@sellable/install 0.1.812 → 0.1.813

package/container/Dockerfile

@@ -3,12 +3,12 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.812
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.813
 ARG MCP_PACKAGE=@sellable/mcp@0.1.959
 ARG INSTALLER_INTEGRITY
 ARG MCP_INTEGRITY=sha512-sOEIaI/O41qIhxuiLSx6zWz31I5MG+oJuVqfWKnIRBhfWnbjeLbNlPKaE6U88T0jby5sa0S5Vhtn77MRKEnE5Q==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.812" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.813" \
     && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.959" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.812" \
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.812' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.959') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.813' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.959') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.812', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.959', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.813', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.959', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.812` is
+`@sellable/install@0.1.813` is
 published:
 
 ```sh

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -169,7 +169,7 @@ COPY fly-admin-image/start-admin-runtime /usr/local/lib/sellable-agent/admin-run
 COPY fly-customer-image/customer-runtime.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs
 COPY hermes-first-welcome.mjs /usr/local/lib/sellable-agent/hermes-first-welcome.mjs
 COPY fly-customer-image/hermes-runs-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs
-COPY fly-customer-image/endpoint-model-selection.mjs fly-customer-image/runs-api-connections.mjs fly-customer-image/claude-code-runs-api.mjs fly-customer-image/claude-code-mcp-session.mjs fly-customer-image/openai-runs-client.mjs fly-customer-image/runs-api-health-check.mjs fly-customer-image/public-endpoint-guard.mjs fly-customer-image/workspace-connection-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/
+COPY fly-customer-image/endpoint-model-selection.mjs fly-customer-image/runs-api-connections.mjs fly-customer-image/claude-code-runs-api.mjs fly-customer-image/openai-runs-client.mjs fly-customer-image/runs-api-health-check.mjs fly-customer-image/public-endpoint-guard.mjs fly-customer-image/workspace-connection-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/
 COPY fly-customer-image/opener-stage-execution.mjs /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs
 COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs
 COPY fly-customer-image/customer-runtime-phase-telemetry.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs
@@ -276,7 +276,6 @@ RUN set -eux; \
       /usr/local/lib/sellable-agent/fly-customer-image/endpoint-model-selection.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/runs-api-connections.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/claude-code-runs-api.mjs \
-      /usr/local/lib/sellable-agent/fly-customer-image/claude-code-mcp-session.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/public-endpoint-guard.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/workspace-connection-client.mjs \
       /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs \

package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs

@@ -61,10 +61,7 @@ import {
   SELLABLE_BROWSER_TOOLSET_DEFAULT_MARKER,
   sellableSlackToolsetsForMaterialization,
 } from "../fly-capabilities-bridge.mjs";
-import {
-  startConfiguredClaudeRunsApis,
-  startPublicClaudeRunsApi,
-} from "../fly-customer-image/claude-code-runs-api.mjs";
+import { startPublicClaudeRunsApi } from "../fly-customer-image/claude-code-runs-api.mjs";
 import { createCustomerEndpointRelay } from "../fly-customer-image/customer-runtime.mjs";
 import { createHermesSessionRetention } from "../fly-customer-image/hermes-runs-client.mjs";
 import {
@@ -909,32 +906,6 @@ function installAdminMcpRuntimeBinding(
   );
 }
 
-// The profile's `sellable` MCP server exactly as Hermes runs it, so a Claude
-// Code tool-lane run sees the same tools, through the same context proxy.
-function profileSellableMcpServer(profileRoot) {
-  const path = join(profileRoot, "config.yaml");
-  const stat = lstatSync(path);
-  if (stat.isSymbolicLink() || !stat.isFile()) return null;
-  const document = parseDocument(readFileSync(path, "utf8"));
-  if (document.errors.length > 0) return null;
-  const server = document.toJS().mcp_servers?.sellable;
-  if (
-    server?.command !== NODE ||
-    JSON.stringify(server.args) !== JSON.stringify([MCP_CONTEXT_PROXY]) ||
-    !server.env ||
-    typeof server.env !== "object"
-  ) {
-    return null;
-  }
-  return {
-    command: NODE,
-    args: [MCP_CONTEXT_PROXY],
-    env: Object.fromEntries(
-      Object.entries(server.env).map(([key, value]) => [key, String(value)])
-    ),
-  };
-}
-
 function installAdminModelConfig(profileRoot, modelConfig) {
   const path = join(profileRoot, "config.yaml");
   const stat = lstatSync(path);
@@ -3852,23 +3823,6 @@ async function runAdminProduction() {
   let activeLaunch = null;
   let activeModelHealthReporter = null;
   let shutdownMemorySnapshot = null;
-  let customRunsServices = null;
-  try {
-    customRunsServices = await startConfiguredClaudeRunsApis({
-      diagnostic: (value) => process.stderr.write(`${JSON.stringify(value)}\n`),
-      toolLanes: {
-        turnDescriptorPath: join(MCP_TURN_CONTEXT_ROOT, "turn-context.json"),
-        server: () =>
-          activeLaunch
-            ? profileSellableMcpServer(activeLaunch.profile.profileHome)
-            : null,
-      },
-    });
-  } catch {
-    process.stderr.write(
-      `${JSON.stringify({ ok: false, code: "custom_runs_api_start_failed" })}\n`
-    );
-  }
   let publicRunsService = null;
   try {
     publicRunsService = await startPublicClaudeRunsApi({
@@ -4515,7 +4469,6 @@ async function runAdminProduction() {
     );
   }
   await endpointLoop;
-  await customRunsServices?.stop();
   await publicRunsService?.stop();
   await activeModelHealthReporter?.stop();
   await stopNativeGateway(activeGateway);

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -8,7 +8,7 @@ ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
 ARG MCP_PACKAGE=@sellable/mcp@0.1.959
 ARG MCP_INTEGRITY=sha512-sOEIaI/O41qIhxuiLSx6zWz31I5MG+oJuVqfWKnIRBhfWnbjeLbNlPKaE6U88T0jby5sa0S5Vhtn77MRKEnE5Q==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.812
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.813
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1

package/lib/sellable-agent/fly-customer-image/claude-code-runs-api.d.mts

@@ -1,6 +1,5 @@
 import type { SpawnOptions } from "node:child_process";
 import type { Server } from "node:http";
-import type { RunsApiConnection } from "./runs-api-connections.mjs";
 
 export const CLAUDE_RUNS_MAX_CONCURRENCY: number;
 export type ClaudeRunsRequest = {
@@ -10,25 +9,15 @@ export type ClaudeRunsRequest = {
   model: string;
   effort: string;
   sessionId: string;
-  tools: ClaudeRunsTools | ClaudeRunsRemoteTools | null;
-  /** Remote tools: the run's private MCP config file, written by the service. */
+  tools: ClaudeRunsRemoteTools | null;
+  /** The run's private MCP config file, written by the service. */
   mcpConfigPath?: string;
 };
-export type ClaudeRunsToolServer = {
-  command: string;
-  args: string[];
-  env: Record<string, string>;
-};
-export type ClaudeRunsTools = { names: string[]; server: ClaudeRunsToolServer };
-/** The run's own remote MCP server and grant (public mode). */
+/** The run's own remote MCP server and grant. */
 export type ClaudeRunsRemoteTools = {
   names: string[];
   remote: { url: string; authorization: string };
 };
-export type ClaudeRunsToolLanes = {
-  turnDescriptorPath: string;
-  server(): ClaudeRunsToolServer | null;
-};
 export type ClaudeRunsResult = {
   output: string;
   runtime: { provider: string; model: string };
@@ -37,10 +26,7 @@ export type ClaudeRunsResult = {
 export type ClaudeRunsServer = Server & { stopActiveRuns(): Promise<void> };
 export type ClaudeRunsApiOptions = {
   token: string;
-  /** Required in loopback mode; the public listener has none. */
-  connection?: RunsApiConnection;
-  mode?: "loopback" | "public";
-  /** The CLI and account root; defaults to the connection's localRoot. */
+  /** The CLI and account root; defaults to /opt/data/private-opener. */
   root?: string;
   execute?:
     | ((request: ClaudeRunsRequest) => {
@@ -51,7 +37,6 @@ export type ClaudeRunsApiOptions = {
   audit?: (entry: Record<string, unknown>) => void;
   maxConcurrency?: number;
   maxToolConcurrency?: number;
-  toolLanes?: ClaudeRunsToolLanes | null;
   checkAuthentication?: (
     configDir: string
   ) => Promise<"READY" | "SIGN_IN_REQUIRED" | "UNAVAILABLE">;
@@ -62,21 +47,11 @@ export type ClaudeRunsApiOptions = {
   ) => { promise: Promise<ClaudeRunsResult>; stop(code?: string): void };
   now?: () => number;
 };
-export function validateClaudeRunsRequest(
-  body: unknown,
-  /** null: the public rule (claude-* model, low/medium/high effort). */
-  models: RunsApiConnection["models"] | null
-): ClaudeRunsRequest;
-export function endpointToolNames(options: {
-  turnDescriptorPath: string;
-  sessionId: string;
-  /** Absent: every run gets the tools its own turn descriptor allows. */
-  toolEndpointIds?: string[];
-}): string[] | null;
+/** Any claude-* model at low/medium/high effort, with optional remote tools. */
+export function validateClaudeRunsRequest(body: unknown): ClaudeRunsRequest;
 export function claudeInvocation(
   request: ClaudeRunsRequest,
   root: string,
-  mcpSpecPath?: string | null,
   configDir?: string
 ): { command: string; args: string[]; options: SpawnOptions };
 export function claudeAccountDirs(root: string): string[];
@@ -84,6 +59,16 @@ export function claudeUsageLimit(
   stdout: string,
   now?: number
 ): { retryAt: number } | null;
+/** Why a CLI run failed, for the audit only: never its text. */
+export function claudeFailureFacts(
+  stdout: string,
+  exitCode: number | null
+): {
+  exitCode: number | null;
+  apiErrorStatus: number | null;
+  terminalReason: string | null;
+  subtype: string | null;
+};
 export function parseClaudeResult(
   stdout: string,
   request: ClaudeRunsRequest
@@ -100,14 +85,6 @@ export function startClaudeRun(
 export function createClaudeRunsApi(
   options: ClaudeRunsApiOptions
 ): ClaudeRunsServer;
-export function startConfiguredClaudeRunsApis(options?: {
-  env?: Record<string, string | undefined>;
-  diagnostic?: (entry: Record<string, unknown>) => void;
-  createApi?: typeof createClaudeRunsApi;
-  readToken?: (path: string) => string;
-  toolLanes?: ClaudeRunsToolLanes | null;
-}): Promise<{ stop(): Promise<void> }>;
-
 export function startPublicClaudeRunsApi(options?: {
   env?: Record<string, string | undefined>;
   diagnostic?: (entry: Record<string, unknown>) => void;