@sellable/install 0.1.642 → 0.1.643

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -69,6 +69,12 @@ import {
   prepareSoulLockRoot,
   withProfileSoulLock,
 } from "../fly-soul-bridge.mjs";
+import { proveDefaultProfileNativeSkills } from "../fly-skills-bridge.mjs";
+import {
+  bindDefaultProfileProbeCron,
+  buildDefaultProfileProjection,
+  reconcileDefaultProfileBundle,
+} from "../default-profile-reconciler.mjs";
 import {
   HERMES_SNAPSHOT_HOOKS,
   HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
@@ -185,6 +191,17 @@ const RUNTIME_GENERATION = Number(
   process.env.SELLABLE_AGENT_RUNTIME_GENERATION ?? "0"
 );
 const BOOT_SESSION_ID = randomUUID();
+const DEFAULT_PROFILE_BUNDLE_ROOT =
+  "/usr/local/share/sellable-agent/default-profile-bundle";
+const DEFAULT_PROFILE_CRON_PYTHON = [
+  "import json,sys",
+  "from cron.jobs import create_job, update_job",
+  "value=json.loads(sys.argv[1])",
+  "job_id=value.pop('jobId', None)",
+  "enabled=value.pop('enabled')",
+  "result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value, enabled=enabled)",
+  "print(json.dumps({'id': result.get('id') if result else None}))",
+].join("\n");
 
 const sha256 = (value) => createHash("sha256").update(value).digest("hex");
 const deliveryClaimId = (operationId) =>
@@ -192,6 +209,69 @@ const deliveryClaimId = (operationId) =>
 const sleep = (milliseconds) =>
   new Promise((resolve) => setTimeout(resolve, milliseconds));
 
+function adminDefaultProfileCronAdapter(profileId, profileRoot) {
+  const mutate = ({ desired, spec, existing }) => {
+    const child = spawnSync(
+      HERMES_PYTHON,
+      [
+        "-c",
+        DEFAULT_PROFILE_CRON_PYTHON,
+        JSON.stringify({
+          name: desired.name,
+          schedule: spec.schedule,
+          script: desired.script,
+          no_agent: true,
+          deliver: "local",
+          enabled: true,
+          ...(existing?.id ? { jobId: existing.id } : {}),
+        }),
+      ],
+      {
+        env: {
+          ...process.env,
+          HOME: DATA_ROOT,
+          HERMES_HOME: profileRoot,
+          HERMES_PROFILE: profileId,
+          NO_COLOR: "1",
+        },
+        encoding: "utf8",
+        timeout: 120_000,
+        maxBuffer: 64 * 1024,
+      }
+    );
+    return {
+      exitCode: child.status,
+      signal: child.signal,
+      stdout: child.stdout ?? "",
+      stderr: child.stderr ?? "",
+      timedOut: Boolean(child.error && child.signal === "SIGTERM"),
+      outputLimitExceeded: child.error?.code === "ENOBUFS",
+    };
+  };
+  return {
+    create: (input) => mutate(input),
+    update: (input) => mutate(input),
+    bind: (input) =>
+      bindDefaultProfileProbeCron({ ...input, bootId: BOOT_SESSION_ID }),
+  };
+}
+
+function adminMaterializerReceipt(profileId, profileRoot) {
+  const paths = [
+    "SOUL.md",
+    "skills/sellable/SKILL.md",
+    "skills/sellable-admin/SKILL.md",
+  ];
+  return {
+    profileId,
+    fileHashes: Object.fromEntries(
+      paths
+        .filter((relative) => existsSync(join(profileRoot, relative)))
+        .map((relative) => [relative, sha256(readFileSync(join(profileRoot, relative)))])
+    ),
+  };
+}
+
 function canonicalJson(value) {
   if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
   if (value && typeof value === "object") {
@@ -1140,6 +1220,7 @@ async function materializeAdminProfile({
     profile,
     profileHome,
     adminHome,
+    memoryCron,
     opportunitySequencesCron,
     observedSoulRawSha256: promoted.observedSoulRawSha256,
     servers: [serverProofs.sellable, serverProofs["sellable-admin"]].map(
@@ -1410,6 +1491,12 @@ function adminServingObservation(activeLaunch, activeGateway, exchange) {
         serverInfoName: adminMcp?.serverInfoName,
         toolCount: adminMcp?.toolCount,
       },
+      ...(authority.bundleVersion === undefined
+        ? {}
+        : {
+            bundleVersion: authority.bundleVersion,
+            bundleDigest: authority.bundleDigest,
+          }),
       nativeGateway: true,
       customerRouting: false,
     });
@@ -1445,6 +1532,11 @@ function startOperationHeartbeat({ claim, exchange, client }) {
     assertHealthy() {
       if (failure) throw failure;
     },
+    async reattest() {
+      beat();
+      await inFlight;
+      if (failure) throw failure;
+    },
     async stop() {
       stopped = true;
       clearInterval(timer);
@@ -2437,6 +2529,8 @@ function completionReceipt({
   observedLifecycle,
   memorySnapshot,
   modelAuth,
+  activeProjection,
+  nativeDefaultProfileProof,
 }) {
   const identity = operationIdentity(claim, exchange);
   const routeGenerationDigest = flyRuntimeDigest(
@@ -2492,6 +2586,12 @@ function completionReceipt({
     secretDisposition: "INSTALLED",
     observedLifecycle,
     observedRevisionId: claim.operation.targetRevisionId,
+    ...(activeProjection
+      ? {
+          bundleVersion: activeProjection.bundleVersion,
+          bundleDigest: activeProjection.bundleDigest,
+        }
+      : {}),
     signerGeneration: exchange.keyGeneration,
     signedDigest: flyRuntimeDigest({
       ...identity,
@@ -2514,6 +2614,11 @@ function completionReceipt({
       },
       { code: "SLACK_TRAFFIC_DISABLED", status: "TRUE" },
       { code: "NO_BOOT_INSTALL", status: "TRUE" },
+      {
+        code: "DEFAULT_PROFILE_NATIVE_PROOF",
+        status:
+          nativeDefaultProfileProof.status === "PROVEN" ? "TRUE" : "UNKNOWN",
+      },
     ],
     errorClass: "NONE",
     auditIds: [
@@ -2533,9 +2638,10 @@ async function flushHermesSnapshot({
   profileId,
   profileRoot,
   operationIdentity,
+  forceDirty = false,
 }) {
   try {
-    markHermesSnapshotDirty(profileRoot);
+    if (forceDirty) markHermesSnapshotDirty(profileRoot);
     return await reconcileHermesSnapshot({
       profileId,
       profileRoot,
@@ -3374,6 +3480,7 @@ async function runAdminProduction() {
           profileId: basename(profile.profileHome),
           profileRoot: profile.profileHome,
           operationIdentity: snapshotIdentity,
+          forceDirty: true,
         });
         if (!backup.ok || backup.status !== "UPLOADED") {
           throw new Error(
@@ -3512,6 +3619,10 @@ async function runAdminProduction() {
         hermesRoot: DATA_ROOT,
       });
       if (!legacyUserState.ok) throw new Error(legacyUserState.code);
+      const priorMaterializerReceipt = adminMaterializerReceipt(
+        basename(profileContract.profileHome),
+        profileContract.profileHome
+      );
       const profile = await materializeAdminProfile({
         profileContract,
         settingsRoot: imported.receipt.generationRoot,
@@ -3522,6 +3633,32 @@ async function runAdminProduction() {
         slack: nativeSlackProfileInput(claim, installed),
         agentServiceEnv: adminAgentServiceEnvironment(claim),
       });
+      const materializerReceipt = adminMaterializerReceipt(
+        profile.profile,
+        profile.profileHome
+      );
+      const activeProjection = buildDefaultProfileProjection({
+        kind: "ADMIN",
+        claim,
+      });
+      const reconciledDefaultProfile = await reconcileDefaultProfileBundle({
+        activeProjection,
+        materializerReceipt,
+        profileRoot: profile.profileHome,
+        bundleRoot: DEFAULT_PROFILE_BUNDLE_ROOT,
+        dataRoot: DATA_ROOT,
+        reattestAuthority: async () => {
+          await operationHeartbeat.reattest();
+          return activeProjection;
+        },
+        cronAdapter: adminDefaultProfileCronAdapter(
+          profile.profile,
+          profile.profileHome
+        ),
+      });
+      if (!reconciledDefaultProfile.ok)
+        throw new Error(reconciledDefaultProfile.code);
+      const defaultProfile = reconciledDefaultProfile;
       const soulProof = observeProfileSoul(profile.profile, {
         dataRoot: DATA_ROOT,
       });
@@ -3534,6 +3671,13 @@ async function runAdminProduction() {
         installed,
         desiredLifecycle
       );
+      const materializerChanged =
+        canonicalJson(priorMaterializerReceipt) !==
+          canonicalJson(materializerReceipt) ||
+        profile.memoryCron.status !== "REUSED" ||
+        profile.opportunitySequencesCron.status !== "REUSED";
+      if (materializerChanged || defaultProfile.changed)
+        markHermesSnapshotDirty(profile.profileHome);
       const memorySnapshot = await flushHermesSnapshot({
         client,
         profileId: profile.profile,
@@ -3560,17 +3704,6 @@ async function runAdminProduction() {
           exchange,
         });
       }
-      const receipt = completionReceipt({
-        claim,
-        exchange,
-        operation: proofOperation,
-        profile,
-        settings,
-        recovery,
-        observedLifecycle: desiredLifecycle,
-        memorySnapshot,
-        modelAuth,
-      });
       operationHeartbeat.assertHealthy();
       const slackProof =
         desiredLifecycle === "ON"
@@ -3585,6 +3718,26 @@ async function runAdminProduction() {
         if (candidateLaunch) {
           candidateGateway = await startNativeGateway(candidateLaunch);
         }
+        const nativeDefaultProfileProof = candidateGateway
+          ? proveDefaultProfileNativeSkills({
+              actions: defaultProfile.actions,
+              profileId: profile.profile,
+              dataRoot: DATA_ROOT,
+            })
+          : { status: "EMPTY", digest: sha256("[]") };
+        const receipt = completionReceipt({
+          claim,
+          exchange,
+          operation: proofOperation,
+          profile,
+          settings,
+          recovery,
+          observedLifecycle: desiredLifecycle,
+          memorySnapshot,
+          modelAuth,
+          activeProjection,
+          nativeDefaultProfileProof,
+        });
         if (claim.runtimeAuthority && candidateLaunch && candidateGateway) {
           const servingObservation = adminServingObservation(
             candidateLaunch,

package/lib/sellable-agent/fly-cron-proof-exec.mjs

@@ -0,0 +1,218 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import { constants, closeSync, fstatSync, lstatSync, openSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
+const MANAGED_NAME = /^sellable-default-[a-z0-9][a-z0-9-]{0,63}$/;
+const SHA256 = /^[a-f0-9]{64}$/;
+const PYTHON = "/opt/hermes/.venv/bin/python3";
+const MAX_REQUEST_BYTES = 64 * 1024;
+const DESIRED_FIELDS = Object.freeze([
+  "name",
+  "enabled",
+  "schedule",
+  "prompt",
+  "skills",
+  "script",
+  "no_agent",
+  "deliver",
+  "toolsets",
+  "workdir",
+]);
+
+const refused = (code) => ({ ok: false, status: "REFUSED", code });
+const stable = (value) => {
+  if (Array.isArray(value)) return `[${value.map(stable).join(",")}]`;
+  if (value && typeof value === "object")
+    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${stable(value[key])}`).join(",")}}`;
+  return JSON.stringify(value);
+};
+const same = (left, right) => stable(left) === stable(right);
+
+const NATIVE_READ_SCRIPT = String.raw`
+import json, sqlite3, sys
+from datetime import datetime
+from pathlib import Path
+request = json.loads(sys.stdin.read())
+root, name = Path(request["profileRoot"]), request["name"]
+jobs = json.loads((root / "cron" / "jobs.json").read_text()).get("jobs", [])
+matches = [job for job in jobs if job.get("name") == name]
+if len(matches) != 1:
+    print(json.dumps({"job": None, "history": []}, separators=(",", ":")))
+    raise SystemExit(0)
+job = matches[0]
+history = []
+database = root / "cron" / "executions.db"
+if database.is_file():
+    connection = sqlite3.connect(f"file:{database}?mode=ro", uri=True)
+    connection.row_factory = sqlite3.Row
+    try:
+        rows = connection.execute("SELECT id,status,finished_at FROM executions WHERE job_id=? ORDER BY claimed_at DESC,id DESC LIMIT 50", (str(job.get("id") or ""),)).fetchall()
+        for row in rows:
+            try:
+                finished = int(datetime.fromisoformat(row["finished_at"]).timestamp() * 1000) if row["finished_at"] else None
+            except (TypeError, ValueError):
+                finished = None
+            history.append({"id": row["id"], "status": "success" if row["status"] == "completed" else row["status"], "finishedAt": finished})
+    finally:
+        connection.close()
+print(json.dumps({"job": job, "history": history}, separators=(",", ":")))
+`;
+
+function readRegularJson(path) {
+  const link = lstatSync(path);
+  if (link.isSymbolicLink() || !link.isFile() || link.nlink !== 1 || link.size > 64 * 1024)
+    throw new Error("cron_proof_marker_rejected");
+  const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  try {
+    const opened = fstatSync(fd);
+    if (!opened.isFile() || opened.dev !== link.dev || opened.ino !== link.ino ||
+        opened.nlink !== 1 || opened.size !== link.size)
+      throw new Error("cron_proof_marker_rejected");
+    return JSON.parse(readFileSync(fd, "utf8"));
+  } finally {
+    closeSync(fd);
+  }
+}
+
+function desiredProjection(job, desired) {
+  if (!desired || typeof desired !== "object" || Array.isArray(desired)) return null;
+  const keys = Object.keys(desired);
+  if (keys.length === 0 || keys.some((key) => !DESIRED_FIELDS.includes(key))) return null;
+  return Object.fromEntries(keys.sort().map((key) => [key, job?.[key]]));
+}
+
+export async function proveHermesCronFiring({
+  profileId,
+  name,
+  operationId,
+  bootId,
+  bundleDigest,
+  nonce,
+  notBefore,
+  desired,
+  directExecution = false,
+  readNative,
+  readMarker,
+} = {}) {
+  if (directExecution === true) return refused("cron_proof_direct_execution_invalid");
+  if (
+    !ID.test(profileId ?? "") ||
+    !MANAGED_NAME.test(name ?? "") ||
+    !ID.test(operationId ?? "") ||
+    !ID.test(bootId ?? "") ||
+    !SHA256.test(bundleDigest ?? "") ||
+    !ID.test(nonce ?? "") ||
+    !Number.isSafeInteger(notBefore) ||
+    notBefore < 0 ||
+    typeof readNative !== "function" ||
+    typeof readMarker !== "function"
+  ) {
+    return refused("cron_proof_request_rejected");
+  }
+
+  try {
+    const native = await readNative({ profileId, name });
+    const job = native?.job;
+    const projection = desiredProjection(job, desired);
+    if (
+      !job ||
+      typeof job !== "object" ||
+      !ID.test(job.id ?? "") ||
+      job.name !== name ||
+      job.enabled !== true ||
+      projection == null ||
+      !same(projection, desired) ||
+      !Array.isArray(native.history)
+    ) {
+      return refused("cron_proof_native_projection_rejected");
+    }
+    const successes = native.history.filter(
+      (run) =>
+        run &&
+        typeof run === "object" &&
+        ID.test(run.id ?? "") &&
+        run.status === "success" &&
+        Number.isSafeInteger(run.finishedAt) &&
+        run.finishedAt >= notBefore
+    );
+    if (successes.length === 0) return refused("cron_proof_history_stale");
+
+    const marker = await readMarker({ profileId, name, jobId: job.id });
+    if (
+      !marker ||
+      marker.operationId !== operationId ||
+      marker.bootId !== bootId ||
+      marker.bundleDigest !== bundleDigest ||
+      marker.nonce !== nonce ||
+      marker.jobId !== job.id ||
+      !Number.isSafeInteger(marker.firedAt) ||
+      marker.firedAt < notBefore ||
+      !successes.some((run) => run.finishedAt >= marker.firedAt)
+    ) {
+      return refused("cron_proof_marker_rejected");
+    }
+    return {
+      ok: true,
+      status: "PROVEN",
+      profileId,
+      name,
+      jobId: job.id,
+      projection,
+      successfulFirings: successes.length,
+      latestFinishedAt: Math.max(...successes.map((run) => run.finishedAt)),
+      exactOnceClaimed: false,
+    };
+  } catch {
+    return refused("cron_proof_read_failed");
+  }
+}
+
+// The image exposes this file as a command, but a caller must supply the
+// gateway-bound native readers. Executing the marker script is never a proof.
+export async function runFlyCronProofExec({
+  request,
+  dataRoot = "/opt/data",
+  python = PYTHON,
+  readNative,
+  readMarker,
+} = {}) {
+  const profileRoot = resolve(dataRoot, "profiles", String(request?.profileId ?? ""));
+  const nativeReader = readNative ?? (() => {
+    const child = spawnSync(python, ["-c", NATIVE_READ_SCRIPT], {
+      input: JSON.stringify({ profileRoot, name: request?.name }),
+      encoding: "utf8",
+      timeout: 10_000,
+      maxBuffer: 1024 * 1024,
+      env: { PATH: "/opt/hermes/.venv/bin:/usr/local/bin:/usr/bin:/bin" },
+    });
+    if (child.status !== 0 || child.signal || child.error) throw new Error("native_read");
+    return JSON.parse(child.stdout);
+  });
+  const markerReader = readMarker ?? (() =>
+    readRegularJson(resolve(profileRoot, ".sellable-agent", "cron-markers", `${request?.name}.json`))
+  );
+  return proveHermesCronFiring({ ...request, readNative: nativeReader, readMarker: markerReader });
+}
+
+if (resolve(process.argv[1] ?? "") === resolve(fileURLToPath(import.meta.url))) {
+  let result;
+  try {
+    if (process.argv.length !== 3 || process.argv[2].length > MAX_REQUEST_BYTES * 2)
+      throw new Error("request");
+    const bytes = Buffer.from(process.argv[2], "base64url");
+    if (bytes.byteLength > MAX_REQUEST_BYTES || bytes.toString("base64url") !== process.argv[2])
+      throw new Error("request");
+    result = await runFlyCronProofExec({
+      request: JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes)),
+      dataRoot: process.env.SELLABLE_AGENT_DATA_ROOT ?? "/opt/data",
+    });
+  } catch {
+    result = refused("cron_proof_request_rejected");
+  }
+  process.stdout.write(`${JSON.stringify(result)}\n`);
+  process.exitCode = result.ok ? 0 : 2;
+}

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -8,7 +8,7 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.879
 ARG MCP_INTEGRITY=sha512-dmrjCHuxLqR35HYvwXBQZoNMfCpT/wIWcvkT47cbYcWjL3pvxmxJWJBHFIZetgfQWM0pCAa+zKKAWyuxtAtz+w==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.642
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.643
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
 ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
 ARG TUS_JS_CLIENT_VERSION=4.3.1
@@ -19,6 +19,9 @@ ARG TIRITH_VERSION=0.3.3
 ARG PLAYWRIGHT_VERSION=1.62.1
 ARG PLAYWRIGHT_BROWSER_REVISION=1234
 ARG TIRITH_ARCHIVE_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2
+ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=
+ARG DEFAULT_PROFILE_BUNDLE_VERSION=1
+ARG DEFAULT_PROFILE_BUNDLE_DIGEST=a57a043c8788a752c470cdc94eeb921a062315910da9111daa546815415176fc
 
 RUN --mount=type=secret,id=mcp_trust_root,required=true \
     test -s /run/secrets/mcp_trust_root \
@@ -76,8 +79,11 @@ RUN --mount=type=secret,id=mcp_trust_root,required=true \
              /etc/cont-init.d/02-reconcile-profiles \
     && npm cache clean --force
 
-COPY mcp-context-proxy.mjs mcp-runtime-binding.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs fly-soul-bridge-exec.mjs fly-skills-bridge.mjs fly-skills-bridge-exec.mjs fly-capabilities-bridge.mjs fly-capabilities-bridge-exec.mjs soul-artifact-validator.mjs model-auth-reconciler.mjs model-auth-canary-reseed.mjs model-health-reporter.mjs \
+COPY mcp-context-proxy.mjs mcp-runtime-binding.mjs fly-customer-model.mjs fly-customer-worker.mjs profile-materializer.mjs hermes-bridge.mjs hermes-memory-snapshot.mjs fly-runtime-identity.mjs fly-soul-bridge.mjs fly-soul-bridge-exec.mjs fly-skills-bridge.mjs fly-skills-bridge-exec.mjs fly-capabilities-bridge.mjs fly-capabilities-bridge-exec.mjs soul-artifact-validator.mjs default-profile-bundle.mjs default-profile-reconciler.mjs fly-cron-proof-exec.mjs model-auth-reconciler.mjs model-auth-canary-reseed.mjs model-health-reporter.mjs \
   /usr/local/lib/sellable-agent/
+COPY default-profile-bundles/shared/ /usr/local/lib/sellable-agent/default-profile-bundles/shared/
+COPY default-profile-bundles/customer/ /usr/local/lib/sellable-agent/default-profile-bundles/customer/
+COPY default-profile-bundles/fixtures/ /usr/local/lib/sellable-agent/default-profile-bundles/fixtures/
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
 COPY hermes-endpoint-cron.mjs /opt/sellable/bin/hermes-endpoint-cron
@@ -87,7 +93,18 @@ COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable
 COPY fly-customer-image/customer-runtime.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs
 COPY fly-customer-image/rootfs/ /
 
-RUN node --input-type=module -e \
+RUN set -eux; \
+    fixture_args=""; \
+    if test -n "${DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION}"; then \
+      fixture_args="--fixture-version ${DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION}"; \
+    fi; \
+    node /usr/local/lib/sellable-agent/default-profile-bundle.mjs \
+      --kind CUSTOMER ${fixture_args} \
+      --output /usr/local/share/sellable-agent/default-profile-bundle \
+    && node -e \
+      'const fs=require("fs"); const manifest=JSON.parse(fs.readFileSync("/usr/local/share/sellable-agent/default-profile-bundle/manifest.json")); if(String(manifest.bundleVersion)!==process.argv[1] || manifest.bundleDigest!==process.argv[2]) process.exit(1);' \
+      "${DEFAULT_PROFILE_BUNDLE_VERSION}" "${DEFAULT_PROFILE_BUNDLE_DIGEST}" \
+    && node --input-type=module -e \
       'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
@@ -118,11 +135,15 @@ RUN node --input-type=module -e \
     && sha256sum /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
       > /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
+    && sha256sum /usr/local/lib/sellable-agent/default-profile-reconciler.mjs \
+      /usr/local/lib/sellable-agent/fly-cron-proof-exec.mjs \
+      > /usr/local/share/sellable-agent/default-profile-reconcile-source.sha256 \
     && sha256sum /usr/local/lib/sellable-agent/fly-capabilities-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-capabilities-bridge-exec.mjs \
       > /usr/local/share/sellable-agent/capabilities-bridge-source.sha256 \
     && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
       /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
+      /usr/local/share/sellable-agent/default-profile-reconcile-source.sha256 \
       /usr/local/share/sellable-agent/capabilities-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 /usr/local/lib/sellable-agent/*.mjs \
@@ -135,7 +156,9 @@ RUN node --input-type=module -e \
 LABEL io.sellable.runtime.kind="customer" \
       io.sellable.runtime.listener="native-dedicated-slack" \
       io.sellable.runtime.api-server="authenticated-loopback-127.0.0.1:8642" \
-      io.sellable.runtime.installers="build-only"
+      io.sellable.runtime.installers="build-only" \
+      io.sellable.runtime.default-profile-bundle-version="${DEFAULT_PROFILE_BUNDLE_VERSION}" \
+      io.sellable.runtime.default-profile-bundle-digest="${DEFAULT_PROFILE_BUNDLE_DIGEST}"
 
 ENV HOME=/opt/data \
     HERMES_HOME=/opt/data \
@@ -146,6 +169,8 @@ ENV HOME=/opt/data \
     SELLABLE_AGENT_HERMES_VERSION=${HERMES_VERSION} \
     SELLABLE_AGENT_INSTALLER_PACKAGE=${INSTALLER_PACKAGE} \
     SELLABLE_AGENT_MCP_PACKAGE=${MCP_PACKAGE} \
+    SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION=${DEFAULT_PROFILE_BUNDLE_VERSION} \
+    SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST=${DEFAULT_PROFILE_BUNDLE_DIGEST} \
     SELLABLE_AGENT_PLAYWRIGHT_VERSION=${PLAYWRIGHT_VERSION} \
     SELLABLE_AGENT_PLAYWRIGHT_BROWSER_REVISION=${PLAYWRIGHT_BROWSER_REVISION} \
     PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1