@sellable/install 0.1.589 → 0.1.591

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.589
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.591
 ARG MCP_PACKAGE=@sellable/mcp@0.1.860
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-jRA1KsCV2d4Zcuo5/UmJiP8P0NaoC3ZDvUFRQOc2AMSNDVmUR6gWvtkyAiqb1lukbFWKzfVlz2/4EWzxvb7hkQ==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.589" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.591" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.860" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.589" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.589' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.860') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.591' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.860') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.589', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.860', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.591', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.860', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.589` is
+`@sellable/install@0.1.591` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.589 .
+  --tag sellable-agent-host:0.1.591 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,7 +6,9 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.860
 ARG MCP_INTEGRITY=sha512-jRA1KsCV2d4Zcuo5/UmJiP8P0NaoC3ZDvUFRQOc2AMSNDVmUR6gWvtkyAiqb1lukbFWKzfVlz2/4EWzxvb7hkQ==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.589
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.591
+ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
+ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG YAML_VERSION=2.9.0
 ARG HERMES_VERSION=0.20.0
@@ -23,6 +25,11 @@ RUN --mount=type=secret,id=mcp_trust_root,required=true \
     && npm install --prefix /usr/local/lib/sellable-agent/external-runtime/mcp \
          --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
     && test "$(node -p "require('/usr/local/lib/sellable-agent/external-runtime/mcp/node_modules/@sellable/mcp/package.json').version")" = "${MCP_PACKAGE##*@}" \
+    && test "$(npm view "${ADMIN_MCP_PACKAGE}" dist.integrity)" = "${ADMIN_MCP_INTEGRITY}" \
+    && npm install --prefix /usr/local/lib/sellable-agent/internal-admin-mcp \
+         --omit=dev --ignore-scripts --no-audit --no-fund "${ADMIN_MCP_PACKAGE}" \
+    && test "$(node -p "require('/usr/local/lib/sellable-agent/internal-admin-mcp/node_modules/@sellable/admin-mcp/package.json').version")" = "${ADMIN_MCP_PACKAGE##*@}" \
+    && test -x /usr/local/lib/sellable-agent/internal-admin-mcp/node_modules/.bin/sellable-admin-mcp \
     && npm install --prefix /usr/local/lib/sellable-agent \
          --omit=dev --ignore-scripts --no-audit --no-fund \
          "tus-js-client@${TUS_JS_CLIENT_VERSION}" "yaml@${YAML_VERSION}" \

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -14,6 +14,7 @@ import {
   unlinkSync,
   writeFileSync,
 } from "node:fs";
+import { loadavg } from "node:os";
 import { dirname, join } from "node:path";
 import { pathToFileURL } from "node:url";
 import {
@@ -61,6 +62,7 @@ import {
 import { createModelHealthReporter } from "../model-health-reporter.mjs";
 import {
   materializeNativeSlackCustomerProfile,
+  SELLABLE_INTERNAL_AGENT_WORKSPACE_ID,
   validateNativeSlackCustomerProfile,
 } from "../profile-materializer.mjs";
 import {
@@ -93,7 +95,7 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.589";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.591";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.860";
 
@@ -119,6 +121,7 @@ async function run(
   { env = process.env, timeoutMs = 60_000 } = {}
 ) {
   return new Promise((resolve) => {
+    const startedAt = Date.now();
     const child = spawn(command, args, {
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -139,6 +142,7 @@ async function run(
         stdout: "",
         stderr: "",
         timedOut,
+        elapsedMs: Date.now() - startedAt,
         error: error.message,
       });
     });
@@ -149,11 +153,70 @@ async function run(
         stdout: Buffer.concat(stdout).toString("utf8"),
         stderr: Buffer.concat(stderr).toString("utf8"),
         timedOut,
+        elapsedMs: Date.now() - startedAt,
       });
     });
   });
 }
 
+const EXACT_INSTALLER_PACKAGE =
+  /^@sellable\/install@\d+\.\d+\.\d+(?:[-.A-Za-z0-9]+)?$/;
+
+export function assertCustomerRuntimeInstallerPackage({
+  expected,
+  actual = INSTALLER_PACKAGE,
+}) {
+  if (
+    !EXACT_INSTALLER_PACKAGE.test(expected ?? "") ||
+    !EXACT_INSTALLER_PACKAGE.test(actual ?? "")
+  ) {
+    throw new Error("customer_runtime_installer_package_invalid");
+  }
+  if (expected !== actual) {
+    throw new Error(
+      `customer_runtime_installer_package_mismatch:expected=${expected}:actual=${actual}`
+    );
+  }
+  return actual;
+}
+
+function doctorCheckName(output) {
+  const line = String(output)
+    .split(/\r?\n/)
+    .map((value) => value.trim())
+    .find((value) =>
+      /(?:✗|\b(?:fail|error|missing)\b|Lazy-installing|pip install|npm install)/i.test(
+        value
+      )
+    );
+  return (line ?? "unknown")
+    .replace(/^[^A-Za-z0-9.]+/, "")
+    .replace(/[^A-Za-z0-9.]+/g, "_")
+    .replace(/^_+|_+$/g, "")
+    .slice(0, 160);
+}
+
+export function customerRuntimeDoctorFailureCode(
+  doctor,
+  { loadAverage = loadavg() } = {}
+) {
+  if (doctor?.timedOut) {
+    const observedLoad = [...loadAverage]
+      .slice(0, 3)
+      .map((value) => Number(value).toFixed(2))
+      .join(",");
+    return `customer_runtime_doctor_timeout:elapsed_ms=${Math.max(0, Math.round(Number(doctor.elapsedMs) || 0))}:loadavg=${observedLoad}`;
+  }
+  const output = `${doctor?.stdout ?? ""}\n${doctor?.stderr ?? ""}`;
+  if (
+    doctor?.status !== 0 ||
+    /Lazy-installing|pip install|npm install/i.test(output)
+  ) {
+    return `customer_runtime_doctor_rejected:check=${doctorCheckName(output)}`;
+  }
+  return null;
+}
+
 function exactArtifact(claim, type) {
   const artifacts = claim?.revision?.artifacts?.filter(
     (artifact) =>
@@ -182,6 +245,7 @@ function compileDesired(claim, trustRootPem) {
   const service = claim?.runtimeContract?.service;
   const model = claim?.runtimeContract?.model;
   const apiServer = claim?.runtimeContract?.apiServer;
+  const installerPackage = claim?.runtimeContract?.installerPackage;
   const selectedBindings = slack?.selectedBindings;
   const toolInclude = service?.toolInclude;
   if (
@@ -191,6 +255,7 @@ function compileDesired(claim, trustRootPem) {
     !service ||
     !model ||
     !apiServer ||
+    !installerPackage ||
     apiServer.host !== "127.0.0.1" ||
     apiServer.port !== 8642 ||
     apiServer.cors !== false ||
@@ -210,6 +275,7 @@ function compileDesired(claim, trustRootPem) {
   ) {
     throw new Error("customer_claim_contract_rejected");
   }
+  assertCustomerRuntimeInstallerPackage({ expected: installerPackage });
   const modelEnvelope = claim.secretEnvelopes.modelCodex;
   if (
     model.provider !== "codex" ||
@@ -262,7 +328,7 @@ function compileDesired(claim, trustRootPem) {
   });
   const runtimeDesiredHash = flyRuntimeDigest({
     contract: "customer-runtime-desired/v1",
-    installerPackage: INSTALLER_PACKAGE,
+    installerPackage,
     accessPolicyHash,
   });
   if (
@@ -302,7 +368,7 @@ function compileDesired(claim, trustRootPem) {
       accessPolicyHash,
       runtimeDesiredHash,
       hermesVersion: HERMES_VERSION,
-      installerPackage: INSTALLER_PACKAGE,
+      installerPackage,
       mcpPackage: MCP_PACKAGE,
       policyHash: service.policyHash,
       soul: exactArtifact(claim, "SOUL"),
@@ -1811,6 +1877,58 @@ function writeRuntimeHermesConfig({
   };
 }
 
+const INTERNAL_ADMIN_SETTINGS_FILES = Object.freeze([
+  ".env",
+  "settings.json",
+  "config-state.json",
+]);
+
+export function installInternalAdminRuntimeSettings({
+  desired,
+  profileRoot,
+  secretsRoot = SECRET_ROOT,
+}) {
+  if (desired.workspaceId !== SELLABLE_INTERNAL_AGENT_WORKSPACE_ID) {
+    return { ok: true, enabled: false };
+  }
+  const sourceRoot = join(profileRoot, ".sellable-admin");
+  const targetRoot = join(secretsRoot, desired.profileId, "admin-settings");
+  try {
+    const source = lstatSync(sourceRoot);
+    if (
+      source.isSymbolicLink() ||
+      !source.isDirectory() ||
+      (source.mode & 0o077) !== 0
+    ) {
+      throw new Error("customer_internal_admin_settings_root_rejected");
+    }
+    mkdirSync(targetRoot, { recursive: true, mode: 0o700 });
+    chmodSync(targetRoot, 0o700);
+    for (const name of INTERNAL_ADMIN_SETTINGS_FILES) {
+      const pathValue = join(sourceRoot, name);
+      const entry = lstatSync(pathValue);
+      if (
+        entry.isSymbolicLink() ||
+        !entry.isFile() ||
+        (entry.mode & 0o077) !== 0 ||
+        entry.size < 1 ||
+        entry.size > 1024 * 1024
+      ) {
+        throw new Error("customer_internal_admin_settings_file_rejected");
+      }
+      atomicFile(join(targetRoot, name), readFileSync(pathValue), 0o600);
+    }
+    return { ok: true, enabled: true, settingsRoot: targetRoot };
+  } catch (error) {
+    throw new Error(
+      error instanceof Error &&
+      error.message.startsWith("customer_internal_admin_settings_")
+        ? error.message
+        : "customer_internal_admin_settings_missing"
+    );
+  }
+}
+
 function allowTestProviders() {
   return (
     process.env.SELLABLE_AGENT_ALLOW_TEST_PROVIDERS === "1" ||
@@ -2216,16 +2334,10 @@ async function proveApplication({
   const runtimeEnv = applicationRuntimeEnv({ desired, runtimeConfig, secrets });
   const doctor = await run(HERMES, ["doctor"], {
     env: runtimeEnv,
-    timeoutMs: 180_000,
+    timeoutMs: 300_000,
   });
-  if (
-    doctor.status !== 0 ||
-    /Lazy-installing|pip install|npm install/i.test(
-      `${doctor.stdout}\n${doctor.stderr}`
-    )
-  ) {
-    throw new Error("customer_runtime_doctor_rejected");
-  }
+  const doctorFailure = customerRuntimeDoctorFailureCode(doctor);
+  if (doctorFailure) throw new Error(doctorFailure);
   const slackResponse = await fetch(`${slackApiOrigin()}/api/auth.test`, {
     method: "POST",
     headers: {
@@ -2449,12 +2561,21 @@ async function processOperation({ claim, exchange, client, identity }) {
     desired,
     profilesRoot: PROFILES_ROOT,
   });
-  if (!materialized.ok) throw new Error(materialized.code);
+  if (!materialized.ok) {
+    const detail =
+      materialized.code === "native_slack_profile_insufficient_disk"
+        ? `:available_bytes=${materialized.availableBytes}:required_bytes=${materialized.requiredBytes}`
+        : materialized.causeCode
+          ? `:cause=${materialized.causeCode}`
+          : "";
+    throw new Error(`${materialized.code}${detail}`);
+  }
   const pristineProfile = validateNativeSlackCustomerProfile({
     desired,
     profileRoot,
   });
   if (!pristineProfile.ok) throw new Error(pristineProfile.code);
+  installInternalAdminRuntimeSettings({ desired, profileRoot });
   const runtimeConfig = writeRuntimeHermesConfig({
     desired,
     toolInclude,

package/lib/sellable-agent/hermes-bridge.mjs

@@ -497,7 +497,10 @@ def _sellable_agent_restore_or_build_proven_soul(
             or len(marker["generation"]) < 8
             or len(marker["generation"]) > 128
         ):
-            raise RuntimeError("Sellable SOUL proof marker is not proven")
+            marker_state = marker.get("state") if isinstance(marker, dict) else "invalid"
+            raise RuntimeError(
+                f"Sellable SOUL proof marker is not proven: path={marker_path} state={marker_state}"
+            )
 
         soul_path = expected_home / "SOUL.md"
         try:
@@ -1943,7 +1946,7 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT = normalizeContract({
       sourceSha256:
         "a0e136367b64007d7b49ea006ab0aa7dcc66b12134b512a463a03bd69fb8a90c",
       patchedSha256:
-        "5f19a22c832db2e93b3da0fe9ea62606968233aa964318f8f81b0ae3dc7c8a13",
+        "cd9dc106b741f3351550f21f5349c42c909b3bd938155d2e5d391e857e1e3f46",
     },
     {
       path: "hermes_cli/web_routers/tools.py",

package/lib/sellable-agent/host-bootstrap.mjs

@@ -39,7 +39,7 @@ const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
 const INSTALLER_PACKAGE =
-  "@sellable/install@0.1.589";
+  "@sellable/install@0.1.591";
 const MCP_PACKAGE = "@sellable/mcp@0.1.860";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.589" ||
+      pinned.installerPackage !== "@sellable/install@0.1.591" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.860" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -13,6 +13,7 @@ import {
   realpathSync,
   renameSync,
   rmSync,
+  statfsSync,
   writeFileSync,
 } from "node:fs";
 import {
@@ -64,6 +65,15 @@ const FINGERPRINT = /^[a-f0-9]{16}$/;
 const PRIVATE_REFERENCE = /^(?:secret|oauth-private):\/\/[A-Za-z0-9/_-]+$/;
 const RAW_SECRET =
   /(?:^|[^A-Za-z0-9])(?:xapp|xoxb|xoxa|sat)_[A-Za-z0-9_-]+|(?:xapp|xoxb|xoxa)-[A-Za-z0-9_-]+|oauth-provider-secret-byte|asec\.v1\./i;
+const NATIVE_SLACK_COPY_MARGIN_BYTES = 64 * 1024 * 1024;
+const NATIVE_SLACK_PEAK_COPY_MULTIPLIER = 2;
+export const SELLABLE_INTERNAL_AGENT_WORKSPACE_ID = "cmj0wv9pe02jx23xdv6wfhg9x";
+const PRESSURE_CACHE_PATHS = Object.freeze([
+  [".npm", "_npx"],
+  [".npm", "_cacache"],
+  [".cache", "uv"],
+  [".cache", "pip"],
+]);
 
 function sha256(value) {
   return createHash("sha256").update(value).digest("hex");
@@ -80,6 +90,71 @@ function stableJson(value) {
   return JSON.stringify(value);
 }
 
+function logicalTreeBytes(pathValue) {
+  if (!existsSync(pathValue)) return 0;
+  const entry = lstatSync(pathValue);
+  if (entry.isSymbolicLink()) {
+    throw new Error("native_slack_profile_symlink_rejected");
+  }
+  if (entry.isFile()) return entry.size;
+  if (!entry.isDirectory()) return 0;
+  return readdirSync(pathValue).reduce(
+    (total, name) => total + logicalTreeBytes(join(pathValue, name)),
+    0
+  );
+}
+
+function filesystemAvailableBytes(pathValue) {
+  const stats = statfsSync(pathValue);
+  return Number(stats.bavail) * Number(stats.bsize);
+}
+
+function removeWithoutFollowing(pathValue) {
+  if (!existsSync(pathValue)) return false;
+  const entry = lstatSync(pathValue);
+  rmSync(pathValue, {
+    recursive: entry.isDirectory() && !entry.isSymbolicLink(),
+    force: true,
+  });
+  return true;
+}
+
+function sweepStaleNativeSlackStages(root, profileId) {
+  const prefix = `.${profileId}.`;
+  const suffix = ".staging";
+  let removed = 0;
+  for (const name of readdirSync(root)) {
+    if (!name.startsWith(prefix) || !name.endsWith(suffix)) continue;
+    if (removeWithoutFollowing(join(root, name))) removed += 1;
+  }
+  return removed;
+}
+
+function prunePressureCaches(root) {
+  if (basename(root) !== "profiles") return [];
+  const dataRoot = dirname(root);
+  const removed = [];
+  for (const segments of PRESSURE_CACHE_PATHS) {
+    const target = join(dataRoot, ...segments);
+    if (removeWithoutFollowing(target)) removed.push(target);
+  }
+  return removed;
+}
+
+function materializationCauseCode(error) {
+  if (error && typeof error === "object") {
+    const code = error.code;
+    if (typeof code === "string" && /^[A-Za-z0-9_.:-]{1,128}$/.test(code)) {
+      return code;
+    }
+  }
+  if (error instanceof Error) {
+    const code = error.message.split(/[:\s]/, 1)[0];
+    if (/^[A-Za-z0-9_.-]{1,128}$/.test(code)) return code;
+  }
+  return "native_slack_profile_unknown_failure";
+}
+
 function exactKeys(value, keys) {
   return (
     value &&
@@ -202,7 +277,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.589" ||
+    desired.installerPackage !== "@sellable/install@0.1.591" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.860" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||
@@ -2178,6 +2253,7 @@ export async function materializeAgentProfile(input = {}) {
 }
 
 export const NATIVE_SLACK_CUSTOMER_PROFILE_INVENTORY = Object.freeze([
+  ".env",
   "agent-profile.json",
   "config.yaml",
   "shell-hooks-allowlist.json",
@@ -2187,6 +2263,32 @@ export const NATIVE_SLACK_CUSTOMER_PROFILE_INVENTORY = Object.freeze([
   "skills/sellable/SKILL.md",
 ]);
 
+const LEGACY_INTERNAL_ADMIN_PROFILE_ROOT = "/opt/data/profiles/sellable-admin";
+
+function repointInternalCronProfileReferences(desired, profileRoot) {
+  if (desired.workspaceId !== SELLABLE_INTERNAL_AGENT_WORKSPACE_ID) return;
+  const jobsPath = join(profileRoot, "cron", "jobs.json");
+  if (!existsSync(jobsPath)) return;
+  const entry = lstatSync(jobsPath);
+  if (
+    entry.isSymbolicLink() ||
+    !entry.isFile() ||
+    (entry.mode & 0o022) !== 0 ||
+    entry.size > 1024 * 1024
+  ) {
+    throw new Error("native_slack_cron_jobs_rejected");
+  }
+  const current = readFileSync(jobsPath, "utf8");
+  JSON.parse(current);
+  if (!current.includes(LEGACY_INTERNAL_ADMIN_PROFILE_ROOT)) return;
+  const updated = current.replaceAll(
+    LEGACY_INTERNAL_ADMIN_PROFILE_ROOT,
+    `/opt/data/profiles/${desired.profileId}`
+  );
+  JSON.parse(updated);
+  atomicWrite(jobsPath, updated, entry.mode & 0o777);
+}
+
 const NATIVE_SLACK_KEYS = [
   "runtimeMode",
   "workspaceId",
@@ -2352,6 +2454,21 @@ function nativeSlackCustomerFiles(desired, soulBytes = desired.soul) {
           SELLABLE_REQUIRE_WORKSPACE_LOCK: "1",
         },
       },
+      ...(desired.workspaceId === SELLABLE_INTERNAL_AGENT_WORKSPACE_ID
+        ? {
+            "sellable-admin": {
+              command:
+                "/usr/local/lib/sellable-agent/internal-admin-mcp/node_modules/.bin/sellable-admin-mcp",
+              args: [],
+              enabled: true,
+              env: {
+                SELLABLE_ADMIN_HOME: `${runtimeSecretRoot}/admin-settings`,
+                SELLABLE_ADMIN_CONFIG_PATH: `${runtimeSecretRoot}/admin-settings/settings.json`,
+                SELLABLE_ADMIN_STATE_PATH: `${runtimeSecretRoot}/admin-settings/config-state.json`,
+              },
+            },
+          }
+        : {}),
     },
   });
   const mcp = {
@@ -2376,6 +2493,7 @@ function nativeSlackCustomerFiles(desired, soulBytes = desired.soul) {
     },
   };
   return {
+    ".env": "",
     "config.yaml": `${JSON.stringify(config, null, 2)}\n`,
     "shell-hooks-allowlist.json": HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
     "sellable/mcp.json": `${JSON.stringify(mcp, null, 2)}\n`,
@@ -2539,6 +2657,7 @@ export function validateNativeSlackCustomerProfile({ desired, profileRoot }) {
 export function materializeNativeSlackCustomerProfile({
   desired,
   profilesRoot,
+  diskFreeBytes = filesystemAvailableBytes,
 }) {
   const valid = validateNativeSlackDesired(desired);
   if (!valid.ok) return valid;
@@ -2557,6 +2676,50 @@ export function materializeNativeSlackCustomerProfile({
       if (dirname(activeRoot) !== root || dirname(stagingRoot) !== root) {
         return { ok: false, code: "native_slack_profile_path_rejected" };
       }
+      sweepStaleNativeSlackStages(root, desired.profileId);
+      const extraProfiles = readdirSync(root).filter((name) => {
+        if (name === desired.profileId || name.startsWith(".")) return false;
+        const pathValue = join(root, name);
+        const entry = lstatSync(pathValue);
+        return entry.isDirectory() || entry.isSymbolicLink();
+      });
+      if (extraProfiles.length > 0) {
+        return {
+          ok: false,
+          code: "native_slack_extra_profile_rejected",
+          extraProfiles: extraProfiles.sort(),
+        };
+      }
+      const desiredSeedBytes = Object.values(
+        nativeSlackCustomerFiles(desired)
+      ).reduce(
+        (total, bytes) => total + Buffer.byteLength(bytes),
+        Buffer.byteLength(JSON.stringify(nativeSlackManifest(desired, {})))
+      );
+      const profileBytes = Math.max(
+        desiredSeedBytes,
+        logicalTreeBytes(activeRoot)
+      );
+      const requiredBytes =
+        profileBytes * NATIVE_SLACK_PEAK_COPY_MULTIPLIER +
+        NATIVE_SLACK_COPY_MARGIN_BYTES;
+      let availableBytes = Number(diskFreeBytes(root));
+      if (!Number.isFinite(availableBytes) || availableBytes < 0) {
+        throw new Error("native_slack_profile_disk_readback_invalid");
+      }
+      if (availableBytes < requiredBytes) {
+        prunePressureCaches(root);
+        availableBytes = Number(diskFreeBytes(root));
+      }
+      if (availableBytes < requiredBytes) {
+        return {
+          ok: false,
+          code: "native_slack_profile_insufficient_disk",
+          requiredBytes,
+          availableBytes,
+          profileBytes,
+        };
+      }
       let soulBytes = Buffer.from(desired.soul, "utf8");
       const liveSkillsIdentity = preservedSkillsConfigIdentity(activeRoot);
       if (existsSync(activeRoot)) {
@@ -2575,6 +2738,7 @@ export function materializeNativeSlackCustomerProfile({
         soulBytes
       );
       mergeHermesState(activeRoot, stagingRoot);
+      repointInternalCronProfileReferences(desired, stagingRoot);
       mergeLiveSkillsConfig(activeRoot, stagingRoot);
       if (
         liveSkillsIdentity !== null &&
@@ -2605,7 +2769,7 @@ export function materializeNativeSlackCustomerProfile({
         profileDigest: manifest.profileDigest,
         observedSoulRawSha256: sha256(soulBytes),
       };
-    } catch {
+    } catch (error) {
       if (existsSync(stagingRoot) && !lstatSync(stagingRoot).isSymbolicLink()) {
         rmSync(stagingRoot, { recursive: true, force: true });
       }
@@ -2615,6 +2779,7 @@ export function materializeNativeSlackCustomerProfile({
       return {
         ok: false,
         code: "native_slack_profile_materialization_failed",
+        causeCode: materializationCauseCode(error),
       };
     }
   };
@@ -2622,10 +2787,11 @@ export function materializeNativeSlackCustomerProfile({
     return withProfileSoulLock(desired.profileId, materialize, {
       dataRoot: basename(root) === "profiles" ? dirname(root) : root,
     });
-  } catch {
+  } catch (error) {
     return {
       ok: false,
       code: "native_slack_profile_materialization_failed",
+      causeCode: materializationCauseCode(error),
     };
   }
 }

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.589";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.591";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.860";
 
 export function deriveAgentProfileId(workspaceId, agentId, hostId) {
@@ -611,7 +611,7 @@ function inspectProvisionedProfile({
       !matchesReadback(manifest, request) ||
       manifest.serviceCredentialReference !== serviceCredentialReference ||
       manifest.installerPackage !== PINNED_INSTALL_PACKAGE ||
-      manifest.installerVersion !== "0.1.589" ||
+      manifest.installerVersion !== "0.1.591" ||
       manifest.mcpPackage !== PINNED_MCP_PACKAGE ||
       manifest.credentialKeyVersion !== credentialKeyVersion ||
       !/^[a-f0-9]{16}$/.test(manifest.credentialFingerprint) ||
@@ -825,7 +825,7 @@ function successReceipt({
     subject: `agent-profile:${observed.profileId}`,
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.589",
+      installVersion: "0.1.591",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },
@@ -873,7 +873,7 @@ function failure(code, stages, extra = {}, request = null) {
       : "agent-profile:unbound",
     cli: {
       installPackage: PINNED_INSTALL_PACKAGE,
-      installVersion: "0.1.589",
+      installVersion: "0.1.591",
       mcpPackage: PINNED_MCP_PACKAGE,
       command: "hermes profile bootstrap",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.589",
+  "version": "0.1.591",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {