@forgezero/agent 0.1.76 → 0.1.78

package/dist/agent-heartbeat.js

@@ -750,7 +750,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.76";
+var VERSION3 = "0.1.78";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1416,7 +1416,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.76";
+var VERSION = "0.1.78";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/fz-agent.js

@@ -9193,7 +9193,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.76";
+var VERSION2 = "0.1.78";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {
@@ -16394,6 +16394,30 @@ async function runSupervisedApp(path2) {
   }
 }
 
+// src/stdin.ts
+async function readBoundedStdin(maxBytes) {
+  if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) {
+    throw new Error("stdin byte limit must be a positive safe integer");
+  }
+  if (process.stdin.isTTY)
+    throw new Error("stdin request pipe is required");
+  const reader = Bun.spawn(["/usr/bin/head", "-c", String(maxBytes + 1)], {
+    stdin: "inherit",
+    stdout: "pipe",
+    stderr: "pipe"
+  });
+  const [stdout, stderr, exitCode] = await Promise.all([
+    new Response(reader.stdout).arrayBuffer(),
+    new Response(reader.stderr).text(),
+    reader.exited
+  ]);
+  if (exitCode !== 0)
+    throw new Error(`stdin reader failed (${exitCode}): ${stderr.trim()}`);
+  if (stdout.byteLength > maxBytes)
+    throw new Error(`stdin request exceeds ${maxBytes} bytes`);
+  return Buffer.from(stdout).toString("utf8");
+}
+
 // src/index.ts
 function agentCommandArgs(args, command3) {
   const index = args.indexOf(command3);
@@ -16892,7 +16916,7 @@ if (import.meta.main) {
     if (claimArg !== "-" && !claimArg.startsWith("/")) {
       throw new Error("metal-apply claim path must be absolute");
     }
-    const raw = readFileSync20(claimArg === "-" ? "/dev/stdin" : claimArg, "utf8");
+    const raw = claimArg === "-" ? await readBoundedStdin(32 * 1024) : readFileSync20(claimArg, "utf8");
     if (Buffer.byteLength(raw) > 32 * 1024)
       throw new Error("metal-apply claim exceeds 32 KiB");
     const claim = JSON.parse(raw);
@@ -16917,9 +16941,7 @@ if (import.meta.main) {
     if (commandArgs.length !== 1 || commandArgs[0] !== "--request=-") {
       throw new Error("community-rehearsal requires exactly --request=-");
     }
-    const raw = readFileSync20("/dev/stdin", "utf8");
-    if (Buffer.byteLength(raw) > 128 * 1024)
-      throw new Error("community rehearsal request exceeds 128 KiB");
+    const raw = await readBoundedStdin(128 * 1024);
     const request = parseCommunityRehearsalHostRequest(JSON.parse(raw));
     console.log(JSON.stringify(await runCommunityRehearsalHost(request)));
     process.exit(0);
@@ -16928,9 +16950,7 @@ if (import.meta.main) {
     if (args.length !== 1 || args[0] !== "--request=-") {
       throw new Error("metal-admission-proof requires exactly --request=-");
     }
-    const raw = readFileSync20("/dev/stdin", "utf8");
-    if (Buffer.byteLength(raw) > 32 * 1024)
-      throw new Error("metal admission proof request exceeds 32 KiB");
+    const raw = await readBoundedStdin(32 * 1024);
     const request = JSON.parse(raw);
     if (!/^[A-Za-z0-9_-]{1,64}$/.test(request.jobKey) || !/^[A-Za-z0-9_-]{1,64}$/.test(request.tenantKey) || !/^[A-Za-z0-9_-]{1,64}$/.test(request.projectKey) || !/^[a-z0-9][a-z0-9.-]{1,252}$/.test(request.hostname) || !/^[A-Za-z0-9_-]{32,128}$/.test(request.challenge) || !request.runnerNodeKey || !request.target?.host || !/^SHA256:[A-Za-z0-9+/]{43}$/.test(request.target.hostKeySha256)) {
       throw new Error("metal admission proof request is malformed");

package/dist/fz.js

@@ -4837,7 +4837,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.76";
+var VERSION2 = "0.1.78";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/metal-bootstrap.js

@@ -354,7 +354,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.76";
+var VERSION = "0.1.78";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1416,7 +1416,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.76";
+var VERSION = "0.1.78";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-fleet-verification.js

@@ -2498,7 +2498,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.76";
+var VERSION3 = "0.1.78";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -2498,7 +2498,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.76";
+var VERSION3 = "0.1.78";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/stdin.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Read one bounded request from stdin without using a synchronous `/dev/stdin`
+ * read. Bun can busy-loop while reading fd 0 from an SSH channel, both through
+ * synchronous fs calls and its JavaScript stream adapters. A fixed native
+ * `head` process owns that descriptor and returns at most limit + 1 bytes, so
+ * Bun handles only an already-bounded child stdout stream.
+ */
+export declare function readBoundedStdin(maxBytes: number): Promise<string>;

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.76";
+export declare const VERSION = "0.1.78";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.76",
+  "version": "0.1.78",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",