@forgezero/agent 0.1.154 → 0.1.155

package/dist/agent-heartbeat.js

@@ -948,7 +948,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.154";
+var VERSION3 = "0.1.155";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.154";
+var VERSION = "0.1.155";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/fz-agent.js

@@ -11485,7 +11485,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.154";
+var VERSION2 = "0.1.155";
 
 // src/ssh-bootstrap.ts
 function deriveMetalAdmissionProvisioning(lscpu) {
@@ -11561,6 +11561,26 @@ var checked = async (exec, argv2, code, options) => {
     throw new SshBootstrapError(code);
   return result.output.trim();
 };
+var checkedSshOpen = async (exec, argv2) => {
+  let result;
+  try {
+    result = await exec(argv2);
+  } catch {
+    throw new SshBootstrapError("SSH_CLIENT_FAILED");
+  }
+  if (result.exitCode === 0)
+    return result.output.trim();
+  const output = result.output.toLowerCase();
+  if (/permission denied|authentication failed|no supported authentication methods/.test(output)) {
+    throw new SshBootstrapError("SSH_AUTH_FAILED");
+  }
+  if (/connection refused/.test(output))
+    throw new SshBootstrapError("SSH_CONNECTION_REFUSED");
+  if (/connection timed out|operation timed out|no route to host|network is unreachable/.test(output)) {
+    throw new SshBootstrapError("SSH_NETWORK_UNREACHABLE");
+  }
+  throw new SshBootstrapError("SSH_UNREACHABLE");
+};
 var validateClaim = (claim) => {
   if (!/^[A-Za-z0-9_-]{1,64}$/.test(claim.computeKey) || !/^[A-Za-z0-9_-]{16,128}$/.test(claim.claimToken) || !/^fze_[A-Za-z0-9_-]{32,128}$/.test(claim.enrolmentToken) || !/^[a-z0-9][a-z0-9_-]{0,62}$/.test(claim.realm) || !/^[A-Za-z0-9_-]{1,64}$/.test(claim.projectKey) || !/^[A-Za-z0-9_-]{1,64}$/.test(claim.environmentKey))
     throw new SshBootstrapError("CLAIM_INVALID");
@@ -11704,7 +11724,7 @@ process.stdout.write(process.env.FZ_SSH_PASSWORD ?? "")
     claim.target.hostKeySha256 = observedHost.fingerprint;
     const knownHosts = observedHost.path;
     const ssh = sshOptions(claim, pinned, knownHosts, sshKeyPath);
-    remoteDirectory = await checked(exec, ["ssh", ...ssh, target(claim, pinned), "--", "mktemp", "-d", "/tmp/forgezero-bootstrap.XXXXXXXX"], "SSH_UNREACHABLE");
+    remoteDirectory = await checkedSshOpen(exec, ["ssh", ...ssh, target(claim, pinned), "--", "mktemp", "-d", "/tmp/forgezero-bootstrap.XXXXXXXX"]);
     if (!/^\/tmp\/forgezero-bootstrap\.[A-Za-z0-9]{8}$/.test(remoteDirectory))
       throw new SshBootstrapError("REMOTE_PATH_INVALID");
     const destination = target(claim, pinned);
@@ -12055,7 +12075,7 @@ process.stdout.write(process.env.FZ_SSH_PASSWORD ?? "")
     const ssh = sshOptions(claim, pinned, knownHosts, sshKeyPath);
     const destination = target(claim, pinned);
     await progress("opening-ssh");
-    remoteDirectory = await checked(exec, ["ssh", ...ssh, destination, "--", "mktemp", "-d", "/tmp/forgezero-metal-admission.XXXXXXXX"], "SSH_UNREACHABLE");
+    remoteDirectory = await checkedSshOpen(exec, ["ssh", ...ssh, destination, "--", "mktemp", "-d", "/tmp/forgezero-metal-admission.XXXXXXXX"]);
     if (!/^\/tmp\/forgezero-metal-admission\.[A-Za-z0-9]{8}$/.test(remoteDirectory))
       throw new SshBootstrapError("REMOTE_PATH_INVALID");
     await progress("installing-managed-key");

package/dist/fz.js

@@ -7345,7 +7345,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.154";
+var VERSION2 = "0.1.155";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.154";
+var VERSION = "0.1.155";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.154";
+var VERSION = "0.1.155";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-fleet-verification.js

@@ -3081,7 +3081,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.154";
+var VERSION3 = "0.1.155";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -3081,7 +3081,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.154";
+var VERSION3 = "0.1.155";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.154";
+export declare const VERSION = "0.1.155";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.154",
+  "version": "0.1.155",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",