@forgezero/agent 0.1.37 → 0.1.39

package/dist/metal-bootstrap.d.ts

@@ -1,5 +1,6 @@
 import { type MetalCommandResult, type MetalProvisionProfile } from './metal-provision';
 declare const PROFILE_PATH = "/etc/forgezero/metal.json";
+export declare const METAL_BOOTSTRAP_STATE_PATH = "/etc/forgezero/metal.initialized.json";
 export interface MetalBootstrapConfig {
     kind: 'metal';
     metalHostname: string;

package/dist/metal-bootstrap.js

@@ -293,11 +293,12 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.37";
+var VERSION = "0.1.39";
 
 // src/metal-bootstrap.ts
 var PROFILE_PATH = "/etc/forgezero/metal.json";
-var STATE_PATH = "/etc/forgezero/metal.initialized.json";
+var METAL_BOOTSTRAP_STATE_PATH = "/etc/forgezero/metal.initialized.json";
+var STATE_PATH = METAL_BOOTSTRAP_STATE_PATH;
 var SEED_CREDENTIAL_PATH = "/etc/forgezero/creds/metal-agent-seed.cred";
 var UNIT_DIRECTORY = "/etc/systemd/system";
 var AGENT_PATH = "/usr/local/bin/fz-agent";
@@ -938,5 +939,6 @@ export {
   planMetalBootstrap,
   metalBootstrapStatus,
   applyMetalBootstrap,
-  MetalBootstrapError
+  MetalBootstrapError,
+  METAL_BOOTSTRAP_STATE_PATH
 };

package/dist/platform-bootstrap-runtime.d.ts

@@ -131,31 +131,3 @@ export interface LocalOtlpProofPlan {
     };
 }
 export declare function planLocalOtlpProof(endpoint: string, collectorUnit: string): LocalOtlpProofPlan;
-export type BringupStage = 'runtime-ready' | 'invite-prepared' | 'deploy-requested' | 'deploy-healthy' | 'invite-presented' | 'complete' | 'failed';
-export interface PlatformBringupState {
-    requiresFirstInvite: boolean;
-    stage: BringupStage;
-    inviteTokenFilePresent: boolean;
-    lastError?: string;
-}
-export type PlatformBringupEvent = {
-    type: 'invite-prepared';
-    tokenFilePresent: boolean;
-} | {
-    type: 'deploy-requested';
-} | {
-    type: 'deploy-healthy';
-} | {
-    type: 'invite-presented';
-} | {
-    type: 'complete';
-} | {
-    type: 'failed';
-    error: string;
-};
-export declare function initialPlatformBringupState(requiresFirstInvite: boolean): PlatformBringupState;
-/** Strict persisted sequencing: genesis invite before deploy, presentation only after health. */
-export declare function advancePlatformBringup(state: PlatformBringupState, event: PlatformBringupEvent): PlatformBringupState;
-export type PlatformBringupAction = 'prepare-invite' | 'request-deploy' | 'await-deploy-health' | 'present-invite' | 'mark-complete' | 'none';
-export declare function nextPlatformBringupAction(state: PlatformBringupState): PlatformBringupAction;
-export declare function repairPlatformBringup(state: PlatformBringupState): PlatformBringupState;

package/dist/platform-bootstrap-runtime.js

@@ -380,83 +380,13 @@ function planLocalOtlpProof(endpoint, collectorUnit) {
     }
   };
 }
-function initialPlatformBringupState(requiresFirstInvite) {
-  return { requiresFirstInvite, stage: "runtime-ready", inviteTokenFilePresent: false };
-}
-function advancePlatformBringup(state, event) {
-  if (state.stage === "failed")
-    throw new Error("A failed bring-up must be explicitly repaired before resuming.");
-  if (event.type === "failed")
-    return { ...state, stage: "failed", lastError: safeAtom("error", event.error) };
-  if (event.type === state.stage)
-    return state;
-  if (event.type === "invite-prepared") {
-    if (!state.requiresFirstInvite || state.stage !== "runtime-ready" || !event.tokenFilePresent) {
-      throw new Error("The first invite must be durably present before it is recorded.");
-    }
-    return { ...state, stage: "invite-prepared", inviteTokenFilePresent: true };
-  }
-  if (event.type === "deploy-requested") {
-    const expected = state.requiresFirstInvite ? "invite-prepared" : "runtime-ready";
-    if (state.stage !== expected || state.requiresFirstInvite && !state.inviteTokenFilePresent) {
-      throw new Error("Deployment cannot start before required invite preparation.");
-    }
-    return { ...state, stage: "deploy-requested" };
-  }
-  if (event.type === "deploy-healthy") {
-    if (state.stage !== "deploy-requested")
-      throw new Error("Deployment health requires a requested deployment.");
-    return { ...state, stage: "deploy-healthy" };
-  }
-  if (event.type === "invite-presented") {
-    if (!state.requiresFirstInvite || state.stage !== "deploy-healthy" || !state.inviteTokenFilePresent) {
-      throw new Error("Invite presentation requires a healthy deployment and the original token file.");
-    }
-    return { ...state, stage: "invite-presented" };
-  }
-  if (event.type === "complete") {
-    const expected = state.requiresFirstInvite ? "invite-presented" : "deploy-healthy";
-    if (state.stage !== expected)
-      throw new Error("Bring-up cannot complete before its ordered ceremony.");
-    return { ...state, stage: "complete" };
-  }
-  throw new Error("Unsupported bring-up transition.");
-}
-function nextPlatformBringupAction(state) {
-  if (state.stage === "failed" || state.stage === "complete")
-    return "none";
-  if (state.stage === "runtime-ready")
-    return state.requiresFirstInvite ? "prepare-invite" : "request-deploy";
-  if (state.stage === "invite-prepared") {
-    if (!state.inviteTokenFilePresent)
-      throw new Error("Recorded invite is missing; refusing implicit rotation.");
-    return "request-deploy";
-  }
-  if (state.stage === "deploy-requested")
-    return "await-deploy-health";
-  if (state.stage === "deploy-healthy")
-    return state.requiresFirstInvite ? "present-invite" : "mark-complete";
-  return "mark-complete";
-}
-function repairPlatformBringup(state) {
-  if (state.stage !== "failed")
-    return state;
-  if (state.requiresFirstInvite && !state.inviteTokenFilePresent) {
-    throw new Error("Missing issued invite cannot be repaired by implicit rotation.");
-  }
-  return { ...state, stage: state.inviteTokenFilePresent ? "invite-prepared" : "runtime-ready", lastError: undefined };
-}
 export {
   validatePlatformSharedEnvironment,
-  repairPlatformBringup,
   renderPlatformSharedEnvironment,
   renderPlatformNginx,
   renderPlatformApiUnits,
   renderPlatformActivationFiles,
   platformApiCredentialSpecs,
   planPlatformActivation,
-  planLocalOtlpProof,
-  nextPlatformBringupAction,
-  initialPlatformBringupState,
-  advancePlatformBringup
+  planLocalOtlpProof
 };

package/dist/provision.js

@@ -891,7 +891,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.37";
+var VERSION3 = "0.1.39";
 
 // src/egress-policy.ts
 import { realpathSync } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.37";
+export declare const VERSION = "0.1.39";

package/package.json

@@ -1,22 +1,22 @@
 {
 	"name": "@forgezero/agent",
-	"version": "0.1.37",
+	"version": "0.1.39",
 	"type": "module",
 	"scripts": {
 		"check": "tsc --noEmit",
 		"prebuild": "rm -rf dist",
-		"build": "bun build src/index.ts --outfile dist/fz-agent.js --target bun --format esm --external '@forgezero/access' --external '@forgezero/access/*' --external '@forgezero/runtime' --external '@forgezero/runtime/*' --external '@forgezero/vault' --external '@forgezero/vault/*' && bun build src/cli/index.ts --outfile dist/fz.js --target bun --format esm --external '@forgezero/access' --external '@forgezero/access/*' --external '@forgezero/runtime' --external '@forgezero/runtime/*' --external '@forgezero/vault' --external '@forgezero/vault/*' && bun build src/compute.ts src/provision.ts src/subscribe.ts src/pipeline.ts src/definition.ts src/deploy-file.ts src/ssh-server.ts src/ssh-listen.ts src/provisioning-pull.ts src/migration-pull.ts src/guest-enrolment.ts src/node-vault.ts src/metal-provision.ts src/metal-helper-socket.ts src/lifecycle-helper.ts src/deployment-runner.ts src/agent-update.ts src/agent-update-helper.ts src/agent-heartbeat.ts src/software.ts src/software-helper.ts src/ubuntu.ts src/capacity-calibration.ts src/platform-bootstrap-runtime.ts --root src --outdir dist --target browser --format esm --packages external && bun build src/project-context.ts src/bootstrap.ts src/metal-bootstrap.ts src/cloudflare-bootstrap.ts src/cloudflare-edge.ts --root src --outdir dist --target bun --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
+		"build": "bun build src/index.ts --outfile dist/fz-agent.js --target bun --format esm && bun build src/cli/index.ts --outfile dist/fz.js --target bun --format esm && bun build src/compute.ts src/provision.ts src/subscribe.ts src/pipeline.ts src/definition.ts src/deploy-file.ts src/ssh-server.ts src/ssh-listen.ts src/provisioning-pull.ts src/migration-pull.ts src/guest-enrolment.ts src/node-vault.ts src/metal-provision.ts src/metal-helper-socket.ts src/lifecycle-helper.ts src/deployment-runner.ts src/agent-update.ts src/agent-update-helper.ts src/agent-heartbeat.ts src/software.ts src/software-helper.ts src/ubuntu.ts src/capacity-calibration.ts src/platform-bootstrap-runtime.ts --root src --outdir dist --target browser --format esm --packages external && bun build src/project-context.ts src/bootstrap.ts src/metal-bootstrap.ts src/cloudflare-bootstrap.ts src/cloudflare-edge.ts --root src --outdir dist --target bun --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"devDependencies": {
 		"typescript": "^5.6.0",
 		"@types/bun": "latest",
 		"@types/node": "^22.0.0",
+		"@forgezero/access": "0.1.1",
 		"@noble/curves": "^2.2.0",
 		"@noble/post-quantum": "^0.6.1"
 	},
 	"dependencies": {
-		"@forgezero/access": "0.1.1",
 		"@forgezero/runtime": "0.1.5",
 		"@forgezero/vault": "0.1.8",
 		"@noble/curves": "2.2.0",