@sellable/install 0.1.611-wip.phase189.20260812.1 → 0.1.611

package/container/Dockerfile

@@ -3,13 +3,13 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.611-wip.phase189.20260812.1
-ARG MCP_PACKAGE=@sellable/mcp@0.1.864
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.611
+ARG MCP_PACKAGE=@sellable/mcp@0.1.866
 ARG INSTALLER_INTEGRITY
-ARG MCP_INTEGRITY=sha512-UevVd71zQL2FgnqYaeHBkTi73iUV0Lg5BchM5JNhUbvaFxAFQ2M1n9uSS18qVuM9Km0aGZ7a0k8M9e2AVPboAw==
+ARG MCP_INTEGRITY=sha512-ry4l91gBit9s1z7aw+v2nq7ULkdugt5BGubJsZ9OPJHwNsCVe6x1iuEe/Alr5Fxr3tdSwUE1fti5PnusD2w86g==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.611-wip.phase189.20260812.1" \
-    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.864" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.611" \
+    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.866" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.611-wip.phase189.202608
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.611-wip.phase189.20260812.1-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.864') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.609-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.866') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.611-wip.phase189.20260812.1', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.864', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.611', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.866', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.611-wip.phase189.20260812.1` is
+`@sellable/install@0.1.611` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.611-wip.phase189.20260812.1-wip.hermes-desktop.20260811160530 .
+  --tag sellable-agent-host:0.1.609-wip.hermes-desktop.20260811160530 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/external-runtime-builder.mjs

@@ -28,7 +28,7 @@ import {
 
 const MANIFEST_VERSION = "sellable-agent-external-runtime-closure/v1";
 const MCP_PACKAGE = "@sellable/mcp";
-const MCP_VERSION = "0.1.864";
+const MCP_VERSION = "0.1.866";
 const SAFE_COMPONENT = /^[A-Za-z0-9@._+-]+$/;
 const HERMES_EXCLUDES = new Set([".git", ".playwright", "node_modules"]);
 

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -40,7 +40,6 @@ import {
 import {
   buildAdminAgentServiceEnvironment,
   buildNativeHermesLaunch,
-  buildRuntimeServingObservation,
 } from "../admin-artifact/node_modules/@sellable/install/lib/sellable-agent/fly-customer-worker.mjs";
 import sodium from "../admin-artifact/node_modules/libsodium-wrappers/dist/modules-esm/libsodium-wrappers.mjs";
 import { SELLABLE_ALLOWED_TOOLSETS } from "../fly-capabilities-bridge.mjs";
@@ -68,11 +67,11 @@ import {
   HERMES_SNAPSHOT_HOOKS,
   HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
   applyHermesHostedBackgroundReviewPolicy,
+  ensureHermesOpportunitySequencesCron,
   ensureHermesSnapshotCron,
   markHermesSnapshotDirty,
   mergeHermesState,
   migrateLegacyHermesUserState,
-  quarantineLegacyLightfieldVenv,
   reconcileHermesSnapshot,
   restoreLatestHermesSnapshot,
 } from "../hermes-memory-snapshot.mjs";
@@ -695,6 +694,10 @@ const ADMIN_LIVE_SKILLS_CONFIG_KEYS = Object.freeze([
   "disabled",
   "platform_disabled",
 ]);
+const ADMIN_SEALED_SKILL_DIRECTORIES = new Set([
+  "sellable",
+  "opportunity-sequences",
+]);
 
 function adminPreservedSlackToolsets(config) {
   const platformToolsets = config?.platform_toolsets;
@@ -724,7 +727,7 @@ function adminPreservedSkillsIdentity(profileRoot) {
   const walk = (directory, relativePath = "") => {
     for (const name of readdirSync(directory).sort()) {
       const nextRelative = relativePath ? `${relativePath}/${name}` : name;
-      if (nextRelative === "sellable") continue;
+      if (ADMIN_SEALED_SKILL_DIRECTORIES.has(nextRelative)) continue;
       const path = join(directory, name);
       const stat = lstatSync(path);
       if (stat.isSymbolicLink()) {
@@ -1031,12 +1034,22 @@ async function materializeAdminProfile({
     hermesCli: HERMES,
   });
   if (!memoryCron.ok) throw new Error(memoryCron.code);
+  const opportunitySequencesCron = await ensureHermesOpportunitySequencesCron({
+    profileId: profile,
+    profileRoot: profileHome,
+    hermesRoot: DATA_ROOT,
+    statePath: layout.statePath,
+  });
+  if (!opportunitySequencesCron.ok) {
+    throw new Error(opportunitySequencesCron.code);
+  }
   return {
     stage,
     promotion: promoted.promotion,
     profile,
     profileHome,
     adminHome,
+    opportunitySequencesCron,
     observedSoulRawSha256: promoted.observedSoulRawSha256,
     servers: [serverProofs.sellable, serverProofs["sellable-admin"]].map(
       ({ tools: _tools, ...proof }) => proof
@@ -1187,70 +1200,6 @@ function operationIdentity(claim, exchange) {
   };
 }
 
-function operationSnapshotIdentity(claim, exchange) {
-  const authority = claim?.runtimeAuthority;
-  if (!authority) return undefined;
-  return {
-    operationId: claim.operation.id,
-    authorityGeneration: authority.authorityGeneration,
-    runtimeArtifactId: authority.assignedRuntimeArtifactId,
-    sourceMachineId: exchange.workerId,
-    sourceMachineVersion: authority.machineVersion,
-    sourceBootSessionId: BOOT_SESSION_ID,
-    profileSchemaVersion: "admin-native-profile/v2",
-  };
-}
-
-function adminServingObservation(activeLaunch, activeGateway, exchange) {
-  try {
-    const authority = activeLaunch?.claim?.runtimeAuthority;
-    const running =
-      activeGateway?.child?.exitCode === null && !activeGateway.child.killed;
-    const productMcp = activeLaunch?.profile?.servers?.find(
-      (server) => server.alias === "sellable"
-    );
-    const adminMcp = activeLaunch?.profile?.servers?.find(
-      (server) => server.alias === "sellable-admin"
-    );
-    if (!authority || !running || !activeLaunch.slackProof) return null;
-    const observedAt = new Date();
-    return buildRuntimeServingObservation({
-      scope: authority.scope,
-      kind: "ADMIN",
-      operationId: activeLaunch.claim.operation.id,
-      workspaceId: activeLaunch.claim.operation.workspaceId,
-      agentId: activeLaunch.claim.operation.agentId,
-      runtimeId: authority.runtimeId,
-      authorityGeneration: authority.authorityGeneration,
-      runtimeArtifactId: authority.runtimeArtifactId,
-      machineId: exchange.workerId,
-      machineVersion: authority.machineVersion,
-      bootSessionId: BOOT_SESSION_ID,
-      profileIdentity: activeLaunch.profile.profile,
-      processIdentity: `gateway-${activeGateway.child.pid}-${activeLaunch.claim.operation.fence}`,
-      observedAt: observedAt.toISOString(),
-      expiresAt: new Date(observedAt.getTime() + 120_000).toISOString(),
-      slack: {
-        authenticated: true,
-        socketModeConnected: true,
-        apiReachable: true,
-      },
-      productMcp: {
-        serverInfoName: productMcp?.serverInfoName,
-        toolCount: productMcp?.toolCount,
-      },
-      adminMcp: {
-        serverInfoName: adminMcp?.serverInfoName,
-        toolCount: adminMcp?.toolCount,
-      },
-      nativeGateway: true,
-      customerRouting: false,
-    });
-  } catch {
-    return null;
-  }
-}
-
 function startOperationHeartbeat({ claim, exchange, client }) {
   const identity = operationIdentity(claim, exchange);
   let stopped = false;
@@ -1759,42 +1708,6 @@ function nativeSlackProfileInput(claim, installed) {
   };
 }
 
-async function proveAdminSlackServing(claim, secrets) {
-  const slack = claim.runtimeContract?.slack;
-  if (!slack) throw new Error("admin_runtime_slack_contract_rejected");
-  const post = (method, token) =>
-    fetch(`https://slack.com/api/${method}`, {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${token}`,
-        "content-type": "application/x-www-form-urlencoded",
-      },
-      body: "",
-      signal: AbortSignal.timeout(15_000),
-    });
-  const [authResponse, socketResponse] = await Promise.all([
-    post("auth.test", secrets.slackBot),
-    post("apps.connections.open", secrets.slackApp),
-  ]);
-  const [auth, socket] = await Promise.all([
-    authResponse.json(),
-    socketResponse.json(),
-  ]);
-  if (
-    !authResponse.ok ||
-    auth?.ok !== true ||
-    auth.team_id !== slack.teamId ||
-    auth.user_id !== slack.botUserId ||
-    !socketResponse.ok ||
-    socket?.ok !== true ||
-    typeof socket.url !== "string" ||
-    !/^wss:\/\//.test(socket.url)
-  ) {
-    throw new Error("admin_runtime_slack_serving_rejected");
-  }
-  return true;
-}
-
 async function fetchDeliveryCiphertext({
   operation,
   identity,
@@ -2351,12 +2264,7 @@ function completionReceipt({
   };
 }
 
-async function flushHermesSnapshot({
-  client,
-  profileId,
-  profileRoot,
-  operationIdentity,
-}) {
+async function flushHermesSnapshot({ client, profileId, profileRoot }) {
   try {
     markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
@@ -2365,24 +2273,13 @@ async function flushHermesSnapshot({
       hermesRoot: DATA_ROOT,
       hermesVersion: "0.20.0",
       debounceMs: 0,
-      operationIdentity,
-      upload: ({
-        archiveDigest,
-        archiveBytes,
-        sourceProfileId,
-        bytes,
-        ok: _ok,
-        status: _status,
-        hermesVersion: _hermesVersion,
-        ...v2
-      }) =>
+      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
         client.putMemorySnapshot(
           {
             archiveDigest,
             archiveBytes,
             hermesVersion: "0.20.0",
             sourceProfileId,
-            ...v2,
           },
           bytes
         ),
@@ -3095,11 +2992,6 @@ async function runAdminProduction() {
                     callerProfileId: activeLaunch.profile.profile,
                   }),
                 leaseSeconds: 60,
-                servingObservation: adminServingObservation(
-                  activeLaunch,
-                  activeGateway,
-                  exchange
-                ),
               })
             : await client.claim(60);
       } catch (error) {
@@ -3169,6 +3061,16 @@ async function runAdminProduction() {
               ),
           });
         }
+        if (
+          activeLaunch &&
+          (!activeGateway ||
+            activeGateway.child.exitCode !== null ||
+            activeGateway.child.killed)
+        ) {
+          await sleep(Math.min(30_000, 500 * 2 ** Math.min(failures, 6)));
+          activeGateway = await startNativeGateway(activeLaunch);
+          failures = 0;
+        }
         await sleep(1_000);
         continue;
       }
@@ -3280,14 +3182,6 @@ async function runAdminProduction() {
         fetchLatest: () => client.getMemorySnapshot(),
       });
       if (!memoryRestore.ok) throw new Error(memoryRestore.code);
-      const legacyLightfieldVenv = quarantineLegacyLightfieldVenv({
-        profileId: basename(profileContract.profileHome),
-        profileRoot: profileContract.profileHome,
-        hermesRoot: DATA_ROOT,
-      });
-      if (!legacyLightfieldVenv.ok) {
-        throw new Error(legacyLightfieldVenv.code);
-      }
       const legacyUserState = migrateLegacyHermesUserState({
         profileId: basename(profileContract.profileHome),
         profileRoot: profileContract.profileHome,
@@ -3320,7 +3214,6 @@ async function runAdminProduction() {
         client,
         profileId: profile.profile,
         profileRoot: profile.profileHome,
-        operationIdentity: operationSnapshotIdentity(claim, exchange),
       });
       const settings = settingsProof(
         imported.receipt.generationRoot,
@@ -3355,14 +3248,8 @@ async function runAdminProduction() {
         modelAuth,
       });
       operationHeartbeat.assertHealthy();
-      const slackProof =
-        desiredLifecycle === "ON"
-          ? await proveAdminSlackServing(claim, secrets)
-          : false;
       const candidateLaunch =
-        desiredLifecycle === "ON"
-          ? { profile, claim, installed, slackProof }
-          : null;
+        desiredLifecycle === "ON" ? { profile, claim, installed } : null;
       let candidateGateway = null;
       try {
         if (candidateLaunch) {

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -4,9 +4,9 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG MCP_PACKAGE=@sellable/mcp@0.1.864
-ARG MCP_INTEGRITY=sha512-UevVd71zQL2FgnqYaeHBkTi73iUV0Lg5BchM5JNhUbvaFxAFQ2M1n9uSS18qVuM9Km0aGZ7a0k8M9e2AVPboAw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.611-wip.phase189.20260812.1
+ARG MCP_PACKAGE=@sellable/mcp@0.1.866
+ARG MCP_INTEGRITY=sha512-ry4l91gBit9s1z7aw+v2nq7ULkdugt5BGubJsZ9OPJHwNsCVe6x1iuEe/Alr5Fxr3tdSwUE1fti5PnusD2w86g==
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.611
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
 ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -19,7 +19,6 @@ import { dirname, join } from "node:path";
 import { pathToFileURL } from "node:url";
 import {
   buildNativeHermesLaunch,
-  buildRuntimeServingObservation,
   clearCustomerRuntimeSecrets,
   installCustomerRuntimeSecrets,
 } from "../fly-customer-worker.mjs";
@@ -46,7 +45,6 @@ import {
   ensureHermesSnapshotCron,
   markHermesSnapshotDirty,
   migrateLegacyHermesUserState,
-  quarantineLegacyLightfieldVenv,
   reconcileHermesSnapshot,
   restoreLatestHermesSnapshot,
 } from "../hermes-memory-snapshot.mjs";
@@ -98,9 +96,9 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.611-wip.phase189.20260812.1";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.611";
 const MCP_PACKAGE =
-  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.864";
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.866";
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -402,59 +400,6 @@ function operationIdentity(claim, exchange) {
   };
 }
 
-function operationSnapshotIdentity(claim, exchange) {
-  const authority = claim?.runtimeAuthority;
-  if (!authority) return undefined;
-  return {
-    operationId: claim.operation.id,
-    authorityGeneration: authority.authorityGeneration,
-    runtimeArtifactId: authority.assignedRuntimeArtifactId,
-    sourceMachineId: exchange.workerId,
-    sourceMachineVersion: authority.machineVersion,
-    sourceBootSessionId: BOOT_SESSION_ID,
-    profileSchemaVersion: "native-slack-profile/v2",
-  };
-}
-
-function customerServingObservation(activeRuntime, exchange) {
-  try {
-    const authority = activeRuntime?.claim?.runtimeAuthority;
-    const gateway = activeRuntime?.gateway?.readback?.();
-    if (!authority || !gateway?.running || !activeRuntime.apiServerReadiness) {
-      return null;
-    }
-    const observedAt = new Date();
-    return buildRuntimeServingObservation({
-      scope: authority.scope,
-      kind: "CUSTOMER",
-      operationId: activeRuntime.claim.operation.id,
-      workspaceId: activeRuntime.claim.operation.workspaceId,
-      agentId: activeRuntime.claim.operation.agentId,
-      runtimeId: authority.runtimeId,
-      authorityGeneration: authority.authorityGeneration,
-      runtimeArtifactId: authority.runtimeArtifactId,
-      machineId: exchange.workerId,
-      machineVersion: authority.machineVersion,
-      bootSessionId: BOOT_SESSION_ID,
-      profileIdentity: activeRuntime.desired.profileId,
-      processIdentity: `gateway-${gateway.pid}-${activeRuntime.claim.operation.fence}`,
-      observedAt: observedAt.toISOString(),
-      expiresAt: new Date(observedAt.getTime() + 120_000).toISOString(),
-      slack: {
-        authenticated: true,
-        socketModeConnected: true,
-        apiReachable: true,
-      },
-      productMcp: { serverInfoName: "sellable-mcp", toolCount: 193 },
-      adminMcp: null,
-      nativeGateway: true,
-      customerRouting: true,
-    });
-  } catch {
-    return null;
-  }
-}
-
 function startOperationHeartbeat({ claim, exchange, client }) {
   const identity = operationIdentity(claim, exchange);
   let stopped = false;
@@ -2641,12 +2586,7 @@ function completionReceipt({
   };
 }
 
-async function flushHermesSnapshot({
-  client,
-  profileId,
-  profileRoot,
-  operationIdentity,
-}) {
+async function flushHermesSnapshot({ client, profileId, profileRoot }) {
   try {
     markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
@@ -2655,24 +2595,13 @@ async function flushHermesSnapshot({
       hermesRoot: DATA_ROOT,
       hermesVersion: HERMES_VERSION,
       debounceMs: 0,
-      operationIdentity,
-      upload: ({
-        archiveDigest,
-        archiveBytes,
-        sourceProfileId,
-        bytes,
-        ok: _ok,
-        status: _status,
-        hermesVersion: _hermesVersion,
-        ...v2
-      }) =>
+      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
         client.putMemorySnapshot(
           {
             archiveDigest,
             archiveBytes,
             hermesVersion: HERMES_VERSION,
             sourceProfileId,
-            ...v2,
           },
           bytes
         ),
@@ -2746,12 +2675,6 @@ async function processOperation({ claim, exchange, client, identity }) {
     fetchLatest: () => client.getMemorySnapshot(),
   });
   if (!memoryRestore.ok) throw new Error(memoryRestore.code);
-  const legacyLightfieldVenv = quarantineLegacyLightfieldVenv({
-    profileId: desired.profileId,
-    profileRoot,
-    hermesRoot: DATA_ROOT,
-  });
-  if (!legacyLightfieldVenv.ok) throw new Error(legacyLightfieldVenv.code);
   const legacyUserState = migrateLegacyHermesUserState({
     profileId: desired.profileId,
     profileRoot,
@@ -2803,7 +2726,6 @@ async function processOperation({ claim, exchange, client, identity }) {
     client,
     profileId: desired.profileId,
     profileRoot,
-    operationIdentity: operationSnapshotIdentity(claim, exchange),
   });
   const prove =
     claim.operation.action === "INSTANTIATE"
@@ -2886,7 +2808,6 @@ async function processOperation({ claim, exchange, client, identity }) {
     sharedAppCredentialPresent: false,
   });
   return {
-    claim,
     desired,
     expected: secrets.expected,
     secrets,
@@ -2896,7 +2817,6 @@ async function processOperation({ claim, exchange, client, identity }) {
     trustRootPem,
     action: claim.operation.action,
     gateway: proof.gateway ?? null,
-    apiServerReadiness: proof.apiServerReadiness ?? null,
     modelHealthReporter,
   };
 }
@@ -2999,10 +2919,6 @@ async function main() {
                     callerProfileId: activeRuntime.desired.profileId,
                   }),
                 leaseSeconds: 60,
-                servingObservation: customerServingObservation(
-                  activeRuntime,
-                  exchange
-                ),
               })
             : await client.claim(60);
       } catch (error) {
@@ -3047,6 +2963,17 @@ async function main() {
               ),
           });
         }
+        if (
+          activeRuntime?.action !== "INSTANTIATE" &&
+          activeRuntime?.gateway &&
+          !activeRuntime.gateway.readback().running
+        ) {
+          activeRuntime.gateway = await startNativeGateway({
+            desired: activeRuntime.desired,
+            runtimeConfig: activeRuntime.runtimeConfig,
+            secrets: activeRuntime.secrets,
+          });
+        }
         await sleep(1_000);
         continue;
       }

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -32,77 +32,6 @@ function stableJson(value) {
   return JSON.stringify(value);
 }
 
-// CUSTOMER and ADMIN runtimes share this one serving-observation builder.
-export function buildRuntimeServingObservation(input = {}) {
-  const keys = [
-    "scope",
-    "kind",
-    "operationId",
-    "workspaceId",
-    "agentId",
-    "runtimeId",
-    "authorityGeneration",
-    "runtimeArtifactId",
-    "machineId",
-    "machineVersion",
-    "bootSessionId",
-    "profileIdentity",
-    "processIdentity",
-    "observedAt",
-    "expiresAt",
-    "slack",
-    "productMcp",
-    "adminMcp",
-    "nativeGateway",
-    "customerRouting",
-  ];
-  const identity = (value) =>
-    typeof value === "string" && SAFE_ID.test(value);
-  const mcp = (value, name, tools) =>
-    exactKeys(value, ["serverInfoName", "toolCount"]) &&
-    value.serverInfoName === name &&
-    value.toolCount === tools;
-  const observedAt = Date.parse(input.observedAt ?? "");
-  const expiresAt = Date.parse(input.expiresAt ?? "");
-  const kindExact =
-    input.kind === "CUSTOMER"
-      ? input.adminMcp === null && input.customerRouting === true
-      : input.kind === "ADMIN" &&
-        mcp(input.adminMcp, "sellable-admin-mcp", 46) &&
-        input.customerRouting === false;
-  if (
-    !exactKeys(input, keys) ||
-    !["ASSIGNED", "CANDIDATE"].includes(input.scope) ||
-    !keys
-      .slice(2, 13)
-      .filter((key) => key !== "authorityGeneration")
-      .every((key) => identity(input[key])) ||
-    !Number.isSafeInteger(input.authorityGeneration) ||
-    input.authorityGeneration < 1 ||
-    !Number.isFinite(observedAt) ||
-    !Number.isFinite(expiresAt) ||
-    expiresAt <= observedAt ||
-    expiresAt - observedAt > 5 * 60_000 ||
-    !exactKeys(input.slack, [
-      "authenticated",
-      "socketModeConnected",
-      "apiReachable",
-    ]) ||
-    input.slack.authenticated !== true ||
-    input.slack.socketModeConnected !== true ||
-    input.slack.apiReachable !== true ||
-    !mcp(input.productMcp, "sellable-mcp", 193) ||
-    input.nativeGateway !== true ||
-    !kindExact
-  ) {
-    throw new Error("runtime_serving_observation_rejected");
-  }
-  return Object.freeze({
-    schemaVersion: "sellable-agent-serving-observation/v2",
-    ...input,
-  });
-}
-
 export function buildAgentServiceEnvironment({
   workspaceId,
   agentId,