") continue;
-      const path = join(directory, name);
-      const stat = lstatSync(path);
-      if (stat.isSymbolicLink()) {
-        throw new Error("admin_runtime_live_skills_symlink_rejected");
-      }
-      if (stat.isDirectory()) walk(path, nextRelative);
-      else if (stat.isFile()) {
-        entries.push({
-          path: nextRelative,
-          sha256: sha256(readFileSync(path)),
-        });
-      } else throw new Error("admin_runtime_live_skills_entry_rejected");
-    }
-  };
-  if (existsSync(skillsRoot)) walk(skillsRoot);
-  const configPath = join(profileRoot, "config.yaml");
-  let disabled = {};
-  if (existsSync(configPath)) {
-    const document = parseDocument(readFileSync(configPath, "utf8"));
-    if (document.errors.length > 0) {
-      throw new Error("admin_runtime_live_skills_config_rejected");
-    }
-    const skills = document.toJS()?.skills;
-    if (skills && typeof skills === "object" && !Array.isArray(skills)) {
-      disabled = Object.fromEntries(
-        ADMIN_LIVE_SKILLS_CONFIG_KEYS.filter((key) =>
-          Object.prototype.hasOwnProperty.call(skills, key)
-        ).map((key) => [key, skills[key]])
-      );
-    }
-  }
-  return sha256(canonicalJson({ disabled, entries }));
-}
-
-function mergeAdminLiveSkillsConfig(sourceRoot, targetRoot) {
-  const sourcePath = join(sourceRoot, "config.yaml");
-  const targetPath = join(targetRoot, "config.yaml");
-  if (!existsSync(sourcePath) || !existsSync(targetPath)) return;
-  const sourceDocument = parseDocument(readFileSync(sourcePath, "utf8"));
-  const targetDocument = parseDocument(readFileSync(targetPath, "utf8"));
-  if (sourceDocument.errors.length > 0 || targetDocument.errors.length > 0) {
-    throw new Error("admin_runtime_live_skills_config_rejected");
-  }
-  const sourceSkills = sourceDocument.toJS()?.skills;
-  if (
-    !sourceSkills ||
-    typeof sourceSkills !== "object" ||
-    Array.isArray(sourceSkills)
-  ) {
-    return;
-  }
-  for (const key of ADMIN_LIVE_SKILLS_CONFIG_KEYS) {
-    if (Object.prototype.hasOwnProperty.call(sourceSkills, key)) {
-      targetDocument.setIn(["skills", key], structuredClone(sourceSkills[key]));
-    }
-  }
-  atomicPrivateFile(targetPath, targetDocument.toString());
-}
-
 async function materializeAdminProfile({
   profileContract,
   settingsRoot,
@@ -799,6 +742,7 @@ async function materializeAdminProfile({
       },
     });
     installAdminModelConfig(stageRoot, modelConfig);
+    mergeHermesState(profileHome, stageRoot);
     installAdminHermesMemoryHook(stageRoot);
     stageAdminRuntimeTree(stageRoot);
     return stage;
@@ -822,16 +766,6 @@ async function materializeAdminProfile({
           rmSync(stageRoot, { recursive: true, force: true });
           return { status: "RESTAGE", stagedAuthority: finalAuthority };
         }
-        const liveSkillsIdentity = adminPreservedSkillsIdentity(profileHome);
-        mergeHermesState(profileHome, stageRoot);
-        mergeAdminLiveSkillsConfig(profileHome, stageRoot);
-        if (
-          liveSkillsIdentity !== null &&
-          adminPreservedSkillsIdentity(stageRoot) !== liveSkillsIdentity
-        ) {
-          rmSync(stageRoot, { recursive: true, force: true });
-          return { status: "RESTAGE", stagedAuthority: finalAuthority };
-        }
         const stagedSoulPath = join(stageRoot, "SOUL.md");
         const stagedSoul = lstatSync(stagedSoulPath);
         const stagedSoulBytes = readFileSync(stagedSoulPath);

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,7 +6,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.858
 ARG MCP_INTEGRITY=sha512-8yiUhwMbBk/KxZAXGXTsEHiN8XeB/qCqNgfApew0rhViJqiLlDN8oS67pZW5iB5gdmeuv4du0jx9Lhq/blr9hQ==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.578-wip.phase170.20260809.2
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.577
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG HERMES_VERSION=0.20.0
 ARG TIRITH_VERSION=0.3.3
@@ -59,7 +59,7 @@ RUN --mount=type=secret,id=mcp_trust_root,required=true \
              /etc/cont-init.d/02-reconcile-profiles \
     && npm cache clean --force
 
-COPY mcp-context-proxy.mjs mcp-runtime-binding.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs fly-soul-bridge-exec.mjs fly-skills-bridge.mjs fly-skills-bridge-exec.mjs soul-artifact-validator.mjs model-auth-reconciler.mjs model-auth-canary-reseed.mjs model-health-reporter.mjs \
+COPY mcp-context-proxy.mjs mcp-runtime-binding.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs fly-soul-bridge-exec.mjs soul-artifact-validator.mjs model-auth-reconciler.mjs model-auth-canary-reseed.mjs model-health-reporter.mjs \
   /usr/local/lib/sellable-agent/
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
@@ -86,18 +86,9 @@ RUN node --input-type=module -e \
       'import("file:///usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs").then(({ runFlySoulBridgeExecCli }) => runFlySoulBridgeExecCli());' \
       > /usr/local/bin/sellable-soul-bridge-exec \
     && chmod 0555 /usr/local/bin/sellable-soul-bridge-exec \
-    && printf '%s\n' \
-      '#!/usr/bin/env node' \
-      'import("file:///usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs").then(({ runFlySkillsBridgeExecCli }) => runFlySkillsBridgeExecCli());' \
-      > /usr/local/bin/sellable-skills-bridge-exec \
-    && chmod 0555 /usr/local/bin/sellable-skills-bridge-exec \
     && sha256sum /usr/local/lib/sellable-agent/fly-soul-bridge.mjs \
       > /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-    && sha256sum /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
-      /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
-      > /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
-      /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 /usr/local/lib/sellable-agent/*.mjs \
     && chmod 0555 /opt/sellable/bin/hermes-memory-dirty /opt/sellable/bin/hermes-endpoint-cron \

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -93,11 +93,9 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ??
-  "@sellable/install@0.1.578-wip.phase170.20260809.2";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.577";
 const MCP_PACKAGE =
-  process.env.SELLABLE_AGENT_MCP_PACKAGE ??
-  "@sellable/mcp@0.1.858";
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.858";
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -1639,6 +1637,16 @@ function writeRuntimeHermesConfig({
   );
   const sellable = baseConfig.mcp_servers?.sellable;
   if (!sellable?.env) throw new Error("customer_mcp_config_rejected");
+  const adminServer = baseConfig.mcp_servers?.["sellable-admin"];
+  if (adminServer?.command && existsSync(adminServer.command)) {
+    // The admin MCP installer has shipped this wrapper without an execute
+    // bit; repair it here so a config refresh never revives a dead admin
+    // server entry.
+    const wrapperMode = lstatSync(adminServer.command).mode;
+    if ((wrapperMode & 0o100) === 0) {
+      chmodSync(adminServer.command, wrapperMode | 0o100);
+    }
+  }
   // The named-profile materializer owns the one canonical SOUL file and seeds
   // it only when absent. Runtime config refreshes must never rewrite live SOUL
   // or create a root-level second copy.
@@ -1699,6 +1707,23 @@ function writeRuntimeHermesConfig({
       : {
           ...modelConfig,
         }),
+    provider_routing: {
+      // OpenRouter provider selection defaults to highest throughput; an
+      // explicit profile value always wins.
+      sort: "throughput",
+      ...(baseConfig.provider_routing ?? {}),
+    },
+    auxiliary: {
+      ...(baseConfig.auxiliary ?? {}),
+      vision: {
+        // Non-vision main models (e.g. deepseek) need a working vision
+        // auxiliary; the Nous portal has no credentials on customer
+        // machines, so image input silently fails without this default.
+        provider: "openrouter",
+        model: "google/gemini-3.5-flash",
+        ...(baseConfig.auxiliary?.vision ?? {}),
+      },
+    },
     mcp_servers: {
       ...baseConfig.mcp_servers,
       sellable: {

package/lib/sellable-agent/hermes-bridge.mjs

@@ -297,6 +297,15 @@ const MCP_META_HELPER = `
 def _sellable_agent_call_meta():
     if os.getenv("SELLABLE_AGENT_RUNTIME", "") != "1":
         return None
+    from gateway.session_context import get_session_env, session_context_engaged
+    if (
+        not session_context_engaged()
+        or get_session_env("HERMES_SESSION_PLATFORM", "").strip().lower() != "slack"
+    ):
+        # Non-Slack runtime sessions (console/TUI, cron) carry no Slack actor
+        # identity. Send no actor meta; the serving API enforces its own actor
+        # gates, as with installs outside the Sellable runtime.
+        return None
     import json
     gate_path = os.getenv("SELLABLE_AGENT_RUNTIME_GATE_FILE", "")
     if not gate_path.startswith("/"):
@@ -376,8 +385,18 @@ def _sellable_agent_restore_or_build_proven_soul(
     expected_home = data_root / "profiles" / profile_id
     try:
         observed_home = Path(get_hermes_home())
-        if observed_home.resolve(strict=True) != expected_home.resolve(strict=True):
-            raise RuntimeError("Hermes resolved a different SOUL profile")
+        observed_resolved = observed_home.resolve(strict=True)
+        expected_resolved = expected_home.resolve(strict=True)
+        if observed_resolved != expected_resolved:
+            # HERMES_HOME may legitimately be the data root (the directory
+            # that CONTAINS profiles/<id>) when no per-session override is
+            # active yet -- e.g. brand-new sessions in hermes serve. Accept
+            # it only when root/profiles/<profile_id> strictly resolves to
+            # the canonical profile directory.
+            if (
+                observed_home / "profiles" / profile_id
+            ).resolve(strict=True) != expected_resolved:
+                raise RuntimeError("Hermes resolved a different SOUL profile")
     except OSError as exc:
         raise RuntimeError("Hermes SOUL profile cannot be resolved") from exc
 
@@ -574,6 +593,15 @@ const MCP_ENDPOINT_META_HELPER = `
 def _sellable_agent_call_meta():
     if os.getenv("SELLABLE_AGENT_RUNTIME", "") != "1":
         return None
+    from gateway.session_context import get_session_env, session_context_engaged
+    if (
+        not session_context_engaged()
+        or get_session_env("HERMES_SESSION_PLATFORM", "").strip().lower() != "slack"
+    ):
+        # Non-Slack runtime sessions (console/TUI, cron) carry no Slack actor
+        # identity. Send no actor meta; the serving API enforces its own actor
+        # gates, as with installs outside the Sellable runtime.
+        return None
     import json
     gate_path = os.getenv("SELLABLE_AGENT_RUNTIME_GATE_FILE", "")
     if not gate_path.startswith("/"):
@@ -634,15 +662,11 @@ const MCP_ENDPOINT_META_HELPER_OPTIONAL_SESSION =
   );
 
 const CRON_MCP_ISOLATION_HELPER = `
-# ${HERMES_AGENT_BRIDGE_MARKER}: cron is never a Sellable MCP principal.
+# ${HERMES_AGENT_BRIDGE_MARKER}: cron sessions may use Sellable MCP toolsets.
 def _sellable_agent_strip_cron_mcp(toolsets, cfg):
-    values = list(toolsets or [])
-    if os.getenv("SELLABLE_AGENT_RUNTIME", "") != "1":
-        return values
-    from hermes_cli.tools_config import enabled_mcp_server_names
-    mcp_names = set(enabled_mcp_server_names(cfg or {}))
-    mcp_names.add("mcp")
-    return [name for name in values if name not in mcp_names]
+    # Pass-through, kept for injection-site stability: cron sessions carry no
+    # Slack actor meta and the serving API enforces its own actor gates.
+    return list(toolsets or [])
 `;
 
 const V020_WEB_TOOLSET_DISCOVERY_HELPER = `
@@ -1569,125 +1593,6 @@ export function patchHermesSourceFile(patchKind, source) {
       '        return _sellable_agent_strip_cron_mcp(\n            sorted(_get_platform_tools(cfg or {}, "cron")), cfg or {}\n        )',
       "v0.20 platform cron MCP isolation"
     );
-    patched = replaceExactlyOnce(
-      patched,
-      "        return None\n\n# Valid delivery platforms",
-      [
-        '        if os.getenv("SELLABLE_AGENT_RUNTIME", "") == "1":',
-        '            return _sellable_agent_strip_cron_mcp(["safe"], cfg or {})',
-        "        return None",
-        "",
-        "# Valid delivery platforms",
-      ].join("\n"),
-      "v0.20 cron MCP fail-closed fallback"
-    );
-    return patched;
-  }
-
-  if (patchKind === "skills-cache-freshness-v020") {
-    let patched = replaceExactlyOnce(
-      source,
-      "        sig.append((str(d), m))",
-      [
-        "        skill_files = []",
-        "        for root, dirs, files in os.walk(d, followlinks=False):",
-        "            dirs[:] = sorted(",
-        "                name for name in dirs",
-        "                if not os.path.islink(os.path.join(root, name))",
-        "            )",
-        '            if "SKILL.md" not in files:',
-        "                continue",
-        '            skill_path = os.path.join(root, "SKILL.md")',
-        "            try:",
-        "                skill_stat = os.stat(skill_path, follow_symlinks=False)",
-        "                skill_files.append(",
-        "                    (skill_path, skill_stat.st_mtime_ns, skill_stat.st_size)",
-        "                )",
-        "            except OSError:",
-        "                continue",
-        "        sig.append((str(d), m, tuple(skill_files)))",
-      ].join("\n"),
-      "v0.20 live SKILL.md signature"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "    disabled = set() if skip_disabled else _get_disabled_skill_names()",
-      [
-        "    disabled = _get_disabled_skill_names()",
-        "    filtered_disabled = set() if skip_disabled else disabled",
-      ].join("\n"),
-      "v0.20 shared disabled signature"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "                if name in disabled:\n                    continue",
-      "                if name in filtered_disabled:\n                    continue",
-      "v0.20 filtered disabled behavior"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "    skills = []\n    seen_names: set = set()",
-      [
-        "    # A signature change invalidates both filtered and unfiltered",
-        "    # variants together; neither waits for the 30-second TTL.",
-        "    if cached is not None and cached[0] != signature:",
-        "        _SKILLS_CACHE.clear()",
-        "",
-        "    skills = []",
-        "    seen_names: set = set()",
-      ].join("\n"),
-      "v0.20 both-variant cache invalidation"
-    );
-    return patched;
-  }
-
-  if (patchKind === "skills-prompt-freshness-v020") {
-    let patched = replaceExactlyOnce(
-      source,
-      "_SKILLS_PROMPT_CACHE_LOCK = threading.Lock()",
-      [
-        "_SKILLS_PROMPT_CACHE_LOCK = threading.Lock()",
-        "_SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE = None",
-      ].join("\n"),
-      "v0.20 prompt signature state"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "    disabled = get_disabled_skill_names(_platform_hint or None)\n    cache_key = (",
-      [
-        "    disabled = get_disabled_skill_names(_platform_hint or None)",
-        "    signature_roots = [skills_dir, *external_dirs]",
-        "    live_signature = tuple(",
-        "        (",
-        "            str(root),",
-        "            tuple(",
-        "                (path, tuple(values))",
-        "                for path, values in sorted(_build_skills_manifest(root).items())",
-        "            ),",
-        "        )",
-        "        for root in signature_roots",
-        "        if root.exists()",
-        "    )",
-        "    cache_key = (",
-      ].join("\n"),
-      "v0.20 prompt live signature"
-    );
-    patched = replaceExactlyOnce(
-      patched,
-      "        tuple(sorted(compact_categories or ())),\n    )\n    with _SKILLS_PROMPT_CACHE_LOCK:\n        cached = _SKILLS_PROMPT_CACHE.get(cache_key)",
-      [
-        "        tuple(sorted(compact_categories or ())),",
-        "        live_signature,",
-        "    )",
-        "    global _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE",
-        "    with _SKILLS_PROMPT_CACHE_LOCK:",
-        "        if _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE != live_signature:",
-        "            _SKILLS_PROMPT_CACHE.clear()",
-        "            _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE = live_signature",
-        "        cached = _SKILLS_PROMPT_CACHE.get(cache_key)",
-      ].join("\n"),
-      "v0.20 prompt cache invalidation"
-    );
     return patched;
   }
 
@@ -1949,22 +1854,6 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT = normalizeContract({
       patchedSha256:
         "90c98514a8c6c4078dacdd67a92cf749bd174ec2c074226163c6cb07ca3df59f",
     },
-    {
-      path: "tools/skills_tool.py",
-      patchKind: "skills-cache-freshness-v020",
-      sourceSha256:
-        "6cfe456c8872c91309083694290e5e2cbdb64a1b2f4ac9c2cb38973fab2228ab",
-      patchedSha256:
-        "9a1b1417879d9aac6d5b6e1713237193009e2d67dbc691db35ef5940e94f9397",
-    },
-    {
-      path: "agent/prompt_builder.py",
-      patchKind: "skills-prompt-freshness-v020",
-      sourceSha256:
-        "2a8a8b2b6c0ff830349f68b5c2f26bf2c9871ae03caf516cff3628c00b5769c7",
-      patchedSha256:
-        "4a55eb6dd4e79d35fca9fd02544444576c892ca02dfebb0c97954156cc470fdb",
-    },
   ],
 });
 

package/lib/sellable-agent/host-bootstrap.mjs

@@ -39,7 +39,7 @@ const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
 const INSTALLER_PACKAGE =
-  "@sellable/install@0.1.578-wip.phase170.20260809.2";
+  "@sellable/install@0.1.577";
 const MCP_PACKAGE = "@sellable/mcp@0.1.858";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -29,7 +29,6 @@ import {
   relative,
   resolve,
 } from "node:path";
-import { readSkillsProofObservation } from "./fly-skills-bridge.mjs";
 import {
   commitRetainedProfilePromotion,
   computeAgentProfileDigest,
@@ -78,11 +77,6 @@ const SECRET_PATTERN =
   /sat_[A-Za-z0-9_-]+|xox[bap]-[A-Za-z0-9-]+|asec\.v1\.|authorization[_-]?code|access[_-]?token|refresh[_-]?token/i;
 const STATE_FILE = "worker-state.json";
 
-export function attachSkillsProofObservation(observed, profileRoot) {
-  const skills = readSkillsProofObservation(profileRoot);
-  return skills ? { ...observed, skills } : observed;
-}
-
 function stableJson(value) {
   if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
   if (value && typeof value === "object") {
@@ -1546,8 +1540,10 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.578-wip.phase170.20260809.2" ||
-      pinned.mcpPackage !== "@sellable/mcp@0.1.858" ||
+      pinned.installerPackage !==
+        "@sellable/install@0.1.577" ||
+      pinned.mcpPackage !==
+        "@sellable/mcp@0.1.858" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||
       !Number.isSafeInteger(slack.generation) ||
@@ -2352,10 +2348,7 @@ export function createLocalPinnedActionPorts(config, dependencies = {}) {
       observed.process.uid !== config.runtimeUid
     )
       throw new Error("runtime observation identity rejected");
-    return attachSkillsProofObservation(
-      observed,
-      join(realpathSync(config.profilesRoot), context.profileId)
-    );
+    return observed;
   };
   const ensureRefreshTarget = async () => {
     if (refreshPrepared) return;