@forgezero/agent 0.1.138 → 0.1.140

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (20) hide show
  1. package/dist/agent-heartbeat.js +1 -1
  2. package/dist/bootstrap.js +3 -2
  3. package/dist/community-rehearsal-host.js +1 -0
  4. package/dist/definition.js +1 -0
  5. package/dist/deploy-file.js +1 -0
  6. package/dist/fz-agent.js +4 -2
  7. package/dist/fz.js +3 -2
  8. package/dist/metal-bootstrap.js +1 -1
  9. package/dist/metal-helper-socket.js +1 -0
  10. package/dist/metal-provision.js +1 -0
  11. package/dist/operator-bootstrap.js +3 -2
  12. package/dist/platform-bootstrap-runtime.js +1 -0
  13. package/dist/platform-fleet-verification.js +4 -2
  14. package/dist/platform-genesis.js +1 -0
  15. package/dist/provision.js +3 -2
  16. package/dist/software-helper.js +1 -0
  17. package/dist/software.js +1 -0
  18. package/dist/ubuntu.js +1 -0
  19. package/dist/version.d.ts +1 -1
  20. package/package.json +1 -1
package/dist/agent-heartbeat.js CHANGED
@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
917
917
  }
918
918
 
919
919
  // src/version.ts
920
- var VERSION3 = "0.1.138";
920
+ var VERSION3 = "0.1.140";
921
921
 
922
922
  // src/agent-heartbeat.ts
923
923
  function readAgentHostMetrics() {
package/dist/bootstrap.js CHANGED
@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
1460
1460
  var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
1461
1461
 
1462
1462
  // src/version.ts
1463
- var VERSION = "0.1.138";
1463
+ var VERSION = "0.1.140";
1464
1464
 
1465
1465
  // src/software.ts
1466
1466
  var PINNED_BUN_VERSION = "1.3.14";
@@ -2577,6 +2577,7 @@ function planProvision(options) {
2577
2577
  socketPath: options.socketPath,
2578
2578
  user,
2579
2579
  steps: [
2580
+ ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
2580
2581
  ...options.enforceEgress ? [step("Ubuntu Agent egress prerequisites", { kind: "commands", commands: [
2581
2582
  { argv: ["/usr/bin/apt-get", "update", "-qq"] },
2582
2583
  { argv: ["/usr/bin/apt-get", "install", "-y", "nftables"] },
@@ -2585,7 +2586,6 @@ function planProvision(options) {
2585
2586
  step("vault socket access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", VAULT_GROUP], acceptedExitCodes: [0, 9] }] }),
2586
2587
  step("Agent update helper access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", AGENT_UPDATE_GROUP], acceptedExitCodes: [0, 9] }] }),
2587
2588
  ...sourceBinPath && binPath ? [step("root-owned agent runtime", { kind: "install-runtime", source: sourceBinPath, binary: binPath, version: VERSION })] : [],
2588
- ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
2589
2589
  step("software strategy helper group", { kind: "commands", commands: [
2590
2590
  { argv: ["/usr/sbin/groupadd", "--system", SOFTWARE_HELPER_GROUP], acceptedExitCodes: [0, 9] }
2591
2591
  ] }),
@@ -2958,6 +2958,7 @@ var runProvisionOperation = async (operation) => {
2958
2958
  rmSync4(key, { force: true });
2959
2959
  if (result.exitCode !== 0)
2960
2960
  return result;
2961
+ chmodSync2("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
2961
2962
  const codename = os.match(/^VERSION_CODENAME=(.+)$/m)?.[1]?.replace(/^"|"$/g, "");
2962
2963
  if (!codename)
2963
2964
  return { stdout: "Ubuntu codename missing", exitCode: 1 };
package/dist/community-rehearsal-host.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/definition.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/deploy-file.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/fz-agent.js CHANGED
@@ -5471,6 +5471,7 @@ async function executeSoftwareOperation(operation) {
5471
5471
  ]);
5472
5472
  if (dearmored.exitCode !== 0)
5473
5473
  return dearmored;
5474
+ chmodSync2("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
5474
5475
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
5475
5476
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
5476
5477
  `, { mode: 420 });
@@ -9683,7 +9684,7 @@ async function writeAndCloseProcessInput(input, value) {
9683
9684
  }
9684
9685
 
9685
9686
  // src/version.ts
9686
- var VERSION2 = "0.1.138";
9687
+ var VERSION2 = "0.1.140";
9687
9688
 
9688
9689
  // src/ssh-bootstrap.ts
9689
9690
  function deriveMetalAdmissionProvisioning(lscpu) {
@@ -16547,6 +16548,7 @@ function planProvision(options) {
16547
16548
  socketPath: options.socketPath,
16548
16549
  user,
16549
16550
  steps: [
16551
+ ...warpEnabled ? [step2("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
16550
16552
  ...options.enforceEgress ? [step2("Ubuntu Agent egress prerequisites", { kind: "commands", commands: [
16551
16553
  { argv: ["/usr/bin/apt-get", "update", "-qq"] },
16552
16554
  { argv: ["/usr/bin/apt-get", "install", "-y", "nftables"] },
@@ -16555,7 +16557,6 @@ function planProvision(options) {
16555
16557
  step2("vault socket access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", VAULT_GROUP], acceptedExitCodes: [0, 9] }] }),
16556
16558
  step2("Agent update helper access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", AGENT_UPDATE_GROUP], acceptedExitCodes: [0, 9] }] }),
16557
16559
  ...sourceBinPath && binPath ? [step2("root-owned agent runtime", { kind: "install-runtime", source: sourceBinPath, binary: binPath, version: VERSION2 })] : [],
16558
- ...warpEnabled ? [step2("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
16559
16560
  step2("software strategy helper group", { kind: "commands", commands: [
16560
16561
  { argv: ["/usr/sbin/groupadd", "--system", SOFTWARE_HELPER_GROUP], acceptedExitCodes: [0, 9] }
16561
16562
  ] }),
@@ -16928,6 +16929,7 @@ var runProvisionOperation = async (operation) => {
16928
16929
  rmSync11(key, { force: true });
16929
16930
  if (result.exitCode !== 0)
16930
16931
  return result;
16932
+ chmodSync18("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
16931
16933
  const codename = os.match(/^VERSION_CODENAME=(.+)$/m)?.[1]?.replace(/^"|"$/g, "");
16932
16934
  if (!codename)
16933
16935
  return { stdout: "Ubuntu codename missing", exitCode: 1 };
package/dist/fz.js CHANGED
@@ -6007,7 +6007,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
6007
6007
  var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
6008
6008
 
6009
6009
  // src/version.ts
6010
- var VERSION2 = "0.1.138";
6010
+ var VERSION2 = "0.1.140";
6011
6011
 
6012
6012
  // src/software.ts
6013
6013
  var PINNED_BUN_VERSION = "1.3.14";
@@ -7461,6 +7461,7 @@ function planProvision(options) {
7461
7461
  socketPath: options.socketPath,
7462
7462
  user,
7463
7463
  steps: [
7464
+ ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
7464
7465
  ...options.enforceEgress ? [step("Ubuntu Agent egress prerequisites", { kind: "commands", commands: [
7465
7466
  { argv: ["/usr/bin/apt-get", "update", "-qq"] },
7466
7467
  { argv: ["/usr/bin/apt-get", "install", "-y", "nftables"] },
@@ -7469,7 +7470,6 @@ function planProvision(options) {
7469
7470
  step("vault socket access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", VAULT_GROUP], acceptedExitCodes: [0, 9] }] }),
7470
7471
  step("Agent update helper access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", AGENT_UPDATE_GROUP], acceptedExitCodes: [0, 9] }] }),
7471
7472
  ...sourceBinPath && binPath ? [step("root-owned agent runtime", { kind: "install-runtime", source: sourceBinPath, binary: binPath, version: VERSION2 })] : [],
7472
- ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
7473
7473
  step("software strategy helper group", { kind: "commands", commands: [
7474
7474
  { argv: ["/usr/sbin/groupadd", "--system", SOFTWARE_HELPER_GROUP], acceptedExitCodes: [0, 9] }
7475
7475
  ] }),
@@ -7875,6 +7875,7 @@ var runProvisionOperation = async (operation) => {
7875
7875
  rmSync3(key, { force: true });
7876
7876
  if (result.exitCode !== 0)
7877
7877
  return result;
7878
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
7878
7879
  const codename = os.match(/^VERSION_CODENAME=(.+)$/m)?.[1]?.replace(/^"|"$/g, "");
7879
7880
  if (!codename)
7880
7881
  return { stdout: "Ubuntu codename missing", exitCode: 1 };
package/dist/metal-bootstrap.js CHANGED
@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
366
366
  }
367
367
 
368
368
  // src/version.ts
369
- var VERSION = "0.1.138";
369
+ var VERSION = "0.1.140";
370
370
 
371
371
  // src/otel-collector.ts
372
372
  var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";
package/dist/metal-helper-socket.js CHANGED
@@ -619,6 +619,7 @@ async function executeSoftwareOperation(operation) {
619
619
  ]);
620
620
  if (dearmored.exitCode !== 0)
621
621
  return dearmored;
622
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
622
623
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
623
624
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
624
625
  `, { mode: 420 });
package/dist/metal-provision.js CHANGED
@@ -619,6 +619,7 @@ async function executeSoftwareOperation(operation) {
619
619
  ]);
620
620
  if (dearmored.exitCode !== 0)
621
621
  return dearmored;
622
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
622
623
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
623
624
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
624
625
  `, { mode: 420 });
package/dist/operator-bootstrap.js CHANGED
@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
1460
1460
  var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
1461
1461
 
1462
1462
  // src/version.ts
1463
- var VERSION = "0.1.138";
1463
+ var VERSION = "0.1.140";
1464
1464
 
1465
1465
  // src/software.ts
1466
1466
  var PINNED_BUN_VERSION = "1.3.14";
@@ -2577,6 +2577,7 @@ function planProvision(options) {
2577
2577
  socketPath: options.socketPath,
2578
2578
  user,
2579
2579
  steps: [
2580
+ ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
2580
2581
  ...options.enforceEgress ? [step("Ubuntu Agent egress prerequisites", { kind: "commands", commands: [
2581
2582
  { argv: ["/usr/bin/apt-get", "update", "-qq"] },
2582
2583
  { argv: ["/usr/bin/apt-get", "install", "-y", "nftables"] },
@@ -2585,7 +2586,6 @@ function planProvision(options) {
2585
2586
  step("vault socket access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", VAULT_GROUP], acceptedExitCodes: [0, 9] }] }),
2586
2587
  step("Agent update helper access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", AGENT_UPDATE_GROUP], acceptedExitCodes: [0, 9] }] }),
2587
2588
  ...sourceBinPath && binPath ? [step("root-owned agent runtime", { kind: "install-runtime", source: sourceBinPath, binary: binPath, version: VERSION })] : [],
2588
- ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
2589
2589
  step("software strategy helper group", { kind: "commands", commands: [
2590
2590
  { argv: ["/usr/sbin/groupadd", "--system", SOFTWARE_HELPER_GROUP], acceptedExitCodes: [0, 9] }
2591
2591
  ] }),
@@ -2958,6 +2958,7 @@ var runProvisionOperation = async (operation) => {
2958
2958
  rmSync4(key, { force: true });
2959
2959
  if (result.exitCode !== 0)
2960
2960
  return result;
2961
+ chmodSync2("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
2961
2962
  const codename = os.match(/^VERSION_CODENAME=(.+)$/m)?.[1]?.replace(/^"|"$/g, "");
2962
2963
  if (!codename)
2963
2964
  return { stdout: "Ubuntu codename missing", exitCode: 1 };
package/dist/platform-bootstrap-runtime.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/platform-fleet-verification.js CHANGED
@@ -1318,6 +1318,7 @@ async function executeSoftwareOperation(operation) {
1318
1318
  ]);
1319
1319
  if (dearmored.exitCode !== 0)
1320
1320
  return dearmored;
1321
+ chmodSync4("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
1321
1322
  mkdirSync3("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
1322
1323
  writeFileSync3("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
1323
1324
  `, { mode: 420 });
@@ -3049,7 +3050,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
3049
3050
  }
3050
3051
 
3051
3052
  // src/version.ts
3052
- var VERSION3 = "0.1.138";
3053
+ var VERSION3 = "0.1.140";
3053
3054
 
3054
3055
  // src/egress-policy.ts
3055
3056
  import { realpathSync as realpathSync3 } from "node:fs";
@@ -3986,6 +3987,7 @@ function planProvision(options) {
3986
3987
  socketPath: options.socketPath,
3987
3988
  user,
3988
3989
  steps: [
3990
+ ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
3989
3991
  ...options.enforceEgress ? [step("Ubuntu Agent egress prerequisites", { kind: "commands", commands: [
3990
3992
  { argv: ["/usr/bin/apt-get", "update", "-qq"] },
3991
3993
  { argv: ["/usr/bin/apt-get", "install", "-y", "nftables"] },
@@ -3994,7 +3996,6 @@ function planProvision(options) {
3994
3996
  step("vault socket access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", VAULT_GROUP], acceptedExitCodes: [0, 9] }] }),
3995
3997
  step("Agent update helper access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", AGENT_UPDATE_GROUP], acceptedExitCodes: [0, 9] }] }),
3996
3998
  ...sourceBinPath && binPath ? [step("root-owned agent runtime", { kind: "install-runtime", source: sourceBinPath, binary: binPath, version: VERSION3 })] : [],
3997
- ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
3998
3999
  step("software strategy helper group", { kind: "commands", commands: [
3999
4000
  { argv: ["/usr/sbin/groupadd", "--system", SOFTWARE_HELPER_GROUP], acceptedExitCodes: [0, 9] }
4000
4001
  ] }),
@@ -5183,6 +5184,7 @@ var runProvisionOperation = async (operation) => {
5183
5184
  rmSync8(key, { force: true });
5184
5185
  if (result.exitCode !== 0)
5185
5186
  return result;
5187
+ chmodSync7("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
5186
5188
  const codename = os.match(/^VERSION_CODENAME=(.+)$/m)?.[1]?.replace(/^"|"$/g, "");
5187
5189
  if (!codename)
5188
5190
  return { stdout: "Ubuntu codename missing", exitCode: 1 };
package/dist/platform-genesis.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/provision.js CHANGED
@@ -1318,6 +1318,7 @@ async function executeSoftwareOperation(operation) {
1318
1318
  ]);
1319
1319
  if (dearmored.exitCode !== 0)
1320
1320
  return dearmored;
1321
+ chmodSync4("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
1321
1322
  mkdirSync3("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
1322
1323
  writeFileSync3("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
1323
1324
  `, { mode: 420 });
@@ -3049,7 +3050,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
3049
3050
  }
3050
3051
 
3051
3052
  // src/version.ts
3052
- var VERSION3 = "0.1.138";
3053
+ var VERSION3 = "0.1.140";
3053
3054
 
3054
3055
  // src/egress-policy.ts
3055
3056
  import { realpathSync as realpathSync3 } from "node:fs";
@@ -3986,6 +3987,7 @@ function planProvision(options) {
3986
3987
  socketPath: options.socketPath,
3987
3988
  user,
3988
3989
  steps: [
3990
+ ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
3989
3991
  ...options.enforceEgress ? [step("Ubuntu Agent egress prerequisites", { kind: "commands", commands: [
3990
3992
  { argv: ["/usr/bin/apt-get", "update", "-qq"] },
3991
3993
  { argv: ["/usr/bin/apt-get", "install", "-y", "nftables"] },
@@ -3994,7 +3996,6 @@ function planProvision(options) {
3994
3996
  step("vault socket access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", VAULT_GROUP], acceptedExitCodes: [0, 9] }] }),
3995
3997
  step("Agent update helper access group", { kind: "commands", commands: [{ argv: ["/usr/sbin/groupadd", "--system", AGENT_UPDATE_GROUP], acceptedExitCodes: [0, 9] }] }),
3996
3998
  ...sourceBinPath && binPath ? [step("root-owned agent runtime", { kind: "install-runtime", source: sourceBinPath, binary: binPath, version: VERSION3 })] : [],
3997
- ...warpEnabled ? [step("Cloudflare One client for Ubuntu 26.04", { kind: "install-warp" })] : [],
3998
3999
  step("software strategy helper group", { kind: "commands", commands: [
3999
4000
  { argv: ["/usr/sbin/groupadd", "--system", SOFTWARE_HELPER_GROUP], acceptedExitCodes: [0, 9] }
4000
4001
  ] }),
package/dist/software-helper.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/software.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/ubuntu.js CHANGED
@@ -475,6 +475,7 @@ async function executeSoftwareOperation(operation) {
475
475
  ]);
476
476
  if (dearmored.exitCode !== 0)
477
477
  return dearmored;
478
+ chmodSync("/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", 420);
478
479
  mkdirSync("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
479
480
  writeFileSync("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ resolute main
480
481
  `, { mode: 420 });
package/dist/version.d.ts CHANGED
@@ -1,2 +1,2 @@
1
1
  /** One package version shared by both public binaries. Pinned to package.json by tests. */
2
- export declare const VERSION = "0.1.138";
2
+ export declare const VERSION = "0.1.140";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@forgezero/agent",
3
- "version": "0.1.138",
3
+ "version": "0.1.140",
4
4
  "type": "module",
5
5
  "scripts": {
6
6
  "check": "tsc --noEmit",