@sellable/install 0.1.644 → 0.1.646
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/container/Dockerfile +4 -4
- package/container/README.md +1 -1
- package/lib/sellable-agent/fly-admin-image/Dockerfile +5 -2
- package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs +1 -1
- package/lib/sellable-agent/fly-customer-image/Dockerfile +6 -3
- package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs +2 -2
- package/lib/sellable-agent/host-bootstrap.mjs +1 -1
- package/lib/sellable-agent/host-worker.mjs +1 -1
- package/lib/sellable-agent/profile-materializer.mjs +1 -1
- package/lib/sellable-agent/provisioning-adapter.mjs +1 -1
- package/package.json +1 -1
package/container/Dockerfile
CHANGED
|
@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
|
|
|
3
3
|
|
|
4
4
|
USER root
|
|
5
5
|
|
|
6
|
-
ARG INSTALLER_PACKAGE=@sellable/install@0.1.
|
|
6
|
+
ARG INSTALLER_PACKAGE=@sellable/install@0.1.646
|
|
7
7
|
ARG MCP_PACKAGE=@sellable/mcp@0.1.880
|
|
8
8
|
ARG INSTALLER_INTEGRITY
|
|
9
9
|
ARG MCP_INTEGRITY=sha512-+Fo8aQlYduLaQMQff+ZA25LeUhWZ7I7UH5DECpND84LQ+rHSjKeKFj4Zs93bVHXwQCIy2OLbr75y4f4+CyT57w==
|
|
10
10
|
|
|
11
|
-
RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.
|
|
11
|
+
RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.646" \
|
|
12
12
|
&& test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.880" \
|
|
13
13
|
&& test -n "${INSTALLER_INTEGRITY}" \
|
|
14
14
|
&& test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
|
|
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.644" \
|
|
|
23
23
|
&& mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
|
|
24
24
|
&& npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
|
|
25
25
|
&& npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
|
|
26
|
-
&& node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.
|
|
26
|
+
&& node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.646' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.880') throw new Error('package identity rejected');" \
|
|
27
27
|
&& node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
|
|
28
|
-
&& node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.
|
|
28
|
+
&& node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.646', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.880', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
|
|
29
29
|
&& npm cache clean --force
|
|
30
30
|
|
|
31
31
|
COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint
|
package/container/README.md
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
|
|
4
4
|
|
|
5
5
|
Build from this directory after
|
|
6
|
-
`@sellable/install@0.1.
|
|
6
|
+
`@sellable/install@0.1.646` is
|
|
7
7
|
published:
|
|
8
8
|
|
|
9
9
|
```sh
|
|
@@ -39,9 +39,9 @@ ARG AGENT_BROWSER_VERSION=0.26.0
|
|
|
39
39
|
ARG PLAYWRIGHT_BROWSER_REVISION=1234
|
|
40
40
|
ARG STRIPE_CLI_PACKAGE=@stripe/cli-linux-x64@1.45.0
|
|
41
41
|
ARG STRIPE_CLI_INTEGRITY=sha512-1ZhoPpoweYfynqsvhCLlTjZ7lPz5IKtxqAMT5MBy6zrwLRTP9x0T6r8h/jLYL8lRH1c7zC/6X6/XUu2V+r9Bog==
|
|
42
|
-
ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=
|
|
42
|
+
ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=1
|
|
43
43
|
ARG DEFAULT_PROFILE_BUNDLE_VERSION=1
|
|
44
|
-
ARG DEFAULT_PROFILE_BUNDLE_DIGEST=
|
|
44
|
+
ARG DEFAULT_PROFILE_BUNDLE_DIGEST=6a224a61458914ce24adeb68d94147244db6d2a3237e7822a819340e09f6202b
|
|
45
45
|
|
|
46
46
|
COPY --from=slack-pp-cli-builder --chmod=0555 /out/slack-pp-cli /usr/local/bin/slack-pp-cli
|
|
47
47
|
|
|
@@ -272,6 +272,9 @@ ENV SELLABLE_AGENT_ADMIN_LOCKED_TREE_DIGEST=${ADMIN_LOCKED_TREE_DIGEST}
|
|
|
272
272
|
ENV SELLABLE_AGENT_ADMIN_ARTIFACT_DIGEST=${ADMIN_ARTIFACT_DIGEST}
|
|
273
273
|
ENV SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION=${DEFAULT_PROFILE_BUNDLE_VERSION}
|
|
274
274
|
ENV SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST=${DEFAULT_PROFILE_BUNDLE_DIGEST}
|
|
275
|
+
ENV SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_TEST_ONLY=1
|
|
276
|
+
ENV SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_WORKSPACE_ID=cmrz87l040019ih0452rdtq5s
|
|
277
|
+
ENV SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_AGENT_ID=agent_665e5f64ca144b12f7f6b3ce6fa9f5a1
|
|
275
278
|
ENV HOME=/opt/data
|
|
276
279
|
ENV HERMES_HOME=/opt/data
|
|
277
280
|
ENV HERMES_WRITE_SAFE_ROOT=/opt/data
|
|
@@ -199,7 +199,7 @@ const DEFAULT_PROFILE_CRON_PYTHON = [
|
|
|
199
199
|
"value=json.loads(sys.argv[1])",
|
|
200
200
|
"job_id=value.pop('jobId', None)",
|
|
201
201
|
"enabled=value.pop('enabled')",
|
|
202
|
-
"result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value
|
|
202
|
+
"result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value)",
|
|
203
203
|
"print(json.dumps({'id': result.get('id') if result else None}))",
|
|
204
204
|
].join("\n");
|
|
205
205
|
|
|
@@ -8,7 +8,7 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
|
|
|
8
8
|
|
|
9
9
|
ARG MCP_PACKAGE=@sellable/mcp@0.1.880
|
|
10
10
|
ARG MCP_INTEGRITY=sha512-+Fo8aQlYduLaQMQff+ZA25LeUhWZ7I7UH5DECpND84LQ+rHSjKeKFj4Zs93bVHXwQCIy2OLbr75y4f4+CyT57w==
|
|
11
|
-
ARG INSTALLER_PACKAGE=@sellable/install@0.1.
|
|
11
|
+
ARG INSTALLER_PACKAGE=@sellable/install@0.1.646
|
|
12
12
|
ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.186-wip.phase158.20260802034727
|
|
13
13
|
ARG ADMIN_MCP_INTEGRITY=sha512-qYNew5wd2IfgVcp1UYOG9QvpF/8Mx19YJ5HQtMKzvSfUf3evePjtaKsoXLf2C/GUJ5QlLlHJo84VWOI3V01+9A==
|
|
14
14
|
ARG TUS_JS_CLIENT_VERSION=4.3.1
|
|
@@ -19,9 +19,9 @@ ARG TIRITH_VERSION=0.3.3
|
|
|
19
19
|
ARG PLAYWRIGHT_VERSION=1.62.1
|
|
20
20
|
ARG PLAYWRIGHT_BROWSER_REVISION=1234
|
|
21
21
|
ARG TIRITH_ARCHIVE_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2
|
|
22
|
-
ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=
|
|
22
|
+
ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=1
|
|
23
23
|
ARG DEFAULT_PROFILE_BUNDLE_VERSION=1
|
|
24
|
-
ARG DEFAULT_PROFILE_BUNDLE_DIGEST=
|
|
24
|
+
ARG DEFAULT_PROFILE_BUNDLE_DIGEST=d1e5653304c0d9ad0ca33947711dd359824c0262acfeb11a951336476e2a737d
|
|
25
25
|
|
|
26
26
|
RUN --mount=type=secret,id=mcp_trust_root,required=true \
|
|
27
27
|
test -s /run/secrets/mcp_trust_root \
|
|
@@ -171,6 +171,9 @@ ENV HOME=/opt/data \
|
|
|
171
171
|
SELLABLE_AGENT_MCP_PACKAGE=${MCP_PACKAGE} \
|
|
172
172
|
SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_VERSION=${DEFAULT_PROFILE_BUNDLE_VERSION} \
|
|
173
173
|
SELLABLE_AGENT_DEFAULT_PROFILE_BUNDLE_DIGEST=${DEFAULT_PROFILE_BUNDLE_DIGEST} \
|
|
174
|
+
SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_TEST_ONLY=1 \
|
|
175
|
+
SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_WORKSPACE_ID=cmp6h5wo00000l204a6g2jrk1 \
|
|
176
|
+
SELLABLE_AGENT_DEFAULT_PROFILE_FIXTURE_AGENT_ID=agent_6bed1d07c8892cde4a308a4c54d8bd14 \
|
|
174
177
|
SELLABLE_AGENT_PLAYWRIGHT_VERSION=${PLAYWRIGHT_VERSION} \
|
|
175
178
|
SELLABLE_AGENT_PLAYWRIGHT_BROWSER_REVISION=${PLAYWRIGHT_BROWSER_REVISION} \
|
|
176
179
|
PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1
|
|
@@ -105,7 +105,7 @@ const BOOT_SESSION_ID = randomUUID();
|
|
|
105
105
|
const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.20.0";
|
|
106
106
|
const INSTALLER_PACKAGE =
|
|
107
107
|
process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ??
|
|
108
|
-
"@sellable/install@0.1.
|
|
108
|
+
"@sellable/install@0.1.646";
|
|
109
109
|
const MCP_PACKAGE =
|
|
110
110
|
process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.880";
|
|
111
111
|
const DEFAULT_PROFILE_BUNDLE_ROOT =
|
|
@@ -116,7 +116,7 @@ const DEFAULT_PROFILE_CRON_PYTHON = [
|
|
|
116
116
|
"value=json.loads(sys.argv[1])",
|
|
117
117
|
"job_id=value.pop('jobId', None)",
|
|
118
118
|
"enabled=value.pop('enabled')",
|
|
119
|
-
"result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value
|
|
119
|
+
"result=update_job(job_id, {**value, 'enabled': enabled}) if job_id else create_job(**value)",
|
|
120
120
|
"print(json.dumps({'id': result.get('id') if result else None}))",
|
|
121
121
|
].join("\n");
|
|
122
122
|
|
|
@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
|
|
|
38
38
|
const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
|
|
39
39
|
const VERSION = "sellable-agent-host-bootstrap/v1";
|
|
40
40
|
const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
|
|
41
|
-
const INSTALLER_PACKAGE = "@sellable/install@0.1.
|
|
41
|
+
const INSTALLER_PACKAGE = "@sellable/install@0.1.646";
|
|
42
42
|
const MCP_PACKAGE = "@sellable/mcp@0.1.880";
|
|
43
43
|
const HERMES_VERSION = "0.18.0";
|
|
44
44
|
const SHA256 = /^[a-f0-9]{64}$/;
|
|
@@ -1547,7 +1547,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
|
|
|
1547
1547
|
pinned.hermesCli !== "hermes" ||
|
|
1548
1548
|
pinned.hermesVersion !== "0.18.0" ||
|
|
1549
1549
|
pinned.installerPackage !==
|
|
1550
|
-
"@sellable/install@0.1.
|
|
1550
|
+
"@sellable/install@0.1.646" ||
|
|
1551
1551
|
pinned.mcpPackage !== "@sellable/mcp@0.1.880" ||
|
|
1552
1552
|
!Array.isArray(policy.toolInclude) ||
|
|
1553
1553
|
policy.toolInclude.length === 0 ||
|
|
@@ -283,7 +283,7 @@ function validateDesired(desired) {
|
|
|
283
283
|
desired.hermesCli !== "hermes" ||
|
|
284
284
|
desired.hermesVersion !== "0.18.0" ||
|
|
285
285
|
desired.installerPackage !==
|
|
286
|
-
"@sellable/install@0.1.
|
|
286
|
+
"@sellable/install@0.1.646" ||
|
|
287
287
|
desired.mcpPackage !== "@sellable/mcp@0.1.880" ||
|
|
288
288
|
!Array.isArray(desired.toolInclude) ||
|
|
289
289
|
desired.toolInclude.length === 0 ||
|
|
@@ -26,7 +26,7 @@ import { deriveContainedProfileId } from "./profile-materializer.mjs";
|
|
|
26
26
|
|
|
27
27
|
export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
|
|
28
28
|
export const PINNED_INSTALL_PACKAGE =
|
|
29
|
-
"@sellable/install@0.1.
|
|
29
|
+
"@sellable/install@0.1.646";
|
|
30
30
|
export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.880";
|
|
31
31
|
const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
|
|
32
32
|
PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1
|