@sellable/install 0.1.756 → 0.1.757

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.756
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.757
 ARG MCP_PACKAGE=@sellable/mcp@0.1.938
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-wcVCiCXVvKeE/SufP+2iXk8zgzwYWh78M/1vwa7oorF9UZbzut9szyZV47t4iMX9owYgBVaGwdlOC6eX8VQX4A==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.756" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.757" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.938" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.756" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.756' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.938') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.757' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.938') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.756', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.938', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.757', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.938', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.756` is
+`@sellable/install@0.1.757` is
 published:
 
 ```sh

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -168,6 +168,7 @@ COPY hermes-first-welcome.mjs /usr/local/lib/sellable-agent/hermes-first-welcome
 COPY fly-customer-image/hermes-runs-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs
 COPY fly-customer-image/opener-stage-execution.mjs /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs
 COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs
+COPY fly-customer-image/customer-runtime-phase-telemetry.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs
 COPY admin-native-gateway-supervisor.mjs /usr/local/lib/sellable-agent/admin-native-gateway-supervisor.mjs
 COPY admin-endpoint-runtime.mjs /usr/local/lib/sellable-agent/admin-endpoint-runtime.mjs
 COPY abandoned-runtime-scratch.mjs /usr/local/lib/sellable-agent/abandoned-runtime-scratch.mjs
@@ -265,6 +266,7 @@ RUN set -eux; \
       /usr/local/lib/sellable-agent/admin-runtime/admin-state-generation.mjs \
       /usr/local/lib/sellable-agent/admin-runtime/start-admin-runtime \
       /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs \
+      /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs \

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -8,7 +8,7 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.938
 ARG MCP_INTEGRITY=sha512-wcVCiCXVvKeE/SufP+2iXk8zgzwYWh78M/1vwa7oorF9UZbzut9szyZV47t4iMX9owYgBVaGwdlOC6eX8VQX4A==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.756
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.757
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1
@@ -97,6 +97,7 @@ COPY fly-customer-image/model-auth-store.mjs /usr/local/lib/sellable-agent/fly-c
 COPY fly-customer-image/hermes-runs-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs
 COPY fly-customer-image/opener-stage-execution.mjs /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs
 COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs
+COPY fly-customer-image/customer-runtime-phase-telemetry.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs
 COPY fly-customer-image/customer-runtime.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs
 COPY fly-customer-image/rootfs/ /
 

package/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs

@@ -0,0 +1,84 @@
+const CUSTOMER_RUNTIME_PHASES = new Set([
+  "runtime_secrets",
+  "snapshot_restore",
+  "legacy_migration",
+  "profile_materialization",
+  "default_profile_bundle",
+  "profile_configuration",
+  "memory_cron",
+  "pre_serving_snapshot",
+  "slack_serving_proof",
+  "customer_program_crons",
+  "post_cron_snapshot",
+  "native_skill_proof",
+  "serving_observation",
+  "operation_completion",
+]);
+
+function phaseFailureCode(error) {
+  const code = error instanceof Error ? error.message : "";
+  return /^[A-Za-z0-9_:-]{1,160}$/.test(code)
+    ? code
+    : "customer_runtime_phase_failed";
+}
+
+export function createCustomerRuntimePhaseTelemetry({
+  bootSessionId,
+  operationId,
+  now = () => Date.now(),
+  write = (entry) => {
+    process.stderr.write(`${JSON.stringify(entry)}\n`);
+  },
+}) {
+  if (
+    typeof bootSessionId !== "string" ||
+    bootSessionId.length < 1 ||
+    typeof operationId !== "string" ||
+    operationId.length < 1
+  ) {
+    throw new Error("customer_runtime_phase_identity_rejected");
+  }
+
+  const run = async (phase, work) => {
+    if (!CUSTOMER_RUNTIME_PHASES.has(phase) || typeof work !== "function") {
+      throw new Error("customer_runtime_phase_rejected");
+    }
+    const startedAt = now();
+    write({
+      ok: true,
+      code: "customer_runtime_phase",
+      phase,
+      status: "started",
+      elapsedMs: 0,
+      bootSessionId,
+      operationId,
+    });
+    try {
+      const result = await work();
+      write({
+        ok: true,
+        code: "customer_runtime_phase",
+        phase,
+        status: "completed",
+        elapsedMs: Math.max(0, now() - startedAt),
+        bootSessionId,
+        operationId,
+      });
+      return result;
+    } catch (error) {
+      write({
+        ok: false,
+        code: "customer_runtime_phase",
+        phase,
+        status: "failed",
+        elapsedMs: Math.max(0, now() - startedAt),
+        bootSessionId,
+        operationId,
+        errorCode: phaseFailureCode(error),
+      });
+      throw error;
+    }
+  };
+
+  return { run };
+}

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -86,6 +86,7 @@ import {
   validateNativeSlackCustomerProfile,
 } from "../profile-materializer.mjs";
 import { reconcilePublicHermesSkills } from "../public-skills.mjs";
+import { createCustomerRuntimePhaseTelemetry } from "./customer-runtime-phase-telemetry.mjs";
 import {
   holdEndpointUatNativeCompletion,
   validateEndpointUatCompletionControl,
@@ -121,7 +122,7 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.3";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.756";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.757";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.938";
 export const ENDPOINT_MAX_CONCURRENT_RUNS = 10;
@@ -3673,121 +3674,157 @@ async function processOperation({
   identity,
   reattestAuthority,
 }) {
+  const phaseTelemetry = createCustomerRuntimePhaseTelemetry({
+    bootSessionId: BOOT_SESSION_ID,
+    operationId: claim.operation.id,
+  });
   const runtimeAuthorityScope = claim.runtimeAuthority?.scope ?? null;
   const trustRootPem = readFileSync(TRUST_ROOT, "utf8");
   const { desired, toolInclude } = compileDesired(claim, trustRootPem);
   mkdirSync(PROFILES_ROOT, { recursive: true, mode: 0o700 });
   chmodSync(PROFILES_ROOT, 0o700);
-  const secrets = await consumeSecrets({ claim, exchange, client, desired });
-  await publishManagedAuth({
-    schemaVersion: "sellable-managed-auth/v1",
-    profileId: desired.profileId,
-    runtimeId: RUNTIME_ID,
-    runtimeGeneration: RUNTIME_GENERATION,
-    agentKind: "CUSTOMER",
-    apiUrl: ORIGIN,
-    token: secrets.mcpService,
-    agent: {
-      workspaceId: desired.workspaceId,
-      agentId: desired.agentId,
-      generation: desired.serviceCredentialGeneration,
-      policyHash: desired.policyHash,
-      selectedChannelIds: desired.selectedChannelIds,
-    },
+  const secrets = await phaseTelemetry.run("runtime_secrets", async () => {
+    const consumed = await consumeSecrets({
+      claim,
+      exchange,
+      client,
+      desired,
+    });
+    await publishManagedAuth({
+      schemaVersion: "sellable-managed-auth/v1",
+      profileId: desired.profileId,
+      runtimeId: RUNTIME_ID,
+      runtimeGeneration: RUNTIME_GENERATION,
+      agentKind: "CUSTOMER",
+      apiUrl: ORIGIN,
+      token: consumed.mcpService,
+      agent: {
+        workspaceId: desired.workspaceId,
+        agentId: desired.agentId,
+        generation: desired.serviceCredentialGeneration,
+        policyHash: desired.policyHash,
+        selectedChannelIds: desired.selectedChannelIds,
+      },
+    });
+    return consumed;
   });
   const profileRoot = join(PROFILES_ROOT, desired.profileId);
-  const memoryRestore = await restoreLatestHermesSnapshot({
-    profileId: desired.profileId,
-    profileRoot,
-    hermesRoot: DATA_ROOT,
-    hermesVersion: HERMES_VERSION,
-    fetchLatest: () => client.getMemorySnapshot(),
-  });
+  const memoryRestore = await phaseTelemetry.run("snapshot_restore", () =>
+    restoreLatestHermesSnapshot({
+      profileId: desired.profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+      hermesVersion: HERMES_VERSION,
+      fetchLatest: () => client.getMemorySnapshot(),
+    })
+  );
   if (!memoryRestore.ok) throw new Error(memoryRestore.code);
-  const legacyUserState = migrateLegacyHermesUserState({
-    profileId: desired.profileId,
-    profileRoot,
-    hermesRoot: DATA_ROOT,
-  });
+  const legacyUserState = await phaseTelemetry.run("legacy_migration", () =>
+    migrateLegacyHermesUserState({
+      profileId: desired.profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+    })
+  );
   if (!legacyUserState.ok) throw new Error(legacyUserState.code);
-  const materialized = materializeNativeSlackCustomerProfile({
-    desired,
-    profilesRoot: PROFILES_ROOT,
-  });
-  if (!materialized.ok) {
-    const detail =
-      materialized.code === "native_slack_profile_insufficient_disk"
-        ? `:available_bytes=${materialized.availableBytes}:required_bytes=${materialized.requiredBytes}`
-        : materialized.causeCode
-          ? `:cause=${materialized.causeCode}`
-          : "";
-    throw new Error(`${materialized.code}${detail}`);
-  }
-  const pristineProfile = validateNativeSlackCustomerProfile({
-    desired,
-    profileRoot,
-  });
-  if (!pristineProfile.ok) throw new Error(pristineProfile.code);
+  const { materialized, pristineProfile } = await phaseTelemetry.run(
+    "profile_materialization",
+    () => {
+      const materialized = materializeNativeSlackCustomerProfile({
+        desired,
+        profilesRoot: PROFILES_ROOT,
+      });
+      if (!materialized.ok) {
+        const detail =
+          materialized.code === "native_slack_profile_insufficient_disk"
+            ? `:available_bytes=${materialized.availableBytes}:required_bytes=${materialized.requiredBytes}`
+            : materialized.causeCode
+              ? `:cause=${materialized.causeCode}`
+              : "";
+        throw new Error(`${materialized.code}${detail}`);
+      }
+      const pristineProfile = validateNativeSlackCustomerProfile({
+        desired,
+        profileRoot,
+      });
+      if (!pristineProfile.ok) throw new Error(pristineProfile.code);
+      return { materialized, pristineProfile };
+    }
+  );
   const activeProjection = buildDefaultProfileProjection({
     kind: "CUSTOMER",
     claim,
   });
-  const reconciledDefaultProfile = await reconcileDefaultProfileBundle({
-    activeProjection,
-    materializerReceipt: pristineProfile.manifest,
-    profileRoot,
-    bundleRoot: DEFAULT_PROFILE_BUNDLE_ROOT,
-    dataRoot: DATA_ROOT,
-    reattestAuthority: async () => {
-      await reattestAuthority();
-      return activeProjection;
-    },
-    cronAdapter: customerDefaultProfileCronAdapter(
-      desired.profileId,
-      profileRoot
-    ),
-  });
+  const reconciledDefaultProfile = await phaseTelemetry.run(
+    "default_profile_bundle",
+    () =>
+      reconcileDefaultProfileBundle({
+        activeProjection,
+        materializerReceipt: pristineProfile.manifest,
+        profileRoot,
+        bundleRoot: DEFAULT_PROFILE_BUNDLE_ROOT,
+        dataRoot: DATA_ROOT,
+        reattestAuthority: async () => {
+          await reattestAuthority();
+          return activeProjection;
+        },
+        cronAdapter: customerDefaultProfileCronAdapter(
+          desired.profileId,
+          profileRoot
+        ),
+      })
+  );
   if (!reconciledDefaultProfile.ok)
     throw new Error(reconciledDefaultProfile.code);
   const defaultProfile = reconciledDefaultProfile;
-  const publicSkills = reconcilePublicHermesSkills({
-    profileId: desired.profileId,
-    profileRoot,
-    dataRoot: DATA_ROOT,
-  });
-  installInternalAdminRuntimeSettings({ desired, profileRoot });
-  const runtimeConfig = writeRuntimeHermesConfig({
-    desired,
-    toolInclude,
-    profileRoot,
-    secrets,
-    claim,
-    trustRootPem,
-  });
-  const soulProof = observeProfileSoul(desired.profileId, {
-    dataRoot: DATA_ROOT,
-  });
-  if (soulProof.ok !== true) {
-    throw new Error("customer_live_soul_loader_proof_rejected");
-  }
+  const { publicSkills, runtimeConfig, soulProof } = await phaseTelemetry.run(
+    "profile_configuration",
+    async () => {
+      const publicSkills = reconcilePublicHermesSkills({
+        profileId: desired.profileId,
+        profileRoot,
+        dataRoot: DATA_ROOT,
+      });
+      installInternalAdminRuntimeSettings({ desired, profileRoot });
+      const runtimeConfig = writeRuntimeHermesConfig({
+        desired,
+        toolInclude,
+        profileRoot,
+        secrets,
+        claim,
+        trustRootPem,
+      });
+      const soulProof = observeProfileSoul(desired.profileId, {
+        dataRoot: DATA_ROOT,
+      });
+      if (soulProof.ok !== true) {
+        throw new Error("customer_live_soul_loader_proof_rejected");
+      }
+      return { publicSkills, runtimeConfig, soulProof };
+    }
+  );
   const observedSoulRawSha256 = soulProof.rawFileSha256;
-  const memoryCron = await ensureHermesSnapshotCron({
-    profileId: desired.profileId,
-    profileRoot,
-    hermesRoot: DATA_ROOT,
-    hermesCli: HERMES,
-  });
+  const memoryCron = await phaseTelemetry.run("memory_cron", () =>
+    ensureHermesSnapshotCron({
+      profileId: desired.profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+      hermesCli: HERMES,
+    })
+  );
   if (!memoryCron.ok) throw new Error(memoryCron.code);
   const materializerChanged =
     materialized.status !== "REUSED" || memoryCron.status !== "REUSED";
   if (materializerChanged || defaultProfile.changed || publicSkills.changed)
     markHermesSnapshotDirty(profileRoot);
-  const memorySnapshot = await flushHermesSnapshotBeforeServing({
-    client,
-    profileId: desired.profileId,
-    profileRoot,
-    runtimeAuthorityScope,
-  });
+  const memorySnapshot = await phaseTelemetry.run("pre_serving_snapshot", () =>
+    flushHermesSnapshotBeforeServing({
+      client,
+      profileId: desired.profileId,
+      profileRoot,
+      runtimeAuthorityScope,
+    })
+  );
   if (!memorySnapshot.ok) markHermesSnapshotDirty(profileRoot);
   const prove =
     claim.operation.action === "INSTANTIATE"
@@ -3806,50 +3843,60 @@ async function processOperation({
     newAgent: claim.operation.action === "INSTANTIATE",
   };
   await ensureHermesFirstWelcome(welcomeInput);
-  const proof = await prove({
-    action: claim.operation.action,
-    desired,
-    runtimeConfig,
-    secrets,
-    profileDigest: pristineProfile.manifest.profileDigest,
-    runtimeAuthorityScope,
-  });
-  const customerProgramCrons = await ensureHermesCustomerProgramCrons({
-    profileId: desired.profileId,
-    profileRoot,
-    hermesRoot: DATA_ROOT,
-    workspaceId: desired.workspaceId,
-    channelId: desired.defaultChannelId,
-    timezone: desired.customerProgramTimezone,
-    apiUrl: ORIGIN,
-    authorityPath: managedAuthPath(desired.profileId),
-  });
-  if (!customerProgramCrons.ok) throw new Error(customerProgramCrons.code);
-  const onboardingCron = await ensureHermesFirstCampaignOnboardingCron({
-    profileId: desired.profileId,
-    profileRoot,
-    hermesRoot: DATA_ROOT,
-    workspaceId: desired.workspaceId,
-    channelId: desired.defaultChannelId,
+  const proof = await phaseTelemetry.run("slack_serving_proof", () =>
+    prove({
+      action: claim.operation.action,
+      desired,
+      runtimeConfig,
+      secrets,
+      profileDigest: pristineProfile.manifest.profileDigest,
+      runtimeAuthorityScope,
+    })
+  );
+  await phaseTelemetry.run("customer_program_crons", async () => {
+    const customerProgramCrons = await ensureHermesCustomerProgramCrons({
+      profileId: desired.profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+      workspaceId: desired.workspaceId,
+      channelId: desired.defaultChannelId,
+      timezone: desired.customerProgramTimezone,
+      apiUrl: ORIGIN,
+      authorityPath: managedAuthPath(desired.profileId),
+    });
+    if (!customerProgramCrons.ok) throw new Error(customerProgramCrons.code);
+    const onboardingCron = await ensureHermesFirstCampaignOnboardingCron({
+      profileId: desired.profileId,
+      profileRoot,
+      hermesRoot: DATA_ROOT,
+      workspaceId: desired.workspaceId,
+      channelId: desired.defaultChannelId,
+    });
+    if (!onboardingCron.ok) throw new Error(onboardingCron.code);
   });
-  if (!onboardingCron.ok) throw new Error(onboardingCron.code);
   markHermesSnapshotDirty(profileRoot);
-  const onboardingMemorySnapshot = await flushHermesSnapshotBeforeServing({
-    client,
-    profileId: desired.profileId,
-    profileRoot,
-    runtimeAuthorityScope,
-  });
-  const nativeDefaultProfileProof = proof.gatewayReadback?.running
-    ? await proveCustomerRuntimeDefaultSkills({
-        claim,
-        exchange,
+  const onboardingMemorySnapshot = await phaseTelemetry.run(
+    "post_cron_snapshot",
+    () =>
+      flushHermesSnapshotBeforeServing({
         client,
-        gateway: proof.gateway,
-        reattestAuthority,
-        actions: defaultProfile.actions,
         profileId: desired.profileId,
+        profileRoot,
+        runtimeAuthorityScope,
       })
+  );
+  const nativeDefaultProfileProof = proof.gatewayReadback?.running
+    ? await phaseTelemetry.run("native_skill_proof", () =>
+        proveCustomerRuntimeDefaultSkills({
+          claim,
+          exchange,
+          client,
+          gateway: proof.gateway,
+          reattestAuthority,
+          actions: defaultProfile.actions,
+          profileId: desired.profileId,
+        })
+      )
     : { status: "EMPTY", digest: sha256("[]") };
   const receipt = completionReceipt({
     claim,
@@ -3882,17 +3929,21 @@ async function processOperation({
     );
     if (!servingObservation)
       throw new Error("customer_serving_observation_unavailable");
-    const serving = await client.claimTick({
-      leaseSeconds: 60,
-      servingObservation,
-    });
+    const serving = await phaseTelemetry.run("serving_observation", () =>
+      client.claimTick({
+        leaseSeconds: 60,
+        servingObservation,
+      })
+    );
     if (serving?.servingObservationStatus !== "accepted") {
       throw new Error(
         `customer_serving_observation_rejected:${serving?.servingObservationCode ?? serving?.servingObservationStatus ?? "unknown"}`
       );
     }
   }
-  const completed = await client.complete(receipt);
+  const completed = await phaseTelemetry.run("operation_completion", () =>
+    client.complete(receipt)
+  );
   if (completed?.accepted !== true)
     throw new Error("customer_completion_rejected");
   // Native delivery owns the welcome after readiness. A delivery failure must

package/lib/sellable-agent/fly-soul-bridge.mjs

@@ -43,6 +43,10 @@ export const SOUL_PROOF_STATE_UNPROVEN = "UNPROVEN";
 export const SOUL_JOURNAL_SCHEMA_VERSION = "sellable-agent-soul-journal/v1";
 
 const PROFILE_ID = /^[a-z0-9][a-z0-9_-]{0,127}$/;
+// Runtime replacement must never disappear behind an unbounded synchronous
+// flock wait. Ten seconds stays below the operation heartbeat interval and is
+// long enough for the short profile metadata critical sections used here.
+const SOUL_LOCK_ACQUIRE_TIMEOUT_SECONDS = 10;
 const SHA256 = /^[a-f0-9]{64}$/;
 const JOURNAL_LIMIT = 256 * 1024;
 // JSON.stringify may encode one accepted content byte as a six-byte `\uXXXX`
@@ -490,10 +494,21 @@ function openAndLock(paths) {
     ) {
       fail("soul_lock_file_rejected");
     }
-    const locked = spawnSync(FLOCK_EXECUTABLE, ["--exclusive", "3"], {
-      stdio: ["ignore", "ignore", "pipe", fd],
-      encoding: "utf8",
-    });
+    const locked = spawnSync(
+      FLOCK_EXECUTABLE,
+      [
+        "--exclusive",
+        "--timeout",
+        String(SOUL_LOCK_ACQUIRE_TIMEOUT_SECONDS),
+        "3",
+      ],
+      {
+        stdio: ["ignore", "ignore", "pipe", fd],
+        encoding: "utf8",
+        timeout: (SOUL_LOCK_ACQUIRE_TIMEOUT_SECONDS + 2) * 1_000,
+      }
+    );
+    if (locked.status === 1) fail("soul_lock_busy");
     if (locked.status !== 0) fail("soul_lock_failed");
     return fd;
   } catch (error) {

package/lib/sellable-agent/hermes-memory-snapshot.mjs

@@ -450,7 +450,7 @@ function assertHermesMergeRoot(path, { allowMissing = false } = {}) {
 function mergeHermesStateEntries(
   sourceRoot,
   targetRoot,
-  { skippedTopLevelNames = new Set() } = {}
+  { skippedTopLevelNames = new Set(), linkFiles = false } = {}
 ) {
   const merge = (source, target, relativeRoot = "") => {
     for (const name of readdirSync(source)) {
@@ -489,8 +489,25 @@ function mergeHermesStateEntries(
         mkdirSync(to, { mode: stat.mode & 0o777 });
         merge(from, to, relativePath);
       } else if (stat.isFile()) {
-        copyFileSync(from, to);
-        chmodSync(to, stat.mode & 0o777);
+        if (linkFiles) {
+          // Profile replacement happens on one encrypted Fly volume while the
+          // gateway is stopped and the profile lock is held. A hard link keeps
+          // durable Hermes state byte-identical without copying a potentially
+          // large state tree into the new managed profile. The old tree is
+          // unlinked asynchronously after promotion, leaving one live inode.
+          linkSync(from, to);
+          const linked = lstatSync(to);
+          if (
+            !linked.isFile() ||
+            linked.dev !== stat.dev ||
+            linked.ino !== stat.ino
+          ) {
+            throw new Error("hermes_snapshot_merge_link_rejected");
+          }
+        } else {
+          copyFileSync(from, to);
+          chmodSync(to, stat.mode & 0o777);
+        }
       } else if (stat.isFIFO() || stat.isSocket()) {
         // Runtime control FIFOs and Unix sockets are process-local endpoints,
         // not durable Hermes state. A normal Restart can leave one behind
@@ -537,6 +554,33 @@ export function mergeHermesState(
   });
 }
 
+/**
+ * Clone one stopped profile into a same-volume staging directory without
+ * duplicating durable file bytes. Managed files already rendered in the
+ * target win; every other durable file is linked and independently verified.
+ */
+export function linkHermesState(
+  sourceRoot,
+  targetRoot,
+  /** @type {{skipSourceTopLevelNames?:string[]}} */
+  { skipSourceTopLevelNames = [] } = {}
+) {
+  if (!assertHermesMergeRoot(sourceRoot, { allowMissing: true })) return;
+  assertHermesMergeRoot(targetRoot);
+  const source = lstatSync(sourceRoot);
+  const target = lstatSync(targetRoot);
+  if (source.dev !== target.dev) {
+    throw new Error("hermes_snapshot_merge_cross_device_rejected");
+  }
+  mergeHermesStateEntries(sourceRoot, targetRoot, {
+    skippedTopLevelNames: hermesTopLevelNameSet(
+      skipSourceTopLevelNames,
+      "hermes_snapshot_merge_policy_rejected"
+    ),
+    linkFiles: true,
+  });
+}
+
 /**
  * Replace one mutable Hermes subtree while retaining explicitly sealed
  * top-level namespaces in the staged target.

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.756";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.757";
 const MCP_PACKAGE = "@sellable/mcp@0.1.938";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.756" ||
+      pinned.installerPackage !== "@sellable/install@0.1.757" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.938" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -12,6 +12,7 @@ import {
   readdirSync,
   realpathSync,
   renameSync,
+  rm,
   rmSync,
   statfsSync,
   writeFileSync,
@@ -41,6 +42,7 @@ import {
   HERMES_SNAPSHOT_HOOKS,
   HERMES_SNAPSHOT_HOOK_ALLOWLIST_BYTES,
   applyHermesSellableHostedPolicy,
+  linkHermesState,
   mergeHermesState,
 } from "./hermes-memory-snapshot.mjs";
 import { createMcpRuntimeBindingV2 } from "./mcp-runtime-binding.mjs";
@@ -70,8 +72,7 @@ const FINGERPRINT = /^[a-f0-9]{16}$/;
 const PRIVATE_REFERENCE = /^(?:secret|oauth-private):\/\/[A-Za-z0-9/_-]+$/;
 const RAW_SECRET =
   /(?:^|[^A-Za-z0-9])(?:xapp|xoxb|xoxa|sat)_[A-Za-z0-9_-]+|(?:xapp|xoxb|xoxa)-[A-Za-z0-9_-]+|oauth-provider-secret-byte|asec\.v1\./i;
-const NATIVE_SLACK_COPY_MARGIN_BYTES = 64 * 1024 * 1024;
-const NATIVE_SLACK_PEAK_COPY_MULTIPLIER = 2;
+const NATIVE_SLACK_MATERIALIZATION_MARGIN_BYTES = 64 * 1024 * 1024;
 export const SELLABLE_INTERNAL_AGENT_WORKSPACE_ID = "cmj0wv9pe02jx23xdv6wfhg9x";
 const PRESSURE_CACHE_PATHS = Object.freeze([
   [".npm", "_npx"],
@@ -95,20 +96,6 @@ function stableJson(value) {
   return JSON.stringify(value);
 }
 
-function logicalTreeBytes(pathValue) {
-  if (!existsSync(pathValue)) return 0;
-  const entry = lstatSync(pathValue);
-  if (entry.isSymbolicLink()) {
-    throw new Error("native_slack_profile_symlink_rejected");
-  }
-  if (entry.isFile()) return entry.size;
-  if (!entry.isDirectory()) return 0;
-  return readdirSync(pathValue).reduce(
-    (total, name) => total + logicalTreeBytes(join(pathValue, name)),
-    0
-  );
-}
-
 function filesystemAvailableBytes(pathValue) {
   const stats = statfsSync(pathValue);
   return Number(stats.bavail) * Number(stats.bsize);
@@ -124,15 +111,57 @@ function removeWithoutFollowing(pathValue) {
   return true;
 }
 
-function sweepStaleNativeSlackStages(root, profileId) {
+function scheduleNativeSlackTreeRemoval(root, target) {
+  if (dirname(target) !== root || basename(target) === "") {
+    throw new Error("native_slack_profile_cleanup_path_rejected");
+  }
+  let entry;
+  try {
+    entry = lstatSync(target);
+  } catch (error) {
+    if (error?.code === "ENOENT") return false;
+    throw error;
+  }
+  if (entry.isSymbolicLink() || !entry.isDirectory()) {
+    throw new Error("native_slack_profile_cleanup_entry_rejected");
+  }
+  rm(target, { recursive: true, force: true }, (error) => {
+    if (error && error.code !== "ENOENT") {
+      process.stderr.write(
+        `${JSON.stringify({
+          ok: false,
+          code: "native_slack_profile_cleanup_failed",
+          entry: basename(target),
+        })}\n`
+      );
+    }
+  });
+  return true;
+}
+
+function sweepStaleNativeSlackTrees(root, profileId) {
   const prefix = `.${profileId}.`;
-  const suffix = ".staging";
-  let removed = 0;
+  let scheduled = 0;
   for (const name of readdirSync(root)) {
-    if (!name.startsWith(prefix) || !name.endsWith(suffix)) continue;
-    if (removeWithoutFollowing(join(root, name))) removed += 1;
+    if (!name.startsWith(prefix)) continue;
+    const staleRoot = join(root, name);
+    let cleanupRoot = staleRoot;
+    if (name.endsWith(".staging")) {
+      cleanupRoot = join(root, `.${profileId}.${randomUUID()}.cleanup`);
+      try {
+        renameSync(staleRoot, cleanupRoot);
+      } catch (error) {
+        // A cleanup scheduled by the prior operation may still be finishing
+        // after the profile lock is released. Treat that ENOENT as complete.
+        if (error?.code === "ENOENT") continue;
+        throw error;
+      }
+    } else if (!name.endsWith(".cleanup")) {
+      continue;
+    }
+    if (scheduleNativeSlackTreeRemoval(root, cleanupRoot)) scheduled += 1;
   }
-  return removed;
+  return scheduled;
 }
 
 function prunePressureCaches(root) {
@@ -282,7 +311,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.756" ||
+    desired.installerPackage !== "@sellable/install@0.1.757" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.938" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||
@@ -2845,13 +2874,28 @@ export function materializeNativeSlackCustomerProfile({
     root,
     `.${desired.profileId}.${randomUUID()}.staging`
   );
-  const backupRoot = join(root, `.${desired.profileId}.${randomUUID()}.backup`);
+  const backupRoot = join(root, `.${desired.profileId}.materializer-backup`);
   const materialize = () => {
     try {
       if (dirname(activeRoot) !== root || dirname(stagingRoot) !== root) {
         return { ok: false, code: "native_slack_profile_path_rejected" };
       }
-      sweepStaleNativeSlackStages(root, desired.profileId);
+      if (existsSync(backupRoot)) {
+        const backup = lstatSync(backupRoot);
+        if (backup.isSymbolicLink() || !backup.isDirectory()) {
+          throw new Error("native_slack_profile_backup_rejected");
+        }
+        if (!existsSync(activeRoot)) renameSync(backupRoot, activeRoot);
+        else {
+          const staleBackupRoot = join(
+            root,
+            `.${desired.profileId}.${randomUUID()}.cleanup`
+          );
+          renameSync(backupRoot, staleBackupRoot);
+          scheduleNativeSlackTreeRemoval(root, staleBackupRoot);
+        }
+      }
+      sweepStaleNativeSlackTrees(root, desired.profileId);
       const extraProfiles = readdirSync(root).filter((name) => {
         if (name === desired.profileId || name.startsWith(".")) return false;
         const pathValue = join(root, name);
@@ -2890,13 +2934,12 @@ export function materializeNativeSlackCustomerProfile({
         (total, bytes) => total + Buffer.byteLength(bytes),
         Buffer.byteLength(JSON.stringify(nativeSlackManifest(desired, {})))
       );
-      const profileBytes = Math.max(
-        desiredSeedBytes,
-        logicalTreeBytes(activeRoot)
-      );
+      // Replacement links durable same-volume state into staging, so it does
+      // not need another full copy of the profile. Reserve only the managed
+      // seed plus a bounded directory/metadata margin.
+      const profileBytes = desiredSeedBytes;
       const requiredBytes =
-        profileBytes * NATIVE_SLACK_PEAK_COPY_MULTIPLIER +
-        NATIVE_SLACK_COPY_MARGIN_BYTES;
+        profileBytes + NATIVE_SLACK_MATERIALIZATION_MARGIN_BYTES;
       let availableBytes = Number(diskFreeBytes(root));
       if (!Number.isFinite(availableBytes) || availableBytes < 0) {
         throw new Error("native_slack_profile_disk_readback_invalid");
@@ -2938,7 +2981,7 @@ export function materializeNativeSlackCustomerProfile({
         desired,
         soulBytes
       );
-      mergeHermesState(activeRoot, stagingRoot);
+      linkHermesState(activeRoot, stagingRoot);
       repointInternalCronProfileReferences(desired, stagingRoot);
       mergeLiveMutableConfig(activeRoot, stagingRoot);
       if (
@@ -2963,7 +3006,12 @@ export function materializeNativeSlackCustomerProfile({
       renameSync(stagingRoot, activeRoot);
       fsyncDirectory(root);
       if (existsSync(backupRoot)) {
-        rmSync(backupRoot, { recursive: true, force: true });
+        const cleanupRoot = join(
+          root,
+          `.${desired.profileId}.${randomUUID()}.cleanup`
+        );
+        renameSync(backupRoot, cleanupRoot);
+        scheduleNativeSlackTreeRemoval(root, cleanupRoot);
       }
       return {
         ok: true,
@@ -2974,7 +3022,12 @@ export function materializeNativeSlackCustomerProfile({
       };
     } catch (error) {
       if (existsSync(stagingRoot) && !lstatSync(stagingRoot).isSymbolicLink()) {
-        rmSync(stagingRoot, { recursive: true, force: true });
+        const cleanupRoot = join(
+          root,
+          `.${desired.profileId}.${randomUUID()}.cleanup`
+        );
+        renameSync(stagingRoot, cleanupRoot);
+        scheduleNativeSlackTreeRemoval(root, cleanupRoot);
       }
       if (!existsSync(activeRoot) && existsSync(backupRoot)) {
         renameSync(backupRoot, activeRoot);

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.756";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.757";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.938";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.756",
+  "version": "0.1.757",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {