@sellable/install 0.1.642 → 0.1.644

package/container/Dockerfile

@@ -3,13 +3,13 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.642
-ARG MCP_PACKAGE=@sellable/mcp@0.1.879
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.644
+ARG MCP_PACKAGE=@sellable/mcp@0.1.880
 ARG INSTALLER_INTEGRITY
-ARG MCP_INTEGRITY=sha512-dmrjCHuxLqR35HYvwXBQZoNMfCpT/wIWcvkT47cbYcWjL3pvxmxJWJBHFIZetgfQWM0pCAa+zKKAWyuxtAtz+w==
+ARG MCP_INTEGRITY=sha512-+Fo8aQlYduLaQMQff+ZA25LeUhWZ7I7UH5DECpND84LQ+rHSjKeKFj4Zs93bVHXwQCIy2OLbr75y4f4+CyT57w==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.642" \
-    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.879" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.644" \
+    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.880" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.642" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.642' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.879') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.644' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.880') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.642', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.879', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.644', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.880', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.642` is
+`@sellable/install@0.1.644` is
 published:
 
 ```sh

package/lib/sellable-agent/default-profile-bundle.mjs

@@ -0,0 +1,318 @@
+#!/usr/bin/env node
+
+import { createHash } from "node:crypto";
+import {
+  chmodSync,
+  existsSync,
+  lstatSync,
+  mkdirSync,
+  readFileSync,
+  readdirSync,
+  writeFileSync,
+} from "node:fs";
+import { dirname, isAbsolute, join, posix, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { containsSoulSecretMaterial } from "./soul-artifact-validator.mjs";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const FRAGMENTS = join(HERE, "default-profile-bundles");
+const SCHEMA = "sellable-agent-default-profile-fragment/v1";
+const BUNDLE_SCHEMA = "sellable-agent-default-profile-bundle/v1";
+const ID = /^[a-z0-9][a-z0-9-]{0,63}$/;
+const SKILL_PATH = /^skills\/sellable-defaults\/([a-z0-9][a-z0-9-]{0,63})(?:\/.*)?$/;
+const CRON_PATH = /^crons\/([a-z0-9][a-z0-9-]{0,63})\.json$/;
+const MAX_FILES = 64;
+const MAX_FILE_BYTES = 64 * 1024;
+const MAX_TOTAL_BYTES = 1024 * 1024;
+
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+function canonicalJson(value) {
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value)
+      .sort()
+      .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+      .join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+
+function reject(code) {
+  throw new Error(`default_profile_bundle_${code}`);
+}
+
+function assertClosedFragmentRoot(path) {
+  const root = dirname(path);
+  const visit = (candidate, relativePath = "") => {
+    const entry = lstatSync(candidate);
+    if (entry.isSymbolicLink()) reject("symlink_rejected");
+    if (entry.isDirectory()) {
+      for (const name of readdirSync(candidate).sort()) {
+        visit(join(candidate, name), relativePath ? `${relativePath}/${name}` : name);
+      }
+      return;
+    }
+    if (!entry.isFile()) reject("file_type_rejected");
+    if (relativePath !== "manifest.fragment.json") reject("undeclared_file_rejected");
+  };
+  visit(root);
+}
+
+function readFragment(path) {
+  if (!isAbsolute(path) || !existsSync(path)) reject("fragment_missing");
+  assertClosedFragmentRoot(path);
+  let value;
+  try {
+    const bytes = readFileSync(path);
+    if (bytes.byteLength > 128 * 1024) reject("fragment_too_large");
+    value = JSON.parse(bytes.toString("utf8"));
+  } catch (error) {
+    if (error instanceof Error && error.message.startsWith("default_profile_bundle_")) {
+      throw error;
+    }
+    reject("fragment_invalid");
+  }
+  if (
+    !value ||
+    typeof value !== "object" ||
+    Array.isArray(value) ||
+    Object.keys(value).sort().join("\0") !==
+      [
+        "bundleVersion",
+        "files",
+        "fragmentId",
+        "kind",
+        "materializerReceipts",
+        "schemaVersion",
+      ]
+        .sort()
+        .join("\0") ||
+    value.schemaVersion !== SCHEMA ||
+    !ID.test(value.fragmentId ?? "") ||
+    !["SHARED", "CUSTOMER", "ADMIN", "FIXTURE"].includes(value.kind) ||
+    !Number.isSafeInteger(value.bundleVersion) ||
+    value.bundleVersion < 1 ||
+    value.bundleVersion > 2_147_483_647 ||
+    !Array.isArray(value.materializerReceipts) ||
+    !Array.isArray(value.files)
+  ) {
+    reject("fragment_invalid");
+  }
+  return value;
+}
+
+function validatePath(path) {
+  if (
+    typeof path !== "string" ||
+    path.length < 1 ||
+    path.length > 256 ||
+    isAbsolute(path) ||
+    path.includes("\\") ||
+    path.includes("\0") ||
+    posix.normalize(path) !== path ||
+    path.startsWith("../")
+  ) {
+    reject("path_rejected");
+  }
+}
+
+function normalizeFile(value, fragmentKind) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    reject("file_invalid");
+  }
+  const allowed =
+    value.type === "cron"
+      ? ["content", "id", "mode", "name", "ownership", "path", "type"]
+      : ["content", "id", "mode", "ownership", "path", "type"];
+  if (Object.keys(value).sort().join("\0") !== allowed.sort().join("\0")) {
+    reject("file_invalid");
+  }
+  validatePath(value.path);
+  if (
+    !ID.test(value.id ?? "") ||
+    !["skill", "cron"].includes(value.type) ||
+    value.ownership !== "system_managed" ||
+    value.mode !== "0444" ||
+    typeof value.content !== "string"
+  ) {
+    reject("file_invalid");
+  }
+  const bytes = Buffer.from(value.content, "utf8");
+  if (
+    bytes.byteLength < 1 ||
+    bytes.byteLength > MAX_FILE_BYTES ||
+    containsSoulSecretMaterial(bytes)
+  ) {
+    reject("content_rejected");
+  }
+  if (value.type === "skill") {
+    const match = SKILL_PATH.exec(value.path);
+    if (!match || match[1] !== value.id || !value.path.endsWith("/SKILL.md")) {
+      reject("skill_path_rejected");
+    }
+  } else {
+    const match = CRON_PATH.exec(value.path);
+    if (
+      !match ||
+      value.name !== match[1] ||
+      !value.name.startsWith("sellable-default-")
+    ) {
+      reject("cron_path_rejected");
+    }
+  }
+  return Object.freeze({
+    id: value.id,
+    type: value.type,
+    ownership: value.ownership,
+    kind: fragmentKind,
+    path: value.path,
+    mode: value.mode,
+    ...(value.type === "cron" ? { name: value.name } : {}),
+    content: value.content,
+    sha256: sha256(bytes),
+  });
+}
+
+function writeBundle(outputRoot, result) {
+  mkdirSync(outputRoot, { recursive: true, mode: 0o755 });
+  for (const file of result.files) {
+    const target = join(outputRoot, ...file.path.split("/"));
+    mkdirSync(dirname(target), { recursive: true, mode: 0o755 });
+    writeFileSync(target, file.content, { mode: 0o444 });
+    chmodSync(target, 0o444);
+  }
+  writeFileSync(
+    join(outputRoot, "manifest.json"),
+    `${canonicalJson({ ...result.manifest, bundleDigest: result.bundleDigest })}\n`,
+    { mode: 0o444 }
+  );
+  chmodSync(join(outputRoot, "manifest.json"), 0o444);
+}
+
+/** Build the one canonical kind bundle. No identity-specific digest is imported. */
+export function buildDefaultProfileBundle({
+  kind,
+  fragmentPaths,
+  adminFragmentPath,
+  fixtureVersion,
+  outputRoot,
+} = {}) {
+  if (!["CUSTOMER", "ADMIN"].includes(kind)) reject("kind_rejected");
+  if (fixtureVersion !== undefined && ![1, 2].includes(fixtureVersion)) {
+    reject("fixture_rejected");
+  }
+  const paths = fragmentPaths
+    ? [...fragmentPaths]
+    : [
+        join(FRAGMENTS, "shared", "manifest.fragment.json"),
+        kind === "CUSTOMER"
+          ? join(FRAGMENTS, "customer", "manifest.fragment.json")
+          : resolve(adminFragmentPath ?? ""),
+        ...(fixtureVersion
+          ? [
+              join(
+                FRAGMENTS,
+                "fixtures",
+                `v${fixtureVersion}`,
+                "manifest.fragment.json"
+              ),
+            ]
+          : []),
+      ];
+  if (!Array.isArray(paths) || paths.length < 1 || paths.length > 4) {
+    reject("fragment_inventory_rejected");
+  }
+  const fragments = paths.map((path) => readFragment(resolve(path)));
+  if (
+    new Set(fragments.map((fragment) => fragment.fragmentId)).size !==
+    fragments.length
+  ) {
+    reject("fragment_collision");
+  }
+  for (const fragment of fragments) {
+    if (
+      !["SHARED", kind].includes(fragment.kind) &&
+      !(fixtureVersion && fragment.kind === "FIXTURE")
+    ) {
+      reject("kind_isolation_rejected");
+    }
+  }
+  const files = fragments
+    .flatMap((fragment) =>
+      fragment.files.map((file) => normalizeFile(file, fragment.kind))
+    )
+    .sort((left, right) => left.path.localeCompare(right.path));
+  if (
+    files.length > MAX_FILES ||
+    files.reduce((sum, file) => sum + Buffer.byteLength(file.content), 0) >
+      MAX_TOTAL_BYTES ||
+    new Set(files.map((file) => file.path)).size !== files.length ||
+    new Set(files.filter((file) => file.type === "skill").map((file) => file.id))
+      .size !== files.filter((file) => file.type === "skill").length ||
+    new Set(files.filter((file) => file.type === "cron").map((file) => file.name))
+      .size !== files.filter((file) => file.type === "cron").length
+  ) {
+    reject("entry_collision");
+  }
+  const materializerReceipts = [
+    ...new Set(fragments.flatMap((fragment) => fragment.materializerReceipts)),
+  ].sort();
+  if (
+    materializerReceipts.some(
+      (path) =>
+        path !== "SOUL.md" &&
+        path !== "skills/sellable/SKILL.md" &&
+        path !== "skills/sellable-admin/SKILL.md"
+    )
+  ) {
+    reject("materializer_receipt_rejected");
+  }
+  const bundleVersion = Math.max(
+    ...fragments.map((fragment) => fragment.bundleVersion)
+  );
+  const inventory = files.map(({ content: _content, ...file }) => file);
+  const manifest = Object.freeze({
+    schemaVersion: BUNDLE_SCHEMA,
+    kind,
+    bundleVersion,
+    materializerReceipts,
+    files: inventory,
+  });
+  const result = Object.freeze({
+    bundleVersion,
+    manifest,
+    files,
+    bundleDigest: sha256(canonicalJson({ manifest, files })),
+  });
+  if (outputRoot !== undefined) {
+    if (!isAbsolute(outputRoot)) reject("output_root_rejected");
+    writeBundle(outputRoot, result);
+  }
+  return result;
+}
+
+function argumentValue(flag) {
+  const index = process.argv.indexOf(flag);
+  return index >= 0 ? process.argv[index + 1] : undefined;
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  const result = buildDefaultProfileBundle({
+    kind: argumentValue("--kind"),
+    adminFragmentPath: argumentValue("--admin-fragment"),
+    fixtureVersion: argumentValue("--fixture-version")
+      ? Number(argumentValue("--fixture-version"))
+      : undefined,
+    outputRoot: resolve(argumentValue("--output") ?? ""),
+  });
+  process.stdout.write(
+    `${JSON.stringify({
+      bundleVersion: result.bundleVersion,
+      bundleDigest: result.bundleDigest,
+    })}\n`
+  );
+}

package/lib/sellable-agent/default-profile-bundles/customer/manifest.fragment.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "sellable-agent-default-profile-fragment/v1",
+  "fragmentId": "customer",
+  "kind": "CUSTOMER",
+  "bundleVersion": 1,
+  "materializerReceipts": ["skills/sellable/SKILL.md"],
+  "files": []
+}

package/lib/sellable-agent/default-profile-bundles/fixtures/v1/manifest.fragment.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "sellable-agent-default-profile-fragment/v1",
+  "fragmentId": "fixture-v1",
+  "kind": "FIXTURE",
+  "bundleVersion": 1,
+  "materializerReceipts": [],
+  "files": [
+    {
+      "id": "default-bundle-probe",
+      "type": "skill",
+      "ownership": "system_managed",
+      "path": "skills/sellable-defaults/default-bundle-probe/SKILL.md",
+      "mode": "0444",
+      "content": "---\nname: default-bundle-probe\ndescription: Harmless default bundle fixture\n---\nDefault bundle fixture V1.\n"
+    },
+    {
+      "id": "default-bundle-probe-cron",
+      "type": "cron",
+      "ownership": "system_managed",
+      "path": "crons/sellable-default-probe.json",
+      "name": "sellable-default-probe",
+      "mode": "0444",
+      "content": "{\"schedule\":\"*/5 * * * *\",\"script\":\"sellable-default-probe.sh\",\"noAgent\":true,\"deliver\":\"local\",\"marker\":\"default-bundle-v1\"}\n"
+    }
+  ]
+}

package/lib/sellable-agent/default-profile-bundles/fixtures/v2/manifest.fragment.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": "sellable-agent-default-profile-fragment/v1",
+  "fragmentId": "fixture-v2",
+  "kind": "FIXTURE",
+  "bundleVersion": 2,
+  "materializerReceipts": [],
+  "files": [
+    {
+      "id": "default-bundle-probe",
+      "type": "skill",
+      "ownership": "system_managed",
+      "path": "skills/sellable-defaults/default-bundle-probe/SKILL.md",
+      "mode": "0444",
+      "content": "---\nname: default-bundle-probe\ndescription: Harmless default bundle fixture\n---\nDefault bundle fixture V2.\n"
+    },
+    {
+      "id": "default-bundle-added",
+      "type": "skill",
+      "ownership": "system_managed",
+      "path": "skills/sellable-defaults/default-bundle-added/SKILL.md",
+      "mode": "0444",
+      "content": "---\nname: default-bundle-added\ndescription: Harmless added bundle fixture\n---\nAdded in V2.\n"
+    },
+    {
+      "id": "default-bundle-probe-cron",
+      "type": "cron",
+      "ownership": "system_managed",
+      "path": "crons/sellable-default-probe.json",
+      "name": "sellable-default-probe",
+      "mode": "0444",
+      "content": "{\"schedule\":\"*/5 * * * *\",\"script\":\"sellable-default-probe.sh\",\"noAgent\":true,\"deliver\":\"local\",\"marker\":\"default-bundle-v2\"}\n"
+    }
+  ]
+}

package/lib/sellable-agent/default-profile-bundles/shared/manifest.fragment.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "sellable-agent-default-profile-fragment/v1",
+  "fragmentId": "shared",
+  "kind": "SHARED",
+  "bundleVersion": 1,
+  "materializerReceipts": ["SOUL.md"],
+  "files": []
+}