@forgezero/agent 0.1.10 → 0.1.12

package/dist/provisioning-pull.js

@@ -1,5 +1,11 @@
 // src/signed-node-http.ts
-import { signRequest } from "@forgezero/runtime/identity";
+import {
+  encodeSignatureHeader,
+  generateResponseRecipient,
+  openResponse,
+  RESPONSE_KEY_HEADER,
+  signRequest
+} from "@forgezero/runtime/identity";
 
 class SignedNodeHttpError extends Error {
   status;
@@ -9,30 +15,28 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
-var signatureHeader = (envelope) => Buffer.from(JSON.stringify({
-  timestamp: envelope.timestamp,
-  nonce: envelope.nonce,
-  edSignature: envelope.edSignature,
-  mlDsaSignature: envelope.mlDsaSignature
-})).toString("base64url");
-async function postSignedNode(options, path, body) {
+async function postSignedNode(options, path, body, sealedResponse = false) {
   const url = new URL(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";
   const raw = JSON.stringify(body);
+  const recipient = sealedResponse ? generateResponseRecipient() : undefined;
   const envelope = signRequest(options.keys, options.nodeKey, {
     method: "POST",
     path: url.pathname,
     query: "",
-    body: raw
+    body: raw,
+    responseKey: recipient?.publicKey
   });
+  const signature = encodeSignatureHeader(envelope);
   const response = await (options.fetch ?? globalThis.fetch)(url, {
     method: "POST",
     headers: {
       "content-type": "application/json",
       "x-fz-node": options.nodeKey,
-      "x-fz-signature": signatureHeader(envelope)
+      "x-fz-signature": signature,
+      ...recipient ? { [RESPONSE_KEY_HEADER]: recipient.publicKey } : {}
     },
     body: raw,
     signal: AbortSignal.timeout(options.requestTimeoutMs ?? 15000)
@@ -43,6 +47,13 @@ async function postSignedNode(options, path, body) {
     const reason = failure ? failure.error?.message ?? failure.message : undefined;
     throw new SignedNodeHttpError(response.status, reason || `signed node request returned HTTP ${response.status}`);
   }
+  if (recipient) {
+    try {
+      return await openResponse(recipient.secretKey, signature, payload);
+    } catch {
+      throw new SignedNodeHttpError(502, "The node response was not sealed to this request.");
+    }
+  }
   return payload;
 }
 
@@ -123,7 +134,15 @@ async function pullProvisioningOnce(options) {
   if (options.metalPreflight) {
     const report = options.metalPreflight();
     const accepted = await postSignedNode(options, "v1/metal/preflight", report);
-    options.onEvent?.("preflight", { ...report, ready: accepted.ready, state: accepted.state });
+    if (options.metalHostname && accepted.hostname !== options.metalHostname) {
+      throw new Error(`metal agent: configured inventory hostname ${options.metalHostname} is bound as ${accepted.hostname}; refusing work.`);
+    }
+    options.onEvent?.("preflight", {
+      ...report,
+      hostname: accepted.hostname,
+      ready: accepted.ready,
+      state: accepted.state
+    });
     if (!accepted.ready)
       return { status: "idle" };
   }

package/dist/signed-node-http.d.ts

@@ -11,4 +11,4 @@ export declare class SignedNodeHttpError extends Error {
     constructor(status: number, message: string);
 }
 /** One implementation of the hybrid-signed machine HTTP contract. */
-export declare function postSignedNode<T>(options: SignedNodeHttpOptions, path: string, body: object): Promise<T>;
+export declare function postSignedNode<T>(options: SignedNodeHttpOptions, path: string, body: object, sealedResponse?: boolean): Promise<T>;

package/dist/socket.d.ts

@@ -27,10 +27,11 @@ import type { SecretCache } from './cache';
  *
  * ## Peer credentials, not a shared secret
  *
- * Access control is the filesystem's: the socket is created 0600, owned by the
- * user the agent runs as, and only that user's processes can connect. A token
- * checked over the socket would have to live somewhere both sides can read,
- * which is the problem this exists to remove rather than a solution to it.
+ * Access control is the filesystem's: the socket is created 0660 under the
+ * dedicated `forgezero-vault` service group. An application service account is
+ * admitted by group membership; unrelated users and the deployment runner are
+ * not. A token checked over the socket would have to live somewhere both sides
+ * can read, which is the problem this exists to remove rather than a solution.
  */
 export declare class AgentError extends Error {
     readonly code: string;
@@ -50,11 +51,15 @@ export type Request = {
     nonce?: string;
 } | {
     op: 'get';
+    project: string;
+    environment: string;
     name: string;
 } | {
     op: 'sync';
 } | {
     op: 'held';
+    project: string;
+    environment: string;
 };
 export type Response = {
     ok: true;
@@ -125,6 +130,8 @@ export interface AgentOptions {
      * database URL fails somewhere far from here.
      */
     cache?: SecretCache;
+    /** Project boundary attached by the platform during one-time enrolment. */
+    projectKey?: string;
     /** Every request, for the hash-chained journal. */
     record?: (entry: {
         op: string;

package/dist/ubuntu.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The only guest operating system ForgeZero currently supports.
+ *
+ * A dated Canonical release directory and its published SHA-256 make image
+ * acquisition reproducible. `release/current` is deliberately forbidden: it
+ * changes underneath an already reviewed metal profile.
+ */
+export declare const SUPPORTED_GUEST_IMAGE: Readonly<{
+    readonly key: "ubuntu-resolute-20260731";
+    readonly family: "ubuntu-26.04";
+    readonly version: "2026-07-31";
+    readonly label: "Ubuntu 26.04 LTS Resolute";
+    readonly url: "https://cloud-images.ubuntu.com/releases/resolute/release-20260731/ubuntu-26.04-server-cloudimg-amd64.img";
+    readonly sha256: "9dc7c5363c0146a08ba0c9aa834d82c2c6dfbb1c471ad9a2f0aba1189e21be05";
+}>;
+export declare function assertSupportedGuestImage(imageKey: string): void;

package/dist/ubuntu.js

@@ -0,0 +1,18 @@
+// src/ubuntu.ts
+var SUPPORTED_GUEST_IMAGE = Object.freeze({
+  key: "ubuntu-resolute-20260731",
+  family: "ubuntu-26.04",
+  version: "2026-07-31",
+  label: "Ubuntu 26.04 LTS Resolute",
+  url: "https://cloud-images.ubuntu.com/releases/resolute/release-20260731/ubuntu-26.04-server-cloudimg-amd64.img",
+  sha256: "9dc7c5363c0146a08ba0c9aa834d82c2c6dfbb1c471ad9a2f0aba1189e21be05"
+});
+function assertSupportedGuestImage(imageKey) {
+  if (imageKey !== SUPPORTED_GUEST_IMAGE.key) {
+    throw new Error(`unsupported guest image ${imageKey}; ForgeZero currently supports only ${SUPPORTED_GUEST_IMAGE.key}`);
+  }
+}
+export {
+  assertSupportedGuestImage,
+  SUPPORTED_GUEST_IMAGE
+};

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+/** One package version shared by both public binaries. Pinned to package.json by tests. */
+export declare const VERSION = "0.1.12";

package/package.json

@@ -1,11 +1,12 @@
 {
 	"//": "Publishing happens from an operator's machine, not CI \u2014 CLAUDE.md records that the absence of CI is deliberate. npm's `provenance` attests a tarball was built by a recognised CI provider from a named commit, so it cannot be produced here: it was set, and the first publish failed with `Automatic provenance generation not supported for provider: null`. A setting that can never be satisfied is worse than none, because it reads as a guarantee nobody is getting. Restore it the day this publishes from CI, and not before.",
 	"name": "@forgezero/agent",
-	"version": "0.1.10",
+	"version": "0.1.12",
 	"type": "module",
 	"scripts": {
 		"check": "tsc --noEmit",
-		"build": "bun build src/index.ts --outfile dist/fz-agent.js --target bun --format esm --packages external && bun build src/cli/index.ts --outfile dist/fz.js --target bun --format esm --packages external && bun build src/compute.ts src/provision.ts src/subscribe.ts src/pipeline.ts src/definition.ts src/ssh-server.ts src/ssh-listen.ts src/provisioning-pull.ts src/guest-enrolment.ts src/node-vault.ts src/metal-provision.ts src/metal-helper-socket.ts src/deployment-runner.ts --root src --outdir dist --target browser --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
+		"prebuild": "rm -rf dist",
+		"build": "bun build src/index.ts --outfile dist/fz-agent.js --target bun --format esm --packages external && bun build src/cli/index.ts --outfile dist/fz.js --target bun --format esm --packages external && bun build src/compute.ts src/provision.ts src/subscribe.ts src/pipeline.ts src/definition.ts src/ssh-server.ts src/ssh-listen.ts src/provisioning-pull.ts src/guest-enrolment.ts src/node-vault.ts src/metal-provision.ts src/metal-helper-socket.ts src/deployment-runner.ts src/ubuntu.ts --root src --outdir dist --target browser --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"devDependencies": {
@@ -17,16 +18,16 @@
 	},
 	"dependencies": {
 		"@forgezero/access": "^0.1.0",
-		"@forgezero/runtime": "^0.1.2",
-		"@forgezero/vault": "^0.1.1",
+		"@forgezero/runtime": "^0.1.3",
+		"@forgezero/vault": "^0.1.5",
 		"@noble/curves": "^2.2.0",
 		"@noble/hashes": "^2.2.0",
 		"@noble/post-quantum": "^0.6.1",
 		"@scure/bip39": "^2.2.0"
 	},
 	"bin": {
-		"fz-agent": "./dist/fz-agent.js",
-		"fz": "./dist/fz.js"
+		"fz-agent": "dist/fz-agent.js",
+		"fz": "dist/fz.js"
 	},
 	"publishConfig": {
 		"access": "public"
@@ -90,6 +91,10 @@
 		"./metal-provision": {
 			"types": "./dist/metal-provision.d.ts",
 			"default": "./dist/metal-provision.js"
+		},
+		"./ubuntu": {
+			"types": "./dist/ubuntu.d.ts",
+			"default": "./dist/ubuntu.js"
 		}
 	}
 }

package/dist/attestation-client.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cache.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/agent-install.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/options.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/cli/run.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/compute.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/control.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/definition.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/deployment-pull.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/deployment-runner.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/deployment-watch.d.ts

@@ -1,36 +0,0 @@
-import type { DeploymentManager } from './deployment';
-export type StaticDeploymentOutcome = 'pending' | 'running' | 'deployed' | 'failed';
-export interface StaticDeploymentState {
-    revision: string;
-    outcome: StaticDeploymentOutcome;
-    updatedAtTs: number;
-    detail?: string;
-}
-export interface StaticDeploymentWatchOptions {
-    manager: DeploymentManager;
-    statePath: string;
-    coordinator?: boolean;
-    intervalMs?: number;
-    readState?: () => StaticDeploymentState | null;
-    writeState?: (state: StaticDeploymentState) => void;
-    /** Active release on the first watcher boot, before a state file exists. */
-    currentRevision?: () => string | undefined;
-    setTimer?: (callback: () => void, ms: number) => unknown;
-    clearTimer?: (handle: unknown) => void;
-    now?: () => number;
-    onEvent?: (event: string, detail?: unknown) => void;
-}
-export declare function readStaticDeploymentState(path: string): StaticDeploymentState | null;
-export declare function writeStaticDeploymentState(path: string, state: StaticDeploymentState): void;
-/**
- * Git is only an intake adapter. Every discovered revision is still executed
- * by DeploymentManager and therefore by the common keyed async queue.
- *
- * The state file is business recovery state, not queue persistence: pending
- * and running are written before execution, so a process crash re-submits the
- * exact commit on boot; deployed is written only after the awaited result.
- */
-export declare function startStaticDeploymentWatch(options: StaticDeploymentWatchOptions): {
-    stop(): Promise<void>;
-    readonly active: boolean;
-};

package/dist/deployment-watch.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/deployment.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/guest-enrolment.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/index.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/metal-helper-socket.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/metal-isolation.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/metal-provision.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/node-vault.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/pipeline.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/provisioning-pull.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/snp-attestation.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/socket.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/ssh-listen.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/ssh-server.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/subscribe.test.d.ts

@@ -1 +0,0 @@
-export {};