@sellable/install 0.1.751-wip.phase207.20260919.22 → 0.1.752

package/container/Dockerfile

@@ -3,13 +3,13 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.743
-ARG MCP_PACKAGE=@sellable/mcp@0.1.930
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.751
+ARG MCP_PACKAGE=@sellable/mcp@0.1.938
 ARG INSTALLER_INTEGRITY
-ARG MCP_INTEGRITY=sha512-ARsqJcT3PzSqkl0O+WHipl+1ZGC7ZX3bzWkhll45d9fpZ0ZAVYqOZff1XoxUJEZhv2V2bpcz7hh1/dGJ4H8k5Q==
+ARG MCP_INTEGRITY=sha512-wcVCiCXVvKeE/SufP+2iXk8zgzwYWh78M/1vwa7oorF9UZbzut9szyZV47t4iMX9owYgBVaGwdlOC6eX8VQX4A==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.743" \
-    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.930" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.751" \
+    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.938" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.743" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.743' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.930') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.751' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.938') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.743', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.930', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.751', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.938', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.743` is
+`@sellable/install@0.1.751` is
 published:
 
 ```sh

package/lib/sellable-agent/default-profile-bundle.mjs

@@ -30,6 +30,21 @@ const MAX_FILE_BYTES = 64 * 1024;
 const MAX_FRAGMENT_BYTES = 192 * 1024;
 const MAX_TOTAL_BYTES = 1024 * 1024;
 
+function readNativeSkillName(content) {
+  const lines = content.split("\n");
+  if (lines[0] !== "---") reject("skill_frontmatter_rejected");
+  const end = lines.indexOf("---", 1);
+  if (end < 2) reject("skill_frontmatter_rejected");
+  const names = lines
+    .slice(1, end)
+    .map((line) => /^name:\s*([a-z0-9][a-z0-9-]{0,63})\s*$/.exec(line)?.[1])
+    .filter(Boolean);
+  if (names.length !== 1 || !ID.test(names[0])) {
+    reject("skill_frontmatter_rejected");
+  }
+  return names[0];
+}
+
 function sha256(value) {
   return createHash("sha256").update(value).digest("hex");
 }
@@ -200,7 +215,9 @@ function normalizeFile(value, fragmentKind) {
     kind: fragmentKind,
     path: value.path,
     mode: value.mode,
-    ...(value.type === "cron" ? { name: value.name } : {}),
+    ...(value.type === "cron"
+      ? { name: value.name }
+      : { nativeName: readNativeSkillName(value.content) }),
     content: value.content,
     sha256: sha256(bytes),
   });
@@ -282,6 +299,11 @@ export function buildDefaultProfileBundle({
     new Set(files.map((file) => file.path)).size !== files.length ||
     new Set(files.filter((file) => file.type === "skill").map((file) => file.id))
       .size !== files.filter((file) => file.type === "skill").length ||
+    new Set(
+      files
+        .filter((file) => file.type === "skill")
+        .map((file) => file.nativeName)
+    ).size !== files.filter((file) => file.type === "skill").length ||
     new Set(files.filter((file) => file.type === "cron").map((file) => file.name))
       .size !== files.filter((file) => file.type === "cron").length
   ) {

package/lib/sellable-agent/default-profile-reconciler.mjs

@@ -359,6 +359,7 @@ function readBundle(bundleRoot) {
       entry.mode !== "0444" ||
       entry.path !== expectedPath ||
       !SHA256.test(entry.sha256 ?? "") ||
+      (entry.type === "skill" && !MANAGED_ID.test(entry.nativeName ?? "")) ||
       (entry.type === "cron" &&
         (!MANAGED_ID.test(entry.name ?? "") ||
           !entry.name.startsWith("sellable-default-")))
@@ -588,7 +589,12 @@ export async function reconcileDefaultProfileBundle({
               if (sha256(readRegular(plan.path, 64 * 1024)) !== entry.sha256)
                 throw new Error("default_profile_skill_readback_rejected");
             }
-            actions.push({ type: "skill", id: entry.id, status: plan.status });
+            actions.push({
+              type: "skill",
+              id: entry.id,
+              nativeName: entry.nativeName,
+              status: plan.status,
+            });
             receiptEntries.push({
               type: "skill",
               id: entry.id,

package/lib/sellable-agent/external-runtime-builder.mjs

@@ -28,7 +28,7 @@ import {
 
 const MANIFEST_VERSION = "sellable-agent-external-runtime-closure/v1";
 const MCP_PACKAGE = "@sellable/mcp";
-const MCP_VERSION = "0.1.930";
+const MCP_VERSION = "0.1.938";
 const SAFE_COMPONENT = /^[A-Za-z0-9@._+-]+$/;
 const HERMES_EXCLUDES = new Set([".git", ".playwright", "node_modules"]);
 

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -43,7 +43,7 @@ ARG STRIPE_CLI_PACKAGE=@stripe/cli-linux-x64@1.45.0
 ARG STRIPE_CLI_INTEGRITY=sha512-1ZhoPpoweYfynqsvhCLlTjZ7lPz5IKtxqAMT5MBy6zrwLRTP9x0T6r8h/jLYL8lRH1c7zC/6X6/XUu2V+r9Bog==
 ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=1
 ARG DEFAULT_PROFILE_BUNDLE_VERSION=3
-ARG DEFAULT_PROFILE_BUNDLE_DIGEST=8030143cc1a10928564511f24d44643bd697d573332324c5d9a7a32d4fdbaf85
+ARG DEFAULT_PROFILE_BUNDLE_DIGEST=197fb4ed5a60cd1a3a06a46aa1fc53a04bb1e6c1f872e96a0ce2cc28bf2856de
 
 COPY --from=slack-pp-cli-builder --chmod=0555 /out/slack-pp-cli /usr/local/bin/slack-pp-cli
 

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,9 +6,9 @@ USER root
 
 ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
-ARG MCP_PACKAGE=@sellable/mcp@0.1.930
-ARG MCP_INTEGRITY=sha512-ARsqJcT3PzSqkl0O+WHipl+1ZGC7ZX3bzWkhll45d9fpZ0ZAVYqOZff1XoxUJEZhv2V2bpcz7hh1/dGJ4H8k5Q==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.743
+ARG MCP_PACKAGE=@sellable/mcp@0.1.938
+ARG MCP_INTEGRITY=sha512-wcVCiCXVvKeE/SufP+2iXk8zgzwYWh78M/1vwa7oorF9UZbzut9szyZV47t4iMX9owYgBVaGwdlOC6eX8VQX4A==
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.751
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1
@@ -21,7 +21,7 @@ ARG PLAYWRIGHT_BROWSER_REVISION=1234
 ARG TIRITH_ARCHIVE_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2
 ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=1
 ARG DEFAULT_PROFILE_BUNDLE_VERSION=3
-ARG DEFAULT_PROFILE_BUNDLE_DIGEST=7e8e6ff740f11aaaa3d6da2e9f067a66866d259ac4233036ff691dae973ce5f3
+ARG DEFAULT_PROFILE_BUNDLE_DIGEST=301ed49582dbfb29453ff2c2fa26579da6771d19f58e12218c5400db2e14318d
 
 RUN --mount=type=secret,id=mcp_trust_root,required=true \
     test -s /run/secrets/mcp_trust_root \

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -121,9 +121,9 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.3";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.743";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.751";
 const MCP_PACKAGE =
-  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.930";
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.938";
 export const ENDPOINT_MAX_CONCURRENT_RUNS = 10;
 const DEFAULT_PROFILE_BUNDLE_ROOT =
   "/usr/local/share/sellable-agent/default-profile-bundle";

package/lib/sellable-agent/fly-skills-bridge.mjs

@@ -1041,7 +1041,7 @@ export function executeExternalSkillsBridgeOperation(
 
 /**
  * @param {{
- *   actions?: Array<{type: string, id: string}>,
+ *   actions?: Array<{type: string, id: string, nativeName?: string}>,
  *   profileId?: string,
  *   dataRoot?: string,
  *   bridge?: typeof executeExternalSkillsBridgeOperation,
@@ -1062,17 +1062,27 @@ export function proveDefaultProfileNativeSkills({
     callerProfileId: profileId,
     ...(nativeCallTimeoutMs === undefined ? {} : { nativeCallTimeoutMs }),
   };
+  for (const action of managed) {
+    if (!SAFE_NAME.test(action.nativeName ?? ""))
+      fail("default_profile_native_skill_name_missing");
+  }
   const inventory = bridge({ operation: "list" }, options);
   const proofs = managed.map((action) => {
-    const skill = inventory.skills.find((entry) => entry.name === action.id);
+    const skill = inventory.skills.find(
+      (entry) => entry.name === action.nativeName
+    );
     if (!skill) fail("default_profile_native_skill_missing");
     const viewed = bridge(
       { operation: "read", skillId: skill.skillId },
       options
     );
-    if (!viewed.ok || viewed.skill?.name !== action.id)
+    if (!viewed.ok || viewed.skill?.name !== action.nativeName)
       fail("default_profile_native_skill_readback_rejected");
-    return { id: action.id, fileSha256: viewed.fileSha256 };
+    return {
+      id: action.id,
+      nativeName: action.nativeName,
+      fileSha256: viewed.fileSha256,
+    };
   });
   return { status: "PROVEN", digest: sha256(stableJson(proofs)) };
 }

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,8 +38,8 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.743";
-const MCP_PACKAGE = "@sellable/mcp@0.1.930";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.751";
+const MCP_PACKAGE = "@sellable/mcp@0.1.938";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;
 const SHA256_16 = /^[a-f0-9]{16}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,8 +1546,8 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.743" ||
-      pinned.mcpPackage !== "@sellable/mcp@0.1.930" ||
+      pinned.installerPackage !== "@sellable/install@0.1.751" ||
+      pinned.mcpPackage !== "@sellable/mcp@0.1.938" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||
       !Number.isSafeInteger(slack.generation) ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -282,8 +282,8 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.743" ||
-    desired.mcpPackage !== "@sellable/mcp@0.1.930" ||
+    desired.installerPackage !== "@sellable/install@0.1.751" ||
+    desired.mcpPackage !== "@sellable/mcp@0.1.938" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||
     desired.toolInclude.some((tool) => !/^[a-z][a-z0-9_]{0,127}$/.test(tool)) ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,8 +25,8 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.743";
-export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.930";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.751";
+export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.938";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1
 );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.751-wip.phase207.20260919.22",
+  "version": "0.1.752",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {