@sellable/install 0.1.610 → 0.1.612-wip.phase189.20260812.2

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.609
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.612-wip.phase189.20260812.2
 ARG MCP_PACKAGE=@sellable/mcp@0.1.865
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-282pkYFADFrrIXyQcdUpQwakXiwe/AFUDpDZkTh29CFcGHnN7dvC0MCvaU4LffXA+ZuKCpuf02uxCLGiIEOjbw==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.609" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.612-wip.phase189.20260812.2" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.865" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.609" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.609-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.865') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.612-wip.phase189.20260812.2-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.865') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.609', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.865', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.612-wip.phase189.20260812.2', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.865', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.609` is
+`@sellable/install@0.1.612-wip.phase189.20260812.2` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.609-wip.hermes-desktop.20260811160530 .
+  --tag sellable-agent-host:0.1.612-wip.phase189.20260812.2-wip.hermes-desktop.20260811160530 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -40,6 +40,7 @@ import {
 import {
   buildAdminAgentServiceEnvironment,
   buildNativeHermesLaunch,
+  buildRuntimeServingObservation,
 } from "../admin-artifact/node_modules/@sellable/install/lib/sellable-agent/fly-customer-worker.mjs";
 import sodium from "../admin-artifact/node_modules/libsodium-wrappers/dist/modules-esm/libsodium-wrappers.mjs";
 import { SELLABLE_ALLOWED_TOOLSETS } from "../fly-capabilities-bridge.mjs";
@@ -67,11 +68,11 @@ import {
   HERMES_SNAPSHOT_HOOKS,
   HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
   applyHermesHostedBackgroundReviewPolicy,
-  ensureHermesOpportunitySequencesCron,
   ensureHermesSnapshotCron,
   markHermesSnapshotDirty,
   mergeHermesState,
   migrateLegacyHermesUserState,
+  quarantineLegacyLightfieldVenv,
   reconcileHermesSnapshot,
   restoreLatestHermesSnapshot,
 } from "../hermes-memory-snapshot.mjs";
@@ -694,10 +695,6 @@ const ADMIN_LIVE_SKILLS_CONFIG_KEYS = Object.freeze([
   "disabled",
   "platform_disabled",
 ]);
-const ADMIN_SEALED_SKILL_DIRECTORIES = new Set([
-  "sellable",
-  "opportunity-sequences",
-]);
 
 function adminPreservedSlackToolsets(config) {
   const platformToolsets = config?.platform_toolsets;
@@ -727,7 +724,7 @@ function adminPreservedSkillsIdentity(profileRoot) {
   const walk = (directory, relativePath = "") => {
     for (const name of readdirSync(directory).sort()) {
       const nextRelative = relativePath ? `${relativePath}/${name}` : name;
-      if (ADMIN_SEALED_SKILL_DIRECTORIES.has(nextRelative)) continue;
+      if (nextRelative === "sellable") continue;
       const path = join(directory, name);
       const stat = lstatSync(path);
       if (stat.isSymbolicLink()) {
@@ -1034,22 +1031,12 @@ async function materializeAdminProfile({
     hermesCli: HERMES,
   });
   if (!memoryCron.ok) throw new Error(memoryCron.code);
-  const opportunitySequencesCron = await ensureHermesOpportunitySequencesCron({
-    profileId: profile,
-    profileRoot: profileHome,
-    hermesRoot: DATA_ROOT,
-    statePath: layout.statePath,
-  });
-  if (!opportunitySequencesCron.ok) {
-    throw new Error(opportunitySequencesCron.code);
-  }
   return {
     stage,
     promotion: promoted.promotion,
     profile,
     profileHome,
     adminHome,
-    opportunitySequencesCron,
     observedSoulRawSha256: promoted.observedSoulRawSha256,
     servers: [serverProofs.sellable, serverProofs["sellable-admin"]].map(
       ({ tools: _tools, ...proof }) => proof
@@ -1200,6 +1187,70 @@ function operationIdentity(claim, exchange) {
   };
 }
 
+function operationSnapshotIdentity(claim, exchange) {
+  const authority = claim?.runtimeAuthority;
+  if (!authority) return undefined;
+  return {
+    operationId: claim.operation.id,
+    authorityGeneration: authority.authorityGeneration,
+    runtimeArtifactId: authority.assignedRuntimeArtifactId,
+    sourceMachineId: exchange.workerId,
+    sourceMachineVersion: authority.machineVersion,
+    sourceBootSessionId: BOOT_SESSION_ID,
+    profileSchemaVersion: "admin-native-profile/v2",
+  };
+}
+
+function adminServingObservation(activeLaunch, activeGateway, exchange) {
+  try {
+    const authority = activeLaunch?.claim?.runtimeAuthority;
+    const running =
+      activeGateway?.child?.exitCode === null && !activeGateway.child.killed;
+    const productMcp = activeLaunch?.profile?.servers?.find(
+      (server) => server.alias === "sellable"
+    );
+    const adminMcp = activeLaunch?.profile?.servers?.find(
+      (server) => server.alias === "sellable-admin"
+    );
+    if (!authority || !running || !activeLaunch.slackProof) return null;
+    const observedAt = new Date();
+    return buildRuntimeServingObservation({
+      scope: authority.scope,
+      kind: "ADMIN",
+      operationId: activeLaunch.claim.operation.id,
+      workspaceId: activeLaunch.claim.operation.workspaceId,
+      agentId: activeLaunch.claim.operation.agentId,
+      runtimeId: authority.runtimeId,
+      authorityGeneration: authority.authorityGeneration,
+      runtimeArtifactId: authority.runtimeArtifactId,
+      machineId: exchange.workerId,
+      machineVersion: authority.machineVersion,
+      bootSessionId: BOOT_SESSION_ID,
+      profileIdentity: activeLaunch.profile.profile,
+      processIdentity: `gateway-${activeGateway.child.pid}-${activeLaunch.claim.operation.fence}`,
+      observedAt: observedAt.toISOString(),
+      expiresAt: new Date(observedAt.getTime() + 120_000).toISOString(),
+      slack: {
+        authenticated: true,
+        socketModeConnected: true,
+        apiReachable: true,
+      },
+      productMcp: {
+        serverInfoName: productMcp?.serverInfoName,
+        toolCount: productMcp?.toolCount,
+      },
+      adminMcp: {
+        serverInfoName: adminMcp?.serverInfoName,
+        toolCount: adminMcp?.toolCount,
+      },
+      nativeGateway: true,
+      customerRouting: false,
+    });
+  } catch {
+    return null;
+  }
+}
+
 function startOperationHeartbeat({ claim, exchange, client }) {
   const identity = operationIdentity(claim, exchange);
   let stopped = false;
@@ -1708,6 +1759,42 @@ function nativeSlackProfileInput(claim, installed) {
   };
 }
 
+async function proveAdminSlackServing(claim, secrets) {
+  const slack = claim.runtimeContract?.slack;
+  if (!slack) throw new Error("admin_runtime_slack_contract_rejected");
+  const post = (method, token) =>
+    fetch(`https://slack.com/api/${method}`, {
+      method: "POST",
+      headers: {
+        authorization: `Bearer ${token}`,
+        "content-type": "application/x-www-form-urlencoded",
+      },
+      body: "",
+      signal: AbortSignal.timeout(15_000),
+    });
+  const [authResponse, socketResponse] = await Promise.all([
+    post("auth.test", secrets.slackBot),
+    post("apps.connections.open", secrets.slackApp),
+  ]);
+  const [auth, socket] = await Promise.all([
+    authResponse.json(),
+    socketResponse.json(),
+  ]);
+  if (
+    !authResponse.ok ||
+    auth?.ok !== true ||
+    auth.team_id !== slack.teamId ||
+    auth.user_id !== slack.botUserId ||
+    !socketResponse.ok ||
+    socket?.ok !== true ||
+    typeof socket.url !== "string" ||
+    !/^wss:\/\//.test(socket.url)
+  ) {
+    throw new Error("admin_runtime_slack_serving_rejected");
+  }
+  return true;
+}
+
 async function fetchDeliveryCiphertext({
   operation,
   identity,
@@ -2264,7 +2351,12 @@ function completionReceipt({
   };
 }
 
-async function flushHermesSnapshot({ client, profileId, profileRoot }) {
+async function flushHermesSnapshot({
+  client,
+  profileId,
+  profileRoot,
+  operationIdentity,
+}) {
   try {
     markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
@@ -2273,13 +2365,24 @@ async function flushHermesSnapshot({ client, profileId, profileRoot }) {
       hermesRoot: DATA_ROOT,
       hermesVersion: "0.20.0",
       debounceMs: 0,
-      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
+      operationIdentity,
+      upload: ({
+        archiveDigest,
+        archiveBytes,
+        sourceProfileId,
+        bytes,
+        ok: _ok,
+        status: _status,
+        hermesVersion: _hermesVersion,
+        ...v2
+      }) =>
         client.putMemorySnapshot(
           {
             archiveDigest,
             archiveBytes,
             hermesVersion: "0.20.0",
             sourceProfileId,
+            ...v2,
           },
           bytes
         ),
@@ -2992,6 +3095,11 @@ async function runAdminProduction() {
                     callerProfileId: activeLaunch.profile.profile,
                   }),
                 leaseSeconds: 60,
+                servingObservation: adminServingObservation(
+                  activeLaunch,
+                  activeGateway,
+                  exchange
+                ),
               })
             : await client.claim(60);
       } catch (error) {
@@ -3061,16 +3169,6 @@ async function runAdminProduction() {
               ),
           });
         }
-        if (
-          activeLaunch &&
-          (!activeGateway ||
-            activeGateway.child.exitCode !== null ||
-            activeGateway.child.killed)
-        ) {
-          await sleep(Math.min(30_000, 500 * 2 ** Math.min(failures, 6)));
-          activeGateway = await startNativeGateway(activeLaunch);
-          failures = 0;
-        }
         await sleep(1_000);
         continue;
       }
@@ -3182,6 +3280,14 @@ async function runAdminProduction() {
         fetchLatest: () => client.getMemorySnapshot(),
       });
       if (!memoryRestore.ok) throw new Error(memoryRestore.code);
+      const legacyLightfieldVenv = quarantineLegacyLightfieldVenv({
+        profileId: basename(profileContract.profileHome),
+        profileRoot: profileContract.profileHome,
+        hermesRoot: DATA_ROOT,
+      });
+      if (!legacyLightfieldVenv.ok) {
+        throw new Error(legacyLightfieldVenv.code);
+      }
       const legacyUserState = migrateLegacyHermesUserState({
         profileId: basename(profileContract.profileHome),
         profileRoot: profileContract.profileHome,
@@ -3214,6 +3320,7 @@ async function runAdminProduction() {
         client,
         profileId: profile.profile,
         profileRoot: profile.profileHome,
+        operationIdentity: operationSnapshotIdentity(claim, exchange),
       });
       const settings = settingsProof(
         imported.receipt.generationRoot,
@@ -3248,8 +3355,14 @@ async function runAdminProduction() {
         modelAuth,
       });
       operationHeartbeat.assertHealthy();
+      const slackProof =
+        desiredLifecycle === "ON"
+          ? await proveAdminSlackServing(claim, secrets)
+          : false;
       const candidateLaunch =
-        desiredLifecycle === "ON" ? { profile, claim, installed } : null;
+        desiredLifecycle === "ON"
+          ? { profile, claim, installed, slackProof }
+          : null;
       let candidateGateway = null;
       try {
         if (candidateLaunch) {

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,7 +6,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.865
 ARG MCP_INTEGRITY=sha512-282pkYFADFrrIXyQcdUpQwakXiwe/AFUDpDZkTh29CFcGHnN7dvC0MCvaU4LffXA+ZuKCpuf02uxCLGiIEOjbw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.609
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.612-wip.phase189.20260812.2
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
 ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -96,7 +96,7 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.609";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.612-wip.phase189.20260812.2";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.865";
 

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -32,6 +32,77 @@ function stableJson(value) {
   return JSON.stringify(value);
 }
 
+// CUSTOMER and ADMIN runtimes share this one serving-observation builder.
+export function buildRuntimeServingObservation(input = {}) {
+  const keys = [
+    "scope",
+    "kind",
+    "operationId",
+    "workspaceId",
+    "agentId",
+    "runtimeId",
+    "authorityGeneration",
+    "runtimeArtifactId",
+    "machineId",
+    "machineVersion",
+    "bootSessionId",
+    "profileIdentity",
+    "processIdentity",
+    "observedAt",
+    "expiresAt",
+    "slack",
+    "productMcp",
+    "adminMcp",
+    "nativeGateway",
+    "customerRouting",
+  ];
+  const identity = (value) =>
+    typeof value === "string" && SAFE_ID.test(value);
+  const mcp = (value, name, tools) =>
+    exactKeys(value, ["serverInfoName", "toolCount"]) &&
+    value.serverInfoName === name &&
+    value.toolCount === tools;
+  const observedAt = Date.parse(input.observedAt ?? "");
+  const expiresAt = Date.parse(input.expiresAt ?? "");
+  const kindExact =
+    input.kind === "CUSTOMER"
+      ? input.adminMcp === null && input.customerRouting === true
+      : input.kind === "ADMIN" &&
+        mcp(input.adminMcp, "sellable-admin-mcp", 46) &&
+        input.customerRouting === false;
+  if (
+    !exactKeys(input, keys) ||
+    !["ASSIGNED", "CANDIDATE"].includes(input.scope) ||
+    !keys
+      .slice(2, 13)
+      .filter((key) => key !== "authorityGeneration")
+      .every((key) => identity(input[key])) ||
+    !Number.isSafeInteger(input.authorityGeneration) ||
+    input.authorityGeneration < 1 ||
+    !Number.isFinite(observedAt) ||
+    !Number.isFinite(expiresAt) ||
+    expiresAt <= observedAt ||
+    expiresAt - observedAt > 5 * 60_000 ||
+    !exactKeys(input.slack, [
+      "authenticated",
+      "socketModeConnected",
+      "apiReachable",
+    ]) ||
+    input.slack.authenticated !== true ||
+    input.slack.socketModeConnected !== true ||
+    input.slack.apiReachable !== true ||
+    !mcp(input.productMcp, "sellable-mcp", 193) ||
+    input.nativeGateway !== true ||
+    !kindExact
+  ) {
+    throw new Error("runtime_serving_observation_rejected");
+  }
+  return Object.freeze({
+    schemaVersion: "sellable-agent-serving-observation/v2",
+    ...input,
+  });
+}
+
 export function buildAgentServiceEnvironment({
   workspaceId,
   agentId,

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -541,7 +541,7 @@ function tusUploadAccepted(value) {
       value.signedUploadToken.length <= 16_384 &&
       !/\s/.test(value.signedUploadToken) &&
       value.bucketName === "agent-hermes-backups-v1" &&
-      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:customer|admin)\/archives\/[a-f0-9]{64}\.zip$/.test(
+      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:(?:customer|admin)\/archives|agents\/[A-Za-z0-9_-]{1,128}\/operations\/[A-Za-z0-9_-]{1,128})\/[a-f0-9]{64}\.zip$/.test(
         value?.objectName ?? ""
       )
     );
@@ -784,6 +784,7 @@ export async function claimWithSoulObservation({
   tracker,
   readSoul,
   leaseSeconds = 60,
+  servingObservation = /** @type {any} */ (null),
 }) {
   // Deliver lifecycle work before any potentially slow local loader proof.
   // Reconciliation uses the same cadence only after the server confirms that
@@ -791,6 +792,7 @@ export async function claimWithSoulObservation({
   const tick = await client.claimTick({
     leaseSeconds,
     soulObservation: tracker.pending(),
+    ...(servingObservation ? { servingObservation } : {}),
   });
   if (tick?.claim) return tick.claim;
 
@@ -958,9 +960,9 @@ export function createFlyCustomerControlClient({
       }
     }
   };
-  const memorySnapshotControl = async (method, body, verb) => {
+  const memorySnapshotControl = async (method, body, verb, search = "") => {
     const response = await fetchImpl(
-      `${endpoint}/api/v3/sellable-agent/worker/memory-snapshot`,
+      `${endpoint}/api/v3/sellable-agent/worker/memory-snapshot${search}`,
       {
         method,
         headers: {
@@ -988,6 +990,37 @@ export function createFlyCustomerControlClient({
     value.archiveBytes <= 128 * 1024 * 1024 &&
     value.hermesVersion === "0.20.0" &&
     /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value?.sourceProfileId ?? "");
+  const boundedSnapshotIdentity = (value) =>
+    /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/.test(value ?? "");
+  const metadataV2Accepted = (value) =>
+    metadataAccepted(value) &&
+    Object.keys(value).sort().join(",") ===
+      "archiveBytes,archiveDigest,authorityGeneration,hermesVersion,operationId,profileSchemaVersion,runtimeArtifactId,sourceBootSessionId,sourceMachineId,sourceMachineVersion,sourceProfileId" &&
+    boundedSnapshotIdentity(value.operationId) &&
+    Number.isSafeInteger(value.authorityGeneration) &&
+    value.authorityGeneration > 0 &&
+    boundedSnapshotIdentity(value.runtimeArtifactId) &&
+    boundedSnapshotIdentity(value.profileSchemaVersion) &&
+    [
+      value.sourceMachineId,
+      value.sourceMachineVersion,
+      value.sourceBootSessionId,
+    ].every(
+      (identityValue) =>
+        identityValue === null || boundedSnapshotIdentity(identityValue)
+    );
+  const snapshotReadbackExpected = (value) =>
+    value &&
+    typeof value === "object" &&
+    !Array.isArray(value) &&
+    Object.keys(value).sort().join(",") ===
+      "authorityGeneration,operationId,profileSchemaVersion,runtimeArtifactId,sourceProfileId" &&
+    boundedSnapshotIdentity(value.operationId) &&
+    Number.isSafeInteger(value.authorityGeneration) &&
+    value.authorityGeneration > 0 &&
+    boundedSnapshotIdentity(value.runtimeArtifactId) &&
+    /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value.sourceProfileId ?? "") &&
+    boundedSnapshotIdentity(value.profileSchemaVersion);
   const signedUrlAccepted = (value) => {
     try {
       return new URL(value).protocol === "https:";
@@ -996,8 +1029,9 @@ export function createFlyCustomerControlClient({
     }
   };
   const putMemorySnapshot = async (metadata, archive) => {
+    const isV2 = Object.hasOwn(metadata ?? {}, "operationId");
     if (
-      !metadataAccepted(metadata) ||
+      !(isV2 ? metadataV2Accepted(metadata) : metadataAccepted(metadata)) ||
       !Buffer.isBuffer(archive) ||
       metadata.archiveBytes !== archive.byteLength ||
       createHash("sha256").update(archive).digest("hex") !==
@@ -1009,14 +1043,20 @@ export function createFlyCustomerControlClient({
       const value = await memorySnapshotControl(
         "PUT",
         {
-          schemaVersion: "sellable-hermes-snapshot-upload/v1",
+          schemaVersion: isV2
+            ? "sellable-hermes-snapshot-upload/v2"
+            : "sellable-hermes-snapshot-upload/v1",
           ...metadata,
         },
         "memory-snapshot-put"
       );
       if (
         !tusUploadAccepted(value) ||
-        !value.objectName.endsWith(`/${metadata.archiveDigest}.zip`)
+        !value.objectName.endsWith(
+          isV2
+            ? `/operations/${metadata.operationId}/${metadata.archiveDigest}.zip`
+            : `/${metadata.archiveDigest}.zip`
+        )
       ) {
         throw new WorkerControlResponseError(
           "memory_snapshot_upload_url_rejected"
@@ -1034,7 +1074,9 @@ export function createFlyCustomerControlClient({
     const committed = await memorySnapshotControl(
       "POST",
       {
-        schemaVersion: "sellable-hermes-snapshot-commit/v1",
+        schemaVersion: isV2
+          ? "sellable-hermes-snapshot-commit/v2"
+          : "sellable-hermes-snapshot-commit/v1",
         ...metadata,
       },
       "memory-snapshot-put"
@@ -1047,14 +1089,42 @@ export function createFlyCustomerControlClient({
     }
     return committed;
   };
-  const getMemorySnapshot = async () => {
+  const getMemorySnapshot = async (expected) => {
+    const isV2 = expected !== undefined;
+    if (isV2 && !snapshotReadbackExpected(expected)) {
+      throw new WorkerControlResponseError("memory_snapshot_download_rejected");
+    }
+    const body = isV2
+      ? {
+          schemaVersion: "sellable-hermes-snapshot-get/v2",
+          operationId: expected.operationId,
+        }
+      : { schemaVersion: "sellable-hermes-snapshot-get/v1" };
+    const search = isV2
+      ? `?${new URLSearchParams(body).toString()}`
+      : "";
     const result = await memorySnapshotControl(
       "GET",
-      { schemaVersion: "sellable-hermes-snapshot-get/v1" },
-      "memory-snapshot-get"
+      body,
+      "memory-snapshot-get",
+      search
     );
     if (!result) return null;
-    if (!metadataAccepted(result) || !signedUrlAccepted(result.signedUrl)) {
+    const identityReadbackAccepted =
+      !isV2 ||
+      (result.operationId === expected.operationId &&
+        result.authorityGeneration === expected.authorityGeneration &&
+        result.runtimeArtifactId === expected.runtimeArtifactId &&
+        result.sourceProfileId === expected.sourceProfileId &&
+        result.profileSchemaVersion === expected.profileSchemaVersion &&
+        /^[a-f0-9]{64}$/.test(result.archiveDigest ?? "") &&
+        Number.isSafeInteger(result.archiveBytes) &&
+        result.archiveBytes > 0 &&
+        result.archiveBytes <= 128 * 1024 * 1024);
+    if (
+      !(isV2 ? identityReadbackAccepted : metadataAccepted(result)) ||
+      !signedUrlAccepted(result.signedUrl)
+    ) {
       throw new WorkerControlResponseError(
         "memory_snapshot_download_url_rejected"
       );
@@ -1074,10 +1144,15 @@ export function createFlyCustomerControlClient({
     }
     return { ...result, signedUrl: undefined, bytes };
   };
-  const claimTick = async ({ leaseSeconds = 60, soulObservation } = {}) =>
+  const claimTick = async ({
+    leaseSeconds = 60,
+    soulObservation,
+    servingObservation,
+  } = {}) =>
     post("claim", "/api/v3/sellable-agent/worker/claim", {
       leaseSeconds,
       ...(soulObservation ? { soulObservation } : {}),
+      ...(servingObservation ? { servingObservation } : {}),
     });
   return Object.freeze({
     claimTick,
@@ -1153,8 +1228,8 @@ export function createFlyCustomerControlClient({
     async putMemorySnapshot(metadata, archive) {
       return putMemorySnapshot(metadata, archive);
     },
-    async getMemorySnapshot() {
-      return getMemorySnapshot();
+    async getMemorySnapshot(expected) {
+      return getMemorySnapshot(expected);
     },
   });
 }

package/lib/sellable-agent/hermes-memory-snapshot.mjs

@@ -55,22 +55,12 @@ export const HERMES_SNAPSHOT_CRON = Object.freeze({
   installedScript: "scripts/hermes-memory-reconcile.sh",
   noAgent: true,
 });
-export const HERMES_OPPORTUNITY_SEQUENCES_CRON = Object.freeze({
-  name: "sellable-opportunity-sequences",
-  schedule: "every 30m",
-  deliver: "slack",
-  skills: Object.freeze(["opportunity-sequences"]),
-  enabledToolsets: Object.freeze(["safe", "sellable", "mcp"]),
-  noAgent: false,
-});
-export const HERMES_OPPORTUNITY_SEQUENCES_JOURNAL_ROOT =
-  "/opt/data/.sellable-agent/admin-runtime/opportunity-sequences";
 const LEGACY_HERMES_SNAPSHOT_SCRIPT = "scripts/hermes-memory-reconcile.sh";
 
 const HERMES = "/opt/hermes/.venv/bin/hermes";
-const HERMES_PYTHON = "/opt/hermes/.venv/bin/python";
 const VERSION = "0.20.0";
 const ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
+const BOUNDED_ID = /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/;
 const SHA256 = /^[a-f0-9]{64}$/;
 const MAX_BYTES = 128 * 1024 * 1024;
 // Portable snapshots contain user-authored/customizable state plus the compact
@@ -277,77 +267,125 @@ export function mergeHermesState(sourceRoot, targetRoot) {
   merge(sourceRoot, targetRoot);
 }
 
-function cronJobs(profileRoot) {
-  const path = join(profileRoot, "cron", "jobs.json");
-  if (!existsSync(path)) return [];
-  regularFile(path);
-  const jobs = JSON.parse(readFileSync(path, "utf8")).jobs;
-  if (!Array.isArray(jobs)) throw new Error("hermes_snapshot_cron_rejected");
-  return jobs;
-}
+const LEGACY_LIGHTFIELD_VENV = ".venv-amplify-audit";
+const LEGACY_LIGHTFIELD_QUARANTINE_SCHEMA =
+  "sellable-agent-lightfield-venv-quarantine/v1";
 
-const sameJson = (left, right) =>
-  JSON.stringify(left) === JSON.stringify(right);
+function privateMigrationDirectory(path) {
+  if (existsSync(path)) {
+    const stat = lstatSync(path);
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+      throw new Error("hermes_lightfield_quarantine_path_rejected");
+    }
+    return;
+  }
+  mkdirSync(path, { mode: 0o700 });
+  fsyncDirectory(dirname(path));
+}
 
-export async function ensureHermesNamedCron({
+/**
+ * Quarantine the one persisted pre-Phase-189 Lightfield virtualenv layout.
+ * Its ordinary Python symlinks must never weaken the general snapshot scan.
+ */
+export function quarantineLegacyLightfieldVenv({
+  profileId,
   profileRoot,
-  name,
-  isExpected,
-  isUpdatable = () => true,
-  create,
-  update,
-  codePrefix = "hermes_named_cron",
-}) {
-  if (
-    !isAbsolute(profileRoot) ||
-    !ID.test(name ?? "") ||
-    typeof isExpected !== "function" ||
-    typeof create !== "function" ||
-    typeof update !== "function"
-  ) {
-    return failed(`${codePrefix}_identity_rejected`);
+  hermesRoot,
+} = {}) {
+  if (!validProfilePath(profileId, profileRoot, hermesRoot)) {
+    return {
+      ...failed("hermes_lightfield_quarantine_identity_rejected"),
+      quarantinePath: null,
+    };
   }
+  const legacyPath = join(profileRoot, LEGACY_LIGHTFIELD_VENV);
+  const quarantineBase = join(
+    hermesRoot,
+    "backups",
+    "quarantine",
+    "legacy-lightfield-venv-v1"
+  );
+  const quarantinePath = join(quarantineBase, profileId);
+  const marker = join(
+    profileRoot,
+    ".sellable-agent",
+    "migrations",
+    "lightfield-venv-quarantine-v1.json"
+  );
   try {
-    const before = cronJobs(profileRoot);
-    const named = before.filter((job) => job?.name === name);
-    if (named.length > 1 || (named[0] && !isUpdatable(named[0]))) {
-      return failed(`${codePrefix}_inventory_rejected`);
+    if (existsSync(marker)) {
+      regularFile(marker);
+      const receipt = JSON.parse(readFileSync(marker, "utf8"));
+      if (
+        receipt?.schemaVersion !== LEGACY_LIGHTFIELD_QUARANTINE_SCHEMA ||
+        receipt.profileId !== profileId ||
+        receipt.source !== LEGACY_LIGHTFIELD_VENV ||
+        receipt.quarantinePath !== quarantinePath ||
+        !existsSync(quarantinePath) ||
+        lstatSync(quarantinePath).isSymbolicLink() ||
+        !lstatSync(quarantinePath).isDirectory()
+      ) {
+        throw new Error("hermes_lightfield_quarantine_receipt_rejected");
+      }
+      return { ok: true, status: "REUSED", profileId, quarantinePath };
     }
-    if (named[0] && isExpected(named[0])) {
+    const sourcePresent = existsSync(legacyPath);
+    const targetPresent = existsSync(quarantinePath);
+    if (!sourcePresent && !targetPresent) {
       return {
         ok: true,
-        status: "REUSED",
-        jobId: named[0].id,
-        job: named[0],
+        status: "NO_LEGACY_LAYOUT",
+        profileId,
+        quarantinePath: null,
       };
     }
-    const siblings = before.filter((job) => job?.name !== name);
-    const mutation = named[0] ? await update(named[0]) : await create();
-    if (childFailed(mutation)) {
-      return failed(`${codePrefix}_${named[0] ? "update" : "create"}_failed`);
+    if (sourcePresent && targetPresent) {
+      throw new Error("hermes_lightfield_quarantine_conflict");
     }
-    const after = cronJobs(profileRoot);
-    const readback = after.filter((job) => job?.name === name);
-    const afterSiblings = after.filter((job) => job?.name !== name);
-    if (!sameJson(afterSiblings, siblings)) {
-      return failed(`${codePrefix}_sibling_readback_rejected`);
+    let status = "RESUMED";
+    if (sourcePresent) {
+      const source = lstatSync(legacyPath);
+      if (source.isSymbolicLink() || !source.isDirectory()) {
+        throw new Error("hermes_lightfield_quarantine_source_rejected");
+      }
+      privateMigrationDirectory(join(hermesRoot, "backups"));
+      privateMigrationDirectory(join(hermesRoot, "backups", "quarantine"));
+      privateMigrationDirectory(quarantineBase);
+      moveDurably(legacyPath, quarantinePath);
+      status = "QUARANTINED";
     }
-    if (readback.length !== 1 || !isExpected(readback[0])) {
-      return failed(
-        `${codePrefix}_${named[0] ? "update_readback" : "readback"}_rejected`
-      );
+    const quarantined = lstatSync(quarantinePath);
+    if (quarantined.isSymbolicLink() || !quarantined.isDirectory()) {
+      throw new Error("hermes_lightfield_quarantine_readback_rejected");
     }
+    atomicWrite(
+      marker,
+      `${JSON.stringify({
+        schemaVersion: LEGACY_LIGHTFIELD_QUARANTINE_SCHEMA,
+        profileId,
+        source: LEGACY_LIGHTFIELD_VENV,
+        quarantinePath,
+      })}\n`,
+      0o600
+    );
+    return { ok: true, status, profileId, quarantinePath };
+  } catch {
     return {
-      ok: true,
-      status: named[0] ? "UPDATED" : "CREATED",
-      jobId: readback[0].id,
-      job: readback[0],
+      ...failed("hermes_lightfield_quarantine_failed"),
+      quarantinePath: null,
     };
-  } catch {
-    return failed(`${codePrefix}_install_failed`);
   }
 }
 
+function cronJobs(profileRoot) {
+  const path = join(profileRoot, "cron", "jobs.json");
+  if (!existsSync(path)) return [];
+  regularFile(path);
+  const jobs = JSON.parse(readFileSync(path, "utf8")).jobs;
+  if (!Array.isArray(jobs)) throw new Error("hermes_snapshot_cron_rejected");
+  return jobs;
+}
+
 function isCron(job) {
   return Boolean(
     job?.id &&
@@ -631,40 +669,25 @@ export async function ensureHermesSnapshotCron({
       readFileSync(reconcileTemplatePath),
       0o700
     );
-    const result = await ensureHermesNamedCron({
-      profileRoot,
-      name: HERMES_SNAPSHOT_CRON.name,
-      isExpected: isCron,
-      isUpdatable: (job) => isCron(job) || isLegacyCron(job),
-      codePrefix: "hermes_snapshot_cron",
-      create: () =>
-        childRunner(runChild)(
-          invocation(
-            [
-              "--profile",
-              profileId,
-              "cron",
-              "create",
-              HERMES_SNAPSHOT_CRON.schedule,
-              "--name",
-              HERMES_SNAPSHOT_CRON.name,
-              "--script",
-              HERMES_SNAPSHOT_CRON.script,
-              "--no-agent",
-            ],
-            hermesRoot,
-            hermesCli
-          )
-        ),
-      update: (job) =>
-        childRunner(runChild)(
+    const before = cronJobs(profileRoot).filter(
+      (job) => job?.name === HERMES_SNAPSHOT_CRON.name
+    );
+    if (
+      before.length > 1 ||
+      (before[0] && !isCron(before[0]) && !isLegacyCron(before[0]))
+    ) {
+      return failed("hermes_snapshot_cron_inventory_rejected");
+    }
+    if (before[0]) {
+      if (isLegacyCron(before[0])) {
+        const migrated = await childRunner(runChild)(
           invocation(
             [
               "--profile",
               profileId,
               "cron",
               "edit",
-              job.id,
+              before[0].id,
               "--script",
               HERMES_SNAPSHOT_CRON.script,
               "--no-agent",
@@ -672,194 +695,53 @@ export async function ensureHermesSnapshotCron({
             hermesRoot,
             hermesCli
           )
-        ),
-    });
-    if (!result.ok) {
-      if (result.code === "hermes_snapshot_cron_update_failed") {
-        return failed("hermes_snapshot_cron_migrate_failed");
-      }
-      if (result.code === "hermes_snapshot_cron_update_readback_rejected") {
-        return failed("hermes_snapshot_cron_migrate_readback_rejected");
+        );
+        if (childFailed(migrated)) {
+          return failed("hermes_snapshot_cron_migrate_failed");
+        }
+        const afterMigration = cronJobs(profileRoot).filter(
+          (job) => job?.name === HERMES_SNAPSHOT_CRON.name
+        );
+        return afterMigration.length === 1 && isCron(afterMigration[0])
+          ? {
+              ok: true,
+              status: "MIGRATED",
+              jobId: afterMigration[0].id,
+              profileId,
+            }
+          : failed("hermes_snapshot_cron_migrate_readback_rejected");
       }
-      return result;
-    }
-    return {
-      ok: true,
-      status: result.status === "UPDATED" ? "MIGRATED" : result.status,
-      jobId: result.jobId,
-      profileId,
-    };
-  } catch {
-    return failed("hermes_snapshot_cron_install_failed");
-  }
-}
-
-const OPPORTUNITY_SEQUENCE_ASSETS = Object.freeze([
-  "SKILL.md",
-  "references/outbound-multichannel-v2.md",
-  "references/positive-reply-to-agreed-meeting-v1.md",
-]);
-const SLACK_USER_ID = /^U[A-Z0-9]{8,20}$/;
-const OPPORTUNITY_SEQUENCE_CRON_PYTHON = [
-  "import json,sys",
-  "from cron.jobs import create_job, update_job",
-  "value=json.loads(sys.argv[1])",
-  "job_id=value.pop('jobId', None)",
-  "enabled=value.pop('enabled')",
-  "result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value)",
-  "print(json.dumps({'id': result.get('id') if result else None}))",
-].join("\n");
-
-function opportunitySequenceIdentity(profileRoot) {
-  const root = join(profileRoot, "skills", "opportunity-sequences");
-  return Object.fromEntries(
-    OPPORTUNITY_SEQUENCE_ASSETS.map((relative) => {
-      const path = join(root, relative);
-      regularFile(path);
-      return [relative, sha256(readFileSync(path))];
-    })
-  );
-}
-
-function opportunitySequencePrompt({
-  notificationSlackUserId,
-  journalRoot,
-  hashes,
-}) {
-  return [
-    "Run the installed opportunity-sequences skill for one bounded page.",
-    `Use the private journal at ${journalRoot}.`,
-    `Require these installed asset hashes: ${JSON.stringify(hashes)}.`,
-    `End with a compact native Slack summary addressed to <@${notificationSlackUserId}>.`,
-    "Never send prospect outreach; never claim exactly-once delivery; never use a direct Slack or Lightfield transport outside the installed skill and Product MCP.",
-  ].join(" ");
-}
-
-export async function ensureHermesOpportunitySequencesCron({
-  profileId,
-  profileRoot,
-  hermesRoot,
-  statePath,
-  journalRoot = HERMES_OPPORTUNITY_SEQUENCES_JOURNAL_ROOT,
-  hermesPython = HERMES_PYTHON,
-  runChild,
-}) {
-  if (
-    !validProfilePath(profileId, profileRoot, hermesRoot) ||
-    !existsSync(profileRoot) ||
-    !isAbsolute(statePath) ||
-    !isAbsolute(journalRoot)
-  ) {
-    return failed("hermes_opportunity_sequences_cron_identity_rejected");
-  }
-  try {
-    const stateStat = regularFile(statePath);
-    if ((stateStat.mode & 0o077) !== 0) {
-      return failed("hermes_opportunity_sequences_cron_state_mode_rejected");
-    }
-    const state = JSON.parse(readFileSync(statePath, "utf8"));
-    const notificationSlackUserId =
-      state?.opportunitySequences?.notificationSlackUserId;
-    if (!SLACK_USER_ID.test(notificationSlackUserId ?? "")) {
-      return failed("hermes_opportunity_sequences_cron_notification_rejected");
+      return { ok: true, status: "REUSED", jobId: before[0].id, profileId };
     }
-    mkdirSync(journalRoot, { recursive: true, mode: 0o700 });
-    chmodSync(journalRoot, 0o700);
-    const journalStat = lstatSync(journalRoot);
-    if (
-      journalStat.isSymbolicLink() ||
-      !journalStat.isDirectory() ||
-      (journalStat.mode & 0o077) !== 0
-    ) {
-      return failed("hermes_opportunity_sequences_cron_journal_rejected");
-    }
-    const hashes = opportunitySequenceIdentity(profileRoot);
-    const prompt = opportunitySequencePrompt({
-      notificationSlackUserId,
-      journalRoot,
-      hashes,
-    });
-    const expected = (job) =>
-      Boolean(
-        job?.id &&
-          job.name === HERMES_OPPORTUNITY_SEQUENCES_CRON.name &&
-          job.prompt === prompt &&
-          job.no_agent === false &&
-          job.enabled === true &&
-          job.deliver === HERMES_OPPORTUNITY_SEQUENCES_CRON.deliver &&
-          sameJson(job.skills, HERMES_OPPORTUNITY_SEQUENCES_CRON.skills) &&
-          sameJson(
-            job.enabled_toolsets,
-            HERMES_OPPORTUNITY_SEQUENCES_CRON.enabledToolsets
-          ) &&
-          job.schedule?.kind === "interval" &&
-          job.schedule?.minutes === 30
-      );
-    const mutate = (jobId = null) => {
-      const spec = {
-        prompt,
-        schedule: HERMES_OPPORTUNITY_SEQUENCES_CRON.schedule,
-        name: HERMES_OPPORTUNITY_SEQUENCES_CRON.name,
-        deliver: HERMES_OPPORTUNITY_SEQUENCES_CRON.deliver,
-        skills: [...HERMES_OPPORTUNITY_SEQUENCES_CRON.skills],
-        enabled_toolsets: [
-          ...HERMES_OPPORTUNITY_SEQUENCES_CRON.enabledToolsets,
+    const result = await childRunner(runChild)(
+      invocation(
+        [
+          "--profile",
+          profileId,
+          "cron",
+          "create",
+          HERMES_SNAPSHOT_CRON.schedule,
+          "--name",
+          HERMES_SNAPSHOT_CRON.name,
+          "--script",
+          HERMES_SNAPSHOT_CRON.script,
+          "--no-agent",
         ],
-        no_agent: false,
-        enabled: true,
-        ...(jobId ? { jobId } : {}),
-      };
-      return childRunner(runChild)({
-        command: hermesPython,
-        args: ["-c", OPPORTUNITY_SEQUENCE_CRON_PYTHON, JSON.stringify(spec)],
-        env: {
-          ...process.env,
-          HOME: hermesRoot,
-          HERMES_HOME: profileRoot,
-          HERMES_PROFILE: profileId,
-          NO_COLOR: "1",
-        },
-        shell: false,
-        timeoutMs: NATIVE_COMMAND_TIMEOUT_MS,
-        maxOutputBytes: 64 * 1024,
-      });
-    };
-    const result = await ensureHermesNamedCron({
-      profileRoot,
-      name: HERMES_OPPORTUNITY_SEQUENCES_CRON.name,
-      isExpected: expected,
-      create: () => mutate(),
-      update: (job) => mutate(job.id),
-      codePrefix: "hermes_opportunity_sequences_cron",
-    });
-    if (!result.ok) return result;
-    const jobsMode =
-      lstatSync(join(profileRoot, "cron", "jobs.json")).mode & 0o777;
-    if ((jobsMode & 0o077) !== 0) {
-      return failed("hermes_opportunity_sequences_cron_jobs_mode_rejected");
+        hermesRoot,
+        hermesCli
+      )
+    );
+    if (childFailed(result)) {
+      return failed("hermes_snapshot_cron_create_failed");
     }
-    return {
-      ok: true,
-      status: result.status,
-      jobId: result.jobId,
-      name: result.job.name,
-      prompt: result.job.prompt,
-      schedule: result.job.schedule,
-      profileId,
-      enabledToolsets: result.job.enabled_toolsets,
-      skills: result.job.skills,
-      assetHashes: hashes,
-      notificationSlackUserIdSource:
-        "config-state.json:opportunitySequences.notificationSlackUserId",
-      journalRoot,
-      modes: {
-        state: stateStat.mode & 0o777,
-        journal: journalStat.mode & 0o777,
-        jobs: jobsMode,
-      },
-    };
+    const after = cronJobs(profileRoot).filter(
+      (job) => job?.name === HERMES_SNAPSHOT_CRON.name
+    );
+    return after.length === 1 && isCron(after[0])
+      ? { ok: true, status: "CREATED", jobId: after[0].id, profileId }
+      : failed("hermes_snapshot_cron_readback_rejected");
   } catch {
-    return failed("hermes_opportunity_sequences_cron_install_failed");
+    return failed("hermes_snapshot_cron_install_failed");
   }
 }
 
@@ -872,12 +754,31 @@ export async function captureHermesBackup({
   hermesCli = HERMES,
   maxArchiveBytes = MAX_BYTES,
   runChild,
+  operationIdentity = /** @type {any} */ (undefined),
 }) {
+  const operationIdentityAccepted =
+    operationIdentity === undefined ||
+    (operationIdentity &&
+      typeof operationIdentity === "object" &&
+      !Array.isArray(operationIdentity) &&
+      Object.keys(operationIdentity).sort().join(",") ===
+        "authorityGeneration,operationId,profileSchemaVersion,runtimeArtifactId,sourceBootSessionId,sourceMachineId,sourceMachineVersion" &&
+      BOUNDED_ID.test(operationIdentity.operationId ?? "") &&
+      Number.isSafeInteger(operationIdentity.authorityGeneration) &&
+      operationIdentity.authorityGeneration > 0 &&
+      BOUNDED_ID.test(operationIdentity.runtimeArtifactId ?? "") &&
+      BOUNDED_ID.test(operationIdentity.profileSchemaVersion ?? "") &&
+      [
+        operationIdentity.sourceMachineId,
+        operationIdentity.sourceMachineVersion,
+        operationIdentity.sourceBootSessionId,
+      ].every((value) => value === null || BOUNDED_ID.test(value ?? "")));
   if (
     !validProfilePath(profileId, profileRoot, hermesRoot) ||
     !existsSync(profileRoot) ||
     hermesVersion !== VERSION ||
-    !isAbsolute(archiveDirectory)
+    !isAbsolute(archiveDirectory) ||
+    !operationIdentityAccepted
   ) {
     return failed("hermes_snapshot_capture_identity_rejected");
   }
@@ -917,6 +818,7 @@ export async function captureHermesBackup({
       archiveBytes: bytes.byteLength,
       hermesVersion,
       sourceProfileId: profileId,
+      ...(operationIdentity ?? {}),
       bytes,
     };
   } catch {
@@ -1022,6 +924,7 @@ async function reconcileHermesSnapshotOnce({
   debounceMs = 2_000,
   hermesCli = HERMES,
   runChild,
+  operationIdentity = /** @type {any} */ (undefined),
 }) {
   if (!validProfilePath(profileId, profileRoot, hermesRoot)) {
     return failed("hermes_snapshot_reconcile_identity_rejected");
@@ -1048,6 +951,7 @@ async function reconcileHermesSnapshotOnce({
       hermesVersion,
       hermesCli,
       runChild,
+      operationIdentity,
     });
     if (!captured.ok) {
       requeueClaim(paths.marker, claim);
@@ -1081,6 +985,7 @@ export async function reconcileHermesSnapshot({
   debounceMs = 2_000,
   hermesCli = HERMES,
   runChild,
+  operationIdentity = /** @type {any} */ (undefined),
 }) {
   const key = `${resolve(hermesRoot)}\0${profileId}`;
   const active = snapshotReconciles.get(key);
@@ -1095,6 +1000,7 @@ export async function reconcileHermesSnapshot({
     debounceMs,
     hermesCli,
     runChild,
+    operationIdentity,
   }).finally(() => snapshotReconciles.delete(key));
   snapshotReconciles.set(key, operation);
   return operation;

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.609";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.612-wip.phase189.20260812.2";
 const MCP_PACKAGE = "@sellable/mcp@0.1.865";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.609" ||
+      pinned.installerPackage !== "@sellable/install@0.1.612-wip.phase189.20260812.2" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.865" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -278,7 +278,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.609" ||
+    desired.installerPackage !== "@sellable/install@0.1.612-wip.phase189.20260812.2" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.865" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.609";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.612-wip.phase189.20260812.2";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.865";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/lib/sellable-agent/runtime-reconciler.mjs

@@ -39,6 +39,53 @@ export const LIFECYCLE_TRANSITION_ORDER = Object.freeze({
   ],
 });
 
+const REPAIR_ID = /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/;
+
+// The control plane owns the durable repair budget. This runtime seam only
+// executes the single action returned by that authority.
+export async function applyBoundedRuntimeRepair(input = {}) {
+  const {
+    workspaceId,
+    agentId,
+    agentKind,
+    assignedRuntimeArtifactId,
+    readinessIdentity,
+    ports,
+  } = input;
+  if (
+    ![workspaceId, agentId, assignedRuntimeArtifactId, readinessIdentity].every(
+      (value) => REPAIR_ID.test(value ?? "")
+    ) ||
+    !["CUSTOMER", "ADMIN"].includes(agentKind) ||
+    !ports ||
+    typeof ports.recordFailure !== "function" ||
+    typeof ports.restartLocal !== "function" ||
+    typeof ports.requestMachineRestart !== "function"
+  ) {
+    return { ok: false, status: "REPAIR_INPUT_REJECTED" };
+  }
+  const authority = Object.freeze({
+    workspaceId,
+    agentId,
+    agentKind,
+    runtimeArtifactId: assignedRuntimeArtifactId,
+    readinessIdentity,
+  });
+  const decision = await ports.recordFailure(authority);
+  if (decision?.action === "LOCAL_RESTART") {
+    await ports.restartLocal(authority);
+    return { ok: true, status: "LOCAL_RESTART", exhausted: false };
+  }
+  if (decision?.action === "MACHINE_RESTART") {
+    await ports.requestMachineRestart(authority);
+    return { ok: true, status: "MACHINE_RESTART", exhausted: false };
+  }
+  if (decision?.action === "EXHAUSTED") {
+    return { ok: true, status: "EXHAUSTED", exhausted: true };
+  }
+  return { ok: false, status: "REPAIR_DECISION_REJECTED" };
+}
+
 const DRIFT_GROUPS = [
   {
     action: RUNTIME_DRIFT_ACTIONS.PACKAGE,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.610",
+  "version": "0.1.612-wip.phase189.20260812.2",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {