@forgezero/agent 0.1.119 → 0.1.120
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/agent-heartbeat.js +1 -1
- package/dist/bootstrap.js +1 -1
- package/dist/fz-agent.js +12 -10
- package/dist/fz.js +13 -10
- package/dist/metal-bootstrap.js +1 -1
- package/dist/operator-bootstrap.js +1 -1
- package/dist/platform-fleet-verification.js +1 -1
- package/dist/provision.js +1 -1
- package/dist/version.d.ts +1 -1
- package/package.json +4 -4
package/dist/agent-heartbeat.js
CHANGED
package/dist/bootstrap.js
CHANGED
package/dist/fz-agent.js
CHANGED
|
@@ -4049,7 +4049,7 @@ function combineKEMS(realSeedLen, realMsgLen, expandSeed, combiner, ...kems) {
|
|
|
4049
4049
|
var x25519kem = /* @__PURE__ */ ecdhKem(x25519);
|
|
4050
4050
|
var ml_kem768_x25519 = /* @__PURE__ */ (() => combineKEMS(32, 32, expandSeedXof(shake256), (pk, ct, ss) => sha3_256(concatBytes2(ss[0], ss[1], ct[1], pk[1], asciiToBytes("\\.//^\\"))), ml_kem768, x25519kem))();
|
|
4051
4051
|
|
|
4052
|
-
//
|
|
4052
|
+
// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/identity.js
|
|
4053
4053
|
var ENCODER = new TextEncoder;
|
|
4054
4054
|
var b64 = toBase64Url;
|
|
4055
4055
|
var un64 = fromBase64Url;
|
|
@@ -4196,7 +4196,7 @@ function signRequest(keys, nodeKey, args) {
|
|
|
4196
4196
|
};
|
|
4197
4197
|
}
|
|
4198
4198
|
|
|
4199
|
-
//
|
|
4199
|
+
// ../../node_modules/.bun/@forgezero+vault@0.1.22+3f759277d50bc01a/node_modules/@forgezero/vault/dist/index.js
|
|
4200
4200
|
var DEFAULT_SOCKET = "/run/forgezero/vault.sock";
|
|
4201
4201
|
|
|
4202
4202
|
// src/socket.ts
|
|
@@ -4692,7 +4692,7 @@ import { chmodSync as chmodSync4, existsSync as existsSync4, lstatSync as lstatS
|
|
|
4692
4692
|
import { createHash as createHash5, randomUUID } from "crypto";
|
|
4693
4693
|
import { dirname as dirname3, isAbsolute as isAbsolute2, join as join2 } from "path";
|
|
4694
4694
|
|
|
4695
|
-
//
|
|
4695
|
+
// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/queue.js
|
|
4696
4696
|
class QueueStoppedError extends Error {
|
|
4697
4697
|
constructor() {
|
|
4698
4698
|
super("queue: stopped before this task could run");
|
|
@@ -9634,7 +9634,7 @@ async function writeAndCloseProcessInput(input, value) {
|
|
|
9634
9634
|
}
|
|
9635
9635
|
|
|
9636
9636
|
// src/version.ts
|
|
9637
|
-
var VERSION2 = "0.1.
|
|
9637
|
+
var VERSION2 = "0.1.120";
|
|
9638
9638
|
|
|
9639
9639
|
// src/ssh-bootstrap.ts
|
|
9640
9640
|
class SshBootstrapError extends Error {
|
|
@@ -11357,7 +11357,7 @@ function requestDeploymentCommand(input, socketPath = DEFAULT_DEPLOYMENT_RUNNER_
|
|
|
11357
11357
|
// src/snp-attestation.ts
|
|
11358
11358
|
import { existsSync as existsSync10 } from "fs";
|
|
11359
11359
|
|
|
11360
|
-
//
|
|
11360
|
+
// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/snp.js
|
|
11361
11361
|
var REPORT_BYTES = 1184;
|
|
11362
11362
|
|
|
11363
11363
|
// src/snp-attestation.ts
|
|
@@ -17427,6 +17427,7 @@ async function runCommunityRehearsalHost(request) {
|
|
|
17427
17427
|
|
|
17428
17428
|
// src/supervised-app.ts
|
|
17429
17429
|
import { lstatSync as lstatSync9, readFileSync as readFileSync19 } from "fs";
|
|
17430
|
+
import process2 from "process";
|
|
17430
17431
|
function readConfig(path2) {
|
|
17431
17432
|
const stat = lstatSync9(path2);
|
|
17432
17433
|
if (!stat.isFile() || stat.isSymbolicLink() || stat.uid !== 0 || (stat.mode & 18) !== 0 || stat.size > 128 * 1024) {
|
|
@@ -17455,18 +17456,19 @@ async function runSupervisedApp(path2) {
|
|
|
17455
17456
|
});
|
|
17456
17457
|
const forward = (signal) => {
|
|
17457
17458
|
try {
|
|
17458
|
-
|
|
17459
|
+
process2.kill(-child.pid, signal);
|
|
17459
17460
|
} catch {}
|
|
17460
17461
|
};
|
|
17461
17462
|
const term = () => forward("SIGTERM");
|
|
17462
17463
|
const interrupt = () => forward("SIGINT");
|
|
17463
|
-
|
|
17464
|
-
|
|
17464
|
+
const signalProcess = process2;
|
|
17465
|
+
signalProcess.on("SIGTERM", term);
|
|
17466
|
+
signalProcess.on("SIGINT", interrupt);
|
|
17465
17467
|
try {
|
|
17466
17468
|
return await child.exited;
|
|
17467
17469
|
} finally {
|
|
17468
|
-
|
|
17469
|
-
|
|
17470
|
+
signalProcess.off("SIGTERM", term);
|
|
17471
|
+
signalProcess.off("SIGINT", interrupt);
|
|
17470
17472
|
}
|
|
17471
17473
|
}
|
|
17472
17474
|
|
package/dist/fz.js
CHANGED
|
@@ -4261,7 +4261,7 @@ var init_identity = __esm(() => {
|
|
|
4261
4261
|
RESPONSE_CIPHERTEXT_BYTES = length(ml_kem768_x25519.lengths.cipherText, "hybrid response ciphertext");
|
|
4262
4262
|
});
|
|
4263
4263
|
|
|
4264
|
-
//
|
|
4264
|
+
// ../../node_modules/.bun/@forgezero+vault@0.1.22+3f759277d50bc01a/node_modules/@forgezero/vault/dist/index.js
|
|
4265
4265
|
var exports_dist = {};
|
|
4266
4266
|
__export(exports_dist, {
|
|
4267
4267
|
vaultCredentials: () => vaultCredentials,
|
|
@@ -4715,6 +4715,8 @@ function thresholdMode(id) {
|
|
|
4715
4715
|
}
|
|
4716
4716
|
|
|
4717
4717
|
// src/cli/run.ts
|
|
4718
|
+
import process2 from "process";
|
|
4719
|
+
|
|
4718
4720
|
class RunError extends Error {
|
|
4719
4721
|
code;
|
|
4720
4722
|
constructor(code, message) {
|
|
@@ -4793,8 +4795,9 @@ async function spawnWith(command, env, report = () => {}, options = {}) {
|
|
|
4793
4795
|
};
|
|
4794
4796
|
const onInt = forward("SIGINT");
|
|
4795
4797
|
const onTerm = forward("SIGTERM");
|
|
4796
|
-
|
|
4797
|
-
|
|
4798
|
+
const signalProcess = process2;
|
|
4799
|
+
signalProcess.on("SIGINT", onInt);
|
|
4800
|
+
signalProcess.on("SIGTERM", onTerm);
|
|
4798
4801
|
try {
|
|
4799
4802
|
return await new Promise((resolve) => {
|
|
4800
4803
|
child.on("error", (error) => {
|
|
@@ -4804,8 +4807,8 @@ async function spawnWith(command, env, report = () => {}, options = {}) {
|
|
|
4804
4807
|
child.on("exit", (code, signal) => resolve(exitCodeFor({ code, signal })));
|
|
4805
4808
|
});
|
|
4806
4809
|
} finally {
|
|
4807
|
-
|
|
4808
|
-
|
|
4810
|
+
signalProcess.off("SIGINT", onInt);
|
|
4811
|
+
signalProcess.off("SIGTERM", onTerm);
|
|
4809
4812
|
}
|
|
4810
4813
|
}
|
|
4811
4814
|
|
|
@@ -4841,7 +4844,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
|
|
|
4841
4844
|
var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
|
|
4842
4845
|
|
|
4843
4846
|
// src/version.ts
|
|
4844
|
-
var VERSION2 = "0.1.
|
|
4847
|
+
var VERSION2 = "0.1.120";
|
|
4845
4848
|
|
|
4846
4849
|
// src/software.ts
|
|
4847
4850
|
var PINNED_BUN_VERSION = "1.3.14";
|
|
@@ -7295,7 +7298,7 @@ var gcm = /* @__PURE__ */ wrapCipher({ blockSize: 16, nonceLength: 12, tagLength
|
|
|
7295
7298
|
};
|
|
7296
7299
|
});
|
|
7297
7300
|
|
|
7298
|
-
//
|
|
7301
|
+
// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/custody-share.js
|
|
7299
7302
|
init_hkdf();
|
|
7300
7303
|
init_sha2();
|
|
7301
7304
|
init_hybrid();
|
|
@@ -9911,7 +9914,7 @@ zone
|
|
|
9911
9914
|
zoo`.split(`
|
|
9912
9915
|
`));
|
|
9913
9916
|
|
|
9914
|
-
//
|
|
9917
|
+
// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/custody-share.js
|
|
9915
9918
|
init_hkdf();
|
|
9916
9919
|
init_sha2();
|
|
9917
9920
|
var KEY_BYTES = 32;
|
|
@@ -11926,7 +11929,7 @@ function inspectCompiledDeployment(rootValue, outputFile = DEPLOY_PLAN_FILE) {
|
|
|
11926
11929
|
return { path, plan, digest: deploymentPlanDigest(plan) };
|
|
11927
11930
|
}
|
|
11928
11931
|
|
|
11929
|
-
//
|
|
11932
|
+
// ../../node_modules/.bun/@forgezero+vault@0.1.22+3f759277d50bc01a/node_modules/@forgezero/vault/dist/config.js
|
|
11930
11933
|
class ConfigError extends Error {
|
|
11931
11934
|
code;
|
|
11932
11935
|
constructor(code, message) {
|
|
@@ -21031,7 +21034,7 @@ function usage() {
|
|
|
21031
21034
|
24-word BIP-39 phrase by owner-only file or stdin; it is never accepted in
|
|
21032
21035
|
argv. Each custodian runs it in their own authenticated session; no process
|
|
21033
21036
|
collects several custodians' phrases. Fresh privileged actions use the
|
|
21034
|
-
browser passkey
|
|
21037
|
+
browser account-passkey flow; SSH is transport and Git interoperability only.
|
|
21035
21038
|
`);
|
|
21036
21039
|
}
|
|
21037
21040
|
if (import.meta.main) {
|
package/dist/metal-bootstrap.js
CHANGED
|
@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
|
|
|
366
366
|
}
|
|
367
367
|
|
|
368
368
|
// src/version.ts
|
|
369
|
-
var VERSION = "0.1.
|
|
369
|
+
var VERSION = "0.1.120";
|
|
370
370
|
|
|
371
371
|
// src/otel-collector.ts
|
|
372
372
|
var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";
|
|
@@ -3016,7 +3016,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
|
|
|
3016
3016
|
}
|
|
3017
3017
|
|
|
3018
3018
|
// src/version.ts
|
|
3019
|
-
var VERSION3 = "0.1.
|
|
3019
|
+
var VERSION3 = "0.1.120";
|
|
3020
3020
|
|
|
3021
3021
|
// src/egress-policy.ts
|
|
3022
3022
|
import { realpathSync as realpathSync3 } from "node:fs";
|
package/dist/provision.js
CHANGED
|
@@ -3016,7 +3016,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
|
|
|
3016
3016
|
}
|
|
3017
3017
|
|
|
3018
3018
|
// src/version.ts
|
|
3019
|
-
var VERSION3 = "0.1.
|
|
3019
|
+
var VERSION3 = "0.1.120";
|
|
3020
3020
|
|
|
3021
3021
|
// src/egress-policy.ts
|
|
3022
3022
|
import { realpathSync as realpathSync3 } from "node:fs";
|
package/dist/version.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
/** One package version shared by both public binaries. Pinned to package.json by tests. */
|
|
2
|
-
export declare const VERSION = "0.1.
|
|
2
|
+
export declare const VERSION = "0.1.120";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@forgezero/agent",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.120",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"check": "tsc --noEmit",
|
|
@@ -11,13 +11,13 @@
|
|
|
11
11
|
"typescript": "^5.6.0",
|
|
12
12
|
"@types/bun": "latest",
|
|
13
13
|
"@types/node": "^22.0.0",
|
|
14
|
-
"@forgezero/access": "0.1.
|
|
14
|
+
"@forgezero/access": "0.1.13",
|
|
15
15
|
"@noble/curves": "^2.2.0",
|
|
16
16
|
"@noble/post-quantum": "^0.6.1"
|
|
17
17
|
},
|
|
18
18
|
"dependencies": {
|
|
19
|
-
"@forgezero/runtime": "0.1.
|
|
20
|
-
"@forgezero/vault": "0.1.
|
|
19
|
+
"@forgezero/runtime": "0.1.18",
|
|
20
|
+
"@forgezero/vault": "0.1.24",
|
|
21
21
|
"@noble/curves": "2.2.0",
|
|
22
22
|
"@noble/hashes": "2.2.0",
|
|
23
23
|
"@noble/post-quantum": "0.6.1",
|