@sellable/install 0.1.766 → 0.1.768-wip.hermes-20260925.4

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.766
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.768-wip.hermes-20260925.4
 ARG MCP_PACKAGE=@sellable/mcp@0.1.941
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-Dhi+r50kwZa0E6iskB7dmDM/kCe9woEExLXxfLg8jf9LSKj86V5AiC0jhpS7euoo/lvY5e9m2a0BlTV9wqFxRQ==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.766" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.768-wip.hermes-20260925.4" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.941" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.766" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.766' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.941') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.768-wip.hermes-20260925.4' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.941') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.766', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.941', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.768-wip.hermes-20260925.4', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.941', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.766` is
+`@sellable/install@0.1.768-wip.hermes-20260925.4` is
 published:
 
 ```sh

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1.7
-ARG HERMES_IMAGE=nousresearch/hermes-agent@sha256:1f983df4d778d46b3c3892d7598c9d57291430a6e35936ebc371ae1e5766699a
+ARG HERMES_IMAGE=nousresearch/hermes-agent@sha256:fca358f12efd65bfaaca05884166f15c0e2788375ca30d77061ac1ebc96452b7
 ARG SLACK_PP_GO_IMAGE=golang@sha256:386d475a660466863d9f8c766fec64d7fdad3edac2c6a05020c09534d71edb4b
 
 FROM ${SLACK_PP_GO_IMAGE} AS slack-pp-cli-builder
@@ -37,8 +37,8 @@ ARG MCP_TRUST_ROOT_FINGERPRINT
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG YAML_VERSION=2.9.0
 ARG AGENT_BROWSER_VERSION=0.26.0
-ARG PLAYWRIGHT_VERSION=1.62.1
-ARG PLAYWRIGHT_BROWSER_REVISION=1234
+ARG PLAYWRIGHT_VERSION=1.63.0
+ARG PLAYWRIGHT_BROWSER_REVISION=1243
 ARG STRIPE_CLI_PACKAGE=@stripe/cli-linux-x64@1.45.0
 ARG STRIPE_CLI_INTEGRITY=sha512-1ZhoPpoweYfynqsvhCLlTjZ7lPz5IKtxqAMT5MBy6zrwLRTP9x0T6r8h/jLYL8lRH1c7zC/6X6/XUu2V+r9Bog==
 ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=1
@@ -217,7 +217,7 @@ RUN set -eux; \
       'const fs=require("fs"); const manifest=JSON.parse(fs.readFileSync("/usr/local/share/sellable-agent/default-profile-bundle/manifest.json")); if(String(manifest.bundleVersion)!==process.argv[1] || manifest.bundleDigest!==process.argv[2]) process.exit(1);' \
       "${DEFAULT_PROFILE_BUNDLE_VERSION}" "${DEFAULT_PROFILE_BUNDLE_DIGEST}" \
     && node --input-type=module -e \
-      'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V0213_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V0213_CONTRACT });' \
+      'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
     && node --input-type=module -e \

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -92,7 +92,7 @@ import {
   ensureHermesOpportunitySequencesCron,
   ensureHermesSnapshotCron,
   markHermesSnapshotDirty,
-  mergeHermesState,
+  linkHermesState,
   migrateLegacyHermesUserState,
   quarantineLegacyLightfieldVenv,
   reconcileHermesSnapshot,
@@ -1326,7 +1326,10 @@ async function materializeAdminProfile({
               }
             );
           }
-          mergeHermesState(profileHome, stageRoot, {
+          // The gateway and endpoint relay are stopped before materialization.
+          // Reuse durable inodes on this volume, as Customer profiles do, so a
+          // large conversation DB cannot exhaust disk during an upgrade.
+          linkHermesState(profileHome, stageRoot, {
             skipSourceTopLevelNames:
               liveSkillsIdentity === null ? [] : ["skills"],
           });
@@ -2943,7 +2946,7 @@ async function flushHermesSnapshot({
       profileId,
       profileRoot,
       hermesRoot: DATA_ROOT,
-      hermesVersion: "0.21.3",
+      hermesVersion: "0.21.5",
       debounceMs: 0,
       operationIdentity,
       upload: ({
@@ -2960,7 +2963,7 @@ async function flushHermesSnapshot({
           {
             archiveDigest,
             archiveBytes,
-            hermesVersion: "0.21.3",
+            hermesVersion: "0.21.5",
             sourceProfileId,
             ...v2,
           },
@@ -3939,13 +3942,13 @@ async function runAdminProduction() {
             profileId: activeLaunch.profile.profile,
             profileRoot: activeLaunch.profile.profileHome,
             hermesRoot: DATA_ROOT,
-            hermesVersion: "0.21.3",
+            hermesVersion: "0.21.5",
             upload: ({ archiveDigest, archiveBytes, sourceProfileId, bytes }) =>
               client.putMemorySnapshot(
                 {
                   archiveDigest,
                   archiveBytes,
-                  hermesVersion: "0.21.3",
+                  hermesVersion: "0.21.5",
                   sourceProfileId,
                 },
                 bytes
@@ -4115,7 +4118,7 @@ async function runAdminProduction() {
             profileId: basename(profileContract.profileHome),
             profileRoot: profileContract.profileHome,
             hermesRoot: DATA_ROOT,
-            hermesVersion: "0.21.3",
+            hermesVersion: "0.21.5",
             fetchLatest: () => client.getMemorySnapshot(),
           })
       );

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1.7
-ARG HERMES_IMAGE=nousresearch/hermes-agent@sha256:1f983df4d778d46b3c3892d7598c9d57291430a6e35936ebc371ae1e5766699a
+ARG HERMES_IMAGE=nousresearch/hermes-agent@sha256:fca358f12efd65bfaaca05884166f15c0e2788375ca30d77061ac1ebc96452b7
 FROM ${HERMES_IMAGE}
 
 USER root
@@ -8,16 +8,16 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.941
 ARG MCP_INTEGRITY=sha512-Dhi+r50kwZa0E6iskB7dmDM/kCe9woEExLXxfLg8jf9LSKj86V5AiC0jhpS7euoo/lvY5e9m2a0BlTV9wqFxRQ==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.766
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.768-wip.hermes-20260925.4
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG YAML_VERSION=2.9.0
-ARG HERMES_VERSION=0.21.3
+ARG HERMES_VERSION=0.21.5
 ARG AGENT_BROWSER_VERSION=0.26.0
 ARG TIRITH_VERSION=0.3.3
-ARG PLAYWRIGHT_VERSION=1.62.1
-ARG PLAYWRIGHT_BROWSER_REVISION=1234
+ARG PLAYWRIGHT_VERSION=1.63.0
+ARG PLAYWRIGHT_BROWSER_REVISION=1243
 ARG TIRITH_ARCHIVE_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2
 ARG DEFAULT_PROFILE_BUNDLE_FIXTURE_VERSION=1
 ARG DEFAULT_PROFILE_BUNDLE_VERSION=4
@@ -114,7 +114,7 @@ RUN set -eux; \
       'const fs=require("fs"); const manifest=JSON.parse(fs.readFileSync("/usr/local/share/sellable-agent/default-profile-bundle/manifest.json")); if(String(manifest.bundleVersion)!==process.argv[1] || manifest.bundleDigest!==process.argv[2]) process.exit(1);' \
       "${DEFAULT_PROFILE_BUNDLE_VERSION}" "${DEFAULT_PROFILE_BUNDLE_DIGEST}" \
     && node --input-type=module -e \
-      'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V0213_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V0213_CONTRACT });' \
+      'import { installHermesAgentBridge, HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT } from "/usr/local/lib/sellable-agent/hermes-bridge.mjs"; installHermesAgentBridge({ sourceRoot: "/opt/hermes", contract: HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT });' \
     && node --input-type=module -e \
       'await import("/usr/local/lib/sellable-agent/fly-runtime-identity.mjs");' \
     && node --input-type=module -e \

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -120,9 +120,9 @@ const RUNTIME_GENERATION = Number(
     "0"
 );
 const BOOT_SESSION_ID = randomUUID();
-const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.3";
+const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.5";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.766";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.768-wip.hermes-20260925.4";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.941";
 export const ENDPOINT_MAX_CONCURRENT_RUNS = 10;
@@ -331,12 +331,18 @@ export function customerRuntimeDoctorFailureCode(
 
 /**
  * @param {string} action
- * @param {{ runtimeAuthorityScope?: "ASSIGNED" | "CANDIDATE" | null }} [options]
+ * @param {{ runtimeAuthorityScope?: "ASSIGNED" | "CANDIDATE" | null, directReadinessProven?: boolean }} [options]
  */
 export function customerRuntimeDoctorRequired(
   action,
-  { runtimeAuthorityScope = null } = {}
+  { runtimeAuthorityScope = null, directReadinessProven = false } = {}
 ) {
+  // A successful provisioned proof checks the pinned binaries, MCP and model
+  // credentials; proveApplication then requires Slack identity/socket and the
+  // authenticated native API. Interactive doctor additionally requires a
+  // default-profile .env and a ~/.local/bin shim that these containers do not
+  // use. Those workstation checks must not reject an otherwise proven restart.
+  if (directReadinessProven) return false;
   // START and candidate promotion already prove the binaries, model auth,
   // Slack identities, gateway, private API, and native skills directly below.
   // Keep the broad interactive diagnostic on assigned-runtime REFRESH only;
@@ -3436,6 +3442,7 @@ async function proveApplication({
   const runtimeEnv = applicationRuntimeEnv({ desired, runtimeConfig, secrets });
   const doctor = customerRuntimeDoctorRequired(action, {
     runtimeAuthorityScope,
+    directReadinessProven: true,
   })
     ? await run(HERMES, ["doctor"], {
         env: runtimeEnv,

package/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs

@@ -14,13 +14,13 @@ const MAX_HISTORY_ITEMS = 64;
 const MAX_EVENT_BYTES = 128 * 1024;
 const MAX_CANONICAL_OUTPUT_BYTES = 48 * 1024;
 const EXACT_FIXTURE_DIGEST =
-  "22e6371bb6cb13c38cb0fcd5b07c20d6e62fe327141d3420513e5935dede5e97";
+  "dc91130958d2d0181843d12b5073aa0df3b36c7d96718e149750aa5f692640ef";
 
 export const HERMES_RUNS_FIXTURE_IDENTITY = Object.freeze({
   schemaVersion: "sellable-hermes-api-capabilities/v1",
   image:
-    "nousresearch/hermes-agent@sha256:1f983df4d778d46b3c3892d7598c9d57291430a6e35936ebc371ae1e5766699a",
-  hermesVersion: "0.21.3",
+    "nousresearch/hermes-agent@sha256:fca358f12efd65bfaaca05884166f15c0e2788375ca30d77061ac1ebc96452b7",
+  hermesVersion: "0.21.5",
   fixtureDigest: EXACT_FIXTURE_DIGEST,
   origin: LOOPBACK_ORIGIN,
   auth: "bearer",
@@ -80,7 +80,7 @@ function normalizedTimestamp(value) {
   ) {
     return value;
   }
-  // Hermes 0.21.3's live /v1/runs implementation emits time.time() seconds,
+  // Hermes 0.21.5's live /v1/runs implementation emits time.time() seconds,
   // even though the captured fixture examples use ISO strings. Normalize that
   // observed wire shape so known tool events do not collapse to UNKNOWN.
   if (
@@ -559,7 +559,7 @@ export function createHermesRunsClient(options = {}) {
       throw transportFailure("SUBMIT_AMBIGUOUS", error);
     }
     const value = await readBounded(response);
-    // Hermes 0.21.3 emits 429 for its concurrency limiter and 503 while the
+    // Hermes 0.21.5 emits 429 for its concurrency limiter and 503 while the
     // gateway is draining. Both responses occur before it allocates a run,
     // so retrying the identical request cannot duplicate a native attempt.
     if (response.status === 429 || response.status === 503) {

package/lib/sellable-agent/fly-customer-worker.mjs

@@ -476,6 +476,12 @@ export function buildNativeHermesLaunch({
       "gateway",
       "run",
       "--replace",
+      // Each Fly Machine owns exactly one profile. Sellable supervises this
+      // foreground child and its credential descriptors; Hermes 0.21.5 must
+      // neither attach it to a host multiplexer nor redirect it to stock s6.
+      "--force",
+      "--no-supervise",
+      "--external-supervisor",
     ]),
     cwd: resolvedProfileRoot,
     env: Object.freeze({

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -1086,7 +1086,7 @@ export function createFlyCustomerControlClient({
     Number.isSafeInteger(value?.archiveBytes) &&
     value.archiveBytes > 0 &&
     value.archiveBytes <= 512 * 1024 * 1024 &&
-    value.hermesVersion === "0.21.3" &&
+    value.hermesVersion === "0.21.5" &&
     /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/.test(value?.sourceProfileId ?? "");
   const boundedSnapshotIdentity = (value) =>
     /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/.test(value ?? "");

package/lib/sellable-agent/hermes-bridge.mjs

@@ -751,6 +751,7 @@ def _sellable_agent_call_meta():
         "HERMES_SESSION_CHAT_ID",
         "HERMES_SESSION_USER_ID",
         "HERMES_SESSION_MESSAGE_ID",
+        "HERMES_CRON_SESSION",
     )
     if any(os.getenv(name) for name in legacy_names):
         raise RuntimeError("Sellable MCP identity must not come from process-global session variables")
@@ -760,11 +761,9 @@ def _sellable_agent_call_meta():
         if not session_id:
             raise RuntimeError("Sellable endpoint MCP calls require a bound Hermes session")
         return {"sellableEndpoint": {"sessionId": session_id}}
-    if platform == "cron":
-        if not session_id:
-            raise RuntimeError("Sellable cron MCP calls require a bound Hermes session")
-        # Native scheduled work uses the existing service credential without a
-        # Slack actor. The serving API still enforces workspace and actor gates.
+    if not platform and get_session_env("HERMES_CRON_SESSION", "").strip() == "1":
+        # Native _CronRunScope clears human routing and sets this task-local flag
+        # (Phase207 ADMIN766 smoke). The API still enforces service/workspace gates.
         return None
     if platform != "slack":
         descriptor_path = os.getenv("SELLABLE_AGENT_TURN_DESCRIPTOR_PATH", "")
@@ -2179,7 +2178,8 @@ def getenv(name, default=""):
 
   if (
     patchKind === "skills-prompt-freshness-v020" ||
-    patchKind === "skills-prompt-freshness-v021"
+    patchKind === "skills-prompt-freshness-v021" ||
+    patchKind === "skills-prompt-freshness-v0215"
   ) {
     let patched = replaceExactlyOnce(
       source,
@@ -2226,6 +2226,28 @@ def getenv(name, default=""):
       ].join("\n"),
       "v0.20 prompt live signature"
     );
+    if (patchKind === "skills-prompt-freshness-v0215") {
+      patched = replaceExactlyOnce(
+        patched,
+        "        _oneshot_prompt_variant(),\n    )\n    snapshot = _load_skills_snapshot(skills_dir)",
+        "        _oneshot_prompt_variant(),\n        live_signature,\n    )\n    snapshot = _load_skills_snapshot(skills_dir)",
+        "v0.21.5 prompt signature cache key"
+      );
+      // Keep upstream oneshot partitions and app-gated cache bypass intact.
+      return replaceExactlyOnce(
+        patched,
+        "    with _SKILLS_PROMPT_CACHE_LOCK:\n        cached = _SKILLS_PROMPT_CACHE.get(cache_key)",
+        [
+          "    global _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE",
+          "    with _SKILLS_PROMPT_CACHE_LOCK:",
+          "        if _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE != live_signature:",
+          "            _SKILLS_PROMPT_CACHE.clear()",
+          "            _SELLABLE_AGENT_SKILLS_PROMPT_SIGNATURE = live_signature",
+          "        cached = _SKILLS_PROMPT_CACHE.get(cache_key)",
+        ].join("\n"),
+        "v0.21.5 prompt cache invalidation"
+      );
+    }
     patched = replaceExactlyOnce(
       patched,
       (patchKind === "skills-prompt-freshness-v021"
@@ -2474,7 +2496,7 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V020_CONTRACT = normalizeContract({
       sourceSha256:
         "8ce75e7f2d999edf6554a8f5a037289c885bc9427263da1cd6e3448e608fe20f",
       patchedSha256:
-        "d220e900e65aba7ec76dad9f9220b0f88e6947d24953384572254f141d91e5f7",
+        "e4bf77633c8333d1f79310768c0824e8eaed87938ec7ffd2478050f12f5d36a6",
     },
     {
       path: "gateway/run.py",
@@ -2549,7 +2571,7 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V021_CONTRACT = normalizeContract({
       "path": "tools/mcp_tool_handlers.py",
       "patchKind": "mcp-tool-endpoint-v021",
       "sourceSha256": "e6af250f0fbfeb12a936c340a46f40f8d40332ed8bbc4eb63fded66e37aaa7bf",
-      "patchedSha256": "9b559cc00a26a546167e9c03aad6827949c10089b0a4127e8d74367a2062dee4"
+      "patchedSha256": "6c4765aad3074b6f8ad6951299edafa36cf536c9a9f0b57a48bdd541e3209790"
     },
     {
       "path": "gateway/run.py",
@@ -2615,7 +2637,7 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V0213_CONTRACT = normalizeContract({
       "path": "tools/mcp_tool_handlers.py",
       "patchKind": "mcp-tool-endpoint-v021",
       "sourceSha256": "c4713aa289c7ca17b53c0ae53ceb6a276321f6d36e259084974e8b5738b6a4dd",
-      "patchedSha256": "e390f44c92d7d3890fd983d93c8e311016519aa65e1c5da419406e10887c6bc1"
+      "patchedSha256": "1bd801ebf1c6e17a0d81899b2ee0401f038ae4d1a493552f021a1b66fccf0e98"
     },
     {
       "path": "gateway/run.py",
@@ -2669,6 +2691,84 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V0213_CONTRACT = normalizeContract({
   "contractDigest": "75b5d16081dd2fdc5795d3b86d341f2ff341bf3c599e4c57de5ec14b3dd63ce0"
 });
 
+export const HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT = normalizeContract({
+  "bridgeId": "sellable-agent-hermes-bridge/v1",
+  "hermesVersion": "0.21.5",
+  "versionFile": {
+    "path": "hermes_cli/__init__.py",
+    "sha256": "d05c98cd44e22781497a20cd968af0d9b8962406b909f1889168c624545b229e"
+  },
+  "files": [
+    {
+      "path": "gateway/config_env.py",
+      "patchKind": "gateway-config-dedicated-v021",
+      "sourceSha256": "5661d9cfb7d798d6c995b03727bdd4018669ae12c96d1e7a8f3c99a3ea85acc7",
+      "patchedSha256": "cd8efa414e0313bca77d0d8093acc505d9f345b8fb48d734821e66027545bf57"
+    },
+    {
+      "path": "plugins/platforms/slack/adapter.py",
+      "patchKind": "slack-adapter-dedicated-v0213",
+      "sourceSha256": "3f2ec0cef97964bf4cb1e9791c0917a03cd1e73bb0bc3293768680cd6302f613",
+      "patchedSha256": "26cedfad352e8dadae82bebcedf8813ef948622a350b392ce99097a8ede2f056"
+    },
+    {
+      "path": "tools/mcp_tool_handlers.py",
+      "patchKind": "mcp-tool-endpoint-v021",
+      "sourceSha256": "d1b4463309a2de351aaf6c7cd8f7a2a1e83f5e26dbe058371c9eeb9d0c567903",
+      "patchedSha256": "61ceab8c24aef50e88d6c1dad1bbf80daed66f8950b05fb642525a62a0bb789c"
+    },
+    {
+      "path": "gateway/run.py",
+      "patchKind": "gateway-session-v021",
+      "sourceSha256": "324f7095223816b865dd68a75dc83bfd1c3d101ac8c1c38dba69026dab2b6af1",
+      "patchedSha256": "4b398b8c033e5aaba90b6ba312baf01e7d88d46a91843e64949ade0b65f2ade8"
+    },
+    {
+      "path": "gateway/run_turn.py",
+      "patchKind": "gateway-first-contact-v0213",
+      "sourceSha256": "5bdee5c82c00e02f664516f9da0af99674e23493ec2a30eff06cb03afc6718a0",
+      "patchedSha256": "0729145f27559df970c16d5be11e01ebce657874e4be1d9e151562042f5208c0"
+    },
+    {
+      "path": "gateway/run_turn_runner.py",
+      "patchKind": "gateway-provider-preflight-v021",
+      "sourceSha256": "216bdca083b7d2bfae481d07bd0791a76834674b3614fd4ee0aafac5c58f30db",
+      "patchedSha256": "7b6beabeed7b78781d142dcdb0eff4c0110263ee173f7696737c4c965e1c72ab"
+    },
+    {
+      "path": "agent/turn_context.py",
+      "patchKind": "turn-context-v021",
+      "sourceSha256": "85f857dc3c317366d918516bc8b37a022f1020b34da0c3966a31bd289b2942e1",
+      "patchedSha256": "a6487c43bc2d21f40e3a86fe31a9a0c2e4e603fff813f7c8429bbf5c22591648"
+    },
+    {
+      "path": "cron/scheduler.py",
+      "patchKind": "cron-scheduler-v020",
+      "sourceSha256": "dcf0e6794a220e478584a21f786b8451b915fc7397d38eda357af1363249fa2a",
+      "patchedSha256": "e98d197ce3d0b414184e3c746fe3814c213407da68ce0a46a8b4dd63a9054a11"
+    },
+    {
+      "path": "tools/skills_tool.py",
+      "patchKind": "skills-cache-freshness-v021",
+      "sourceSha256": "0d47bda41ed9d1ec84856df3d336a42bb94161e89bd9a8b857e76ec76be9f7b7",
+      "patchedSha256": "1bdc17603f3bb9fb34c5d04099dee2ca7d631eedc58b523bcd74d6e946dc9eb7"
+    },
+    {
+      "path": "agent/prompt_builder.py",
+      "patchKind": "skills-prompt-freshness-v0215",
+      "sourceSha256": "64bc77a26641754b8c5ca76fc876687d3c9e81aad7816c2e76ce251a41121526",
+      "patchedSha256": "56edefd92c50f38a3fed8d56b6fc02352f8e5892b43553ab277e3113606d25fb"
+    },
+    {
+      "path": "gateway/platforms/api_server.py",
+      "patchKind": "api-opener-stage-v021",
+      "sourceSha256": "fa83a20bd4f9f3a90a3ac010db0a68f548259587946ea80b81b2f3253bafd5ec",
+      "patchedSha256": "5289cc21e1804d0aaa49b117f32ea1a506375fa76459cdac8f5013f0566d05e1"
+    }
+  ],
+  "contractDigest": "d8b2ee47591435091a81a3e9913ba5acace2f9c1418cf75c0e23b4d0632e4024"
+});
+
 function assertRelativeContractPath(path) {
   if (
     !path ||

package/lib/sellable-agent/hermes-memory-snapshot.mjs

@@ -182,7 +182,7 @@ const LEGACY_HERMES_SNAPSHOT_SCRIPT = "scripts/hermes-memory-reconcile.sh";
 
 const HERMES = "/opt/hermes/.venv/bin/hermes";
 const HERMES_PYTHON = "/opt/hermes/.venv/bin/python";
-const VERSION = "0.21.3";
+const VERSION = "0.21.5";
 const ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
 const BOUNDED_ID = /^[A-Za-z0-9][A-Za-z0-9_./:-]{0,255}$/;
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.766";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.768-wip.hermes-20260925.4";
 const MCP_PACKAGE = "@sellable/mcp@0.1.941";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.766" ||
+      pinned.installerPackage !== "@sellable/install@0.1.768-wip.hermes-20260925.4" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.941" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/model-auth-reconciler.mjs

@@ -211,9 +211,15 @@ function parseMarker(path) {
       marker.models.length < 1 ||
       (marker.version === MARKER_VERSION &&
         (marker.models.length !== CURRENT_OPENROUTER_MODELS.length ||
-          marker.models.some((model, index) =>
-            stableJson(model) !== stableJson(CURRENT_OPENROUTER_MODELS[index])
-          )))
+          marker.models.some((model, index) => {
+            const expected = CURRENT_OPENROUTER_MODELS[index];
+            // Preserve the activated effort during a rolling max -> high update.
+            return index === 0
+              ? !exactKeys(model, MODEL_REASONING_KEYS) ||
+                  model.id !== expected.id ||
+                  !["max", "high"].includes(model.reasoningEffort)
+              : stableJson(model) !== stableJson(expected);
+          })))
     ) {
       return null;
     }
@@ -410,7 +416,7 @@ export function parseModelAuthRuntimeCredential(secret, options = {}) {
       if (
         !exactKeys(model, withReasoning ? MODEL_REASONING_KEYS : MODEL_KEYS) ||
         model.id !== expected.id ||
-        (withReasoning && model.reasoningEffort !== "max")
+        (withReasoning && !["max", "high"].includes(model.reasoningEffort))
       ) {
         fail("model_auth_projection_incomplete");
       }
@@ -450,7 +456,7 @@ export function modelAuthConfigOverlay(credential) {
       ...(credential.value.schemaVersion === MODEL_AUTH_RUNTIME_SCHEMA
         ? {
             reasoning_overrides: Object.freeze({
-              "openai/gpt-5.6-luna": "max",
+              "openai/gpt-5.6-luna": credential.value.openrouter.models[0].reasoningEffort,
             }),
           }
         : {}),
@@ -663,7 +669,7 @@ export function readModelAuthMaterialization({ authStorePath, markerPath }) {
       ? {
           models: Object.freeze(marker.models.map((model) => Object.freeze({ ...model }))),
           reasoningOverrides: Object.freeze({
-            "openai/gpt-5.6-luna": "max",
+            "openai/gpt-5.6-luna": marker.models[0].reasoningEffort,
           }),
         }
       : {}),
@@ -726,6 +732,6 @@ export function modelAuthSelectionObservation(readback) {
     provider,
     modelId,
     reasoningEffort:
-      modelId === "openai/gpt-5.6-luna" ? "max" : MODEL_AUTH_REASONING_EFFORT,
+      readback.reasoningOverrides?.[modelId] ?? MODEL_AUTH_REASONING_EFFORT,
   });
 }

package/lib/sellable-agent/profile-materializer.mjs

@@ -312,7 +312,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.766" ||
+    desired.installerPackage !== "@sellable/install@0.1.768-wip.hermes-20260925.4" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.941" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||
@@ -2566,7 +2566,7 @@ function validateNativeSlackDesired(desired) {
     !SHA256.test(desired.accessPolicyHash ?? "") ||
     !SHA256.test(desired.runtimeDesiredHash ?? "") ||
     !FINGERPRINT.test(desired.apiServerKeyFingerprint ?? "") ||
-    desired.hermesVersion !== "0.21.3" ||
+    desired.hermesVersion !== "0.21.5" ||
     !/^@sellable\/install@\d+\.\d+\.\d+(?:[-.A-Za-z0-9]+)?$/.test(
       desired.installerPackage ?? ""
     ) ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.766";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.768-wip.hermes-20260925.4";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.941";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.766",
+  "version": "0.1.768-wip.hermes-20260925.4",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {