@sellable/install 0.1.836-wip.disqualify.20261012.1 → 0.1.838

package/container/Dockerfile

@@ -3,13 +3,13 @@ FROM ${HERMES_IMAGE}
 
 USER root
 
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.836-wip.disqualify.20261012.1
-ARG MCP_PACKAGE=@sellable/mcp@0.1.981-wip.disqualify.20261012.1
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.838
+ARG MCP_PACKAGE=@sellable/mcp@0.1.982-wip.durableprep.20261013.1
 ARG INSTALLER_INTEGRITY
-ARG MCP_INTEGRITY=sha512-v7K5BYVfD87blq2WTPk8OQukmHOFUIyCjJj7BbQKHu+r326CvcFqpRbgWq1k9X2rfZAYopEKPLTAzBu0rjbjHw==
+ARG MCP_INTEGRITY=sha512-8WZ9cVdpKp1vbQY0CWFptXZa4MMiK1VOuGPV7L0O95qYPkYebfr6JIufS5C5sVtSxsSGpBf/v82x04eIG7wufw==
 
-RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.836-wip.disqualify.20261012.1" \
-    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.981-wip.disqualify.20261012.1" \
+RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.838" \
+    && test "${MCP_PACKAGE}" = "@sellable/mcp@0.1.982-wip.durableprep.20261013.1" \
     && test -n "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${INSTALLER_PACKAGE}" dist.integrity)" = "${INSTALLER_INTEGRITY}" \
     && test "$(npm view "${MCP_PACKAGE}" dist.integrity)" = "${MCP_INTEGRITY}" \
@@ -23,9 +23,9 @@ RUN test "${INSTALLER_PACKAGE}" = "@sellable/install@0.1.836-wip.disqualify.2026
     && mkdir -p /opt/sellable-agent/install-root /opt/sellable-agent/mcp-root \
     && npm install --prefix /opt/sellable-agent/install-root --omit=dev --ignore-scripts --no-audit --no-fund "${INSTALLER_PACKAGE}" \
     && npm install --prefix /opt/sellable-agent/mcp-root --omit=dev --ignore-scripts --no-audit --no-fund "${MCP_PACKAGE}" \
-    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.836-wip.disqualify.20261012.1' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.981-wip.disqualify.20261012.1') throw new Error('package identity rejected');" \
+    && node --input-type=module -e "import { readFileSync } from 'node:fs'; const install = JSON.parse(readFileSync('/opt/sellable-agent/install-root/node_modules/@sellable/install/package.json')); const mcp = JSON.parse(readFileSync('/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp/package.json')); if (install.name !== '@sellable/install' || install.version !== '0.1.838' || mcp.name !== '@sellable/mcp' || mcp.version !== '0.1.982-wip.durableprep.20261013.1') throw new Error('package identity rejected');" \
     && node --input-type=module -e "import { buildExternalRuntimeClosure } from '/opt/sellable-agent/install-root/node_modules/@sellable/install/lib/sellable-agent/external-runtime-builder.mjs'; const built = buildExternalRuntimeClosure({ mcpPackageRoot: '/opt/sellable-agent/mcp-root/node_modules/@sellable/mcp', mcpNodeModulesRoot: '/opt/sellable-agent/mcp-root/node_modules', hermesSourceRoot: '/opt/hermes', ownerUid: 0, ownerGid: 0 }); if (!built.closureDigest) throw new Error('runtime closure rejected');" \
-    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.836-wip.disqualify.20261012.1', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.981-wip.disqualify.20261012.1', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
+    && node --input-type=module -e "import { chmodSync, writeFileSync } from 'node:fs'; const release = { installerPackage: '@sellable/install@0.1.838', installerIntegrity: process.argv[1], mcpPackage: '@sellable/mcp@0.1.982-wip.durableprep.20261013.1', mcpIntegrity: process.argv[2] }; writeFileSync('/opt/sellable-agent/release.json', JSON.stringify(release) + '\\n', { mode: 0o444 }); chmodSync('/opt/sellable-agent/release.json', 0o444);" "${INSTALLER_INTEGRITY}" "${MCP_INTEGRITY}" \
     && npm cache clean --force
 
 COPY entrypoint.sh /usr/local/bin/sellable-agent-container-entrypoint

package/container/README.md

@@ -3,7 +3,7 @@
 This image is a dedicated Agent worker/runtime boundary beside an existing Hermes dashboard. It never replaces or reconfigures the dashboard container.
 
 Build from this directory after
-`@sellable/install@0.1.836-wip.disqualify.20261012.1` is
+`@sellable/install@0.1.838` is
 published:
 
 ```sh

package/lib/sellable-agent/external-runtime-builder.mjs

@@ -28,7 +28,7 @@ import {
 
 const MANIFEST_VERSION = "sellable-agent-external-runtime-closure/v1";
 const MCP_PACKAGE = "@sellable/mcp";
-const MCP_VERSION = "0.1.981-wip.disqualify.20261012.1";
+const MCP_VERSION = "0.1.982-wip.durableprep.20261013.1";
 const SAFE_COMPONENT = /^[A-Za-z0-9@._+-]+$/;
 const HERMES_EXCLUDES = new Set([".git", ".playwright", "node_modules"]);
 

package/lib/sellable-agent/fly-admin-image/Dockerfile

@@ -169,7 +169,7 @@ COPY fly-admin-image/start-admin-runtime /usr/local/lib/sellable-agent/admin-run
 COPY fly-customer-image/customer-runtime.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime.mjs
 COPY hermes-first-welcome.mjs /usr/local/lib/sellable-agent/hermes-first-welcome.mjs
 COPY fly-customer-image/hermes-runs-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs
-COPY fly-customer-image/endpoint-model-selection.mjs fly-customer-image/runs-api-connections.mjs fly-customer-image/claude-code-runs-api.mjs fly-customer-image/openai-runs-client.mjs fly-customer-image/runs-api-health-check.mjs fly-customer-image/public-endpoint-guard.mjs fly-customer-image/workspace-connection-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/
+COPY fly-customer-image/endpoint-model-selection.mjs fly-customer-image/runs-api-connections.mjs fly-customer-image/claude-code-runs-api.mjs fly-customer-image/openai-runs-client.mjs fly-customer-image/runs-api-health-check.mjs fly-customer-image/public-endpoint-guard.mjs fly-customer-image/workspace-connection-client.mjs fly-customer-image/slack-stand-in.mjs /usr/local/lib/sellable-agent/fly-customer-image/
 COPY fly-customer-image/opener-stage-execution.mjs /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs
 COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs
 COPY fly-customer-image/customer-runtime-phase-telemetry.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs

package/lib/sellable-agent/fly-customer-image/Dockerfile

@@ -6,13 +6,14 @@ USER root
 
 ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright
 
-ARG MCP_PACKAGE=@sellable/mcp@0.1.981-wip.disqualify.20261012.1
-ARG MCP_INTEGRITY=sha512-v7K5BYVfD87blq2WTPk8OQukmHOFUIyCjJj7BbQKHu+r326CvcFqpRbgWq1k9X2rfZAYopEKPLTAzBu0rjbjHw==
-ARG INSTALLER_PACKAGE=@sellable/install@0.1.836-wip.disqualify.20261012.1
+ARG MCP_PACKAGE=@sellable/mcp@0.1.982-wip.durableprep.20261013.1
+ARG MCP_INTEGRITY=sha512-8WZ9cVdpKp1vbQY0CWFptXZa4MMiK1VOuGPV7L0O95qYPkYebfr6JIufS5C5sVtSxsSGpBf/v82x04eIG7wufw==
+ARG INSTALLER_PACKAGE=@sellable/install@0.1.838
 ARG ADMIN_MCP_PACKAGE=@sellable/admin-mcp@0.1.202
 ARG ADMIN_MCP_INTEGRITY=sha512-ym3aye/0vQ8tfULJlKz9JFOxvIQsl1G+n3np+TTgK/tecwNblBo/j3AkTnRqH9iomKzPbZzP+n4tEQsvsU8ByA==
 ARG TUS_JS_CLIENT_VERSION=4.3.1
 ARG YAML_VERSION=2.9.0
+ARG WS_VERSION=8.18.3
 ARG HERMES_VERSION=0.21.5
 ARG SLACK_SDK_VERSION=3.43.0
 ARG AGENT_BROWSER_VERSION=0.26.0
@@ -41,9 +42,11 @@ RUN --mount=type=secret,id=mcp_trust_root,required=true \
          --omit=dev --ignore-scripts --no-audit --no-fund \
          "agent-browser@${AGENT_BROWSER_VERSION}" \
          "tus-js-client@${TUS_JS_CLIENT_VERSION}" "yaml@${YAML_VERSION}" \
+         "ws@${WS_VERSION}" \
     && test "$(node -p "require('/usr/local/lib/sellable-agent/node_modules/agent-browser/package.json').version")" = "${AGENT_BROWSER_VERSION}" \
     && test "$(node -p "require('/usr/local/lib/sellable-agent/node_modules/tus-js-client/package.json').version")" = "${TUS_JS_CLIENT_VERSION}" \
     && test "$(node -p "require('/usr/local/lib/sellable-agent/node_modules/yaml/package.json').version")" = "${YAML_VERSION}" \
+    && test "$(node -p "require('/usr/local/lib/sellable-agent/node_modules/ws/package.json').version")" = "${WS_VERSION}" \
     && mkdir -p /usr/local/lib/sellable-agent/external-runtime/mcp/bin \
     && ln -s ../node_modules/.bin/sellable-mcp \
          /usr/local/lib/sellable-agent/external-runtime/mcp/bin/sellable-mcp \
@@ -98,7 +101,7 @@ COPY hermes-memory-reconcile.sh /opt/sellable/share/hermes-memory-reconcile.sh
 COPY hermes-endpoint-cron.mjs /opt/sellable/bin/hermes-endpoint-cron
 COPY fly-customer-image/model-auth-store.mjs /usr/local/lib/sellable-agent/fly-customer-image/model-auth-store.mjs
 COPY fly-customer-image/hermes-runs-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/hermes-runs-client.mjs
-COPY fly-customer-image/endpoint-model-selection.mjs fly-customer-image/runs-api-connections.mjs fly-customer-image/openai-runs-client.mjs fly-customer-image/runs-api-health-check.mjs fly-customer-image/public-endpoint-guard.mjs fly-customer-image/workspace-connection-client.mjs /usr/local/lib/sellable-agent/fly-customer-image/
+COPY fly-customer-image/endpoint-model-selection.mjs fly-customer-image/runs-api-connections.mjs fly-customer-image/openai-runs-client.mjs fly-customer-image/runs-api-health-check.mjs fly-customer-image/public-endpoint-guard.mjs fly-customer-image/workspace-connection-client.mjs fly-customer-image/slack-stand-in.mjs /usr/local/lib/sellable-agent/fly-customer-image/
 COPY fly-customer-image/opener-stage-execution.mjs /usr/local/lib/sellable-agent/fly-customer-image/opener-stage-execution.mjs
 COPY fly-customer-image/endpoint-uat-completion-gate.mjs /usr/local/lib/sellable-agent/fly-customer-image/endpoint-uat-completion-gate.mjs
 COPY fly-customer-image/customer-runtime-phase-telemetry.mjs /usr/local/lib/sellable-agent/fly-customer-image/customer-runtime-phase-telemetry.mjs

package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { spawn } from "node:child_process";
-import { createHash, randomUUID } from "node:crypto";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import {
   chmodSync,
   closeSync,
@@ -109,6 +109,7 @@ import {
   usesOpenerDraftStrategy,
 } from "./opener-stage-execution.mjs";
 import { createConfiguredRunsClient } from "./runs-api-connections.mjs";
+import { startSlackStandIn } from "./slack-stand-in.mjs";
 
 const DATA_ROOT = "/opt/data";
 const PROFILES_ROOT = join(DATA_ROOT, "profiles");
@@ -132,9 +133,10 @@ const RUNTIME_GENERATION = Number(
 const BOOT_SESSION_ID = randomUUID();
 const HERMES_VERSION = process.env.SELLABLE_AGENT_HERMES_VERSION ?? "0.21.5";
 const INSTALLER_PACKAGE =
-  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.836-wip.disqualify.20261012.1";
+  process.env.SELLABLE_AGENT_INSTALLER_PACKAGE ?? "@sellable/install@0.1.838";
 const MCP_PACKAGE =
-  process.env.SELLABLE_AGENT_MCP_PACKAGE ?? "@sellable/mcp@0.1.981-wip.disqualify.20261012.1";
+  process.env.SELLABLE_AGENT_MCP_PACKAGE ??
+  "@sellable/mcp@0.1.982-wip.durableprep.20261013.1";
 export const ENDPOINT_MAX_CONCURRENT_RUNS = 10;
 const DEFAULT_PROFILE_BUNDLE_ROOT =
   "/usr/local/share/sellable-agent/default-profile-bundle";
@@ -422,7 +424,7 @@ function exactArtifact(claim, type) {
     .join("\n");
 }
 
-function compileDesired(claim, trustRootPem) {
+export function compileDesired(claim, trustRootPem) {
   const operation = claim?.operation;
   const slack = claim?.runtimeContract?.slack;
   const service = claim?.runtimeContract?.service;
@@ -432,6 +434,7 @@ function compileDesired(claim, trustRootPem) {
   const customerProgram = claim?.runtimeContract?.customerProgram;
   const selectedBindings = slack?.selectedBindings;
   const toolInclude = service?.toolInclude;
+  const slackTransport = slack?.transport === "shared" ? "shared" : "dedicated";
   if (
     !operation ||
     operation.targetRevisionId !== claim?.revision?.id ||
@@ -455,7 +458,10 @@ function compileDesired(claim, trustRootPem) {
     selectedBindings.length < 1 ||
     !Array.isArray(slack?.memberAllowlist) ||
     !claim?.secretEnvelopes?.mcpService ||
-    !claim?.secretEnvelopes?.slackApp ||
+    (slackTransport === "shared"
+      ? claim.secretEnvelopes.slackApp !== null ||
+        !/^A[A-Z0-9]{8,31}$/.test(slack.appId ?? "")
+      : !claim.secretEnvelopes.slackApp) ||
     !claim?.secretEnvelopes?.slackBot ||
     !claim?.secretEnvelopes?.modelCodex ||
     !claim?.secretEnvelopes?.hermesApiServer
@@ -564,6 +570,8 @@ function compileDesired(claim, trustRootPem) {
       soul: exactArtifact(claim, "SOUL"),
       skill: exactArtifact(claim, "SKILL"),
     }),
+    slackTransport,
+    slackAppId: slack.appId,
   });
 }
 
@@ -2834,7 +2842,92 @@ export function createCustomerEndpointRelay(options = {}) {
   });
 }
 
-async function consumeSecrets({ claim, exchange, client, desired }) {
+/** @param {any} options */
+export function createCustomerSlackRelay(options = {}) {
+  const {
+    getControlClient,
+    getActiveRuntime,
+    sleepImpl = sleep,
+    idleMs = 1_000,
+    maxBatch = 10,
+    diagnostic = () => {},
+  } = options;
+  if (
+    typeof getControlClient !== "function" ||
+    typeof getActiveRuntime !== "function" ||
+    typeof sleepImpl !== "function" ||
+    typeof diagnostic !== "function"
+  ) {
+    throw new Error("customer_slack_relay_configuration_rejected");
+  }
+  return Object.freeze({
+    async run(signal) {
+      // Outcomes are confirmed on the next claim; the server leases a batch
+      // for 30 s and holds the agent's next batch until it is confirmed.
+      let pending = [];
+      let failures = 0;
+      while (!signal.aborted) {
+        try {
+          const standIn = getActiveRuntime()?.slackStandIn;
+          const ready = standIn?.status().warm === true;
+          if (!ready && pending.length === 0) {
+            await abortablePause(idleMs, signal, sleepImpl);
+            continue;
+          }
+          const results = pending.slice(0, 20);
+          const { envelopes } = await getControlClient().claimSlackEnvelopes({
+            max: ready ? maxBatch : 0,
+            results,
+          });
+          pending = pending.slice(results.length);
+          failures = 0;
+          for (const [index, envelope] of envelopes.entries()) {
+            // A malformed envelope can never be delivered: close it as
+            // no_ack so it does not come back at the head of every batch.
+            const outcome = await standIn.deliver(envelope).catch((error) => {
+              if (error?.message !== "slack_envelope_malformed") throw error;
+              diagnostic({ ok: false, code: "slack_envelope_malformed" });
+              return "no_ack";
+            });
+            if (outcome === "released") {
+              // Hermes never got this one: hand it and the rest back.
+              for (const rest of envelopes.slice(index)) {
+                pending.push({ id: rest.id, outcome: "released" });
+              }
+              break;
+            }
+            pending.push({ id: envelope.id, outcome });
+          }
+          if (envelopes.length === 0 && pending.length === 0) {
+            await abortablePause(idleMs, signal, sleepImpl);
+          }
+        } catch (error) {
+          failures = Math.min(failures + 1, 5);
+          diagnostic({
+            ok: false,
+            code:
+              error instanceof Error
+                ? redactRuntimeDiagnostic(error.message)
+                : "customer_slack_relay_failed",
+          });
+          await abortablePause(
+            Math.min(5_000, 500 * 2 ** (failures - 1)),
+            signal,
+            sleepImpl
+          );
+        }
+      }
+    },
+  });
+}
+
+async function consumeSecrets({
+  claim,
+  exchange,
+  client,
+  desired,
+  slackStandIn,
+}) {
   const identity = operationIdentity(claim, exchange);
   const consume = async (descriptor) => {
     const value = await client.consumeSecret({
@@ -2856,7 +2949,11 @@ async function consumeSecrets({ claim, exchange, client, desired }) {
   const [mcpService, slackApp, slackBot, modelCodex, hermesApiServer] =
     await Promise.all([
       consume(claim.secretEnvelopes.mcpService),
-      consume(claim.secretEnvelopes.slackApp),
+      // Shared: the server sends no app token; the per-boot local token the
+      // stand-in accepts is installed on fd 8 instead.
+      slackStandIn
+        ? slackStandIn.localAppToken
+        : consume(claim.secretEnvelopes.slackApp),
       consume(claim.secretEnvelopes.slackBot),
       consume(claim.secretEnvelopes.modelCodex),
       consume(claim.secretEnvelopes.hermesApiServer),
@@ -3236,9 +3333,21 @@ function slackApiOrigin() {
   return parsed.origin;
 }
 
-export function applicationRuntimeEnv({ desired, runtimeConfig, secrets }) {
+/** @param {any} input */
+export function applicationRuntimeEnv({
+  desired,
+  runtimeConfig,
+  secrets,
+  slackStandIn,
+}) {
   const env = {
     ...process.env,
+    ...(slackStandIn
+      ? {
+          SELLABLE_AGENT_SLACK_TRANSPORT: "shared-local",
+          SELLABLE_AGENT_SLACK_API_ORIGIN: slackStandIn.origin,
+        }
+      : {}),
     HOME: DATA_ROOT,
     HERMES_HOME: DATA_ROOT,
     SELLABLE_HERMES_PROFILE_ID: desired.profileId,
@@ -3309,13 +3418,93 @@ async function stopNativeGateway(gateway) {
   }
 }
 
-async function startNativeGateway({ desired, runtimeConfig, secrets }) {
+/**
+ * One loopback Slack stand-in per boot, started for the first shared claim.
+ * @param {any} options
+ */
+export function createSlackStandInSlot(options = {}) {
+  const {
+    startStandIn = startSlackStandIn,
+    upstreamOrigin = slackApiOrigin,
+    diagnostic = () => {},
+  } = options;
+  let current = null;
+  return {
+    async ensure({ slackTransport, appId }) {
+      if (slackTransport !== "shared") return null;
+      if (!current) {
+        // The slot is the local app token's only producer; the stand-in
+        // accepts it on apps.connections.open and Hermes reads it from fd 8.
+        const localAppToken = `xapp-1-${randomBytes(24).toString("hex")}`;
+        const instance = await startStandIn({
+          localAppToken,
+          ticket: randomBytes(24).toString("hex"),
+          appId,
+          upstreamOrigin: upstreamOrigin(),
+          diagnostic,
+        });
+        current = { ...instance, localAppToken };
+      }
+      return current;
+    },
+    async close() {
+      const instance = current;
+      current = null;
+      await instance?.close();
+    },
+  };
+}
+
+/**
+ * The idle loop's crash restart of a stopped gateway.
+ * @param {any} activeRuntime
+ * @param {{ startGateway?: (input: any) => Promise<any> }} [options]
+ */
+export async function restartStoppedNativeGateway(
+  activeRuntime,
+  { startGateway = startNativeGateway } = {}
+) {
+  if (
+    activeRuntime?.action !== "INSTANTIATE" &&
+    activeRuntime?.gateway &&
+    !activeRuntime.gateway.readback().running
+  ) {
+    // The transport comes from activeRuntime, never from its claim: a BACKUP
+    // claim replaces activeRuntime.claim and carries no runtime contract.
+    return await startGateway({
+      desired: activeRuntime.desired,
+      runtimeConfig: activeRuntime.runtimeConfig,
+      secrets: activeRuntime.secrets,
+      slackTransport: activeRuntime.slackTransport,
+      slackStandIn: activeRuntime.slackStandIn,
+    });
+  }
+  return activeRuntime?.gateway;
+}
+
+async function startNativeGateway({
+  desired,
+  runtimeConfig,
+  secrets,
+  slackTransport,
+  slackStandIn,
+}) {
+  // A shared runtime launched with the dedicated env would send the local
+  // app token to Slack and go silent while still looking healthy.
+  if (slackTransport === "shared" && !slackStandIn) {
+    throw new Error("customer_slack_stand_in_required");
+  }
   const secretRoot = join(SECRET_ROOT, desired.profileId);
   const launch = buildNativeHermesLaunch({
     profileRoot: runtimeConfig.runtimeHome,
     secretsRoot: secretRoot,
     profileId: desired.profileId,
-    env: applicationRuntimeEnv({ desired, runtimeConfig, secrets }),
+    env: applicationRuntimeEnv({
+      desired,
+      runtimeConfig,
+      secrets,
+      slackStandIn,
+    }),
   });
   const appDescriptor = openSync(
     launch.inheritedFileDescriptors.find((item) => item.fd === 8).path,
@@ -3571,17 +3760,26 @@ async function proveApiServerReadiness({
   throw new Error("customer_api_server_readiness_rejected");
 }
 
+/** @param {any} input */
 export async function startProvenNativeGateway({
   desired,
   runtimeConfig,
   secrets,
+  slackTransport,
+  slackStandIn,
   startGateway = startNativeGateway,
   proveReadiness = proveApiServerReadiness,
   stopGateway = stopNativeGateway,
 }) {
   let gateway = null;
   try {
-    gateway = await startGateway({ desired, runtimeConfig, secrets });
+    gateway = await startGateway({
+      desired,
+      runtimeConfig,
+      secrets,
+      slackTransport,
+      slackStandIn,
+    });
     const gatewayReadback = gateway.readback();
     if (!gatewayReadback.running) {
       throw new Error("customer_native_gateway_readback_rejected");
@@ -3618,8 +3816,14 @@ async function proveProvisionedApplication({
   runtimeConfig,
   secrets,
   profileDigest,
+  slackStandIn,
 }) {
-  const runtimeEnv = applicationRuntimeEnv({ desired, runtimeConfig, secrets });
+  const runtimeEnv = applicationRuntimeEnv({
+    desired,
+    runtimeConfig,
+    secrets,
+    slackStandIn,
+  });
   const materializedModelAuth = runtimeConfig.modelAuthState.materialized;
   const [hermesVersion, mcpVersion, hermesModelAuth] = await Promise.all([
     run(HERMES, ["--version"], { env: runtimeEnv, timeoutMs: 180_000 }),
@@ -3746,14 +3950,22 @@ async function proveApplication({
   secrets,
   profileDigest,
   runtimeAuthorityScope,
+  slackTransport,
+  slackStandIn,
 }) {
   const provisioned = await proveProvisionedApplication({
     desired,
     runtimeConfig,
     secrets,
     profileDigest,
+    slackStandIn,
+  });
+  const runtimeEnv = applicationRuntimeEnv({
+    desired,
+    runtimeConfig,
+    secrets,
+    slackStandIn,
   });
-  const runtimeEnv = applicationRuntimeEnv({ desired, runtimeConfig, secrets });
   const doctor = customerRuntimeDoctorRequired(action, {
     runtimeAuthorityScope,
     directReadinessProven: true,
@@ -3789,8 +4001,11 @@ async function proveApplication({
   ) {
     throw new Error("customer_slack_identity_rejected");
   }
+  // Shared machines hold no Slack app token: Socket Mode is proven against
+  // the loopback stand-in only, never against Slack.
+  const shared = slackTransport === "shared";
   const socketResponse = await fetch(
-    `${slackApiOrigin()}/api/apps.connections.open`,
+    `${shared ? slackStandIn.origin : slackApiOrigin()}/api/apps.connections.open`,
     {
       method: "POST",
       headers: {
@@ -3806,7 +4021,7 @@ async function proveApplication({
     !socketResponse.ok ||
     socket?.ok !== true ||
     typeof socket.url !== "string" ||
-    !/^wss?:\/\//.test(socket.url)
+    !(shared ? /^ws:\/\/127\.0\.0\.1:/ : /^wss?:\/\//).test(socket.url)
   ) {
     throw new Error("customer_slack_socket_identity_rejected");
   }
@@ -3815,7 +4030,20 @@ async function proveApplication({
       desired,
       runtimeConfig,
       secrets,
+      slackTransport,
+      slackStandIn,
     });
+  if (shared) {
+    let connected = false;
+    for (let attempt = 0; attempt < 240 && !connected; attempt += 1) {
+      connected = slackStandIn.status().hermesConnected;
+      if (!connected) await sleep(500);
+    }
+    if (!connected) {
+      await stopNativeGateway(gateway);
+      throw new Error("customer_slack_stand_in_not_connected");
+    }
+  }
   return {
     ...provisioned,
     hermesOutput: `${provisioned.hermesOutput}\n${doctor.stdout}`,
@@ -3994,6 +4222,7 @@ async function processOperation({
   client,
   identity,
   reattestAuthority,
+  slackStandInSlot,
 }) {
   const phaseTelemetry = createCustomerRuntimePhaseTelemetry({
     bootSessionId: BOOT_SESSION_ID,
@@ -4001,15 +4230,25 @@ async function processOperation({
   });
   const runtimeAuthorityScope = claim.runtimeAuthority?.scope ?? null;
   const trustRootPem = readFileSync(TRUST_ROOT, "utf8");
-  const { desired, toolInclude } = compileDesired(claim, trustRootPem);
+  const { desired, toolInclude, slackTransport, slackAppId } = compileDesired(
+    claim,
+    trustRootPem
+  );
   mkdirSync(PROFILES_ROOT, { recursive: true, mode: 0o700 });
   chmodSync(PROFILES_ROOT, 0o700);
+  // Shared only: the stand-in listens before consumeSecrets (it produces the
+  // local app token) and before every Hermes run that reads the seam.
+  const slackStandIn = await slackStandInSlot.ensure({
+    slackTransport,
+    appId: slackAppId,
+  });
   const secrets = await phaseTelemetry.run("runtime_secrets", async () => {
     const consumed = await consumeSecrets({
       claim,
       exchange,
       client,
       desired,
+      slackStandIn,
     });
     await publishManagedAuth({
       schemaVersion: "sellable-managed-auth/v1",
@@ -4175,6 +4414,8 @@ async function processOperation({
       secrets,
       profileDigest: pristineProfile.manifest.profileDigest,
       runtimeAuthorityScope,
+      slackTransport,
+      slackStandIn,
     })
   );
   await phaseTelemetry.run("customer_program_crons", async () => {
@@ -4254,6 +4495,8 @@ async function processOperation({
     gateway: proof.gateway ?? null,
     proof,
     modelHealthReporter: null,
+    slackTransport,
+    slackStandIn,
   };
   if (claim.runtimeAuthority && receipt.observedLifecycle === "ON") {
     const servingObservation = customerServingObservation(
@@ -4431,6 +4674,14 @@ async function main() {
     diagnostic: (value) => process.stderr.write(`${JSON.stringify(value)}\n`),
   });
   const endpointLoop = endpointRelay.run(controller.signal);
+  const diagnostic = (value) =>
+    process.stderr.write(`${JSON.stringify(value)}\n`);
+  const slackStandInSlot = createSlackStandInSlot({ diagnostic });
+  const slackLoop = createCustomerSlackRelay({
+    getControlClient: () => client,
+    getActiveRuntime: () => activeRuntime,
+    diagnostic,
+  }).run(controller.signal);
   const beginShutdownSnapshot = () => {
     if (!activeRuntime || shutdownMemorySnapshot) return;
     const runtime = activeRuntime;
@@ -4537,16 +4788,9 @@ async function main() {
             ),
           });
         }
-        if (
-          activeRuntime?.action !== "INSTANTIATE" &&
-          activeRuntime?.gateway &&
-          !activeRuntime.gateway.readback().running
-        ) {
-          activeRuntime.gateway = await startNativeGateway({
-            desired: activeRuntime.desired,
-            runtimeConfig: activeRuntime.runtimeConfig,
-            secrets: activeRuntime.secrets,
-          });
+        if (activeRuntime) {
+          activeRuntime.gateway =
+            await restartStoppedNativeGateway(activeRuntime);
         }
         await sleep(1_000);
         continue;
@@ -4620,6 +4864,7 @@ async function main() {
         client,
         identity,
         reattestAuthority: () => operationHeartbeat.reattest(),
+        slackStandInSlot,
       });
       soulClaimTracker = createSoulClaimObservationTracker({
         runtimeId: RUNTIME_ID,
@@ -4650,7 +4895,7 @@ async function main() {
   }
   beginShutdownSnapshot();
   const finalMemorySnapshot = await shutdownMemorySnapshot;
-  await endpointLoop;
+  await Promise.all([endpointLoop, slackLoop]);
   if (finalMemorySnapshot?.ok === false) {
     process.stderr.write(
       `${JSON.stringify({
@@ -4660,6 +4905,7 @@ async function main() {
     );
   }
   await stopNativeGateway(activeRuntime?.gateway);
+  await slackStandInSlot.close();
   await activeRuntime?.modelHealthReporter?.stop();
   if (activeRuntime?.desired.profileId) {
     await clearManagedAuth(activeRuntime.desired.profileId);

package/lib/sellable-agent/fly-customer-image/slack-stand-in.mjs

@@ -0,0 +1,345 @@
+// The machine-local Slack Socket Mode stand-in for a shared-app runtime.
+import { timingSafeEqual } from "node:crypto";
+import { once } from "node:events";
+import { createServer } from "node:http";
+
+// The shared app declares /sellable; Hermes registers /hermes. Every other
+// command reaches Hermes under its own name.
+export const SHARED_SLACK_COMMAND_ALIASES = Object.freeze({
+  "/sellable": "/hermes",
+});
+
+const record = (value) =>
+  value !== null && typeof value === "object" && !Array.isArray(value);
+const malformed = () => new Error("slack_envelope_malformed");
+
+// One stored Slack inbox row becomes one Socket Mode frame
+// (slack_sdk/socket_mode/request.py). Events keep Slack's exact body bytes;
+// interactive and slash bodies are Slack's form, decoded as Bolt decodes it.
+export function toSocketModeFrame({
+  id,
+  kind,
+  body,
+  slackRetryNum,
+  slackRetryReason,
+}) {
+  if (
+    typeof id !== "string" ||
+    !id ||
+    typeof body !== "string" ||
+    !Number.isInteger(slackRetryNum) ||
+    slackRetryNum < 0 ||
+    typeof slackRetryReason !== "string"
+  )
+    throw malformed();
+  if (kind === "EVENTS_API") {
+    let parsed;
+    try {
+      parsed = JSON.parse(body);
+    } catch {
+      throw malformed();
+    }
+    if (!record(parsed)) throw malformed();
+    return (
+      `{"envelope_id":${JSON.stringify(id)},"type":"events_api",` +
+      `"accepts_response_payload":false,"retry_attempt":${slackRetryNum},` +
+      `"retry_reason":${JSON.stringify(slackRetryReason)},"payload":${body}}`
+    );
+  }
+  const frame = (type, payload) =>
+    JSON.stringify({
+      envelope_id: id,
+      type,
+      accepts_response_payload: true,
+      retry_attempt: slackRetryNum,
+      retry_reason: slackRetryReason,
+      payload,
+    });
+  if (kind === "INTERACTIVE") {
+    let payload;
+    try {
+      payload = JSON.parse(new URLSearchParams(body).get("payload"));
+    } catch {
+      throw malformed();
+    }
+    if (!record(payload)) throw malformed();
+    return frame("interactive", payload);
+  }
+  if (kind === "SLASH_COMMANDS") {
+    const fields = Object.fromEntries(new URLSearchParams(body));
+    if (typeof fields.command !== "string" || !fields.command)
+      throw malformed();
+    fields.command =
+      SHARED_SLACK_COMMAND_ALIASES[fields.command] ?? fields.command;
+    return frame("slash_commands", fields);
+  }
+  throw malformed();
+}
+
+const json = (res, status, body) => {
+  res.writeHead(status, { "content-type": "application/json" });
+  res.end(JSON.stringify(body));
+};
+// Length-checked first: timingSafeEqual throws on unequal lengths.
+const same = (provided, expected) => {
+  const a = Buffer.from(provided ?? "");
+  const b = Buffer.from(expected);
+  return a.length === b.length && timingSafeEqual(a, b);
+};
+const OPEN = 1; // WebSocket.OPEN
+// Node's parser admits request targets URL rejects (for example "http://[").
+// A throw in either handler would take the customer runtime down.
+const targetOf = (raw) => {
+  try {
+    return new URL(raw, "http://127.0.0.1");
+  } catch {
+    return null;
+  }
+};
+const API_METHOD = /^\/api\/([A-Za-z0-9_.]+)$/;
+const HOP_BY_HOP = new Set([
+  "host",
+  "content-length",
+  "connection",
+  "transfer-encoding",
+  "keep-alive",
+  "upgrade",
+]);
+const SLACK_CHANNEL_ID = /^[CDG][A-Z0-9]+$/;
+// slack_sdk sends some arguments in the query string, and the status call
+// names the channel channel_id.
+const channelOf = (body, contentType, searchParams) => {
+  let fields = {};
+  try {
+    fields = /json/.test(contentType ?? "")
+      ? JSON.parse(body)
+      : Object.fromEntries(new URLSearchParams(body));
+  } catch {}
+  const channel =
+    fields?.channel ??
+    fields?.channel_id ??
+    searchParams.get("channel") ??
+    searchParams.get("channel_id");
+  return typeof channel === "string" && SLACK_CHANNEL_ID.test(channel)
+    ? channel
+    : null;
+};
+
+// Hermes connects here with the per-boot local app token as if this were
+// Slack (docs.slack.dev/apis/events-api/using-socket-mode). The token and
+// ticket never appear in a diagnostic.
+export async function startSlackStandIn(options = {}) {
+  const {
+    localAppToken,
+    ticket,
+    appId,
+    upstreamOrigin,
+    fetchImpl = fetch,
+    ackTimeoutMs = 10_000,
+    upstreamTimeoutMs = 30_000,
+    warmGraceMs = 8_000,
+    now = Date.now,
+    diagnostic = () => {},
+  } = options;
+  if (
+    typeof localAppToken !== "string" ||
+    !localAppToken ||
+    typeof ticket !== "string" ||
+    !ticket ||
+    typeof appId !== "string" ||
+    typeof upstreamOrigin !== "string" ||
+    typeof fetchImpl !== "function" ||
+    typeof now !== "function" ||
+    typeof diagnostic !== "function"
+  )
+    throw new Error("slack_stand_in_configuration_rejected");
+  // Imported here so the Admin image, which loads customer-runtime.mjs but
+  // never starts the stand-in, does not need ws.
+  const { WebSocketServer } = await import("ws");
+  const wss = new WebSocketServer({ noServer: true });
+  let current = null;
+  let connectedAt = 0;
+  let port = 0;
+  // One in-flight envelope per deliver() call (the relay is sequential). Each
+  // waiter knows the socket it was sent on, so a replaced socket releases its
+  // own envelope for redelivery instead of letting it time out as no_ack.
+  const waiters = new Map();
+
+  const server = createServer(async (req, res) => {
+    const target = targetOf(req.url);
+    if (target?.pathname === "/api/apps.connections.open") {
+      const ok = same(req.headers.authorization, `Bearer ${localAppToken}`);
+      diagnostic({
+        kind: "sellable_slack_stand_in_api",
+        method: "apps.connections.open",
+        status: 200,
+        ok,
+        error: ok ? null : "invalid_auth",
+        channel: null,
+      });
+      // The SDK reconnects with its cached URL, so the URL is reusable.
+      return json(
+        res,
+        200,
+        ok
+          ? { ok, url: `ws://127.0.0.1:${port}/link/?ticket=${ticket}` }
+          : { ok, error: "invalid_auth" }
+      );
+    }
+    const method = target && API_METHOD.exec(target.pathname)?.[1];
+    if (!method) return json(res, 404, { ok: false, error: "unknown_method" });
+    if (req.method !== "GET" && req.method !== "POST")
+      return json(res, 405, { ok: false, error: "method_not_allowed" });
+    // Every other call goes to Slack with Hermes' own token, and Slack's
+    // answer comes back as is. If Slack resets or hangs, Hermes' connection
+    // is dropped so its client retries as it would against Slack. This
+    // handler never rejects: the runtime has no unhandledRejection handler.
+    const line = {
+      kind: "sellable_slack_stand_in_api",
+      method,
+      status: null,
+      ok: null,
+      error: null,
+      channel: null,
+    };
+    try {
+      const parts = [];
+      for await (const part of req) parts.push(part);
+      const body = Buffer.concat(parts);
+      line.channel = channelOf(
+        String(body),
+        req.headers["content-type"],
+        target.searchParams
+      );
+      const headers = {};
+      for (const [name, value] of Object.entries(req.headers))
+        if (!HOP_BY_HOP.has(name)) headers[name] = value;
+      const upstream = await fetchImpl(
+        `${upstreamOrigin}/api/${method}${target.search}`,
+        {
+          method: req.method,
+          headers,
+          body: req.method === "POST" ? body : undefined,
+          signal: AbortSignal.timeout(upstreamTimeoutMs),
+        }
+      );
+      const answer = Buffer.from(await upstream.arrayBuffer());
+      line.status = upstream.status;
+      try {
+        const parsed = JSON.parse(String(answer));
+        if (typeof parsed?.ok === "boolean") line.ok = parsed.ok;
+        if (typeof parsed?.error === "string") line.error = parsed.error;
+      } catch {}
+      // fetch has already decoded the body, so content-encoding is not
+      // copied; only the headers Hermes' client reads come back.
+      const out = {};
+      for (const name of ["content-type", "retry-after"]) {
+        const value = upstream.headers.get(name);
+        if (value !== null) out[name] = value;
+      }
+      res.writeHead(upstream.status, out);
+      res.end(answer);
+    } catch (error) {
+      line.error =
+        error?.name === "TimeoutError"
+          ? "upstream_timeout"
+          : "upstream_unavailable";
+      req.socket.destroy();
+    }
+    diagnostic(line);
+  });
+  server.on("upgrade", (req, socket, head) => {
+    socket.on("error", () => socket.destroy());
+    const target = targetOf(req.url);
+    if (
+      target?.pathname !== "/link/" ||
+      !same(target.searchParams.get("ticket"), ticket)
+    ) {
+      socket.once("finish", () => socket.destroy());
+      socket.end("HTTP/1.1 401 Unauthorized\r\nContent-Length: 0\r\n\r\n");
+      return;
+    }
+    wss.handleUpgrade(req, socket, head, (ws) => {
+      // Newest connection wins; Hermes closes its old socket first anyway.
+      current?.close(1000);
+      current = ws;
+      connectedAt = now();
+      diagnostic({ kind: "sellable_slack_stand_in_socket", event: "open" });
+      ws.on("error", () => {});
+      // Acks resolve their waiter; ack payloads are dropped (the inbox already
+      // answered Slack). Nothing here may throw.
+      ws.on("message", (data, isBinary) => {
+        if (isBinary) return;
+        let frame;
+        try {
+          frame = JSON.parse(String(data));
+        } catch {
+          return;
+        }
+        waiters.get(frame?.envelope_id)?.settle("delivered");
+      });
+      ws.on("close", () => {
+        if (current === ws) current = null;
+        for (const waiter of [...waiters.values()])
+          if (waiter.ws === ws) waiter.settle("released");
+        diagnostic({ kind: "sellable_slack_stand_in_socket", event: "close" });
+      });
+      ws.send(
+        JSON.stringify({
+          type: "hello",
+          num_connections: 1,
+          debug_info: { host: "sellable-local-stand-in" },
+          connection_info: { app_id: appId },
+        })
+      );
+    });
+  });
+  server.listen(0, "127.0.0.1");
+  await once(server, "listening");
+  port = server.address().port;
+  return {
+    origin: `http://127.0.0.1:${port}`,
+    port,
+    // delivered on Hermes' ack, no_ack past the deadline (Bolt never acks an
+    // envelope no listener matches), released when no socket takes it.
+    async deliver(envelope) {
+      const frame = toSocketModeFrame(envelope);
+      const ws = current;
+      const outcome = await new Promise((resolve) => {
+        if (ws?.readyState !== OPEN) return resolve("released");
+        const waiter = {
+          ws,
+          settle(result) {
+            clearTimeout(timer);
+            if (waiters.get(envelope.id) === waiter)
+              waiters.delete(envelope.id);
+            resolve(result);
+          },
+        };
+        const timer = setTimeout(() => waiter.settle("no_ack"), ackTimeoutMs);
+        waiters.set(envelope.id, waiter);
+        ws.send(frame);
+      });
+      if (outcome !== "delivered")
+        diagnostic({
+          kind: "sellable_slack_stand_in_delivery",
+          envelopeId: envelope.id,
+          outcome,
+        });
+      return outcome;
+    },
+    status() {
+      const hermesConnected = current?.readyState === OPEN;
+      return {
+        hermesConnected,
+        warm: hermesConnected && now() - connectedAt >= warmGraceMs,
+      };
+    },
+    close: () =>
+      new Promise((resolve) => {
+        for (const ws of wss.clients) ws.terminate();
+        server.close(resolve);
+        server.closeAllConnections();
+      }),
+  };
+}

package/lib/sellable-agent/fly-runtime-identity.mjs

@@ -1277,6 +1277,18 @@ export function createFlyCustomerControlClient({
         ).claim ?? null
       );
     },
+    async claimSlackEnvelopes({ max, results }) {
+      return {
+        envelopes:
+          (
+            await post(
+              "slack-claim",
+              "/api/v3/sellable-agent/worker/slack-claim",
+              { max, results }
+            )
+          ).envelopes ?? [],
+      };
+    },
     async heartbeatEndpoint(identityBody) {
       return post(
         "endpoint-heartbeat",

package/lib/sellable-agent/hermes-bridge.mjs

@@ -301,6 +301,37 @@ def _sellable_agent_slack_api_kwargs():
     return {"base_url": origin.rstrip("/") + "/api/"}
 `;
 
+// Shared-app runtimes reach Slack through the machine-local stand-in
+// (fly-customer-image/slack-stand-in.mjs). Both keys are required, and the
+// origin must be the stand-in's own loopback listener.
+const SLACK_SHARED_LOOPBACK_API_HELPER = replaceExactlyOnce(
+  SLACK_DEDICATED_TEST_API_HELPER,
+  "def _sellable_agent_slack_api_kwargs():\n",
+  `def _sellable_agent_slack_api_kwargs():
+    if (
+        os.getenv("SELLABLE_AGENT_RUNTIME", "") == "1"
+        and os.getenv("SELLABLE_AGENT_SLACK_TRANSPORT", "") == "shared-local"
+    ):
+        origin = os.getenv("SELLABLE_AGENT_SLACK_API_ORIGIN", "")
+        from urllib.parse import urlparse
+        parsed = urlparse(origin)
+        if (
+            parsed.scheme != "http"
+            or parsed.hostname != "127.0.0.1"
+            or not parsed.port
+            or parsed.username
+            or parsed.password
+            or parsed.path not in {"", "/"}
+            or parsed.params
+            or parsed.query
+            or parsed.fragment
+        ):
+            raise RuntimeError("Sellable shared Slack stand-in origin is invalid")
+        return {"base_url": origin.rstrip("/") + "/api/"}
+`,
+  "shared Slack stand-in API seam"
+);
+
 const SLACK_MESSAGE_UNFURL_FILE_HELPER = `
 # ${HERMES_AGENT_BRIDGE_MARKER}: recover files from bounded allowed-channel Slack message unfurls.
 async def _sellable_agent_recover_slack_message_unfurl_files(
@@ -1557,15 +1588,20 @@ def getenv(name, default=""):
 
   if (
     patchKind === "slack-adapter-dedicated-v021" ||
-    patchKind === "slack-adapter-dedicated-v0213"
+    patchKind === "slack-adapter-dedicated-v0213" ||
+    patchKind === "slack-adapter-shared-v0215"
   ) {
     // v0.21.3 moved credential lookup into a profile-scoped helper. Preserve
     // that upstream isolation outside the dedicated Sellable runtime.
-    const scopedCredential = patchKind === "slack-adapter-dedicated-v0213";
+    const scopedCredential = patchKind !== "slack-adapter-dedicated-v021";
     let patched = replaceExactlyOnce(
       source,
       "logger = logging.getLogger(__name__)\n",
-      `logger = logging.getLogger(__name__)\n${SECRET_FD_HELPER}${SLACK_DEDICATED_TEST_API_HELPER}${SLACK_MESSAGE_UNFURL_FILE_HELPER}`,
+      `logger = logging.getLogger(__name__)\n${SECRET_FD_HELPER}${
+        patchKind === "slack-adapter-shared-v0215"
+          ? SLACK_SHARED_LOOPBACK_API_HELPER
+          : SLACK_DEDICATED_TEST_API_HELPER
+      }${SLACK_MESSAGE_UNFURL_FILE_HELPER}`,
       "v0.21 dedicated Slack helpers"
     );
     patched = replaceExactlyOnce(
@@ -2924,11 +2960,11 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT = normalizeContract({
     },
     {
       path: "plugins/platforms/slack/adapter.py",
-      patchKind: "slack-adapter-dedicated-v0213",
+      patchKind: "slack-adapter-shared-v0215",
       sourceSha256:
         "3f2ec0cef97964bf4cb1e9791c0917a03cd1e73bb0bc3293768680cd6302f613",
       patchedSha256:
-        "26cedfad352e8dadae82bebcedf8813ef948622a350b392ce99097a8ede2f056",
+        "d4b95fa29bfd980a8e33819d3d918c53a2d3355b91904ba14e6941878d4233f8",
     },
     {
       path: "tools/mcp_tool_handlers.py",
@@ -3028,7 +3064,7 @@ export const HERMES_AGENT_BRIDGE_DEDICATED_V0215_CONTRACT = normalizeContract({
     },
   ],
   contractDigest:
-    "d6158a72b89062ab158fa28eec4532da331e1325b9d7b66d8cd596973866067d",
+    "3953f2f8c0982eaee52a64c6192115c4ee57f88ec4dd76ffa908043bdce61a8e",
 });
 
 function assertRelativeContractPath(path) {

package/lib/sellable-agent/host-bootstrap.mjs

@@ -38,8 +38,8 @@ import { installAgentHostServices } from "./service-installer.mjs";
 const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "../..");
 const VERSION = "sellable-agent-host-bootstrap/v1";
 const RECEIPT_VERSION = "sellable-agent-host-registration/v1";
-const INSTALLER_PACKAGE = "@sellable/install@0.1.836-wip.disqualify.20261012.1";
-const MCP_PACKAGE = "@sellable/mcp@0.1.981-wip.disqualify.20261012.1";
+const INSTALLER_PACKAGE = "@sellable/install@0.1.838";
+const MCP_PACKAGE = "@sellable/mcp@0.1.982-wip.durableprep.20261013.1";
 const HERMES_VERSION = "0.18.0";
 const SHA256 = /^[a-f0-9]{64}$/;
 const SHA256_16 = /^[a-f0-9]{16}$/;

package/lib/sellable-agent/host-worker.mjs

@@ -1546,8 +1546,9 @@ export function compileClaimToProfileDesired(activeClaim, config) {
       ]) ||
       pinned.hermesCli !== "hermes" ||
       pinned.hermesVersion !== "0.18.0" ||
-      pinned.installerPackage !== "@sellable/install@0.1.836-wip.disqualify.20261012.1" ||
-      pinned.mcpPackage !== "@sellable/mcp@0.1.981-wip.disqualify.20261012.1" ||
+      pinned.installerPackage !== "@sellable/install@0.1.838" ||
+      pinned.mcpPackage !==
+        "@sellable/mcp@0.1.982-wip.durableprep.20261013.1" ||
       !Array.isArray(policy.toolInclude) ||
       policy.toolInclude.length === 0 ||
       !Number.isSafeInteger(slack.generation) ||

package/lib/sellable-agent/profile-materializer.mjs

@@ -313,9 +313,8 @@ function validateDesired(desired) {
     desired.serviceCredentialGeneration < 1 ||
     desired.hermesCli !== "hermes" ||
     desired.hermesVersion !== "0.18.0" ||
-    desired.installerPackage !==
-      "@sellable/install@0.1.836-wip.disqualify.20261012.1" ||
-    desired.mcpPackage !== "@sellable/mcp@0.1.981-wip.disqualify.20261012.1" ||
+    desired.installerPackage !== "@sellable/install@0.1.838" ||
+    desired.mcpPackage !== "@sellable/mcp@0.1.982-wip.durableprep.20261013.1" ||
     !Array.isArray(desired.toolInclude) ||
     desired.toolInclude.length === 0 ||
     desired.toolInclude.some((tool) => !/^[a-z][a-z0-9_]{0,127}$/.test(tool)) ||

package/lib/sellable-agent/provisioning-adapter.mjs

@@ -25,8 +25,9 @@ import { fileURLToPath } from "node:url";
 import { deriveContainedProfileId } from "./profile-materializer.mjs";
 
 export const PROVISIONING_ACTION = "PROVISION_HERMES_PROFILE";
-export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.836-wip.disqualify.20261012.1";
-export const PINNED_MCP_PACKAGE = "@sellable/mcp@0.1.981-wip.disqualify.20261012.1";
+export const PINNED_INSTALL_PACKAGE = "@sellable/install@0.1.838";
+export const PINNED_MCP_PACKAGE =
+  "@sellable/mcp@0.1.982-wip.durableprep.20261013.1";
 const PINNED_INSTALL_VERSION = PINNED_INSTALL_PACKAGE.slice(
   PINNED_INSTALL_PACKAGE.lastIndexOf("@") + 1
 );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sellable/install",
-  "version": "0.1.836-wip.disqualify.20261012.1",
+  "version": "0.1.838",
   "type": "module",
   "description": "One-command installer for Sellable MCP in Claude Code, Codex, and Hermes",
   "bin": {
@@ -40,6 +40,7 @@
     "@modelcontextprotocol/sdk": "^1.25.2",
     "eastasianwidth": "0.2.0",
     "tus-js-client": "^4.3.1",
+    "ws": "8.18.3",
     "yaml": "^2.8.1"
   },
   "keywords": [