@sellable/install 0.1.612-wip.phase189.20260812.2 → 0.1.612

package/container/Dockerfile

@@ -3,13 +3,13 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.612-wip.phase189.20260812.2
-ARG MCP_PACKAGE=@sellable/mcp@0.1.865
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.612
+ARG MCP_PACKAGE=@sellable/mcp@0.1.867
 ARG INSTALLER_INTEGRITY
-ARG MCP_INTEGRITY=sha512-282pkYFADFrrIXyQcdUpQwakXiwe/AFUDpDZkTh29CFcGHnN7dvC0MCvaU4LffXA+ZuKCpuf02uxCLGiIEOjbw==
+ARG MCP_INTEGRITY=sha512-8acJ5MfqgXiu9ylK65LlQ7LUBN5GN5fEXOwDTArxYAN7nBvVLhdz0nTGMERc6qCFNBbILTKvo4IErJOnAcJTDA==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.612-wip.phase189.20260812.2" \
-    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.865" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.612" \
+    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.867" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.612-wip.phase189.202608
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.612-wip.phase189.20260812.2-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.865') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.609-wip.hermes-desktop.20260811160530' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.867') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.612-wip.phase189.20260812.2', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.865', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.612', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.867', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,13 +3,13 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.612-wip.phase189.20260812.2` is
+`@sellable/install@0.1.612` is
 published:
 
 ```sh
 docker build --platform linux/amd64 \
   --build-arg INSTALLER_INTEGRITY='sha512-…' \
-  --tag sellable-agent-host:0.1.612-wip.phase189.20260812.2-wip.hermes-desktop.20260811160530 .
+  --tag sellable-agent-host:0.1.609-wip.hermes-desktop.20260811160530 .
 ```
 
 Create a private `bootstrap/` directory owned by root with mode `0700`. It must contain `bootstrap.json`, `provider-auth`, and `slack-app`, each owned by root with mode `0600`. `bootstrap.json` contains only non-secret identities, hashes, package integrities, and the control-plane URL. The other two files contain the provider JSON and global Slack app token whose hashes are pinned by `bootstrap.json`.

package/lib/sellable-agent/admin-runtime-reconciler.mjs

@@ -20,6 +20,7 @@ import { createHash } from "node:crypto";
 
 const SHA256 = /^[a-f0-9]{64}$/;
 const EXACT_VERSION = /^\d+\.\d+\.\d+(?:[-.A-Za-z0-9]+)?$/;
+const PACKAGE_DISPOSITIONS = new Set(["changed", "reused"]);
 const PUBLIC_ACTIONS = new Set(["INSTANTIATE", "REFRESH"]);
 const RESTORATION_ACTIONS = new Set([
   "START",
@@ -64,14 +65,13 @@ export function validateAdminRuntimeTuple(tuple) {
   }
   for (const name of ADMIN_RUNTIME_TUPLE_MEMBERS) {
     const item = tuple.packages[name];
-    const expectedDisposition = name === "@sellable/mcp" ? "reused" : "changed";
     if (
       !item ||
       item.name !== name ||
       !EXACT_VERSION.test(item.version ?? "") ||
       typeof item.integrity !== "string" ||
       !/^sha512-[A-Za-z0-9+/]{80,}={0,2}$/.test(item.integrity) ||
-      item.disposition !== expectedDisposition
+      !PACKAGE_DISPOSITIONS.has(item.disposition)
     ) {
       return {
         ok: false,

package/lib/sellable-agent/external-runtime-builder.mjs

@@ -28,7 +28,7 @@ import {
 
 const MANIFEST_VERSION = "sellable-agent-external-runtime-closure/v1";
 const MCP_PACKAGE = "@sellable/mcp";
-const MCP_VERSION = "0.1.865";
+const MCP_VERSION = "0.1.867";
 const SAFE_COMPONENT = /^[A-Za-z0-9@._+-]+$/;
 const HERMES_EXCLUDES = new Set([".git", ".playwright", "node_modules"]);
 

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -40,7 +40,6 @@ import {
 import {
   buildAdminAgentServiceEnvironment,
   buildNativeHermesLaunch,
-  buildRuntimeServingObservation,
 } from "../admin-artifact/node_modules/@sellable/install/lib/sellable-agent/fly-customer-worker.mjs";
 import sodium from "../admin-artifact/node_modules/libsodium-wrappers/dist/modules-esm/libsodium-wrappers.mjs";
 import { SELLABLE_ALLOWED_TOOLSETS } from "../fly-capabilities-bridge.mjs";
@@ -68,11 +67,11 @@ import {
   HERMES_SNAPSHOT_HOOKS,
   HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
   applyHermesHostedBackgroundReviewPolicy,
+  ensureHermesOpportunitySequencesCron,
   ensureHermesSnapshotCron,
   markHermesSnapshotDirty,
   mergeHermesState,
   migrateLegacyHermesUserState,
-  quarantineLegacyLightfieldVenv,
   reconcileHermesSnapshot,
   restoreLatestHermesSnapshot,
 } from "../hermes-memory-snapshot.mjs";
@@ -695,6 +694,10 @@ const ADMIN_LIVE_SKILLS_CONFIG_KEYS = Object.freeze([
   "disabled",
   "platform_disabled",
 ]);
+const ADMIN_SEALED_SKILL_DIRECTORIES = new Set([
+  "sellable",
+  "opportunity-sequences",
+]);
 
 function adminPreservedSlackToolsets(config) {
   const platformToolsets = config?.platform_toolsets;
@@ -724,7 +727,7 @@ function adminPreservedSkillsIdentity(profileRoot) {
   const walk = (directory, relativePath = "") => {
     for (const name of readdirSync(directory).sort()) {
       const nextRelative = relativePath ? `${relativePath}/${name}` : name;
-      if (nextRelative === "sellable") continue;
+      if (ADMIN_SEALED_SKILL_DIRECTORIES.has(nextRelative)) continue;
       const path = join(directory, name);
       const stat = lstatSync(path);
       if (stat.isSymbolicLink()) {
@@ -1031,12 +1034,22 @@ async function materializeAdminProfile({
     hermesCli: HERMES,
   });
   if (!memoryCron.ok) throw new Error(memoryCron.code);
+  const opportunitySequencesCron = await ensureHermesOpportunitySequencesCron({
+    profileId: profile,
+    profileRoot: profileHome,
+    hermesRoot: DATA_ROOT,
+    statePath: layout.statePath,
+  });
+  if (!opportunitySequencesCron.ok) {
+    throw new Error(opportunitySequencesCron.code);
+  }
   return {
     stage,
     promotion: promoted.promotion,
     profile,
     profileHome,
     adminHome,
+    opportunitySequencesCron,
     observedSoulRawSha256: promoted.observedSoulRawSha256,
     servers: [serverProofs.sellable, serverProofs["sellable-admin"]].map(
       ({ tools: _tools, ...proof }) => proof
@@ -1187,70 +1200,6 @@ function operationIdentity(claim, exchange) {
   };
 }
 
-function operationSnapshotIdentity(claim, exchange) {
-  const authority = claim?.runtimeAuthority;
-  if (!authority) return undefined;
-  return {
-    operationId: claim.operation.id,
-    authorityGeneration: authority.authorityGeneration,
-    runtimeArtifactId: authority.assignedRuntimeArtifactId,
-    sourceMachineId: exchange.workerId,
-    sourceMachineVersion: authority.machineVersion,
-    sourceBootSessionId: BOOT_SESSION_ID,
-    profileSchemaVersion: "admin-native-profile/v2",
-  };
-}
-
-function adminServingObservation(activeLaunch, activeGateway, exchange) {
-  try {
-    const authority = activeLaunch?.claim?.runtimeAuthority;
-    const running =
-      activeGateway?.child?.exitCode === null && !activeGateway.child.killed;
-    const productMcp = activeLaunch?.profile?.servers?.find(
-      (server) => server.alias === "sellable"
-    );
-    const adminMcp = activeLaunch?.profile?.servers?.find(
-      (server) => server.alias === "sellable-admin"
-    );
-    if (!authority || !running || !activeLaunch.slackProof) return null;
-    const observedAt = new Date();
-    return buildRuntimeServingObservation({
-      scope: authority.scope,
-      kind: "ADMIN",
-      operationId: activeLaunch.claim.operation.id,
-      workspaceId: activeLaunch.claim.operation.workspaceId,
-      agentId: activeLaunch.claim.operation.agentId,
-      runtimeId: authority.runtimeId,
-      authorityGeneration: authority.authorityGeneration,
-      runtimeArtifactId: authority.runtimeArtifactId,
-      machineId: exchange.workerId,
-      machineVersion: authority.machineVersion,
-      bootSessionId: BOOT_SESSION_ID,
-      profileIdentity: activeLaunch.profile.profile,
-      processIdentity: `gateway-${activeGateway.child.pid}-${activeLaunch.claim.operation.fence}`,
-      observedAt: observedAt.toISOString(),
-      expiresAt: new Date(observedAt.getTime() + 120_000).toISOString(),
-      slack: {
-        authenticated: true,
-        socketModeConnected: true,
-        apiReachable: true,
-      },
-      productMcp: {
-        serverInfoName: productMcp?.serverInfoName,
-        toolCount: productMcp?.toolCount,
-      },
-      adminMcp: {
-        serverInfoName: adminMcp?.serverInfoName,
-        toolCount: adminMcp?.toolCount,
-      },
-      nativeGateway: true,
-      customerRouting: false,
-    });
-  } catch {
-    return null;
-  }
-}
-
 function startOperationHeartbeat({ claim, exchange, client }) {
   const identity = operationIdentity(claim, exchange);
   let stopped = false;
@@ -1759,42 +1708,6 @@ function nativeSlackProfileInput(claim, installed) {
   };
 }
 
-async function proveAdminSlackServing(claim, secrets) {
-  const slack = claim.runtimeContract?.slack;
-  if (!slack) throw new Error("admin_runtime_slack_contract_rejected");
-  const post = (method, token) =>
-    fetch(`https://slack.com/api/${method}`, {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${token}`,
-        "content-type": "application/x-www-form-urlencoded",
-      },
-      body: "",
-      signal: AbortSignal.timeout(15_000),
-    });
-  const [authResponse, socketResponse] = await Promise.all([
-    post("auth.test", secrets.slackBot),
-    post("apps.connections.open", secrets.slackApp),
-  ]);
-  const [auth, socket] = await Promise.all([
-    authResponse.json(),
-    socketResponse.json(),
-  ]);
-  if (
-    !authResponse.ok ||
-    auth?.ok !== true ||
-    auth.team_id !== slack.teamId ||
-    auth.user_id !== slack.botUserId ||
-    !socketResponse.ok ||
-    socket?.ok !== true ||
-    typeof socket.url !== "string" ||
-    !/^wss:\/\//.test(socket.url)
-  ) {
-    throw new Error("admin_runtime_slack_serving_rejected");
-  }
-  return true;
-}
-
 async function fetchDeliveryCiphertext({
   operation,
   identity,
@@ -2351,12 +2264,7 @@ function completionReceipt({
   };
 }
 
-async function flushHermesSnapshot({
-  client,
-  profileId,
-  profileRoot,
-  operationIdentity,
-}) {
+async function flushHermesSnapshot({ client, profileId, profileRoot }) {
   try {
     markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
@@ -2365,24 +2273,13 @@ async function flushHermesSnapshot({
       hermesRoot: DATA_ROOT,
       hermesVersion: "0.20.0",
       debounceMs: 0,
-      operationIdentity,
-      upload: ({
-        archiveDigest,
-        archiveBytes,
-        sourceProfileId,
-        bytes,
-        ok: _ok,
-        status: _status,
-        hermesVersion: _hermesVersion,
-        ...v2
-      }) =>
+      upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
         client.putMemorySnapshot(
           {
             archiveDigest,
             archiveBytes,
             hermesVersion: "0.20.0",
             sourceProfileId,
-            ...v2,
           },
           bytes
         ),
@@ -3095,11 +2992,6 @@ async function runAdminProduction() {
                     callerProfileId: activeLaunch.profile.profile,
                   }),
                 leaseSeconds: 60,
-                servingObservation: adminServingObservation(
-                  activeLaunch,
-                  activeGateway,
-                  exchange
-                ),
               })
             : await client.claim(60);
       } catch (error) {
@@ -3169,6 +3061,16 @@ async function runAdminProduction() {
               ),
           });
         }
+        if (
+          activeLaunch &&
+          (!activeGateway ||
+            activeGateway.child.exitCode !== null ||
+            activeGateway.child.killed)
+        ) {
+          await sleep(Math.min(30_000, 500 * 2 ** Math.min(failures, 6)));
+          activeGateway = await startNativeGateway(activeLaunch);
+          failures = 0;
+        }
         await sleep(1_000);
         continue;
       }
@@ -3280,14 +3182,6 @@ async function runAdminProduction() {
         fetchLatest: () => client.getMemorySnapshot(),
       });
       if (!memoryRestore.ok) throw new Error(memoryRestore.code);
-      const legacyLightfieldVenv = quarantineLegacyLightfieldVenv({
-        profileId: basename(profileContract.profileHome),
-        profileRoot: profileContract.profileHome,
-        hermesRoot: DATA_ROOT,
-      });
-      if (!legacyLightfieldVenv.ok) {
-        throw new Error(legacyLightfieldVenv.code);
-      }
       const legacyUserState = migrateLegacyHermesUserState({
         profileId: basename(profileContract.profileHome),
         profileRoot: profileContract.profileHome,
@@ -3320,7 +3214,6 @@ async function runAdminProduction() {
         client,
         profileId: profile.profile,
         profileRoot: profile.profileHome,
-        operationIdentity: operationSnapshotIdentity(claim, exchange),
       });
       const settings = settingsProof(
         imported.receipt.generationRoot,
@@ -3355,14 +3248,8 @@ async function runAdminProduction() {
         modelAuth,
       });
       operationHeartbeat.assertHealthy();
-      const slackProof =
-        desiredLifecycle === "ON"
-          ? await proveAdminSlackServing(claim, secrets)
-          : false;
       const candidateLaunch =
-        desiredLifecycle === "ON"
-          ? { profile, claim, installed, slackProof }
-          : null;
+        desiredLifecycle === "ON" ? { profile, claim, installed } : null;
       let candidateGateway = null;
       try {
         if (candidateLaunch) {

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -4,9 +4,9 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG MCP_PACKAGE=@sellable/mcp@0.1.865
-ARG MCP_INTEGRITY=sha512-282pkYFADFrrIXyQcdUpQwakXiwe/AFUDpDZkTh29CFcGHnN7dvC0MCvaU4LffXA+ZuKCpuf02uxCLGiIEOjbw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.612-wip.phase189.20260812.2
+ARG MCP_PACKAGE=@sellable/mcp@0.1.867
+ARG MCP_INTEGRITY=sha512-8acJ5MfqgXiu9ylK65LlQ7LUBN5GN5fEXOwDTArxYAN7nBvVLhdz0nTGMERc6qCFNBbILTKvo4IErJOnAcJTDA==
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.612
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
 ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -96,9 +96,9 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.612-wip.phase189.20260812.2";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.612";
 const MCP_PACKAGE =
-  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.865";
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.867";
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -32,77 +32,6 @@ function stableJson(value) {
   return JSON.stringify(value);
 }
 
-// CUSTOMER and ADMIN runtimes share this one serving-observation builder.
-export function buildRuntimeServingObservation(input = {}) {
-  const keys = [
-    "scope",
-    "kind",
-    "operationId",
-    "workspaceId",
-    "agentId",
-    "runtimeId",
-    "authorityGeneration",
-    "runtimeArtifactId",
-    "machineId",
-    "machineVersion",
-    "bootSessionId",
-    "profileIdentity",
-    "processIdentity",
-    "observedAt",
-    "expiresAt",
-    "slack",
-    "productMcp",
-    "adminMcp",
-    "nativeGateway",
-    "customerRouting",
-  ];
-  const identity = (value) =>
-    typeof value === "string" && SAFE_ID.test(value);
-  const mcp = (value, name, tools) =>
-    exactKeys(value, ["serverInfoName", "toolCount"]) &&
-    value.serverInfoName === name &&
-    value.toolCount === tools;
-  const observedAt = Date.parse(input.observedAt ?? "");
-  const expiresAt = Date.parse(input.expiresAt ?? "");
-  const kindExact =
-    input.kind === "CUSTOMER"
-      ? input.adminMcp === null && input.customerRouting === true
-      : input.kind === "ADMIN" &&
-        mcp(input.adminMcp, "sellable-admin-mcp", 46) &&
-        input.customerRouting === false;
-  if (
-    !exactKeys(input, keys) ||
-    !["ASSIGNED", "CANDIDATE"].includes(input.scope) ||
-    !keys
-      .slice(2, 13)
-      .filter((key) => key !== "authorityGeneration")
-      .every((key) => identity(input[key])) ||
-    !Number.isSafeInteger(input.authorityGeneration) ||
-    input.authorityGeneration < 1 ||
-    !Number.isFinite(observedAt) ||
-    !Number.isFinite(expiresAt) ||
-    expiresAt <= observedAt ||
-    expiresAt - observedAt > 5 * 60_000 ||
-    !exactKeys(input.slack, [
-      "authenticated",
-      "socketModeConnected",
-      "apiReachable",
-    ]) ||
-    input.slack.authenticated !== true ||
-    input.slack.socketModeConnected !== true ||
-    input.slack.apiReachable !== true ||
-    !mcp(input.productMcp, "sellable-mcp", 193) ||
-    input.nativeGateway !== true ||
-    !kindExact
-  ) {
-    throw new Error("runtime_serving_observation_rejected");
-  }
-  return Object.freeze({
-    schemaVersion: "sellable-agent-serving-observation/v2",
-    ...input,
-  });
-}
-
 export function buildAgentServiceEnvironment({
   workspaceId,
   agentId,

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -541,7 +541,7 @@ function tusUploadAccepted(value) {
       value.signedUploadToken.length <= 16_384 &&
       !/\s/.test(value.signedUploadToken) &&
       value.bucketName === "agent-hermes-backups-v1" &&
-      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:(?:customer|admin)\/archives|agents\/[A-Za-z0-9_-]{1,128}\/operations\/[A-Za-z0-9_-]{1,128})\/[a-f0-9]{64}\.zip$/.test(
+      /^workspaces\/[A-Za-z0-9_-]{1,128}\/(?:customer|admin)\/archives\/[a-f0-9]{64}\.zip$/.test(
         value?.objectName ?? ""
       )
     );
@@ -784,7 +784,6 @@ export async function claimWithSoulObservation({
   tracker,
   readSoul,
   leaseSeconds = 60,
-  servingObservation = /** @type {any} */ (null),
 }) {
   // Deliver lifecycle work before any potentially slow local loader proof.
   // Reconciliation uses the same cadence only after the server confirms that
@@ -792,7 +791,6 @@ export async function claimWithSoulObservation({
   const tick = await client.claimTick({
     leaseSeconds,
     soulObservation: tracker.pending(),
-    ...(servingObservation ? { servingObservation } : {}),
   });
   if (tick?.claim) return tick.claim;
 
@@ -960,9 +958,9 @@ export function createFlyCustomerControlClient({
       }
     }
   };
-  const memorySnapshotControl = async (method, body, verb, search = "") => {
+  const memorySnapshotControl = async (method, body, verb) => {
     const response = await fetchImpl(
-      `${endpoint}/api/v3/sellable-agent/worker/memory-snapshot${search}`,
+      `${endpoint}/api/v3/sellable-agent/worker/memory-snapshot`,
       {
         method,
         headers: {
@@ -990,37 +988,6 @@ export function createFlyCustomerControlClient({
     value.archiveBytes <= 128 * 1024 * 1024 &&
     value.hermesVersion === "0.20.0" &&
     /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value?.sourceProfileId ?? "");
-  const boundedSnapshotIdentity = (value) =>
-    /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/.test(value ?? "");
-  const metadataV2Accepted = (value) =>
-    metadataAccepted(value) &&
-    Object.keys(value).sort().join(",") ===
-      "archiveBytes,archiveDigest,authorityGeneration,hermesVersion,operationId,profileSchemaVersion,runtimeArtifactId,sourceBootSessionId,sourceMachineId,sourceMachineVersion,sourceProfileId" &&
-    boundedSnapshotIdentity(value.operationId) &&
-    Number.isSafeInteger(value.authorityGeneration) &&
-    value.authorityGeneration > 0 &&
-    boundedSnapshotIdentity(value.runtimeArtifactId) &&
-    boundedSnapshotIdentity(value.profileSchemaVersion) &&
-    [
-      value.sourceMachineId,
-      value.sourceMachineVersion,
-      value.sourceBootSessionId,
-    ].every(
-      (identityValue) =>
-        identityValue === null || boundedSnapshotIdentity(identityValue)
-    );
-  const snapshotReadbackExpected = (value) =>
-    value &&
-    typeof value === "object" &&
-    !Array.isArray(value) &&
-    Object.keys(value).sort().join(",") ===
-      "authorityGeneration,operationId,profileSchemaVersion,runtimeArtifactId,sourceProfileId" &&
-    boundedSnapshotIdentity(value.operationId) &&
-    Number.isSafeInteger(value.authorityGeneration) &&
-    value.authorityGeneration > 0 &&
-    boundedSnapshotIdentity(value.runtimeArtifactId) &&
-    /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value.sourceProfileId ?? "") &&
-    boundedSnapshotIdentity(value.profileSchemaVersion);
   const signedUrlAccepted = (value) => {
     try {
       return new URL(value).protocol === "https:";
@@ -1029,9 +996,8 @@ export function createFlyCustomerControlClient({
     }
   };
   const putMemorySnapshot = async (metadata, archive) => {
-    const isV2 = Object.hasOwn(metadata ?? {}, "operationId");
     if (
-      !(isV2 ? metadataV2Accepted(metadata) : metadataAccepted(metadata)) ||
+      !metadataAccepted(metadata) ||
       !Buffer.isBuffer(archive) ||
       metadata.archiveBytes !== archive.byteLength ||
       createHash("sha256").update(archive).digest("hex") !==
@@ -1043,20 +1009,14 @@ export function createFlyCustomerControlClient({
       const value = await memorySnapshotControl(
         "PUT",
         {
-          schemaVersion: isV2
-            ? "sellable-hermes-snapshot-upload/v2"
-            : "sellable-hermes-snapshot-upload/v1",
+          schemaVersion: "sellable-hermes-snapshot-upload/v1",
           ...metadata,
         },
         "memory-snapshot-put"
       );
       if (
         !tusUploadAccepted(value) ||
-        !value.objectName.endsWith(
-          isV2
-            ? `/operations/${metadata.operationId}/${metadata.archiveDigest}.zip`
-            : `/${metadata.archiveDigest}.zip`
-        )
+        !value.objectName.endsWith(`/${metadata.archiveDigest}.zip`)
       ) {
         throw new WorkerControlResponseError(
           "memory_snapshot_upload_url_rejected"
@@ -1074,9 +1034,7 @@ export function createFlyCustomerControlClient({
     const committed = await memorySnapshotControl(
       "POST",
       {
-        schemaVersion: isV2
-          ? "sellable-hermes-snapshot-commit/v2"
-          : "sellable-hermes-snapshot-commit/v1",
+        schemaVersion: "sellable-hermes-snapshot-commit/v1",
         ...metadata,
       },
       "memory-snapshot-put"
@@ -1089,42 +1047,14 @@ export function createFlyCustomerControlClient({
     }
     return committed;
   };
-  const getMemorySnapshot = async (expected) => {
-    const isV2 = expected !== undefined;
-    if (isV2 && !snapshotReadbackExpected(expected)) {
-      throw new WorkerControlResponseError("memory_snapshot_download_rejected");
-    }
-    const body = isV2
-      ? {
-          schemaVersion: "sellable-hermes-snapshot-get/v2",
-          operationId: expected.operationId,
-        }
-      : { schemaVersion: "sellable-hermes-snapshot-get/v1" };
-    const search = isV2
-      ? `?${new URLSearchParams(body).toString()}`
-      : "";
+  const getMemorySnapshot = async () => {
     const result = await memorySnapshotControl(
       "GET",
-      body,
-      "memory-snapshot-get",
-      search
+      { schemaVersion: "sellable-hermes-snapshot-get/v1" },
+      "memory-snapshot-get"
     );
     if (!result) return null;
-    const identityReadbackAccepted =
-      !isV2 ||
-      (result.operationId === expected.operationId &&
-        result.authorityGeneration === expected.authorityGeneration &&
-        result.runtimeArtifactId === expected.runtimeArtifactId &&
-        result.sourceProfileId === expected.sourceProfileId &&
-        result.profileSchemaVersion === expected.profileSchemaVersion &&
-        /^[a-f0-9]{64}$/.test(result.archiveDigest ?? "") &&
-        Number.isSafeInteger(result.archiveBytes) &&
-        result.archiveBytes > 0 &&
-        result.archiveBytes <= 128 * 1024 * 1024);
-    if (
-      !(isV2 ? identityReadbackAccepted : metadataAccepted(result)) ||
-      !signedUrlAccepted(result.signedUrl)
-    ) {
+    if (!metadataAccepted(result) || !signedUrlAccepted(result.signedUrl)) {
       throw new WorkerControlResponseError(
         "memory_snapshot_download_url_rejected"
       );
@@ -1144,15 +1074,10 @@ export function createFlyCustomerControlClient({
     }
     return { ...result, signedUrl: undefined, bytes };
   };
-  const claimTick = async ({
-    leaseSeconds = 60,
-    soulObservation,
-    servingObservation,
-  } = {}) =>
+  const claimTick = async ({ leaseSeconds = 60, soulObservation } = {}) =>
     post("claim", "/api/v3/sellable-agent/worker/claim", {
       leaseSeconds,
       ...(soulObservation ? { soulObservation } : {}),
-      ...(servingObservation ? { servingObservation } : {}),
     });
   return Object.freeze({
     claimTick,
@@ -1228,8 +1153,8 @@ export function createFlyCustomerControlClient({
     async putMemorySnapshot(metadata, archive) {
       return putMemorySnapshot(metadata, archive);
     },
-    async getMemorySnapshot(expected) {
-      return getMemorySnapshot(expected);
+    async getMemorySnapshot() {
+      return getMemorySnapshot();
     },
   });
 }