@forgezero/agent 0.1.83 → 0.1.85

package/README.md

@@ -86,7 +86,7 @@ Every row links to the detailed explanation and named-import/example area below.
 bun add -g @forgezero/agent — Install the version-matched fz operator CLI and fz-agent daemon.
 fz deploy init — Create a typed forgezero.deploy.ts and its canonical inert execution plan.
 fz deploy init --runtime containerd --os ubuntu-24.04 --replicas 1 --cpu-cores 2 --memory-mib 2048 --storage-gib 20 --reuse require — Create one ordinary containerd/runc compute definition with exact reserved resources; existing eligible project capacity is required.
-fz deploy init --runtime kata-snp --os ubuntu-26.04 --replicas 1 --cpu-cores 2 --memory-mib 4096 --storage-gib 40 --reuse prefer — Create one Kata QEMU SEV-SNP definition; reuse eligible capacity first, then provisioning still requires an explicit approved plan and spend ceiling.
+fz deploy init --runtime kata-snp --os ubuntu-26.04 --replicas 1 --cpu-cores 2 --memory-mib 4096 --storage-gib 40 --reuse require — Create one Kata QEMU SEV-SNP definition on existing eligible capacity. Use reuse prefer only with the explicit provisioning and spend-ceiling flags shown by fz deploy init --help.
 fz deploy compile — Compile and validate TypeScript deployment intent into .fz/deploy.plan.json.
 fz deploy check — Refuse stale plans, unsafe provider/action coordinates and unresolved deployment blockers.
 fz bootstrap platform bundle --root /absolute/api --branch dev --output /secure/forgezero/development/api.bundle — Build one verified release-generation-one source bundle without a Git credential.
@@ -100,7 +100,7 @@ fz status — Read installed service and bootstrap evidence.
 bun add -g @forgezero/agent
 fz deploy init
 fz deploy init --runtime containerd --os ubuntu-24.04 --replicas 1 --cpu-cores 2 --memory-mib 2048 --storage-gib 20 --reuse require
-fz deploy init --runtime kata-snp --os ubuntu-26.04 --replicas 1 --cpu-cores 2 --memory-mib 4096 --storage-gib 40 --reuse prefer
+fz deploy init --runtime kata-snp --os ubuntu-26.04 --replicas 1 --cpu-cores 2 --memory-mib 4096 --storage-gib 40 --reuse require
 fz deploy compile
 fz deploy check
 fz bootstrap platform bundle --root /absolute/api --branch dev --output /secure/forgezero/development/api.bundle
@@ -1406,7 +1406,7 @@ await runDeploymentPlan({
 <a id="forgezero-agent-deploy-compiler"></a>
 ## @forgezero/agent/deploy-compiler
 
-Explicit developer/CI compiler from forgezero.deploy.ts to canonical .fz/deploy.plan.json; never used to execute project TypeScript in production. This entry exposes 7 named value exports and 3 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Explicit developer/CI compiler from forgezero.deploy.ts to canonical .fz/deploy.plan.json; never used to execute project TypeScript in production. This entry exposes 7 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
 
 ```text
 import {
@@ -1422,6 +1422,7 @@ import {
 import type {
   DeploymentCompilation,
   DeploymentInitOptions,
+  DeploymentInitProvisioning,
   DeploymentInitRuntime,
 } from '@forgezero/agent/deploy-compiler';
 ```

package/dist/agent-heartbeat.js

@@ -750,7 +750,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.83";
+var VERSION3 = "0.1.85";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.js

@@ -1416,7 +1416,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.83";
+var VERSION = "0.1.85";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/deploy-compiler.d.ts

@@ -9,6 +9,15 @@ export interface DeploymentCompilation {
     changed: boolean;
 }
 export type DeploymentInitRuntime = 'native' | 'containerd' | 'kata-snp';
+export interface DeploymentInitProvisioning {
+    planKey: string;
+    regionKey: string;
+    imageKey: string;
+    environmentKey: string;
+    ownership: 'platform' | 'tenant-metal';
+    metalHostname?: string;
+    maxMonthlySpendMinor: string;
+}
 export interface DeploymentInitOptions {
     runtime?: DeploymentInitRuntime;
     operatingSystem?: 'ubuntu-24.04' | 'ubuntu-26.04';
@@ -20,6 +29,7 @@ export interface DeploymentInitOptions {
     sharing?: 'exclusive' | 'shared';
     reuse?: 'require' | 'prefer';
     profile?: string;
+    provisioning?: DeploymentInitProvisioning;
 }
 export declare function defaultTypeScriptDeployment(name: string, options?: DeploymentInitOptions): string;
 export declare function initializeTypeScriptDeployment(rootValue: string, options: {

package/dist/deploy-compiler.js

@@ -1186,12 +1186,36 @@ function initCoordinates(options) {
     throw new Error("sev-snp requires ubuntu-26.04");
   if (runtime === "native" && result.sharing !== "exclusive")
     throw new Error("native deployments require exclusive compute");
-  return result;
+  if (result.reuse === "prefer" && options.provisioning === undefined)
+    throw new Error("reuse prefer requires approved provisioning coordinates");
+  if (result.reuse === "require" && options.provisioning !== undefined)
+    throw new Error("reuse require cannot include provisioning coordinates");
+  if (options.provisioning !== undefined) {
+    for (const [label, value] of Object.entries({
+      plan: options.provisioning.planKey,
+      region: options.provisioning.regionKey,
+      image: options.provisioning.imageKey,
+      environment: options.provisioning.environmentKey
+    }))
+      if (!/^[a-z][a-z0-9-]{0,62}$/.test(value))
+        throw new Error(`deployment provisioning ${label} must be a lowercase typed name`);
+    if (!/^\d{1,18}$/.test(options.provisioning.maxMonthlySpendMinor))
+      throw new Error("deployment provisioning monthly spend must be a bounded decimal minor-unit amount");
+    if (options.provisioning.ownership === "tenant-metal" && !options.provisioning.metalHostname)
+      throw new Error("tenant-metal provisioning requires a metal hostname");
+    if (options.provisioning.ownership === "platform" && options.provisioning.metalHostname)
+      throw new Error("platform provisioning cannot bind a tenant metal hostname");
+    if (options.provisioning.metalHostname && !/^(?=.{1,253}$)[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(options.provisioning.metalHostname))
+      throw new Error("deployment provisioning metal hostname is invalid");
+  }
+  return { ...result, ...options.provisioning ? { provisioning: options.provisioning } : {} };
 }
 function defaultTypeScriptDeployment(name, options = {}) {
   const selected = initCoordinates(options);
   const execution = selected.runtime === "native" ? "native" : selected.runtime === "containerd" ? "oci-runc" : "oci-kata-qemu-snp";
   const hostPackageVersion = selected.operatingSystem === "ubuntu-24.04" ? "ubuntu-24.04" : "ubuntu-26.04";
+  const provisioningBlock = selected.provisioning === undefined ? "" : `,
+				provisioning: { planKey: '${selected.provisioning.planKey}', regionKey: '${selected.provisioning.regionKey}', imageKey: '${selected.provisioning.imageKey}', environmentKey: '${selected.provisioning.environmentKey}', ownership: '${selected.provisioning.ownership}',${selected.provisioning.metalHostname ? ` metalHostname: '${selected.provisioning.metalHostname}',` : ""} maxMonthlySpendMinor: '${selected.provisioning.maxMonthlySpendMinor}' }`;
   const requirementBlock = selected.runtime === "native" ? `bun: providers.bun.require()` : selected.runtime === "containerd" ? `containerd: providers.containerd.require({ version: '${hostPackageVersion}' }),
 			nginx: providers.nginx.require({ version: '${hostPackageVersion}' })` : `containerd: providers.containerd.require(),
 			kata: providers.kata.require(),
@@ -1259,7 +1283,7 @@ export default defineDeployment({
 				profiles: ['${selected.profile}'], replicas: ${selected.replicas},
 				resources: { cpuCores: ${selected.cpuCores}, memoryMiB: ${selected.memoryMiB}, storageGiB: ${selected.storageGiB} },
 				os: '${selected.operatingSystem}', runtime: '${execution}', isolation: '${selected.isolation}',
-				sharing: '${selected.sharing}', reuse: '${selected.reuse}'
+				sharing: '${selected.sharing}', reuse: '${selected.reuse}'${provisioningBlock}
 			})
 		},
 		requirements: { ${requirementBlock} },

package/dist/fz-agent.js

@@ -9331,7 +9331,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.83";
+var VERSION2 = "0.1.85";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {

package/dist/fz.js

@@ -4634,7 +4634,7 @@ var VaultError, runtimeEnvironment = () => typeof process !== "undefined" && pro
   } catch {
     return;
   }
-}, VERSION = "0.1.16";
+}, VERSION = "0.1.17";
 var init_dist = __esm(() => {
   init_identity();
   VaultError = class VaultError extends Error {
@@ -4837,7 +4837,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.83";
+var VERSION2 = "0.1.85";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -11553,12 +11553,36 @@ function initCoordinates(options) {
     throw new Error("sev-snp requires ubuntu-26.04");
   if (runtime === "native" && result.sharing !== "exclusive")
     throw new Error("native deployments require exclusive compute");
-  return result;
+  if (result.reuse === "prefer" && options.provisioning === undefined)
+    throw new Error("reuse prefer requires approved provisioning coordinates");
+  if (result.reuse === "require" && options.provisioning !== undefined)
+    throw new Error("reuse require cannot include provisioning coordinates");
+  if (options.provisioning !== undefined) {
+    for (const [label, value] of Object.entries({
+      plan: options.provisioning.planKey,
+      region: options.provisioning.regionKey,
+      image: options.provisioning.imageKey,
+      environment: options.provisioning.environmentKey
+    }))
+      if (!/^[a-z][a-z0-9-]{0,62}$/.test(value))
+        throw new Error(`deployment provisioning ${label} must be a lowercase typed name`);
+    if (!/^\d{1,18}$/.test(options.provisioning.maxMonthlySpendMinor))
+      throw new Error("deployment provisioning monthly spend must be a bounded decimal minor-unit amount");
+    if (options.provisioning.ownership === "tenant-metal" && !options.provisioning.metalHostname)
+      throw new Error("tenant-metal provisioning requires a metal hostname");
+    if (options.provisioning.ownership === "platform" && options.provisioning.metalHostname)
+      throw new Error("platform provisioning cannot bind a tenant metal hostname");
+    if (options.provisioning.metalHostname && !/^(?=.{1,253}$)[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(options.provisioning.metalHostname))
+      throw new Error("deployment provisioning metal hostname is invalid");
+  }
+  return { ...result, ...options.provisioning ? { provisioning: options.provisioning } : {} };
 }
 function defaultTypeScriptDeployment(name, options = {}) {
   const selected = initCoordinates(options);
   const execution = selected.runtime === "native" ? "native" : selected.runtime === "containerd" ? "oci-runc" : "oci-kata-qemu-snp";
   const hostPackageVersion = selected.operatingSystem === "ubuntu-24.04" ? "ubuntu-24.04" : "ubuntu-26.04";
+  const provisioningBlock = selected.provisioning === undefined ? "" : `,
+				provisioning: { planKey: '${selected.provisioning.planKey}', regionKey: '${selected.provisioning.regionKey}', imageKey: '${selected.provisioning.imageKey}', environmentKey: '${selected.provisioning.environmentKey}', ownership: '${selected.provisioning.ownership}',${selected.provisioning.metalHostname ? ` metalHostname: '${selected.provisioning.metalHostname}',` : ""} maxMonthlySpendMinor: '${selected.provisioning.maxMonthlySpendMinor}' }`;
   const requirementBlock = selected.runtime === "native" ? `bun: providers.bun.require()` : selected.runtime === "containerd" ? `containerd: providers.containerd.require({ version: '${hostPackageVersion}' }),
 			nginx: providers.nginx.require({ version: '${hostPackageVersion}' })` : `containerd: providers.containerd.require(),
 			kata: providers.kata.require(),
@@ -11626,7 +11650,7 @@ export default defineDeployment({
 				profiles: ['${selected.profile}'], replicas: ${selected.replicas},
 				resources: { cpuCores: ${selected.cpuCores}, memoryMiB: ${selected.memoryMiB}, storageGiB: ${selected.storageGiB} },
 				os: '${selected.operatingSystem}', runtime: '${execution}', isolation: '${selected.isolation}',
-				sharing: '${selected.sharing}', reuse: '${selected.reuse}'
+				sharing: '${selected.sharing}', reuse: '${selected.reuse}'${provisioningBlock}
 			})
 		},
 		requirements: { ${requirementBlock} },
@@ -17947,6 +17971,31 @@ function parseOptions(argv2) {
         options.deployReuse = value;
       else
         options.optionError = "--reuse must be require or prefer.";
+    } else if (token === "--provision-plan") {
+      options.deployProvisionPlan = argv2[++index];
+      options.deployInitCustomized = true;
+    } else if (token === "--provision-region") {
+      options.deployProvisionRegion = argv2[++index];
+      options.deployInitCustomized = true;
+    } else if (token === "--provision-image") {
+      options.deployProvisionImage = argv2[++index];
+      options.deployInitCustomized = true;
+    } else if (token === "--provision-environment") {
+      options.deployProvisionEnvironment = argv2[++index];
+      options.deployInitCustomized = true;
+    } else if (token === "--provision-ownership") {
+      const value = argv2[++index];
+      options.deployInitCustomized = true;
+      if (value === "platform" || value === "tenant-metal")
+        options.deployProvisionOwnership = value;
+      else
+        options.optionError = "--provision-ownership must be platform or tenant-metal.";
+    } else if (token === "--provision-metal") {
+      options.deployProvisionMetal = argv2[++index];
+      options.deployInitCustomized = true;
+    } else if (token === "--max-monthly-spend-minor") {
+      options.deployMaxMonthlySpendMinor = argv2[++index];
+      options.deployInitCustomized = true;
     } else if (token === "--force")
       options.force = true;
     else if (token === "--browser")
@@ -19636,7 +19685,25 @@ async function cmdDeploy(options, args) {
         storageGiB: options.deployStorageGiB,
         sharing: options.deploySharing,
         reuse: options.deployReuse,
-        profile: options.deployProfile
+        profile: options.deployProfile,
+        ...[
+          options.deployProvisionPlan,
+          options.deployProvisionRegion,
+          options.deployProvisionImage,
+          options.deployProvisionEnvironment,
+          options.deployProvisionOwnership,
+          options.deployMaxMonthlySpendMinor
+        ].some((value) => value !== undefined) ? {
+          provisioning: {
+            planKey: options.deployProvisionPlan ?? "",
+            regionKey: options.deployProvisionRegion ?? "",
+            imageKey: options.deployProvisionImage ?? "",
+            environmentKey: options.deployProvisionEnvironment ?? "",
+            ownership: options.deployProvisionOwnership ?? "platform",
+            ...options.deployProvisionMetal ? { metalHostname: options.deployProvisionMetal } : {},
+            maxMonthlySpendMinor: options.deployMaxMonthlySpendMinor ?? ""
+          }
+        } : {}
       });
       const compiled = await compileDeploymentProject(options.projectRoot);
       if (options.json)
@@ -19971,6 +20038,10 @@ function usage() {
 	 --storage-gib <n>       Reserved storage GiB per compute
 	 --sharing <mode>       exclusive or shared (native requires exclusive)
 	 --reuse <mode>         require existing capacity or prefer reuse then approved provisioning
+	 --provision-plan <key> --provision-region <key> --provision-image <key>
+	 --provision-environment <key> --provision-ownership <platform|tenant-metal>
+	 --provision-metal <host>      Required only for tenant-metal ownership
+	 --max-monthly-spend-minor <n> Hard approved scale-out spend ceiling
     --force                 Init may replace an existing generated target
 
   REMOTE DEPLOY OPTIONS

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.83";
+var VERSION = "0.1.85";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1416,7 +1416,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.83";
+var VERSION = "0.1.85";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";

package/dist/platform-fleet-verification.js

@@ -2647,7 +2647,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.83";
+var VERSION3 = "0.1.85";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -2647,7 +2647,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.83";
+var VERSION3 = "0.1.85";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.83";
+export declare const VERSION = "0.1.85";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.83",
+  "version": "0.1.85",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",
@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "@forgezero/runtime": "0.1.12",
-    "@forgezero/vault": "0.1.16",
+    "@forgezero/vault": "0.1.17",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
     "@noble/post-quantum": "0.6.1",