@forgezero/agent 0.1.10 → 0.1.11

package/dist/fz-agent.js

@@ -1382,7 +1382,15 @@ async function pullProvisioningOnce(options) {
   if (options.metalPreflight) {
     const report = options.metalPreflight();
     const accepted = await postSignedNode(options, "v1/metal/preflight", report);
-    options.onEvent?.("preflight", { ...report, ready: accepted.ready, state: accepted.state });
+    if (options.metalHostname && accepted.hostname !== options.metalHostname) {
+      throw new Error(`metal agent: configured inventory hostname ${options.metalHostname} is bound as ${accepted.hostname}; refusing work.`);
+    }
+    options.onEvent?.("preflight", {
+      ...report,
+      hostname: accepted.hostname,
+      ready: accepted.ready,
+      state: accepted.state
+    });
     if (!accepted.ready)
       return { status: "idle" };
   }
@@ -2662,7 +2670,7 @@ async function applyMetalIsolation(profile, exec = defaultExec) {
 }
 
 // src/index.ts
-var VERSION = "0.1.10";
+var VERSION = "0.1.11";
 function loadOrCreateSeed(path) {
   if (existsSync9(path)) {
     const seed2 = new Uint8Array(Buffer.from(readFileSync5(path, "utf8").trim(), "base64url"));
@@ -2860,6 +2868,8 @@ if (import.meta.main) {
   if (process.env.FZ_AGENT_ROLE === "metal") {
     if (!process.env.FZ_API)
       throw new Error("metal agent requires FZ_API");
+    if (!process.env.FZ_METAL_HOSTNAME)
+      throw new Error("metal agent requires FZ_METAL_HOSTNAME");
     const seed = process.env.FZ_SEED_CREDENTIAL ? loadSeedCredential(process.env.FZ_SEED_CREDENTIAL) : loadOrCreateSeed(process.env.FZ_SEED_PATH ?? DEFAULT_SEED_PATH);
     const keys2 = deriveKeysFromSeed(seed);
     const nodeKey2 = process.env.FZ_NODE_KEY ?? keys2.ed25519.publicKey;
@@ -2867,6 +2877,7 @@ if (import.meta.main) {
       apiUrl: process.env.FZ_API,
       nodeKey: nodeKey2,
       keys: keys2,
+      metalHostname: process.env.FZ_METAL_HOSTNAME,
       run: (claim) => requestMetalProvision(claim, process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET),
       metalPreflight: () => ({
         snpHost: existsSync9("/dev/sev"),

package/dist/index.d.ts

@@ -25,7 +25,7 @@ import type { SecretCache } from './cache';
  * That preference was implemented in the client long before anything listened.
  * See `socket.ts` for why it signs rather than handing back a token.
  */
-export declare const VERSION = "0.1.10";
+export declare const VERSION = "0.1.11";
 export { startAgent, handleRequest } from './socket';
 export type { AgentOptions, AttestationSource, Request, Response } from './socket';
 export { createSecretCache, CacheError } from './cache';

package/dist/provisioning-pull.d.ts

@@ -36,6 +36,8 @@ export type ProvisionRunner = (claim: RemoteProvisionClaim) => Promise<Provision
 export interface ProvisioningPullOptions extends SignedNodeHttpOptions {
     keys: NodeKeyPair;
     run: ProvisionRunner;
+    /** Inventory record this physical host was deliberately configured to serve. */
+    metalHostname?: string;
     intervalMs?: number;
     completionAttempts?: number;
     sleep?: (ms: number) => Promise<void>;

package/dist/provisioning-pull.js

@@ -123,7 +123,15 @@ async function pullProvisioningOnce(options) {
   if (options.metalPreflight) {
     const report = options.metalPreflight();
     const accepted = await postSignedNode(options, "v1/metal/preflight", report);
-    options.onEvent?.("preflight", { ...report, ready: accepted.ready, state: accepted.state });
+    if (options.metalHostname && accepted.hostname !== options.metalHostname) {
+      throw new Error(`metal agent: configured inventory hostname ${options.metalHostname} is bound as ${accepted.hostname}; refusing work.`);
+    }
+    options.onEvent?.("preflight", {
+      ...report,
+      hostname: accepted.hostname,
+      ready: accepted.ready,
+      state: accepted.state
+    });
     if (!accepted.ready)
       return { status: "idle" };
   }

package/package.json

@@ -1,7 +1,7 @@
 {
 	"//": "Publishing happens from an operator's machine, not CI \u2014 CLAUDE.md records that the absence of CI is deliberate. npm's `provenance` attests a tarball was built by a recognised CI provider from a named commit, so it cannot be produced here: it was set, and the first publish failed with `Automatic provenance generation not supported for provider: null`. A setting that can never be satisfied is worse than none, because it reads as a guarantee nobody is getting. Restore it the day this publishes from CI, and not before.",
 	"name": "@forgezero/agent",
-	"version": "0.1.10",
+	"version": "0.1.11",
 	"type": "module",
 	"scripts": {
 		"check": "tsc --noEmit",