@forgezero/agent 0.1.41 → 0.1.43

package/dist/platform-genesis-config.d.ts

@@ -0,0 +1,7 @@
+import { type PlatformBootstrapConfig } from './bootstrap';
+export interface PlatformGenesisNodeConfigInput {
+    nodeHostname: string;
+    cloudflareHandoffFile: string;
+}
+/** Expand one reviewed common template into the exact three genesis hosts. */
+export declare function platformGenesisBootstrapConfigs(template: PlatformBootstrapConfig, nodes: readonly PlatformGenesisNodeConfigInput[]): readonly PlatformBootstrapConfig[];

package/dist/platform-genesis.d.ts

@@ -0,0 +1,17 @@
+import type { RemoteProvisionClaim } from './provisioning-pull';
+export declare const PLATFORM_GENESIS_ENVIRONMENTS: readonly ["production", "development"];
+export type PlatformGenesisEnvironment = (typeof PLATFORM_GENESIS_ENVIRONMENTS)[number];
+export interface PlatformGenesisGuest {
+    name: string;
+    address: string;
+    cpuPoolKey: string;
+    physicalCores: number;
+    vcpu: number;
+    memoryGib: number;
+    diskGib: number;
+    egressGuaranteedMbps: number;
+    egressBurstMbps: number;
+}
+/** Package-owned provisioning coordinates for the exact three-node platform seed. */
+export declare const PLATFORM_GENESIS_FLEETS: Record<PlatformGenesisEnvironment, readonly PlatformGenesisGuest[]>;
+export declare function platformGenesisClaims(environment: PlatformGenesisEnvironment, sshPublicKeys: readonly string[]): readonly RemoteProvisionClaim[];

package/dist/provision.d.ts

@@ -26,13 +26,22 @@
  * a box somebody rebuilds by hand.
  */
 export interface Check {
-    /** Run over SSH or locally. Must be non-interactive and safe to repeat. */
+    /** Stable display label; execution uses the typed operation. */
     command: string;
+    operation: CapabilityOperation;
     /** True when the output proves the property. */
     satisfied: (stdout: string, exitCode: number) => boolean;
     /** Shown when it fails. Says what to do, not merely what is wrong. */
     remedy: string;
 }
+export type CapabilityOperation = {
+    kind: 'path-exists';
+    path: string;
+    nodeType: 'file' | 'directory';
+} | {
+    kind: 'version';
+    argv: readonly string[];
+};
 /**
  * Semver-ish floor check tolerant of `v` prefixes and build suffixes.
  *
@@ -103,6 +112,10 @@ export interface UnitOptions {
     /** Claim API-owned SSH bootstrap jobs; the private key stays a systemd credential on this runner. */
     pullBootstrap?: boolean;
     bootstrapSshCredentialPath?: string;
+    /** Optional imported private key. When absent the runner generates its own. */
+    bootstrapSshSourcePath?: string;
+    /** Non-secret authorized_keys line reported during enrolment. */
+    bootstrapSshPublicKeyPath?: string;
     bootstrapTargetTelemetryEndpoint?: string;
     /** Root-owned declarative lifecycle profile; never supplied by a migration claim. */
     lifecycleProfilePath?: string;
@@ -135,6 +148,7 @@ export interface UnitOptions {
     telemetryEndpoint?: string;
 }
 export declare const DEPLOYMENT_RUNNER_USER = "forgezero-runner";
+export declare const APPLICATION_RUNTIME_USER = "forgezero-app";
 export declare const DEPLOYMENT_GROUP = "forgezero-deploy";
 export declare const VAULT_GROUP = "forgezero-vault";
 export declare const LIFECYCLE_GROUP = "forgezero-lifecycle";
@@ -152,7 +166,7 @@ export declare const DEFAULT_RUNNER_PUBLIC_TCP_PORTS: readonly [443];
 /** Root-owned policy monitor. The credential-bearing Agent is bound to it. */
 export declare function agentEgressUnit(options: Pick<UnitOptions, 'binPath' | 'user' | 'repository' | 'pullDeployments' | 'runnerLoopbackPorts' | 'runnerPublicTcpPorts'>): string;
 /** Root may execute only package-owned OS strategies selected by id + version. */
-export declare function softwareHelperUnit(options: Pick<UnitOptions, 'binPath'>): string;
+export declare function softwareHelperUnit(options: Pick<UnitOptions, 'binPath' | 'deployRoot'>): string;
 /** Fixed root boundary for verified, health-gated Agent replacement. */
 export declare function agentUpdateHelperUnit(options: Pick<UnitOptions, 'binPath'>): string;
 /**
@@ -192,13 +206,72 @@ export declare function deploymentRunnerUnit(options: Pick<UnitOptions, 'binPath
  */
 export declare function agentUnit(options: UnitOptions): string;
 export interface Step {
-    /** Shell, non-interactive, safe to repeat. */
+    /** Stable display, never executed. */
     command: string;
+    /** Closed typed operation executed with native fs and fixed argv only. */
+    operation: ProvisionOperation;
     /** What it is for, in an operator's words. */
     label: string;
     /** A step that may fail without failing the provision. */
     optional?: boolean;
 }
+export interface FixedHostCommand {
+    argv: readonly string[];
+    acceptedExitCodes?: readonly number[];
+}
+export interface DirectorySpec {
+    path: string;
+    mode: number;
+    owner?: string;
+    group?: string;
+}
+export type ProvisionOperation = {
+    kind: 'commands';
+    commands: readonly FixedHostCommand[];
+} | {
+    kind: 'directories';
+    directories: readonly DirectorySpec[];
+} | {
+    kind: 'install-runtime';
+    source: string;
+    binary: string;
+    version: string;
+} | {
+    kind: 'ensure-seed';
+    credential: string;
+} | {
+    kind: 'ensure-git-identity';
+    credential: string;
+    publicKey: string;
+} | {
+    kind: 'ensure-bootstrap-ssh-identity';
+    credential: string;
+    publicKey: string;
+    source?: string;
+} | {
+    kind: 'ensure-enrolment';
+    state: string;
+    source: string;
+    credential: string;
+} | {
+    kind: 'wait-socket';
+    path: string;
+    attempts: number;
+    intervalMs: number;
+} | {
+    kind: 'verify-file';
+    path: string;
+} | {
+    kind: 'verify-egress';
+    runnerPublicTcpPorts: readonly number[];
+    runnerLoopbackPorts: readonly number[];
+} | {
+    kind: 'verify-resolved-stub';
+} | {
+    kind: 'install-warp';
+} | {
+    kind: 'verify-warp';
+};
 export interface ProvisionPlan {
     mode: AgentMode;
     reason: string;