@forgezero/agent 0.1.65 → 0.1.67

package/dist/operator-bootstrap.js

@@ -1251,7 +1251,7 @@ async function sha256File(path) {
   });
   return hash.digest("hex");
 }
-var branchName = (value) => {
+var bootstrapBundleBranch = (value) => {
   if (typeof value !== "string" || !/^[A-Za-z0-9](?:[A-Za-z0-9._/-]{0,126}[A-Za-z0-9])?$/.test(value) || value.includes("..") || value.includes("//") || value.startsWith("-")) {
     throw new Error("bootstrap bundle branch is malformed");
   }
@@ -1268,7 +1268,7 @@ function parseBootstrapBundleManifest(value) {
   if (source.format !== BOOTSTRAP_BUNDLE_FORMAT || source.kind !== BOOTSTRAP_BUNDLE_KIND) {
     throw new Error("bootstrap bundle manifest format is unsupported");
   }
-  branchName(source.branch);
+  bootstrapBundleBranch(source.branch);
   if (typeof source.revision !== "string" || !/^[a-f0-9]{40}$/.test(source.revision)) {
     throw new Error("bootstrap bundle revision must be an exact lowercase Git commit");
   }
@@ -1313,7 +1313,7 @@ async function buildBootstrapBundle(input, exec = run) {
   const repositoryRoot = resolve2(input.repositoryRoot);
   const outputPath = resolve2(input.outputPath);
   const manifestPath = `${outputPath}.json`;
-  const branch = branchName(input.branch);
+  const branch = bootstrapBundleBranch(input.branch);
   if (!isAbsolute(input.outputPath) || outputPath !== input.outputPath) {
     throw new Error("bootstrap bundle output must be a canonical absolute path");
   }
@@ -1396,11 +1396,37 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.65";
+var VERSION = "0.1.67";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
 var BUN_RELEASE_SHA256 = "951ee2aee855f08595aeec6225226a298d3fea83a3dcd6465c09cbccdf7e848f";
+var OS_CATALOG = [
+  {
+    id: "ubuntu",
+    version: "26.04",
+    architecture: "x64",
+    status: "active",
+    imageKey: "ubuntu-resolute-20260731",
+    imageLabel: "Ubuntu 26.04 LTS Resolute",
+    imageVersion: "2026-07-31",
+    imageUrl: "https://cloud-images.ubuntu.com/releases/resolute/release-20260731/ubuntu-26.04-server-cloudimg-amd64.img",
+    imageSha256: "9dc7c5363c0146a08ba0c9aa834d82c2c6dfbb1c471ad9a2f0aba1189e21be05",
+    confidentialModes: ["sev-snp"]
+  },
+  {
+    id: "ubuntu",
+    version: "24.04",
+    architecture: "x64",
+    status: "active",
+    imageKey: "ubuntu-noble-20260705",
+    imageLabel: "Ubuntu 24.04 LTS Noble",
+    imageVersion: "2026-07-05",
+    imageUrl: "https://cloud-images.ubuntu.com/releases/noble/release-20260705/ubuntu-24.04-server-cloudimg-amd64.img",
+    imageSha256: "ffe6203da54deeb6db5d2a98a83f9ec8e55f149d3f7ba622e1abe5fa966ee3d6",
+    confidentialModes: []
+  }
+];
 var DOCKER_DAEMON_CONFIG = `${JSON.stringify({
   "data-root": "/var/lib/docker",
   "storage-driver": "overlay2",
@@ -2786,6 +2812,143 @@ async function applyPlan(plan, run2) {
   return transcript;
 }
 
+// src/ubuntu.ts
+var current = OS_CATALOG[0];
+var SUPPORTED_GUEST_IMAGE = Object.freeze({
+  key: current.imageKey,
+  family: `${current.id}-${current.version}`,
+  version: current.imageVersion,
+  label: current.imageLabel,
+  url: current.imageUrl,
+  sha256: current.imageSha256
+});
+var SUPPORTED_GUEST_IMAGES = Object.freeze(OS_CATALOG.filter(({ status }) => status === "active").map(({ id, imageKey, imageLabel, imageVersion, version, confidentialModes }) => ({
+  key: imageKey,
+  label: imageLabel,
+  family: `${id}-${version}`,
+  version: imageVersion,
+  confidential: confidentialModes.some((mode) => mode === "sev-snp")
+})));
+function assertSupportedGuestImage(imageKey, confidential = false) {
+  const selected = OS_CATALOG.find((entry) => entry.status === "active" && entry.imageKey === imageKey);
+  if (!selected) {
+    throw new Error(`unsupported guest image ${imageKey}; supported images: ${SUPPORTED_GUEST_IMAGES.map(({ key }) => key).join(", ")}`);
+  }
+  if (confidential && !selected.confidentialModes.some((mode) => mode === "sev-snp")) {
+    throw new Error(`guest image ${imageKey} is not approved for SEV-SNP`);
+  }
+}
+
+// src/platform-genesis.ts
+var SAFE_NAME = /^[a-z][a-z0-9-]{0,62}$/;
+var SAFE_POOL = /^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/;
+var PRIVATE_V4 = /^(?:10\.(?:\d{1,3}\.){2}\d{1,3}|192\.168\.(?:\d{1,3})\.(?:\d{1,3})|172\.(?:1[6-9]|2\d|3[01])\.(?:\d{1,3})\.(?:\d{1,3}))$/;
+var integer = (value, minimum, maximum, label) => {
+  if (!Number.isInteger(value) || value < minimum || value > maximum) {
+    throw new Error(`platform genesis ${label} is outside the supported range`);
+  }
+  return value;
+};
+function validatePlatformGenesisGuests(guests, expectedCount = 3) {
+  if (!Array.isArray(guests) || guests.length !== expectedCount) {
+    throw new Error(`platform genesis requires exactly ${expectedCount} reviewed guest requests`);
+  }
+  const names = new Set;
+  const addresses = new Set;
+  const pools = new Set;
+  return guests.map((input) => {
+    if (!input || typeof input !== "object" || !SAFE_NAME.test(input.name)) {
+      throw new Error("platform genesis guest name is malformed");
+    }
+    if (!PRIVATE_V4.test(input.address))
+      throw new Error("platform genesis guest address must be private IPv4");
+    if (typeof input.confidential !== "boolean")
+      throw new Error("platform genesis confidential requirement is missing");
+    assertSupportedGuestImage(input.imageKey, input.confidential);
+    if (input.cpuPoolKey !== undefined && !SAFE_POOL.test(input.cpuPoolKey)) {
+      throw new Error("platform genesis CPU pool key is malformed");
+    }
+    if (names.has(input.name) || addresses.has(input.address) || input.cpuPoolKey !== undefined && pools.has(input.cpuPoolKey)) {
+      throw new Error("platform genesis guest names, addresses and explicit CPU pools must be unique");
+    }
+    names.add(input.name);
+    addresses.add(input.address);
+    if (input.cpuPoolKey !== undefined)
+      pools.add(input.cpuPoolKey);
+    const physicalCores = integer(input.physicalCores, 1, 256, "physical core count");
+    const vcpu = integer(input.vcpu, 1, 512, "vCPU count");
+    if (vcpu < physicalCores)
+      throw new Error("platform genesis vCPU count cannot be smaller than physical cores");
+    const memoryGib = integer(input.memoryGib, 1, 8192, "memory");
+    const diskGib = integer(input.diskGib, 8, 65536, "disk");
+    const egressGuaranteedMbps = integer(input.egressGuaranteedMbps, 0, 1e6, "guaranteed egress");
+    const egressBurstMbps = integer(input.egressBurstMbps, egressGuaranteedMbps, 1e6, "burst egress");
+    return {
+      name: input.name,
+      address: input.address,
+      imageKey: input.imageKey,
+      ...input.cpuPoolKey ? { cpuPoolKey: input.cpuPoolKey } : {},
+      physicalCores,
+      vcpu,
+      memoryGib,
+      diskGib,
+      egressGuaranteedMbps,
+      egressBurstMbps,
+      confidential: input.confidential
+    };
+  });
+}
+var publicKey = (value) => {
+  const normalized = value.trim();
+  if (!/^ssh-(?:ed25519|rsa) [A-Za-z0-9+/]+={0,3}(?: [^\r\n]+)?$/.test(normalized)) {
+    throw new Error("platform genesis SSH public key is malformed");
+  }
+  return normalized;
+};
+var claimFor = (guest, keys, action) => {
+  const common = {
+    computeKey: `platform:${guest.name}`,
+    claimToken: "offline-platform-genesis",
+    claimExpiresAtTs: Number.MAX_SAFE_INTEGER,
+    attempt: 1,
+    bootstrap: { kind: "platform-genesis" },
+    spec: {
+      reference: `platform:${guest.name}`,
+      imageKey: guest.imageKey,
+      guestName: guest.name,
+      guestAddress: guest.address,
+      ...guest.cpuPoolKey ? { cpuPoolKey: guest.cpuPoolKey } : {},
+      physicalCores: guest.physicalCores,
+      vcpu: guest.vcpu,
+      memoryGib: guest.memoryGib,
+      diskGib: guest.diskGib,
+      egressGuaranteedMbps: guest.egressGuaranteedMbps,
+      egressBurstMbps: guest.egressBurstMbps,
+      confidential: guest.confidential
+    }
+  };
+  if (action === "delete")
+    return { ...common, action: "delete" };
+  return { ...common, action: "create", access: { sshUser: "forgezero", sshPublicKeys: [...keys] } };
+};
+function platformGenesisClaims(guests, sshPublicKeys) {
+  const reviewed = validatePlatformGenesisGuests(guests);
+  const keys = [...new Set(sshPublicKeys.map(publicKey))];
+  if (keys.length === 0)
+    throw new Error("platform genesis requires at least one operator SSH public key");
+  return reviewed.map((guest) => claimFor(guest, keys, "create"));
+}
+function platformCommunityRehearsalClaims(seedGuests, rehearsalGuest, sshPublicKeys) {
+  const reviewed = validatePlatformGenesisGuests([...seedGuests, rehearsalGuest], 4);
+  const keys = [...new Set(sshPublicKeys.map(publicKey))];
+  if (keys.length === 0)
+    throw new Error("platform genesis requires at least one operator SSH public key");
+  return reviewed.map((guest) => claimFor(guest, keys, "create"));
+}
+function platformCommunityRehearsalDeletionClaims(seedGuests, rehearsalGuest) {
+  return validatePlatformGenesisGuests([...seedGuests, rehearsalGuest], 4).map((guest) => claimFor(guest, [], "delete"));
+}
+
 // src/platform-bootstrap-runtime.ts
 var safeAtom = (name, value) => {
   if (!value || /[\0\r\n]/.test(value))
@@ -2817,6 +2980,50 @@ var httpsOrigin = (name, raw) => {
   }
   return value.origin;
 };
+function validatePlatformInitialInventory(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => !["metalHostname", "region", "computes"].includes(key)) || !/^[A-Za-z0-9][A-Za-z0-9.-]{1,252}$/.test(value.metalHostname) || !value.region || typeof value.region !== "object" || Array.isArray(value.region) || Object.keys(value.region).some((key) => !["key", "label", "country", "city", "confidentialCapable"].includes(key)) || !/^[a-z0-9][a-z0-9-]{0,62}$/.test(value.region.key) || !/^[A-Z]{2}$/.test(value.region.country) || value.region.confidentialCapable !== true || !Array.isArray(value.computes)) {
+    throw new Error("initial platform inventory coordinates are invalid");
+  }
+  safeAtom("initialInventory.region.label", value.region.label);
+  if (value.region.city !== undefined)
+    safeAtom("initialInventory.region.city", value.region.city);
+  const computes = validatePlatformGenesisGuests(value.computes.map((compute) => {
+    if (!compute || typeof compute !== "object" || Array.isArray(compute) || Object.keys(compute).some((key) => ![
+      "name",
+      "address",
+      "imageKey",
+      "cpuPoolKey",
+      "physicalCores",
+      "vcpu",
+      "memoryGib",
+      "diskGib",
+      "egressGuaranteedMbps",
+      "egressBurstMbps",
+      "confidential",
+      "databaseRole",
+      "databaseAgency"
+    ].includes(key)))
+      throw new Error("initial platform compute contains unknown fields");
+    return compute;
+  }));
+  for (let index = 0;index < computes.length; index += 1) {
+    const declared = value.computes[index];
+    const expectedRole = index === 0 ? "master" : "joiner";
+    if (declared.databaseRole !== expectedRole || declared.databaseAgency !== "member" || declared.confidential !== true) {
+      throw new Error("initial platform inventory requires one master, two joiners, three Agency members and confidential compute");
+    }
+  }
+  return {
+    metalHostname: value.metalHostname,
+    region: { ...value.region },
+    computes: value.computes.map((compute, index) => ({
+      ...computes[index],
+      databaseRole: compute.databaseRole,
+      databaseAgency: compute.databaseAgency,
+      confidential: true
+    }))
+  };
+}
 var systemdValue = (name, raw) => {
   if (/[\0\r\n]/.test(raw))
     throw new Error(`${name} must be single-line.`);
@@ -2902,12 +3109,14 @@ function validatePlatformSharedEnvironment(input) {
       throw new Error("realtime.producer is invalid.");
     }
   }
+  const initialInventory = input.initialInventory ? validatePlatformInitialInventory(input.initialInventory) : undefined;
   return {
     ...input,
     databaseCoordinators: coordinators,
     appOrigin: httpsOrigin("appOrigin", input.appOrigin),
     apiOrigin: httpsOrigin("apiOrigin", input.apiOrigin),
-    agentOtlpEndpoint: httpsOrigin("agentOtlpEndpoint", input.agentOtlpEndpoint)
+    agentOtlpEndpoint: httpsOrigin("agentOtlpEndpoint", input.agentOtlpEndpoint),
+    ...initialInventory ? { initialInventory } : {}
   };
 }
 function renderPlatformSharedEnvironment(input) {
@@ -2970,7 +3179,8 @@ function renderPlatformSharedEnvironment(input) {
     FZ_CF_TUNNEL_SERVICE: value.cloudflare?.tunnelService ?? "",
     FZ_REALTIME_WORKER_SCRIPT: value.realtime?.workerScriptName ?? "",
     FZ_REALTIME_ENDPOINT: value.realtime?.endpoint ?? "",
-    FZ_REALTIME_PRODUCER: value.realtime?.producer ?? ""
+    FZ_REALTIME_PRODUCER: value.realtime?.producer ?? "",
+    FZ_PLATFORM_INITIAL_INVENTORY: value.initialInventory ? JSON.stringify(value.initialInventory) : ""
   };
   return `# Generated by fz bootstrap platform. Non-secret coordinates only.
 ` + Object.entries(entries).map(([key, entry]) => `${key}=${systemdValue(key, entry)}`).join(`
@@ -3485,6 +3695,12 @@ function validateBootstrapConfig(value) {
     throw new Error("Cloudflare Mesh/WARP requires a node-specific Cloudflare handoff");
   }
   if (value.kind === "enrolled-compute") {
+    const os = OS_CATALOG.find((entry) => entry.status === "active" && entry.id === value.operatingSystem?.id && entry.version === value.operatingSystem?.version && entry.architecture === value.operatingSystem?.architecture);
+    if (!os)
+      throw new Error("enrolled compute operating system is not in the active typed OS catalog");
+    if (value.operatingSystem.version === "24.04" && (value.installCloudflared || value.installWarp)) {
+      throw new Error("Cloudflare Tunnel and WARP require the reviewed Ubuntu 26.04 strategy");
+    }
     if (value.gitDeployKey !== undefined && typeof value.gitDeployKey !== "boolean") {
       throw new Error("gitDeployKey must be boolean");
     }
@@ -3516,6 +3732,7 @@ function validateBootstrapConfig(value) {
   if (!value.bootstrapBundle || ![value.bootstrapBundle.bundleFile, value.bootstrapBundle.manifestFile].every((path) => typeof path === "string" && path.startsWith("/") && !/[\r\n\0:]/.test(path))) {
     throw new Error("platform bootstrap requires absolute bundle and manifest paths");
   }
+  bootstrapBundleBranch(value.bootstrapBundle.branch);
   let api;
   try {
     api = new URL(value.apiUrl);
@@ -3570,9 +3787,19 @@ function validateBootstrapConfig(value) {
 }
 function planBootstrap(input, initialized = false) {
   const config = validateBootstrapConfig(structuredClone(input));
+  const enrolledOsVersion = config.kind === "enrolled-compute" ? `ubuntu-${config.operatingSystem.version}` : undefined;
+  const enrolledSoftware = config.kind === "enrolled-compute" ? [...config.software ?? []] : [];
+  if (config.kind === "enrolled-compute") {
+    if (!enrolledSoftware.some(({ id }) => id === "bun"))
+      enrolledSoftware.push({ id: "bun", version: "1.3.14" });
+    if (!enrolledSoftware.some(({ id }) => id === "git"))
+      enrolledSoftware.push({ id: "git", version: enrolledOsVersion });
+    if (!enrolledSoftware.some(({ id }) => id === "ufw"))
+      enrolledSoftware.push({ id: "ufw", version: enrolledOsVersion });
+  }
   const software = config.kind === "enrolled-compute" ? [
-    ...config.software ?? [],
-    ...config.bootstrapRunner && !config.software?.some(({ id }) => id === "openssh-client") ? [{ id: "openssh-client", version: "ubuntu-26.04" }] : [],
+    ...enrolledSoftware,
+    ...config.bootstrapRunner && !enrolledSoftware.some(({ id }) => id === "openssh-client") ? [{ id: "openssh-client", version: enrolledOsVersion }] : [],
     ...config.installCloudflared ? [{ id: "cloudflared", version: "2026.7.3" }] : [],
     ...config.installWarp ? [{ id: "cloudflare-warp", version: "2026.6.822.0-min" }] : []
   ] : [
@@ -3807,9 +4034,8 @@ async function verifyBootstrapBundleOnHost(host, config, verifyGit = false) {
     throw new Error("bootstrap bundle manifest is not valid JSON");
   }
   const manifest = parseBootstrapBundleManifest(parsed);
-  const expectedBranch = config.environment === "production" ? "main" : "dev";
-  if (manifest.branch !== expectedBranch || bundleMetadata && bundleMetadata.size !== manifest.bytes) {
-    throw new Error("bootstrap bundle manifest disagrees with the selected platform environment");
+  if (manifest.branch !== config.bootstrapBundle.branch || bundleMetadata && bundleMetadata.size !== manifest.bytes) {
+    throw new Error("bootstrap bundle manifest disagrees with the reviewed bootstrap bundle coordinates");
   }
   const digest = (await checked3(host, ["/usr/bin/sha256sum", config.bootstrapBundle.bundleFile], "bootstrap bundle digest")).trim().split(/\s+/)[0];
   if (digest !== manifest.sha256)
@@ -3823,6 +4049,7 @@ function bootstrapIdentity(config) {
   if (config.kind === "enrolled-compute")
     return {
       kind: config.kind,
+      operatingSystem: config.operatingSystem,
       apiUrl: config.apiUrl,
       realm: config.realm,
       nodeHostname: config.nodeHostname,
@@ -4436,7 +4663,7 @@ function strictBootstrapDocument(value) {
     "bootstrapRunner"
   ], "bootstrap config");
   if (root.kind === "platform") {
-    exactKeys(root.bootstrapBundle, ["bundleFile", "manifestFile"], "bootstrap bundle config");
+    exactKeys(root.bootstrapBundle, ["bundleFile", "manifestFile", "branch"], "bootstrap bundle config");
     exactKeys(root.firewall, ["enabled", "sshPort", "privateCidrs"], "firewall config");
     if (root.cloudflareHandoff !== undefined)
       exactKeys(root.cloudflareHandoff, ["handoffFile", "nodeName"], "Cloudflare handoff");
@@ -4483,9 +4710,32 @@ function strictBootstrapDocument(value) {
       "otlpTraceSampleRatio",
       "backup",
       "cloudflare",
-      "realtime"
+      "realtime",
+      "initialInventory"
     ], "runtime environment");
     const environment = runtime.environment;
+    if (environment.initialInventory !== undefined) {
+      const inventory = exactKeys(environment.initialInventory, ["metalHostname", "region", "computes"], "initial inventory");
+      exactKeys(inventory.region, ["key", "label", "country", "city", "confidentialCapable"], "initial inventory region");
+      if (!Array.isArray(inventory.computes))
+        throw new Error("initial inventory computes must be an array");
+      for (const compute of inventory.computes)
+        exactKeys(compute, [
+          "name",
+          "address",
+          "imageKey",
+          "cpuPoolKey",
+          "physicalCores",
+          "vcpu",
+          "memoryGib",
+          "diskGib",
+          "egressGuaranteedMbps",
+          "egressBurstMbps",
+          "confidential",
+          "databaseRole",
+          "databaseAgency"
+        ], "initial inventory compute");
+    }
     if (environment.email !== undefined) {
       const email = exactKeys(environment.email, ["provider", "host", "port", "user", "from", "eu"], "email config");
       if (email.provider === "smtp")
@@ -4502,6 +4752,7 @@ function strictBootstrapDocument(value) {
     if (environment.realtime !== undefined)
       exactKeys(environment.realtime, ["workerScriptName", "endpoint", "producer"], "realtime runtime config");
   } else if (root.kind === "enrolled-compute") {
+    exactKeys(root.operatingSystem, ["id", "version", "architecture"], "enrolled compute operating system");
     if (root.cloudflareHandoff !== undefined)
       exactKeys(root.cloudflareHandoff, ["handoffFile", "nodeName"], "Cloudflare handoff");
     if (root.bootstrapRunner !== undefined)
@@ -4694,19 +4945,7 @@ import { join as join4 } from "path";
 // src/metal-provision.ts
 import { dirname as dirname7, isAbsolute as isAbsolute2, join as join3 } from "path";
 import { isIP as isIP4 } from "net";
-
-// src/ubuntu.ts
-var SUPPORTED_GUEST_IMAGE = Object.freeze({
-  key: "ubuntu-resolute-20260731",
-  family: "ubuntu-26.04",
-  version: "2026-07-31",
-  label: "Ubuntu 26.04 LTS Resolute",
-  url: "https://cloud-images.ubuntu.com/releases/resolute/release-20260731/ubuntu-26.04-server-cloudimg-amd64.img",
-  sha256: "9dc7c5363c0146a08ba0c9aa834d82c2c6dfbb1c471ad9a2f0aba1189e21be05"
-});
-
-// src/metal-provision.ts
-var SAFE_NAME = /^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,63}$/;
+var SAFE_NAME2 = /^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,63}$/;
 var DEVICE = /^[a-zA-Z][a-zA-Z0-9_.-]{0,14}$/;
 var IPV4_PREFIX = /^(?:25[0-5]|2[0-4]\d|1?\d?\d)\.(?:25[0-5]|2[0-4]\d|1?\d?\d)\.(?:25[0-5]|2[0-4]\d|1?\d?\d)$/;
 var LINUX_LIST = /^\d+(?:-\d+)?(?:,\d+(?:-\d+)?)*$/;
@@ -4732,7 +4971,7 @@ function membersOfLinuxList(value, label) {
   return members;
 }
 function validateMetalProfile(profile) {
-  if (!SAFE_NAME.test(profile.volumeGroup))
+  if (!SAFE_NAME2.test(profile.volumeGroup))
     throw new MetalProvisionError("invalid volume group");
   if (!DEVICE.test(profile.bridge))
     throw new MetalProvisionError("invalid bridge");
@@ -4754,9 +4993,16 @@ function validateMetalProfile(profile) {
   if (telemetryEndpoint.protocol !== "https:" || telemetryEndpoint.username || telemetryEndpoint.password || telemetryEndpoint.search || telemetryEndpoint.hash || isIP4(telemetryEndpoint.hostname) !== 0 || !telemetryEndpoint.hostname.includes(".") || telemetryEndpoint.hostname === "localhost" || telemetryEndpoint.hostname.endsWith(".local"))
     throw new MetalProvisionError("Agent telemetry endpoint must be a public HTTPS DNS coordinate without credentials, query or fragment");
   const imageKeys = Object.keys(profile.images);
-  if (imageKeys.length !== 1 || imageKeys[0] !== SUPPORTED_GUEST_IMAGE.key || profile.images[SUPPORTED_GUEST_IMAGE.key]?.sha256 !== SUPPORTED_GUEST_IMAGE.sha256) {
-    throw new MetalProvisionError(`metal profile must contain only the pinned ${SUPPORTED_GUEST_IMAGE.key} image contract`);
+  if (imageKeys.length === 0)
+    throw new MetalProvisionError("metal profile requires at least one pinned guest image");
+  for (const imageKey of imageKeys) {
+    const catalog = OS_CATALOG.find((entry) => entry.status === "active" && entry.imageKey === imageKey);
+    if (!catalog || profile.images[imageKey]?.sha256 !== catalog.imageSha256) {
+      throw new MetalProvisionError(`metal profile image ${imageKey} does not match the pinned OS catalog`);
+    }
   }
+  if (profile.confidential && !imageKeys.some((key) => OS_CATALOG.find((entry) => entry.imageKey === key)?.confidentialModes.some((mode) => mode === "sev-snp")))
+    throw new MetalProvisionError("confidential metal profile requires a pinned SEV-SNP guest image");
   if (!Array.isArray(profile.cpuPools) || profile.cpuPools.length === 0) {
     throw new MetalProvisionError("at least one exclusive CPU pool is required");
   }
@@ -4765,7 +5011,7 @@ function validateMetalProfile(profile) {
   const assignedMemory = new Set;
   let poolsWithMemory = 0;
   for (const pool of profile.cpuPools) {
-    if (!SAFE_NAME.test(pool.key) || keys.has(pool.key))
+    if (!SAFE_NAME2.test(pool.key) || keys.has(pool.key))
       throw new MetalProvisionError("invalid or duplicate CPU pool key");
     keys.add(pool.key);
     const cpus = membersOfLinuxList(pool.cpus, "CPU");
@@ -5007,10 +5253,9 @@ function validateMetalBootstrapConfig(config) {
   if (config.profile.stateDir !== "/etc/forgezero/metal-guests" || config.profile.seedDir !== "/var/lib/forgezero/seed" || config.profile.unitDir !== UNIT_DIRECTORY || config.profile.legacyStateDir !== undefined) {
     throw new MetalBootstrapError("metal bootstrap uses fixed state, seed, and systemd unit directories");
   }
-  const image = config.profile.images[Object.keys(config.profile.images)[0]];
-  if (!image.path.startsWith("/var/lib/forgezero/images/") || resolve5(image.path) !== image.path || /[\0\r\n]/.test(image.path)) {
-    throw new MetalBootstrapError("the pinned guest image must use the fixed image directory");
-  }
+  for (const image of Object.values(config.profile.images))
+    if (!image.path.startsWith("/var/lib/forgezero/images/") || resolve5(image.path) !== image.path || /[\0\r\n]/.test(image.path))
+      throw new MetalBootstrapError("every pinned guest image must use the fixed image directory");
   if (config.profile.bunVersion !== SUPPORTED_BUN_VERSION || config.profile.bunReleaseSha256 !== SUPPORTED_BUN_RELEASE_SHA256 || config.profile.agentVersion !== VERSION) {
     throw new MetalBootstrapError("metal guest runtime must use the package-owned Bun and Agent release coordinates");
   }
@@ -5312,9 +5557,11 @@ var preflight = async (config, exec) => {
       throw new MetalBootstrapError("/dev/sev is required by the confidential profile");
     await runChecked(exec, ["/usr/bin/qemu-system-x86_64", "-object", "sev-snp-guest,help"]);
   }
-  const digest = (await runChecked(exec, ["/usr/bin/sha256sum", config.profile.images[Object.keys(config.profile.images)[0]].path])).stdout.split(/\s+/)[0];
-  if (digest !== config.profile.images[Object.keys(config.profile.images)[0]].sha256)
-    throw new MetalBootstrapError("pinned guest image digest mismatch");
+  for (const image of Object.values(config.profile.images)) {
+    const digest = (await runChecked(exec, ["/usr/bin/sha256sum", image.path])).stdout.split(/\s+/)[0];
+    if (digest !== image.sha256)
+      throw new MetalBootstrapError("pinned guest image digest mismatch");
+  }
 };
 var assertSupportedMetalHost = () => {
   if (process.platform !== "linux" || process.arch !== "x64") {
@@ -5326,34 +5573,38 @@ var assertSupportedMetalHost = () => {
   }
 };
 var ensurePinnedGuestImage = async (config, exec) => {
-  const image = config.profile.images[SUPPORTED_GUEST_IMAGE.key];
-  if (existsSync6(image.path))
-    return;
-  mkdirSync7(dirname8(image.path), { recursive: true, mode: 493 });
-  const temporary = `${image.path}.next-${process.pid}`;
-  try {
-    await runChecked(exec, [
-      "/usr/bin/curl",
-      "--fail",
-      "--location",
-      "--proto",
-      "=https",
-      "--tlsv1.2",
-      "--output",
-      temporary,
-      SUPPORTED_GUEST_IMAGE.url
-    ]);
-    const digest = (await runChecked(exec, ["/usr/bin/sha256sum", temporary])).stdout.split(/\s+/)[0];
-    if (digest !== image.sha256)
-      throw new MetalBootstrapError("downloaded guest image digest mismatch");
-    chmodSync4(temporary, 292);
-    chownSync(temporary, 0, 0);
-    renameSync6(temporary, image.path);
-  } catch (cause) {
+  for (const [imageKey, image] of Object.entries(config.profile.images)) {
+    if (existsSync6(image.path))
+      continue;
+    const catalog = OS_CATALOG.find((entry) => entry.status === "active" && entry.imageKey === imageKey);
+    if (!catalog)
+      throw new MetalBootstrapError(`guest image ${imageKey} is not active`);
+    mkdirSync7(dirname8(image.path), { recursive: true, mode: 493 });
+    const temporary = `${image.path}.next-${process.pid}`;
     try {
-      unlinkSync(temporary);
-    } catch {}
-    throw cause;
+      await runChecked(exec, [
+        "/usr/bin/curl",
+        "--fail",
+        "--location",
+        "--proto",
+        "=https",
+        "--tlsv1.2",
+        "--output",
+        temporary,
+        catalog.imageUrl
+      ]);
+      const digest = (await runChecked(exec, ["/usr/bin/sha256sum", temporary])).stdout.split(/\s+/)[0];
+      if (digest !== image.sha256)
+        throw new MetalBootstrapError("downloaded guest image digest mismatch");
+      chmodSync4(temporary, 292);
+      chownSync(temporary, 0, 0);
+      renameSync6(temporary, image.path);
+    } catch (cause) {
+      try {
+        unlinkSync(temporary);
+      } catch {}
+      throw cause;
+    }
   }
 };
 async function applyMetalBootstrap(config, options) {
@@ -5513,10 +5764,17 @@ async function metalBootstrapStatus(exec = defaultExec2) {
       ])).exitCode !== 0) {
         problems.push("local OTLP metrics receiver did not accept a proof request");
       }
-      const image = profile.images[Object.keys(profile.images)[0]];
-      if (existsSync6(image.path)) {
+      imageVerified = true;
+      for (const image of Object.values(profile.images)) {
+        if (!existsSync6(image.path)) {
+          imageVerified = false;
+          break;
+        }
         const digest = (await exec(["/usr/bin/sha256sum", image.path])).stdout.split(/\s+/)[0];
-        imageVerified = digest === image.sha256;
+        if (digest !== image.sha256) {
+          imageVerified = false;
+          break;
+        }
       }
       if (!imageVerified)
         problems.push("pinned guest image is absent or has the wrong digest");
@@ -5576,126 +5834,6 @@ import { isIP as isIP6 } from "net";
 import { tmpdir } from "os";
 import { basename, dirname as dirname9, isAbsolute as isAbsolute4, join as join6, resolve as resolve6 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-
-// src/platform-genesis.ts
-var PLATFORM_GENESIS_ENVIRONMENTS = ["production", "development"];
-var productionShape = {
-  physicalCores: 8,
-  vcpu: 16,
-  memoryGib: 24,
-  diskGib: 200,
-  egressGuaranteedMbps: 1000,
-  egressBurstMbps: 2000
-};
-var developmentShape = {
-  physicalCores: 2,
-  vcpu: 4,
-  memoryGib: 8,
-  diskGib: 64,
-  egressGuaranteedMbps: 100,
-  egressBurstMbps: 250
-};
-var PLATFORM_GENESIS_FLEETS = {
-  production: [1, 2, 3].map((node) => ({
-    name: `fz-n${node}`,
-    address: `10.42.0.${10 + node}`,
-    cpuPoolKey: `node${node}`,
-    ...productionShape
-  })),
-  development: [1, 2, 3].map((node) => ({
-    name: `dev-fz-n${node}`,
-    address: `10.42.0.${20 + node}`,
-    cpuPoolKey: `node${node + 3}`,
-    ...developmentShape
-  }))
-};
-var DEVELOPMENT_COMMUNITY_REHEARSAL_GUEST = {
-  name: "dev-fz-n4",
-  address: "10.42.0.24",
-  cpuPoolKey: "node7",
-  ...developmentShape
-};
-var publicKey = (value) => {
-  const normalized = value.trim();
-  if (!/^ssh-(?:ed25519|rsa) [A-Za-z0-9+/]+={0,3}(?: [^\r\n]+)?$/.test(normalized)) {
-    throw new Error("platform genesis SSH public key is malformed");
-  }
-  return normalized;
-};
-function platformGenesisClaims(environment, sshPublicKeys) {
-  if (!PLATFORM_GENESIS_ENVIRONMENTS.includes(environment)) {
-    throw new Error("platform genesis environment must be production or development");
-  }
-  const keys = [...new Set(sshPublicKeys.map(publicKey))];
-  if (keys.length === 0)
-    throw new Error("platform genesis requires at least one operator SSH public key");
-  return PLATFORM_GENESIS_FLEETS[environment].map((guest) => ({
-    computeKey: `platform:${guest.name}`,
-    claimToken: "offline-platform-genesis",
-    claimExpiresAtTs: Number.MAX_SAFE_INTEGER,
-    attempt: 1,
-    action: "create",
-    bootstrap: { kind: "platform-genesis" },
-    access: { sshUser: "forgezero", sshPublicKeys: keys },
-    spec: {
-      reference: `platform:${guest.name}`,
-      imageKey: SUPPORTED_GUEST_IMAGE.key,
-      guestName: guest.name,
-      guestAddress: guest.address,
-      cpuPoolKey: guest.cpuPoolKey,
-      physicalCores: guest.physicalCores,
-      vcpu: guest.vcpu,
-      memoryGib: guest.memoryGib,
-      diskGib: guest.diskGib,
-      egressGuaranteedMbps: guest.egressGuaranteedMbps,
-      egressBurstMbps: guest.egressBurstMbps,
-      confidential: true
-    }
-  }));
-}
-function platformCommunityRehearsalClaims(sshPublicKeys) {
-  const keys = [...new Set(sshPublicKeys.map(publicKey))];
-  if (keys.length === 0)
-    throw new Error("platform genesis requires at least one operator SSH public key");
-  const seed = platformGenesisClaims("development", keys);
-  const guest = DEVELOPMENT_COMMUNITY_REHEARSAL_GUEST;
-  return [...seed, {
-    computeKey: `platform:${guest.name}`,
-    claimToken: "offline-platform-genesis",
-    claimExpiresAtTs: Number.MAX_SAFE_INTEGER,
-    attempt: 1,
-    action: "create",
-    bootstrap: { kind: "platform-genesis" },
-    access: { sshUser: "forgezero", sshPublicKeys: keys },
-    spec: {
-      reference: `platform:${guest.name}`,
-      imageKey: SUPPORTED_GUEST_IMAGE.key,
-      guestName: guest.name,
-      guestAddress: guest.address,
-      cpuPoolKey: guest.cpuPoolKey,
-      physicalCores: guest.physicalCores,
-      vcpu: guest.vcpu,
-      memoryGib: guest.memoryGib,
-      diskGib: guest.diskGib,
-      egressGuaranteedMbps: guest.egressGuaranteedMbps,
-      egressBurstMbps: guest.egressBurstMbps,
-      confidential: true
-    }
-  }];
-}
-function platformCommunityRehearsalDeletionClaims(sshPublicKeys) {
-  return platformCommunityRehearsalClaims(sshPublicKeys).map((claim) => ({
-    computeKey: claim.computeKey,
-    claimToken: claim.claimToken,
-    claimExpiresAtTs: claim.claimExpiresAtTs,
-    attempt: claim.attempt,
-    action: "delete",
-    bootstrap: { kind: "platform-genesis" },
-    spec: claim.spec
-  }));
-}
-
-// src/operator-bootstrap.ts
 var REQUEST_LIMIT = 64 * 1024;
 var SECRET_LIMIT = 256 * 1024;
 var REMOTE_STAGE = "/run/forgezero-operator-bootstrap";
@@ -5875,10 +6013,44 @@ var validateMetalRequestValue = (value) => {
     throw new Error("metalConfigFile must be an absolute path");
   canonicalOutputPath(root.metalConfigFile, "metalConfigFile");
   readMetalBootstrapConfig(root.metalConfigFile);
-  const genesis = exactKeys3(root.genesis, ["environment", "sshPublicKeyFiles"], "operator metal genesis");
-  if (typeof genesis.environment !== "string" || !PLATFORM_GENESIS_ENVIRONMENTS.includes(genesis.environment)) {
-    throw new Error("operator metal genesis environment must be production or development");
-  }
+  const genesis = exactKeys3(root.genesis, ["nodes", "rehearsalNode", "sshPublicKeyFiles"], "operator metal genesis");
+  const guest = (value2, label) => {
+    const row = exactKeys3(value2, [
+      "name",
+      "address",
+      "imageKey",
+      "cpuPoolKey",
+      "physicalCores",
+      "vcpu",
+      "memoryGib",
+      "diskGib",
+      "egressGuaranteedMbps",
+      "egressBurstMbps",
+      "confidential"
+    ], label);
+    if (typeof row.name !== "string" || typeof row.address !== "string" || typeof row.imageKey !== "string" || row.cpuPoolKey !== undefined && typeof row.cpuPoolKey !== "string" || !["physicalCores", "vcpu", "memoryGib", "diskGib", "egressGuaranteedMbps", "egressBurstMbps"].every((key) => typeof row[key] === "number") || typeof row.confidential !== "boolean") {
+      throw new Error(`${label} has invalid resource coordinates`);
+    }
+    return {
+      name: row.name,
+      address: row.address,
+      imageKey: row.imageKey,
+      ...row.cpuPoolKey ? { cpuPoolKey: row.cpuPoolKey } : {},
+      physicalCores: row.physicalCores,
+      vcpu: row.vcpu,
+      memoryGib: row.memoryGib,
+      diskGib: row.diskGib,
+      egressGuaranteedMbps: row.egressGuaranteedMbps,
+      egressBurstMbps: row.egressBurstMbps,
+      confidential: row.confidential
+    };
+  };
+  if (!Array.isArray(genesis.nodes))
+    throw new Error("operator metal genesis nodes must be an array");
+  const nodes = validatePlatformGenesisGuests(genesis.nodes.map((row, index) => guest(row, `operator metal genesis node ${index + 1}`)));
+  const rehearsalNode = genesis.rehearsalNode === undefined ? undefined : guest(genesis.rehearsalNode, "operator metal rehearsal node");
+  if (rehearsalNode)
+    validatePlatformGenesisGuests([...nodes, rehearsalNode], 4);
   if (!Array.isArray(genesis.sshPublicKeyFiles) || genesis.sshPublicKeyFiles.length === 0 || genesis.sshPublicKeyFiles.some((entry) => typeof entry !== "string")) {
     throw new Error("operator metal genesis requires SSH public-key files");
   }
@@ -5893,7 +6065,8 @@ var validateMetalRequestValue = (value) => {
       agentSocket: targetValue.agentSocket
     },
     genesis: {
-      environment: genesis.environment,
+      nodes,
+      ...rehearsalNode ? { rehearsalNode } : {},
       sshPublicKeyFiles: genesis.sshPublicKeyFiles
     }
   };
@@ -5908,17 +6081,17 @@ function writeOperatorMetalBootstrapRequest(path, request) {
 }
 function planOperatorMetalBootstrap(request, mode) {
   const config = readMetalBootstrapConfig(request.metalConfigFile);
-  if ((mode === "rehearsal" || mode === "rehearsal-cleanup") && request.genesis.environment !== "development") {
-    throw new Error("the disposable four-node Community rehearsal is development-only");
-  }
   const keys = request.genesis.sshPublicKeyFiles.map((path) => publicIdentity(path));
-  const claims = mode === "rehearsal" || mode === "rehearsal-cleanup" ? mode === "rehearsal-cleanup" ? platformCommunityRehearsalDeletionClaims(keys) : platformCommunityRehearsalClaims(keys) : platformGenesisClaims(request.genesis.environment, keys);
+  if ((mode === "rehearsal" || mode === "rehearsal-cleanup") && !request.genesis.rehearsalNode) {
+    throw new Error("the reviewed metal request has no rehearsal node");
+  }
+  const claims = mode === "rehearsal" || mode === "rehearsal-cleanup" ? mode === "rehearsal-cleanup" ? platformCommunityRehearsalDeletionClaims(request.genesis.nodes, request.genesis.rehearsalNode) : platformCommunityRehearsalClaims(request.genesis.nodes, request.genesis.rehearsalNode, keys) : platformGenesisClaims(request.genesis.nodes, keys);
   return {
     kind: "metal-remote",
     mode,
     mutation: mode !== "status",
     target: { address: request.target.address, port: request.target.port, user: request.target.user },
-    steps: mode === "status" ? ["verify pinned SSH transport", "run typed fz bootstrap status"] : mode === "genesis" || mode === "rehearsal" || mode === "rehearsal-cleanup" ? ["verify pinned SSH transport", mode === "rehearsal" ? "send the fixed three-node seed plus ordinary n4 Community rehearsal claim to the constrained Metal helper" : mode === "rehearsal-cleanup" ? "delete the exact disposable dev-fz-n1..n4 guests and their owned disks, units, seed data and inventory" : "send three fixed platform-genesis claims to the constrained Metal helper"] : [
+    steps: mode === "status" ? ["verify pinned SSH transport", "run typed fz bootstrap status"] : mode === "genesis" || mode === "rehearsal" || mode === "rehearsal-cleanup" ? ["verify pinned SSH transport", mode === "rehearsal" ? "send the three reviewed seed claims plus the reviewed fourth Community rehearsal claim to the constrained Metal helper" : mode === "rehearsal-cleanup" ? "delete the exact four reviewed disposable guests and their owned disks, units, seed data and inventory" : "send the three reviewed platform-genesis claims to the constrained Metal helper"] : [
       "verify pinned SSH transport and caller-approved SSH agent",
       "copy pinned Bun and packaged fz artifacts to private staging",
       "stage the strict owner-only metal config and optional seed handoff",
@@ -5990,9 +6163,7 @@ function validatedPlatformFleet(fleet) {
     return config;
   });
   const environment = configs[0].environment;
-  const expected = PLATFORM_GENESIS_FLEETS[environment];
-  if (!expected || expected.length !== 3)
-    throw new Error("operator fleet environment is invalid");
+  const expected = configs.map((config) => ({ name: config.computeReference, address: config.database.address }));
   const identity = fleetConfigIdentity(configs[0]);
   const operatorIdentity = `${requests[0].target.identityPublicKeyFile}\x00${requests[0].target.agentSocket}`;
   const jumpIdentity = JSON.stringify(requests[0].target.jump ?? null);
@@ -6024,6 +6195,20 @@ function validatedPlatformFleet(fleet) {
   }
   return { requests, configs, environment };
 }
+function operatorPlatformFleetCoordinates(fleet) {
+  const { requests, configs, environment } = validatedPlatformFleet(fleet);
+  return {
+    environment,
+    appOrigin: configs[0].runtime.environment.appOrigin,
+    apiOrigin: configs[0].runtime.environment.apiOrigin,
+    nodes: configs.map((config, index) => ({
+      computeReference: config.computeReference,
+      address: requests[index].target.address,
+      nodeHostname: config.nodeHostname,
+      databaseRole: config.database.role
+    }))
+  };
+}
 function planOperatorPlatformFleetBootstrap(fleet, mode) {
   const { requests, configs, environment } = validatedPlatformFleet(fleet);
   const secretInputs = mode === "apply" ? attendedSecretNames(configs[0]) : [];
@@ -6163,13 +6348,17 @@ async function stageConfig(config, directory) {
       rewritten.cloudflareHandoff.handoffFile = remotePath;
   }
   const bundle = await readBootstrapBundle(config.bootstrapBundle.bundleFile, config.bootstrapBundle.manifestFile);
+  if (bundle.manifest.branch !== config.bootstrapBundle.branch) {
+    throw new Error("reviewed bootstrap config branch does not match the bundle manifest");
+  }
   const bundleFiles = [
     { source: bundle.bundlePath, name: "bootstrap-api.bundle" },
     { source: bundle.manifestPath, name: "bootstrap-api.bundle.json" }
   ];
   rewritten.bootstrapBundle = {
     bundleFile: `${REMOTE_STAGE}/bootstrap-api.bundle`,
-    manifestFile: `${REMOTE_STAGE}/bootstrap-api.bundle.json`
+    manifestFile: `${REMOTE_STAGE}/bootstrap-api.bundle.json`,
+    branch: bundle.manifest.branch
   };
   const path = join6(directory, "platform-config.json");
   writeFileSync8(path, `${JSON.stringify(rewritten, null, 2)}
@@ -6311,6 +6500,38 @@ async function applyOperatorPlatformFleetBootstrap(fleet, mode, options = {}) {
   });
   return { plan, ok: outcomes.every(({ ok }) => ok), outcomes };
 }
+async function verifyOperatorPlatformFleet(fleet, expectedVersion, options = {}) {
+  if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(expectedVersion)) {
+    throw new Error("expected Agent version is malformed");
+  }
+  const plan = planOperatorPlatformFleetBootstrap(fleet, "status");
+  const { requests, configs } = validatedPlatformFleet(fleet);
+  const exec = options.exec ?? defaultExec3;
+  const settled = await Promise.allSettled(requests.map(async (request) => {
+    publicIdentity(request.target.identityPublicKeyFile);
+    socketPath(request.target.agentSocket);
+    const directory = mkdtempSync(join6(tmpdir(), "forgezero-operator-verify-"));
+    try {
+      const knownHosts = writeKnownHosts(request, directory);
+      return await remote(exec, request, knownHosts, [
+        "/usr/bin/sudo",
+        "-n",
+        "/usr/local/lib/forgezero/agent/fz-agent",
+        "platform-fleet-verify",
+        `--expected-version=${expectedVersion}`
+      ], "remote platform fleet verification");
+    } finally {
+      rmSync6(directory, { recursive: true, force: true });
+    }
+  }));
+  const outcomes = settled.map((result, index) => result.status === "fulfilled" ? { computeReference: configs[index].computeReference, address: requests[index].target.address, ok: true, output: result.value.slice(0, 65536) } : {
+    computeReference: configs[index].computeReference,
+    address: requests[index].target.address,
+    ok: false,
+    error: (result.reason instanceof Error ? result.reason.message : String(result.reason)).slice(0, 4096)
+  });
+  return { plan, ok: outcomes.every(({ ok }) => ok), outcomes };
+}
 async function applyOperatorMetalBootstrap(request, mode, options = {}) {
   const plan = planOperatorMetalBootstrap(request, mode);
   publicIdentity(request.target.identityPublicKeyFile);
@@ -6327,13 +6548,16 @@ async function applyOperatorMetalBootstrap(request, mode, options = {}) {
     }
     if (mode === "genesis" || mode === "rehearsal" || mode === "rehearsal-cleanup") {
       const keys = request.genesis.sshPublicKeyFiles.map((path) => publicIdentity(path));
+      if ((mode === "rehearsal" || mode === "rehearsal-cleanup") && !request.genesis.rehearsalNode) {
+        throw new Error("the reviewed metal request has no rehearsal node");
+      }
       const outputs = [];
-      const claims = mode === "rehearsal" || mode === "rehearsal-cleanup" ? mode === "rehearsal-cleanup" ? platformCommunityRehearsalDeletionClaims(keys) : platformCommunityRehearsalClaims(keys) : platformGenesisClaims(request.genesis.environment, keys);
+      const claims = mode === "rehearsal" || mode === "rehearsal-cleanup" ? mode === "rehearsal-cleanup" ? platformCommunityRehearsalDeletionClaims(request.genesis.nodes, request.genesis.rehearsalNode) : platformCommunityRehearsalClaims(request.genesis.nodes, request.genesis.rehearsalNode, keys) : platformGenesisClaims(request.genesis.nodes, keys);
       for (const claim of claims) {
         outputs.push(await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/local/bin/fz-agent", "metal-apply", "--claim=-"], `provision ${claim.spec.guestName}`, false, `${JSON.stringify(claim)}
 `));
       }
-      return { plan, output: JSON.stringify({ environment: request.genesis.environment, nodes: plan.genesisNodes, outputs }) };
+      return { plan, output: JSON.stringify({ nodes: plan.genesisNodes, outputs }) };
     }
     const config = readMetalBootstrapConfig(request.metalConfigFile);
     const staged = stageMetalConfig(config, directory);
@@ -6368,12 +6592,14 @@ export {
   writeOperatorPlatformBootstrapRequest,
   writeOperatorPlatformBootstrapFleetRequest,
   writeOperatorMetalBootstrapRequest,
+  verifyOperatorPlatformFleet,
   readOperatorPlatformBootstrapRequest,
   readOperatorPlatformBootstrapFleetRequest,
   readOperatorMetalBootstrapRequest,
   planOperatorPlatformFleetBootstrap,
   planOperatorPlatformBootstrap,
   planOperatorMetalBootstrap,
+  operatorPlatformFleetCoordinates,
   createOperatorSshHop,
   applyOperatorPlatformFleetBootstrap,
   applyOperatorPlatformBootstrap,