@forgezero/agent 0.1.142 → 0.1.144

package/dist/agent-heartbeat.js

@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.142";
+var VERSION3 = "0.1.144";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.142";
+var VERSION = "0.1.144";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/fz-agent.js

@@ -9684,7 +9684,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.142";
+var VERSION2 = "0.1.144";
 
 // src/ssh-bootstrap.ts
 function deriveMetalAdmissionProvisioning(lscpu) {
@@ -18884,7 +18884,7 @@ if (import.meta.main) {
     if (initial.verified)
       console.log(`[agent] initial SEV-SNP attestation verified ${initial.result.measurement.slice(0, 16)}\u2026`);
   }
-  if (binding && nodeApiUrl) {
+  if (binding && binding.realm !== "platform" && nodeApiUrl) {
     secretCache = createNodeVaultCache({
       apiUrl: nodeApiUrl,
       nodeKey,
@@ -19002,7 +19002,7 @@ if (import.meta.main) {
     sshKeyPath: bootstrapKeyPath,
     targetTelemetryEndpoint: process.env.FZ_BOOTSTRAP_TARGET_OTLP_ENDPOINT,
     canClaim: () => workClaimsEnabled,
-    onEvent: (event) => console.log(`[agent] ${event}`)
+    onEvent: (event, detail) => console.log(`[agent] ${event}${detail ? ` ${JSON.stringify(detail)}` : ""}`)
   }) : undefined;
   if (metalAdmissionPull)
     console.log("[agent] PQ-authenticated tenant metal admission claims enabled");

package/dist/fz.js

@@ -6007,7 +6007,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.142";
+var VERSION2 = "0.1.144";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -18287,7 +18287,21 @@ async function applyOperatorPlatformFleetBootstrap(fleet, mode, options = {}) {
     for (const config of configs.slice(1))
       validatePlatformBootstrapSecrets(config, secrets);
   }
-  const settled = await Promise.allSettled(requests.map((request) => applyOperatorPlatformBootstrap(request, mode, { ...options, secrets })));
+  const settled = [];
+  if (mode === "apply") {
+    settled.push(...await Promise.allSettled(requests.map((request) => applyOperatorPlatformBootstrap(request, mode, { ...options, secrets }))));
+  } else {
+    for (const request of requests) {
+      try {
+        settled.push({
+          status: "fulfilled",
+          value: await applyOperatorPlatformBootstrap(request, mode, { ...options, secrets })
+        });
+      } catch (reason) {
+        settled.push({ status: "rejected", reason });
+      }
+    }
+  }
   const outcomes = settled.map((result, index) => {
     const config = configs[index];
     const address = requests[index].target.address;

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.142";
+var VERSION = "0.1.144";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.d.ts

@@ -191,9 +191,12 @@ export declare function applyOperatorPlatformBootstrap(request: OperatorPlatform
     output: string;
 }>;
 /**
- * Run the exact three-node genesis fleet from one attended secret collection.
- * Every request is fully validated before the first SSH connection. Nodes run
- * concurrently because the three-member Agency cannot form sequentially.
+ * Run the exact three-node fleet from one attended secret collection.
+ * Every request is fully validated before the first SSH connection. Initial
+ * genesis runs concurrently because the three-member Agency must form as one
+ * operation. An established fleet is repaired/promoted one node at a time so
+ * an API origin and an unlocked seed-mesh peer remain resident throughout the
+ * rollout.
  */
 export declare function applyOperatorPlatformFleetBootstrap(fleet: OperatorPlatformBootstrapFleetRequest, mode: OperatorPlatformBootstrapMode, options?: OperatorPlatformBootstrapOptions & {
     secrets?: PlatformBootstrapSecrets;

package/dist/operator-bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.142";
+var VERSION = "0.1.144";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -7443,7 +7443,21 @@ async function applyOperatorPlatformFleetBootstrap(fleet, mode, options = {}) {
     for (const config of configs.slice(1))
       validatePlatformBootstrapSecrets(config, secrets);
   }
-  const settled = await Promise.allSettled(requests.map((request) => applyOperatorPlatformBootstrap(request, mode, { ...options, secrets })));
+  const settled = [];
+  if (mode === "apply") {
+    settled.push(...await Promise.allSettled(requests.map((request) => applyOperatorPlatformBootstrap(request, mode, { ...options, secrets }))));
+  } else {
+    for (const request of requests) {
+      try {
+        settled.push({
+          status: "fulfilled",
+          value: await applyOperatorPlatformBootstrap(request, mode, { ...options, secrets })
+        });
+      } catch (reason) {
+        settled.push({ status: "rejected", reason });
+      }
+    }
+  }
   const outcomes = settled.map((result, index) => {
     const config = configs[index];
     const address = requests[index].target.address;

package/dist/platform-fleet-verification.js

@@ -3050,7 +3050,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.142";
+var VERSION3 = "0.1.144";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -3050,7 +3050,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.142";
+var VERSION3 = "0.1.144";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.142";
+export declare const VERSION = "0.1.144";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.142",
+  "version": "0.1.144",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",