@sellable/install 0.1.799 → 0.1.801

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.799
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.801
 ARG MCP_PACKAGE=@sellable/mcp@0.1.957
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-tIZuO5IEanT/afamDIWdorUNMdqZA6xnjL9jGAmGqYIlIqkXdHB9slWiwfLfmM44iEp7OT98IBHJlvbpMThk6A==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.799" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.801" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.957" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.799" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.799' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.957') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.801' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.957') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.799', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.957', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.801', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.957', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.799` is
+`@sellable/install@0.1.801` is
 published:
 
 ```sh

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -8,7 +8,7 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.957
 ARG MCP_INTEGRITY=sha512-tIZuO5IEanT/afamDIWdorUNMdqZA6xnjL9jGAmGqYIlIqkXdHB9slWiwfLfmM44iEp7OT98IBHJlvbpMThk6A==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.799
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.801
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/claude-code-runs-api.d.mts

@@ -58,7 +58,8 @@ export function validateClaudeRunsRequest(
 export function endpointToolNames(options: {
   turnDescriptorPath: string;
   sessionId: string;
-  toolEndpointIds: string[];
+  /** Absent: every run gets the tools its own turn descriptor allows. */
+  toolEndpointIds?: string[];
 }): string[] | null;
 export function claudeInvocation(
   request: ClaudeRunsRequest,

package/lib/sellable-agent/fly-customer-image/claude-code-runs-api.mjs

@@ -100,15 +100,17 @@ export function validateClaudeRunsRequest(body, models) {
 }
 
 /**
- * A tool-lane run's own allowed tools, read from the signed turn descriptor
- * the runtime installed for its session before submitting; null when the run
- * is not on a tool endpoint. This only narrows: the context proxy verifies the
- * descriptor itself before it lists or calls any tool.
+ * A run's own allowed tools, read from the signed turn descriptor the runtime
+ * installed for its session before submitting. With a tool list, only runs on
+ * those endpoints get tools (and must have some); without one, every run gets
+ * exactly the tools its descriptor allows, and a run allowed none is tool-free
+ * (null). This only narrows: the context proxy verifies the descriptor itself
+ * before it lists or calls any tool.
  */
 export function endpointToolNames({
   turnDescriptorPath,
   sessionId,
-  toolEndpointIds,
+  toolEndpointIds = undefined,
 }) {
   const path = endpointMcpDescriptorPath(turnDescriptorPath, sessionId);
   if (!path) return null;
@@ -120,18 +122,19 @@ export function endpointToolNames({
     throw error;
   }
   const body = JSON.parse(readFileSync(path, "utf8"))?.body;
-  if (!toolEndpointIds.includes(body?.endpointId)) return null;
-  const names = body.allowedToolNames;
+  if (toolEndpointIds && !toolEndpointIds.includes(body?.endpointId))
+    return null;
+  const names = body?.allowedToolNames;
   if (
     endpointHermesSessionId(body) !== sessionId ||
     !Array.isArray(names) ||
-    !names.length ||
+    (toolEndpointIds && !names.length) ||
     names.some(
       (name) => typeof name !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(name)
     )
   )
     throw new Error("claude_runs_tool_descriptor_rejected");
-  return [...names];
+  return names.length ? [...names] : null;
 }
 
 export function claudeInvocation(
@@ -266,6 +269,7 @@ export function claudeAccountDirs(root) {
 
 const MONTHS = "janfebmaraprmayjunjulaugsepoctnovdec";
 const USAGE_LIMIT_RETRY_MS = 15 * 60_000;
+const SIGN_IN_TRUST_MS = 5 * 60_000;
 
 // Claude Code reports a used-up plan as an API 429 result, for example
 // "You've hit your weekly limit · resets Oct 7, 10am (UTC)". Returns when that
@@ -476,6 +480,31 @@ export function createClaudeRunsApi({
   const usageLimitedUntil = new Map();
   const resting = (configDir) =>
     (usageLimitedUntil.get(configDir) ?? 0) > now();
+  // `claude auth status` starts a whole CLI: on the 4-CPU Admin machine seven
+  // at once take longer than its 8s timeout. Runs that arrive together share
+  // one check, a good answer is trusted for five minutes, and only a definite
+  // SIGN_IN_REQUIRED keeps a run off an account; an unanswered check runs and
+  // lets the CLI itself fail the run if the sign-in is really gone.
+  const signedInAt = new Map();
+  const signInChecks = new Map();
+  const signInState = (configDir) => {
+    if (now() - (signedInAt.get(configDir) ?? -Infinity) < SIGN_IN_TRUST_MS)
+      return Promise.resolve("READY");
+    let check = signInChecks.get(configDir);
+    if (!check) {
+      check = Promise.resolve()
+        .then(() => checkAuthentication(configDir))
+        .catch(() => "UNAVAILABLE")
+        .then((state) => {
+          signInChecks.delete(configDir);
+          if (state === "READY") signedInAt.set(configDir, now());
+          else signedInAt.delete(configDir);
+          return state;
+        });
+      signInChecks.set(configDir, check);
+    }
+    return check;
+  };
   const runOnAccounts = (request) => {
     let activeRun;
     let stopped = false;
@@ -487,13 +516,10 @@ export function createClaudeRunsApi({
             failure = "claude_runs_usage_limited";
             continue;
           }
-          const state = await checkAuthentication(configDir);
+          const state = await signInState(configDir);
           if (stopped) throw new Error("claude_runs_cancelled");
-          if (state !== "READY") {
-            failure ??=
-              state === "SIGN_IN_REQUIRED"
-                ? "claude_runs_sign_in_required"
-                : "claude_runs_auth_check_unavailable";
+          if (state === "SIGN_IN_REQUIRED") {
+            failure ??= "claude_runs_sign_in_required";
             continue;
           }
           activeRun = startRun(request, {
@@ -503,8 +529,10 @@ export function createClaudeRunsApi({
           try {
             return await activeRun.promise;
           } catch (error) {
-            if (stopped || error.message !== "claude_runs_usage_limited")
+            if (stopped || error.message !== "claude_runs_usage_limited") {
+              signedInAt.delete(configDir);
               throw error;
+            }
             usageLimitedUntil.set(configDir, error.retryAt);
             failure = "claude_runs_usage_limited";
           }
@@ -528,9 +556,7 @@ export function createClaudeRunsApi({
         retryAts.push(usageLimitedUntil.get(configDir));
         continue;
       }
-      const state = await checkAuthentication(configDir).catch(
-        () => "UNAVAILABLE"
-      );
+      const state = await signInState(configDir);
       if (state === "READY") ready++;
       if (state === "SIGN_IN_REQUIRED") signedOut++;
     }
@@ -552,7 +578,7 @@ export function createClaudeRunsApi({
   };
   // The run's own tools and the profile's MCP server, or null for a tool-free run.
   const resolveTools = (request) => {
-    if (!connection.toolEndpointIds || !toolLanes) return null;
+    if (!toolLanes) return null;
     const names = endpointToolNames({
       turnDescriptorPath: toolLanes.turnDescriptorPath,
       sessionId: request.sessionId,
@@ -644,7 +670,7 @@ export function createClaudeRunsApi({
       });
     }
     if (req.method === "POST" && req.url === "/v1/runs") {
-      if (full("plain") && (!connection.toolEndpointIds || full("tools")))
+      if (full("plain") && (!toolLanes || full("tools")))
         return json(res, 429, { error: "claude_runs_busy" });
       let request;
       try {

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -126,7 +126,7 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.5";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.799";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.801";
 const MCP_PACKAGE =
   process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.957";
 export const ENDPOINT_MAX_CONCURRENT_RUNS = 10;

package/lib/sellable-agent/fly-customer-image/runs-api-connections.d.mts

@@ -5,7 +5,8 @@ export type RunsApiConnection = Readonly<{
   agentId: string;
   baseUrl: string;
   apiKeyFile: string;
-  endpointIds: string[];
+  /** Absent: serves every endpoint of its agent. */
+  endpointIds?: string[];
   workKinds: Array<"STANDARD" | "OPENER" | "REPLY" | "FOLLOW_UP">;
   models: Array<{
     provider: string;
@@ -19,6 +20,10 @@ export type RunsApiConnection = Readonly<{
   structuredOutputs?: boolean;
 }>;
 export function runsApiConnectionId(connection: RunsApiConnection): string;
+export function runsApiConnectionServesEndpoint(
+  connection: RunsApiConnection,
+  endpointId: string
+): boolean;
 export function parseRunsApiConnections(raw: unknown): RunsApiConnection[];
 export function runsApiConnectionsForRuntime(
   raw: unknown,

package/lib/sellable-agent/fly-customer-image/runs-api-connections.mjs

@@ -76,10 +76,12 @@ export function parseRunsApiConnections(raw) {
       entry.apiKeyFile
         .split("/")
         .some((part) => part === "." || part === "..") ||
-      !Array.isArray(entry.endpointIds) ||
-      !entry.endpointIds.length ||
-      entry.endpointIds.length > 64 ||
-      !entry.endpointIds.every(id) ||
+      // Absent: the connection serves every endpoint of its agent.
+      (entry.endpointIds !== undefined &&
+        (!Array.isArray(entry.endpointIds) ||
+          !entry.endpointIds.length ||
+          entry.endpointIds.length > 64 ||
+          !entry.endpointIds.every(id))) ||
       !Array.isArray(entry.workKinds) ||
       !entry.workKinds.length ||
       !entry.workKinds.every((kind) =>
@@ -138,24 +140,29 @@ export function parseRunsApiConnections(raw) {
       )
         fail();
     }
-    // Runs on these endpoints get their own allowed tools from the image-owned
-    // service; every other run stays tool-free.
+    // When present, only runs on these endpoints get their own allowed tools
+    // from the image-owned service. When absent, a run gets the tools its own
+    // signed turn descriptor allows, and a run allowed none stays tool-free.
     if (
       entry.toolEndpointIds !== undefined &&
       (entry.localRoot === undefined ||
         !Array.isArray(entry.toolEndpointIds) ||
         !entry.toolEndpointIds.length ||
+        !entry.toolEndpointIds.every(id) ||
         new Set(entry.toolEndpointIds).size !== entry.toolEndpointIds.length ||
-        entry.toolEndpointIds.some(
-          (value) => !entry.endpointIds.includes(value)
-        ))
+        (entry.endpointIds !== undefined &&
+          entry.toolEndpointIds.some(
+            (value) => !entry.endpointIds.includes(value)
+          )))
     )
       fail();
     return Object.freeze({
       ...entry,
       baseUrl,
       models,
-      endpointIds: [...entry.endpointIds],
+      ...(entry.endpointIds === undefined
+        ? {}
+        : { endpointIds: [...entry.endpointIds] }),
       workKinds: [...entry.workKinds],
       ...(entry.toolEndpointIds === undefined
         ? {}
@@ -164,6 +171,14 @@ export function parseRunsApiConnections(raw) {
   });
 }
 
+/** Whether a trusted connection may serve runs of this endpoint. */
+export function runsApiConnectionServesEndpoint(connection, endpointId) {
+  return (
+    connection.endpointIds === undefined ||
+    connection.endpointIds.includes(endpointId)
+  );
+}
+
 export function runsApiConnectionId(connection) {
   return `runs_${createHash("sha256")
     .update(
@@ -210,7 +225,7 @@ export function createConfiguredRunsClient({
   if (
     !connection ||
     env.SELLABLE_RUNTIME_ID !== connection.runtimeId ||
-    !connection.endpointIds.includes(claim.attempt.endpointId) ||
+    !runsApiConnectionServesEndpoint(connection, claim.attempt.endpointId) ||
     !connection.workKinds.includes(workKind) ||
     !connection.models.some(
       (allowed) =>

package/lib/sellable-agent/fly-customer-image/runs-api-health-check.mjs

@@ -7,6 +7,7 @@ import {
   createConfiguredRunsClient,
   RUNS_API_CONNECTIONS_ENV,
   runsApiConnectionId,
+  runsApiConnectionServesEndpoint,
   runsApiConnectionsForRuntime,
 } from "./runs-api-connections.mjs";
 
@@ -35,7 +36,7 @@ export async function checkRunsApiConnection(
   ).find(
     (candidate) =>
       runsApiConnectionId(candidate) === request.connectionId &&
-      candidate.endpointIds.includes(request.endpointId)
+      runsApiConnectionServesEndpoint(candidate, request.endpointId)
   );
   if (!connection) return result("NOT_CONFIGURED");
   try {
@@ -47,10 +48,12 @@ export async function checkRunsApiConnection(
       {
         headers: {
           authorization: `Bearer ${token}`,
-          ...(connection.protocol?.startsWith("openai-") ? {} : {
-            "x-sellable-workspace-id": connection.workspaceId,
-            "x-sellable-agent-id": connection.agentId,
-          }),
+          ...(connection.protocol?.startsWith("openai-")
+            ? {}
+            : {
+                "x-sellable-workspace-id": connection.workspaceId,
+                "x-sellable-agent-id": connection.agentId,
+              }),
         },
         redirect: "error",
         signal: AbortSignal.timeout(12_000),
@@ -141,7 +144,10 @@ export async function verifyRunsApiSelection(
         runsApiConnectionId(item) === request.connectionId &&
         item.baseUrl === selection.runsApiBaseUrl
     );
-    if (!connection?.endpointIds.includes(request.endpointId))
+    if (
+      !connection ||
+      !runsApiConnectionServesEndpoint(connection, request.endpointId)
+    )
       return result("NOT_CONFIGURED");
     verificationWorkKind = connection.workKinds.includes("STANDARD")
       ? "STANDARD"
@@ -177,10 +183,13 @@ export async function verifyRunsApiSelection(
           },
         })
       : makeDefaultClient({ apiKeyFile });
+    // A fresh token per check. Claude Opus 5.5 answers one fixed string
+    // ("SELLABLE_CONNECTION_OK") with nothing, so Claude Code fell back to
+    // another model and every Claude Code verification failed.
+    const token = `ready-${randomUUID().replaceAll("-", "").slice(0, 8)}`;
     const compiled = {
-      input: "Connection verification. Reply with SELLABLE_CONNECTION_OK.",
-      instructions:
-        "This is a connection check. Do not use tools or take actions. Return exactly SELLABLE_CONNECTION_OK and nothing else.",
+      input: `Connection verification. Reply with ${token}.`,
+      instructions: `This is a connection check. Do not use tools or take actions. Return exactly ${token} and nothing else.`,
       conversationHistory: [],
       correlation: `connection-check-${randomUUID()}`,
       ...(selection ? { modelSelection: selection } : {}),
@@ -197,7 +206,7 @@ export async function verifyRunsApiSelection(
     if (
       status.status !== "completed" ||
       typeof status.output !== "string" ||
-      status.output.trim() !== "SELLABLE_CONNECTION_OK" ||
+      status.output.trim() !== token ||
       !served
     )
       return result("UNAVAILABLE");

package/lib/sellable-agent/hermes-memory-snapshot.mjs

@@ -16,10 +16,8 @@ import {
   readdirSync,
   renameSync,
   rmSync,
-  statfsSync,
   writeFileSync,
 } from "node:fs";
-import { tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, resolve } from "node:path";
 import { promisify } from "node:util";
 import { parseDocument } from "yaml";
@@ -213,18 +211,11 @@ export const HERMES_SNAPSHOT_MAX_ARCHIVE_BYTES = 512 * 1024 * 1024;
 const MAX_PLUGIN_DATA_BYTES = 10 * 1024 * 1024;
 const MAX_PORTABLE_EXTERNAL_BYTES = 32 * 1024 * 1024;
 const MAX_PORTABLE_CONFIG_BYTES = 64 * 1024;
-// Portable snapshots contain user-authored/customizable state plus the compact
-// Hermes session database and routing records required to continue an existing
-// Slack thread after a Machine/volume migration. If native Hermes cannot
-// package that bounded set within two minutes, abort the helper and let the
-// persistent retry scheduler back off instead of contending with the live
-// Slack gateway for a full ten minutes.
+// Portable snapshots contain only state that compounds (see
+// HERMES_SNAPSHOT_USER_STATE_ENTRIES), a few megabytes. If native Hermes cannot
+// package that within two minutes, abort the helper and let the persistent
+// retry scheduler back off instead of contending with the live Slack gateway.
 const NATIVE_COMMAND_TIMEOUT_MS = 120_000;
-// A healthy established Admin state DB can exceed 500 MiB. Keep compaction
-// bounded inside the 15-minute Upgrade backup stage without killing SQLite's
-// final VACUUM on shared Fly CPU.
-const STATE_DB_COMPACTION_TIMEOUT_MS = 600_000;
-export const HERMES_SNAPSHOT_CRON_SESSION_RETENTION_HOURS = 48;
 const TRANSIENT_PROFILE_ROOTS = new Set([
   ".artifact-venv",
   ".cache",
@@ -259,11 +250,11 @@ export function isHermesTransientProfilePath(relativePath) {
     TRANSIENT_PROFILE_PATHS.has(relativePath)
   );
 }
-// The encrypted Fly volume remains the authoritative full profile. The
-// portable disaster-recovery archive also carries state.db and sessions so a
-// replacement volume retains chat history and Slack thread routing. Caches,
-// dependency trees, secrets, and live logs remain excluded.
-export const HERMES_SNAPSHOT_USER_STATE_ENTRIES = Object.freeze([
+// Durable profile entries the pre-profile layout kept directly under
+// HERMES_HOME. The one-time legacy move carries all of them, run history
+// included, because it moves live state on the volume rather than packing a
+// recovery archive.
+const HERMES_LEGACY_USER_STATE_ENTRIES = Object.freeze([
   "AGENTS.md",
   "SOUL.md",
   "artifacts",
@@ -286,6 +277,26 @@ export const HERMES_SNAPSHOT_USER_STATE_ENTRIES = Object.freeze([
   "state.db",
   "workspace",
 ]);
+// The encrypted Fly volume remains the authoritative full profile and keeps
+// everything across an in-place Upgrade. The portable archive, used only to
+// rebuild an Agent on a replacement volume, carries just the state that
+// compounds: who the Agent is (SOUL, AGENTS), what it remembers, the skills it
+// learned, its scheduled work (cron and the scripts cron runs), hooks and
+// plugins. Run history (state.db, sessions), task boards and scratch areas
+// never travel: a rebuilt Agent starts fresh conversations with all of the
+// above. Caches, dependency trees, secrets and live logs remain excluded.
+export const HERMES_SNAPSHOT_USER_STATE_ENTRIES = Object.freeze([
+  "AGENTS.md",
+  "SOUL.md",
+  "cron",
+  "hooks",
+  "memories",
+  "memory",
+  "plugin-data",
+  "plugins",
+  "scripts",
+  "skills",
+]);
 export const HERMES_SNAPSHOT_RETRY_BACKOFF_MS = Object.freeze([
   15 * 60_000,
   60 * 60_000,
@@ -998,272 +1009,6 @@ const childRunner = (runChild) => runChild ?? runBoundedHermesChild;
 const childFailed = (result) =>
   result?.exitCode !== 0 || result?.timedOut || result?.outputLimitExceeded;
 
-const STATE_DB_COMPACTION_SCRIPT = String.raw`
-import json
-import os
-import sqlite3
-import sys
-import time
-
-source_path, target_path = sys.argv[1], sys.argv[2]
-retention_hours = int(sys.argv[3])
-# VACUUM INTO writes one consistent, compact copy of the live pages only, so
-# space the live database has freed never travels with the backup.
-source = sqlite3.connect("file:" + source_path + "?mode=ro", uri=True)
-try:
-    source.execute("VACUUM INTO ?", (target_path,))
-finally:
-    source.close()
-destination = sqlite3.connect(target_path)
-
-try:
-    if destination.execute("PRAGMA quick_check").fetchone()[0] != "ok":
-        raise RuntimeError("source backup failed quick_check")
-    destination.execute("PRAGMA foreign_keys=ON")
-    table_names = {
-        row[0]
-        for row in destination.execute(
-            "SELECT name FROM sqlite_master WHERE type='table'"
-        )
-    }
-    pruned_sessions = 0
-    pruned_messages = 0
-    if {"sessions", "messages"}.issubset(table_names):
-        cutoff = time.time() - retention_hours * 60 * 60
-        session_columns = {
-            row[1] for row in destination.execute("PRAGMA table_info(sessions)")
-        }
-        pinned_clause = (
-            "AND COALESCE(pinned, 0) = 0" if "pinned" in session_columns else ""
-        )
-        destination.execute(
-            "CREATE TEMP TABLE snapshot_pruned_sessions(id TEXT PRIMARY KEY)"
-        )
-        destination.execute(
-            "WITH RECURSIVE doomed(id) AS ("
-            # Hermes never ends an endpoint run's (api_server) session; past
-            # the retention it is as finished as an ended cron session.
-            " SELECT id FROM sessions"
-            " WHERE ((source = 'cron' AND ended_at IS NOT NULL)"
-            " OR source = 'api_server')"
-            " AND COALESCE(last_activity_at, ended_at, started_at) < ? "
-            + pinned_clause
-            + " UNION"
-            " SELECT child.id FROM sessions child"
-            " JOIN doomed parent ON child.parent_session_id = parent.id"
-            ") INSERT OR IGNORE INTO snapshot_pruned_sessions(id)"
-            " SELECT id FROM doomed",
-            (cutoff,),
-        )
-        pruned_sessions = destination.execute(
-            "SELECT COUNT(*) FROM snapshot_pruned_sessions"
-        ).fetchone()[0]
-        pruned_messages = destination.execute(
-            "SELECT COUNT(*) FROM messages WHERE session_id IN "
-            "(SELECT id FROM snapshot_pruned_sessions)"
-        ).fetchone()[0]
-        destination.execute(
-            "DELETE FROM messages WHERE session_id IN "
-            "(SELECT id FROM snapshot_pruned_sessions)"
-        )
-        if "session_model_usage" in table_names:
-            destination.execute(
-                "DELETE FROM session_model_usage WHERE session_id IN "
-                "(SELECT id FROM snapshot_pruned_sessions)"
-            )
-        destination.execute(
-            "DELETE FROM sessions WHERE id IN "
-            "(SELECT id FROM snapshot_pruned_sessions)"
-        )
-        if "system_prompts" in table_names:
-            destination.execute(
-                "DELETE FROM system_prompts WHERE NOT EXISTS ("
-                " SELECT 1 FROM sessions"
-                " WHERE sessions.system_prompt_hash = system_prompts.hash"
-                ")"
-            )
-        destination.commit()
-    if pruned_sessions:
-        for table in ("messages_fts", "messages_fts_trigram", "messages_fts_cjk"):
-            if table in table_names:
-                destination.execute(
-                    'INSERT INTO "' + table + '" ("' + table + '") VALUES (\'optimize\')'
-                )
-        destination.commit()
-        destination.execute("VACUUM")
-    if destination.execute("PRAGMA quick_check").fetchone()[0] != "ok":
-        raise RuntimeError("compacted backup failed quick_check")
-    if destination.execute("PRAGMA foreign_key_check").fetchone() is not None:
-        raise RuntimeError("compacted backup failed foreign_key_check")
-finally:
-    destination.close()
-
-os.chmod(target_path, 0o600)
-print(json.dumps({
-    "ok": True,
-    "prunedSessions": pruned_sessions,
-    "prunedMessages": pruned_messages,
-    "retentionHours": retention_hours,
-    "archiveStateBytes": os.path.getsize(target_path),
-}, separators=(",", ":")))
-`;
-
-// Room the volume keeps after the compact copy lands, so a backup never
-// leaves the live gateway without space to write.
-const STATE_DB_VOLUME_HEADROOM_BYTES = 64 * 1024 * 1024;
-
-function freeBytesAt(directory) {
-  const stats = statfsSync(directory);
-  return stats.bavail * stats.bsize;
-}
-
-const compactionFailure = (reason) =>
-  new Error("hermes_snapshot_state_db_compaction_failed", { cause: reason });
-
-// A bounded reason for the operator log; never the child's raw output.
-function compactionChildFailureReason(result) {
-  if (result?.timedOut) return "timeout";
-  if (result?.outputLimitExceeded) return "output_limit";
-  const stderr = String(result?.stderr ?? "");
-  if (/database or disk is full|No space left on device/i.test(stderr)) {
-    return "disk_full";
-  }
-  if (/quick_check|foreign_key_check/.test(stderr)) return "integrity";
-  if (/sqlite3\.\w*Error/.test(stderr)) return "sqlite_error";
-  return "child_failed";
-}
-
-export async function compactHermesSnapshotStateDb({
-  sourcePath,
-  targetPath,
-  retentionHours = HERMES_SNAPSHOT_CRON_SESSION_RETENTION_HOURS,
-  hermesPython = HERMES_PYTHON,
-  scratchDirectory = tmpdir(),
-  volumeFreeBytes = freeBytesAt,
-  runChild = /** @type {typeof runBoundedHermesChild | undefined} */ (
-    undefined
-  ),
-}) {
-  if (
-    !isAbsolute(sourcePath) ||
-    !isAbsolute(targetPath) ||
-    !isAbsolute(scratchDirectory) ||
-    resolve(sourcePath) === resolve(targetPath) ||
-    !existsSync(sourcePath) ||
-    existsSync(targetPath) ||
-    !existsSync(scratchDirectory) ||
-    !Number.isSafeInteger(retentionHours) ||
-    retentionHours < 1 ||
-    retentionHours > 30 * 24
-  ) {
-    throw new Error("hermes_snapshot_state_db_compaction_rejected");
-  }
-  regularFile(sourcePath);
-  const scratchStat = lstatSync(scratchDirectory);
-  if (scratchStat.isSymbolicLink() || !scratchStat.isDirectory()) {
-    throw new Error("hermes_snapshot_state_db_compaction_rejected");
-  }
-  mkdirSync(dirname(targetPath), { recursive: true, mode: 0o700 });
-  let scratchRoot;
-  let finalTemporaryPath;
-  let targetCreated = false;
-  try {
-    // Keep SQLite's destination plus VACUUM journal on the Machine's
-    // ephemeral root filesystem. Building both beside the protected staging
-    // tree can briefly require multiple full state.db copies on the small
-    // persistent Fly volume and strand an otherwise healthy Upgrade at
-    // BACKING_UP with ENOSPC. Only the verified compact database crosses back
-    // onto the volume.
-    scratchRoot = mkdtempSync(
-      join(scratchDirectory, ".sellable-hermes-state-db-")
-    );
-    chmodSync(scratchRoot, 0o700);
-    const scratchTargetPath = join(scratchRoot, "state.db");
-    const result = await childRunner(runChild)({
-      command: hermesPython,
-      args: [
-        "-c",
-        STATE_DB_COMPACTION_SCRIPT,
-        sourcePath,
-        scratchTargetPath,
-        String(retentionHours),
-      ],
-      env: { ...process.env, NO_COLOR: "1" },
-      shell: false,
-      timeoutMs: STATE_DB_COMPACTION_TIMEOUT_MS,
-      maxOutputBytes: 64 * 1024,
-    });
-    if (childFailed(result) || !existsSync(scratchTargetPath)) {
-      throw compactionFailure(compactionChildFailureReason(result));
-    }
-    const scratchTarget = regularFile(scratchTargetPath);
-    const summary = JSON.parse(String(result.stdout ?? ""));
-    if (
-      summary?.ok !== true ||
-      summary.retentionHours !== retentionHours ||
-      !Number.isSafeInteger(summary.prunedSessions) ||
-      summary.prunedSessions < 0 ||
-      !Number.isSafeInteger(summary.prunedMessages) ||
-      summary.prunedMessages < 0 ||
-      summary.archiveStateBytes !== scratchTarget.size
-    ) {
-      throw compactionFailure("invalid_result");
-    }
-    // Only this compact copy lands on the persistent volume (the rest of the
-    // staged profile is hard links). Refuse up front when it cannot fit,
-    // rather than half-writing it and failing as a generic error.
-    if (
-      volumeFreeBytes(dirname(targetPath)) <
-      scratchTarget.size + STATE_DB_VOLUME_HEADROOM_BYTES
-    ) {
-      throw compactionFailure("disk_full");
-    }
-    finalTemporaryPath = join(
-      dirname(targetPath),
-      `.${basename(targetPath)}.${randomUUID()}`
-    );
-    copyFileSync(
-      scratchTargetPath,
-      finalTemporaryPath,
-      constants.COPYFILE_EXCL
-    );
-    chmodSync(finalTemporaryPath, 0o600);
-    const targetFd = openSync(finalTemporaryPath, constants.O_RDONLY);
-    try {
-      fsyncSync(targetFd);
-    } finally {
-      closeSync(targetFd);
-    }
-    // link(2) gives this staged publication no-replace semantics. If another
-    // writer created targetPath after admission, fail without deleting or
-    // overwriting the other writer's file.
-    linkSync(finalTemporaryPath, targetPath);
-    targetCreated = true;
-    rmSync(finalTemporaryPath, { force: true });
-    finalTemporaryPath = undefined;
-    fsyncDirectory(dirname(targetPath));
-    if (regularFile(targetPath).size !== scratchTarget.size) {
-      throw new Error("hermes_snapshot_state_db_compaction_failed");
-    }
-    return summary;
-  } catch (error) {
-    if (targetCreated) rmSync(targetPath, { force: true });
-    const reason =
-      error?.cause ?? (error?.code === "ENOSPC" ? "disk_full" : "copy_failed");
-    process.stderr.write(
-      `${JSON.stringify({
-        ok: false,
-        code: "hermes_snapshot_state_db_compaction_failed",
-        reason,
-      })}\n`
-    );
-    throw new Error("hermes_snapshot_state_db_compaction_failed");
-  } finally {
-    if (finalTemporaryPath) rmSync(finalTemporaryPath, { force: true });
-    if (scratchRoot) rmSync(scratchRoot, { recursive: true, force: true });
-  }
-}
-
 function nativeSummaryAccepted(result, complete, incomplete) {
   const output = `${result?.stdout ?? ""}\n${result?.stderr ?? ""}`;
   return (
@@ -1387,8 +1132,8 @@ function stageHermesUserState({ profileId, profileRoot, hermesRoot }) {
         }
         const target = join(stagedProfileRoot, name);
         // Hermes rejects the live SOUL when its link count is not exactly one.
-        // Snapshot compaction can run for minutes, so a staged hard link would
-        // make otherwise healthy Agent turns fail for the whole capture window.
+        // A capture can run for a while, so a staged hard link would make
+        // otherwise healthy Agent turns fail for the whole capture window.
         copyFileSync(source, target, constants.COPYFILE_EXCL);
         chmodSync(target, 0o600);
         if (regularFile(target).nlink !== 1) {
@@ -1396,10 +1141,6 @@ function stageHermesUserState({ profileId, profileRoot, hermesRoot }) {
         }
         continue;
       }
-      // state.db is copied online and compacted after the rest of the staged
-      // tree is assembled. Never hard-link this one file: pruning the staged
-      // recovery copy must be physically incapable of touching the live DB.
-      if (name === "state.db") continue;
       stageUserStateEntry(
         source,
         join(stagedProfileRoot, name),
@@ -1411,20 +1152,6 @@ function stageHermesUserState({ profileId, profileRoot, hermesRoot }) {
             }
           : null
       );
-      // Keep live SQLite sidecars beside their database hard link so Hermes'
-      // sqlite3.backup() observes committed WAL data. Hermes excludes the
-      // sidecars themselves from the resulting ZIP.
-      if (name.endsWith(".db")) {
-        for (const suffix of ["-wal", "-shm", "-journal"]) {
-          const sidecar = `${source}${suffix}`;
-          if (existsSync(sidecar)) {
-            stageUserStateEntry(
-              sidecar,
-              join(stagedProfileRoot, `${name}${suffix}`)
-            );
-          }
-        }
-      }
     }
   }
   for (const external of HERMES_SNAPSHOT_EXTERNAL_USER_STATE) {
@@ -1485,7 +1212,7 @@ function readLegacyUserStateMigration(path, profileId) {
     value.entries.some(
       (name) =>
         typeof name !== "string" ||
-        !HERMES_SNAPSHOT_USER_STATE_ENTRIES.includes(name)
+        !HERMES_LEGACY_USER_STATE_ENTRIES.includes(name)
     ) ||
     new Set(value.entries).size !== value.entries.length
   ) {
@@ -1501,9 +1228,9 @@ function readLegacyUserStateMigration(path, profileId) {
  * (for example /opt/data/skills and /opt/data/cron). Profile isolation moved
  * those paths under profiles/<id>. Snapshot restore cannot discover that
  * unscoped state because it intentionally restores profile archives only.
- * Stage only the same bounded user-state allowlist used by snapshots, merge
- * without overwriting newer profile bytes, then mark the resulting profile
- * dirty so the next portable snapshot becomes self-contained.
+ * Stage only the bounded legacy user-state allowlist, merge without
+ * overwriting newer profile bytes, then mark the resulting profile dirty so the
+ * next portable snapshot becomes self-contained.
  */
 export function migrateLegacyHermesUserState({
   profileId,
@@ -1524,7 +1251,7 @@ export function migrateLegacyHermesUserState({
         entries: receipt.entries,
       };
     }
-    const entries = HERMES_SNAPSHOT_USER_STATE_ENTRIES.filter((name) =>
+    const entries = HERMES_LEGACY_USER_STATE_ENTRIES.filter((name) =>
       existsSync(join(hermesRoot, name))
     );
     if (entries.length === 0) {
@@ -2565,10 +2292,7 @@ export async function captureHermesBackup({
   hermesVersion,
   archiveDirectory = "/tmp",
   hermesCli = HERMES,
-  hermesPython = HERMES_PYTHON,
   maxArchiveBytes = HERMES_SNAPSHOT_MAX_ARCHIVE_BYTES,
-  cronSessionRetentionHours = HERMES_SNAPSHOT_CRON_SESSION_RETENTION_HOURS,
-  stateDbCompactor = compactHermesSnapshotStateDb,
   runChild,
   operationIdentity = /** @type {any} */ (undefined),
 }) {
@@ -2607,16 +2331,6 @@ export async function captureHermesBackup({
   try {
     stagingRoot = stageHermesUserState({ profileId, profileRoot, hermesRoot });
     const stagedProfileRoot = join(stagingRoot, "profiles", profileId);
-    const sourceStateDb = join(profileRoot, "state.db");
-    if (existsSync(sourceStateDb)) {
-      await stateDbCompactor({
-        sourcePath: sourceStateDb,
-        targetPath: join(stagedProfileRoot, "state.db"),
-        retentionHours: cronSessionRetentionHours,
-        hermesPython,
-        runChild,
-      });
-    }
     assertStagedCronDependencies(stagedProfileRoot);
     const result = await childRunner(runChild)(
       invocation(["backup", "-o", archivePath], stagingRoot, hermesCli)
@@ -2652,7 +2366,7 @@ export async function captureHermesBackup({
   } catch (error) {
     const code = error instanceof Error ? error.message : "";
     return failed(
-      /^hermes_snapshot_(?:external_state|plugin_data|portable_config|dependency|state_db|soul_metadata)/.test(
+      /^hermes_snapshot_(?:external_state|plugin_data|portable_config|dependency|soul_metadata)/.test(
         code
       )
         ? code

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,7 +38,7 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.799";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.801";
 const MCP_PACKAGE = "@sellable/mcp@0.1.957";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,7 +1546,7 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.799" ||
+      pinned.installerPackage !== "@sellable/install@0.1.801" ||
       pinned.mcpPackage !== "@sellable/mcp@0.1.957" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -312,7 +312,7 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !== "@sellable/install@0.1.799" ||
+    desired.installerPackage !== "@sellable/install@0.1.801" ||
     desired.mcpPackage !== "@sellable/mcp@0.1.957" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,7 +25,7 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.799";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.801";
 export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.957";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.799",
+  "version": "0.1.801",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {