@forgezero/agent 0.1.27 → 0.1.28

package/README.md

@@ -180,8 +180,9 @@ compute's systemd-sealed SSH deploy key, or a fine-grained HTTPS token selected
 by a project-vault secret name. A signed claim contains the mode and secret name
 only. The agent resolves the value from its scoped memory cache, limits the Git
 header to the repository origin, never writes the token into a command, and
-never exposes it to tenant pipeline steps. Automatic GitHub App token minting
-can feed the same short-lived token mode later; it is not implemented today.
+never exposes it to tenant pipeline steps. These provider-neutral modes are the
+complete contract; a GitHub App is not a missing dependency and would be added
+later only as an explicit provider-specific mode with expiry and revocation tests.
 
 An operator may also force a deployment and await the complete result over the
 private control socket:

package/dist/agent-heartbeat.js

@@ -376,8 +376,21 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
+function signedNodeApiUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Agent API URL must be an absolute HTTPS URL.");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:") || url.username || url.password || url.search || url.hash) {
+    throw new Error("Agent API URL must be HTTPS without credentials, query or fragment.");
+  }
+  return url;
+}
 async function postSignedNode(options, path, body) {
-  const url = new URL(options.apiUrl);
+  const url = signedNodeApiUrl(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";
@@ -416,7 +429,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.27";
+var VERSION2 = "0.1.28";
 
 // src/agent-heartbeat.ts
 var unquote = (value) => value.replace(/^['"]|['"]$/g, "");

package/dist/fz-agent.js

@@ -4267,8 +4267,21 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
+function signedNodeApiUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Agent API URL must be an absolute HTTPS URL.");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:") || url.username || url.password || url.search || url.hash) {
+    throw new Error("Agent API URL must be HTTPS without credentials, query or fragment.");
+  }
+  return url;
+}
 async function postSignedNode(options, path, body) {
-  const url = new URL(options.apiUrl);
+  const url = signedNodeApiUrl(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";
@@ -4328,7 +4341,7 @@ function projectVaultCoordinate(key) {
 function tenantNodeApiUrl(apiUrl, tenantSlug) {
   if (!/^[a-z0-9][a-z0-9-]{0,62}$/.test(tenantSlug))
     throw new Error("tenant slug is malformed");
-  const url = new URL(apiUrl);
+  const url = signedNodeApiUrl(apiUrl);
   url.pathname = `/api/t/${encodeURIComponent(tenantSlug)}`;
   url.search = "";
   url.hash = "";
@@ -6564,16 +6577,36 @@ async function removeMetalGuest(profile, claim, exec) {
     throw new MetalProvisionError("create claim cannot remove a guest");
   const name = claim.spec.guestName ?? guestNameFor(claim.computeKey);
   const manifestPath = join2(profile.stateDir, `${name}.json`);
+  const service = `forgezero-guest@${name}.service`;
+  const unitPath = join2(profile.unitDir, service);
+  const lv = `/dev/${profile.volumeGroup}/${name}`;
   const manifest = existsSync5(manifestPath) ? JSON.parse(readFileSync4(manifestPath, "utf8")) : legacyPlatformManifest(profile, claim, name);
-  if (!manifest)
+  if (!manifest) {
+    const seedBase = join2(profile.seedDir, name);
+    const localArtifacts = [
+      unitPath,
+      `${seedBase}-seed.iso`,
+      `${seedBase}-user-data`,
+      `${seedBase}-meta-data`,
+      `${seedBase}-network-config`
+    ];
+    if (localArtifacts.some(existsSync5)) {
+      throw new MetalProvisionError("guest artifacts exist without owned inventory");
+    }
+    const [volume, active] = await Promise.all([
+      exec(["lvs", "--noheadings", lv]),
+      exec(["systemctl", "is-active", service])
+    ]);
+    if (volume.exitCode === 0 || active.exitCode === 0) {
+      throw new MetalProvisionError("guest runtime exists without owned inventory");
+    }
     return {};
+  }
   const currentIdentity = manifest.computeKey === claim.computeKey && manifest.reference === claim.spec.reference && manifest.name === name;
   const legacyPlatformIdentity = claim.bootstrap?.kind === "platform-genesis" && claim.computeKey === `platform:${name}` && claim.spec.reference === `platform:${name}` && manifest.name === name && manifest.disk === `/dev/${profile.volumeGroup}/${name}` && manifest.address === claim.spec.guestAddress && (manifest.unit === `fz-guest@${name}.service` || manifest.unit === `forgezero-guest@${name}.service`);
   if (!currentIdentity && !legacyPlatformIdentity) {
     throw new MetalProvisionError("compute identity conflicts with host inventory");
   }
-  const service = `forgezero-guest@${name}.service`;
-  const unitPath = join2(profile.unitDir, service);
   if (existsSync5(unitPath))
     await checked(exec, ["systemctl", "disable", "--now", service]);
   else if (legacyPlatformIdentity)
@@ -6581,7 +6614,6 @@ async function removeMetalGuest(profile, claim, exec) {
   else if ((await exec(["systemctl", "is-active", service])).exitCode === 0) {
     throw new MetalProvisionError("guest unit is active but its owned unit file is missing");
   }
-  const lv = `/dev/${profile.volumeGroup}/${name}`;
   if ((await exec(["lvs", "--noheadings", lv])).exitCode === 0)
     await checked(exec, ["lvremove", "-fy", lv]);
   for (const path of [
@@ -7844,7 +7876,7 @@ function requestAgentUpdate(request, socketPath = DEFAULT_AGENT_UPDATE_SOCKET, t
 import { readFileSync as readFileSync7 } from "fs";
 
 // src/version.ts
-var VERSION2 = "0.1.27";
+var VERSION2 = "0.1.28";
 
 // src/agent-heartbeat.ts
 var unquote = (value) => value.replace(/^['"]|['"]$/g, "");

package/dist/fz.js

@@ -4886,7 +4886,7 @@ var AGENT_UPDATE_HELPER_UNIT_PATH = "/etc/systemd/system/forgezero-agent-update-
 var MAX_REQUEST_BYTES = 8 * 1024;
 
 // src/version.ts
-var VERSION2 = "0.1.27";
+var VERSION2 = "0.1.28";
 
 // src/software.ts
 var BUN_INSTALLER_SHA256 = "bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd";

package/dist/guest-enrolment.js

@@ -28,8 +28,21 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
+function signedNodeApiUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Agent API URL must be an absolute HTTPS URL.");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:") || url.username || url.password || url.search || url.hash) {
+    throw new Error("Agent API URL must be HTTPS without credentials, query or fragment.");
+  }
+  return url;
+}
 async function postSignedNode(options, path, body) {
-  const url = new URL(options.apiUrl);
+  const url = signedNodeApiUrl(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";

package/dist/metal-helper-socket.js

@@ -552,16 +552,36 @@ async function removeMetalGuest(profile, claim, exec) {
     throw new MetalProvisionError("create claim cannot remove a guest");
   const name = claim.spec.guestName ?? guestNameFor(claim.computeKey);
   const manifestPath = join(profile.stateDir, `${name}.json`);
+  const service = `forgezero-guest@${name}.service`;
+  const unitPath = join(profile.unitDir, service);
+  const lv = `/dev/${profile.volumeGroup}/${name}`;
   const manifest = existsSync(manifestPath) ? JSON.parse(readFileSync(manifestPath, "utf8")) : legacyPlatformManifest(profile, claim, name);
-  if (!manifest)
+  if (!manifest) {
+    const seedBase = join(profile.seedDir, name);
+    const localArtifacts = [
+      unitPath,
+      `${seedBase}-seed.iso`,
+      `${seedBase}-user-data`,
+      `${seedBase}-meta-data`,
+      `${seedBase}-network-config`
+    ];
+    if (localArtifacts.some(existsSync)) {
+      throw new MetalProvisionError("guest artifacts exist without owned inventory");
+    }
+    const [volume, active] = await Promise.all([
+      exec(["lvs", "--noheadings", lv]),
+      exec(["systemctl", "is-active", service])
+    ]);
+    if (volume.exitCode === 0 || active.exitCode === 0) {
+      throw new MetalProvisionError("guest runtime exists without owned inventory");
+    }
     return {};
+  }
   const currentIdentity = manifest.computeKey === claim.computeKey && manifest.reference === claim.spec.reference && manifest.name === name;
   const legacyPlatformIdentity = claim.bootstrap?.kind === "platform-genesis" && claim.computeKey === `platform:${name}` && claim.spec.reference === `platform:${name}` && manifest.name === name && manifest.disk === `/dev/${profile.volumeGroup}/${name}` && manifest.address === claim.spec.guestAddress && (manifest.unit === `fz-guest@${name}.service` || manifest.unit === `forgezero-guest@${name}.service`);
   if (!currentIdentity && !legacyPlatformIdentity) {
     throw new MetalProvisionError("compute identity conflicts with host inventory");
   }
-  const service = `forgezero-guest@${name}.service`;
-  const unitPath = join(profile.unitDir, service);
   if (existsSync(unitPath))
     await checked(exec, ["systemctl", "disable", "--now", service]);
   else if (legacyPlatformIdentity)
@@ -569,7 +589,6 @@ async function removeMetalGuest(profile, claim, exec) {
   else if ((await exec(["systemctl", "is-active", service])).exitCode === 0) {
     throw new MetalProvisionError("guest unit is active but its owned unit file is missing");
   }
-  const lv = `/dev/${profile.volumeGroup}/${name}`;
   if ((await exec(["lvs", "--noheadings", lv])).exitCode === 0)
     await checked(exec, ["lvremove", "-fy", lv]);
   for (const path of [

package/dist/metal-provision.js

@@ -552,16 +552,36 @@ async function removeMetalGuest(profile, claim, exec) {
     throw new MetalProvisionError("create claim cannot remove a guest");
   const name = claim.spec.guestName ?? guestNameFor(claim.computeKey);
   const manifestPath = join(profile.stateDir, `${name}.json`);
+  const service = `forgezero-guest@${name}.service`;
+  const unitPath = join(profile.unitDir, service);
+  const lv = `/dev/${profile.volumeGroup}/${name}`;
   const manifest = existsSync(manifestPath) ? JSON.parse(readFileSync(manifestPath, "utf8")) : legacyPlatformManifest(profile, claim, name);
-  if (!manifest)
+  if (!manifest) {
+    const seedBase = join(profile.seedDir, name);
+    const localArtifacts = [
+      unitPath,
+      `${seedBase}-seed.iso`,
+      `${seedBase}-user-data`,
+      `${seedBase}-meta-data`,
+      `${seedBase}-network-config`
+    ];
+    if (localArtifacts.some(existsSync)) {
+      throw new MetalProvisionError("guest artifacts exist without owned inventory");
+    }
+    const [volume, active] = await Promise.all([
+      exec(["lvs", "--noheadings", lv]),
+      exec(["systemctl", "is-active", service])
+    ]);
+    if (volume.exitCode === 0 || active.exitCode === 0) {
+      throw new MetalProvisionError("guest runtime exists without owned inventory");
+    }
     return {};
+  }
   const currentIdentity = manifest.computeKey === claim.computeKey && manifest.reference === claim.spec.reference && manifest.name === name;
   const legacyPlatformIdentity = claim.bootstrap?.kind === "platform-genesis" && claim.computeKey === `platform:${name}` && claim.spec.reference === `platform:${name}` && manifest.name === name && manifest.disk === `/dev/${profile.volumeGroup}/${name}` && manifest.address === claim.spec.guestAddress && (manifest.unit === `fz-guest@${name}.service` || manifest.unit === `forgezero-guest@${name}.service`);
   if (!currentIdentity && !legacyPlatformIdentity) {
     throw new MetalProvisionError("compute identity conflicts with host inventory");
   }
-  const service = `forgezero-guest@${name}.service`;
-  const unitPath = join(profile.unitDir, service);
   if (existsSync(unitPath))
     await checked(exec, ["systemctl", "disable", "--now", service]);
   else if (legacyPlatformIdentity)
@@ -569,7 +589,6 @@ async function removeMetalGuest(profile, claim, exec) {
   else if ((await exec(["systemctl", "is-active", service])).exitCode === 0) {
     throw new MetalProvisionError("guest unit is active but its owned unit file is missing");
   }
-  const lv = `/dev/${profile.volumeGroup}/${name}`;
   if ((await exec(["lvs", "--noheadings", lv])).exitCode === 0)
     await checked(exec, ["lvremove", "-fy", lv]);
   for (const path of [

package/dist/migration-pull.js

@@ -15,8 +15,21 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
+function signedNodeApiUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Agent API URL must be an absolute HTTPS URL.");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:") || url.username || url.password || url.search || url.hash) {
+    throw new Error("Agent API URL must be HTTPS without credentials, query or fragment.");
+  }
+  return url;
+}
 async function postSignedNode(options, path, body) {
-  const url = new URL(options.apiUrl);
+  const url = signedNodeApiUrl(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";

package/dist/node-vault.js

@@ -135,8 +135,21 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
+function signedNodeApiUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Agent API URL must be an absolute HTTPS URL.");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:") || url.username || url.password || url.search || url.hash) {
+    throw new Error("Agent API URL must be HTTPS without credentials, query or fragment.");
+  }
+  return url;
+}
 async function postSignedNode(options, path, body) {
-  const url = new URL(options.apiUrl);
+  const url = signedNodeApiUrl(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";
@@ -196,7 +209,7 @@ function projectVaultCoordinate(key) {
 function tenantNodeApiUrl(apiUrl, tenantSlug) {
   if (!/^[a-z0-9][a-z0-9-]{0,62}$/.test(tenantSlug))
     throw new Error("tenant slug is malformed");
-  const url = new URL(apiUrl);
+  const url = signedNodeApiUrl(apiUrl);
   url.pathname = `/api/t/${encodeURIComponent(tenantSlug)}`;
   url.search = "";
   url.hash = "";

package/dist/provision.js

@@ -554,7 +554,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION2 = "0.1.27";
+var VERSION2 = "0.1.28";
 
 // src/provision.ts
 function atLeast(version, floor) {

package/dist/provisioning-pull.js

@@ -15,8 +15,21 @@ class SignedNodeHttpError extends Error {
     this.name = "SignedNodeHttpError";
   }
 }
+function signedNodeApiUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error("Agent API URL must be an absolute HTTPS URL.");
+  }
+  const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "::1";
+  if (url.protocol !== "https:" && !(loopback && url.protocol === "http:") || url.username || url.password || url.search || url.hash) {
+    throw new Error("Agent API URL must be HTTPS without credentials, query or fragment.");
+  }
+  return url;
+}
 async function postSignedNode(options, path, body) {
-  const url = new URL(options.apiUrl);
+  const url = signedNodeApiUrl(options.apiUrl);
   url.pathname = `${url.pathname.replace(/\/$/, "")}/${path.replace(/^\//, "")}`.replace(/\/+/g, "/");
   url.search = "";
   url.hash = "";

package/dist/signed-node-http.d.ts

@@ -10,5 +10,15 @@ export declare class SignedNodeHttpError extends Error {
     readonly status: number;
     constructor(status: number, message: string);
 }
+/**
+ * Validate the one origin every outbound Agent client shares.
+ *
+ * Hybrid request authentication and a sealed response protect the payload, but
+ * they do not hide routing metadata. Accepting plain HTTP for a remote API
+ * would still expose node identity, operation timing and ciphertext to an
+ * on-path observer. Loopback HTTP remains available for local development and
+ * for a supervised same-host API; production traffic must use HTTPS.
+ */
+export declare function signedNodeApiUrl(value: string): URL;
 /** One implementation of the hybrid-signed machine HTTP contract. */
 export declare function postSignedNode<T>(options: SignedNodeHttpOptions, path: string, body: object): Promise<T>;

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.27";
+export declare const VERSION = "0.1.28";

package/package.json

@@ -1,7 +1,7 @@
 {
 	"//": "Publishing happens from an operator's machine, not CI \u2014 CLAUDE.md records that the absence of CI is deliberate. npm's `provenance` attests a tarball was built by a recognised CI provider from a named commit, so it cannot be produced here: it was set, and the first publish failed with `Automatic provenance generation not supported for provider: null`. A setting that can never be satisfied is worse than none, because it reads as a guarantee nobody is getting. Restore it the day this publishes from CI, and not before.",
 	"name": "@forgezero/agent",
-	"version": "0.1.27",
+	"version": "0.1.28",
 	"type": "module",
 	"scripts": {
 		"check": "tsc --noEmit",