@forgezero/agent 0.1.152 → 0.1.153

package/dist/agent-heartbeat.js

@@ -948,7 +948,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.152";
+var VERSION3 = "0.1.153";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.152";
+var VERSION = "0.1.153";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/deploy-plan-runner.d.ts

@@ -63,6 +63,8 @@ export interface RunDeploymentPlanOptions {
     lock?: <T>(group: string, limit: number, run: () => Promise<T>) => Promise<T>;
     /** Control-plane placement filter; false records a deterministic skip. */
     shouldRun?: (step: PlannedStep) => boolean;
+    /** Emits each secret-free terminal record for durable control-plane progress. */
+    onStep?: (record: StepExecutionRecord) => Promise<void>;
 }
 export declare function runDeploymentPlan(options: RunDeploymentPlanOptions): Promise<PlanRunResult>;
 export {};

package/dist/deploy-plan-runner.js

@@ -1493,6 +1493,7 @@ async function runDeploymentPlan(options) {
           const record = { id: step2.id, stage: stage.id, action: step2.uses, status: "skipped", attempts: 0, outputs: {}, changed: false };
           state.steps.set(step2.id, record);
           records.push(record);
+          await options.onStep?.(record);
         }
         continue;
       }
@@ -1509,6 +1510,7 @@ async function runDeploymentPlan(options) {
       })();
       records.push(...stageRecords);
       for (const record of stageRecords) {
+        await options.onStep?.(record);
         const step2 = stage.steps.find((candidate) => candidate.id === record.id);
         if (record.status === "succeeded")
           successful.push({ record, step: step2, stage });

package/dist/deployment.d.ts

@@ -64,6 +64,8 @@ export interface DeploymentRequest {
     connectivityCapabilities?: DeploymentConnectivityCapabilities;
     /** Server-owned alias to scoped Vault entry-name overrides. */
     credentialBindings?: Readonly<Record<string, string>>;
+    /** Claim-fenced control-plane progress sink; receives only redacted evidence. */
+    onProgress?: (execution: DeploymentExecution) => Promise<void>;
 }
 export interface DeploymentResult {
     key: string;