@sellable/install 0.1.642 → 0.1.644

package/lib/sellable-agent/default-profile-reconciler.mjs

@@ -0,0 +1,508 @@
+import { createHash, randomUUID } from "node:crypto";
+import {
+  chmodSync, closeSync, constants, existsSync, fstatSync, fsyncSync, lstatSync,
+  mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync,
+  rmSync, writeFileSync,
+} from "node:fs";
+import { basename, dirname, isAbsolute, join } from "node:path";
+
+import { withProfileSoulLock } from "./fly-soul-bridge.mjs";
+import { ensureHermesNamedCron } from "./hermes-memory-snapshot.mjs";
+
+export const DEFAULT_PROFILE_RECONCILE_RECEIPT = ".sellable-agent/default-profile-reconcile.json";
+export const DEFAULT_PROFILE_RECONCILE_SCHEMA = "sellable-agent-default-profile-reconcile/v1";
+
+const BUNDLE_SCHEMA = "sellable-agent-default-profile-bundle/v1";
+const ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
+const MANAGED_ID = /^[a-z0-9][a-z0-9-]{0,63}$/;
+const SHA256 = /^[a-f0-9]{64}$/;
+const FENCE = /^[1-9][0-9]{0,19}$/;
+const STAGE_PREFIX = ".sellable-default-stage-";
+const MAX_BYTES = 1024 * 1024;
+
+const sha256 = (value) => createHash("sha256").update(value).digest("hex");
+const canonicalJson = (value) => {
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value).sort()
+      .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+      .join(",")}}`;
+  }
+  return JSON.stringify(value);
+};
+const refused = (code) => ({ ok: false, status: "REFUSED", code });
+
+export function buildDefaultProfileProjection({
+  kind,
+  claim,
+  env = process.env,
+  imageBundle,
+  fixtureTarget,
+} = {}) {
+  const operation = claim?.operation;
+  const authority = claim?.runtimeAuthority;
+  if (
+    authority?.bundleVersion === undefined &&
+    authority?.bundleDigest === undefined
+  ) {
+    return null;
+  }
+  const verifiedImage = imageBundle ?? {
+    bundleVersion: Number(
+      env.SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION ?? ""
+    ),
+    bundleDigest:
+      env.SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST ?? "",
+  };
+  if (
+    !["CUSTOMER", "ADMIN"].includes(kind) ||
+    !Number.isSafeInteger(verifiedImage.bundleVersion) ||
+    verifiedImage.bundleVersion < 1 ||
+    !SHA256.test(verifiedImage.bundleDigest)
+  ) {
+    throw new Error("default_profile_image_bundle_rejected");
+  }
+  if (
+    !operation ||
+    !Number.isSafeInteger(authority?.authorityGeneration) ||
+    authority.authorityGeneration < 1 ||
+    authority.bundleVersion !== verifiedImage.bundleVersion ||
+    authority.bundleDigest !== verifiedImage.bundleDigest
+  ) {
+    throw new Error("default_profile_bundle_identity_rejected");
+  }
+  const verifiedFixture = fixtureTarget ??
+    (env.SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_TEST_ONLY === "1"
+      ? {
+          testOnly: true,
+          workspaceId:
+            env.SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_WORKSPACE_ID ?? "",
+          agentId:
+            env.SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_AGENT_ID ?? "",
+        }
+      : undefined);
+  const exactFixture =
+    verifiedFixture?.testOnly === true &&
+    verifiedFixture.workspaceId === operation.workspaceId &&
+    verifiedFixture.agentId === operation.agentId
+      ? { ...verifiedFixture }
+      : undefined;
+  return {
+    kind,
+    profileId: operation.profileId,
+    workspaceId: operation.workspaceId,
+    agentId: operation.agentId,
+    operationId: operation.id,
+    authorityGeneration: authority.authorityGeneration,
+    fence: String(operation.fence),
+    ...verifiedImage,
+    ...(exactFixture ? { fixtureTarget: exactFixture } : {}),
+  };
+}
+
+export function bindDefaultProfileProbeCron({
+  activeProjection,
+  profileRoot,
+  job,
+  bootId,
+} = {}) {
+  if (!activeProjection?.fixtureTarget) return { changed: false };
+  if (
+    !isAbsolute(profileRoot ?? "") ||
+    !ID.test(bootId ?? "") ||
+    !ID.test(job?.id ?? "") ||
+    job.name !== "sellable-default-probe"
+  ) {
+    throw new Error("default_profile_cron_binding_rejected");
+  }
+  const scriptPath = join(
+    profileRoot,
+    "scripts",
+    "sellable-default-probe.sh"
+  );
+  const binding = {
+    operationId: activeProjection.operationId,
+    bootId,
+    bundleDigest: activeProjection.bundleDigest,
+    nonce: sha256(
+      `${activeProjection.operationId}\0${bootId}\0${activeProjection.bundleDigest}`
+    ).slice(0, 32),
+    jobId: job.id,
+    name: job.name,
+  };
+  const script = `#!/bin/sh
+set -eu
+exec /opt/hermes/.venv/bin/python3 - ${JSON.stringify(profileRoot)} <<'PY'
+import json, os, sys, time
+root = sys.argv[1]
+binding = json.loads(${JSON.stringify(JSON.stringify(binding))})
+binding["firedAt"] = int(time.time() * 1000)
+marker_root = os.path.join(root, ".sellable-agent", "cron-markers")
+os.makedirs(marker_root, mode=0o700, exist_ok=True)
+target = os.path.join(marker_root, binding["name"] + ".json")
+stage = target + ".tmp"
+with open(stage, "w", encoding="utf-8") as handle:
+    json.dump(binding, handle, separators=(",", ":"))
+    handle.write("\\n")
+os.chmod(stage, 0o600)
+os.replace(stage, target)
+PY
+`;
+  const changed =
+    !existsSync(scriptPath) || readFileSync(scriptPath, "utf8") !== script;
+  if (changed) atomicWrite(scriptPath, script, 0o700);
+  return { changed, binding };
+}
+
+function readRegular(path, maxBytes = MAX_BYTES) {
+  const link = lstatSync(path);
+  if (link.isSymbolicLink() || !link.isFile() || link.nlink !== 1 || link.size > maxBytes)
+    throw new Error("default_profile_file_rejected");
+  const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+  try {
+    const opened = fstatSync(fd);
+    if (!opened.isFile() || opened.dev !== link.dev || opened.ino !== link.ino ||
+        opened.nlink !== 1 || opened.size !== link.size) {
+      throw new Error("default_profile_file_rejected");
+    }
+    return readFileSync(fd);
+  } finally {
+    closeSync(fd);
+  }
+}
+
+function atomicWrite(path, bytes, mode) {
+  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+  const stage = join(dirname(path), `${STAGE_PREFIX}${basename(path)}-${process.pid}-${randomUUID()}`);
+  writeFileSync(stage, bytes, { flag: "wx", mode });
+  chmodSync(stage, mode);
+  const fd = openSync(stage, constants.O_RDONLY);
+  try {
+    fsyncSync(fd);
+  } finally {
+    closeSync(fd);
+  }
+  renameSync(stage, path);
+}
+
+function readBundle(bundleRoot) {
+  if (!isAbsolute(bundleRoot ?? "") || !existsSync(bundleRoot) ||
+      lstatSync(bundleRoot).isSymbolicLink() || !lstatSync(bundleRoot).isDirectory() ||
+      realpathSync(bundleRoot) !== bundleRoot) {
+    throw new Error("default_profile_bundle_rejected");
+  }
+  const manifest = JSON.parse(readRegular(join(bundleRoot, "manifest.json")).toString("utf8"));
+  if (
+    manifest?.schemaVersion !== BUNDLE_SCHEMA ||
+    !["CUSTOMER", "ADMIN"].includes(manifest.kind) ||
+    !Number.isSafeInteger(manifest.bundleVersion) || manifest.bundleVersion < 1 ||
+    !SHA256.test(manifest.bundleDigest ?? "") ||
+    !Array.isArray(manifest.materializerReceipts) ||
+    !Array.isArray(manifest.files)
+  ) {
+    throw new Error("default_profile_bundle_rejected");
+  }
+  const files = manifest.files.map((entry) => {
+    const expectedPath = entry?.type === "skill"
+      ? `skills/sellable-defaults/${entry.id}/SKILL.md`
+      : `crons/${entry?.name}.json`;
+    if (
+      !MANAGED_ID.test(entry?.id ?? "") ||
+      !["skill", "cron"].includes(entry.type) ||
+      entry.ownership !== "system_managed" ||
+      !["SHARED", "CUSTOMER", "ADMIN", "FIXTURE"].includes(entry.kind) ||
+      entry.mode !== "0444" ||
+      entry.path !== expectedPath ||
+      !SHA256.test(entry.sha256 ?? "") ||
+      (entry.type === "cron" && (!MANAGED_ID.test(entry.name ?? "") ||
+        !entry.name.startsWith("sellable-default-")))
+    ) {
+      throw new Error("default_profile_bundle_rejected");
+    }
+    const content = readRegular(join(bundleRoot, ...entry.path.split("/")), 64 * 1024);
+    if (sha256(content) !== entry.sha256)
+      throw new Error("default_profile_bundle_rejected");
+    return { ...entry, content: content.toString("utf8") };
+  });
+  const { bundleDigest, ...unsignedManifest } = manifest;
+  if (sha256(canonicalJson({ manifest: unsignedManifest, files })) !== bundleDigest)
+    throw new Error("default_profile_bundle_rejected");
+  return { manifest, files };
+}
+
+function activeEntries(bundle, projection) {
+  if (bundle.manifest.kind !== projection.kind ||
+      bundle.manifest.bundleVersion !== projection.bundleVersion ||
+      bundle.manifest.bundleDigest !== projection.bundleDigest) {
+    throw new Error("default_profile_projection_mismatch");
+  }
+  const target = projection.fixtureTarget;
+  const fixtureAllowed = target?.testOnly === true &&
+    target.workspaceId === projection.workspaceId &&
+    target.agentId === projection.agentId;
+  return bundle.files
+    .filter((entry) => entry.kind !== "FIXTURE" || fixtureAllowed)
+    .sort(
+      (left, right) => (left.type === "skill" ? 0 : 1) -
+        (right.type === "skill" ? 0 : 1) ||
+        left.path.localeCompare(right.path)
+    );
+}
+
+function validateProjection(value) {
+  return Boolean(
+    value &&
+      ["CUSTOMER", "ADMIN"].includes(value.kind) &&
+      ["profileId", "workspaceId", "agentId", "operationId"].every(
+        (key) => ID.test(value[key] ?? "")
+      ) &&
+      Number.isSafeInteger(value.authorityGeneration) &&
+      value.authorityGeneration > 0 &&
+      FENCE.test(value.fence ?? "") &&
+      Number.isSafeInteger(value.bundleVersion) &&
+      value.bundleVersion > 0 &&
+      SHA256.test(value.bundleDigest ?? "")
+  );
+}
+
+function cronDesired(entry) {
+  const spec = JSON.parse(entry.content);
+  if (
+    !spec ||
+    Object.keys(spec).sort().join("\0") !==
+      "deliver\0marker\0noAgent\0schedule\0script" ||
+    typeof spec.schedule !== "string" ||
+    !/^(?:\S+\s+){4}\S+$/.test(spec.schedule) ||
+    !/^[a-z0-9][a-z0-9-]{0,63}\.sh$/.test(spec.script ?? "") ||
+    spec.noAgent !== true ||
+    spec.deliver !== "local" ||
+    !MANAGED_ID.test(spec.marker ?? "")
+  ) {
+    throw new Error("default_profile_cron_spec_rejected");
+  }
+  const desired = {
+    name: entry.name,
+    enabled: true,
+    no_agent: true,
+    schedule: { kind: "cron", expr: spec.schedule },
+    script: spec.script,
+    deliver: spec.deliver,
+  };
+  return { spec, desired, sha256: sha256(canonicalJson(desired)) };
+}
+
+export async function reconcileDefaultProfileBundle({
+  activeProjection,
+  materializerReceipt,
+  profileRoot,
+  bundleRoot,
+  dataRoot,
+  withProfileLock = withProfileSoulLock,
+  reattestAuthority,
+  cronAdapter,
+} = {}) {
+  if (activeProjection == null)
+    return { ok: true, status: "EMPTY", changed: false, actions: [] };
+  if (!validateProjection(activeProjection))
+    return refused("default_profile_projection_rejected");
+  if (!isAbsolute(dataRoot ?? "") || !isAbsolute(profileRoot ?? "") ||
+      typeof withProfileLock !== "function" || typeof reattestAuthority !== "function") {
+    return refused("default_profile_reconcile_input_rejected");
+  }
+
+  try {
+    if (activeEntries(readBundle(bundleRoot), activeProjection).length === 0)
+      return { ok: true, status: "EMPTY", changed: false, actions: [] };
+    return await withProfileLock(
+      activeProjection.profileId,
+      async () => {
+        const authority = await reattestAuthority(activeProjection);
+        if (authority?.operationId !== activeProjection.operationId ||
+            authority?.authorityGeneration !== activeProjection.authorityGeneration ||
+            authority?.fence !== activeProjection.fence) {
+          return refused("default_profile_authority_stale");
+        }
+        if (!existsSync(profileRoot) || lstatSync(profileRoot).isSymbolicLink() ||
+            !lstatSync(profileRoot).isDirectory() || realpathSync(profileRoot) !== profileRoot) {
+          throw new Error("default_profile_root_rejected");
+        }
+
+        const bundle = readBundle(bundleRoot);
+        const entries = activeEntries(bundle, activeProjection);
+        if (materializerReceipt?.profileId !== activeProjection.profileId ||
+            !materializerReceipt.fileHashes || Array.isArray(materializerReceipt.fileHashes)) {
+          throw new Error("default_profile_materializer_receipt_rejected");
+        }
+        for (const path of bundle.manifest.materializerReceipts) {
+          if (
+            !["SOUL.md", "skills/sellable/SKILL.md", "skills/sellable-admin/SKILL.md"]
+              .includes(path) ||
+            !SHA256.test(materializerReceipt.fileHashes[path] ?? "") ||
+            sha256(readRegular(join(profileRoot, ...path.split("/")), 64 * 1024)) !==
+              materializerReceipt.fileHashes[path]
+          ) {
+            throw new Error("default_profile_materializer_receipt_rejected");
+          }
+        }
+        const materializerReceiptSha256 = sha256(canonicalJson(materializerReceipt));
+
+        const receiptPath = join(profileRoot, DEFAULT_PROFILE_RECONCILE_RECEIPT);
+        let prior = null;
+        if (existsSync(receiptPath)) {
+          prior = JSON.parse(readRegular(receiptPath).toString("utf8"));
+          if (prior?.schemaVersion !== DEFAULT_PROFILE_RECONCILE_SCHEMA ||
+              prior.profileId !== activeProjection.profileId || !Array.isArray(prior.entries)) {
+            throw new Error("default_profile_receipt_rejected");
+          }
+        }
+        const historical = (entry) =>
+          prior?.entries.find((value) => value?.type === entry.type && value.id === entry.id &&
+            (entry.type !== "cron" || value.name === entry.name) &&
+            SHA256.test(value.sha256 ?? "")) ?? null;
+
+        // Preflight every skill and cron spec before the first mutation.
+        const skillPlans = new Map();
+        const cronSpecs = new Map();
+        for (const entry of entries) {
+          if (entry.type === "cron") {
+            cronSpecs.set(entry.id, cronDesired(entry));
+            continue;
+          }
+          const directory = join(profileRoot, "skills", "sellable-defaults", entry.id);
+          const path = join(directory, "SKILL.md");
+          if (existsSync(directory)) {
+            const stat = lstatSync(directory);
+            if (stat.isSymbolicLink() || !stat.isDirectory())
+              throw new Error("default_profile_skill_collision");
+            for (const name of readdirSync(directory)) {
+              if (name === "SKILL.md") continue;
+              const stage = join(directory, name);
+              const stageStat = lstatSync(stage);
+              if (!name.startsWith(STAGE_PREFIX) || stageStat.isSymbolicLink() ||
+                  !stageStat.isFile() || stageStat.nlink !== 1) {
+                throw new Error("default_profile_skill_collision");
+              }
+              rmSync(stage);
+            }
+          }
+          let status = "CREATED";
+          if (existsSync(path)) {
+            const current = sha256(readRegular(path, 64 * 1024));
+            if (current === entry.sha256) status = "REUSED";
+            else if (historical(entry)?.sha256 === current) status = "UPDATED";
+            else throw new Error("default_profile_skill_collision");
+          }
+          skillPlans.set(entry.id, { directory, path, status });
+        }
+
+        const actions = [];
+        const receiptEntries = [];
+        for (const entry of entries) {
+          if (entry.type === "skill") {
+            const plan = skillPlans.get(entry.id);
+            if (plan.status !== "REUSED") {
+              mkdirSync(plan.directory, { recursive: true, mode: 0o700 });
+              atomicWrite(plan.path, entry.content, 0o444);
+              if (sha256(readRegular(plan.path, 64 * 1024)) !== entry.sha256)
+                throw new Error("default_profile_skill_readback_rejected");
+            }
+            actions.push({ type: "skill", id: entry.id, status: plan.status });
+            receiptEntries.push({ type: "skill", id: entry.id, sha256: entry.sha256 });
+            continue;
+          }
+
+          if (typeof cronAdapter?.create !== "function" ||
+              typeof cronAdapter?.update !== "function") {
+            throw new Error("default_profile_cron_adapter_rejected");
+          }
+          const { spec, desired, sha256: desiredSha256 } = cronSpecs.get(entry.id);
+          const cron = await ensureHermesNamedCron({
+            profileRoot,
+            name: entry.name,
+            isExpected: (job) => Boolean(job?.id && job.name === desired.name &&
+              job.enabled === desired.enabled && job.no_agent === desired.no_agent &&
+              job.script === desired.script && job.deliver === desired.deliver &&
+              job.schedule?.kind === "cron" &&
+              job.schedule.expr === desired.schedule.expr),
+            isUpdatable: (job) => historical(entry)?.sha256 === sha256(canonicalJson({
+              name: job?.name,
+              enabled: job?.enabled,
+              no_agent: job?.no_agent,
+              schedule: job?.schedule,
+              script: job?.script,
+              deliver: job?.deliver,
+            })),
+            create: () =>
+              cronAdapter.create({
+                profileRoot,
+                entry,
+                spec,
+                desired,
+                activeProjection,
+              }),
+            update: (existing) =>
+              cronAdapter.update({
+                profileRoot,
+                entry,
+                spec,
+                desired,
+                existing,
+                activeProjection,
+              }),
+            codePrefix: "default_profile_cron",
+          });
+          if (!cron.ok) throw new Error(cron.code);
+          const bound = typeof cronAdapter.bind === "function"
+            ? await cronAdapter.bind({
+                profileRoot,
+                entry,
+                spec,
+                desired,
+                job: cron.job,
+                activeProjection,
+              })
+            : { changed: false };
+          if (!bound || typeof bound.changed !== "boolean")
+            throw new Error("default_profile_cron_binding_rejected");
+          actions.push({
+            type: "cron",
+            id: entry.id,
+            name: entry.name,
+            status: cron.status,
+            bindingChanged: bound.changed,
+          });
+          receiptEntries.push({ type: "cron", id: entry.id, name: entry.name, sha256: desiredSha256 });
+        }
+
+        const receipt = `${canonicalJson({
+          schemaVersion: DEFAULT_PROFILE_RECONCILE_SCHEMA,
+          profileId: activeProjection.profileId,
+          bundleVersion: activeProjection.bundleVersion,
+          bundleDigest: activeProjection.bundleDigest,
+          materializerReceiptSha256,
+          entries: receiptEntries,
+        })}\n`;
+        const currentReceipt = existsSync(receiptPath)
+          ? readRegular(receiptPath).toString("utf8") : null;
+        if (currentReceipt !== receipt) atomicWrite(receiptPath, receipt, 0o600);
+        const changed = actions.some(
+          (action) => action.status !== "REUSED" || action.bindingChanged === true
+        );
+        return {
+          ok: true,
+          status: changed ? "APPLIED" : "REUSED",
+          changed,
+          bundleVersion: activeProjection.bundleVersion,
+          bundleDigest: activeProjection.bundleDigest,
+          materializerReceiptSha256,
+          actions,
+        };
+      },
+      { dataRoot }
+    );
+  } catch (error) {
+    const code = error instanceof Error && /^default_profile_[a-z0-9_]+$/.test(error.message)
+      ? error.message : "default_profile_reconcile_failed";
+    return refused(code);
+  }
+}

package/lib/sellable-agent/external-runtime-builder.mjs

@@ -28,7 +28,7 @@ import {
 
 const MANIFEST_VERSION = "sellable-agent-external-runtime-closure/v1";
 const MCP_PACKAGE = "@sellable/mcp";
-const MCP_VERSION = "0.1.879";
+const MCP_VERSION = "0.1.880";
 const SAFE_COMPONENT = /^[A-Za-z0-9@._+-]+$/;
 const HERMES_EXCLUDES = new Set([".git", ".playwright", "node_modules"]);
 

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1.7
 ARG HERMES_IMAGE=nousresearch/hermes-agent@sha256:c0cab4e3711bcb27a312be1b3776254fc06fd50d5f7a6b8017915fc7171cb39e
 ARG SLACK_PP_GO_IMAGE=golang@sha256:386d475a660466863d9f8c766fec64d7fdad3edac2c6a05020c09534d71edb4b
 
@@ -26,6 +27,8 @@ ARG ADMIN_MCP_PACKAGE
 ARG ADMIN_MCP_INTEGRITY
 ARG ADMIN_INSTALL_PACKAGE
 ARG ADMIN_INSTALL_INTEGRITY
+ARG ADMIN_INSTALL_SOURCE=registry
+ARG ADMIN_INSTALL_LOCAL_SHA256
 ARG ADMIN_LOCKED_TREE_DIGEST
 ARG ADMIN_ARTIFACT_DIGEST
 ARG ADMIN_PACKAGE_LOCK_B64
@@ -36,16 +39,28 @@ ARG AGENT_BROWSER_VERSION=0.26.0
 ARG PLAYWRIGHT_BROWSER_REVISION=1234
 ARG STRIPE_CLI_PACKAGE=@stripe/cli-linux-x64@1.45.0
 ARG STRIPE_CLI_INTEGRITY=sha512-1ZhoPpoweYfynqsvhCLlTjZ7lPz5IKtxqAMT5MBy6zrwLRTP9x0T6r8h/jLYL8lRH1c7zC/6X6/XUu2V+r9Bog==
+ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=
+ARG DEFAULT_PROFILE_BUNDLE_VERSION=1
+ARG DEFAULT_PROFILE_BUNDLE_DIGEST=608ab392a8d8477ea0045ac89860af7e8be98740c23b21225fb82e07aad10723
 
 COPY --from=slack-pp-cli-builder --chmod=0555 /out/slack-pp-cli /usr/local/bin/slack-pp-cli
 
-RUN set -eux; \
+RUN --mount=type=secret,id=admin_install_tarball,required=false \
+    set -eux; \
+    test "${ADMIN_INSTALL_SOURCE}" = "registry" -o "${ADMIN_INSTALL_SOURCE}" = "local-tarball"; \
     test -n "${ADMIN_PACKAGE_LOCK_B64}"; \
     test -n "${ADMIN_PROFILE_CONTRACT_TEMPLATE_B64}"; \
     test "$(npm view "${PRODUCT_MCP_PACKAGE}" dist.integrity)" = "${PRODUCT_MCP_INTEGRITY}"; \
     test "$(npm view "${PRODUCT_INSTALL_PACKAGE}" dist.integrity)" = "${PRODUCT_INSTALL_INTEGRITY}"; \
     test "$(npm view "${ADMIN_MCP_PACKAGE}" dist.integrity)" = "${ADMIN_MCP_INTEGRITY}"; \
-    test "$(npm view "${ADMIN_INSTALL_PACKAGE}" dist.integrity)" = "${ADMIN_INSTALL_INTEGRITY}"; \
+    if test "${ADMIN_INSTALL_SOURCE}" = "registry"; then \
+      test "$(npm view "${ADMIN_INSTALL_PACKAGE}" dist.integrity)" = "${ADMIN_INSTALL_INTEGRITY}"; \
+    else \
+      test -s /run/secrets/admin_install_tarball; \
+      test -n "${ADMIN_INSTALL_LOCAL_SHA256}"; \
+      test "$(sha256sum /run/secrets/admin_install_tarball | cut -d ' ' -f 1)" = "${ADMIN_INSTALL_LOCAL_SHA256}"; \
+      test "$(node -e 'const c=require("crypto"),f=require("fs"); process.stdout.write(`sha512-${c.createHash("sha512").update(f.readFileSync(process.argv[1])).digest("base64")}`)' /run/secrets/admin_install_tarball)" = "${ADMIN_INSTALL_INTEGRITY}"; \
+    fi; \
     test "$(npm view "${STRIPE_CLI_PACKAGE}" dist.integrity)" = "${STRIPE_CLI_INTEGRITY}"; \
     mkdir -p /usr/local/lib/sellable-agent/admin-artifact; \
     node -e 'const fs=require("fs"); const specs=process.argv.slice(1); fs.writeFileSync("/usr/local/lib/sellable-agent/admin-artifact/package.json", JSON.stringify({name:"sellable-admin-runtime-artifact",private:true,version:"1.0.0",dependencies:Object.fromEntries(specs.map((spec)=>{const at=spec.lastIndexOf("@"); return [spec.slice(0,at),spec.slice(at+1)];}))},null,2)+"\n");' \
@@ -58,12 +73,28 @@ RUN set -eux; \
     printf '%s' "${ADMIN_PROFILE_CONTRACT_TEMPLATE_B64}" | base64 -d \
       > /usr/local/lib/sellable-agent/admin-artifact/profile-contract-template.json; \
     test "$(sha256sum /usr/local/lib/sellable-agent/admin-artifact/package-lock.json | cut -d ' ' -f 1)" = "${ADMIN_LOCKED_TREE_DIGEST}"; \
+    if test "${ADMIN_INSTALL_SOURCE}" = "local-tarball"; then \
+      node -e 'const fs=require("fs"); const packagePath=process.argv[1],lockPath=process.argv[2]; const p=JSON.parse(fs.readFileSync(packagePath)); delete p.dependencies["@sellable/admin-install"]; fs.writeFileSync(packagePath,JSON.stringify(p,null,2)+"\n"); const l=JSON.parse(fs.readFileSync(lockPath)); delete l.packages[""].dependencies["@sellable/admin-install"]; delete l.packages["node_modules/@sellable/admin-install"]; fs.writeFileSync(lockPath,JSON.stringify(l,null,2)+"\n");' \
+        /usr/local/lib/sellable-agent/admin-artifact/package.json \
+        /usr/local/lib/sellable-agent/admin-artifact/package-lock.json; \
+    fi; \
     npm ci \
       --prefix /usr/local/lib/sellable-agent/admin-artifact \
       --ignore-scripts \
       --omit=dev \
       --no-audit \
       --no-fund; \
+    if test "${ADMIN_INSTALL_SOURCE}" = "local-tarball"; then \
+      npm install \
+        --prefix /usr/local/lib/sellable-agent/admin-artifact \
+        --ignore-scripts \
+        --omit=dev \
+        --no-audit \
+        --no-fund \
+        --no-save \
+        --package-lock=false \
+        /run/secrets/admin_install_tarball; \
+    fi; \
     npm install \
       --prefix /usr/local/lib/sellable-agent \
       --omit=dev \
@@ -94,6 +125,8 @@ RUN set -eux; \
     test -f /usr/local/lib/sellable-agent/admin-artifact/node_modules/@sellable/admin-mcp/dist/index.js; \
     node -e 'const p=require("/usr/local/lib/sellable-agent/admin-artifact/node_modules/@sellable/admin-mcp/package.json"); if(p.main!=="dist/index.js" || p.bin?.["sellable-admin-mcp"]!=="dist/index.js") process.exit(1);'; \
     test -f /usr/local/lib/sellable-agent/admin-artifact/node_modules/@sellable/admin-install/lib/hermes-admin-profile-factory.mjs; \
+    test -f /usr/local/lib/sellable-agent/admin-artifact/node_modules/@sellable/admin-install/default-profile-bundles/admin/manifest.fragment.json; \
+    test "$(node -p "require('/usr/local/lib/sellable-agent/admin-artifact/node_modules/@sellable/admin-install/package.json').version")" = "${ADMIN_INSTALL_PACKAGE##*@}"; \
     node -e 'const fs=require("fs"),c=require("crypto"); const p="/usr/local/lib/sellable-agent/admin-artifact/profile-contract-template.json"; const stable=(v)=>Array.isArray(v)?`[${v.map(stable).join(",")}]`:v&&typeof v==="object"?`{${Object.keys(v).sort().map((k)=>`${JSON.stringify(k)}:${stable(v[k])}`).join(",")}}`:JSON.stringify(v); const t=JSON.parse(fs.readFileSync(p)); const {contentDigest,...body}=t; if(t.schemaVersion!=="sellable-admin-profile-contract-template/v1" || c.createHash("sha256").update(stable(body)).digest("hex")!==contentDigest) process.exit(1);'; \
     rm -f /etc/s6-overlay/s6-rc.d/user/contents.d/dashboard \
           /etc/s6-overlay/s6-rc.d/user/contents.d/main-hermes \
@@ -132,12 +165,29 @@ COPY fly-skills-bridge-exec.mjs /usr/local/lib/sellable-agent/fly-skills-bridge-
 COPY fly-capabilities-bridge.mjs /usr/local/lib/sellable-agent/fly-capabilities-bridge.mjs
 COPY fly-capabilities-bridge-exec.mjs /usr/local/lib/sellable-agent/fly-capabilities-bridge-exec.mjs
 COPY soul-artifact-validator.mjs /usr/local/lib/sellable-agent/soul-artifact-validator.mjs
+COPY default-profile-bundle.mjs /usr/local/lib/sellable-agent/default-profile-bundle.mjs
+COPY default-profile-reconciler.mjs /usr/local/lib/sellable-agent/default-profile-reconciler.mjs
+COPY fly-cron-proof-exec.mjs /usr/local/lib/sellable-agent/fly-cron-proof-exec.mjs
+COPY default-profile-bundles/shared/ /usr/local/lib/sellable-agent/default-profile-bundles/shared/
+COPY default-profile-bundles/fixtures/ /usr/local/lib/sellable-agent/default-profile-bundles/fixtures/
 COPY hermes-memory-dirty.mjs /opt/sellable/bin/hermes-memory-dirty
 COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
 COPY hermes-endpoint-cron.mjs /opt/sellable/bin/hermes-endpoint-cron
 COPY fly-admin-image/rootfs/ /
 
-RUN node --input-type=module -e \
+RUN set -eux; \
+    fixture_args=""; \
+    if test -n "${DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION}"; then \
+      fixture_args="--fixture-version ${DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION}"; \
+    fi; \
+    node /usr/local/lib/sellable-agent/default-profile-bundle.mjs \
+      --kind ADMIN ${fixture_args} \
+      --admin-fragment /usr/local/lib/sellable-agent/admin-artifact/node_modules/@sellable/admin-install/default-profile-bundles/admin/manifest.fragment.json \
+      --output /usr/local/share/sellable-agent/default-profile-bundle \
+    && node -e \
+      'const fs=require("fs"); const manifest=JSON.parse(fs.readFileSync("/usr/local/share/sellable-agent/default-profile-bundle/manifest.json")); if(String(manifest.bundleVersion)!==process.argv[1] || manifest.bundleDigest!==process.argv[2]) process.exit(1);' \
+      "${DEFAULT_PROFILE_BUNDLE_VERSION}" "${DEFAULT_PROFILE_BUNDLE_DIGEST}" \
+    && node --input-type=module -e \
       'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
@@ -169,11 +219,15 @@ RUN node --input-type=module -e \
     && sha256sum /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
       > /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
+    && sha256sum /usr/local/lib/sellable-agent/default-profile-reconciler.mjs \
+      /usr/local/lib/sellable-agent/fly-cron-proof-exec.mjs \
+      > /usr/local/share/sellable-agent/default-profile-reconcile-source.sha256 \
     && sha256sum /usr/local/lib/sellable-agent/fly-capabilities-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-capabilities-bridge-exec.mjs \
       > /usr/local/share/sellable-agent/capabilities-bridge-source.sha256 \
     && chmod 0444 /usr/local/share/sellable-agent/soul-bridge-source.sha256 \
       /usr/local/share/sellable-agent/skills-bridge-source.sha256 \
+      /usr/local/share/sellable-agent/default-profile-reconcile-source.sha256 \
       /usr/local/share/sellable-agent/capabilities-bridge-source.sha256 \
     && chmod 0755 /etc \
     && chmod 0555 \
@@ -192,6 +246,8 @@ RUN node --input-type=module -e \
       /usr/local/lib/sellable-agent/fly-soul-bridge-exec.mjs \
       /usr/local/lib/sellable-agent/fly-skills-bridge.mjs \
       /usr/local/lib/sellable-agent/fly-skills-bridge-exec.mjs \
+      /usr/local/lib/sellable-agent/default-profile-reconciler.mjs \
+      /usr/local/lib/sellable-agent/fly-cron-proof-exec.mjs \
       /usr/local/lib/sellable-agent/soul-artifact-validator.mjs \
       /opt/sellable/bin/hermes-memory-dirty \
       /opt/sellable/bin/hermes-endpoint-cron \
@@ -203,7 +259,9 @@ RUN node --input-type=module -e \
 
 LABEL io.sellable.runtime.kind="admin" \
       io.sellable.runtime.listener="native-dedicated-slack" \
-      io.sellable.runtime.installers="build-only"
+      io.sellable.runtime.installers="build-only" \
+      io.sellable.runtime.default-profile-bundle-version="${DEFAULT_PROFILE_BUNDLE_VERSION}" \
+      io.sellable.runtime.default-profile-bundle-digest="${DEFAULT_PROFILE_BUNDLE_DIGEST}"
 
 ENV SELLABLE_AGENT_ADMIN_RUNTIME=/usr/local/lib/sellable-agent/admin-runtime/admin-runtime.mjs
 ENV SELLABLE_AGENT_PRODUCT_MCP_PACKAGE=${PRODUCT_MCP_PACKAGE}
@@ -212,6 +270,8 @@ ENV SELLABLE_AGENT_ADMIN_MCP_PACKAGE=${ADMIN_MCP_PACKAGE}
 ENV SELLABLE_AGENT_ADMIN_INSTALL_PACKAGE=${ADMIN_INSTALL_PACKAGE}
 ENV SELLABLE_AGENT_ADMIN_LOCKED_TREE_DIGEST=${ADMIN_LOCKED_TREE_DIGEST}
 ENV SELLABLE_AGENT_ADMIN_ARTIFACT_DIGEST=${ADMIN_ARTIFACT_DIGEST}
+ENV SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION=${DEFAULT_PROFILE_BUNDLE_VERSION}
+ENV SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST=${DEFAULT_PROFILE_BUNDLE_DIGEST}
 ENV HOME=/opt/data
 ENV HERMES_HOME=/opt/data
 ENV HERMES_WRITE_SAFE_ROOT=/opt/data