@sellable/install 0.1.578 → 0.1.579

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -606,6 +606,21 @@ function installAdminModelConfig(profileRoot, modelConfig) {
     modelConfig.credential_pool_strategies
   );
   document.set("fallback_providers", modelConfig.fallback_providers);
+  if (document.get("provider_routing") === undefined) {
+    // OpenRouter provider selection defaults to highest throughput; an
+    // explicit admin config value wins.
+    document.set("provider_routing", { sort: "throughput" });
+  }
+  const currentAuxiliary = document.toJS().auxiliary ?? {};
+  if (!currentAuxiliary.vision) {
+    // Non-vision main models need a working vision auxiliary; the Nous
+    // portal has no credentials on these machines, so image input would
+    // silently fail without this default.
+    document.set("auxiliary", {
+      ...currentAuxiliary,
+      vision: { provider: "openrouter", model: "google/gemini-3.5-flash" },
+    });
+  }
   atomicPrivateFile(path, document.toString());
   const readback = parseDocument(readFileSync(path, "utf8")).toJS();
   if (

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -93,11 +93,9 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ??
-  "@sellable/install@0.1.577";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.577";
 const MCP_PACKAGE =
-  process.env.SELLABLE_AGENT_MCP_PACKAGE ??
-  "@sellable/mcp@0.1.858";
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.858";
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -1639,6 +1637,16 @@ function writeRuntimeHermesConfig({
   );
   const sellable = baseConfig.mcp_servers?.sellable;
   if (!sellable?.env) throw new Error("customer_mcp_config_rejected");
+  const adminServer = baseConfig.mcp_servers?.["sellable-admin"];
+  if (adminServer?.command && existsSync(adminServer.command)) {
+    // The admin MCP installer has shipped this wrapper without an execute
+    // bit; repair it here so a config refresh never revives a dead admin
+    // server entry.
+    const wrapperMode = lstatSync(adminServer.command).mode;
+    if ((wrapperMode & 0o100) === 0) {
+      chmodSync(adminServer.command, wrapperMode | 0o100);
+    }
+  }
   // The named-profile materializer owns the one canonical SOUL file and seeds
   // it only when absent. Runtime config refreshes must never rewrite live SOUL
   // or create a root-level second copy.
@@ -1699,6 +1707,23 @@ function writeRuntimeHermesConfig({
       : {
           ...modelConfig,
         }),
+    provider_routing: {
+      // OpenRouter provider selection defaults to highest throughput; an
+      // explicit profile value always wins.
+      sort: "throughput",
+      ...(baseConfig.provider_routing ?? {}),
+    },
+    auxiliary: {
+      ...(baseConfig.auxiliary ?? {}),
+      vision: {
+        // Non-vision main models (e.g. deepseek) need a working vision
+        // auxiliary; the Nous portal has no credentials on customer
+        // machines, so image input silently fails without this default.
+        provider: "openrouter",
+        model: "google/gemini-3.5-flash",
+        ...(baseConfig.auxiliary?.vision ?? {}),
+      },
+    },
     mcp_servers: {
       ...baseConfig.mcp_servers,
       sellable: {

package/lib/sellable-agent/hermes-bridge.mjs

@@ -297,6 +297,15 @@ const MCP_META_HELPER = `
 def _sellable_agent_call_meta():
     if os.getenv("SELLABLE_AGENT_RUNTIME", "") != "1":
         return None
+    from gateway.session_context import get_session_env, session_context_engaged
+    if (
+        not session_context_engaged()
+        or get_session_env("HERMES_SESSION_PLATFORM", "").strip().lower() != "slack"
+    ):
+        # Non-Slack runtime sessions (console/TUI, cron) carry no Slack actor
+        # identity. Send no actor meta; the serving API enforces its own actor
+        # gates, as with installs outside the Sellable runtime.
+        return None
     import json
     gate_path = os.getenv("SELLABLE_AGENT_RUNTIME_GATE_FILE", "")
     if not gate_path.startswith("/"):
@@ -376,8 +385,18 @@ def _sellable_agent_restore_or_build_proven_soul(
     expected_home = data_root / "profiles" / profile_id
     try:
         observed_home = Path(get_hermes_home())
-        if observed_home.resolve(strict=True) != expected_home.resolve(strict=True):
-            raise RuntimeError("Hermes resolved a different SOUL profile")
+        observed_resolved = observed_home.resolve(strict=True)
+        expected_resolved = expected_home.resolve(strict=True)
+        if observed_resolved != expected_resolved:
+            # HERMES_HOME may legitimately be the data root (the directory
+            # that CONTAINS profiles/<id>) when no per-session override is
+            # active yet -- e.g. brand-new sessions in hermes serve. Accept
+            # it only when root/profiles/<profile_id> strictly resolves to
+            # the canonical profile directory.
+            if (
+                observed_home / "profiles" / profile_id
+            ).resolve(strict=True) != expected_resolved:
+                raise RuntimeError("Hermes resolved a different SOUL profile")
     except OSError as exc:
         raise RuntimeError("Hermes SOUL profile cannot be resolved") from exc
 
@@ -574,6 +593,15 @@ const MCP_ENDPOINT_META_HELPER = `
 def _sellable_agent_call_meta():
     if os.getenv("SELLABLE_AGENT_RUNTIME", "") != "1":
         return None
+    from gateway.session_context import get_session_env, session_context_engaged
+    if (
+        not session_context_engaged()
+        or get_session_env("HERMES_SESSION_PLATFORM", "").strip().lower() != "slack"
+    ):
+        # Non-Slack runtime sessions (console/TUI, cron) carry no Slack actor
+        # identity. Send no actor meta; the serving API enforces its own actor
+        # gates, as with installs outside the Sellable runtime.
+        return None
     import json
     gate_path = os.getenv("SELLABLE_AGENT_RUNTIME_GATE_FILE", "")
     if not gate_path.startswith("/"):
@@ -634,15 +662,11 @@ const MCP_ENDPOINT_META_HELPER_OPTIONAL_SESSION =
   );
 
 const CRON_MCP_ISOLATION_HELPER = `
-# ${HERMES_AGENT_BRIDGE_MARKER}: cron is never a Sellable MCP principal.
+# ${HERMES_AGENT_BRIDGE_MARKER}: cron sessions may use Sellable MCP toolsets.
 def _sellable_agent_strip_cron_mcp(toolsets, cfg):
-    values = list(toolsets or [])
-    if os.getenv("SELLABLE_AGENT_RUNTIME", "") != "1":
-        return values
-    from hermes_cli.tools_config import enabled_mcp_server_names
-    mcp_names = set(enabled_mcp_server_names(cfg or {}))
-    mcp_names.add("mcp")
-    return [name for name in values if name not in mcp_names]
+    # Pass-through, kept for injection-site stability: cron sessions carry no
+    # Slack actor meta and the serving API enforces its own actor gates.
+    return list(toolsets or [])
 `;
 
 const V020_WEB_TOOLSET_DISCOVERY_HELPER = `
@@ -1569,18 +1593,6 @@ export function patchHermesSourceFile(patchKind, source) {
       '        return _sellable_agent_strip_cron_mcp(\n            sorted(_get_platform_tools(cfg or {}, "cron")), cfg or {}\n        )',
       "v0.20 platform cron MCP isolation"
     );
-    patched = replaceExactlyOnce(
-      patched,
-      "        return None\n\n# Valid delivery platforms",
-      [
-        '        if os.getenv("SELLABLE_AGENT_RUNTIME", "") == "1":',
-        '            return _sellable_agent_strip_cron_mcp(["safe"], cfg or {})',
-        "        return None",
-        "",
-        "# Valid delivery platforms",
-      ].join("\n"),
-      "v0.20 cron MCP fail-closed fallback"
-    );
     return patched;
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.578",
+  "version": "0.1.579",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {