@forgezero/agent 0.1.123 → 0.1.124

package/dist/agent-heartbeat.js

@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.123";
+var VERSION3 = "0.1.124";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.123";
+var VERSION = "0.1.124";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/community-rehearsal-host.js

@@ -705,10 +705,10 @@ User=forgezero
 Group=forgezero
 WorkingDirectory=${COMMUNITY_REHEARSAL_ROOT}/current
 LoadCredentialEncrypted=arangodb-jwt:${COMMUNITY_CREDENTIAL_ROOT}/arangodb-jwt.cred
-Environment=HOST=127.0.0.1
+Environment=HOST=${node.address}
 Environment=PORT=${COMMUNITY_REHEARSAL_API_PORT}
 Environment=NODE_NAME=${node.name}
-Environment=ARANGO_URL=http://127.0.0.1:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}
+Environment=ARANGO_URL=http://${node.address}:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}
 Environment=ARANGO_URLS=${urls}
 Environment=ARANGO_READ_PREFERRED_URLS=${readPreferred}
 Environment=ARANGO_READ_PREFERRED_FALLBACK=error
@@ -757,6 +757,23 @@ function planCommunityRehearsalPrepare(request) {
         COMMUNITY_REHEARSAL_FIREWALL_COMMENT
       ]
     })),
+    ...topology.map(({ address }) => ({
+      kind: "exec",
+      argv: [
+        "/usr/sbin/ufw",
+        "allow",
+        "from",
+        address,
+        "to",
+        "any",
+        "port",
+        String(COMMUNITY_REHEARSAL_API_PORT),
+        "proto",
+        "tcp",
+        "comment",
+        COMMUNITY_REHEARSAL_FIREWALL_COMMENT
+      ]
+    })),
     { kind: "remove-tree", path: COMMUNITY_DATABASE_ROOT },
     { kind: "exec", argv: ["/usr/bin/install", "-d", "-m", "0700", "-o", "root", "-g", "root", COMMUNITY_CREDENTIAL_ROOT] },
     { kind: "exec", argv: ["/usr/bin/install", "-d", "-m", "0700", "-o", "arangodb", "-g", "arangodb", COMMUNITY_DATABASE_ROOT] },
@@ -849,7 +866,8 @@ async function clearCommunityRehearsalFirewall() {
   }
 }
 var responseFor = async (request) => {
-  const base = `http://127.0.0.1:${COMMUNITY_REHEARSAL_API_PORT}`;
+  const node = request.topology.find((entry) => entry.name === request.node);
+  const base = `http://${node.address}:${COMMUNITY_REHEARSAL_API_PORT}`;
   if (request.operation === "health")
     return fetch(`${base}/health`, { signal: AbortSignal.timeout(15000) });
   if (request.operation === "init")
@@ -911,7 +929,7 @@ async function runCommunityRehearsalHost(request) {
   }
   if (request.action === "database-ready" || request.action === "starter-ready" || request.action === "api-ready") {
     const starter = topology.find((entry) => entry.starter);
-    const url = request.action === "database-ready" ? `http://127.0.0.1:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}/_api/version` : request.action === "starter-ready" ? `http://${starter.address}:${COMMUNITY_REHEARSAL_STARTER_PORT}/version` : `http://127.0.0.1:${COMMUNITY_REHEARSAL_API_PORT}/health`;
+    const url = request.action === "database-ready" ? `http://${node.address}:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}/_api/version` : request.action === "starter-ready" ? `http://${starter.address}:${COMMUNITY_REHEARSAL_STARTER_PORT}/version` : `http://${node.address}:${COMMUNITY_REHEARSAL_API_PORT}/health`;
     const response2 = await fetch(url, { signal: AbortSignal.timeout(2000) }).catch(() => {
       return;
     });

package/dist/fz-agent.js

@@ -9640,7 +9640,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.123";
+var VERSION2 = "0.1.124";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {
@@ -17253,10 +17253,10 @@ User=forgezero
 Group=forgezero
 WorkingDirectory=${COMMUNITY_REHEARSAL_ROOT}/current
 LoadCredentialEncrypted=arangodb-jwt:${COMMUNITY_CREDENTIAL_ROOT}/arangodb-jwt.cred
-Environment=HOST=127.0.0.1
+Environment=HOST=${node.address}
 Environment=PORT=${COMMUNITY_REHEARSAL_API_PORT}
 Environment=NODE_NAME=${node.name}
-Environment=ARANGO_URL=http://127.0.0.1:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}
+Environment=ARANGO_URL=http://${node.address}:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}
 Environment=ARANGO_URLS=${urls}
 Environment=ARANGO_READ_PREFERRED_URLS=${readPreferred}
 Environment=ARANGO_READ_PREFERRED_FALLBACK=error
@@ -17305,6 +17305,23 @@ function planCommunityRehearsalPrepare(request) {
         COMMUNITY_REHEARSAL_FIREWALL_COMMENT
       ]
     })),
+    ...topology.map(({ address }) => ({
+      kind: "exec",
+      argv: [
+        "/usr/sbin/ufw",
+        "allow",
+        "from",
+        address,
+        "to",
+        "any",
+        "port",
+        String(COMMUNITY_REHEARSAL_API_PORT),
+        "proto",
+        "tcp",
+        "comment",
+        COMMUNITY_REHEARSAL_FIREWALL_COMMENT
+      ]
+    })),
     { kind: "remove-tree", path: COMMUNITY_DATABASE_ROOT },
     { kind: "exec", argv: ["/usr/bin/install", "-d", "-m", "0700", "-o", "root", "-g", "root", COMMUNITY_CREDENTIAL_ROOT] },
     { kind: "exec", argv: ["/usr/bin/install", "-d", "-m", "0700", "-o", "arangodb", "-g", "arangodb", COMMUNITY_DATABASE_ROOT] },
@@ -17397,7 +17414,8 @@ async function clearCommunityRehearsalFirewall() {
   }
 }
 var responseFor = async (request) => {
-  const base = `http://127.0.0.1:${COMMUNITY_REHEARSAL_API_PORT}`;
+  const node = request.topology.find((entry) => entry.name === request.node);
+  const base = `http://${node.address}:${COMMUNITY_REHEARSAL_API_PORT}`;
   if (request.operation === "health")
     return fetch(`${base}/health`, { signal: AbortSignal.timeout(15000) });
   if (request.operation === "init")
@@ -17459,7 +17477,7 @@ async function runCommunityRehearsalHost(request) {
   }
   if (request.action === "database-ready" || request.action === "starter-ready" || request.action === "api-ready") {
     const starter = topology.find((entry) => entry.starter);
-    const url = request.action === "database-ready" ? `http://127.0.0.1:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}/_api/version` : request.action === "starter-ready" ? `http://${starter.address}:${COMMUNITY_REHEARSAL_STARTER_PORT}/version` : `http://127.0.0.1:${COMMUNITY_REHEARSAL_API_PORT}/health`;
+    const url = request.action === "database-ready" ? `http://${node.address}:${COMMUNITY_REHEARSAL_COORDINATOR_PORT}/_api/version` : request.action === "starter-ready" ? `http://${starter.address}:${COMMUNITY_REHEARSAL_STARTER_PORT}/version` : `http://${node.address}:${COMMUNITY_REHEARSAL_API_PORT}/health`;
     const response2 = await fetch(url, { signal: AbortSignal.timeout(2000) }).catch(() => {
       return;
     });

package/dist/fz.js

@@ -4844,7 +4844,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.123";
+var VERSION2 = "0.1.124";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.123";
+var VERSION = "0.1.124";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.123";
+var VERSION = "0.1.124";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-fleet-verification.js

@@ -3020,7 +3020,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.123";
+var VERSION3 = "0.1.124";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -3020,7 +3020,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.123";
+var VERSION3 = "0.1.124";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.123";
+export declare const VERSION = "0.1.124";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.123",
+  "version": "0.1.124",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",