@forgezero/agent 0.1.146 → 0.1.148

package/dist/agent-heartbeat.js

@@ -264,32 +264,49 @@ function switchAgentSocketRoute(route, backend) {
 }
 function probeAgentCandidate(expected, socketPath = DEFAULT_AGENT_CANDIDATE_READY_SOCKET, timeoutMs = 5000) {
   return new Promise((resolve2) => {
-    const socket = connect(socketPath);
-    let buffer = "";
     let settled = false;
+    let socket;
+    const deadline = Date.now() + timeoutMs;
     const finish = (value) => {
       if (settled)
         return;
       settled = true;
-      clearTimeout(timer);
-      socket.destroy();
+      socket?.destroy();
       resolve2(value);
     };
-    const timer = setTimeout(() => finish(false), timeoutMs);
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
-      const newline = buffer.indexOf(`
-`);
-      if (newline < 0)
-        return;
-      try {
-        const value = JSON.parse(buffer.slice(0, newline));
-        finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
-      } catch {
-        finish(false);
+    const attempt = () => {
+      if (settled || Date.now() >= deadline)
+        return finish(false);
+      if (!existsSync2(socketPath)) {
+        const remaining = deadline - Date.now();
+        return setTimeout(attempt, Math.min(100, remaining));
       }
-    });
-    socket.on("error", () => finish(false));
+      let buffer = "";
+      const candidate = connect(socketPath);
+      socket = candidate;
+      candidate.on("data", (chunk) => {
+        buffer += chunk.toString("utf8");
+        const newline = buffer.indexOf(`
+`);
+        if (newline < 0)
+          return;
+        try {
+          const value = JSON.parse(buffer.slice(0, newline));
+          finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
+        } catch {
+          finish(false);
+        }
+      });
+      candidate.once("error", () => {
+        candidate.destroy();
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+          finish(false);
+        else
+          setTimeout(attempt, Math.min(100, remaining));
+      });
+    };
+    attempt();
   });
 }
 
@@ -300,7 +317,6 @@ var AGENT_UPDATE_JOURNAL = "/var/lib/forgezero/agent-update.json";
 var AGENT_UPDATE_RECEIPT = "/var/lib/forgezero/agent-update-receipt.json";
 var MAX_REQUEST_BYTES = 8 * 1024;
 var COMPUTE_HELPER_UNITS = [
-  "forgezero-agent-egress.service",
   "forgezero-deploy-runner.service",
   "forgezero-lifecycle-helper.service",
   "forgezero-software-helper.service"
@@ -606,9 +622,9 @@ async function activateAgentRelease(staged, options = {}) {
         restoreAgentRelease(staged);
         restored = true;
         await restartAgent(target, run);
-        rollbackHealthy = await probe();
-        if (rollbackHealthy && target === "compute")
+        if (target === "compute")
           switchAgentSocketRoute(paths.route, paths.active);
+        rollbackHealthy = await probe();
       } catch {
         rollbackHealthy = false;
       }
@@ -917,7 +933,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.146";
+var VERSION3 = "0.1.148";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/agent-update-helper.js

@@ -264,32 +264,49 @@ function switchAgentSocketRoute(route, backend) {
 }
 function probeAgentCandidate(expected, socketPath = DEFAULT_AGENT_CANDIDATE_READY_SOCKET, timeoutMs = 5000) {
   return new Promise((resolve2) => {
-    const socket = connect(socketPath);
-    let buffer = "";
     let settled = false;
+    let socket;
+    const deadline = Date.now() + timeoutMs;
     const finish = (value) => {
       if (settled)
         return;
       settled = true;
-      clearTimeout(timer);
-      socket.destroy();
+      socket?.destroy();
       resolve2(value);
     };
-    const timer = setTimeout(() => finish(false), timeoutMs);
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
-      const newline = buffer.indexOf(`
-`);
-      if (newline < 0)
-        return;
-      try {
-        const value = JSON.parse(buffer.slice(0, newline));
-        finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
-      } catch {
-        finish(false);
+    const attempt = () => {
+      if (settled || Date.now() >= deadline)
+        return finish(false);
+      if (!existsSync2(socketPath)) {
+        const remaining = deadline - Date.now();
+        return setTimeout(attempt, Math.min(100, remaining));
       }
-    });
-    socket.on("error", () => finish(false));
+      let buffer = "";
+      const candidate = connect(socketPath);
+      socket = candidate;
+      candidate.on("data", (chunk) => {
+        buffer += chunk.toString("utf8");
+        const newline = buffer.indexOf(`
+`);
+        if (newline < 0)
+          return;
+        try {
+          const value = JSON.parse(buffer.slice(0, newline));
+          finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
+        } catch {
+          finish(false);
+        }
+      });
+      candidate.once("error", () => {
+        candidate.destroy();
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+          finish(false);
+        else
+          setTimeout(attempt, Math.min(100, remaining));
+      });
+    };
+    attempt();
   });
 }
 
@@ -300,7 +317,6 @@ var AGENT_UPDATE_JOURNAL = "/var/lib/forgezero/agent-update.json";
 var AGENT_UPDATE_RECEIPT = "/var/lib/forgezero/agent-update-receipt.json";
 var MAX_REQUEST_BYTES = 8 * 1024;
 var COMPUTE_HELPER_UNITS = [
-  "forgezero-agent-egress.service",
   "forgezero-deploy-runner.service",
   "forgezero-lifecycle-helper.service",
   "forgezero-software-helper.service"
@@ -606,9 +622,9 @@ async function activateAgentRelease(staged, options = {}) {
         restoreAgentRelease(staged);
         restored = true;
         await restartAgent(target, run);
-        rollbackHealthy = await probe();
-        if (rollbackHealthy && target === "compute")
+        if (target === "compute")
           switchAgentSocketRoute(paths.route, paths.active);
+        rollbackHealthy = await probe();
       } catch {
         rollbackHealthy = false;
       }

package/dist/bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.146";
+var VERSION = "0.1.148";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/fz-agent.js

@@ -11632,7 +11632,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.146";
+var VERSION2 = "0.1.148";
 
 // src/ssh-bootstrap.ts
 function deriveMetalAdmissionProvisioning(lscpu) {
@@ -14423,32 +14423,49 @@ function startAgentCandidateReady(ready, socketPath = DEFAULT_AGENT_CANDIDATE_RE
 }
 function probeAgentCandidate(expected, socketPath = DEFAULT_AGENT_CANDIDATE_READY_SOCKET, timeoutMs = 5000) {
   return new Promise((resolve3) => {
-    const socket = connect5(socketPath);
-    let buffer = "";
     let settled = false;
+    let socket;
+    const deadline = Date.now() + timeoutMs;
     const finish = (value) => {
       if (settled)
         return;
       settled = true;
-      clearTimeout(timer);
-      socket.destroy();
+      socket?.destroy();
       resolve3(value);
     };
-    const timer = setTimeout(() => finish(false), timeoutMs);
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
-      const newline = buffer.indexOf(`
-`);
-      if (newline < 0)
-        return;
-      try {
-        const value = JSON.parse(buffer.slice(0, newline));
-        finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
-      } catch {
-        finish(false);
+    const attempt = () => {
+      if (settled || Date.now() >= deadline)
+        return finish(false);
+      if (!existsSync13(socketPath)) {
+        const remaining = deadline - Date.now();
+        return setTimeout(attempt, Math.min(100, remaining));
       }
-    });
-    socket.on("error", () => finish(false));
+      let buffer = "";
+      const candidate = connect5(socketPath);
+      socket = candidate;
+      candidate.on("data", (chunk) => {
+        buffer += chunk.toString("utf8");
+        const newline = buffer.indexOf(`
+`);
+        if (newline < 0)
+          return;
+        try {
+          const value = JSON.parse(buffer.slice(0, newline));
+          finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
+        } catch {
+          finish(false);
+        }
+      });
+      candidate.once("error", () => {
+        candidate.destroy();
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+          finish(false);
+        else
+          setTimeout(attempt, Math.min(100, remaining));
+      });
+    };
+    attempt();
   });
 }
 
@@ -14459,7 +14476,6 @@ var AGENT_UPDATE_JOURNAL = "/var/lib/forgezero/agent-update.json";
 var AGENT_UPDATE_RECEIPT = "/var/lib/forgezero/agent-update-receipt.json";
 var MAX_REQUEST_BYTES5 = 8 * 1024;
 var COMPUTE_HELPER_UNITS = [
-  "forgezero-agent-egress.service",
   "forgezero-deploy-runner.service",
   "forgezero-lifecycle-helper.service",
   "forgezero-software-helper.service"
@@ -14765,9 +14781,9 @@ async function activateAgentRelease(staged, options = {}) {
         restoreAgentRelease(staged);
         restored = true;
         await restartAgent(target2, run2);
-        rollbackHealthy = await probe();
-        if (rollbackHealthy && target2 === "compute")
+        if (target2 === "compute")
           switchAgentSocketRoute(paths.route, paths.active);
+        rollbackHealthy = await probe();
       } catch {
         rollbackHealthy = false;
       }
@@ -20898,6 +20914,8 @@ if (import.meta.main) {
   };
   if (initialAttestationVerified)
     await activateVaultReplica();
+  if (binding?.realm === "platform" && initialAttestationVerified)
+    initialVaultState = "ready";
   if (handoverCandidate) {
     const ready = startAgentCandidateReady({
       version: VERSION2,

package/dist/fz.js

@@ -8058,7 +8058,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.146";
+var VERSION2 = "0.1.148";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.146";
+var VERSION = "0.1.148";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.146";
+var VERSION = "0.1.148";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-fleet-verification.js

@@ -264,32 +264,49 @@ function switchAgentSocketRoute(route, backend) {
 }
 function probeAgentCandidate(expected, socketPath = DEFAULT_AGENT_CANDIDATE_READY_SOCKET, timeoutMs = 5000) {
   return new Promise((resolve2) => {
-    const socket = connect(socketPath);
-    let buffer = "";
     let settled = false;
+    let socket;
+    const deadline = Date.now() + timeoutMs;
     const finish = (value) => {
       if (settled)
         return;
       settled = true;
-      clearTimeout(timer);
-      socket.destroy();
+      socket?.destroy();
       resolve2(value);
     };
-    const timer = setTimeout(() => finish(false), timeoutMs);
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
-      const newline = buffer.indexOf(`
-`);
-      if (newline < 0)
-        return;
-      try {
-        const value = JSON.parse(buffer.slice(0, newline));
-        finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
-      } catch {
-        finish(false);
+    const attempt = () => {
+      if (settled || Date.now() >= deadline)
+        return finish(false);
+      if (!existsSync2(socketPath)) {
+        const remaining = deadline - Date.now();
+        return setTimeout(attempt, Math.min(100, remaining));
       }
-    });
-    socket.on("error", () => finish(false));
+      let buffer = "";
+      const candidate = connect(socketPath);
+      socket = candidate;
+      candidate.on("data", (chunk) => {
+        buffer += chunk.toString("utf8");
+        const newline = buffer.indexOf(`
+`);
+        if (newline < 0)
+          return;
+        try {
+          const value = JSON.parse(buffer.slice(0, newline));
+          finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
+        } catch {
+          finish(false);
+        }
+      });
+      candidate.once("error", () => {
+        candidate.destroy();
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+          finish(false);
+        else
+          setTimeout(attempt, Math.min(100, remaining));
+      });
+    };
+    attempt();
   });
 }
 
@@ -300,7 +317,6 @@ var AGENT_UPDATE_JOURNAL = "/var/lib/forgezero/agent-update.json";
 var AGENT_UPDATE_RECEIPT = "/var/lib/forgezero/agent-update-receipt.json";
 var MAX_REQUEST_BYTES = 8 * 1024;
 var COMPUTE_HELPER_UNITS = [
-  "forgezero-agent-egress.service",
   "forgezero-deploy-runner.service",
   "forgezero-lifecycle-helper.service",
   "forgezero-software-helper.service"
@@ -606,9 +622,9 @@ async function activateAgentRelease(staged, options = {}) {
         restoreAgentRelease(staged);
         restored = true;
         await restartAgent(target, run);
-        rollbackHealthy = await probe();
-        if (rollbackHealthy && target === "compute")
+        if (target === "compute")
           switchAgentSocketRoute(paths.route, paths.active);
+        rollbackHealthy = await probe();
       } catch {
         rollbackHealthy = false;
       }
@@ -3050,7 +3066,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.146";
+var VERSION3 = "0.1.148";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -264,32 +264,49 @@ function switchAgentSocketRoute(route, backend) {
 }
 function probeAgentCandidate(expected, socketPath = DEFAULT_AGENT_CANDIDATE_READY_SOCKET, timeoutMs = 5000) {
   return new Promise((resolve2) => {
-    const socket = connect(socketPath);
-    let buffer = "";
     let settled = false;
+    let socket;
+    const deadline = Date.now() + timeoutMs;
     const finish = (value) => {
       if (settled)
         return;
       settled = true;
-      clearTimeout(timer);
-      socket.destroy();
+      socket?.destroy();
       resolve2(value);
     };
-    const timer = setTimeout(() => finish(false), timeoutMs);
-    socket.on("data", (chunk) => {
-      buffer += chunk.toString("utf8");
-      const newline = buffer.indexOf(`
-`);
-      if (newline < 0)
-        return;
-      try {
-        const value = JSON.parse(buffer.slice(0, newline));
-        finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
-      } catch {
-        finish(false);
+    const attempt = () => {
+      if (settled || Date.now() >= deadline)
+        return finish(false);
+      if (!existsSync2(socketPath)) {
+        const remaining = deadline - Date.now();
+        return setTimeout(attempt, Math.min(100, remaining));
       }
-    });
-    socket.on("error", () => finish(false));
+      let buffer = "";
+      const candidate = connect(socketPath);
+      socket = candidate;
+      candidate.on("data", (chunk) => {
+        buffer += chunk.toString("utf8");
+        const newline = buffer.indexOf(`
+`);
+        if (newline < 0)
+          return;
+        try {
+          const value = JSON.parse(buffer.slice(0, newline));
+          finish(value.version === expected.version && value.nodeKey === expected.nodeKey && value.bound === expected.bound && expected.vault.includes(value.vault));
+        } catch {
+          finish(false);
+        }
+      });
+      candidate.once("error", () => {
+        candidate.destroy();
+        const remaining = deadline - Date.now();
+        if (remaining <= 0)
+          finish(false);
+        else
+          setTimeout(attempt, Math.min(100, remaining));
+      });
+    };
+    attempt();
   });
 }
 
@@ -300,7 +317,6 @@ var AGENT_UPDATE_JOURNAL = "/var/lib/forgezero/agent-update.json";
 var AGENT_UPDATE_RECEIPT = "/var/lib/forgezero/agent-update-receipt.json";
 var MAX_REQUEST_BYTES = 8 * 1024;
 var COMPUTE_HELPER_UNITS = [
-  "forgezero-agent-egress.service",
   "forgezero-deploy-runner.service",
   "forgezero-lifecycle-helper.service",
   "forgezero-software-helper.service"
@@ -606,9 +622,9 @@ async function activateAgentRelease(staged, options = {}) {
         restoreAgentRelease(staged);
         restored = true;
         await restartAgent(target, run);
-        rollbackHealthy = await probe();
-        if (rollbackHealthy && target === "compute")
+        if (target === "compute")
           switchAgentSocketRoute(paths.route, paths.active);
+        rollbackHealthy = await probe();
       } catch {
         rollbackHealthy = false;
       }
@@ -3050,7 +3066,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.146";
+var VERSION3 = "0.1.148";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.146";
+export declare const VERSION = "0.1.148";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.146",
+  "version": "0.1.148",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",