@forgezero/agent 0.1.62 → 0.1.64

package/dist/metal-bootstrap.js

@@ -292,7 +292,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.62";
+var VERSION = "0.1.64";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/metal-helper-socket.js

@@ -380,8 +380,6 @@ function guestBootstrapOperations(profile, attested = Boolean(profile.confidenti
       "FZ_AGENT_USER=forgezero-agent",
       "FZ_SOCKET_PATH=/run/forgezero/vault.sock",
       "FZ_SEED_CREDENTIAL_PATH=/etc/forgezero/creds/agent-seed.cred",
-      "FZ_GIT_CREDENTIAL_PATH=/etc/forgezero/creds/git-deploy-key.cred",
-      "FZ_GIT_PUBLIC_KEY_PATH=/etc/forgezero/git/deploy.pub",
       "FZ_DEPLOY_ROOT=/opt/forgezero",
       `FZ_DEPLOY_PULL=${hasEnrolment}`,
       `FZ_AGENT_EGRESS_ENFORCE=${hasEnrolment}`,

package/dist/metal-provision.js

@@ -380,8 +380,6 @@ function guestBootstrapOperations(profile, attested = Boolean(profile.confidenti
       "FZ_AGENT_USER=forgezero-agent",
       "FZ_SOCKET_PATH=/run/forgezero/vault.sock",
       "FZ_SEED_CREDENTIAL_PATH=/etc/forgezero/creds/agent-seed.cred",
-      "FZ_GIT_CREDENTIAL_PATH=/etc/forgezero/creds/git-deploy-key.cred",
-      "FZ_GIT_PUBLIC_KEY_PATH=/etc/forgezero/git/deploy.pub",
       "FZ_DEPLOY_ROOT=/opt/forgezero",
       `FZ_DEPLOY_PULL=${hasEnrolment}`,
       `FZ_AGENT_EGRESS_ENFORCE=${hasEnrolment}`,

package/dist/operator-bootstrap.d.ts

@@ -25,7 +25,35 @@ export interface OperatorMetalBootstrapRequest {
         sshPublicKeyFiles: string[];
     };
 }
-export type OperatorPlatformBootstrapMode = 'prepare' | 'apply' | 'status';
+export interface OperatorPlatformBootstrapFleetRequest {
+    kind: 'platform-fleet-remote';
+    requests: readonly [string, string, string];
+}
+export interface OperatorPlatformBootstrapFleetPlan {
+    kind: 'platform-fleet-remote';
+    mode: OperatorPlatformBootstrapMode;
+    mutation: boolean;
+    environment: PlatformGenesisEnvironment;
+    nodes: readonly {
+        computeReference: string;
+        address: string;
+        via?: string;
+    }[];
+    secretInputs: readonly string[];
+}
+export interface OperatorPlatformBootstrapFleetOutcome {
+    computeReference: string;
+    address: string;
+    ok: boolean;
+    output?: string;
+    error?: string;
+}
+export interface OperatorPlatformBootstrapFleetResult {
+    plan: OperatorPlatformBootstrapFleetPlan;
+    ok: boolean;
+    outcomes: readonly OperatorPlatformBootstrapFleetOutcome[];
+}
+export type OperatorPlatformBootstrapMode = 'apply' | 'status';
 export type OperatorMetalBootstrapMode = 'apply' | 'genesis' | 'rehearsal' | 'rehearsal-cleanup' | 'status';
 export interface OperatorPlatformBootstrapPlan {
     kind: 'platform-remote';
@@ -68,10 +96,16 @@ export interface OperatorPlatformBootstrapOptions {
     fzAgentPath?: string;
     fzGitSshPath?: string;
 }
+export declare function createOperatorSshHop(input: Omit<OperatorSshHop, 'hostKeySha256'>): OperatorSshHop;
 export declare function readOperatorPlatformBootstrapRequest(path: string): OperatorPlatformBootstrapRequest;
+export declare function writeOperatorPlatformBootstrapRequest(path: string, request: OperatorPlatformBootstrapRequest): string;
+export declare function readOperatorPlatformBootstrapFleetRequest(path: string): OperatorPlatformBootstrapFleetRequest;
+export declare function writeOperatorPlatformBootstrapFleetRequest(path: string, requestFiles: readonly [string, string, string]): string;
 export declare function readOperatorMetalBootstrapRequest(path: string): OperatorMetalBootstrapRequest;
+export declare function writeOperatorMetalBootstrapRequest(path: string, request: OperatorMetalBootstrapRequest): string;
 export declare function planOperatorMetalBootstrap(request: OperatorMetalBootstrapRequest, mode: OperatorMetalBootstrapMode): OperatorMetalBootstrapPlan;
 export declare function planOperatorPlatformBootstrap(request: OperatorPlatformBootstrapRequest, mode: OperatorPlatformBootstrapMode): OperatorPlatformBootstrapPlan;
+export declare function planOperatorPlatformFleetBootstrap(fleet: OperatorPlatformBootstrapFleetRequest, mode: OperatorPlatformBootstrapMode): OperatorPlatformBootstrapFleetPlan;
 /**
  * Run one reviewed operator action. No private SSH key, credential value or
  * management token is placed in argv; OpenSSH selects the matching private key
@@ -83,6 +117,14 @@ export declare function applyOperatorPlatformBootstrap(request: OperatorPlatform
     plan: OperatorPlatformBootstrapPlan;
     output: string;
 }>;
+/**
+ * Run the exact three-node genesis fleet from one attended secret collection.
+ * Every request is fully validated before the first SSH connection. Nodes run
+ * concurrently because the three-member Agency cannot form sequentially.
+ */
+export declare function applyOperatorPlatformFleetBootstrap(fleet: OperatorPlatformBootstrapFleetRequest, mode: OperatorPlatformBootstrapMode, options?: OperatorPlatformBootstrapOptions & {
+    secrets?: PlatformBootstrapSecrets;
+}): Promise<OperatorPlatformBootstrapFleetResult>;
 /**
  * Install/bootstrap one blank metal host or provision its exact three-node
  * platform seed through the same pinned SSH transport used for guest bootstrap.