@sellable/install 0.1.761 → 0.1.762

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.761
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.762
 ARG MCP_PACKAGE=@sellable/mcp@0.1.940
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-tdOI35yXq3VzfaN47RJfbuzopzfgrPw/66eM6rMDa+NOrt9nM0UmFjL59dj9lDg7rv8Ryl41EeYsysrF5c+OqA==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.761" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.762" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.940" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.761" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.761' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.940') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.762' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.940') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.761', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.940', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.762', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.940', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.761` is
+`@sellable/install@0.1.762` is
 published:
 
 ```sh

package/lib/sellable-agent/default-profile-reconciler.mjs

@@ -37,6 +37,24 @@ const ADMIN_MATERIALIZER_ANCHOR = "skills/sellable-admin/SKILL.md";
 const ADMIN_NAMESPACE_RECEIPT_SCHEMA =
   "sellable-admin-skill-namespace-receipt/v1";
 
+// Immutable shared skill bytes shipped at 9878ec7a (@sellable/install 0.1.758).
+// A partial upgrade can leave these legacy copies outside its older receipt.
+// Operation d99cebfe proved that Hermes rejects their duplicate native names.
+// Only these known bytes, current bundle bytes, or receipt-proven bytes may
+// be retired; unknown customer content must still fail closed.
+const LEGACY_PUBLIC_SKILL_DIGESTS = Object.freeze({
+  "create-campaign":
+    "0c1e7d514f6ff15c433fe6e9625c3b226ac9cd0add8e0590b10ca99ef0fa427b",
+  "refill-sends":
+    "2d0896a8024e0a3fee0ff8cf040ea6acdc8bca3292cddb48b41b4ac9f4b4065a",
+  "campaign-daily-review":
+    "2b0abf90d283835362d81bdcbd1759cbd2bc1048bddee3f2805466882f55320e",
+  "campaign-daily-results":
+    "bd12c54601285819cc70e54f0e41a04aba4a072664c1ce7a425d4be62188780c",
+  "campaign-weekly-review":
+    "09690edac84758ee3d874791d6235874577ac7d300192ef30328f003b641083d",
+});
+
 const legacyManagedSkillPath = (entry) =>
   `skills/sellable-defaults/${entry.id}/SKILL.md`;
 const canonicalPublicSkillPath = (entry) =>
@@ -592,7 +610,7 @@ export async function reconcileDefaultProfileBundle({
           ) {
             throw new Error("default_profile_receipt_rejected");
           }
-          if (priorPath === legacyPath && legacyPath !== entry.path) {
+          if (publicDirectory && legacyPath !== entry.path) {
             const legacySkillPath = join(profileRoot, ...legacyPath.split("/"));
             const candidateLegacyDirectory = dirname(legacySkillPath);
             if (existsSync(candidateLegacyDirectory)) {
@@ -613,10 +631,15 @@ export async function reconcileDefaultProfileBundle({
                 }
                 rmSync(stage);
               }
+              if (!existsSync(legacySkillPath))
+                throw new Error("default_profile_skill_collision");
+              const legacySha256 = sha256(
+                readRegular(legacySkillPath, 64 * 1024)
+              );
               if (
-                !existsSync(legacySkillPath) ||
-                sha256(readRegular(legacySkillPath, 64 * 1024)) !==
-                  priorEntry.sha256
+                legacySha256 !== entry.sha256 &&
+                legacySha256 !== priorEntry?.sha256 &&
+                legacySha256 !== LEGACY_PUBLIC_SKILL_DIGESTS[entry.id]
               ) {
                 throw new Error("default_profile_skill_collision");
               }
@@ -633,7 +656,10 @@ export async function reconcileDefaultProfileBundle({
             } else if (priorEntry?.sha256 === current) status = "UPDATED";
             else throw new Error("default_profile_skill_collision");
           }
-          if (priorPath !== null && priorPath !== entry.path)
+          if (
+            legacyDirectory ||
+            (priorPath !== null && priorPath !== entry.path)
+          )
             status = "UPDATED";
           skillPlans.set(entry.id, {
             directory,

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -8,7 +8,7 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.940
 ARG MCP_INTEGRITY=sha512-tdOI35yXq3VzfaN47RJfbuzopzfgrPw/66eM6rMDa+NOrt9nM0UmFjL59dj9lDg7rv8Ryl41EeYsysrF5c+OqA==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.761
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.762
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -122,7 +122,7 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.3";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.761";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.762";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.940";
 export const ENDPOINT_MAX_CONCURRENT_RUNS = 10;

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.761";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.762";
 const MCP_PACKAGE = "@sellable/mcp@0.1.940";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.761" ||
+      pinned.installerPackage !== "@sellable/install@0.1.762" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.940" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -312,7 +312,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.761" ||
+    desired.installerPackage !== "@sellable/install@0.1.762" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.940" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.761";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.762";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.940";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.761",
+  "version": "0.1.762",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {