@forgezero/agent 0.1.48 → 0.1.50

package/dist/agent-heartbeat.js

@@ -749,7 +749,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.48";
+var VERSION3 = "0.1.50";
 
 // src/agent-heartbeat.ts
 var unquote = (value) => value.replace(/^['"]|['"]$/g, "");

package/dist/bootstrap.js

@@ -1207,7 +1207,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.48";
+var VERSION = "0.1.50";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/fz-agent.js

@@ -7000,7 +7000,7 @@ function assertSupportedGuestImage(imageKey) {
 }
 
 // src/version.ts
-var VERSION = "0.1.48";
+var VERSION = "0.1.50";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {
@@ -13511,6 +13511,12 @@ async function runSupervisedApp(path2) {
 }
 
 // src/index.ts
+function agentCommandArgs(args, command2) {
+  const index = args.indexOf(command2);
+  if (index < 0)
+    throw new Error(`missing Agent command ${command2}`);
+  return args.slice(index + 1);
+}
 function loadOrCreateSeed(path2) {
   if (existsSync18(path2)) {
     const seed2 = new Uint8Array(Buffer.from(readFileSync18(path2, "utf8").trim(), "base64url"));
@@ -14014,15 +14020,17 @@ if (import.meta.main) {
     process.exit(0);
   }
   if (command2 === "platform-fleet-verify") {
-    const expectedVersion = args.find((arg) => arg.startsWith("--expected-version="))?.slice("--expected-version=".length);
-    if (!expectedVersion || args.length !== 1) {
+    const commandArgs = agentCommandArgs(args, command2);
+    const expectedVersion = commandArgs.find((arg) => arg.startsWith("--expected-version="))?.slice("--expected-version=".length);
+    if (!expectedVersion || commandArgs.length !== 1) {
       throw new Error("platform-fleet-verify requires exactly --expected-version=<semver>");
     }
     console.log(JSON.stringify(await verifyPlatformFleetHost(expectedVersion)));
     process.exit(0);
   }
   if (command2 === "community-rehearsal") {
-    if (args.length !== 1 || args[0] !== "--request=-") {
+    const commandArgs = agentCommandArgs(args, command2);
+    if (commandArgs.length !== 1 || commandArgs[0] !== "--request=-") {
       throw new Error("community-rehearsal requires exactly --request=-");
     }
     const raw = readFileSync18("/dev/stdin", "utf8");
@@ -14609,6 +14617,7 @@ export {
   applyAgentEgressPolicy,
   allocateCpuPool,
   allocateAddress,
+  agentCommandArgs,
   activateAgentRelease,
   VERSION,
   SYSTEMD_RESOLVED_STUB,

package/dist/fz.js

@@ -4830,7 +4830,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.48";
+var VERSION2 = "0.1.50";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -14646,6 +14646,23 @@ var remote = async (exec, request, knownHosts, argv2, label, secret = false, std
   argv2.forEach(safeRemoteArg);
   return checked4(exec, ["ssh", ...sshOptions(request, knownHosts), destination2(request.target), "--", ...argv2], label, { secret, stdin });
 };
+var remoteRegularFileExists = async (exec, request, knownHosts, path) => {
+  safeRemoteArg(path);
+  const result = await exec([
+    "ssh",
+    ...sshOptions(request, knownHosts),
+    destination2(request.target),
+    "--",
+    "/usr/bin/test",
+    "-f",
+    path
+  ]);
+  if (result.exitCode === 0)
+    return true;
+  if (result.exitCode === 1)
+    return false;
+  throw new Error(`remote initialized-state probe failed${result.output ? `: ${result.output.trim()}` : ""}`);
+};
 var copy = async (exec, request, knownHosts, local, remotePath, secret = false) => {
   safeRemoteArg(remotePath);
   await checked4(exec, [
@@ -14820,12 +14837,13 @@ async function applyOperatorMetalBootstrap(request, mode, options = {}) {
       await copy(exec, request, knownHosts, join10(directory, name), `${remoteTemp}/${name}`, true);
     for (const name of ["metal-config.json", ...staged.files])
       await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/install", "-m", "0600", `${remoteTemp}/${name}`, `${REMOTE_STAGE}/${name}`], "remote metal handoff", true);
+    const initialized = await remoteRegularFileExists(exec, request, knownHosts, "/etc/forgezero/metal.initialized.json");
     const output = await remote(exec, request, knownHosts, [
       "/usr/bin/sudo",
       "-n",
       "/usr/local/bin/fz",
       "bootstrap",
-      "metal",
+      initialized ? "repair" : "metal",
       "--bootstrap-config",
       `${REMOTE_STAGE}/metal-config.json`,
       "--apply"

package/dist/index.d.ts

@@ -2,6 +2,7 @@
 import { type NodeKeyPair } from '@forgezero/runtime/identity';
 import { startAgent, type AgentOptions, type AttestationSource } from './socket';
 import type { SecretCache } from './cache';
+export declare function agentCommandArgs(args: readonly string[], command: string): string[];
 import { type DeploymentCredentialSchema } from './credential-schema';
 export { VERSION } from './version';
 export { startAgent, handleRequest, handleApplicationRequest } from './socket';

package/dist/metal-bootstrap.js

@@ -292,7 +292,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.48";
+var VERSION = "0.1.50";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1207,7 +1207,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.48";
+var VERSION = "0.1.50";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -5550,6 +5550,23 @@ var remote = async (exec, request, knownHosts, argv, label, secret = false, stdi
   argv.forEach(safeRemoteArg);
   return checked4(exec, ["ssh", ...sshOptions(request, knownHosts), destination2(request.target), "--", ...argv], label, { secret, stdin });
 };
+var remoteRegularFileExists = async (exec, request, knownHosts, path) => {
+  safeRemoteArg(path);
+  const result = await exec([
+    "ssh",
+    ...sshOptions(request, knownHosts),
+    destination2(request.target),
+    "--",
+    "/usr/bin/test",
+    "-f",
+    path
+  ]);
+  if (result.exitCode === 0)
+    return true;
+  if (result.exitCode === 1)
+    return false;
+  throw new Error(`remote initialized-state probe failed${result.output ? `: ${result.output.trim()}` : ""}`);
+};
 var copy = async (exec, request, knownHosts, local, remotePath, secret = false) => {
   safeRemoteArg(remotePath);
   await checked4(exec, [
@@ -5724,12 +5741,13 @@ async function applyOperatorMetalBootstrap(request, mode, options = {}) {
       await copy(exec, request, knownHosts, join6(directory, name), `${remoteTemp}/${name}`, true);
     for (const name of ["metal-config.json", ...staged.files])
       await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/install", "-m", "0600", `${remoteTemp}/${name}`, `${REMOTE_STAGE}/${name}`], "remote metal handoff", true);
+    const initialized = await remoteRegularFileExists(exec, request, knownHosts, "/etc/forgezero/metal.initialized.json");
     const output = await remote(exec, request, knownHosts, [
       "/usr/bin/sudo",
       "-n",
       "/usr/local/bin/fz",
       "bootstrap",
-      "metal",
+      initialized ? "repair" : "metal",
       "--bootstrap-config",
       `${REMOTE_STAGE}/metal-config.json`,
       "--apply"

package/dist/platform-fleet-verification.js

@@ -1697,7 +1697,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.48";
+var VERSION3 = "0.1.50";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync2 } from "node:fs";

package/dist/provision.js

@@ -1697,7 +1697,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.48";
+var VERSION3 = "0.1.50";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync2 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.48";
+export declare const VERSION = "0.1.50";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.48",
+  "version": "0.1.50",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",