@forgezero/agent 0.1.119 → 0.1.121

package/dist/agent-heartbeat.js

@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.119";
+var VERSION3 = "0.1.121";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.119";
+var VERSION = "0.1.121";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/community-rehearsal-host.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/definition.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/deploy-file.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/deployment.d.ts

@@ -1,6 +1,6 @@
 import { type DrainReport, type QueueTask } from '@forgezero/runtime/queue';
 import { type GitHostResolver } from './git-egress';
-import { type SoftwareRequirement } from './software';
+import { type ManagedSoftwareEvidence, type SoftwareRequirement } from './software';
 import type { DeploymentService } from './definition';
 import type { ServiceActivationState } from './service-supervisor';
 import type { ContainerActivateRequest, ContainerBuildRequest, ContainerBuildResult } from './container-supervisor';
@@ -74,7 +74,9 @@ export interface DeploymentResult {
     profile: string;
     /** Resolved only from the validated plan and its bounded inputs at this revision. */
     resolvedTargets?: readonly ResolvedDeploymentTarget[];
-    /** Distinct paid catalogue entries successfully managed on this compute. */
+    /** Exact distinct catalogue entries successfully managed on this compute. */
+    managedSoftware: readonly ManagedSoftwareEvidence[];
+    /** Derived compatibility count; managedSoftware remains authoritative. */
     paidManagedSoftwareCount: number;
     release: string;
     ok: boolean;

package/dist/fz-agent.js

@@ -4049,7 +4049,7 @@ function combineKEMS(realSeedLen, realMsgLen, expandSeed, combiner, ...kems) {
 var x25519kem = /* @__PURE__ */ ecdhKem(x25519);
 var ml_kem768_x25519 = /* @__PURE__ */ (() => combineKEMS(32, 32, expandSeedXof(shake256), (pk, ct, ss) => sha3_256(concatBytes2(ss[0], ss[1], ct[1], pk[1], asciiToBytes("\\.//^\\"))), ml_kem768, x25519kem))();
 
-// ../runtime/dist/identity.js
+// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/identity.js
 var ENCODER = new TextEncoder;
 var b64 = toBase64Url;
 var un64 = fromBase64Url;
@@ -4196,7 +4196,7 @@ function signRequest(keys, nodeKey, args) {
   };
 }
 
-// ../vault/dist/index.js
+// ../../node_modules/.bun/@forgezero+vault@0.1.22+3f759277d50bc01a/node_modules/@forgezero/vault/dist/index.js
 var DEFAULT_SOCKET = "/run/forgezero/vault.sock";
 
 // src/socket.ts
@@ -4692,7 +4692,7 @@ import { chmodSync as chmodSync4, existsSync as existsSync4, lstatSync as lstatS
 import { createHash as createHash5, randomUUID } from "crypto";
 import { dirname as dirname3, isAbsolute as isAbsolute2, join as join2 } from "path";
 
-// ../runtime/dist/queue.js
+// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/queue.js
 class QueueStoppedError extends Error {
   constructor() {
     super("queue: stopped before this task could run");
@@ -5075,7 +5075,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },
@@ -8307,7 +8311,7 @@ function createDeploymentManager(options) {
     const planPath = join2(release, DEPLOY_PLAN_FILE);
     if (existsSync4(planPath)) {
       const plan = parseDeploymentPlan(readDefinition(planPath));
-      const paidManagedSoftware = new Set;
+      const managedSoftware2 = new Map;
       for (const workflow of Object.values(plan.spec.workflows))
         for (const stage2 of Object.values(workflow.stages)) {
           if (stage2.strategy.mode === "rolling" || stage2.strategy.mode === "canary" || Object.values(stage2.steps).some((step2) => step2.scope.kind === "target-batches")) {
@@ -8468,10 +8472,8 @@ function createDeploymentManager(options) {
             return { id: id2, version: requirement2.version };
           });
           await options.ensureSoftware(requirements);
-          for (const requirement2 of requirements) {
-            if (countPaidManagedSoftware([requirement2]) === 1) {
-              paidManagedSoftware.add(`${requirement2.id}@${requirement2.version}`);
-            }
+          for (const evidence of managedSoftwareEvidence(requirements)) {
+            managedSoftware2.set(`${evidence.id}@${evidence.version}`, evidence);
           }
           return { changed: true };
         },
@@ -8707,7 +8709,8 @@ function createDeploymentManager(options) {
         phases: [phase],
         execution: deploymentExecution([phase]),
         resolvedTargets,
-        paidManagedSoftwareCount: paidManagedSoftware.size,
+        managedSoftware: [...managedSoftware2.values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version)),
+        paidManagedSoftwareCount: [...managedSoftware2.values()].filter((item) => item.billingClass === "paid-managed").length,
         ...capacity2 ? { capacity: capacity2 } : {}
       };
     }
@@ -8816,6 +8819,7 @@ function createDeploymentManager(options) {
         }
       };
     }
+    const managedSoftware = managedSoftwareEvidence(selectedProfile.software);
     return {
       key: options.key,
       repository: options.repository,
@@ -8824,7 +8828,8 @@ function createDeploymentManager(options) {
       definitionDigest,
       definitionVersion: 2,
       profile: options.profile,
-      paidManagedSoftwareCount: countPaidManagedSoftware(selectedProfile.software),
+      managedSoftware,
+      paidManagedSoftwareCount: managedSoftware.filter((item) => item.billingClass === "paid-managed").length,
       release,
       ok: true,
       phases,
@@ -9153,6 +9158,7 @@ async function pullDeploymentOnce(options) {
     definitionDigest: result.definitionDigest,
     definitionVersion: result.definitionVersion,
     profile: result.profile,
+    managedSoftware: result.managedSoftware,
     paidManagedSoftwareCount: result.paidManagedSoftwareCount,
     execution: result.execution,
     ...result.resolvedTargets ? { resolvedTargets: result.resolvedTargets.map((target) => ({
@@ -9634,7 +9640,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.119";
+var VERSION2 = "0.1.121";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {
@@ -11357,7 +11363,7 @@ function requestDeploymentCommand(input, socketPath = DEFAULT_DEPLOYMENT_RUNNER_
 // src/snp-attestation.ts
 import { existsSync as existsSync10 } from "fs";
 
-// ../runtime/dist/snp.js
+// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/snp.js
 var REPORT_BYTES = 1184;
 
 // src/snp-attestation.ts
@@ -17427,6 +17433,7 @@ async function runCommunityRehearsalHost(request) {
 
 // src/supervised-app.ts
 import { lstatSync as lstatSync9, readFileSync as readFileSync19 } from "fs";
+import process2 from "process";
 function readConfig(path2) {
   const stat = lstatSync9(path2);
   if (!stat.isFile() || stat.isSymbolicLink() || stat.uid !== 0 || (stat.mode & 18) !== 0 || stat.size > 128 * 1024) {
@@ -17455,18 +17462,19 @@ async function runSupervisedApp(path2) {
   });
   const forward = (signal) => {
     try {
-      process.kill(-child.pid, signal);
+      process2.kill(-child.pid, signal);
     } catch {}
   };
   const term = () => forward("SIGTERM");
   const interrupt = () => forward("SIGINT");
-  process.on("SIGTERM", term);
-  process.on("SIGINT", interrupt);
+  const signalProcess = process2;
+  signalProcess.on("SIGTERM", term);
+  signalProcess.on("SIGINT", interrupt);
   try {
     return await child.exited;
   } finally {
-    process.off("SIGTERM", term);
-    process.off("SIGINT", interrupt);
+    signalProcess.off("SIGTERM", term);
+    signalProcess.off("SIGINT", interrupt);
   }
 }
 

package/dist/fz.js

@@ -4261,7 +4261,7 @@ var init_identity = __esm(() => {
   RESPONSE_CIPHERTEXT_BYTES = length(ml_kem768_x25519.lengths.cipherText, "hybrid response ciphertext");
 });
 
-// ../vault/dist/index.js
+// ../../node_modules/.bun/@forgezero+vault@0.1.22+3f759277d50bc01a/node_modules/@forgezero/vault/dist/index.js
 var exports_dist = {};
 __export(exports_dist, {
   vaultCredentials: () => vaultCredentials,
@@ -4715,6 +4715,8 @@ function thresholdMode(id) {
 }
 
 // src/cli/run.ts
+import process2 from "process";
+
 class RunError extends Error {
   code;
   constructor(code, message) {
@@ -4793,8 +4795,9 @@ async function spawnWith(command, env, report = () => {}, options = {}) {
   };
   const onInt = forward("SIGINT");
   const onTerm = forward("SIGTERM");
-  process.on("SIGINT", onInt);
-  process.on("SIGTERM", onTerm);
+  const signalProcess = process2;
+  signalProcess.on("SIGINT", onInt);
+  signalProcess.on("SIGTERM", onTerm);
   try {
     return await new Promise((resolve) => {
       child.on("error", (error) => {
@@ -4804,8 +4807,8 @@ async function spawnWith(command, env, report = () => {}, options = {}) {
       child.on("exit", (code, signal) => resolve(exitCodeFor({ code, signal })));
     });
   } finally {
-    process.off("SIGINT", onInt);
-    process.off("SIGTERM", onTerm);
+    signalProcess.off("SIGINT", onInt);
+    signalProcess.off("SIGTERM", onTerm);
   }
 }
 
@@ -4841,7 +4844,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.119";
+var VERSION2 = "0.1.121";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -7295,7 +7298,7 @@ var gcm = /* @__PURE__ */ wrapCipher({ blockSize: 16, nonceLength: 12, tagLength
   };
 });
 
-// ../runtime/dist/custody-share.js
+// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/custody-share.js
 init_hkdf();
 init_sha2();
 init_hybrid();
@@ -9911,7 +9914,7 @@ zone
 zoo`.split(`
 `));
 
-// ../runtime/dist/custody-share.js
+// ../../node_modules/.bun/@forgezero+runtime@0.1.17+cd212ec15d36da0a/node_modules/@forgezero/runtime/dist/custody-share.js
 init_hkdf();
 init_sha2();
 var KEY_BYTES = 32;
@@ -11926,7 +11929,7 @@ function inspectCompiledDeployment(rootValue, outputFile = DEPLOY_PLAN_FILE) {
   return { path, plan, digest: deploymentPlanDigest(plan) };
 }
 
-// ../vault/dist/config.js
+// ../../node_modules/.bun/@forgezero+vault@0.1.22+3f759277d50bc01a/node_modules/@forgezero/vault/dist/config.js
 class ConfigError extends Error {
   code;
   constructor(code, message) {
@@ -21031,7 +21034,7 @@ function usage() {
     24-word BIP-39 phrase by owner-only file or stdin; it is never accepted in
     argv. Each custodian runs it in their own authenticated session; no process
     collects several custodians' phrases. Fresh privileged actions use the
-    browser passkey/TOTP flow; SSH is transport and Git interoperability only.
+    browser account-passkey flow; SSH is transport and Git interoperability only.
 `);
 }
 if (import.meta.main) {

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.119";
+var VERSION = "0.1.121";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/metal-helper-socket.js

@@ -219,7 +219,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/metal-provision.js

@@ -219,7 +219,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/operator-bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.119";
+var VERSION = "0.1.121";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-bootstrap-runtime.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/platform-fleet-verification.js

@@ -922,7 +922,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },
@@ -3016,7 +3020,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.119";
+var VERSION3 = "0.1.121";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/platform-genesis.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/provision.js

@@ -922,7 +922,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },
@@ -3016,7 +3020,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.119";
+var VERSION3 = "0.1.121";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/software-helper.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/software.d.ts

@@ -15,6 +15,8 @@ export interface SoftwareCatalogEntry extends SoftwareRequirement {
     /** What promotes this coordinate beyond an unreviewed candidate. */
     evidence: 'reviewed-strategy-and-tests';
 }
+/** Browser-safe evidence for one distinct managed software coordinate. */
+export type ManagedSoftwareEvidence = Pick<SoftwareCatalogEntry, 'id' | 'version' | 'billingClass'>;
 export interface OsCatalogEntry {
     id: 'ubuntu';
     version: '24.04' | '26.04';
@@ -57,6 +59,8 @@ export declare const KATA_CONTAINERS_VERSION = "4.0.0";
 export declare const OS_CATALOG: readonly OsCatalogEntry[];
 export declare const SOFTWARE_CATALOG: readonly SoftwareCatalogEntry[];
 export declare const softwareBillingClass: (requirement: SoftwareRequirement) => SoftwareCatalogEntry["billingClass"];
+/** Canonical inventory reported after a successful deployment. */
+export declare const managedSoftwareEvidence: (requirements: readonly SoftwareRequirement[]) => ManagedSoftwareEvidence[];
 /** Counts distinct paid software instances managed on one compute. */
 export declare const countPaidManagedSoftware: (requirements: readonly SoftwareRequirement[]) => number;
 export declare const softwareSpawnFailure: (cause: unknown, argv: readonly string[]) => SoftwareCommandResult | undefined;

package/dist/software.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },
@@ -556,6 +560,7 @@ export {
   softwareBillingClass,
   runSoftwareCommand,
   observeSoftwareHost,
+  managedSoftwareEvidence,
   executeSoftwareOperation,
   ensureSoftwareRequirements,
   countPaidManagedSoftware,

package/dist/ubuntu.js

@@ -79,7 +79,11 @@ var softwareBillingClass = (requirement) => {
     throw new Error(`unsupported software billing coordinate: ${requirement.id}@${requirement.version}`);
   return entry.billingClass;
 };
-var countPaidManagedSoftware = (requirements) => new Set(requirements.filter((requirement) => softwareBillingClass(requirement) === "paid-managed").map((requirement) => `${requirement.id}@${requirement.version}`)).size;
+var managedSoftwareEvidence = (requirements) => [...new Map(requirements.map((requirement) => {
+  const billingClass = softwareBillingClass(requirement);
+  return [`${requirement.id}@${requirement.version}`, { ...requirement, billingClass }];
+})).values()].sort((left, right) => left.id.localeCompare(right.id) || left.version.localeCompare(right.version));
+var countPaidManagedSoftware = (requirements) => managedSoftwareEvidence(requirements).filter((requirement) => requirement.billingClass === "paid-managed").length;
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
   { requirement: { id: "docker", version: "ubuntu-26.04" } },

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.119";
+export declare const VERSION = "0.1.121";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.119",
+  "version": "0.1.121",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",
@@ -11,13 +11,13 @@
     "typescript": "^5.6.0",
     "@types/bun": "latest",
     "@types/node": "^22.0.0",
-    "@forgezero/access": "0.1.12",
+    "@forgezero/access": "0.1.13",
     "@noble/curves": "^2.2.0",
     "@noble/post-quantum": "^0.6.1"
   },
   "dependencies": {
-    "@forgezero/runtime": "0.1.17",
-    "@forgezero/vault": "0.1.22",
+    "@forgezero/runtime": "0.1.18",
+    "@forgezero/vault": "0.1.24",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
     "@noble/post-quantum": "0.6.1",