@forgezero/agent 0.1.100 → 0.1.102

package/dist/agent-heartbeat.js

@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.100";
+var VERSION3 = "0.1.102";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.d.ts

@@ -195,8 +195,8 @@ export declare const legacyBootstrapIdentityDigest: (config: BootstrapConfig) =>
 /**
  * Exact, reviewed identity migrations for an already-installed platform host.
  * This is deliberately not a generic "stored coordinates match" escape hatch:
- * only the development collector transition and the addition of reviewed
- * genesis attestation evidence are accepted.
+ * only the development collector transition, reviewed genesis evidence, and
+ * narrowly identified bootstrap-schema repairs are accepted.
  */
 export declare function approvedPlatformRepairIdentityDigests(config: PlatformBootstrapConfig): readonly string[];
 /** Exact prior-release identities accepted only while generation one is still unenrolled. */

package/dist/bootstrap.js

@@ -1420,7 +1420,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.100";
+var VERSION = "0.1.102";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -4303,6 +4303,11 @@ function approvedPlatformRepairIdentityDigests(config) {
     delete beforeAttestation.runtime.environment.initialInventory.attestation;
     prior.push(beforeAttestation);
   }
+  if (config.database.role === "joiner" && config.enrolment.source === "genesis-derived" && config.runtime.environment.custodianEmail) {
+    const beforeReplicaCustodianEmail = structuredClone(config);
+    delete beforeReplicaCustodianEmail.runtime.environment.custodianEmail;
+    prior.push(beforeReplicaCustodianEmail);
+  }
   const telemetryMigration = config.environment === "development" && config.telemetryEndpoint === LOCAL_DEBUG_OTEL_EXPORT && config.runtime.environment.agentOtlpEndpoint === "http://127.0.0.1:4318";
   if (telemetryMigration) {
     const beforeTelemetry = structuredClone(config);

package/dist/fz-agent.js

@@ -9496,7 +9496,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.100";
+var VERSION2 = "0.1.102";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {

package/dist/fz.js

@@ -4634,7 +4634,7 @@ var VaultError, runtimeEnvironment = () => typeof process !== "undefined" && pro
   } catch {
     return;
   }
-}, VERSION = "0.1.18";
+}, VERSION = "0.1.19";
 var init_dist = __esm(() => {
   init_identity();
   VaultError = class VaultError extends Error {
@@ -4841,7 +4841,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.100";
+var VERSION2 = "0.1.102";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -14688,6 +14688,11 @@ function approvedPlatformRepairIdentityDigests(config) {
     delete beforeAttestation.runtime.environment.initialInventory.attestation;
     prior.push(beforeAttestation);
   }
+  if (config.database.role === "joiner" && config.enrolment.source === "genesis-derived" && config.runtime.environment.custodianEmail) {
+    const beforeReplicaCustodianEmail = structuredClone(config);
+    delete beforeReplicaCustodianEmail.runtime.environment.custodianEmail;
+    prior.push(beforeReplicaCustodianEmail);
+  }
   const telemetryMigration = config.environment === "development" && config.telemetryEndpoint === LOCAL_DEBUG_OTEL_EXPORT && config.runtime.environment.agentOtlpEndpoint === "http://127.0.0.1:4318";
   if (telemetryMigration) {
     const beforeTelemetry = structuredClone(config);
@@ -17946,7 +17951,7 @@ function platformGenesisBootstrapConfigs(template, guests, nodes, metalHostname,
       seedSyncPeers: fleet.filter((_, peer) => peer !== index).flatMap((peer) => [config.runtime.bluePort, config.runtime.greenPort].map((port) => `ws://${peer.address}:${port}/_internal/forgezero/seed-mesh/v2`)),
       seedSyncMembers: nodes.map(({ nodeHostname }) => nodeHostname),
       initialInventory,
-      custodianEmail: index === 0 ? template.runtime.environment.custodianEmail : undefined
+      custodianEmail: template.runtime.environment.custodianEmail
     };
     return validateBootstrapConfig(config);
   });

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.100";
+var VERSION = "0.1.102";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1420,7 +1420,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.100";
+var VERSION = "0.1.102";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -4303,6 +4303,11 @@ function approvedPlatformRepairIdentityDigests(config) {
     delete beforeAttestation.runtime.environment.initialInventory.attestation;
     prior.push(beforeAttestation);
   }
+  if (config.database.role === "joiner" && config.enrolment.source === "genesis-derived" && config.runtime.environment.custodianEmail) {
+    const beforeReplicaCustodianEmail = structuredClone(config);
+    delete beforeReplicaCustodianEmail.runtime.environment.custodianEmail;
+    prior.push(beforeReplicaCustodianEmail);
+  }
   const telemetryMigration = config.environment === "development" && config.telemetryEndpoint === LOCAL_DEBUG_OTEL_EXPORT && config.runtime.environment.agentOtlpEndpoint === "http://127.0.0.1:4318";
   if (telemetryMigration) {
     const beforeTelemetry = structuredClone(config);

package/dist/platform-fleet-verification.js

@@ -2908,7 +2908,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.100";
+var VERSION3 = "0.1.102";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -2908,7 +2908,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.100";
+var VERSION3 = "0.1.102";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.100";
+export declare const VERSION = "0.1.102";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.100",
+  "version": "0.1.102",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",
@@ -11,13 +11,13 @@
     "typescript": "^5.6.0",
     "@types/bun": "latest",
     "@types/node": "^22.0.0",
-    "@forgezero/access": "0.1.8",
+    "@forgezero/access": "0.1.9",
     "@noble/curves": "^2.2.0",
     "@noble/post-quantum": "^0.6.1"
   },
   "dependencies": {
-    "@forgezero/runtime": "0.1.13",
-    "@forgezero/vault": "0.1.18",
+    "@forgezero/runtime": "0.1.14",
+    "@forgezero/vault": "0.1.19",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
     "@noble/post-quantum": "0.6.1",