@forgezero/agent 0.1.62 → 0.1.64

package/dist/fz-agent.js

@@ -2,8 +2,8 @@
 // @bun
 
 // src/index.ts
-import { randomBytes as randomBytes6 } from "crypto";
-import { readFileSync as readFileSync19, writeFileSync as writeFileSync16, existsSync as existsSync20, mkdirSync as mkdirSync16, chmodSync as chmodSync17, lstatSync as lstatSync8, statfsSync as statfsSync2 } from "fs";
+import { randomBytes as randomBytes7 } from "crypto";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync17, existsSync as existsSync21, mkdirSync as mkdirSync17, chmodSync as chmodSync18, lstatSync as lstatSync9, statfsSync as statfsSync2 } from "fs";
 import { cpus, totalmem } from "os";
 import { dirname as dirname12, join as join12 } from "path";
 
@@ -4641,8 +4641,8 @@ function safeOp(line) {
 }
 
 // src/deployment.ts
-import { chmodSync as chmodSync3, existsSync as existsSync3, lstatSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, statfsSync, writeFileSync as writeFileSync2 } from "fs";
-import { createHash as createHash4, randomUUID } from "crypto";
+import { chmodSync as chmodSync4, existsSync as existsSync4, lstatSync as lstatSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync3, renameSync as renameSync3, statfsSync, writeFileSync as writeFileSync3 } from "fs";
+import { createHash as createHash5, randomUUID } from "crypto";
 import { dirname, isAbsolute as isAbsolute2, join as join2 } from "path";
 
 // ../runtime/dist/queue.js
@@ -4980,7 +4980,8 @@ var SOFTWARE_CATALOG = [
   { id: "cloudflared", version: "2026.7.3", status: "active", os: "ubuntu", osVersion: "26.04", architecture: "x64", evidence: "reviewed-strategy-and-tests" },
   { id: "cloudflare-warp", version: "2026.6.822.0-min", status: "active", os: "ubuntu", osVersion: "26.04", architecture: "x64", evidence: "reviewed-strategy-and-tests" },
   { id: "ufw", version: "ubuntu-26.04", status: "active", os: "ubuntu", osVersion: "26.04", architecture: "x64", evidence: "reviewed-strategy-and-tests" },
-  { id: "openssh-client", version: "ubuntu-26.04", status: "active", os: "ubuntu", osVersion: "26.04", architecture: "x64", evidence: "reviewed-strategy-and-tests" }
+  { id: "openssh-client", version: "ubuntu-26.04", status: "active", os: "ubuntu", osVersion: "26.04", architecture: "x64", evidence: "reviewed-strategy-and-tests" },
+  { id: "git", version: "ubuntu-26.04", status: "active", os: "ubuntu", osVersion: "26.04", architecture: "x64", evidence: "reviewed-strategy-and-tests" }
 ];
 var UBUNTU_2604_X64 = [
   { requirement: { id: "bun", version: "1.3.14" } },
@@ -4990,7 +4991,8 @@ var UBUNTU_2604_X64 = [
   { requirement: { id: "cloudflared", version: "2026.7.3" } },
   { requirement: { id: "cloudflare-warp", version: "2026.6.822.0-min" } },
   { requirement: { id: "ufw", version: "ubuntu-26.04" } },
-  { requirement: { id: "openssh-client", version: "ubuntu-26.04" } }
+  { requirement: { id: "openssh-client", version: "ubuntu-26.04" } },
+  { requirement: { id: "git", version: "ubuntu-26.04" } }
 ];
 var path = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 var DOCKER_DAEMON_PATH = "/etc/docker/daemon.json";
@@ -5077,7 +5079,7 @@ async function executeSoftwareOperation(operation) {
         const supported = observed && observed.some((part, index) => part > minimum[index] && observed.slice(0, index).every((prior, priorIndex) => prior === minimum[priorIndex])) || observed?.every((part, index) => part === minimum[index]);
         return { ...result, exitCode: result.exitCode === 0 && supported ? 0 : 1 };
       });
-    const binaries = software === "ufw" ? ["/usr/sbin/ufw"] : ["/usr/bin/ssh", "/usr/bin/scp", "/usr/bin/ssh-keyscan", "/usr/bin/ssh-keygen"];
+    const binaries = software === "ufw" ? ["/usr/sbin/ufw"] : software === "git" ? ["/usr/bin/git"] : ["/usr/bin/ssh", "/usr/bin/scp", "/usr/bin/ssh-keyscan", "/usr/bin/ssh-keygen"];
     try {
       binaries.forEach((binary) => accessSync(binary));
       return { exitCode: 0, output: "" };
@@ -5085,7 +5087,7 @@ async function executeSoftwareOperation(operation) {
       return { exitCode: 1, output: cause instanceof Error ? cause.message : String(cause) };
     }
   }
-  if (software === "docker" || software === "nginx" || software === "ufw" || software === "openssh-client") {
+  if (software === "docker" || software === "nginx" || software === "ufw" || software === "openssh-client" || software === "git") {
     const packageName = software === "openssh-client" ? "openssh-client" : software === "docker" ? "docker.io" : software;
     const installed = await aptInstall(packageName);
     if (installed.exitCode !== 0 || software !== "nginx" && software !== "docker")
@@ -5185,7 +5187,7 @@ function validateSoftwareRequirements(value, _options = {}) {
     if (Object.keys(row).some((key) => key !== "id" && key !== "version")) {
       throw new Error("software requirement contains an unknown field");
     }
-    if (!["bun", "docker", "nginx", "arangodb", "cloudflared", "cloudflare-warp", "ufw", "openssh-client"].includes(String(row.id)) || typeof row.version !== "string" || !/^[A-Za-z0-9][A-Za-z0-9.-]{0,31}$/.test(row.version)) {
+    if (!["bun", "docker", "nginx", "arangodb", "cloudflared", "cloudflare-warp", "ufw", "openssh-client", "git"].includes(String(row.id)) || typeof row.version !== "string" || !/^[A-Za-z0-9][A-Za-z0-9.-]{0,31}$/.test(row.version)) {
       throw new Error("software requirement coordinate is invalid");
     }
     const requirement = { id: row.id, version: row.version };
@@ -7120,6 +7122,65 @@ async function runDeploymentPlan(options) {
 // src/deploy-compiler.ts
 var DEPLOY_PLAN_FILE = ".fz/deploy.plan.json";
 
+// src/bootstrap-bundle.ts
+import { createHash as createHash4, randomBytes as randomBytes5 } from "crypto";
+import {
+  chmodSync as chmodSync3,
+  createReadStream,
+  existsSync as existsSync3,
+  lstatSync,
+  mkdirSync as mkdirSync2,
+  readFileSync as readFileSync2,
+  renameSync as renameSync2,
+  rmSync as rmSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
+var BOOTSTRAP_BUNDLE_FORMAT = 1;
+var BOOTSTRAP_BUNDLE_KIND = "forgezero-api-git-bundle";
+var MAX_BOOTSTRAP_BUNDLE_BYTES = 512 * 1024 * 1024;
+async function sha256File(path2) {
+  const hash = createHash4("sha256");
+  await new Promise((resolveDone, reject) => {
+    const stream = createReadStream(path2);
+    stream.on("data", (chunk) => hash.update(chunk));
+    stream.on("error", reject);
+    stream.on("end", resolveDone);
+  });
+  return hash.digest("hex");
+}
+var branchName = (value) => {
+  if (typeof value !== "string" || !/^[A-Za-z0-9](?:[A-Za-z0-9._/-]{0,126}[A-Za-z0-9])?$/.test(value) || value.includes("..") || value.includes("//") || value.startsWith("-")) {
+    throw new Error("bootstrap bundle branch is malformed");
+  }
+  return value;
+};
+function parseBootstrapBundleManifest(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new Error("bootstrap bundle manifest must be an object");
+  const source = value;
+  const allowed = ["format", "kind", "branch", "revision", "sha256", "bytes", "createdAt"];
+  const unknown = Object.keys(source).filter((key) => !allowed.includes(key));
+  if (unknown.length)
+    throw new Error(`bootstrap bundle manifest contains unknown field ${unknown[0]}`);
+  if (source.format !== BOOTSTRAP_BUNDLE_FORMAT || source.kind !== BOOTSTRAP_BUNDLE_KIND) {
+    throw new Error("bootstrap bundle manifest format is unsupported");
+  }
+  branchName(source.branch);
+  if (typeof source.revision !== "string" || !/^[a-f0-9]{40}$/.test(source.revision)) {
+    throw new Error("bootstrap bundle revision must be an exact lowercase Git commit");
+  }
+  if (typeof source.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(source.sha256)) {
+    throw new Error("bootstrap bundle digest is malformed");
+  }
+  if (!Number.isSafeInteger(source.bytes) || Number(source.bytes) < 1 || Number(source.bytes) > MAX_BOOTSTRAP_BUNDLE_BYTES) {
+    throw new Error("bootstrap bundle size is outside the supported boundary");
+  }
+  if (typeof source.createdAt !== "string" || Number.isNaN(Date.parse(source.createdAt))) {
+    throw new Error("bootstrap bundle creation time is malformed");
+  }
+  return source;
+}
+
 // src/deployment.ts
 class DeploymentError extends Error {
   code;
@@ -7165,24 +7226,24 @@ function persistCapacityCalibration(args) {
   if (!isAbsolute2(args.directory)) {
     throw new DeploymentError("PIPELINE_FAILED", "capacity evidence directory must be an absolute Agent-owned path");
   }
-  if (!existsSync3(args.directory)) {
-    const parent = lstatSync(dirname(args.directory));
+  if (!existsSync4(args.directory)) {
+    const parent = lstatSync2(dirname(args.directory));
     if (!parent.isDirectory() || parent.isSymbolicLink()) {
       throw new DeploymentError("PIPELINE_FAILED", "capacity evidence parent must be a real Agent-owned directory");
     }
-    mkdirSync2(args.directory, { mode: 448 });
+    mkdirSync3(args.directory, { mode: 448 });
   }
-  const stats = lstatSync(args.directory);
+  const stats = lstatSync2(args.directory);
   if (!stats.isDirectory() || stats.isSymbolicLink()) {
     throw new DeploymentError("PIPELINE_FAILED", "capacity evidence directory must be a real Agent-owned directory");
   }
-  const identity = createHash4("sha256").update(`${args.deploymentKey}\x00${args.profile}\x00${args.revision}`).digest("hex").slice(0, 24);
+  const identity = createHash5("sha256").update(`${args.deploymentKey}\x00${args.profile}\x00${args.revision}`).digest("hex").slice(0, 24);
   const path2 = join2(args.directory, `${identity}-${args.measuredAtTs}-${randomUUID().slice(0, 8)}.json`);
   const next = `${path2}.next`;
   const recommendedCoordinate = {
     FZ_CONCURRENCY_LIMIT: String(args.calibration.recommendedConcurrency)
   };
-  writeFileSync2(next, `${JSON.stringify({
+  writeFileSync3(next, `${JSON.stringify({
     format: 1,
     kind: "forgezero-node-capacity-calibration",
     deploymentKey: args.deploymentKey,
@@ -7194,22 +7255,29 @@ function persistCapacityCalibration(args) {
     calibration: args.calibration
   }, null, 2)}
 `, { mode: 384, flag: "wx" });
-  chmodSync3(next, 384);
-  renameSync2(next, path2);
+  chmodSync4(next, 384);
+  renameSync3(next, path2);
   return path2;
 }
 function createDeploymentManager(options) {
-  try {
-    gitNetworkTarget(options.repository);
-  } catch (cause) {
-    throw new DeploymentError("SOURCE_FAILED", cause instanceof GitEgressError ? cause.message : "The Git source is malformed.");
+  const bootstrapBundle = options.bootstrapBundle ? { path: options.bootstrapBundle.path, manifest: parseBootstrapBundleManifest(options.bootstrapBundle.manifest) } : undefined;
+  if (bootstrapBundle) {
+    if (!isAbsolute2(bootstrapBundle.path) || bootstrapBundle.path !== options.repository || bootstrapBundle.manifest.branch !== options.branch) {
+      throw new DeploymentError("SOURCE_FAILED", "The bootstrap bundle source coordinates disagree.");
+    }
+  } else {
+    try {
+      gitNetworkTarget(options.repository);
+    } catch (cause) {
+      throw new DeploymentError("SOURCE_FAILED", cause instanceof GitEgressError ? cause.message : "The Git source is malformed.");
+    }
   }
   const queue = createQueue({ width: options.width ?? 4 });
   const activeRevisions = new Map;
   const exec = options.exec ?? spawnExact;
   const projectExec = options.projectExec ?? exec;
   const now = options.now ?? Date.now;
-  const readDefinition = options.readDefinition ?? ((path2) => JSON.parse(readFileSync2(path2, "utf8")));
+  const readDefinition = options.readDefinition ?? ((path2) => JSON.parse(readFileSync3(path2, "utf8")));
   const credentialsDirectory = process.env.CREDENTIALS_DIRECTORY;
   const gitCredentialPath = options.gitCredentialPath ?? (credentialsDirectory ? join2(credentialsDirectory, "git-deploy-key") : undefined);
   const knownHostsPath = options.knownHostsPath ?? "/etc/forgezero/git/known_hosts";
@@ -7221,13 +7289,13 @@ function createDeploymentManager(options) {
     if (content.length > 16385 || /\r|\0/.test(content)) {
       throw new DeploymentError("SOURCE_FAILED", "The pinned Git host keys are malformed.");
     }
-    if (existsSync3(knownHostsPath) && readFileSync2(knownHostsPath, "utf8") === content)
+    if (existsSync4(knownHostsPath) && readFileSync3(knownHostsPath, "utf8") === content)
       return;
-    mkdirSync2(dirname(knownHostsPath), { recursive: true, mode: 448 });
+    mkdirSync3(dirname(knownHostsPath), { recursive: true, mode: 448 });
     const next = `${knownHostsPath}.${process.pid}.${randomUUID()}.next`;
-    writeFileSync2(next, content, { mode: 384, flag: "wx" });
-    renameSync2(next, knownHostsPath);
-    chmodSync3(knownHostsPath, 384);
+    writeFileSync3(next, content, { mode: 384, flag: "wx" });
+    renameSync3(next, knownHostsPath);
+    chmodSync4(knownHostsPath, 384);
   };
   const gitBaseEnvironment = () => ({
     GIT_TERMINAL_PROMPT: "0",
@@ -7264,6 +7332,8 @@ function createDeploymentManager(options) {
     return httpsGitVersion;
   };
   const gitEnvironment = async () => {
+    if (bootstrapBundle)
+      return gitBaseEnvironment();
     let target;
     try {
       target = await resolvePinnedGitTarget(options.repository, options.resolveGitHost);
@@ -7285,22 +7355,25 @@ function createDeploymentManager(options) {
         ["http.curloptResolve", curlResolveValue(target)]
       ]);
     }
-    if (auth.kind === "vault-token") {
+    if (auth.kind === "vault-token" || auth.kind === "ephemeral-token") {
       if (!https)
         throw new DeploymentError("SOURCE_FAILED", "Vault Git tokens may only be sent to HTTPS sources.");
-      if (!/^[A-Z_][A-Z0-9_]{0,127}$/.test(auth.secret)) {
+      if (auth.kind === "vault-token" && !/^[A-Z_][A-Z0-9_]{0,127}$/.test(auth.secret)) {
         throw new DeploymentError("SOURCE_FAILED", "The Git token secret name is invalid.");
       }
-      if (!options.cache) {
+      if (auth.kind === "vault-token" && !options.cache) {
         throw new DeploymentError("SECRET_MISSING", `Git source credential ${auth.secret} is unavailable.`);
       }
       const username = auth.username ?? "x-access-token";
       if (!/^[A-Za-z0-9._@+-]{1,128}$/.test(username)) {
         throw new DeploymentError("SOURCE_FAILED", "The Git token username is invalid.");
       }
-      const token = await options.cache.get(auth.secret);
+      if (auth.kind === "ephemeral-token" && auth.expiresAtTs <= Date.now() + 30000) {
+        throw new DeploymentError("SOURCE_FAILED", "The one-claim Git credential is expired or too close to expiry.");
+      }
+      const token = auth.kind === "ephemeral-token" ? auth.token : await options.cache.get(auth.secret);
       if (!token || token.length > 8192 || /[\r\n\0]/.test(token)) {
-        throw new DeploymentError("SOURCE_FAILED", `Git source credential ${auth.secret} is malformed.`);
+        throw new DeploymentError("SOURCE_FAILED", "The Git source credential is malformed.");
       }
       const origin = new URL(options.repository).origin;
       return withGitConfig(gitBaseEnvironment(), [
@@ -7344,11 +7417,26 @@ function createDeploymentManager(options) {
     await checked({ argv: ["/usr/bin/test", "-d", releasesDirectory] }, "SOURCE_FAILED");
     await checked({ argv: ["/usr/bin/test", "-w", releasesDirectory] }, "SOURCE_FAILED");
     await checked({ argv: ["/usr/bin/install", "-d", "-m", "0770", release] }, "SOURCE_FAILED");
+    if (bootstrapBundle) {
+      let metadata;
+      try {
+        metadata = lstatSync2(bootstrapBundle.path);
+      } catch {
+        throw new DeploymentError("SOURCE_FAILED", "The attended bootstrap bundle is missing.");
+      }
+      if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.nlink !== 1 || metadata.size !== bootstrapBundle.manifest.bytes || await sha256File(bootstrapBundle.path) !== bootstrapBundle.manifest.sha256) {
+        throw new DeploymentError("SOURCE_FAILED", "The attended bootstrap bundle failed its manifest check.");
+      }
+      await checked({ argv: ["git", "bundle", "verify", bootstrapBundle.path], env }, "SOURCE_FAILED");
+    }
     await checked({
       argv: ["git", "clone", "--quiet", "--no-checkout", "--branch", options.branch, "--depth", "100", options.repository, release],
       env
     }, "SOURCE_FAILED");
-    if (request.revision) {
+    if (bootstrapBundle && request.revision && request.revision !== bootstrapBundle.manifest.revision) {
+      throw new DeploymentError("BAD_REVISION", "The requested revision is not the attended bootstrap bundle revision.");
+    }
+    if (request.revision && !bootstrapBundle) {
       let present = await exec({
         argv: ["git", "cat-file", "-e", `${request.revision}^{commit}`],
         cwd: release,
@@ -7371,17 +7459,18 @@ function createDeploymentManager(options) {
         env
       }, "SOURCE_FAILED");
     }
+    const desiredRevision = request.revision ?? bootstrapBundle?.manifest.revision ?? `origin/${options.branch}`;
     await checked({
-      argv: ["git", "checkout", "--quiet", "--detach", request.revision ?? `origin/${options.branch}`],
+      argv: ["git", "checkout", "--quiet", "--detach", desiredRevision],
       cwd: release,
       env
     }, "SOURCE_FAILED");
     const head = (await checked({ argv: ["git", "rev-parse", "HEAD"], cwd: release, env }, "SOURCE_FAILED")).output.trim();
-    if (request.revision && head !== request.revision) {
-      throw new DeploymentError("SOURCE_FAILED", `Git checked out ${head}, not requested ${request.revision}.`);
+    if ((request.revision || bootstrapBundle) && head !== desiredRevision) {
+      throw new DeploymentError("SOURCE_FAILED", `Git checked out ${head}, not requested ${desiredRevision}.`);
     }
     const planPath = join2(release, DEPLOY_PLAN_FILE);
-    if (existsSync3(planPath)) {
+    if (existsSync4(planPath)) {
       const plan = parseDeploymentPlan(readDefinition(planPath));
       for (const workflow of Object.values(plan.spec.workflows))
         for (const stage2 of Object.values(workflow.stages)) {
@@ -7416,10 +7505,28 @@ function createDeploymentManager(options) {
       const inputValues = {};
       for (const [name, definition2] of Object.entries(plan.spec.inputs ?? {})) {
         const raw = options.environment?.[name];
-        if (raw === undefined)
+        if (raw === undefined) {
+          if (definition2.default !== undefined)
+            inputValues[name] = definition2.default;
           continue;
+        }
         inputValues[name] = definition2.type === "boolean" ? raw === "true" : definition2.type === "integer" || definition2.type === "number" ? Number(raw) : raw;
       }
+      const resolvedTargets = Object.entries(plan.spec.targets).filter(([, target]) => target.selector.profiles.includes(options.profile)).map(([name, target]) => {
+        const desired = typeof target.cardinality.desired === "number" ? target.cardinality.desired : target.cardinality.desired.$ref.startsWith("inputs.") ? inputValues[target.cardinality.desired.$ref.slice("inputs.".length)] : undefined;
+        if (!Number.isSafeInteger(desired) || Number(desired) < target.cardinality.minimum || Number(desired) > target.cardinality.maximum) {
+          throw new DeploymentError("PIPELINE_FAILED", `target ${name} desired cardinality did not resolve to a bounded integer`);
+        }
+        return {
+          name,
+          profiles: [...target.selector.profiles],
+          confidentialCompute: target.selector.confidentialCompute ?? "disabled",
+          labels: { ...target.selector.labels ?? {} },
+          minimum: target.cardinality.minimum,
+          desired: Number(desired),
+          maximum: target.cardinality.maximum
+        };
+      });
       const projectExec2 = options.projectExec ?? spawnExact;
       const materializePlanArgv = (argv2) => argv2.map((argument) => {
         if (argument === "${FZ_RELEASE}")
@@ -7498,7 +7605,7 @@ function createDeploymentManager(options) {
           const component2 = plan.spec.components[String(resolved.component ?? "")];
           const mounts = component2?.kind === "database" ? [component2.storage] : component2?.storage ?? [];
           for (const mount of mounts) {
-            const candidate = existsSync3(mount.path) ? mount.path : dirname(mount.path);
+            const candidate = existsSync4(mount.path) ? mount.path : dirname(mount.path);
             const stats = statfsSync(candidate);
             const freePercent = Number(stats.bavail) / Number(stats.blocks) * 100;
             const minimum = mount.class === "ephemeral" ? 0 : mount.minimumFreePercent ?? 0;
@@ -7579,11 +7686,12 @@ function createDeploymentManager(options) {
         branch: options.branch,
         revision: head,
         definitionDigest: plan.sourceDigest,
-        definitionVersion: plan.version,
+        definitionVersion: 2,
         profile: options.profile,
         release,
         ok: true,
-        phases: [phase]
+        phases: [phase],
+        resolvedTargets
       };
     }
     const definition = parseDeployDefinition(readDefinition(join2(release, ".fz", "deploy.json")));
@@ -7696,7 +7804,7 @@ function createDeploymentManager(options) {
       branch: options.branch,
       revision: head,
       definitionDigest,
-      definitionVersion: definition.version,
+      definitionVersion: 2,
       profile: options.profile,
       release,
       ok: true,
@@ -7706,6 +7814,8 @@ function createDeploymentManager(options) {
   };
   return {
     async latestRevision() {
+      if (bootstrapBundle)
+        return bootstrapBundle.manifest.revision;
       const result = await checked({
         argv: ["git", "ls-remote", "--exit-code", options.repository, `refs/heads/${options.branch}`],
         env: await gitEnvironment()
@@ -7750,7 +7860,7 @@ function createDeploymentManager(options) {
 }
 
 // src/control.ts
-import { chmodSync as chmodSync4, existsSync as existsSync4, unlinkSync as unlinkSync3 } from "fs";
+import { chmodSync as chmodSync5, existsSync as existsSync5, unlinkSync as unlinkSync3 } from "fs";
 import { connect, createServer as createServer2 } from "net";
 var DEFAULT_CONTROL_SOCKET = "/run/forgezero/control.sock";
 var MAX_REQUEST_BYTES = 16 * 1024;
@@ -7807,7 +7917,7 @@ async function handleControl(manager, request) {
   }
 }
 function startControlServer(manager, socketPath = DEFAULT_CONTROL_SOCKET) {
-  if (existsSync4(socketPath))
+  if (existsSync5(socketPath))
     unlinkSync3(socketPath);
   const server = createServer2((socket) => {
     let buffer = "";
@@ -7829,7 +7939,7 @@ function startControlServer(manager, socketPath = DEFAULT_CONTROL_SOCKET) {
     });
     socket.on("error", () => socket.destroy());
   });
-  server.listen(socketPath, () => chmodSync4(socketPath, 384));
+  server.listen(socketPath, () => chmodSync5(socketPath, 384));
   return server;
 }
 function requestControl(request, socketPath = DEFAULT_CONTROL_SOCKET) {
@@ -7868,6 +7978,7 @@ async function postSigned(options, operation, body) {
 }
 async function deployClaim(options, claim) {
   const manager = options.manager ?? options.managerFor?.(claim);
+  const claimOwnedManager = !options.manager && claim.source.auth?.kind === "ephemeral-token";
   if (!manager)
     throw new Error("deployment pull has no manager for this claim");
   const setTimer = options.setTimer ?? ((callback, ms) => setTimeout(callback, ms));
@@ -7918,6 +8029,8 @@ async function deployClaim(options, claim) {
     stopped = true;
     clearTimer(timer);
     await renewal;
+    if (claimOwnedManager)
+      await manager.stop();
   }
   if (claimLost)
     throw claimLost;
@@ -7977,6 +8090,11 @@ async function pullDeploymentOnce(options) {
     definitionDigest: result.definitionDigest,
     definitionVersion: result.definitionVersion,
     profile: result.profile,
+    ...result.resolvedTargets ? { resolvedTargets: result.resolvedTargets.map((target) => ({
+      ...target,
+      profiles: [...target.profiles],
+      labels: { ...target.labels }
+    })) } : {},
     ...result.capacity ? { capacity: {
       recommendedConcurrency: result.capacity.recommendedConcurrency,
       stopReason: result.capacity.stopReason,
@@ -8026,14 +8144,14 @@ function startDeploymentPull(options) {
 
 // src/guest-enrolment.ts
 import {
-  chmodSync as chmodSync5,
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync3,
-  readFileSync as readFileSync3,
-  renameSync as renameSync3,
+  chmodSync as chmodSync6,
+  existsSync as existsSync6,
+  mkdirSync as mkdirSync4,
+  readFileSync as readFileSync4,
+  renameSync as renameSync4,
   statSync,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync3
+  writeFileSync as writeFileSync4
 } from "fs";
 import { dirname as dirname2 } from "path";
 function privateNetworkAttachmentFromEnvironment(env = process.env) {
@@ -8063,7 +8181,7 @@ var validBinding = (value, expectedNodeKey) => {
   return ["nodeKey", "computeReference", "projectKey", "environmentKey"].every((key) => typeof row2[key] === "string" && row2[key].length > 0) && (row2.realm === "platform" || row2.realm === "tenant" && typeof row2.tenantSlug === "string" && row2.tenantSlug.length > 0) && (!expectedNodeKey || row2.nodeKey === expectedNodeKey);
 };
 function loadGuestBinding(path2, expectedNodeKey) {
-  if (!existsSync5(path2))
+  if (!existsSync6(path2))
     return null;
   const mode = statSync(path2).mode & 511;
   if ((mode & 63) !== 0) {
@@ -8071,7 +8189,7 @@ function loadGuestBinding(path2, expectedNodeKey) {
   }
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync3(path2, "utf8"));
+    parsed = JSON.parse(readFileSync4(path2, "utf8"));
   } catch {
     throw new Error(`guest enrolment state at ${path2} is malformed`);
   }
@@ -8081,15 +8199,15 @@ function loadGuestBinding(path2, expectedNodeKey) {
   return parsed;
 }
 function persistGuestBinding(path2, binding) {
-  mkdirSync3(dirname2(path2), { recursive: true, mode: 448 });
+  mkdirSync4(dirname2(path2), { recursive: true, mode: 448 });
   const temporary = `${path2}.next`;
-  writeFileSync3(temporary, `${JSON.stringify(binding)}
+  writeFileSync4(temporary, `${JSON.stringify(binding)}
 `, { mode: 384 });
-  chmodSync5(temporary, 384);
-  renameSync3(temporary, path2);
+  chmodSync6(temporary, 384);
+  renameSync4(temporary, path2);
 }
 async function enrolGuestIdentity(options) {
-  const token = options.token?.trim() ?? (options.tokenPath ? readFileSync3(options.tokenPath, "utf8").trim() : "");
+  const token = options.token?.trim() ?? (options.tokenPath ? readFileSync4(options.tokenPath, "utf8").trim() : "");
   if (!token.startsWith("fze_"))
     throw new Error("guest enrolment credential is malformed");
   const payload = await postSignedNode({
@@ -8426,8 +8544,8 @@ function startMigrationPull(options) {
 }
 
 // src/ssh-bootstrap.ts
-import { createHash as createHash5 } from "crypto";
-import { chmodSync as chmodSync6, mkdtempSync as mkdtempSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
+import { createHash as createHash6 } from "crypto";
+import { chmodSync as chmodSync7, mkdtempSync as mkdtempSync2, readFileSync as readFileSync5, rmSync as rmSync3, writeFileSync as writeFileSync5 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join3 } from "path";
 import { fileURLToPath } from "url";
@@ -8448,7 +8566,7 @@ function assertSupportedGuestImage(imageKey) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.62";
+var VERSION2 = "0.1.64";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {
@@ -8566,7 +8684,7 @@ async function pinnedKnownHost(claim, pinned, directory, exec) {
   if (!/^ssh-ed25519 [A-Za-z0-9+/]+={0,3}$/.test(key))
     throw new SshBootstrapError("HOST_KEY_INVALID");
   const path2 = join3(directory, "known_hosts");
-  writeFileSync4(path2, `${pinned.hostKeyAlias} ${key}
+  writeFileSync5(path2, `${pinned.hostKeyAlias} ${key}
 `, { mode: 384, flag: "wx" });
   return path2;
 }
@@ -8576,11 +8694,11 @@ var verifiedBunArchive = async (directory) => {
   if (!response.ok)
     throw new SshBootstrapError("BUN_DOWNLOAD_FAILED");
   const bytes = new Uint8Array(await response.arrayBuffer());
-  if (createHash5("sha256").update(bytes).digest("hex") !== BUN_RELEASE_SHA256) {
+  if (createHash6("sha256").update(bytes).digest("hex") !== BUN_RELEASE_SHA256) {
     throw new SshBootstrapError("BUN_CHECKSUM_MISMATCH");
   }
   const archive = join3(directory, "bun.zip");
-  writeFileSync4(archive, bytes, { mode: 384, flag: "wx" });
+  writeFileSync5(archive, bytes, { mode: 384, flag: "wx" });
   return archive;
 };
 var remote = (exec, ssh, destination, code, argv2, secret = false, stdin) => checked(exec, ["ssh", ...ssh, destination, "--", ...argv2], code, { secret, ...stdin !== undefined ? { stdin } : {} });
@@ -8596,14 +8714,14 @@ async function executeSshBootstrap(claim, options) {
     throw new SshBootstrapError("TARGET_API_INVALID");
   const exec = options.exec ?? defaultExec;
   const directory = mkdtempSync2(join3(tmpdir2(), "forgezero-ssh-bootstrap-"));
-  chmodSync6(directory, 448);
+  chmodSync7(directory, 448);
   let sshKeyPath = options.sshKeyPath;
   let remoteDirectory = "";
   let pinned;
   try {
     if (claim.target.credential.source === "vault") {
       sshKeyPath = join3(directory, "identity");
-      writeFileSync4(sshKeyPath, `${claim.target.credential.privateKey.trim()}
+      writeFileSync5(sshKeyPath, `${claim.target.credential.privateKey.trim()}
 `, { mode: 384, flag: "wx" });
     }
     const sourceHost = claim.target.host.includes(":") ? `[${claim.target.host}]` : claim.target.host;
@@ -8630,11 +8748,11 @@ async function executeSshBootstrap(claim, options) {
 `
     };
     for (const [name, content] of Object.entries(files))
-      writeFileSync4(join3(directory, name), content, { mode: 384, flag: "wx" });
+      writeFileSync5(join3(directory, name), content, { mode: 384, flag: "wx" });
     const fzCliPath = options.fzCliPath ?? fileURLToPath(new URL("./fz.js", import.meta.url));
     const fzAgentPath = options.fzAgentPath ?? fileURLToPath(new URL("./fz-agent.js", import.meta.url));
     for (const [source, name] of [[fzCliPath, "fz.js"], [fzAgentPath, "fz-agent.js"]]) {
-      if (!readFileSync4(source).length)
+      if (!readFileSync5(source).length)
         throw new SshBootstrapError("PACKAGE_ARTIFACT_MISSING");
       await checked(exec, [
         "scp",
@@ -8798,7 +8916,7 @@ async function executeSshBootstrap(claim, options) {
         ]);
       } catch {}
     }
-    rmSync2(directory, { recursive: true, force: true });
+    rmSync3(directory, { recursive: true, force: true });
   }
 }
 var post3 = (options, operation, body) => postSignedNode(options, `v1/node/bootstrap/${operation}`, body);
@@ -8908,14 +9026,14 @@ async function executeMetalAdmission(claim, options) {
   }
   const exec = options.exec ?? defaultExec;
   const directory = mkdtempSync2(join3(tmpdir2(), "forgezero-metal-admission-"));
-  chmodSync6(directory, 448);
+  chmodSync7(directory, 448);
   let sshKeyPath = options.sshKeyPath;
   let remoteDirectory = "";
   let pinned;
   try {
     if (claim.target.credential.source === "vault") {
       sshKeyPath = join3(directory, "identity");
-      writeFileSync4(sshKeyPath, `${claim.target.credential.privateKey.trim()}
+      writeFileSync5(sshKeyPath, `${claim.target.credential.privateKey.trim()}
 `, { mode: 384, flag: "wx" });
     }
     const sourceHost = claim.target.host.includes(":") ? `[${claim.target.host}]` : claim.target.host;
@@ -8932,7 +9050,7 @@ async function executeMetalAdmission(claim, options) {
     const fzCliPath = options.fzCliPath ?? fileURLToPath(new URL("./fz.js", import.meta.url));
     const fzAgentPath = options.fzAgentPath ?? fileURLToPath(new URL("./fz-agent.js", import.meta.url));
     for (const [source, name] of [[fzCliPath, "fz.js"], [fzAgentPath, "fz-agent.js"]]) {
-      if (!readFileSync4(source).length)
+      if (!readFileSync5(source).length)
         throw new SshBootstrapError("PACKAGE_ARTIFACT_MISSING");
       await checked(exec, [
         "scp",
@@ -8963,7 +9081,7 @@ async function executeMetalAdmission(claim, options) {
       }
     };
     const configPath = join3(directory, "metal.json");
-    writeFileSync4(configPath, `${JSON.stringify(config, null, 2)}
+    writeFileSync5(configPath, `${JSON.stringify(config, null, 2)}
 `, { mode: 384, flag: "wx" });
     await checked(exec, [
       "scp",
@@ -9065,7 +9183,7 @@ async function executeMetalAdmission(claim, options) {
         ]);
       } catch {}
     }
-    rmSync2(directory, { recursive: true, force: true });
+    rmSync3(directory, { recursive: true, force: true });
   }
 }
 async function pullMetalAdmissionOnce(options) {
@@ -9150,20 +9268,20 @@ function startMetalAdmissionPull(options) {
 }
 
 // src/metal-helper-socket.ts
-import { chmodSync as chmodSync7, existsSync as existsSync7, unlinkSync as unlinkSync6 } from "fs";
+import { chmodSync as chmodSync8, existsSync as existsSync8, unlinkSync as unlinkSync6 } from "fs";
 import { connect as connect2, createServer as createServer3 } from "net";
 
 // src/metal-provision.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import {
-  existsSync as existsSync6,
-  mkdirSync as mkdirSync4,
-  readFileSync as readFileSync5,
+  existsSync as existsSync7,
+  mkdirSync as mkdirSync5,
+  readFileSync as readFileSync6,
   readdirSync,
-  rmSync as rmSync3,
+  rmSync as rmSync4,
   statSync as statSync2,
   unlinkSync as unlinkSync5,
-  writeFileSync as writeFileSync5
+  writeFileSync as writeFileSync6
 } from "fs";
 import { dirname as dirname3, isAbsolute as isAbsolute3, join as join4 } from "path";
 import { isIP as isIP2 } from "net";
@@ -9293,8 +9411,8 @@ function membersOfLinuxList(value, label) {
     throw new MetalProvisionError(`${label} list overlaps itself`);
   return members;
 }
-var guestNameFor = (computeKey) => `fzg-${createHash6("sha256").update(computeKey).digest("hex").slice(0, 16)}`;
-var tapNameFor = (computeKey) => `fzt${createHash6("sha256").update(computeKey).digest("hex").slice(0, 12)}`;
+var guestNameFor = (computeKey) => `fzg-${createHash7("sha256").update(computeKey).digest("hex").slice(0, 16)}`;
+var tapNameFor = (computeKey) => `fzt${createHash7("sha256").update(computeKey).digest("hex").slice(0, 12)}`;
 var macForAddress = (address) => {
   const octets = address.split(".").map(Number);
   if (octets.length !== 4 || octets.some((value) => !Number.isInteger(value) || value < 0 || value > 255)) {
@@ -9374,9 +9492,9 @@ function validateMetalProfile(profile) {
   }
 }
 var readManifests = (stateDir) => {
-  if (!existsSync6(stateDir))
+  if (!existsSync7(stateDir))
     return [];
-  return readdirSync(stateDir).filter((name) => name.endsWith(".json")).map((name) => JSON.parse(readFileSync5(join4(stateDir, name), "utf8")));
+  return readdirSync(stateDir).filter((name) => name.endsWith(".json")).map((name) => JSON.parse(readFileSync6(join4(stateDir, name), "utf8")));
 };
 function allocateAddress(profile, computeKey, rows) {
   const existing = rows.find((row2) => row2.computeKey === computeKey);
@@ -9384,7 +9502,7 @@ function allocateAddress(profile, computeKey, rows) {
     return existing.address;
   const used = new Set(rows.map((row2) => row2.address));
   const width = profile.addressEnd - profile.addressStart + 1;
-  const start = createHash6("sha256").update(computeKey).digest().readUInt16BE(0) % width;
+  const start = createHash7("sha256").update(computeKey).digest().readUInt16BE(0) % width;
   for (let offset = 0;offset < width; offset += 1) {
     const last = profile.addressStart + (start + offset) % width;
     const address = `${profile.subnetPrefix}.${last}`;
@@ -9480,8 +9598,6 @@ function guestBootstrapOperations(profile, attested = Boolean(profile.confidenti
       "FZ_AGENT_USER=forgezero-agent",
       "FZ_SOCKET_PATH=/run/forgezero/vault.sock",
       "FZ_SEED_CREDENTIAL_PATH=/etc/forgezero/creds/agent-seed.cred",
-      "FZ_GIT_CREDENTIAL_PATH=/etc/forgezero/creds/git-deploy-key.cred",
-      "FZ_GIT_PUBLIC_KEY_PATH=/etc/forgezero/git/deploy.pub",
       "FZ_DEPLOY_ROOT=/opt/forgezero",
       `FZ_DEPLOY_PULL=${hasEnrolment}`,
       `FZ_AGENT_EGRESS_ENFORCE=${hasEnrolment}`,
@@ -9561,7 +9677,7 @@ async function provisionMetalGuest(profile, claim, exec) {
   if (digest !== image.sha256)
     throw new MetalProvisionError("configured image checksum mismatch");
   for (const path2 of [profile.stateDir, profile.seedDir, profile.unitDir])
-    mkdirSync4(path2, { recursive: true, mode: 448 });
+    mkdirSync5(path2, { recursive: true, mode: 448 });
   const manifests = readManifests(profile.stateDir);
   if (claim.access) {
     if (!/^[a-z_][a-z0-9_-]{0,31}$/.test(claim.access.sshUser)) {
@@ -9591,7 +9707,7 @@ async function provisionMetalGuest(profile, claim, exec) {
     allowedMemoryNodes: cpuPool.memoryNodes,
     phase: "allocating"
   };
-  const save = () => writeFileSync5(manifestPath, `${JSON.stringify(manifest, null, 2)}
+  const save = () => writeFileSync6(manifestPath, `${JSON.stringify(manifest, null, 2)}
 `, { mode: 384 });
   save();
   const lv = `/dev/${profile.volumeGroup}/${name}`;
@@ -9605,9 +9721,9 @@ async function provisionMetalGuest(profile, claim, exec) {
   }
   const seedBase = join4(profile.seedDir, name);
   const init = cloudInit(profile, claim, manifest);
-  writeFileSync5(`${seedBase}-user-data`, init.userData, { mode: 384 });
-  writeFileSync5(`${seedBase}-meta-data`, init.metaData, { mode: 384 });
-  writeFileSync5(`${seedBase}-network-config`, init.networkConfig, { mode: 384 });
+  writeFileSync6(`${seedBase}-user-data`, init.userData, { mode: 384 });
+  writeFileSync6(`${seedBase}-meta-data`, init.metaData, { mode: 384 });
+  writeFileSync6(`${seedBase}-network-config`, init.networkConfig, { mode: 384 });
   const seed = `${seedBase}-seed.iso`;
   await checked2(exec, [
     "cloud-localds",
@@ -9640,8 +9756,8 @@ async function provisionMetalGuest(profile, claim, exec) {
   }
   const service = `forgezero-guest@${name}.service`;
   const unitPath = join4(profile.unitDir, service);
-  mkdirSync4(dirname3(unitPath), { recursive: true });
-  writeFileSync5(unitPath, guestUnit(spec), { mode: 420 });
+  mkdirSync5(dirname3(unitPath), { recursive: true });
+  writeFileSync6(unitPath, guestUnit(spec), { mode: 420 });
   await checked2(exec, ["systemctl", "daemon-reload"]);
   if (prior?.phase === "running") {
     await checked2(exec, ["systemctl", "restart", service]);
@@ -9658,10 +9774,10 @@ function legacyPlatformManifest(profile, claim, name) {
     return;
   const legacyDir = profile.legacyStateDir ?? "/etc/forgezero/guests";
   const legacyPath = join4(legacyDir, `${name}.conf`);
-  if (!existsSync6(legacyPath))
+  if (!existsSync7(legacyPath))
     return;
   const values = new Map;
-  for (const line of readFileSync5(legacyPath, "utf8").split(/\r?\n/)) {
+  for (const line of readFileSync6(legacyPath, "utf8").split(/\r?\n/)) {
     if (!line || line.startsWith("#"))
       continue;
     const match = /^([A-Z][A-Z0-9_]*)=([^\s'"`$;|&<>]+)$/.exec(line);
@@ -9695,7 +9811,7 @@ async function removeMetalGuest(profile, claim, exec) {
   const service = `forgezero-guest@${name}.service`;
   const unitPath = join4(profile.unitDir, service);
   const lv = `/dev/${profile.volumeGroup}/${name}`;
-  const manifest = existsSync6(manifestPath) ? JSON.parse(readFileSync5(manifestPath, "utf8")) : legacyPlatformManifest(profile, claim, name);
+  const manifest = existsSync7(manifestPath) ? JSON.parse(readFileSync6(manifestPath, "utf8")) : legacyPlatformManifest(profile, claim, name);
   if (!manifest) {
     const seedBase = join4(profile.seedDir, name);
     const localArtifacts = [
@@ -9705,7 +9821,7 @@ async function removeMetalGuest(profile, claim, exec) {
       `${seedBase}-meta-data`,
       `${seedBase}-network-config`
     ];
-    if (localArtifacts.some(existsSync6)) {
+    if (localArtifacts.some(existsSync7)) {
       throw new MetalProvisionError("guest artifacts exist without owned inventory");
     }
     const [volume, active] = await Promise.all([
@@ -9722,7 +9838,7 @@ async function removeMetalGuest(profile, claim, exec) {
   if (!currentIdentity && !legacyPlatformIdentity) {
     throw new MetalProvisionError("compute identity conflicts with host inventory");
   }
-  if (existsSync6(unitPath))
+  if (existsSync7(unitPath))
     await checked2(exec, ["systemctl", "disable", "--now", service]);
   else if (legacyPlatformIdentity)
     await checked2(exec, ["systemctl", "disable", "--now", service]);
@@ -9739,15 +9855,15 @@ async function removeMetalGuest(profile, claim, exec) {
     join4(profile.seedDir, `${name}-network-config`),
     manifestPath
   ])
-    if (existsSync6(path2))
+    if (existsSync7(path2))
       unlinkSync5(path2);
   if (legacyPlatformIdentity) {
     const legacyConfig = join4(profile.legacyStateDir ?? "/etc/forgezero/guests", `${name}.conf`);
     const legacyDropIn = join4(profile.unitDir, `${service}.d`);
-    if (existsSync6(legacyConfig))
+    if (existsSync7(legacyConfig))
       unlinkSync5(legacyConfig);
-    if (existsSync6(legacyDropIn))
-      rmSync3(legacyDropIn, { recursive: true });
+    if (existsSync7(legacyDropIn))
+      rmSync4(legacyDropIn, { recursive: true });
   }
   await checked2(exec, ["systemctl", "daemon-reload"]);
   return {};
@@ -9785,7 +9901,7 @@ command exceeded ${COMMAND_TIMEOUT_MS}ms`.trim() : stderr
 function startMetalHelper(options) {
   validateMetalProfile(options.profile);
   const socketPath = options.socketPath ?? DEFAULT_METAL_HELPER_SOCKET;
-  if (existsSync7(socketPath))
+  if (existsSync8(socketPath))
     unlinkSync6(socketPath);
   let tail = Promise.resolve();
   const server = createServer3((socket) => {
@@ -9832,7 +9948,7 @@ function startMetalHelper(options) {
     });
     socket.on("error", () => socket.destroy());
   });
-  server.listen(socketPath, () => chmodSync7(socketPath, 432));
+  server.listen(socketPath, () => chmodSync8(socketPath, 432));
   return {
     server,
     async stop() {
@@ -9872,7 +9988,7 @@ function requestMetalProvision(claim, socketPath = DEFAULT_METAL_HELPER_SOCKET)
 }
 
 // src/deployment-runner.ts
-import { chmodSync as chmodSync8, existsSync as existsSync8, realpathSync, unlinkSync as unlinkSync7 } from "fs";
+import { chmodSync as chmodSync9, existsSync as existsSync9, realpathSync, unlinkSync as unlinkSync7 } from "fs";
 import { isAbsolute as isAbsolute4, resolve, sep } from "path";
 import { connect as connect3, createServer as createServer4 } from "net";
 var DEFAULT_DEPLOYMENT_RUNNER_SOCKET = "/run/forgezero-deploy/runner.sock";
@@ -9989,7 +10105,7 @@ function startDeploymentRunner(options) {
   const root = resolve(options.root);
   const home = resolve(options.home);
   const socketPath = options.socketPath ?? DEFAULT_DEPLOYMENT_RUNNER_SOCKET;
-  if (existsSync8(socketPath))
+  if (existsSync9(socketPath))
     unlinkSync7(socketPath);
   const active = new Set;
   const server = createServer4((socket) => {
@@ -10034,7 +10150,7 @@ function startDeploymentRunner(options) {
   const ready = new Promise((resolveReady, rejectReady) => {
     server.once("error", rejectReady);
     server.listen(socketPath, () => {
-      chmodSync8(socketPath, options.socketMode ?? 432);
+      chmodSync9(socketPath, options.socketMode ?? 432);
       server.off("error", rejectReady);
       resolveReady();
     });
@@ -10085,7 +10201,7 @@ function requestDeploymentCommand(input, socketPath = DEFAULT_DEPLOYMENT_RUNNER_
 }
 
 // src/snp-attestation.ts
-import { existsSync as existsSync9 } from "fs";
+import { existsSync as existsSync10 } from "fs";
 
 // ../runtime/dist/snp.js
 var REPORT_BYTES = 1184;
@@ -10178,7 +10294,7 @@ function createSnpAttestationSource(options = {}) {
   const python = options.python ?? "python3";
   const timeoutMs = options.timeoutMs ?? 1e4;
   const spawn = options.spawn ?? Bun.spawn;
-  const exists = options.exists ?? existsSync9;
+  const exists = options.exists ?? existsSync10;
   return {
     name: "linux-sev-guest",
     async report(nonce) {
@@ -10264,7 +10380,7 @@ function startNodeAttestation(options) {
 }
 
 // src/metal-isolation.ts
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync7 } from "fs";
 import { join as join5 } from "path";
 var members = (list) => list.split(",").flatMap((part) => {
   const [first, last = first] = part.split("-").map(Number);
@@ -10342,16 +10458,16 @@ async function applyMetalIsolation(profile, exec = defaultExec2) {
   validateMetalProfile(profile);
   await requireGuestsInSlice(exec);
   const unitDir = profile.unitDir;
-  mkdirSync5(unitDir, { recursive: true });
-  writeFileSync6(join5(unitDir, "forgezero-guests.slice"), metalGuestSliceUnit(profile), { mode: 420 });
+  mkdirSync6(unitDir, { recursive: true });
+  writeFileSync7(join5(unitDir, "forgezero-guests.slice"), metalGuestSliceUnit(profile), { mode: 420 });
   for (const unit of ["system.slice", "user.slice"]) {
     const directory = join5(unitDir, `${unit}.d`);
-    mkdirSync5(directory, { recursive: true });
-    writeFileSync6(join5(directory, "50-forgezero-housekeeping.conf"), metalHousekeepingDropIn(profile, "slice"), { mode: 420 });
+    mkdirSync6(directory, { recursive: true });
+    writeFileSync7(join5(directory, "50-forgezero-housekeeping.conf"), metalHousekeepingDropIn(profile, "slice"), { mode: 420 });
   }
   const initDirectory = join5(unitDir, "init.scope.d");
-  mkdirSync5(initDirectory, { recursive: true });
-  writeFileSync6(join5(initDirectory, "50-forgezero-housekeeping.conf"), metalHousekeepingDropIn(profile, "scope"), { mode: 420 });
+  mkdirSync6(initDirectory, { recursive: true });
+  writeFileSync7(join5(initDirectory, "50-forgezero-housekeeping.conf"), metalHousekeepingDropIn(profile, "scope"), { mode: 420 });
   await checked3(exec, ["systemctl", "daemon-reload"]);
   await requireGuestsInSlice(exec);
   const properties = [`AllowedCPUs=${profile.housekeepingCpus}`];
@@ -10386,7 +10502,7 @@ async function closeServerWithin(server, timeoutMs) {
 }
 
 // src/lifecycle-helper.ts
-import { chmodSync as chmodSync9, existsSync as existsSync10, readFileSync as readFileSync6, unlinkSync as unlinkSync8 } from "fs";
+import { chmodSync as chmodSync10, existsSync as existsSync11, readFileSync as readFileSync7, unlinkSync as unlinkSync8 } from "fs";
 import { connect as connect4, createConnection, createServer as createServer5, isIP as isIP3 } from "net";
 var DEFAULT_LIFECYCLE_HELPER_SOCKET = "/run/forgezero-lifecycle/helper.sock";
 var MAX_REQUEST_BYTES4 = 16 * 1024;
@@ -10430,7 +10546,7 @@ function validateLifecycleProfile(profile) {
   }
 }
 function loadLifecycleProfile(path2) {
-  const profile = JSON.parse(readFileSync6(path2, "utf8"));
+  const profile = JSON.parse(readFileSync7(path2, "utf8"));
   validateLifecycleProfile(profile);
   return profile;
 }
@@ -10527,7 +10643,7 @@ async function executeLifecycleAction(profile, claim, exec = spawnLifecycleComma
 function startLifecycleHelper(options) {
   validateLifecycleProfile(options.profile);
   const socketPath = options.socketPath ?? DEFAULT_LIFECYCLE_HELPER_SOCKET;
-  if (existsSync10(socketPath))
+  if (existsSync11(socketPath))
     unlinkSync8(socketPath);
   let tail = Promise.resolve();
   const server = createServer5((socket) => {
@@ -10568,7 +10684,7 @@ function startLifecycleHelper(options) {
     });
     socket.on("error", () => socket.destroy());
   });
-  server.listen(socketPath, () => chmodSync9(socketPath, 432));
+  server.listen(socketPath, () => chmodSync10(socketPath, 432));
   return {
     server,
     async stop() {
@@ -10608,7 +10724,7 @@ function requestLifecycleAction(claim, socketPath = DEFAULT_LIFECYCLE_HELPER_SOC
 }
 
 // src/warp-config.ts
-import { chmodSync as chmodSync10, mkdirSync as mkdirSync6, renameSync as renameSync4, symlinkSync as symlinkSync2, unlinkSync as unlinkSync9, writeFileSync as writeFileSync7 } from "fs";
+import { chmodSync as chmodSync11, mkdirSync as mkdirSync7, renameSync as renameSync5, symlinkSync as symlinkSync2, unlinkSync as unlinkSync9, writeFileSync as writeFileSync8 } from "fs";
 var xml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;");
 function renderWarpMdm(options) {
   if (!/^[a-z0-9][a-z0-9-]{0,62}$/i.test(options.organization))
@@ -10629,12 +10745,12 @@ function renderWarpMdm(options) {
 function materializeWarpMdm(options) {
   const runtimePath = options.runtimePath ?? "/run/forgezero-warp/mdm.xml";
   const servicePath = options.servicePath ?? "/var/lib/cloudflare-warp/mdm.xml";
-  mkdirSync6(runtimePath.replace(/\/[^/]+$/, ""), { recursive: true, mode: 448 });
-  mkdirSync6(servicePath.replace(/\/[^/]+$/, ""), { recursive: true, mode: 448 });
+  mkdirSync7(runtimePath.replace(/\/[^/]+$/, ""), { recursive: true, mode: 448 });
+  mkdirSync7(servicePath.replace(/\/[^/]+$/, ""), { recursive: true, mode: 448 });
   const next = `${runtimePath}.next`;
-  writeFileSync7(next, renderWarpMdm(options), { mode: 384 });
-  chmodSync10(next, 384);
-  renameSync4(next, runtimePath);
+  writeFileSync8(next, renderWarpMdm(options), { mode: 384 });
+  chmodSync11(next, 384);
+  renameSync5(next, runtimePath);
   try {
     unlinkSync9(servicePath);
   } catch (cause) {
@@ -10646,7 +10762,7 @@ function materializeWarpMdm(options) {
 }
 
 // src/mesh-connector.ts
-import { constants, closeSync, fstatSync, openSync, readFileSync as readFileSync7 } from "fs";
+import { constants, closeSync, fstatSync, openSync, readFileSync as readFileSync8 } from "fs";
 import { join as join6 } from "path";
 var TOKEN = /^[A-Za-z0-9._-]{40,16384}$/;
 function readMeshConnectorCredential(name = "CF_WARP_CONNECTOR_TOKEN") {
@@ -10663,7 +10779,7 @@ function readMeshConnectorCredential(name = "CF_WARP_CONNECTOR_TOKEN") {
     if (!metadata.isFile() || metadata.nlink !== 1 || metadata.size < 40 || metadata.size > 16384) {
       throw new Error("Mesh connector systemd credential is malformed");
     }
-    const token = readFileSync7(descriptor, "utf8").trim();
+    const token = readFileSync8(descriptor, "utf8").trim();
     if (!TOKEN.test(token))
       throw new Error("Mesh connector systemd credential is malformed");
     return token;
@@ -10689,20 +10805,20 @@ async function configureMeshConnector(input) {
 }
 
 // src/agent-update.ts
-import { createHash as createHash7, timingSafeEqual, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash8, timingSafeEqual, randomUUID as randomUUID2 } from "crypto";
 import {
-  chmodSync as chmodSync11,
+  chmodSync as chmodSync12,
   closeSync as closeSync2,
-  existsSync as existsSync11,
+  existsSync as existsSync12,
   fsyncSync,
-  mkdirSync as mkdirSync7,
+  mkdirSync as mkdirSync8,
   openSync as openSync2,
-  readFileSync as readFileSync8,
+  readFileSync as readFileSync9,
   readlinkSync,
-  renameSync as renameSync5,
-  rmSync as rmSync4,
+  renameSync as renameSync6,
+  rmSync as rmSync5,
   symlinkSync as symlinkSync3,
-  writeFileSync as writeFileSync8
+  writeFileSync as writeFileSync9
 } from "fs";
 import { dirname as dirname4, join as join7, resolve as resolve2 } from "path";
 var DEFAULT_AGENT_RELEASE_ROOT = "/opt/forgezero/agent";
@@ -10784,9 +10900,9 @@ var checked4 = async (run2, input, label) => {
   return result;
 };
 async function validateReleaseDirectory(directory, release, run2) {
-  chmodSync11(directory, 493);
-  chmodSync11(join7(directory, "dist"), 493);
-  const manifest = JSON.parse(readFileSync8(join7(directory, "package.json"), "utf8"));
+  chmodSync12(directory, 493);
+  chmodSync12(join7(directory, "dist"), 493);
+  const manifest = JSON.parse(readFileSync9(join7(directory, "package.json"), "utf8"));
   if (manifest.name !== release.package || manifest.version !== release.version) {
     throw new Error("agent update manifest does not match the selected release");
   }
@@ -10794,11 +10910,11 @@ async function validateReleaseDirectory(directory, release, run2) {
   const cli = join7(directory, "dist", "fz.js");
   const gitSsh = join7(directory, "dist", "fz-git-ssh.js");
   for (const binary of [agent, cli, gitSsh]) {
-    if (!readFileSync8(binary, "utf8").startsWith(`#!/usr/bin/env bun
+    if (!readFileSync9(binary, "utf8").startsWith(`#!/usr/bin/env bun
 `)) {
       throw new Error("agent update artifact is not a self-contained Bun executable");
     }
-    chmodSync11(binary, 493);
+    chmodSync12(binary, 493);
   }
   const version = (await checked4(run2, { command: agent, args: ["--version"] }, "agent update smoke test")).output.trim();
   if (version !== release.version)
@@ -10817,7 +10933,7 @@ async function stageAgentRelease(releaseInput, options) {
   const archive = join7(stage2, "agent.tgz");
   const unpacked = join7(stage2, "unpacked");
   const run2 = options.run ?? command;
-  mkdirSync7(unpacked, { recursive: true, mode: 448 });
+  mkdirSync8(unpacked, { recursive: true, mode: 448 });
   try {
     const response = await (options.fetch ?? globalThis.fetch)(release.tarball, {
       redirect: "error",
@@ -10833,10 +10949,10 @@ async function stageAgentRelease(releaseInput, options) {
       throw new Error("agent update tarball is empty or exceeds the size limit");
     }
     const expected = Buffer.from(release.integrity.slice("sha512-".length), "base64");
-    const actual = createHash7("sha512").update(bytes).digest();
+    const actual = createHash8("sha512").update(bytes).digest();
     if (!timingSafeEqual(actual, expected))
       throw new Error("agent update integrity mismatch");
-    writeFileSync8(archive, bytes, { mode: 384, flag: "wx" });
+    writeFileSync9(archive, bytes, { mode: 384, flag: "wx" });
     for (const [member, relative] of [
       ["package/package.json", "package.json"],
       ["package/dist/fz-agent.js", "dist/fz-agent.js"],
@@ -10848,23 +10964,23 @@ async function stageAgentRelease(releaseInput, options) {
         args: ["-xOzf", archive, member]
       }, `agent update extraction of ${member}`);
       const destination = join7(unpacked, relative);
-      mkdirSync7(dirname4(destination), { recursive: true, mode: 448 });
-      writeFileSync8(destination, extracted.output, { mode: 384, flag: "wx" });
+      mkdirSync8(dirname4(destination), { recursive: true, mode: 448 });
+      writeFileSync9(destination, extracted.output, { mode: 384, flag: "wx" });
     }
     await validateReleaseDirectory(unpacked, release, run2);
-    if (!existsSync11(finalDirectory)) {
-      renameSync5(unpacked, finalDirectory);
+    if (!existsSync12(finalDirectory)) {
+      renameSync6(unpacked, finalDirectory);
       syncReleaseDirectory(finalDirectory);
     } else
       await validateReleaseDirectory(finalDirectory, release, run2);
-    if (!existsSync11(currentLink)) {
+    if (!existsSync12(currentLink)) {
       throw new Error("agent update requires an active immutable release to roll back to");
     }
     const previousTarget = readlinkSync(currentLink);
     if (previousTarget !== join7("versions", options.currentVersion)) {
       throw new Error("agent update current release does not match the running version");
     }
-    if (!existsSync11(join7(root, previousTarget))) {
+    if (!existsSync12(join7(root, previousTarget))) {
       throw new Error("agent update rollback release is missing");
     }
     return {
@@ -10876,44 +10992,44 @@ async function stageAgentRelease(releaseInput, options) {
       currentLink
     };
   } finally {
-    rmSync4(stage2, { recursive: true, force: true });
+    rmSync5(stage2, { recursive: true, force: true });
   }
 }
 function selectAgentRelease(staged) {
   const next = join7(dirname4(staged.currentLink), `.current.${randomUUID2()}.next`);
   try {
     symlinkSync3(staged.nextTarget, next);
-    renameSync5(next, staged.currentLink);
+    renameSync6(next, staged.currentLink);
     syncPath(dirname4(staged.currentLink));
   } finally {
-    rmSync4(next, { force: true });
+    rmSync5(next, { force: true });
   }
 }
 function restoreAgentRelease(staged) {
   const next = join7(dirname4(staged.currentLink), `.current.${randomUUID2()}.rollback`);
   try {
     symlinkSync3(staged.previousTarget, next);
-    renameSync5(next, staged.currentLink);
+    renameSync6(next, staged.currentLink);
     syncPath(dirname4(staged.currentLink));
   } finally {
-    rmSync4(next, { force: true });
+    rmSync5(next, { force: true });
   }
 }
 
 // src/agent-update-helper.ts
 import { randomUUID as randomUUID3 } from "crypto";
 import {
-  chmodSync as chmodSync12,
+  chmodSync as chmodSync13,
   closeSync as closeSync3,
-  existsSync as existsSync12,
+  existsSync as existsSync13,
   fsyncSync as fsyncSync2,
-  mkdirSync as mkdirSync8,
+  mkdirSync as mkdirSync9,
   openSync as openSync3,
-  readFileSync as readFileSync9,
-  renameSync as renameSync6,
-  rmSync as rmSync5,
+  readFileSync as readFileSync10,
+  renameSync as renameSync7,
+  rmSync as rmSync6,
   unlinkSync as unlinkSync10,
-  writeFileSync as writeFileSync9
+  writeFileSync as writeFileSync10
 } from "fs";
 import { connect as connect5, createServer as createServer6 } from "net";
 import { dirname as dirname5, join as join8, resolve as resolve3 } from "path";
@@ -11011,22 +11127,22 @@ function validateJournal(value, root) {
   return journal;
 }
 function readJournal(path2, root) {
-  if (!existsSync12(path2))
+  if (!existsSync13(path2))
     return;
-  return validateJournal(JSON.parse(readFileSync9(path2, "utf8")), root);
+  return validateJournal(JSON.parse(readFileSync10(path2, "utf8")), root);
 }
 function writeAtomic(path2, value, mode) {
-  mkdirSync8(dirname5(path2), { recursive: true, mode: 493 });
+  mkdirSync9(dirname5(path2), { recursive: true, mode: 493 });
   const next = `${path2}.${randomUUID3()}.next`;
   let file;
   try {
     file = openSync3(next, "wx", mode);
-    writeFileSync9(file, `${JSON.stringify(value)}
+    writeFileSync10(file, `${JSON.stringify(value)}
 `);
     fsyncSync2(file);
     closeSync3(file);
     file = undefined;
-    renameSync6(next, path2);
+    renameSync7(next, path2);
     const directory = openSync3(dirname5(path2), "r");
     try {
       fsyncSync2(directory);
@@ -11036,7 +11152,7 @@ function writeAtomic(path2, value, mode) {
   } finally {
     if (file !== undefined)
       closeSync3(file);
-    rmSync5(next, { force: true });
+    rmSync6(next, { force: true });
   }
 }
 var publicReceipt = (journal) => {
@@ -11069,9 +11185,9 @@ function writeUpdateState(journalPath, receiptPath, journal) {
 }
 function readAgentUpdateReceipt(path2 = AGENT_UPDATE_RECEIPT) {
   try {
-    if (!existsSync12(path2))
+    if (!existsSync13(path2))
       return;
-    return validateReceipt(JSON.parse(readFileSync9(path2, "utf8")));
+    return validateReceipt(JSON.parse(readFileSync10(path2, "utf8")));
   } catch {
     return;
   }
@@ -11225,7 +11341,7 @@ async function recoverInterruptedAgentUpdate(options = {}) {
     return publicReceipt(journal);
   }
   const staged = stagedFromJournal(journal, root);
-  if (!existsSync12(join8(root, journal.previousTarget))) {
+  if (!existsSync13(join8(root, journal.previousTarget))) {
     throw new Error("Agent update rollback release is missing");
   }
   const run2 = options.run ?? runCommand;
@@ -11255,9 +11371,9 @@ async function recoverInterruptedAgentUpdate(options = {}) {
 }
 function startAgentUpdateHelper(options = {}) {
   const socketPath = options.socketPath ?? DEFAULT_AGENT_UPDATE_SOCKET;
-  if (existsSync12(socketPath))
+  if (existsSync13(socketPath))
     unlinkSync10(socketPath);
-  mkdirSync8(dirname5(socketPath), { recursive: true, mode: 488 });
+  mkdirSync9(dirname5(socketPath), { recursive: true, mode: 488 });
   const setTimer = options.setTimer ?? ((callback, ms) => setTimeout(callback, ms));
   const receiptPath = options.receiptPath ?? AGENT_UPDATE_RECEIPT;
   const journalPath = options.journalPath ?? AGENT_UPDATE_JOURNAL;
@@ -11336,7 +11452,7 @@ function startAgentUpdateHelper(options = {}) {
     });
     socket.on("error", () => socket.destroy());
   });
-  server.listen(socketPath, () => chmodSync12(socketPath, 432));
+  server.listen(socketPath, () => chmodSync13(socketPath, 432));
   return server;
 }
 function requestAgentUpdate(request, socketPath = DEFAULT_AGENT_UPDATE_SOCKET, timeoutMs = 90000) {
@@ -11366,13 +11482,13 @@ function requestAgentUpdate(request, socketPath = DEFAULT_AGENT_UPDATE_SOCKET, t
 }
 
 // src/agent-heartbeat.ts
-import { readFileSync as readFileSync10 } from "fs";
+import { readFileSync as readFileSync11 } from "fs";
 var unquote = (value) => value.replace(/^['"]|['"]$/g, "");
 var remoteOutcome4 = (cause) => cause instanceof SignedNodeHttpError && cause.status < 500 ? "refused" : cause instanceof SignedNodeHttpError ? "retryable" : "failed";
 
 class AgentUpdateRefusedError extends Error {
 }
-function observeAgentHost(version = VERSION2, mode = "enrolled", osRelease = readFileSync10("/etc/os-release", "utf8"), architecture = process.arch) {
+function observeAgentHost(version = VERSION2, mode = "enrolled", osRelease = readFileSync11("/etc/os-release", "utf8"), architecture = process.arch) {
   const values = Object.fromEntries(osRelease.split(`
 `).flatMap((line) => {
     const separator = line.indexOf("=");
@@ -11490,34 +11606,34 @@ function startAgentHeartbeat(options) {
 }
 
 // src/software-helper.ts
-import { chmodSync as chmodSync13, existsSync as existsSync15, mkdirSync as mkdirSync11, unlinkSync as unlinkSync11 } from "fs";
+import { chmodSync as chmodSync14, existsSync as existsSync16, mkdirSync as mkdirSync12, unlinkSync as unlinkSync11 } from "fs";
 import { connect as connect6, createServer as createServer7 } from "net";
 import { dirname as dirname8 } from "path";
 
 // src/service-supervisor.ts
-import { createHash as createHash8 } from "crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync11, readdirSync as readdirSync2, realpathSync as realpathSync2, renameSync as renameSync7, rmSync as rmSync6, writeFileSync as writeFileSync10 } from "fs";
+import { createHash as createHash9 } from "crypto";
+import { existsSync as existsSync14, mkdirSync as mkdirSync10, readFileSync as readFileSync12, readdirSync as readdirSync2, realpathSync as realpathSync2, renameSync as renameSync8, rmSync as rmSync7, writeFileSync as writeFileSync11 } from "fs";
 import { dirname as dirname6, join as join9, resolve as resolve4, sep as sep2 } from "path";
 var SERVICE_STATE_DIRECTORY = "/var/lib/forgezero/services";
 var SERVICE_CONFIG_DIRECTORY = "/etc/forgezero/services";
 var SERVICE_UNIT_DIRECTORY = "/etc/systemd/system";
 var SERVICE_NGINX_DIRECTORY = "/etc/nginx/conf.d";
-var idFor = (key) => createHash8("sha256").update(key).digest("hex").slice(0, 24);
+var idFor = (key) => createHash9("sha256").update(key).digest("hex").slice(0, 24);
 var statePath = (id2) => `${SERVICE_STATE_DIRECTORY}/${id2}.json`;
 var within2 = (root, path2) => path2 === root || path2.startsWith(`${root}${sep2}`);
 var defaultHost = {
   write(path2, content, mode) {
-    mkdirSync9(dirname6(path2), { recursive: true, mode: 493 });
+    mkdirSync10(dirname6(path2), { recursive: true, mode: 493 });
     const next = `${path2}.next`;
-    writeFileSync10(next, content, { mode });
-    renameSync7(next, path2);
+    writeFileSync11(next, content, { mode });
+    renameSync8(next, path2);
   },
-  read: (path2) => readFileSync11(path2, "utf8"),
-  exists: existsSync13,
-  list: (path2) => existsSync13(path2) ? readdirSync2(path2) : [],
+  read: (path2) => readFileSync12(path2, "utf8"),
+  exists: existsSync14,
+  list: (path2) => existsSync14(path2) ? readdirSync2(path2) : [],
   realpath: realpathSync2,
-  mkdir: (path2, mode) => mkdirSync9(path2, { recursive: true, mode }),
-  remove: (path2) => rmSync6(path2, { force: true }),
+  mkdir: (path2, mode) => mkdirSync10(path2, { recursive: true, mode }),
+  remove: (path2) => rmSync7(path2, { force: true }),
   async exec(argv2) {
     const child = Bun.spawn([...argv2], { stdout: "pipe", stderr: "pipe", env: {
       PATH: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
@@ -11575,7 +11691,7 @@ function allocatedPorts(request, id2, previous, states) {
   if (previous && previous.applicationPorts.length === required && previous.applicationPorts.every((port) => port >= allocation.from && port <= allocation.to && !occupied.has(port)))
     return [...previous.applicationPorts];
   const width = allocation.to - allocation.from + 1;
-  const start = Number.parseInt(createHash8("sha256").update(request.key).digest("hex").slice(0, 8), 16) % width;
+  const start = Number.parseInt(createHash9("sha256").update(request.key).digest("hex").slice(0, 8), 16) % width;
   for (let offset = 0;offset < width; offset += 1) {
     const first = allocation.from + (start + offset) % width;
     const candidate = Array.from({ length: required }, (_, index) => first + index);
@@ -11712,22 +11828,22 @@ async function activateSupervisedService(request, host = defaultHost) {
 }
 
 // src/container-supervisor.ts
-import { createHash as createHash9 } from "crypto";
-import { existsSync as existsSync14, mkdirSync as mkdirSync10, readFileSync as readFileSync12, readdirSync as readdirSync3, realpathSync as realpathSync3, renameSync as renameSync8, rmSync as rmSync7, writeFileSync as writeFileSync11 } from "fs";
+import { createHash as createHash10 } from "crypto";
+import { existsSync as existsSync15, mkdirSync as mkdirSync11, readFileSync as readFileSync13, readdirSync as readdirSync3, realpathSync as realpathSync3, renameSync as renameSync9, rmSync as rmSync8, writeFileSync as writeFileSync12 } from "fs";
 import { dirname as dirname7, resolve as resolve5, sep as sep3 } from "path";
 var defaultHost2 = {
   realpath: realpathSync3,
-  exists: existsSync14,
-  read: (path2) => readFileSync12(path2, "utf8"),
+  exists: existsSync15,
+  read: (path2) => readFileSync13(path2, "utf8"),
   write(path2, content, mode) {
-    mkdirSync10(dirname7(path2), { recursive: true, mode: 493 });
+    mkdirSync11(dirname7(path2), { recursive: true, mode: 493 });
     const next = `${path2}.next`;
-    writeFileSync11(next, content, { mode });
-    renameSync8(next, path2);
+    writeFileSync12(next, content, { mode });
+    renameSync9(next, path2);
   },
-  remove: (path2) => rmSync7(path2, { force: true }),
-  list: (path2) => existsSync14(path2) ? readdirSync3(path2) : [],
-  mkdir: (path2, mode) => mkdirSync10(path2, { recursive: true, mode }),
+  remove: (path2) => rmSync8(path2, { force: true }),
+  list: (path2) => existsSync15(path2) ? readdirSync3(path2) : [],
+  mkdir: (path2, mode) => mkdirSync11(path2, { recursive: true, mode }),
   async exec(argv2) {
     const child = Bun.spawn([...argv2], { stdout: "pipe", stderr: "pipe", env: { PATH: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", LANG: "C", LC_ALL: "C" } });
     const [stdout, stderr, exitCode] = await Promise.all([new Response(child.stdout).text(), new Response(child.stderr).text(), child.exited]);
@@ -11745,7 +11861,7 @@ var defaultHost2 = {
   now: Date.now
 };
 var within3 = (root, path2) => path2 === root || path2.startsWith(`${root}${sep3}`);
-var idFor2 = (key) => createHash9("sha256").update(key).digest("hex").slice(0, 24);
+var idFor2 = (key) => createHash10("sha256").update(key).digest("hex").slice(0, 24);
 var statePath2 = (id2) => `${SERVICE_STATE_DIRECTORY}/${id2}.json`;
 var nameFor = (id2, slot) => `forgezero-${id2}-slot${slot}`;
 function validateRequest(request, host) {
@@ -12010,9 +12126,9 @@ var MAX_REQUEST_BYTES6 = 128 * 1024;
 var MAX_PENDING_REQUESTS = 128;
 function startSoftwareHelper(options = {}) {
   const socketPath = options.socketPath ?? DEFAULT_SOFTWARE_HELPER_SOCKET;
-  if (existsSync15(socketPath))
+  if (existsSync16(socketPath))
     unlinkSync11(socketPath);
-  mkdirSync11(dirname8(socketPath), { recursive: true, mode: 488 });
+  mkdirSync12(dirname8(socketPath), { recursive: true, mode: 488 });
   const ensure = options.ensure ?? ensureSoftwareRequirements;
   const activate = options.activate ?? activateSupervisedService;
   const buildContainer = options.buildContainer ?? buildContainerImage;
@@ -12092,7 +12208,7 @@ function startSoftwareHelper(options = {}) {
     });
     socket.on("error", () => socket.destroy());
   });
-  server.listen(socketPath, () => chmodSync13(socketPath, 432));
+  server.listen(socketPath, () => chmodSync14(socketPath, 432));
   return server;
 }
 function requestContainer(op, request, socketPath, timeoutMs) {
@@ -13121,20 +13237,20 @@ var METAL_SYSTEMD_CREDENTIALS = {
 
 // src/platform-bootstrap-runtime.ts
 import {
-  chmodSync as chmodSync14,
+  chmodSync as chmodSync15,
   chownSync,
   copyFileSync as copyFileSync2,
-  existsSync as existsSync16,
-  lstatSync as lstatSync2,
-  mkdirSync as mkdirSync12,
-  readFileSync as readFileSync13,
+  existsSync as existsSync17,
+  lstatSync as lstatSync3,
+  mkdirSync as mkdirSync13,
+  readFileSync as readFileSync14,
   readdirSync as readdirSync4,
   realpathSync as realpathSync5,
-  renameSync as renameSync9,
-  rmSync as rmSync8,
+  renameSync as renameSync10,
+  rmSync as rmSync9,
   statSync as statSync3,
   symlinkSync as symlinkSync4,
-  writeFileSync as writeFileSync12
+  writeFileSync as writeFileSync13
 } from "fs";
 import { join as join10 } from "path";
 var boundedInteger2 = (name, value, minimum, maximum) => {
@@ -13188,21 +13304,21 @@ var platformExec = async (argv2) => {
 };
 var replaceLink = (path2, target2) => {
   const pending = `${path2}.next`;
-  rmSync8(pending, { force: true });
+  rmSync9(pending, { force: true });
   if (!target2) {
-    rmSync8(path2, { force: true });
+    rmSync9(path2, { force: true });
     return;
   }
   symlinkSync4(target2, pending);
-  renameSync9(pending, path2);
+  renameSync10(pending, path2);
 };
 var secureRelease = (path2, uid, gid) => {
   const visit = (current) => {
-    const metadata = lstatSync2(current);
+    const metadata = lstatSync3(current);
     if (metadata.isSymbolicLink())
       throw new Error("release contains a symbolic link");
     chownSync(current, uid, gid);
-    chmodSync14(current, metadata.isDirectory() ? 365 : 292);
+    chmodSync15(current, metadata.isDirectory() ? 365 : 292);
     if (metadata.isDirectory())
       for (const name of readdirSync4(current))
         visit(join10(current, name));
@@ -13225,9 +13341,9 @@ async function activatePlatformRelease(config, requestedRelease, options = {}) {
   const request = options.fetch ?? fetch;
   const sleep2 = options.sleep ?? Bun.sleep;
   const slots = join10(normalized.root, "slots");
-  mkdirSync12(slots, { recursive: true, mode: 493 });
+  mkdirSync13(slots, { recursive: true, mode: 493 });
   const slotFile = join10(normalized.root, ".forge-slot");
-  const previousSlot = existsSync16(slotFile) ? readFileSync13(slotFile, "utf8").trim() : undefined;
+  const previousSlot = existsSync17(slotFile) ? readFileSync14(slotFile, "utf8").trim() : undefined;
   const target2 = previousSlot === "blue" ? "green" : "blue";
   const port = target2 === "blue" ? normalized.bluePort : normalized.greenPort;
   const targetLink = join10(slots, target2);
@@ -13267,26 +13383,26 @@ async function activatePlatformRelease(config, requestedRelease, options = {}) {
   }
   const upstream = "/etc/nginx/conf.d/forgezero-upstream.conf";
   const backup = `${upstream}.forgezero-backup`;
-  if (existsSync16(upstream))
+  if (existsSync17(upstream))
     copyFileSync2(upstream, backup);
   else
-    rmSync8(backup, { force: true });
-  writeFileSync12(upstream, `upstream forgezero { server 127.0.0.1:${port}; }
+    rmSync9(backup, { force: true });
+  writeFileSync13(upstream, `upstream forgezero { server 127.0.0.1:${port}; }
 `, { mode: 420 });
   const test = await exec(["/usr/sbin/nginx", "-t"]);
   const reload = test.exitCode === 0 ? await exec(["/usr/sbin/nginx", "-s", "reload"]) : test;
   if (reload.exitCode !== 0) {
-    if (existsSync16(backup))
-      renameSync9(backup, upstream);
+    if (existsSync17(backup))
+      renameSync10(backup, upstream);
     else
-      rmSync8(upstream, { force: true });
+      rmSync9(upstream, { force: true });
     await exec(["/usr/sbin/nginx", "-t"]);
     await exec(["/usr/sbin/nginx", "-s", "reload"]);
     await stopTarget();
     throw new Error("nginx refused the promoted upstream");
   }
-  rmSync8(backup, { force: true });
-  writeFileSync12(slotFile, `${target2}
+  rmSync9(backup, { force: true });
+  writeFileSync13(slotFile, `${target2}
 `, { mode: 420 });
   if (previousSlot && previousSlot !== target2) {
     await sleep2(normalized.drainDeadlineMs);
@@ -13295,12 +13411,12 @@ async function activatePlatformRelease(config, requestedRelease, options = {}) {
   const old = readdirSync4(releases, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => join10(releases, entry.name)).sort((left, right) => statSync3(right).mtimeMs - statSync3(left).mtimeMs).slice(normalized.keepReleases);
   for (const path2 of old)
     if (path2 !== release)
-      rmSync8(path2, { recursive: true, force: true });
+      rmSync9(path2, { recursive: true, force: true });
   return { release, slot: target2 };
 }
 
 // src/recovery-host.ts
-import { existsSync as existsSync17, readFileSync as readFileSync14, statSync as statSync4 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync15, statSync as statSync4 } from "fs";
 import { hostname } from "os";
 import { join as join11 } from "path";
 var execute2 = async (argv2) => {
@@ -13315,18 +13431,18 @@ var checked7 = async (run2, argv2, expected = 0) => {
   return result;
 };
 var activeSlot = () => {
-  const slot = readFileSync14("/opt/forgezero/.forge-slot", "utf8").trim();
+  const slot = readFileSync15("/opt/forgezero/.forge-slot", "utf8").trim();
   if (slot !== "blue" && slot !== "green")
     throw new Error("invalid active slot");
   return slot;
 };
 var exactState = (path2, expected) => {
-  if (!readFileSync14(path2, "utf8").split(`
+  if (!readFileSync15(path2, "utf8").split(`
 `).includes(expected))
     throw new Error(`state mismatch: ${expected}`);
 };
 var nonEmpty = (path2) => {
-  if (!existsSync17(path2) || !statSync4(path2).isFile() || statSync4(path2).size < 1)
+  if (!existsSync18(path2) || !statSync4(path2).isFile() || statSync4(path2).size < 1)
     throw new Error(`required file missing: ${path2}`);
 };
 var option = (args, name) => {
@@ -13422,18 +13538,18 @@ async function runRecoveryHost(args, run2 = execute2) {
 }
 
 // src/platform-fleet-verification.ts
-import { lstatSync as lstatSync5 } from "fs";
+import { lstatSync as lstatSync6 } from "fs";
 
 // src/bootstrap.ts
 import {
-  chmodSync as chmodSync16,
-  existsSync as existsSync19,
-  lstatSync as lstatSync4,
-  mkdirSync as mkdirSync14,
-  readFileSync as readFileSync16,
-  renameSync as renameSync11,
-  rmSync as rmSync10,
-  writeFileSync as writeFileSync14
+  chmodSync as chmodSync17,
+  existsSync as existsSync20,
+  lstatSync as lstatSync5,
+  mkdirSync as mkdirSync15,
+  readFileSync as readFileSync17,
+  renameSync as renameSync12,
+  rmSync as rmSync11,
+  writeFileSync as writeFileSync15
 } from "fs";
 import { dirname as dirname10 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
@@ -13505,7 +13621,11 @@ function agentEgressUnit(options) {
   const user = options.user ?? "forgezero";
   if (!/^[a-z_][a-z0-9_-]{0,30}$/.test(user))
     throw new Error("invalid Agent service user");
-  const deploymentEnabled = Boolean(options.repository || options.pullDeployments);
+  const bootstrapBundleEnabled = Boolean(options.bootstrapBundlePath && options.bootstrapBundleManifestPath);
+  if (Boolean(options.bootstrapBundlePath) !== Boolean(options.bootstrapBundleManifestPath) || bootstrapBundleEnabled && ![options.bootstrapBundlePath, options.bootstrapBundleManifestPath].every((path2) => path2.startsWith("/") && !/[\r\n\0:]/.test(path2))) {
+    throw new Error("bootstrap bundle and manifest must be supplied together as absolute paths");
+  }
+  const deploymentEnabled = Boolean(options.repository || bootstrapBundleEnabled || options.pullDeployments);
   const runnerLoopbackPorts = normalizeEgressTcpPorts(options.runnerLoopbackPorts ?? []);
   const runnerPublicTcpPorts = normalizeEgressTcpPorts(options.runnerPublicTcpPorts ?? DEFAULT_RUNNER_PUBLIC_TCP_PORTS);
   if (deploymentEnabled && runnerPublicTcpPorts.length < 1) {
@@ -13911,17 +14031,16 @@ function agentUnit(options) {
   if (Boolean(options.pullMigrations) !== Boolean(options.lifecycleProfilePath)) {
     throw new Error("migration pull and lifecycle profile must be supplied together");
   }
-  const bootstrapEnabled = Boolean(options.pullBootstrap && options.bootstrapSshCredentialPath && options.bootstrapSshPublicKeyPath && options.bootstrapTargetTelemetryEndpoint);
-  if ([
-    options.pullBootstrap,
-    options.bootstrapSshCredentialPath,
-    options.bootstrapSshPublicKeyPath,
-    options.bootstrapTargetTelemetryEndpoint
-  ].some(Boolean) && !bootstrapEnabled) {
-    throw new Error("bootstrap pull, SSH credential, public key and target telemetry endpoint must be supplied together");
+  const bootstrapIdentityEnabled = Boolean(options.bootstrapSshCredentialPath && options.bootstrapSshPublicKeyPath);
+  if (Boolean(options.bootstrapSshCredentialPath) !== Boolean(options.bootstrapSshPublicKeyPath)) {
+    throw new Error("bootstrap SSH credential and public key paths must be supplied together");
+  }
+  const bootstrapEnabled = Boolean(options.pullBootstrap);
+  if (bootstrapEnabled && (!bootstrapIdentityEnabled || !options.bootstrapTargetTelemetryEndpoint) || !bootstrapEnabled && options.bootstrapTargetTelemetryEndpoint) {
+    throw new Error("bootstrap pull, SSH identity and target telemetry endpoint must be supplied together");
   }
   const lifecycleHelperSocketPath = lifecycleEnabled ? systemdPath(options.lifecycleHelperSocketPath ?? LIFECYCLE_HELPER_SOCKET, "lifecycle helper socket") : undefined;
-  const bootstrapSshCredentialPath = bootstrapEnabled ? systemdPath(options.bootstrapSshCredentialPath, "bootstrap SSH credential") : undefined;
+  const bootstrapSshCredentialPath = bootstrapIdentityEnabled ? systemdPath(options.bootstrapSshCredentialPath, "bootstrap SSH credential") : undefined;
   const warpValues = [
     options.warpOrganization,
     options.warpClientIdCredentialPath,
@@ -13975,6 +14094,8 @@ function agentUnit(options) {
     options.gitPublicKeyPath ? `FZ_GIT_PUBLIC_KEY_FILE=${options.gitPublicKeyPath}` : null,
     options.repository ? `FZ_DEPLOY_REPO=${options.repository}` : null,
     options.branch ? `FZ_DEPLOY_BRANCH=${options.branch}` : null,
+    options.bootstrapBundlePath ? `FZ_BOOTSTRAP_BUNDLE=${options.bootstrapBundlePath}` : null,
+    options.bootstrapBundleManifestPath ? `FZ_BOOTSTRAP_BUNDLE_MANIFEST=${options.bootstrapBundleManifestPath}` : null,
     options.profile ? `FZ_DEPLOY_PROFILE=${options.profile}` : null,
     options.repository && options.branch ? `FZ_DEPLOY_KEY=${options.project ?? "platform"}:${options.environment ?? "production"}` : null,
     deploymentEnabled ? `FZ_DEPLOY_ROOT=${deployRoot}` : null,
@@ -14158,15 +14279,13 @@ function planProvision(options) {
   if (Boolean(options.pullMigrations) !== Boolean(options.lifecycleProfilePath)) {
     throw new Error("migration pull and lifecycle profile must be supplied together");
   }
-  const bootstrapEnabled = Boolean(options.pullBootstrap && options.bootstrapSshCredentialPath && options.bootstrapSshPublicKeyPath && options.bootstrapTargetTelemetryEndpoint);
-  if ([
-    options.pullBootstrap,
-    options.bootstrapSshCredentialPath,
-    options.bootstrapSshPublicKeyPath,
-    options.bootstrapSshSourcePath,
-    options.bootstrapTargetTelemetryEndpoint
-  ].some(Boolean) && !bootstrapEnabled) {
-    throw new Error("bootstrap pull, SSH credential, public key and target telemetry endpoint must be supplied together");
+  const bootstrapIdentityEnabled = Boolean(options.bootstrapSshCredentialPath && options.bootstrapSshPublicKeyPath);
+  if (Boolean(options.bootstrapSshCredentialPath) !== Boolean(options.bootstrapSshPublicKeyPath) || options.bootstrapSshSourcePath && !bootstrapIdentityEnabled) {
+    throw new Error("bootstrap SSH credential and public key paths must be supplied together");
+  }
+  const bootstrapEnabled = Boolean(options.pullBootstrap);
+  if (bootstrapEnabled && (!bootstrapIdentityEnabled || !options.bootstrapTargetTelemetryEndpoint) || !bootstrapEnabled && options.bootstrapTargetTelemetryEndpoint) {
+    throw new Error("bootstrap pull, SSH identity and target telemetry endpoint must be supplied together");
   }
   const warpValues = [
     options.warpOrganization,
@@ -14176,13 +14295,13 @@ function planProvision(options) {
   const warpEnabled = warpValues.every(Boolean);
   if (warpValues.some(Boolean) && !warpEnabled)
     throw new Error("WARP configuration must be supplied together");
-  const enrolmentEnabled = Boolean(options.enrolTokenCredentialPath && options.enrolStatePath);
-  if (Boolean(options.enrolTokenCredentialPath) !== Boolean(options.enrolStatePath) || options.enrolTokenSourcePath && !enrolmentEnabled) {
-    throw new Error("direct enrolment credential and state paths must be supplied together");
+  const enrolmentEnabled = Boolean(options.enrolTokenCredentialPath);
+  if (options.enrolTokenCredentialPath && !options.enrolStatePath || options.enrolTokenSourcePath && (!options.enrolTokenCredentialPath || !options.enrolStatePath)) {
+    throw new Error("direct enrolment credential requires its durable state path");
   }
   const enrolTokenSourcePath = options.enrolTokenSourcePath ? systemdPath(options.enrolTokenSourcePath, "enrolment source") : undefined;
   const enrolTokenCredentialPath = enrolmentEnabled ? systemdPath(options.enrolTokenCredentialPath, "enrolment credential") : undefined;
-  const enrolStatePath = enrolmentEnabled ? systemdPath(options.enrolStatePath, "enrolment state") : undefined;
+  const enrolStatePath = options.enrolStatePath ? systemdPath(options.enrolStatePath, "enrolment state") : undefined;
   const enrolStateDir = enrolStatePath?.replace(/\/[^/]+$/, "");
   const sourceBinPath = options.sourceBinPath ? systemdPath(options.sourceBinPath, "agent source binary") : undefined;
   const binPath = options.binPath ? systemdPath(options.binPath, "agent binary") : undefined;
@@ -14194,8 +14313,8 @@ function planProvision(options) {
   const gitPublicKeyDir = gitPublicKeyPath?.replace(/\/[^/]+$/, "");
   const lifecycleProfilePath = lifecycleEnabled ? systemdPath(options.lifecycleProfilePath, "lifecycle profile") : undefined;
   const lifecycleHelperSocketPath = lifecycleEnabled ? systemdPath(options.lifecycleHelperSocketPath ?? LIFECYCLE_HELPER_SOCKET, "lifecycle helper socket") : undefined;
-  const bootstrapSshCredentialPath = bootstrapEnabled ? systemdPath(options.bootstrapSshCredentialPath, "bootstrap SSH credential") : undefined;
-  const bootstrapSshPublicKeyPath = bootstrapEnabled ? systemdPath(options.bootstrapSshPublicKeyPath, "bootstrap SSH public key") : undefined;
+  const bootstrapSshCredentialPath = bootstrapIdentityEnabled ? systemdPath(options.bootstrapSshCredentialPath, "bootstrap SSH credential") : undefined;
+  const bootstrapSshPublicKeyPath = bootstrapIdentityEnabled ? systemdPath(options.bootstrapSshPublicKeyPath, "bootstrap SSH public key") : undefined;
   const bootstrapSshSourcePath = options.bootstrapSshSourcePath ? systemdPath(options.bootstrapSshSourcePath, "bootstrap SSH private-key source") : undefined;
   const bootstrapSshPublicKeyDir = bootstrapSshPublicKeyPath?.replace(/\/[^/]+$/, "");
   const warpClientIdCredentialPath = warpEnabled ? systemdPath(options.warpClientIdCredentialPath, "WARP client-id credential") : undefined;
@@ -14295,7 +14414,7 @@ function planProvision(options) {
         step2("Git deploy identity directory", { kind: "directories", directories: [{ path: gitPublicKeyDir, mode: 493, owner: "root", group: "root" }] }),
         step2("unique encrypted Git deploy identity", { kind: "ensure-git-identity", credential: gitCredentialPath, publicKey: gitPublicKeyPath })
       ] : [],
-      ...bootstrapEnabled ? [
+      ...bootstrapIdentityEnabled ? [
         step2("bootstrap SSH public identity directory", { kind: "directories", directories: [
           { path: bootstrapSshPublicKeyDir, mode: 493, owner: "root", group: "root" }
         ] }),
@@ -14331,6 +14450,10 @@ function planProvision(options) {
         { argv: ["/usr/bin/rm", "-f", "/etc/systemd/system/forgezero-deploy-runner.socket"] },
         { argv: ["/usr/bin/systemctl", "daemon-reload"] }
       ] })] : [],
+      ...enrolStatePath && !enrolmentEnabled ? [step2("retire consumed enrolment unit", { kind: "commands", commands: [
+        { argv: ["/usr/bin/systemctl", "disable", "--now", "forgezero-agent-enrol.service"], acceptedExitCodes: [0, 1, 5] },
+        { argv: ["/usr/bin/rm", "-f", ENROLMENT_UNIT_PATH] }
+      ] })] : [],
       step2("enable and converge services", { kind: "commands", commands: [
         { argv: ["/usr/bin/systemctl", "enable", ...enabledUnits] },
         { argv: ["/usr/bin/systemctl", "reset-failed", "forgezero-agent.service"], acceptedExitCodes: [0, 1] },
@@ -14357,19 +14480,19 @@ function planProvision(options) {
 }
 
 // src/cli/agent-install.ts
-import { randomBytes as randomBytes5 } from "crypto";
+import { randomBytes as randomBytes6 } from "crypto";
 import {
-  chmodSync as chmodSync15,
+  chmodSync as chmodSync16,
   copyFileSync as copyFileSync3,
-  existsSync as existsSync18,
-  lstatSync as lstatSync3,
-  mkdirSync as mkdirSync13,
-  readFileSync as readFileSync15,
+  existsSync as existsSync19,
+  lstatSync as lstatSync4,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync16,
   realpathSync as realpathSync6,
-  renameSync as renameSync10,
-  rmSync as rmSync9,
+  renameSync as renameSync11,
+  rmSync as rmSync10,
   symlinkSync as symlinkSync5,
-  writeFileSync as writeFileSync13
+  writeFileSync as writeFileSync14
 } from "fs";
 import { dirname as dirname9 } from "path";
 async function readCapabilities(run2) {
@@ -14430,52 +14553,52 @@ var runProvisionOperation = async (operation) => {
   }
   if (operation.kind === "install-runtime") {
     const release = `/opt/forgezero/agent/versions/${operation.version}`;
-    mkdirSync13(`${release}/dist`, { recursive: true, mode: 493 });
-    mkdirSync13(dirname9(operation.binary), { recursive: true, mode: 493 });
+    mkdirSync14(`${release}/dist`, { recursive: true, mode: 493 });
+    mkdirSync14(dirname9(operation.binary), { recursive: true, mode: 493 });
     copyFileSync3(operation.source, `${release}/dist/fz-agent.js`);
-    chmodSync15(`${release}/dist/fz-agent.js`, 493);
+    chmodSync16(`${release}/dist/fz-agent.js`, 493);
     const gitSshSource = `${dirname9(operation.source)}/fz-git-ssh.js`;
-    if (!existsSync18(gitSshSource))
+    if (!existsSync19(gitSshSource))
       return { stdout: "packaged fz-git-ssh.js is missing", exitCode: 1 };
     copyFileSync3(gitSshSource, `${release}/dist/fz-git-ssh.js`);
-    chmodSync15(`${release}/dist/fz-git-ssh.js`, 493);
+    chmodSync16(`${release}/dist/fz-git-ssh.js`, 493);
     const pending = "/opt/forgezero/agent/current.next";
-    rmSync9(pending, { force: true });
+    rmSync10(pending, { force: true });
     symlinkSync5(`versions/${operation.version}`, pending);
-    renameSync10(pending, "/opt/forgezero/agent/current");
-    rmSync9(operation.binary, { force: true });
+    renameSync11(pending, "/opt/forgezero/agent/current");
+    rmSync10(operation.binary, { force: true });
     symlinkSync5("/opt/forgezero/agent/current/dist/fz-agent.js", operation.binary);
     const gitSshBinary = "/usr/local/lib/forgezero/agent/fz-git-ssh";
-    rmSync9(gitSshBinary, { force: true });
+    rmSync10(gitSshBinary, { force: true });
     symlinkSync5("/opt/forgezero/agent/current/dist/fz-git-ssh.js", gitSshBinary);
     return { stdout: "", exitCode: 0 };
   }
   if (operation.kind === "ensure-seed") {
-    if (existsSync18(operation.credential) && lstatSync3(operation.credential).size > 0)
+    if (existsSync19(operation.credential) && lstatSync4(operation.credential).size > 0)
       return { stdout: "", exitCode: 0 };
-    const seed = randomBytes5(32).toString("base64url");
+    const seed = randomBytes6(32).toString("base64url");
     const result = await fixed(["/usr/bin/systemd-creds", "encrypt", "--name=agent-seed", "-", operation.credential], seed);
     if (result.exitCode === 0)
-      chmodSync15(operation.credential, 256);
+      chmodSync16(operation.credential, 256);
     return result;
   }
   if (operation.kind === "ensure-git-identity") {
     const key = "/run/forgezero-git-deploy-key";
     const publicKey = `${key}.pub`;
     try {
-      if (!existsSync18(operation.credential) || lstatSync3(operation.credential).size < 1) {
-        rmSync9(key, { force: true });
-        rmSync9(publicKey, { force: true });
+      if (!existsSync19(operation.credential) || lstatSync4(operation.credential).size < 1) {
+        rmSync10(key, { force: true });
+        rmSync10(publicKey, { force: true });
         let result = await fixed(["/usr/bin/ssh-keygen", "-q", "-t", "ed25519", "-N", "", "-C", "forgezero-compute", "-f", key]);
         if (result.exitCode !== 0)
           return result;
         result = await fixed(["/usr/bin/systemd-creds", "encrypt", "--name=git-deploy-key", key, operation.credential]);
         if (result.exitCode !== 0)
           return result;
-        chmodSync15(operation.credential, 256);
+        chmodSync16(operation.credential, 256);
       }
-      if (!existsSync18(operation.publicKey) || lstatSync3(operation.publicKey).size < 1) {
-        if (!existsSync18(key)) {
+      if (!existsSync19(operation.publicKey) || lstatSync4(operation.publicKey).size < 1) {
+        if (!existsSync19(key)) {
           const decrypted = await fixed(["/usr/bin/systemd-creds", "decrypt", "--name=git-deploy-key", operation.credential, key]);
           if (decrypted.exitCode !== 0)
             return decrypted;
@@ -14483,30 +14606,30 @@ var runProvisionOperation = async (operation) => {
         const derived = await fixed(["/usr/bin/ssh-keygen", "-y", "-f", key]);
         if (derived.exitCode !== 0)
           return derived;
-        writeFileSync13(operation.publicKey, `${derived.stdout.trim()} forgezero-compute
+        writeFileSync14(operation.publicKey, `${derived.stdout.trim()} forgezero-compute
 `, { mode: 292 });
       }
       return { stdout: "", exitCode: 0 };
     } finally {
-      rmSync9(key, { force: true });
-      rmSync9(publicKey, { force: true });
+      rmSync10(key, { force: true });
+      rmSync10(publicKey, { force: true });
     }
   }
   if (operation.kind === "ensure-bootstrap-ssh-identity") {
     const key = "/run/forgezero-bootstrap-ssh-key";
     const generatedPublicKey = `${key}.pub`;
     try {
-      if (!existsSync18(operation.credential) || lstatSync3(operation.credential).size < 1) {
-        rmSync9(key, { force: true });
-        rmSync9(generatedPublicKey, { force: true });
+      if (!existsSync19(operation.credential) || lstatSync4(operation.credential).size < 1) {
+        rmSync10(key, { force: true });
+        rmSync10(generatedPublicKey, { force: true });
         let result;
         if (operation.source) {
-          const source = existsSync18(operation.source) ? lstatSync3(operation.source) : undefined;
+          const source = existsSync19(operation.source) ? lstatSync4(operation.source) : undefined;
           if (!source?.isFile() || source.isSymbolicLink() || source.uid !== 0 || source.nlink !== 1 || (source.mode & 63) !== 0 || source.size < 32 || source.size > 16 * 1024) {
             return { stdout: "bootstrap SSH private-key source is missing or unsafe", exitCode: 1 };
           }
           copyFileSync3(operation.source, key);
-          chmodSync15(key, 384);
+          chmodSync16(key, 384);
         } else {
           result = await fixed(["/usr/bin/ssh-keygen", "-q", "-t", "ed25519", "-N", "", "-C", "forgezero-bootstrap-runner", "-f", key]);
           if (result.exitCode !== 0)
@@ -14519,48 +14642,48 @@ var runProvisionOperation = async (operation) => {
         result = await fixed(["/usr/bin/systemd-creds", "encrypt", "--name=bootstrap-ssh-key", key, operation.credential]);
         if (result.exitCode !== 0)
           return result;
-        chmodSync15(operation.credential, 256);
+        chmodSync16(operation.credential, 256);
       }
-      if (!existsSync18(operation.publicKey) || lstatSync3(operation.publicKey).size < 1) {
-        if (!existsSync18(key)) {
+      if (!existsSync19(operation.publicKey) || lstatSync4(operation.publicKey).size < 1) {
+        if (!existsSync19(key)) {
           const decrypted = await fixed(["/usr/bin/systemd-creds", "decrypt", "--name=bootstrap-ssh-key", operation.credential, key]);
           if (decrypted.exitCode !== 0)
             return decrypted;
-          chmodSync15(key, 384);
+          chmodSync16(key, 384);
         }
         const derived = await fixed(["/usr/bin/ssh-keygen", "-y", "-f", key]);
         if (derived.exitCode !== 0 || !/^ssh-ed25519 [A-Za-z0-9+/]+={0,3}\s*$/.test(derived.stdout)) {
           return { stdout: "bootstrap SSH public key derivation failed", exitCode: 1 };
         }
-        mkdirSync13(dirname9(operation.publicKey), { recursive: true, mode: 493 });
-        writeFileSync13(operation.publicKey, `${derived.stdout.trim()} forgezero-bootstrap-runner
+        mkdirSync14(dirname9(operation.publicKey), { recursive: true, mode: 493 });
+        writeFileSync14(operation.publicKey, `${derived.stdout.trim()} forgezero-bootstrap-runner
 `, { mode: 292 });
-        chmodSync15(operation.publicKey, 292);
+        chmodSync16(operation.publicKey, 292);
       }
       if (operation.source)
-        rmSync9(operation.source, { force: true });
+        rmSync10(operation.source, { force: true });
       return { stdout: "", exitCode: 0 };
     } finally {
-      rmSync9(key, { force: true });
-      rmSync9(generatedPublicKey, { force: true });
+      rmSync10(key, { force: true });
+      rmSync10(generatedPublicKey, { force: true });
     }
   }
   if (operation.kind === "ensure-enrolment") {
-    if (existsSync18(operation.state) && lstatSync3(operation.state).size > 0 || existsSync18(operation.credential) && lstatSync3(operation.credential).size > 0)
+    if (existsSync19(operation.state) && lstatSync4(operation.state).size > 0 || existsSync19(operation.credential) && lstatSync4(operation.credential).size > 0)
       return { stdout: "", exitCode: 0 };
-    if (!existsSync18(operation.source))
+    if (!existsSync19(operation.source))
       return { stdout: "enrolment source is missing", exitCode: 1 };
     const result = await fixed(["/usr/bin/systemd-creds", "encrypt", "--name=enrol-token", operation.source, operation.credential]);
     if (result.exitCode === 0) {
-      chmodSync15(operation.credential, 256);
-      rmSync9(operation.source, { force: true });
+      chmodSync16(operation.credential, 256);
+      rmSync10(operation.source, { force: true });
     }
     return result;
   }
   if (operation.kind === "wait-socket") {
     for (let attempt = 0;attempt < operation.attempts; attempt += 1) {
       try {
-        if (lstatSync3(operation.path).isSocket())
+        if (lstatSync4(operation.path).isSocket())
           return { stdout: "", exitCode: 0 };
       } catch {}
       await Bun.sleep(operation.intervalMs);
@@ -14568,7 +14691,7 @@ var runProvisionOperation = async (operation) => {
     return { stdout: `socket did not become ready: ${operation.path}`, exitCode: 1 };
   }
   if (operation.kind === "verify-file")
-    return existsSync18(operation.path) && lstatSync3(operation.path).size > 0 ? { stdout: "", exitCode: 0 } : { stdout: "required file is empty", exitCode: 1 };
+    return existsSync19(operation.path) && lstatSync4(operation.path).size > 0 ? { stdout: "", exitCode: 0 } : { stdout: "required file is empty", exitCode: 1 };
   if (operation.kind === "verify-egress") {
     const active = await fixed(["/usr/bin/systemctl", "is-active", "forgezero-agent-egress.service"]);
     if (active.exitCode !== 0)
@@ -14590,25 +14713,25 @@ var runProvisionOperation = async (operation) => {
     }
   }
   if (operation.kind === "install-warp") {
-    const os = readFileSync15("/etc/os-release", "utf8");
+    const os = readFileSync16("/etc/os-release", "utf8");
     if (!/^ID=ubuntu$/m.test(os) || !/^VERSION_ID="?26\.04"?$/m.test(os))
       return { stdout: "unsupported WARP host OS", exitCode: 1 };
     const response = await fetch("https://pkg.cloudflareclient.com/pubkey.gpg", { signal: AbortSignal.timeout(30000) });
     if (!response.ok)
       return { stdout: `WARP key HTTP ${response.status}`, exitCode: 1 };
-    mkdirSync13("/usr/share/keyrings", { recursive: true, mode: 493 });
-    mkdirSync13("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
-    mkdirSync13("/etc/systemd/system/warp-svc.service.d", { recursive: true, mode: 493 });
+    mkdirSync14("/usr/share/keyrings", { recursive: true, mode: 493 });
+    mkdirSync14("/etc/apt/sources.list.d", { recursive: true, mode: 493 });
+    mkdirSync14("/etc/systemd/system/warp-svc.service.d", { recursive: true, mode: 493 });
     const key = "/run/cloudflare-warp-key.gpg";
-    writeFileSync13(key, new Uint8Array(await response.arrayBuffer()), { mode: 384 });
+    writeFileSync14(key, new Uint8Array(await response.arrayBuffer()), { mode: 384 });
     let result = await fixed(["/usr/bin/gpg", "--batch", "--yes", "--dearmor", "-o", "/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg", key]);
-    rmSync9(key, { force: true });
+    rmSync10(key, { force: true });
     if (result.exitCode !== 0)
       return result;
     const codename = os.match(/^VERSION_CODENAME=(.+)$/m)?.[1]?.replace(/^"|"$/g, "");
     if (!codename)
       return { stdout: "Ubuntu codename missing", exitCode: 1 };
-    writeFileSync13("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ ${codename} main
+    writeFileSync14("/etc/apt/sources.list.d/cloudflare-client.list", `deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ ${codename} main
 `, { mode: 420 });
     result = await fixed(["/usr/bin/apt-get", "update", "-qq"]);
     return result.exitCode === 0 ? fixed(["/usr/bin/apt-get", "install", "-y", "cloudflare-warp"]) : result;
@@ -14623,7 +14746,7 @@ async function localRunner(operation) {
   if (capability.kind === "version")
     return fixed(capability.argv);
   try {
-    const metadata = lstatSync3(capability.path);
+    const metadata = lstatSync4(capability.path);
     const present = capability.nodeType === "directory" ? metadata.isDirectory() : true;
     return { stdout: present ? `yes
 ` : `no
@@ -14670,6 +14793,7 @@ var SEED_CREDENTIAL = `${CREDS}/seed-sync-root.cred`;
 var BACKUP_RECOVERY_CREDENTIAL = `${CREDS}/backup-recovery-root.cred`;
 var BOOTSTRAP_SSH_CREDENTIAL = `${CREDS}/bootstrap-ssh-key.cred`;
 var BOOTSTRAP_SSH_PUBLIC_KEY = "/etc/forgezero/bootstrap/runner.pub";
+var BOOTSTRAP_RELEASE_EVIDENCE = "/var/lib/forgezero/bootstrap-release.json";
 var LIFECYCLE_PROFILE = "/etc/forgezero/lifecycle.json";
 var CONTROL_SOCKET = "/run/forgezero/control.sock";
 var CLOUDFLARED_METRICS_ADDRESS = "127.0.0.1:20241";
@@ -14846,6 +14970,65 @@ async function bootstrapStatus(host = localBootstrapHost()) {
     problems.push("durable Agent enrolment state is missing");
   return { initialized: problems.length === 0, kind: state.kind, profile: state.profile, services, problems };
 }
+function planBootstrapAgentInstall(config, phase, context) {
+  const { capabilities, hasBinding, hasEnrolCredential, initialBundle } = context;
+  if (phase === "bootstrap") {
+    if (config.kind !== "platform" || hasBinding || !initialBundle) {
+      throw new Error("release-one Agent install requires an unbound platform host and verified bootstrap bundle");
+    }
+  } else if (phase === "enrol") {
+    if (hasBinding || !hasEnrolCredential) {
+      throw new Error("Agent enrolment requires one unbound host and its sealed one-use credential");
+    }
+  } else if (!hasBinding) {
+    throw new Error("bound Agent convergence requires durable enrolment state");
+  }
+  const bound = phase === "bound";
+  const enrolling = phase === "enrol";
+  const authenticated = enrolling || bound;
+  const bootstrapRunner = platformBootstrapRunner(config) || config.kind === "enrolled-compute" && Boolean(config.bootstrapRunner);
+  const options = {
+    capabilities,
+    socketPath: DEFAULT_SOCKET,
+    seedPath: "/var/lib/forgezero/node.seed",
+    controlSocketPath: CONTROL_SOCKET,
+    repository: phase === "bootstrap" ? initialBundle.path : bound && config.kind === "enrolled-compute" ? config.repository : undefined,
+    branch: phase === "bootstrap" ? initialBundle.manifest.branch : bound && config.kind === "enrolled-compute" ? config.branch : undefined,
+    bootstrapBundlePath: phase === "bootstrap" ? initialBundle.path : undefined,
+    bootstrapBundleManifestPath: phase === "bootstrap" ? initialBundle.manifestPath : undefined,
+    profile: config.profile,
+    deployRoot: config.deployRoot ?? "/opt/forgezero",
+    deploymentCredentials: config.deploymentCredentials,
+    publicApiUrl: config.apiUrl,
+    gitCredentialPath: authenticated && config.kind === "enrolled-compute" && config.gitDeployKey ? "/etc/forgezero/creds/git-deploy-key.cred" : undefined,
+    gitPublicKeyPath: authenticated && config.kind === "enrolled-compute" && config.gitDeployKey ? "/etc/forgezero/git/deploy.pub" : undefined,
+    generateGitIdentity: authenticated && config.kind === "enrolled-compute" && config.gitDeployKey === true,
+    pullDeployments: bound,
+    pullMigrations: bound && config.kind === "platform",
+    pullBootstrap: bound && bootstrapRunner,
+    bootstrapSshCredentialPath: authenticated && bootstrapRunner ? BOOTSTRAP_SSH_CREDENTIAL : undefined,
+    bootstrapSshSourcePath: enrolling && config.kind === "enrolled-compute" ? config.bootstrapRunner?.sshPrivateKeyFile : undefined,
+    bootstrapSshPublicKeyPath: authenticated && bootstrapRunner ? BOOTSTRAP_SSH_PUBLIC_KEY : undefined,
+    bootstrapTargetTelemetryEndpoint: bound && bootstrapRunner ? platformBootstrapRunner(config) ? config.telemetryEndpoint : config.kind === "enrolled-compute" ? config.bootstrapRunner?.targetTelemetryEndpoint : undefined : undefined,
+    lifecycleProfilePath: bound && config.kind === "platform" ? LIFECYCLE_PROFILE : undefined,
+    enforceEgress: true,
+    nodeHostname: config.nodeHostname,
+    telemetryEndpoint: config.telemetryEndpoint,
+    binPath: "/usr/local/lib/forgezero/agent/fz-agent",
+    sourceBinPath: PACKAGED_AGENT_BIN,
+    ...enrolling ? {
+      enrolTokenCredentialPath: ENROL_CREDENTIAL,
+      enrolStatePath: "/var/lib/forgezero/enrolment.json"
+    } : bound ? { enrolStatePath: "/var/lib/forgezero/enrolment.json" } : {},
+    ...authenticated ? {
+      apiUrl: config.apiUrl,
+      project: config.kind === "enrolled-compute" ? config.realm : "platform",
+      environment: config.kind === "enrolled-compute" ? undefined : config.environment,
+      nodeLabel: config.kind === "enrolled-compute" ? config.nodeHostname : config.computeReference
+    } : {}
+  };
+  return planInstall(options);
+}
 function localBootstrapHost() {
   const execute3 = async (argv2, options = {}) => {
     const child = Bun.spawn([...argv2], { stdin: options.stdin === undefined ? "ignore" : "pipe", stdout: "pipe", stderr: "pipe" });
@@ -14862,19 +15045,19 @@ function localBootstrapHost() {
   };
   return {
     uid: () => process.getuid?.() ?? -1,
-    exists: existsSync19,
-    read: (path2) => readFileSync16(path2, "utf8"),
+    exists: existsSync20,
+    read: (path2) => readFileSync17(path2, "utf8"),
     write(path2, content, mode) {
-      mkdirSync14(dirname10(path2), { recursive: true, mode: 493 });
+      mkdirSync15(dirname10(path2), { recursive: true, mode: 493 });
       const temporary = `${path2}.next.${process.pid}`;
-      writeFileSync14(temporary, content, { mode });
-      chmodSync16(temporary, mode);
-      renameSync11(temporary, path2);
+      writeFileSync15(temporary, content, { mode });
+      chmodSync17(temporary, mode);
+      renameSync12(temporary, path2);
     },
-    mkdir: (path2, mode) => mkdirSync14(path2, { recursive: true, mode }),
-    remove: (path2) => rmSync10(path2, { force: true }),
+    mkdir: (path2, mode) => mkdirSync15(path2, { recursive: true, mode }),
+    remove: (path2) => rmSync11(path2, { force: true }),
     inspect(path2) {
-      const value = lstatSync4(path2);
+      const value = lstatSync5(path2);
       return { regular: value.isFile(), symbolic: value.isSymbolicLink(), uid: value.uid, mode: value.mode, links: value.nlink, size: value.size };
     },
     exec: execute3,
@@ -14893,10 +15076,15 @@ function localBootstrapHost() {
         throw new Error(`Agent software requirements failed: ${result.output.trim()}`);
       return result;
     },
-    async installAgent(config) {
+    async installAgent(config, phase) {
       const capabilities = await readCapabilities(localRunner);
-      const deployRoot = config.deployRoot ?? "/opt/forgezero";
-      const hasBinding = config.kind === "enrolled-compute" || existsSync19(ENROL_CREDENTIAL) || existsSync19("/var/lib/forgezero/enrolment.json");
+      const hasBinding = existsSync20("/var/lib/forgezero/enrolment.json");
+      const hasEnrolCredential = existsSync20(ENROL_CREDENTIAL);
+      const initialBundle = config.kind === "platform" && !existsSync20(BOOTSTRAP_RELEASE_EVIDENCE) ? {
+        path: config.bootstrapBundle.bundleFile,
+        manifestPath: config.bootstrapBundle.manifestFile,
+        manifest: parseBootstrapBundleManifest(JSON.parse(readFileSync17(config.bootstrapBundle.manifestFile, "utf8")))
+      } : undefined;
       if (config.kind === "platform") {
         const lifecycle = config.database.role === "none" ? {
           apiUnits: ["forgezero@blue.service", "forgezero@green.service"],
@@ -14908,49 +15096,19 @@ function localBootstrapHost() {
           databaseHealthUrl: `http://${config.database.address}:8529/_api/version`,
           databasePorts: [8529]
         };
-        mkdirSync14(dirname10(LIFECYCLE_PROFILE), { recursive: true, mode: 493 });
-        writeFileSync14(LIFECYCLE_PROFILE, `${JSON.stringify(lifecycle, null, 2)}
+        mkdirSync15(dirname10(LIFECYCLE_PROFILE), { recursive: true, mode: 493 });
+        writeFileSync15(LIFECYCLE_PROFILE, `${JSON.stringify(lifecycle, null, 2)}
 `, { mode: 256 });
       }
-      const plan = planInstall({
+      const plan = planBootstrapAgentInstall(config, phase, {
         capabilities,
-        socketPath: DEFAULT_SOCKET,
-        seedPath: "/var/lib/forgezero/node.seed",
-        controlSocketPath: "/run/forgezero/control.sock",
-        repository: config.repository,
-        branch: config.branch,
-        profile: config.kind === "platform" ? config.profile : config.profile,
-        deployRoot,
-        deploymentCredentials: config.deploymentCredentials,
-        publicApiUrl: config.apiUrl,
-        gitCredentialPath: "/etc/forgezero/creds/git-deploy-key.cred",
-        gitPublicKeyPath: "/etc/forgezero/git/deploy.pub",
-        generateGitIdentity: true,
-        pullDeployments: hasBinding,
-        pullMigrations: config.kind === "platform" && hasBinding,
-        pullBootstrap: platformBootstrapRunner(config) || config.kind === "enrolled-compute" && Boolean(config.bootstrapRunner),
-        bootstrapSshCredentialPath: platformBootstrapRunner(config) || config.kind === "enrolled-compute" && config.bootstrapRunner ? BOOTSTRAP_SSH_CREDENTIAL : undefined,
-        bootstrapSshSourcePath: config.kind === "enrolled-compute" ? config.bootstrapRunner?.sshPrivateKeyFile : undefined,
-        bootstrapSshPublicKeyPath: platformBootstrapRunner(config) || config.kind === "enrolled-compute" && config.bootstrapRunner ? BOOTSTRAP_SSH_PUBLIC_KEY : undefined,
-        bootstrapTargetTelemetryEndpoint: platformBootstrapRunner(config) ? config.telemetryEndpoint : config.kind === "enrolled-compute" ? config.bootstrapRunner?.targetTelemetryEndpoint : undefined,
-        lifecycleProfilePath: config.kind === "platform" ? LIFECYCLE_PROFILE : undefined,
-        enforceEgress: true,
-        nodeHostname: config.nodeHostname,
-        telemetryEndpoint: config.telemetryEndpoint,
-        binPath: "/usr/local/lib/forgezero/agent/fz-agent",
-        sourceBinPath: PACKAGED_AGENT_BIN,
-        ...hasBinding ? {
-          enrolTokenCredentialPath: ENROL_CREDENTIAL,
-          enrolStatePath: "/var/lib/forgezero/enrolment.json",
-          apiUrl: config.apiUrl,
-          project: config.kind === "enrolled-compute" ? config.realm : "platform",
-          environment: config.kind === "enrolled-compute" ? undefined : config.environment,
-          nodeLabel: config.kind === "enrolled-compute" ? config.nodeHostname : config.computeReference
-        } : {}
+        hasBinding,
+        hasEnrolCredential,
+        initialBundle
       });
       for (const unit3 of [{ path: plan.unitPath, unit: plan.unit }, ...plan.auxiliaryUnits]) {
-        mkdirSync14(dirname10(unit3.path), { recursive: true, mode: 493 });
-        writeFileSync14(unit3.path, unit3.unit, { mode: 420 });
+        mkdirSync15(dirname10(unit3.path), { recursive: true, mode: 493 });
+        writeFileSync15(unit3.path, unit3.unit, { mode: 420 });
       }
       await applyPlan(plan, localRunner);
       return plan;
@@ -14964,7 +15122,7 @@ var localRuntime = () => ({
   bootstrapStatus: () => bootstrapStatus(),
   characterDevice(path2) {
     try {
-      return lstatSync5(path2).isCharacterDevice();
+      return lstatSync6(path2).isCharacterDevice();
     } catch {
       return false;
     }
@@ -15002,8 +15160,8 @@ async function verifyPlatformFleetHost(expectedVersion, runtime = localRuntime()
 }
 
 // src/community-rehearsal-host.ts
-import { createHash as createHash10 } from "crypto";
-import { lstatSync as lstatSync6, mkdirSync as mkdirSync15, readFileSync as readFileSync17, rmSync as rmSync11, symlinkSync as symlinkSync6, unlinkSync as unlinkSync12, writeFileSync as writeFileSync15 } from "fs";
+import { createHash as createHash11 } from "crypto";
+import { lstatSync as lstatSync7, mkdirSync as mkdirSync16, readFileSync as readFileSync18, rmSync as rmSync12, symlinkSync as symlinkSync6, unlinkSync as unlinkSync12, writeFileSync as writeFileSync16 } from "fs";
 import { dirname as dirname11 } from "path";
 var COMMUNITY_REHEARSAL_VERSION = "3.11.14";
 var COMMUNITY_REHEARSAL_ROOT = "/opt/forgezero-rehearsals/community-cluster-api";
@@ -15200,10 +15358,10 @@ async function exec(argv2, stdin) {
 async function applyOperations(operations) {
   for (const operation of operations) {
     if (operation.kind === "remove-tree")
-      rmSync11(operation.path, { recursive: true, force: true });
+      rmSync12(operation.path, { recursive: true, force: true });
     else if (operation.kind === "write") {
-      mkdirSync15(dirname11(operation.path), { recursive: true });
-      writeFileSync15(operation.path, operation.content, { mode: operation.mode });
+      mkdirSync16(dirname11(operation.path), { recursive: true });
+      writeFileSync16(operation.path, operation.content, { mode: operation.mode });
     } else if (operation.kind === "unlink") {
       try {
         unlinkSync12(operation.path);
@@ -15251,8 +15409,8 @@ async function runCommunityRehearsalHost(request) {
     return { ok: true, action: request.action, node: node.name };
   }
   if (request.action === "prepare") {
-    const metadata = lstatSync6(request.archivePath);
-    if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.size < 1 || metadata.size > 64 * 1024 * 1024 || createHash10("sha256").update(readFileSync17(request.archivePath)).digest("hex") !== request.archiveSha256) {
+    const metadata = lstatSync7(request.archivePath);
+    if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.size < 1 || metadata.size > 64 * 1024 * 1024 || createHash11("sha256").update(readFileSync18(request.archivePath)).digest("hex") !== request.archiveSha256) {
       throw new Error("community rehearsal archive is not the declared bounded release");
     }
     await ensureCommunityRehearsalArango();
@@ -15300,13 +15458,13 @@ async function runCommunityRehearsalHost(request) {
 }
 
 // src/supervised-app.ts
-import { lstatSync as lstatSync7, readFileSync as readFileSync18 } from "fs";
+import { lstatSync as lstatSync8, readFileSync as readFileSync19 } from "fs";
 function readConfig(path2) {
-  const stat = lstatSync7(path2);
+  const stat = lstatSync8(path2);
   if (!stat.isFile() || stat.isSymbolicLink() || stat.uid !== 0 || (stat.mode & 18) !== 0 || stat.size > 128 * 1024) {
     throw new Error("supervised app config is unsafe");
   }
-  const value = JSON.parse(readFileSync18(path2, "utf8"));
+  const value = JSON.parse(readFileSync19(path2, "utf8"));
   if (value.format !== 1 || typeof value.root !== "string" || !value.root.startsWith("/") || typeof value.release !== "string" || !value.release.startsWith(`${value.root}/releases/`) || typeof value.home !== "string" || value.home !== `${value.root}/app-home` || !Array.isArray(value.argv) || value.argv.length < 1 || value.argv.length > 256 || value.argv.some((argument) => typeof argument !== "string" || !argument || argument.includes("\x00")) || !value.environment || typeof value.environment !== "object" || Array.isArray(value.environment) || Object.entries(value.environment).some(([name, item]) => !/^FZ_(?:APP_PORT|RELEASE)$/.test(name) || typeof item !== "string" || /[\r\n\0]/.test(item))) {
     throw new Error("supervised app config is malformed");
   }
@@ -15352,17 +15510,17 @@ function agentCommandArgs(args, command2) {
   return args.slice(index + 1);
 }
 function loadOrCreateSeed(path2) {
-  if (existsSync20(path2)) {
-    const seed2 = new Uint8Array(Buffer.from(readFileSync19(path2, "utf8").trim(), "base64url"));
+  if (existsSync21(path2)) {
+    const seed2 = new Uint8Array(Buffer.from(readFileSync20(path2, "utf8").trim(), "base64url"));
     if (seed2.length < 32) {
       throw new Error(`agent: the seed at ${path2} is too short to derive a key from.`);
     }
     return seed2;
   }
-  mkdirSync16(dirname12(path2), { recursive: true });
-  const seed = new Uint8Array(randomBytes6(32));
-  writeFileSync16(path2, Buffer.from(seed).toString("base64url"), { mode: 384 });
-  chmodSync17(path2, 384);
+  mkdirSync17(dirname12(path2), { recursive: true });
+  const seed = new Uint8Array(randomBytes7(32));
+  writeFileSync17(path2, Buffer.from(seed).toString("base64url"), { mode: 384 });
+  chmodSync18(path2, 384);
   return seed;
 }
 var DEFAULT_SOCKET_PATH = DEFAULT_SOCKET;
@@ -15391,9 +15549,9 @@ function loadSeedCredential(name = DEFAULT_SEED_CREDENTIAL, directory = process.
   if (!directory)
     throw new Error("agent: CREDENTIALS_DIRECTORY is missing; systemd did not load the node identity.");
   const path2 = `${directory}/${name}`;
-  if (!existsSync20(path2))
+  if (!existsSync21(path2))
     throw new Error(`agent: the systemd credential ${name} is missing at ${path2}.`);
-  const seed = new Uint8Array(Buffer.from(readFileSync19(path2, "utf8").trim(), "base64url"));
+  const seed = new Uint8Array(Buffer.from(readFileSync20(path2, "utf8").trim(), "base64url"));
   if (seed.length < 32)
     throw new Error(`agent: the systemd credential ${name} is too short to derive a key from.`);
   return seed;
@@ -15403,7 +15561,7 @@ function loadTextCredential(name, directory = process.env.CREDENTIALS_DIRECTORY)
     throw new Error("agent: CREDENTIALS_DIRECTORY is missing; systemd did not load the credential.");
   if (!/^[A-Za-z0-9_.-]+$/.test(name))
     throw new Error("agent: invalid systemd credential name.");
-  const value = readFileSync19(`${directory}/${name}`, "utf8").trim();
+  const value = readFileSync20(`${directory}/${name}`, "utf8").trim();
   if (!value)
     throw new Error(`agent: systemd credential ${name} is empty.`);
   return value;
@@ -15528,7 +15686,7 @@ if (import.meta.main) {
     if (configPath !== "/etc/forgezero/deploy-activation.json" || !release) {
       throw new Error("platform-activate requires the fixed config and one absolute release path");
     }
-    const config = JSON.parse(readFileSync19(configPath, "utf8"));
+    const config = JSON.parse(readFileSync20(configPath, "utf8"));
     const result = await activatePlatformRelease(config, release);
     console.log(`promoted ${result.release} on ${result.slot}`);
     process.exit(0);
@@ -15553,13 +15711,13 @@ if (import.meta.main) {
     if (args.length !== 1)
       throw new Error("project-release-check accepts no coordinates");
     for (const relative of ["src/index.ts", "bun.lock", "src/generated/shared/contract-manifest.json"]) {
-      const stat = lstatSync8(join12(process.cwd(), relative));
+      const stat = lstatSync9(join12(process.cwd(), relative));
       if (!stat.isFile() || stat.isSymbolicLink() || stat.size < 1) {
         throw new Error(`project release is missing ${relative}`);
       }
     }
     for (const relative of ["package.json", "bun.lock"]) {
-      const contents = readFileSync19(join12(process.cwd(), relative), "utf8");
+      const contents = readFileSync20(join12(process.cwd(), relative), "utf8");
       if (/(?:workspace|file):/.test(contents)) {
         throw new Error(`project release ${relative} contains a local dependency`);
       }
@@ -15604,8 +15762,8 @@ if (import.meta.main) {
       keys: keys2,
       label: process.env.FZ_NODE_LABEL,
       edgeHostname: process.env.FZ_NODE_HOSTNAME,
-      gitDeployPublicKey: process.env.FZ_GIT_PUBLIC_KEY_FILE ? readFileSync19(process.env.FZ_GIT_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
-      bootstrapSshPublicKey: process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE ? readFileSync19(process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
+      gitDeployPublicKey: process.env.FZ_GIT_PUBLIC_KEY_FILE ? readFileSync20(process.env.FZ_GIT_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
+      bootstrapSshPublicKey: process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE ? readFileSync20(process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
       privateNetworkAttachment: privateNetworkAttachmentFromEnvironment()
     });
     console.log(`[agent] enrolled ${binding2.computeReference} in project ${binding2.projectKey}/${binding2.environmentKey}`);
@@ -15647,7 +15805,7 @@ if (import.meta.main) {
     const profilePath = args.find((arg) => arg.startsWith("--profile="))?.slice("--profile=".length);
     if (!profilePath)
       throw new Error("metal-helper requires --profile=/absolute/path.json");
-    const profile2 = JSON.parse(readFileSync19(profilePath, "utf8"));
+    const profile2 = JSON.parse(readFileSync20(profilePath, "utf8"));
     const helper = startMetalHelper({
       profile: profile2,
       socketPath: process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET
@@ -15797,7 +15955,7 @@ if (import.meta.main) {
     const profilePath = args.find((arg) => arg.startsWith("--profile="))?.slice("--profile=".length);
     if (!profilePath)
       throw new Error("metal-isolation requires --profile=/absolute/path.json");
-    const profile2 = JSON.parse(readFileSync19(profilePath, "utf8"));
+    const profile2 = JSON.parse(readFileSync20(profilePath, "utf8"));
     await applyMetalIsolation(profile2);
     console.log("[metal-isolation] host and guest cgroup boundaries active");
     process.exit(0);
@@ -15842,7 +16000,7 @@ if (import.meta.main) {
     if (claimArg !== "-" && !claimArg.startsWith("/")) {
       throw new Error("metal-apply claim path must be absolute");
     }
-    const raw = readFileSync19(claimArg === "-" ? "/dev/stdin" : claimArg, "utf8");
+    const raw = readFileSync20(claimArg === "-" ? "/dev/stdin" : claimArg, "utf8");
     if (Buffer.byteLength(raw) > 32 * 1024)
       throw new Error("metal-apply claim exceeds 32 KiB");
     const claim = JSON.parse(raw);
@@ -15867,7 +16025,7 @@ if (import.meta.main) {
     if (commandArgs.length !== 1 || commandArgs[0] !== "--request=-") {
       throw new Error("community-rehearsal requires exactly --request=-");
     }
-    const raw = readFileSync19("/dev/stdin", "utf8");
+    const raw = readFileSync20("/dev/stdin", "utf8");
     if (Buffer.byteLength(raw) > 128 * 1024)
       throw new Error("community rehearsal request exceeds 128 KiB");
     const request = parseCommunityRehearsalHostRequest(JSON.parse(raw));
@@ -15878,7 +16036,7 @@ if (import.meta.main) {
     if (args.length !== 1 || args[0] !== "--request=-") {
       throw new Error("metal-admission-proof requires exactly --request=-");
     }
-    const raw = readFileSync19("/dev/stdin", "utf8");
+    const raw = readFileSync20("/dev/stdin", "utf8");
     if (Buffer.byteLength(raw) > 32 * 1024)
       throw new Error("metal admission proof request exceeds 32 KiB");
     const request = JSON.parse(raw);
@@ -15896,9 +16054,9 @@ if (import.meta.main) {
         vcpu: cpus().length,
         memoryGib: Math.max(1, Math.floor(totalmem() / 1024 ** 3)),
         diskGib: Math.max(1, Math.floor(Number(filesystem.blocks) * Number(filesystem.bsize) / 1024 ** 3)),
-        kvm: existsSync20("/dev/kvm"),
-        snpHost: existsSync20("/dev/sev"),
-        helper: existsSync20(process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET)
+        kvm: existsSync21("/dev/kvm"),
+        snpHost: existsSync21("/dev/sev"),
+        helper: existsSync21(process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET)
       }
     };
     const envelope = signRequest(keys2, keys2.ed25519.publicKey, {
@@ -15933,9 +16091,9 @@ if (import.meta.main) {
       metalHostname: process.env.FZ_METAL_HOSTNAME,
       run: (claim) => requestMetalProvision(claim, process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET),
       metalPreflight: () => ({
-        snpHost: existsSync20("/dev/sev"),
-        kvm: existsSync20("/dev/kvm"),
-        helper: existsSync20(process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET)
+        snpHost: existsSync21("/dev/sev"),
+        kvm: existsSync21("/dev/kvm"),
+        helper: existsSync21(process.env.FZ_METAL_HELPER_SOCKET ?? DEFAULT_METAL_HELPER_SOCKET)
       }),
       onEvent: (event, detail) => console.log(`[metal-agent] ${event}${detail ? ` ${JSON.stringify(detail)}` : ""}`)
     });
@@ -16018,7 +16176,7 @@ if (import.meta.main) {
   const telemetry = new AgentTelemetryRuntime(createAgentTelemetry(resolveAgentTelemetryConfig()));
   telemetry.event("agent.started");
   telemetry.setDraining(false);
-  const attestationSource = existsSync20("/dev/sev-guest") ? createSnpAttestationSource() : undefined;
+  const attestationSource = existsSync21("/dev/sev-guest") ? createSnpAttestationSource() : undefined;
   const running = runAgent({
     socketPath: process.env.FZ_SOCKET_PATH ?? DEFAULT_SOCKET_PATH,
     seedCredential: process.env.FZ_SEED_CREDENTIAL,
@@ -16033,8 +16191,8 @@ if (import.meta.main) {
   const enrolmentStatePath = process.env.FZ_ENROL_STATE_FILE ?? DEFAULT_ENROLMENT_STATE_PATH;
   let binding = loadGuestBinding(enrolmentStatePath, nodeKey);
   const enrolmentCredential = process.env.FZ_ENROL_TOKEN_CREDENTIAL;
-  const enrolmentCredentialAvailable = Boolean(enrolmentCredential && process.env.CREDENTIALS_DIRECTORY && existsSync20(`${process.env.CREDENTIALS_DIRECTORY}/${enrolmentCredential}`));
-  const legacyEnrolmentFileAvailable = Boolean(process.env.FZ_ENROL_TOKEN_FILE && existsSync20(process.env.FZ_ENROL_TOKEN_FILE));
+  const enrolmentCredentialAvailable = Boolean(enrolmentCredential && process.env.CREDENTIALS_DIRECTORY && existsSync21(`${process.env.CREDENTIALS_DIRECTORY}/${enrolmentCredential}`));
+  const legacyEnrolmentFileAvailable = Boolean(process.env.FZ_ENROL_TOKEN_FILE && existsSync21(process.env.FZ_ENROL_TOKEN_FILE));
   if (!binding && (enrolmentCredentialAvailable || legacyEnrolmentFileAvailable) && process.env.FZ_API) {
     binding = await enrolGuestIdentity({
       apiUrl: process.env.FZ_API,
@@ -16045,8 +16203,8 @@ if (import.meta.main) {
       keys,
       label: process.env.FZ_NODE_LABEL,
       edgeHostname: process.env.FZ_NODE_HOSTNAME,
-      gitDeployPublicKey: process.env.FZ_GIT_PUBLIC_KEY_FILE ? readFileSync19(process.env.FZ_GIT_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
-      bootstrapSshPublicKey: process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE ? readFileSync19(process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
+      gitDeployPublicKey: process.env.FZ_GIT_PUBLIC_KEY_FILE ? readFileSync20(process.env.FZ_GIT_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
+      bootstrapSshPublicKey: process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE ? readFileSync20(process.env.FZ_BOOTSTRAP_SSH_PUBLIC_KEY_FILE, "utf8").trim() : undefined,
       privateNetworkAttachment: privateNetworkAttachmentFromEnvironment()
     });
     console.log(`[agent] enrolled ${binding.computeReference} in project ${binding.projectKey}/${binding.environmentKey}`);
@@ -16112,7 +16270,7 @@ if (import.meta.main) {
   const bootstrapEnabled = process.env.FZ_BOOTSTRAP_PULL === "true";
   const bootstrapCredential = process.env.FZ_BOOTSTRAP_SSH_KEY_CREDENTIAL;
   const bootstrapKeyPath = bootstrapCredential && process.env.CREDENTIALS_DIRECTORY ? `${process.env.CREDENTIALS_DIRECTORY}/${bootstrapCredential}` : undefined;
-  if (bootstrapEnabled && (!binding || !nodeApiUrl || !process.env.FZ_API || !bootstrapKeyPath || !existsSync20(bootstrapKeyPath) || !process.env.FZ_BOOTSTRAP_TARGET_OTLP_ENDPOINT)) {
+  if (bootstrapEnabled && (!binding || !nodeApiUrl || !process.env.FZ_API || !bootstrapKeyPath || !existsSync21(bootstrapKeyPath) || !process.env.FZ_BOOTSTRAP_TARGET_OTLP_ENDPOINT)) {
     throw new Error("agent: bootstrap runner requires enrolment, API, local SSH credential and target OTLP coordinate");
   }
   const bootstrapPull = bootstrapEnabled ? startSshBootstrapPull({
@@ -16149,12 +16307,21 @@ if (import.meta.main) {
   const repository = process.env.FZ_DEPLOY_REPO;
   const branch = process.env.FZ_DEPLOY_BRANCH;
   const profile = process.env.FZ_DEPLOY_PROFILE;
+  const bootstrapBundlePath = process.env.FZ_BOOTSTRAP_BUNDLE;
+  const bootstrapBundleManifestPath = process.env.FZ_BOOTSTRAP_BUNDLE_MANIFEST;
+  if (Boolean(bootstrapBundlePath) !== Boolean(bootstrapBundleManifestPath)) {
+    throw new Error("agent: bootstrap bundle and manifest coordinates must be supplied together");
+  }
+  const bootstrapBundle = bootstrapBundlePath && bootstrapBundleManifestPath ? {
+    path: bootstrapBundlePath,
+    manifest: parseBootstrapBundleManifest(JSON.parse(readFileSync20(bootstrapBundleManifestPath, "utf8")))
+  } : undefined;
   const root = process.env.FZ_DEPLOY_ROOT;
   const pullEnabled = process.env.FZ_DEPLOY_PULL === "true" && Boolean(process.env.FZ_API);
   if (pullEnabled && !binding) {
     throw new Error("agent: outbound guest deployment requires a persisted tenant enrolment binding");
   }
-  if (root && (repository && branch && profile || pullEnabled)) {
+  if (root && (repository && branch && profile || bootstrapBundle && branch && profile || pullEnabled)) {
     const managers = new Map;
     const managerOptions = (source, key) => ({
       key,
@@ -16181,7 +16348,10 @@ if (import.meta.main) {
       activateContainer: (request) => requestContainerActivation(request, process.env.FZ_SOFTWARE_HELPER_SOCKET ?? DEFAULT_SOFTWARE_HELPER_SOCKET),
       projectExec: process.env.FZ_DEPLOY_RUNNER_SOCKET ? (input) => requestDeploymentCommand(input, process.env.FZ_DEPLOY_RUNNER_SOCKET) : undefined
     });
-    const staticManager = repository && branch && profile ? createDeploymentManager(managerOptions({ repository, branch, profile }, process.env.FZ_DEPLOY_KEY ?? `${repository}:${branch}:${profile}`)) : undefined;
+    const staticManager = repository && branch && profile ? createDeploymentManager(managerOptions({ repository, branch, profile }, process.env.FZ_DEPLOY_KEY ?? `${repository}:${branch}:${profile}`)) : bootstrapBundle && branch && profile ? createDeploymentManager({
+      ...managerOptions({ repository: bootstrapBundle.path, branch, profile }, process.env.FZ_DEPLOY_KEY ?? `bootstrap:${bootstrapBundle.manifest.sha256}:${profile}`),
+      bootstrapBundle
+    }) : undefined;
     if (staticManager)
       managers.set("__static__", staticManager);
     const control = staticManager ? startControlServer(staticManager, process.env.FZ_CONTROL_SOCKET ?? DEFAULT_CONTROL_SOCKET) : undefined;
@@ -16196,6 +16366,9 @@ if (import.meta.main) {
       canClaim: () => deploymentIntake?.state === "running",
       manager: staticManager,
       managerFor: staticManager ? undefined : (claim) => {
+        if (claim.source.auth?.kind === "ephemeral-token") {
+          return createDeploymentManager(managerOptions(claim.source, claim.pipelineKey));
+        }
         const cacheKey = [
           claim.pipelineKey,
           claim.source.repository,