@sellable/install 0.1.611 → 0.1.617-wip.phase189.20260812.7

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.611
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.617-wip.phase189.20260812.7
 ARG MCP_PACKAGE=@sellable/mcp@0.1.866
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-ry4l91gBit9s1z7aw+v2nq7ULkdugt5BGubJsZ9OPJHwNsCVe6x1iuEe/Alr5Fxr3tdSwUE1fti5PnusD2w86g==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.611" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.617-wip.phase189.20260812.7" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.866" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.611" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.609-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.866') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.617-wip.phase189.20260812.7' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.866') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.611', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.866', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.617-wip.phase189.20260812.7', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.866', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.611` is
+`@sellable/install@0.1.617-wip.phase189.20260812.7` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.609-wip.hermes-desktop.20260811160530 .
+  --tag sellable-agent-host:0.1.617-wip.phase189.20260812.7-wip.hermes-desktop.20260811160530 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -40,6 +40,7 @@ import {
 import {
   buildAdminAgentServiceEnvironment,
   buildNativeHermesLaunch,
+  buildRuntimeServingObservation,
 } from "../admin-artifact/node_modules/@sellable/install/lib/sellable-agent/fly-customer-worker.mjs";
 import sodium from "../admin-artifact/node_modules/libsodium-wrappers/dist/modules-esm/libsodium-wrappers.mjs";
 import { SELLABLE_ALLOWED_TOOLSETS } from "../fly-capabilities-bridge.mjs";
@@ -72,6 +73,7 @@ import {
   markHermesSnapshotDirty,
   mergeHermesState,
   migrateLegacyHermesUserState,
+  quarantineLegacyLightfieldVenv,
   reconcileHermesSnapshot,
   restoreLatestHermesSnapshot,
 } from "../hermes-memory-snapshot.mjs";
@@ -1200,6 +1202,70 @@ function operationIdentity(claim, exchange) {
   };
 }
 
+function operationSnapshotIdentity(claim, exchange) {
+  const authority = claim?.runtimeAuthority;
+  if (!authority) return undefined;
+  return {
+    operationId: claim.operation.id,
+    authorityGeneration: authority.authorityGeneration,
+    runtimeArtifactId: authority.assignedRuntimeArtifactId,
+    sourceMachineId: exchange.workerId,
+    sourceMachineVersion: authority.machineVersion,
+    sourceBootSessionId: BOOT_SESSION_ID,
+    profileSchemaVersion: "admin-native-profile/v2",
+  };
+}
+
+function adminServingObservation(activeLaunch, activeGateway, exchange) {
+  try {
+    const authority = activeLaunch?.claim?.runtimeAuthority;
+    const running =
+      activeGateway?.child?.exitCode === null && !activeGateway.child.killed;
+    const productMcp = activeLaunch?.profile?.servers?.find(
+      (server) => server.alias === "sellable"
+    );
+    const adminMcp = activeLaunch?.profile?.servers?.find(
+      (server) => server.alias === "sellable-admin"
+    );
+    if (!authority || !running || !activeLaunch.slackProof) return null;
+    const observedAt = new Date();
+    return buildRuntimeServingObservation({
+      scope: authority.scope,
+      kind: "ADMIN",
+      operationId: activeLaunch.claim.operation.id,
+      workspaceId: activeLaunch.claim.operation.workspaceId,
+      agentId: activeLaunch.claim.operation.agentId,
+      runtimeId: authority.runtimeId,
+      authorityGeneration: authority.authorityGeneration,
+      runtimeArtifactId: authority.runtimeArtifactId,
+      machineId: exchange.workerId,
+      machineVersion: authority.machineVersion,
+      bootSessionId: BOOT_SESSION_ID,
+      profileIdentity: activeLaunch.profile.profile,
+      processIdentity: `gateway-${activeGateway.child.pid}-${activeLaunch.claim.operation.fence}`,
+      observedAt: observedAt.toISOString(),
+      expiresAt: new Date(observedAt.getTime() + 120_000).toISOString(),
+      slack: {
+        authenticated: true,
+        socketModeConnected: true,
+        apiReachable: true,
+      },
+      productMcp: {
+        serverInfoName: productMcp?.serverInfoName,
+        toolCount: productMcp?.toolCount,
+      },
+      adminMcp: {
+        serverInfoName: adminMcp?.serverInfoName,
+        toolCount: adminMcp?.toolCount,
+      },
+      nativeGateway: true,
+      customerRouting: false,
+    });
+  } catch {
+    return null;
+  }
+}
+
 function startOperationHeartbeat({ claim, exchange, client }) {
   const identity = operationIdentity(claim, exchange);
   let stopped = false;
@@ -1708,6 +1774,42 @@ function nativeSlackProfileInput(claim, installed) {
   };
 }
 
+async function proveAdminSlackServing(claim, secrets) {
+  const slack = claim.runtimeContract?.slack;
+  if (!slack) throw new Error("admin_runtime_slack_contract_rejected");
+  const post = (method, token) =>
+    fetch(`https://slack.com/api/${method}`, {
+      method: "POST",
+      headers: {
+        authorization: `Bearer ${token}`,
+        "content-type": "application/x-www-form-urlencoded",
+      },
+      body: "",
+      signal: AbortSignal.timeout(15_000),
+    });
+  const [authResponse, socketResponse] = await Promise.all([
+    post("auth.test", secrets.slackBot),
+    post("apps.connections.open", secrets.slackApp),
+  ]);
+  const [auth, socket] = await Promise.all([
+    authResponse.json(),
+    socketResponse.json(),
+  ]);
+  if (
+    !authResponse.ok ||
+    auth?.ok !== true ||
+    auth.team_id !== slack.teamId ||
+    auth.user_id !== slack.botUserId ||
+    !socketResponse.ok ||
+    socket?.ok !== true ||
+    typeof socket.url !== "string" ||
+    !/^wss:\/\//.test(socket.url)
+  ) {
+    throw new Error("admin_runtime_slack_serving_rejected");
+  }
+  return true;
+}
+
 async function fetchDeliveryCiphertext({
   operation,
   identity,
@@ -2264,7 +2366,12 @@ function completionReceipt({
   };
 }
 
-async function flushHermesSnapshot({ client, profileId, profileRoot }) {
+async function flushHermesSnapshot({
+  client,
+  profileId,
+  profileRoot,
+  operationIdentity,
+}) {
   try {
     markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
@@ -2273,13 +2380,24 @@ async function flushHermesSnapshot({ client, profileId, profileRoot }) {
       hermesRoot: DATA_ROOT,
       hermesVersion: "0.20.0",
       debounceMs: 0,
-      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
+      operationIdentity,
+      upload: ({
+        archiveDigest,
+        archiveBytes,
+        sourceProfileId,
+        bytes,
+        ok: _ok,
+        status: _status,
+        hermesVersion: _hermesVersion,
+        ...v2
+      }) =>
         client.putMemorySnapshot(
           {
             archiveDigest,
             archiveBytes,
             hermesVersion: "0.20.0",
             sourceProfileId,
+            ...v2,
           },
           bytes
         ),
@@ -2992,6 +3110,11 @@ async function runAdminProduction() {
                     callerProfileId: activeLaunch.profile.profile,
                   }),
                 leaseSeconds: 60,
+                servingObservation: adminServingObservation(
+                  activeLaunch,
+                  activeGateway,
+                  exchange
+                ),
               })
             : await client.claim(60);
       } catch (error) {
@@ -3061,16 +3184,6 @@ async function runAdminProduction() {
               ),
           });
         }
-        if (
-          activeLaunch &&
-          (!activeGateway ||
-            activeGateway.child.exitCode !== null ||
-            activeGateway.child.killed)
-        ) {
-          await sleep(Math.min(30_000, 500 * 2 ** Math.min(failures, 6)));
-          activeGateway = await startNativeGateway(activeLaunch);
-          failures = 0;
-        }
         await sleep(1_000);
         continue;
       }
@@ -3182,6 +3295,14 @@ async function runAdminProduction() {
         fetchLatest: () => client.getMemorySnapshot(),
       });
       if (!memoryRestore.ok) throw new Error(memoryRestore.code);
+      const legacyLightfieldVenv = quarantineLegacyLightfieldVenv({
+        profileId: basename(profileContract.profileHome),
+        profileRoot: profileContract.profileHome,
+        hermesRoot: DATA_ROOT,
+      });
+      if (!legacyLightfieldVenv.ok) {
+        throw new Error(legacyLightfieldVenv.code);
+      }
       const legacyUserState = migrateLegacyHermesUserState({
         profileId: basename(profileContract.profileHome),
         profileRoot: profileContract.profileHome,
@@ -3214,6 +3335,7 @@ async function runAdminProduction() {
         client,
         profileId: profile.profile,
         profileRoot: profile.profileHome,
+        operationIdentity: operationSnapshotIdentity(claim, exchange),
       });
       const settings = settingsProof(
         imported.receipt.generationRoot,
@@ -3248,8 +3370,14 @@ async function runAdminProduction() {
         modelAuth,
       });
       operationHeartbeat.assertHealthy();
+      const slackProof =
+        desiredLifecycle === "ON"
+          ? await proveAdminSlackServing(claim, secrets)
+          : false;
       const candidateLaunch =
-        desiredLifecycle === "ON" ? { profile, claim, installed } : null;
+        desiredLifecycle === "ON"
+          ? { profile, claim, installed, slackProof }
+          : null;
       let candidateGateway = null;
       try {
         if (candidateLaunch) {

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,7 +6,7 @@ USER root
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.866
 ARG MCP_INTEGRITY=sha512-ry4l91gBit9s1z7aw+v2nq7ULkdugt5BGubJsZ9OPJHwNsCVe6x1iuEe/Alr5Fxr3tdSwUE1fti5PnusD2w86g==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.611
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.617-wip.phase189.20260812.7
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
 ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -96,7 +96,7 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.611";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.617-wip.phase189.20260812.7";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.866";
 

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -32,6 +32,79 @@ function stableJson(value) {
   return JSON.stringify(value);
 }
 
+// CUSTOMER and ADMIN runtimes share this one serving-observation builder.
+export function buildRuntimeServingObservation(input = {}) {
+  const keys = [
+    "scope",
+    "kind",
+    "operationId",
+    "workspaceId",
+    "agentId",
+    "runtimeId",
+    "authorityGeneration",
+    "runtimeArtifactId",
+    "machineId",
+    "machineVersion",
+    "bootSessionId",
+    "profileIdentity",
+    "processIdentity",
+    "observedAt",
+    "expiresAt",
+    "slack",
+    "productMcp",
+    "adminMcp",
+    "nativeGateway",
+    "customerRouting",
+  ];
+  const identity = (value) =>
+    typeof value === "string" && SAFE_ID.test(value);
+  const mcp = (value, name) =>
+    exactKeys(value, ["serverInfoName", "toolCount"]) &&
+    value.serverInfoName === name &&
+    Number.isSafeInteger(value.toolCount) &&
+    value.toolCount > 0 &&
+    value.toolCount <= 10_000;
+  const observedAt = Date.parse(input.observedAt ?? "");
+  const expiresAt = Date.parse(input.expiresAt ?? "");
+  const kindExact =
+    input.kind === "CUSTOMER"
+      ? input.adminMcp === null && input.customerRouting === true
+      : input.kind === "ADMIN" &&
+        mcp(input.adminMcp, "sellable-admin-mcp") &&
+        input.customerRouting === false;
+  if (
+    !exactKeys(input, keys) ||
+    !["ASSIGNED", "CANDIDATE"].includes(input.scope) ||
+    !keys
+      .slice(2, 13)
+      .filter((key) => key !== "authorityGeneration")
+      .every((key) => identity(input[key])) ||
+    !Number.isSafeInteger(input.authorityGeneration) ||
+    input.authorityGeneration < 1 ||
+    !Number.isFinite(observedAt) ||
+    !Number.isFinite(expiresAt) ||
+    expiresAt <= observedAt ||
+    expiresAt - observedAt > 5 * 60_000 ||
+    !exactKeys(input.slack, [
+      "authenticated",
+      "socketModeConnected",
+      "apiReachable",
+    ]) ||
+    input.slack.authenticated !== true ||
+    input.slack.socketModeConnected !== true ||
+    input.slack.apiReachable !== true ||
+    !mcp(input.productMcp, "sellable-mcp") ||
+    input.nativeGateway !== true ||
+    !kindExact
+  ) {
+    throw new Error("runtime_serving_observation_rejected");
+  }
+  return Object.freeze({
+    schemaVersion: "sellable-agent-serving-observation/v2",
+    ...input,
+  });
+}
+
 export function buildAgentServiceEnvironment({
   workspaceId,
   agentId,

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -541,7 +541,7 @@ function tusUploadAccepted(value) {
       value.signedUploadToken.length <= 16_384 &&
       !/\s/.test(value.signedUploadToken) &&
       value.bucketName === "agent-hermes-backups-v1" &&
-      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:customer|admin)\/archives\/[a-f0-9]{64}\.zip$/.test(
+      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:(?:customer|admin)\/archives|agents\/[A-Za-z0-9_-]{1,128}\/operations\/[A-Za-z0-9_-]{1,128})\/[a-f0-9]{64}\.zip$/.test(
         value?.objectName ?? ""
       )
     );
@@ -784,6 +784,7 @@ export async function claimWithSoulObservation({
   tracker,
   readSoul,
   leaseSeconds = 60,
+  servingObservation = /** @type {any} */ (null),
 }) {
   // Deliver lifecycle work before any potentially slow local loader proof.
   // Reconciliation uses the same cadence only after the server confirms that
@@ -791,6 +792,7 @@ export async function claimWithSoulObservation({
   const tick = await client.claimTick({
     leaseSeconds,
     soulObservation: tracker.pending(),
+    ...(servingObservation ? { servingObservation } : {}),
   });
   if (tick?.claim) return tick.claim;
 
@@ -958,9 +960,9 @@ export function createFlyCustomerControlClient({
       }
     }
   };
-  const memorySnapshotControl = async (method, body, verb) => {
+  const memorySnapshotControl = async (method, body, verb, search = "") => {
     const response = await fetchImpl(
-      `${endpoint}/api/v3/sellable-agent/worker/memory-snapshot`,
+      `${endpoint}/api/v3/sellable-agent/worker/memory-snapshot${search}`,
       {
         method,
         headers: {
@@ -988,6 +990,37 @@ export function createFlyCustomerControlClient({
     value.archiveBytes <= 128 * 1024 * 1024 &&
     value.hermesVersion === "0.20.0" &&
     /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value?.sourceProfileId ?? "");
+  const boundedSnapshotIdentity = (value) =>
+    /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/.test(value ?? "");
+  const metadataV2Accepted = (value) =>
+    metadataAccepted(value) &&
+    Object.keys(value).sort().join(",") ===
+      "archiveBytes,archiveDigest,authorityGeneration,hermesVersion,operationId,profileSchemaVersion,runtimeArtifactId,sourceBootSessionId,sourceMachineId,sourceMachineVersion,sourceProfileId" &&
+    boundedSnapshotIdentity(value.operationId) &&
+    Number.isSafeInteger(value.authorityGeneration) &&
+    value.authorityGeneration > 0 &&
+    boundedSnapshotIdentity(value.runtimeArtifactId) &&
+    boundedSnapshotIdentity(value.profileSchemaVersion) &&
+    [
+      value.sourceMachineId,
+      value.sourceMachineVersion,
+      value.sourceBootSessionId,
+    ].every(
+      (identityValue) =>
+        identityValue === null || boundedSnapshotIdentity(identityValue)
+    );
+  const snapshotReadbackExpected = (value) =>
+    value &&
+    typeof value === "object" &&
+    !Array.isArray(value) &&
+    Object.keys(value).sort().join(",") ===
+      "authorityGeneration,operationId,profileSchemaVersion,runtimeArtifactId,sourceProfileId" &&
+    boundedSnapshotIdentity(value.operationId) &&
+    Number.isSafeInteger(value.authorityGeneration) &&
+    value.authorityGeneration > 0 &&
+    boundedSnapshotIdentity(value.runtimeArtifactId) &&
+    /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value.sourceProfileId ?? "") &&
+    boundedSnapshotIdentity(value.profileSchemaVersion);
   const signedUrlAccepted = (value) => {
     try {
       return new URL(value).protocol === "https:";
@@ -996,8 +1029,9 @@ export function createFlyCustomerControlClient({
     }
   };
   const putMemorySnapshot = async (metadata, archive) => {
+    const isV2 = Object.hasOwn(metadata ?? {}, "operationId");
     if (
-      !metadataAccepted(metadata) ||
+      !(isV2 ? metadataV2Accepted(metadata) : metadataAccepted(metadata)) ||
       !Buffer.isBuffer(archive) ||
       metadata.archiveBytes !== archive.byteLength ||
       createHash("sha256").update(archive).digest("hex") !==
@@ -1009,14 +1043,20 @@ export function createFlyCustomerControlClient({
       const value = await memorySnapshotControl(
         "PUT",
         {
-          schemaVersion: "sellable-hermes-snapshot-upload/v1",
+          schemaVersion: isV2
+            ? "sellable-hermes-snapshot-upload/v2"
+            : "sellable-hermes-snapshot-upload/v1",
           ...metadata,
         },
         "memory-snapshot-put"
       );
       if (
         !tusUploadAccepted(value) ||
-        !value.objectName.endsWith(`/${metadata.archiveDigest}.zip`)
+        !value.objectName.endsWith(
+          isV2
+            ? `/operations/${metadata.operationId}/${metadata.archiveDigest}.zip`
+            : `/${metadata.archiveDigest}.zip`
+        )
       ) {
         throw new WorkerControlResponseError(
           "memory_snapshot_upload_url_rejected"
@@ -1034,7 +1074,9 @@ export function createFlyCustomerControlClient({
     const committed = await memorySnapshotControl(
       "POST",
       {
-        schemaVersion: "sellable-hermes-snapshot-commit/v1",
+        schemaVersion: isV2
+          ? "sellable-hermes-snapshot-commit/v2"
+          : "sellable-hermes-snapshot-commit/v1",
         ...metadata,
       },
       "memory-snapshot-put"
@@ -1047,14 +1089,42 @@ export function createFlyCustomerControlClient({
     }
     return committed;
   };
-  const getMemorySnapshot = async () => {
+  const getMemorySnapshot = async (expected) => {
+    const isV2 = expected !== undefined;
+    if (isV2 && !snapshotReadbackExpected(expected)) {
+      throw new WorkerControlResponseError("memory_snapshot_download_rejected");
+    }
+    const body = isV2
+      ? {
+          schemaVersion: "sellable-hermes-snapshot-get/v2",
+          operationId: expected.operationId,
+        }
+      : { schemaVersion: "sellable-hermes-snapshot-get/v1" };
+    const search = isV2
+      ? `?${new URLSearchParams(body).toString()}`
+      : "";
     const result = await memorySnapshotControl(
       "GET",
-      { schemaVersion: "sellable-hermes-snapshot-get/v1" },
-      "memory-snapshot-get"
+      body,
+      "memory-snapshot-get",
+      search
     );
     if (!result) return null;
-    if (!metadataAccepted(result) || !signedUrlAccepted(result.signedUrl)) {
+    const identityReadbackAccepted =
+      !isV2 ||
+      (result.operationId === expected.operationId &&
+        result.authorityGeneration === expected.authorityGeneration &&
+        result.runtimeArtifactId === expected.runtimeArtifactId &&
+        result.sourceProfileId === expected.sourceProfileId &&
+        result.profileSchemaVersion === expected.profileSchemaVersion &&
+        /^[a-f0-9]{64}$/.test(result.archiveDigest ?? "") &&
+        Number.isSafeInteger(result.archiveBytes) &&
+        result.archiveBytes > 0 &&
+        result.archiveBytes <= 128 * 1024 * 1024);
+    if (
+      !(isV2 ? identityReadbackAccepted : metadataAccepted(result)) ||
+      !signedUrlAccepted(result.signedUrl)
+    ) {
       throw new WorkerControlResponseError(
         "memory_snapshot_download_url_rejected"
       );
@@ -1074,10 +1144,15 @@ export function createFlyCustomerControlClient({
     }
     return { ...result, signedUrl: undefined, bytes };
   };
-  const claimTick = async ({ leaseSeconds = 60, soulObservation } = {}) =>
+  const claimTick = async ({
+    leaseSeconds = 60,
+    soulObservation,
+    servingObservation,
+  } = {}) =>
     post("claim", "/api/v3/sellable-agent/worker/claim", {
       leaseSeconds,
       ...(soulObservation ? { soulObservation } : {}),
+      ...(servingObservation ? { servingObservation } : {}),
     });
   return Object.freeze({
     claimTick,
@@ -1153,8 +1228,8 @@ export function createFlyCustomerControlClient({
     async putMemorySnapshot(metadata, archive) {
       return putMemorySnapshot(metadata, archive);
     },
-    async getMemorySnapshot() {
-      return getMemorySnapshot();
+    async getMemorySnapshot(expected) {
+      return getMemorySnapshot(expected);
     },
   });
 }

package/lib/sellable-agent/hermes-memory-snapshot.mjs

@@ -71,6 +71,7 @@ const HERMES = "/opt/hermes/.venv/bin/hermes";
 const HERMES_PYTHON = "/opt/hermes/.venv/bin/python";
 const VERSION = "0.20.0";
 const ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
+const BOUNDED_ID = /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/;
 const SHA256 = /^[a-f0-9]{64}$/;
 const MAX_BYTES = 128 * 1024 * 1024;
 // Portable snapshots contain user-authored/customizable state plus the compact
@@ -277,6 +278,116 @@ export function mergeHermesState(sourceRoot, targetRoot) {
   merge(sourceRoot, targetRoot);
 }
 
+const LEGACY_LIGHTFIELD_VENV = ".venv-amplify-audit";
+const LEGACY_LIGHTFIELD_QUARANTINE_SCHEMA =
+  "sellable-agent-lightfield-venv-quarantine/v1";
+
+function privateMigrationDirectory(path) {
+  if (existsSync(path)) {
+    const stat = lstatSync(path);
+    if (stat.isSymbolicLink() || !stat.isDirectory()) {
+      throw new Error("hermes_lightfield_quarantine_path_rejected");
+    }
+    return;
+  }
+  mkdirSync(path, { mode: 0o700 });
+  fsyncDirectory(dirname(path));
+}
+
+/**
+ * Quarantine the one persisted pre-Phase-189 Lightfield virtualenv layout.
+ * Its ordinary Python symlinks must never weaken the general snapshot scan.
+ */
+export function quarantineLegacyLightfieldVenv({
+  profileId,
+  profileRoot,
+  hermesRoot,
+} = {}) {
+  if (!validProfilePath(profileId, profileRoot, hermesRoot)) {
+    return {
+      ...failed("hermes_lightfield_quarantine_identity_rejected"),
+      quarantinePath: null,
+    };
+  }
+  const legacyPath = join(profileRoot, LEGACY_LIGHTFIELD_VENV);
+  const quarantineBase = join(
+    hermesRoot,
+    "backups",
+    "quarantine",
+    "legacy-lightfield-venv-v1"
+  );
+  const quarantinePath = join(quarantineBase, profileId);
+  const marker = join(
+    profileRoot,
+    ".sellable-agent",
+    "migrations",
+    "lightfield-venv-quarantine-v1.json"
+  );
+  try {
+    if (existsSync(marker)) {
+      regularFile(marker);
+      const receipt = JSON.parse(readFileSync(marker, "utf8"));
+      if (
+        receipt?.schemaVersion !== LEGACY_LIGHTFIELD_QUARANTINE_SCHEMA ||
+        receipt.profileId !== profileId ||
+        receipt.source !== LEGACY_LIGHTFIELD_VENV ||
+        receipt.quarantinePath !== quarantinePath ||
+        !existsSync(quarantinePath) ||
+        lstatSync(quarantinePath).isSymbolicLink() ||
+        !lstatSync(quarantinePath).isDirectory()
+      ) {
+        throw new Error("hermes_lightfield_quarantine_receipt_rejected");
+      }
+      return { ok: true, status: "REUSED", profileId, quarantinePath };
+    }
+    const sourcePresent = existsSync(legacyPath);
+    const targetPresent = existsSync(quarantinePath);
+    if (!sourcePresent && !targetPresent) {
+      return {
+        ok: true,
+        status: "NO_LEGACY_LAYOUT",
+        profileId,
+        quarantinePath: null,
+      };
+    }
+    if (sourcePresent && targetPresent) {
+      throw new Error("hermes_lightfield_quarantine_conflict");
+    }
+    let status = "RESUMED";
+    if (sourcePresent) {
+      const source = lstatSync(legacyPath);
+      if (source.isSymbolicLink() || !source.isDirectory()) {
+        throw new Error("hermes_lightfield_quarantine_source_rejected");
+      }
+      privateMigrationDirectory(join(hermesRoot, "backups"));
+      privateMigrationDirectory(join(hermesRoot, "backups", "quarantine"));
+      privateMigrationDirectory(quarantineBase);
+      moveDurably(legacyPath, quarantinePath);
+      status = "QUARANTINED";
+    }
+    const quarantined = lstatSync(quarantinePath);
+    if (quarantined.isSymbolicLink() || !quarantined.isDirectory()) {
+      throw new Error("hermes_lightfield_quarantine_readback_rejected");
+    }
+    atomicWrite(
+      marker,
+      `${JSON.stringify({
+        schemaVersion: LEGACY_LIGHTFIELD_QUARANTINE_SCHEMA,
+        profileId,
+        source: LEGACY_LIGHTFIELD_VENV,
+        quarantinePath,
+      })}\n`,
+      0o600
+    );
+    return { ok: true, status, profileId, quarantinePath };
+  } catch {
+    return {
+      ...failed("hermes_lightfield_quarantine_failed"),
+      quarantinePath: null,
+    };
+  }
+}
+
 function cronJobs(profileRoot) {
   const path = join(profileRoot, "cron", "jobs.json");
   if (!existsSync(path)) return [];
@@ -872,12 +983,31 @@ export async function captureHermesBackup({
   hermesCli = HERMES,
   maxArchiveBytes = MAX_BYTES,
   runChild,
+  operationIdentity = /** @type {any} */ (undefined),
 }) {
+  const operationIdentityAccepted =
+    operationIdentity === undefined ||
+    (operationIdentity &&
+      typeof operationIdentity === "object" &&
+      !Array.isArray(operationIdentity) &&
+      Object.keys(operationIdentity).sort().join(",") ===
+        "authorityGeneration,operationId,profileSchemaVersion,runtimeArtifactId,sourceBootSessionId,sourceMachineId,sourceMachineVersion" &&
+      BOUNDED_ID.test(operationIdentity.operationId ?? "") &&
+      Number.isSafeInteger(operationIdentity.authorityGeneration) &&
+      operationIdentity.authorityGeneration > 0 &&
+      BOUNDED_ID.test(operationIdentity.runtimeArtifactId ?? "") &&
+      BOUNDED_ID.test(operationIdentity.profileSchemaVersion ?? "") &&
+      [
+        operationIdentity.sourceMachineId,
+        operationIdentity.sourceMachineVersion,
+        operationIdentity.sourceBootSessionId,
+      ].every((value) => value === null || BOUNDED_ID.test(value ?? "")));
   if (
     !validProfilePath(profileId, profileRoot, hermesRoot) ||
     !existsSync(profileRoot) ||
     hermesVersion !== VERSION ||
-    !isAbsolute(archiveDirectory)
+    !isAbsolute(archiveDirectory) ||
+    !operationIdentityAccepted
   ) {
     return failed("hermes_snapshot_capture_identity_rejected");
   }
@@ -917,6 +1047,7 @@ export async function captureHermesBackup({
       archiveBytes: bytes.byteLength,
       hermesVersion,
       sourceProfileId: profileId,
+      ...(operationIdentity ?? {}),
       bytes,
     };
   } catch {
@@ -1022,6 +1153,7 @@ async function reconcileHermesSnapshotOnce({
   debounceMs = 2_000,
   hermesCli = HERMES,
   runChild,
+  operationIdentity = /** @type {any} */ (undefined),
 }) {
   if (!validProfilePath(profileId, profileRoot, hermesRoot)) {
     return failed("hermes_snapshot_reconcile_identity_rejected");
@@ -1048,6 +1180,7 @@ async function reconcileHermesSnapshotOnce({
       hermesVersion,
       hermesCli,
       runChild,
+      operationIdentity,
     });
     if (!captured.ok) {
       requeueClaim(paths.marker, claim);
@@ -1081,6 +1214,7 @@ export async function reconcileHermesSnapshot({
   debounceMs = 2_000,
   hermesCli = HERMES,
   runChild,
+  operationIdentity = /** @type {any} */ (undefined),
 }) {
   const key = `${resolve(hermesRoot)}\0${profileId}`;
   const active = snapshotReconciles.get(key);
@@ -1095,6 +1229,7 @@ export async function reconcileHermesSnapshot({
     debounceMs,
     hermesCli,
     runChild,
+    operationIdentity,
   }).finally(() => snapshotReconciles.delete(key));
   snapshotReconciles.set(key, operation);
   return operation;

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.611";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.617-wip.phase189.20260812.7";
 const MCP_PACKAGE = "@sellable/mcp@0.1.866";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.611" ||
+      pinned.installerPackage !== "@sellable/install@0.1.617-wip.phase189.20260812.7" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.866" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -278,7 +278,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.611" ||
+    desired.installerPackage !== "@sellable/install@0.1.617-wip.phase189.20260812.7" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.866" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.611";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.617-wip.phase189.20260812.7";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.866";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/lib/sellable-agent/runtime-reconciler.mjs

@@ -39,6 +39,53 @@ export const LIFECYCLE_TRANSITION_ORDER = Object.freeze({
   ],
 });
 
+const REPAIR_ID = /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/;
+
+// The control plane owns the durable repair budget. This runtime seam only
+// executes the single action returned by that authority.
+export async function applyBoundedRuntimeRepair(input = {}) {
+  const {
+    workspaceId,
+    agentId,
+    agentKind,
+    assignedRuntimeArtifactId,
+    readinessIdentity,
+    ports,
+  } = input;
+  if (
+    ![workspaceId, agentId, assignedRuntimeArtifactId, readinessIdentity].every(
+      (value) => REPAIR_ID.test(value ?? "")
+    ) ||
+    !["CUSTOMER", "ADMIN"].includes(agentKind) ||
+    !ports ||
+    typeof ports.recordFailure !== "function" ||
+    typeof ports.restartLocal !== "function" ||
+    typeof ports.requestMachineRestart !== "function"
+  ) {
+    return { ok: false, status: "REPAIR_INPUT_REJECTED" };
+  }
+  const authority = Object.freeze({
+    workspaceId,
+    agentId,
+    agentKind,
+    runtimeArtifactId: assignedRuntimeArtifactId,
+    readinessIdentity,
+  });
+  const decision = await ports.recordFailure(authority);
+  if (decision?.action === "LOCAL_RESTART") {
+    await ports.restartLocal(authority);
+    return { ok: true, status: "LOCAL_RESTART", exhausted: false };
+  }
+  if (decision?.action === "MACHINE_RESTART") {
+    await ports.requestMachineRestart(authority);
+    return { ok: true, status: "MACHINE_RESTART", exhausted: false };
+  }
+  if (decision?.action === "EXHAUSTED") {
+    return { ok: true, status: "EXHAUSTED", exhausted: true };
+  }
+  return { ok: false, status: "REPAIR_DECISION_REJECTED" };
+}
+
 const DRIFT_GROUPS = [
   {
     action: RUNTIME_DRIFT_ACTIONS.PACKAGE,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.611",
+  "version": "0.1.617-wip.phase189.20260812.7",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {