@forgezero/agent 0.1.69 → 0.1.70

package/dist/agent-heartbeat.js

@@ -749,7 +749,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.69";
+var VERSION3 = "0.1.70";
 
 // src/agent-heartbeat.ts
 var unquote = (value) => value.replace(/^['"]|['"]$/g, "");

package/dist/bootstrap.js

@@ -1396,7 +1396,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.69";
+var VERSION = "0.1.70";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/fz-agent.js

@@ -8588,7 +8588,7 @@ import { join as join3 } from "path";
 import { fileURLToPath } from "url";
 
 // src/version.ts
-var VERSION2 = "0.1.69";
+var VERSION2 = "0.1.70";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {

package/dist/fz.js

@@ -4829,7 +4829,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.69";
+var VERSION2 = "0.1.70";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -18363,6 +18363,45 @@ function interactiveBootstrap(kind, genesisGuests, genesisCloudflareCheckpoint)
     } : {}
   };
 }
+async function runAttendedPlatformFleet(fleet, apply) {
+  const plan = planOperatorPlatformFleetBootstrap(fleet, "apply");
+  const cloudflare = readCloudflareBootstrapCommandConfig(fleet.cloudflareConfigFile, apply ? "apply" : "plan");
+  const coordinates = operatorPlatformFleetCoordinates(fleet);
+  if (cloudflare.coordinates.nodes.length !== coordinates.nodes.length || coordinates.nodes.some((node, index) => {
+    const edge = cloudflare.coordinates.nodes[index];
+    return edge?.nodeName !== node.computeReference || edge.hostname !== node.nodeHostname || edge.service !== "http://127.0.0.1:3000";
+  })) {
+    throw new Error("Cloudflare coordinates do not match the exact reviewed platform fleet");
+  }
+  const attendedPlan = {
+    kind: "forgezero-attended-platform-bootstrap-plan",
+    mutation: true,
+    cloudflare: {
+      checkpointFile: cloudflare.checkpointPath,
+      nodes: cloudflare.coordinates.nodes.map(({ nodeName, hostname: hostname2 }) => ({ nodeName, hostname: hostname2 }))
+    },
+    fleet: plan,
+    acceptanceFile: fleet.cloudflareAcceptanceFile,
+    completion: ["public ingress verified", "initial custodian invitation printed"]
+  };
+  out.line(JSON.stringify(attendedPlan, null, 2));
+  if (!apply) {
+    out.step("Review the complete Tunnel, hostname, bundle, credential and three-node plan, then repeat with --apply.");
+    return 0;
+  }
+  const first = readOperatorPlatformBootstrapRequest(fleet.requests[0]);
+  const firstConfig = readBootstrapConfig(first.platformConfigFile);
+  if (firstConfig.kind !== "platform")
+    throw new Error("remote platform fleet requires platform configs");
+  const secrets = await promptPlatformBootstrapSecrets(firstConfig);
+  const result = await applyAttendedPlatformBootstrap(fleet, cloudflare, fleet.cloudflareAcceptanceFile, secrets);
+  out.line(JSON.stringify(result, null, 2));
+  if (!result.ok)
+    return 1;
+  out.line();
+  out.step(`Initial custodian invitation: ${result.inviteUrl}`);
+  return 0;
+}
 async function cmdBootstrap(options, args) {
   try {
     const operation = args[0] ?? "status";
@@ -18384,6 +18423,17 @@ async function cmdBootstrap(options, args) {
       out.line(JSON.stringify({ kind, ...writeMetalOperatorFiles(options.outputPath), mode: "0600" }, null, 2));
       return 0;
     }
+    if (operation === "platform" && args[1] === "launch") {
+      if (args[2] !== undefined || !options.outputPath || options.bootstrapConfigPath) {
+        throw new Error("Usage: fz bootstrap platform launch --output <absolute-owner-only-directory> [--apply]");
+      }
+      const generated = writePlatformGenesisFleet(options.outputPath);
+      const fleet = readOperatorPlatformBootstrapFleetRequest(generated.fleetRequest);
+      if (options.apply && bootstrapAnswer("Type APPLY to run the reviewed Cloudflare and three-compute plan") !== "APPLY") {
+        throw new Error("attended platform bootstrap was not confirmed");
+      }
+      return await runAttendedPlatformFleet(fleet, options.apply);
+    }
     if (operation === "platform" && args[1] === "fleet") {
       const mode = args[2];
       if (!mode || !["apply", "status"].includes(mode) || args[3] !== undefined) {
@@ -18392,50 +18442,12 @@ async function cmdBootstrap(options, args) {
       if (!options.bootstrapConfigPath)
         throw new Error("remote platform fleet bootstrap requires --bootstrap-config");
       const fleet = readOperatorPlatformBootstrapFleetRequest(options.bootstrapConfigPath);
-      const plan2 = planOperatorPlatformFleetBootstrap(fleet, mode);
-      const cloudflare = readCloudflareBootstrapCommandConfig(fleet.cloudflareConfigFile, options.apply && mode === "apply" ? "apply" : "plan");
-      const coordinates = operatorPlatformFleetCoordinates(fleet);
-      if (cloudflare.coordinates.nodes.length !== coordinates.nodes.length || coordinates.nodes.some((node, index) => {
-        const edge = cloudflare.coordinates.nodes[index];
-        return edge?.nodeName !== node.computeReference || edge.hostname !== node.nodeHostname || edge.service !== "http://127.0.0.1:3000";
-      })) {
-        throw new Error("Cloudflare coordinates do not match the exact reviewed platform fleet");
-      }
-      if (!options.apply) {
-        out.line(JSON.stringify({
-          kind: "forgezero-attended-platform-bootstrap-plan",
-          mutation: true,
-          cloudflare: {
-            checkpointFile: cloudflare.checkpointPath,
-            nodes: cloudflare.coordinates.nodes.map(({ nodeName, hostname: hostname2 }) => ({ nodeName, hostname: hostname2 }))
-          },
-          fleet: plan2,
-          acceptanceFile: fleet.cloudflareAcceptanceFile,
-          completion: ["public ingress verified", "initial custodian invitation printed"]
-        }, null, 2));
-        out.step("Review the complete Tunnel, hostname, bundle, credential and three-node plan, then repeat with --apply.");
-        return 0;
-      }
-      const first = readOperatorPlatformBootstrapRequest(fleet.requests[0]);
-      const firstConfig = readBootstrapConfig(first.platformConfigFile);
-      if (firstConfig.kind !== "platform")
-        throw new Error("remote platform fleet requires platform configs");
       if (mode === "status") {
-        const result3 = await applyOperatorPlatformFleetBootstrap(fleet, mode);
-        out.line(JSON.stringify(result3, null, 2));
-        return result3.ok ? 0 : 1;
-      }
-      const secrets2 = mode === "apply" ? await promptPlatformBootstrapSecrets(firstConfig) : undefined;
-      if (!secrets2?.cloudflareTunnelToken || !secrets2.cloudflareApiToken) {
-        throw new Error("attended platform bootstrap requires both Cloudflare tokens");
+        const result2 = await applyOperatorPlatformFleetBootstrap(fleet, mode);
+        out.line(JSON.stringify(result2, null, 2));
+        return result2.ok ? 0 : 1;
       }
-      const result2 = await applyAttendedPlatformBootstrap(fleet, cloudflare, fleet.cloudflareAcceptanceFile, secrets2);
-      out.line(JSON.stringify(result2, null, 2));
-      if (!result2.ok)
-        return 1;
-      out.line();
-      out.step(`Initial custodian invitation: ${result2.inviteUrl}`);
-      return 0;
+      return await runAttendedPlatformFleet(fleet, options.apply);
     }
     if (operation === "platform" && args[1] === "remote") {
       const mode = args[2];
@@ -18583,7 +18595,7 @@ async function cmdBootstrap(options, args) {
       return 0;
     }
     if (!["platform", "repair"].includes(operation)) {
-      throw new Error("Usage: fz bootstrap config <metal|platform|cloudflare>|platform [bundle|fleet <apply|status>|remote <apply|status>|cloudflare [verify|finalize]]|metal [remote <apply|genesis|rehearsal|rehearsal-cleanup|host-keys|rehearsal-host-keys|status>]|status|repair [--bootstrap-config <path>] [--apply]");
+      throw new Error("Usage: fz bootstrap config <metal|platform|cloudflare>|platform [launch|bundle|fleet <apply|status>|remote <apply|status>|cloudflare [verify|finalize]]|metal [remote <apply|genesis|rehearsal|rehearsal-cleanup|host-keys|rehearsal-host-keys|status>]|status|repair [--bootstrap-config <path>] [--apply]");
     }
     const config = options.bootstrapConfigPath ? readBootstrapConfig(options.bootstrapConfigPath) : operation === "repair" ? (() => {
       throw new Error("repair requires --bootstrap-config so immutable coordinates are revalidated");
@@ -19158,6 +19170,9 @@ function usage() {
                             local socket instead of holding an API key
 	 fz bootstrap platform bundle
 	                         Build one clean exact-revision API Git bundle for genesis
+	 fz bootstrap platform launch
+	                         Prompt, review and run the complete attended platform
+	                         bootstrap; --output is the owner-only working directory
 	 fz bootstrap platform remote <apply|status>
 	                         Run typed bootstrap from the operator laptop through
 	                         a pinned host; apply copies and verifies that bundle

package/dist/metal-bootstrap.js

@@ -354,7 +354,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.69";
+var VERSION = "0.1.70";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1396,7 +1396,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.69";
+var VERSION = "0.1.70";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-fleet-verification.js

@@ -2125,7 +2125,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.69";
+var VERSION3 = "0.1.70";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -2125,7 +2125,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.69";
+var VERSION3 = "0.1.70";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.69";
+export declare const VERSION = "0.1.70";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.69",
+  "version": "0.1.70",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",