@sellable/install 0.1.641 → 0.1.643

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -43,6 +43,12 @@ import {
   observeProfileSoul,
   prepareSoulLockRoot,
 } from "../fly-soul-bridge.mjs";
+import { proveDefaultProfileNativeSkills } from "../fly-skills-bridge.mjs";
+import {
+  bindDefaultProfileProbeCron,
+  buildDefaultProfileProjection,
+  reconcileDefaultProfileBundle,
+} from "../default-profile-reconciler.mjs";
 import {
   ensureHermesSnapshotCron,
   markHermesSnapshotDirty,
@@ -99,13 +105,67 @@ const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
 const INSTALLER_PACKAGE =
   process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ??
-  "@sellable/install@0.1.641";
+  "@sellable/install@0.1.643";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.879";
+const DEFAULT_PROFILE_BUNDLE_ROOT =
+  "/usr/local/share/sellable-agent/default-profile-bundle";
+const DEFAULT_PROFILE_CRON_PYTHON = [
+  "import json,sys",
+  "from cron.jobs import create_job, update_job",
+  "value=json.loads(sys.argv[1])",
+  "job_id=value.pop('jobId', None)",
+  "enabled=value.pop('enabled')",
+  "result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value, enabled=enabled)",
+  "print(json.dumps({'id': result.get('id') if result else None}))",
+].join("\n");
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 
+function customerDefaultProfileCronAdapter(profileId, profileRoot) {
+  const mutate = async ({ desired, spec, existing }) => {
+    const child = await run(
+      HERMES_PYTHON,
+      [
+        "-c",
+        DEFAULT_PROFILE_CRON_PYTHON,
+        JSON.stringify({
+          name: desired.name,
+          schedule: spec.schedule,
+          script: desired.script,
+          no_agent: true,
+          deliver: "local",
+          enabled: true,
+          ...(existing?.id ? { jobId: existing.id } : {}),
+        }),
+      ],
+      {
+        env: {
+          ...process.env,
+          HOME: DATA_ROOT,
+          HERMES_HOME: profileRoot,
+          HERMES_PROFILE: profileId,
+          NO_COLOR: "1",
+        },
+        timeoutMs: 120_000,
+      }
+    );
+    return {
+      ...child,
+      exitCode: child.status,
+      signal: null,
+      outputLimitExceeded: false,
+    };
+  };
+  return {
+    create: (input) => mutate(input),
+    update: (input) => mutate(input),
+    bind: (input) =>
+      bindDefaultProfileProbeCron({ ...input, bootId: BOOT_SESSION_ID }),
+  };
+}
+
 function atomicFile(path, bytes, mode = 0o600) {
   mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
   const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
@@ -498,6 +558,12 @@ export function customerServingObservation(activeRuntime, exchange) {
       },
       productMcp: authority.productMcp,
       adminMcp: null,
+      ...(authority.bundleVersion === undefined
+        ? {}
+        : {
+            bundleVersion: authority.bundleVersion,
+            bundleDigest: authority.bundleDigest,
+          }),
       nativeGateway: true,
       customerRouting: true,
     });
@@ -533,6 +599,11 @@ function startOperationHeartbeat({ claim, exchange, client }) {
     assertHealthy() {
       if (failure) throw failure;
     },
+    async reattest() {
+      beat();
+      await inFlight;
+      if (failure) throw failure;
+    },
     async stop() {
       stopped = true;
       clearInterval(timer);
@@ -2631,6 +2702,8 @@ function completionReceipt({
   proof,
   memorySnapshot,
   observedSoulRawSha256,
+  activeProjection,
+  nativeDefaultProfileProof,
 }) {
   const identity = operationIdentity(claim, exchange);
   const observedLifecycle =
@@ -2651,6 +2724,12 @@ function completionReceipt({
     secretDisposition: "INSTALLED",
     observedLifecycle,
     observedRevisionId: desired.revisionId,
+    ...(activeProjection
+      ? {
+          bundleVersion: activeProjection.bundleVersion,
+          bundleDigest: activeProjection.bundleDigest,
+        }
+      : {}),
     signerGeneration: exchange.keyGeneration,
     signedDigest: flyRuntimeDigest({
       ...identity,
@@ -2680,6 +2759,11 @@ function completionReceipt({
       },
       { code: "NO_BOOT_INSTALL", status: "TRUE" },
       { code: "DEDICATED_SLACK_APP", status: "TRUE" },
+      {
+        code: "DEFAULT_PROFILE_NATIVE_PROOF",
+        status:
+          nativeDefaultProfileProof.status === "PROVEN" ? "TRUE" : "UNKNOWN",
+      },
     ],
     errorClass: "NONE",
     auditIds: [
@@ -2697,9 +2781,10 @@ async function flushHermesSnapshot({
   profileId,
   profileRoot,
   operationIdentity,
+  forceDirty = false,
 }) {
   try {
-    markHermesSnapshotDirty(profileRoot);
+    if (forceDirty) markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
       profileId,
       profileRoot,
@@ -2773,7 +2858,13 @@ function runtimeModelHealthReporter({ identity, exchange, runtimeConfig }) {
   });
 }
 
-async function processOperation({ claim, exchange, client, identity }) {
+async function processOperation({
+  claim,
+  exchange,
+  client,
+  identity,
+  reattestAuthority,
+}) {
   const trustRootPem = readFileSync(TRUST_ROOT, "utf8");
   const { desired, toolInclude } = compileDesired(claim, trustRootPem);
   mkdirSync(PROFILES_ROOT, { recursive: true, mode: 0o700 });
@@ -2812,6 +2903,28 @@ async function processOperation({ claim, exchange, client, identity }) {
     profileRoot,
   });
   if (!pristineProfile.ok) throw new Error(pristineProfile.code);
+  const activeProjection = buildDefaultProfileProjection({
+    kind: "CUSTOMER",
+    claim,
+  });
+  const reconciledDefaultProfile = await reconcileDefaultProfileBundle({
+    activeProjection,
+    materializerReceipt: pristineProfile.manifest,
+    profileRoot,
+    bundleRoot: DEFAULT_PROFILE_BUNDLE_ROOT,
+    dataRoot: DATA_ROOT,
+    reattestAuthority: async () => {
+      await reattestAuthority();
+      return activeProjection;
+    },
+    cronAdapter: customerDefaultProfileCronAdapter(
+      desired.profileId,
+      profileRoot
+    ),
+  });
+  if (!reconciledDefaultProfile.ok)
+    throw new Error(reconciledDefaultProfile.code);
+  const defaultProfile = reconciledDefaultProfile;
   installInternalAdminRuntimeSettings({ desired, profileRoot });
   const runtimeConfig = writeRuntimeHermesConfig({
     desired,
@@ -2835,6 +2948,10 @@ async function processOperation({ claim, exchange, client, identity }) {
     hermesCli: HERMES,
   });
   if (!memoryCron.ok) throw new Error(memoryCron.code);
+  const materializerChanged =
+    materialized.status !== "REUSED" || memoryCron.status !== "REUSED";
+  if (materializerChanged || defaultProfile.changed)
+    markHermesSnapshotDirty(profileRoot);
   const memorySnapshot = await flushHermesSnapshot({
     client,
     profileId: desired.profileId,
@@ -2851,6 +2968,13 @@ async function processOperation({ claim, exchange, client, identity }) {
     secrets,
     profileDigest: pristineProfile.manifest.profileDigest,
   });
+  const nativeDefaultProfileProof = proof.gatewayReadback?.running
+    ? proveDefaultProfileNativeSkills({
+        actions: defaultProfile.actions,
+        profileId: desired.profileId,
+        dataRoot: DATA_ROOT,
+      })
+    : { status: "EMPTY", digest: sha256("[]") };
   const receipt = completionReceipt({
     claim,
     exchange,
@@ -2858,6 +2982,8 @@ async function processOperation({ claim, exchange, client, identity }) {
     proof,
     memorySnapshot,
     observedSoulRawSha256,
+    activeProjection,
+    nativeDefaultProfileProof,
   });
   const candidateRuntime = {
     claim,
@@ -3133,6 +3259,7 @@ async function main() {
             profileId: claim.operation.profileId,
             profileRoot: join(PROFILES_ROOT, claim.operation.profileId),
             operationIdentity: snapshotIdentity,
+            forceDirty: true,
           });
           if (!backup.ok || backup.status !== "UPLOADED") {
             throw new Error(
@@ -3176,6 +3303,7 @@ async function main() {
         exchange,
         client,
         identity,
+        reattestAuthority: () => operationHeartbeat.reattest(),
       });
       soulClaimTracker = createSoulClaimObservationTracker({
         runtimeId: RUNTIME_ID,

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -17,6 +17,21 @@ import { parseFlyCustomerModelCredential } from "./fly-customer-model.mjs";
 
 const SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
 const SHA256 = /^[a-f0-9]{64}$/;
+
+function imageBundleIdentity(env) {
+  const rawVersion = env?.SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION;
+  const bundleDigest = env?.SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST;
+  if (rawVersion === undefined && bundleDigest === undefined) return null;
+  const bundleVersion = Number(rawVersion);
+  if (
+    !Number.isSafeInteger(bundleVersion) ||
+    bundleVersion < 1 ||
+    !SHA256.test(bundleDigest ?? "")
+  ) {
+    throw new Error("runtime_serving_observation_rejected");
+  }
+  return Object.freeze({ bundleVersion, bundleDigest });
+}
 function sha256(value) {
   return createHash("sha256").update(value).digest("hex");
 }
@@ -38,7 +53,8 @@ export function isOperationBoundBackupClaim(claim) {
 }
 
 // CUSTOMER and ADMIN runtimes share this one serving-observation builder.
-export function buildRuntimeServingObservation(input = {}) {
+export function buildRuntimeServingObservation(input = {}, env = process.env) {
+  const bundleIdentity = imageBundleIdentity(env);
   const keys = [
     "scope",
     "kind",
@@ -60,6 +76,7 @@ export function buildRuntimeServingObservation(input = {}) {
     "adminMcp",
     "nativeGateway",
     "customerRouting",
+    ...(bundleIdentity ? ["bundleVersion", "bundleDigest"] : []),
   ];
   const identity = (value) => typeof value === "string" && SAFE_ID.test(value);
   const mcp = (value, name) =>
@@ -77,7 +94,7 @@ export function buildRuntimeServingObservation(input = {}) {
         mcp(input.adminMcp, "sellable-admin-mcp") &&
         input.customerRouting === false;
   if (
-    !exactKeys(input, keys) ||
+    !exactKeys({ ...input, ...(bundleIdentity ?? {}) }, keys) ||
     !["ASSIGNED", "CANDIDATE"].includes(input.scope) ||
     !keys
       .slice(2, 13)
@@ -106,6 +123,7 @@ export function buildRuntimeServingObservation(input = {}) {
   return Object.freeze({
     schemaVersion: "sellable-agent-serving-observation/v2",
     ...input,
+    ...(bundleIdentity ?? {}),
   });
 }
 

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -23,6 +23,21 @@ import { Upload as TusUpload } from "tus-js-client";
 
 const execFileAsync = promisify(execFile);
 const SHA256 = /^[a-f0-9]{64}$/;
+
+function imageBundleIdentity(env) {
+  const rawVersion = env?.SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION;
+  const bundleDigest = env?.SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST;
+  if (rawVersion === undefined && bundleDigest === undefined) return null;
+  const bundleVersion = Number(rawVersion);
+  if (
+    !Number.isSafeInteger(bundleVersion) ||
+    bundleVersion < 1 ||
+    !SHA256.test(bundleDigest ?? "")
+  ) {
+    throw new Error("runtime_bundle_identity_rejected");
+  }
+  return Object.freeze({ bundleVersion, bundleDigest });
+}
 const SAFE_ID = /^[A-Za-z0-9_-]{1,128}$/;
 const FLY_OIDC_AUTHORIZATION_SCHEME = "FlyOIDC";
 
@@ -906,11 +921,13 @@ export function createFlyCustomerControlClient({
   origin,
   identity,
   exchange,
+  env = process.env,
   fetchImpl = fetch,
   retryDelayMs = 150,
   tusUploadImpl = uploadSupabaseSignedTus,
 }) {
   const endpoint = exactHttpsOrigin(origin);
+  const bundleIdentity = imageBundleIdentity(env);
   if (
     !Number.isSafeInteger(retryDelayMs) ||
     retryDelayMs < 0 ||
@@ -919,6 +936,28 @@ export function createFlyCustomerControlClient({
     throw new Error("worker_control_retry_delay_invalid");
   }
   const post = async (verb, path, body, { replaySafe = false } = {}) => {
+    const presentedBundle =
+      body && typeof body === "object" && !Array.isArray(body)
+        ? imageBundleIdentity({
+            SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION:
+              body.bundleVersion === undefined
+                ? undefined
+                : String(body.bundleVersion),
+            SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST: body.bundleDigest,
+          })
+        : null;
+    if (
+      presentedBundle &&
+      bundleIdentity &&
+      (presentedBundle.bundleVersion !== bundleIdentity.bundleVersion ||
+        presentedBundle.bundleDigest !== bundleIdentity.bundleDigest)
+    ) {
+      throw new Error("runtime_bundle_identity_rejected");
+    }
+    const signedBody =
+      verb === "complete" && bundleIdentity && !presentedBundle
+        ? { ...body, ...bundleIdentity }
+        : body;
     const maxAttempts = replaySafe ? 3 : 1;
     for (let attempt = 1; ; attempt += 1) {
       try {
@@ -926,7 +965,7 @@ export function createFlyCustomerControlClient({
           identity,
           exchange,
           verb,
-          body,
+          body: signedBody,
           now: new Date(),
         });
         let response;
@@ -934,7 +973,7 @@ export function createFlyCustomerControlClient({
           response = await fetchImpl(`${endpoint}${path}`, {
             method: "POST",
             headers: { authorization, "content-type": "application/json" },
-            body: JSON.stringify(body),
+            body: JSON.stringify(signedBody),
             signal: AbortSignal.timeout(20_000),
           });
         } catch {

package/lib/sellable-agent/fly-skills-bridge.mjs

@@ -352,7 +352,7 @@ function publicInventory(inventory) {
 }
 
 const NATIVE_SCRIPT = String.raw`
-import json, os, sys
+import hashlib, json, os, sys
 from pathlib import Path
 request = json.loads(sys.stdin.read())
 from tools.skills_tool import _find_all_skills, skill_view
@@ -360,6 +360,13 @@ from tools.skill_manager_tool import _find_skill, _create_skill, _edit_skill, _d
 from hermes_cli.config import load_config
 from hermes_cli.skills_config import get_disabled_skills, save_disabled_skills
 
+def native_view(read_name, read_file=None):
+    viewed = skill_view(read_name, file_path=read_file, preprocess=False) if read_file else skill_view(read_name, preprocess=False)
+    content = viewed.get("content") if isinstance(viewed, dict) else viewed
+    success = viewed.get("success") is True if isinstance(viewed, dict) else isinstance(viewed, str)
+    name = str(viewed.get("name") or "") if isinstance(viewed, dict) else read_name
+    return {"success": success, "name": name, "content": content, "contentSha256": hashlib.sha256(content.encode("utf-8")).hexdigest() if isinstance(content, str) else None}
+
 def inventory(read_name=None, read_file=None):
     rows = _find_all_skills(skip_disabled=True)
     config = load_config()
@@ -381,14 +388,14 @@ def inventory(read_name=None, read_file=None):
         result.append(item)
     viewed = None
     if read_name:
-        viewed = skill_view(read_name, file_path=read_file) if read_file else skill_view(read_name)
+        viewed = native_view(read_name, read_file)
     return {"complete": True, "skills": result, "disabledNames": disabled, "disabledConfig": json.dumps(disabled, separators=(",", ":")), "nativeView": viewed}
 
 op = request.get("operation")
 if op == "enumerate":
     output = inventory(request.get("readName"), request.get("readFile"))
 elif op == "read":
-    output = {"nativeView": skill_view(request["readName"], file_path=request.get("readFile")) if request.get("readFile") else skill_view(request["readName"])}
+    output = {"nativeView": native_view(request["readName"], request.get("readFile"))}
 elif op == "scan":
     from tools.skills_guard import scan_skill, should_allow_install
     # Phase 170 production receipt skills_apply_failed_rolled_back proved that
@@ -538,6 +545,18 @@ function findSkill(inventory, id, { editable = false } = {}) {
   return skill;
 }
 
+function assertNativeView(proof, name, content, code) {
+  if (
+    proof?.success !== true ||
+    proof.name !== name ||
+    typeof proof.content !== "string" ||
+    proof.content !== content ||
+    proof.contentSha256 !== sha256(Buffer.from(content, "utf8"))
+  ) {
+    fail(code);
+  }
+}
+
 function backupTree(skillRoot) {
   const snapshot = [];
   const walk = (directory) => {
@@ -622,8 +641,12 @@ function executeLocked(request, paths, adapter, options) {
       readName: skill.name,
       readFile: relativePath === "SKILL.md" ? undefined : relativePath,
     });
-    if (typeof proof.nativeView !== "string")
-      fail("skills_native_readback_failed");
+    assertNativeView(
+      proof.nativeView,
+      skill.name,
+      content,
+      "skills_native_readback_failed"
+    );
     atomicProof(paths, before);
     return {
       ok: true,
@@ -788,8 +811,7 @@ function executeLocked(request, paths, adapter, options) {
     const after = normalizeEnumeration(afterNative, paths, options.limits);
     if (
       !after.complete ||
-      (request.operation !== "delete" &&
-        typeof afterNative.nativeView !== "string")
+      (request.operation !== "delete" && !afterNative.nativeView)
     )
       fail("skills_readback_failed");
     const afterSkill =
@@ -798,6 +820,14 @@ function executeLocked(request, paths, adapter, options) {
       request.operation === "delete" ? afterSkill !== null : afterSkill === null
     )
       fail("skills_readback_failed");
+    if (afterSkill) {
+      assertNativeView(
+        afterNative.nativeView,
+        afterSkill.name,
+        afterSkill.manifestContent,
+        "skills_readback_failed"
+      );
+    }
     if (
       (request.operation === "edit" &&
         afterSkill.fileSha256 !==
@@ -933,6 +963,32 @@ export function executeExternalSkillsBridgeOperation(
   });
 }
 
+export function proveDefaultProfileNativeSkills({
+  actions,
+  profileId,
+  dataRoot = SOUL_BRIDGE_DATA_ROOT,
+} = {}) {
+  const managed = (actions ?? []).filter((action) => action.type === "skill");
+  if (managed.length === 0)
+    return { status: "EMPTY", digest: sha256("[]") };
+  const inventory = executeExternalSkillsBridgeOperation(
+    { operation: "list" },
+    { dataRoot, callerProfileId: profileId }
+  );
+  const proofs = managed.map((action) => {
+    const skill = inventory.skills.find((entry) => entry.name === action.id);
+    if (!skill) fail("default_profile_native_skill_missing");
+    const viewed = executeExternalSkillsBridgeOperation(
+      { operation: "read", skillId: skill.id },
+      { dataRoot, callerProfileId: profileId }
+    );
+    if (!viewed.ok || viewed.skill?.name !== action.id)
+      fail("default_profile_native_skill_readback_rejected");
+    return { id: action.id, fileSha256: viewed.fileSha256 };
+  });
+  return { status: "PROVEN", digest: sha256(stableJson(proofs)) };
+}
+
 export function computeSkillsConfigIdentity(profileRoot) {
   if (!isAbsolute(profileRoot) || !existsSync(profileRoot))
     fail("skills_profile_root_rejected");

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.641";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.643";
 const MCP_PACKAGE = "@sellable/mcp@0.1.879";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1547,7 +1547,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
       pinned.installerPackage !==
-        "@sellable/install@0.1.641" ||
+        "@sellable/install@0.1.643" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.879" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -283,7 +283,7 @@ function validateDesired(desired) {
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
     desired.installerPackage !==
-      "@sellable/install@0.1.641" ||
+      "@sellable/install@0.1.643" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.879" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -26,7 +26,7 @@ import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
 export const PINNED_INSTALL_PACKAGE =
-  "@sellable/install@0.1.641";
+  "@sellable/install@0.1.643";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.879";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.641",
+  "version": "0.1.643",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {