@forgezero/agent 0.1.88 → 0.1.89

package/README.md

@@ -272,10 +272,11 @@ export const selectedCapability = DEFAULT_LIFECYCLE_HELPER_SOCKET;
 <a id="forgezero-agent-provision"></a>
 ## @forgezero/agent/provision
 
-The install plan as data, with no transport — so `fz` running locally and the platform running over SSH provision an identical machine. This entry exposes 34 named value exports and 11 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+The install plan as data, with no transport — so `fz` running locally and the platform running over SSH provision an identical machine. This entry exposes 38 named value exports and 11 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
 
 ```text
 import {
+  AGENT_CANDIDATE_UNIT_PATH,
   AGENT_EGRESS_UNIT_PATH,
   AGENT_SOCKET_PROXY_UNIT_PATH,
   AGENT_SOCKET_UNIT_PATH,
@@ -295,8 +296,11 @@ import {
   WARP_CONFIG_UNIT_PATH,
   WARP_SERVICE_DROP_IN_PATH,
   agentBackendSocketPath,
+  agentCandidateSocketPath,
+  agentCandidateUnit,
   agentEgressUnit,
   agentEnrolmentUnit,
+  agentRoutingSocketPath,
   agentSocketProxyUnit,
   agentSocketUnit,
   agentUnit,
@@ -333,10 +337,10 @@ This minimal executable use imports one concrete value from this exact entry poi
 
 ```text
 import {
-  AGENT_EGRESS_UNIT_PATH,
+  AGENT_CANDIDATE_UNIT_PATH,
 } from '@forgezero/agent/provision';
 
-export const selectedCapability = AGENT_EGRESS_UNIT_PATH;
+export const selectedCapability = AGENT_CANDIDATE_UNIT_PATH;
 ```
 
 <a id="forgezero-agent-platform-genesis"></a>
@@ -534,15 +538,18 @@ export const selectedCapability = heartbeatAgentOnce;
 <a id="forgezero-agent-agent-update"></a>
 ## @forgezero/agent/agent-update
 
-Verified Agent update planning against the platform release coordinate. This entry exposes 8 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Verified Agent update planning against the platform release coordinate. This entry exposes 11 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
 
 ```text
 import {
+  DEFAULT_AGENT_CANDIDATE_LINK,
   DEFAULT_AGENT_RELEASE_ROOT,
   DEFAULT_AGENT_UPDATE_SOCKET,
   MAX_AGENT_TARBALL_BYTES,
+  clearAgentCandidate,
   compareVersions,
   restoreAgentRelease,
+  selectAgentCandidate,
   selectAgentRelease,
   stageAgentRelease,
   validateAgentRelease,
@@ -562,10 +569,10 @@ This minimal executable use imports one concrete value from this exact entry poi
 
 ```text
 import {
-  DEFAULT_AGENT_RELEASE_ROOT,
+  DEFAULT_AGENT_CANDIDATE_LINK,
 } from '@forgezero/agent/agent-update';
 
-export const selectedCapability = DEFAULT_AGENT_RELEASE_ROOT;
+export const selectedCapability = DEFAULT_AGENT_CANDIDATE_LINK;
 ```
 
 <a id="forgezero-agent-agent-update-helper"></a>
@@ -709,7 +716,7 @@ await readBootstrapBundle(built.bundlePath, built.manifestPath);
 <a id="forgezero-agent-operator-bootstrap"></a>
 ## @forgezero/agent/operator-bootstrap
 
-Pinned-host operator transport that stages owner-only handoffs and invokes the same typed platform bootstrap through the caller-approved SSH agent. This entry exposes 19 named value exports and 17 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Pinned-host operator transport that stages owner-only handoffs and invokes the same typed platform bootstrap through the caller-approved SSH agent. This entry exposes 24 named value exports and 17 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
 
 ```text
 import {
@@ -718,6 +725,10 @@ import {
   applyOperatorPlatformFleetBootstrap,
   collectOperatorGuestHostKeys,
   createOperatorSshHop,
+  operatorMetalClusterBootstrapCode,
+  operatorPackagedAgentPath,
+  operatorPackagedFzCliPath,
+  operatorPackagedGitSshPath,
   operatorPlatformFleetCoordinates,
   planOperatorMetalBootstrap,
   planOperatorPlatformBootstrap,
@@ -726,6 +737,7 @@ import {
   readOperatorMetalBootstrapRequest,
   readOperatorPlatformBootstrapFleetRequest,
   readOperatorPlatformBootstrapRequest,
+  redactOperatorSecretDiagnostic,
   verifyOperatorPlatformFleet,
   withOperatorGuestTransport,
   writeOperatorGuestHostKeyEvidence,
@@ -800,7 +812,7 @@ console.log(plan.argv);
 <a id="forgezero-agent-capacity-calibration"></a>
 ## @forgezero/agent/capacity-calibration
 
-One-time target-local safe-concurrency calibration with private evidence. This entry exposes 3 named value exports and 4 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+One-time target-local safe-concurrency calibration with private evidence. This entry exposes 3 named value exports and 5 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
 
 ```text
 import {
@@ -813,6 +825,7 @@ import type {
   CapacityCalibration,
   CapacityCalibrationOptions,
   CapacityStage,
+  HostCapacitySample,
   ValidatedCapacityCalibrationOptions,
 } from '@forgezero/agent/capacity-calibration';
 ```
@@ -1560,11 +1573,12 @@ export const selectedCapability = MetalProvisionError;
 <a id="forgezero-agent-platform-bootstrap-runtime"></a>
 ## @forgezero/agent/platform-bootstrap-runtime
 
-Pure platform bootstrap validation, render and resumable phase-state contracts. This entry exposes 10 named value exports and 14 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
+Pure platform bootstrap validation, render and resumable phase-state contracts. This entry exposes 11 named value exports and 14 named type exports. The generated import block lists one name per line for scanning and copying; keep only the names used by your file.
 
 ```text
 import {
   activatePlatformRelease,
+  assertReleaseLinksContained,
   planLocalOtlpProof,
   planPlatformActivation,
   platformApiCredentialSpecs,

package/dist/agent-heartbeat.js

@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.88";
+var VERSION3 = "0.1.89";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.d.ts

@@ -1,5 +1,5 @@
 import { type ProvisionPlan } from './cli/agent-install';
-import type { Capabilities } from './provision';
+import { type Capabilities } from './provision';
 import { type SoftwareCommandResult, type SoftwareRequirement } from './software';
 import { type PlatformSharedEnvironment } from './platform-bootstrap-runtime';
 import { type BootstrapBundleManifest } from './bootstrap-bundle';
@@ -191,6 +191,13 @@ export declare const BOOTSTRAP_STATE_PATH = "/var/lib/forgezero/bootstrap.json";
 export declare function validateBootstrapConfig(value: BootstrapConfig): BootstrapConfig;
 export declare function planBootstrap(input: BootstrapConfig, initialized?: boolean): BootstrapPlan;
 export declare function bootstrapIdentityDigest(config: BootstrapConfig): string;
+export declare const legacyBootstrapIdentityDigest: (config: BootstrapConfig) => string;
+/** Exact prior-release identities accepted only while generation one is still unenrolled. */
+export declare function interruptedPlatformReleaseIdentityDigests(config: PlatformBootstrapConfig, releaseEvidence: {
+    revision: string;
+    sha256: string;
+    branch: string;
+}, bootstrapManifest?: BootstrapBundleManifest): readonly string[];
 export declare function bootstrapStatus(host?: BootstrapHost): Promise<BootstrapStatus>;
 export declare function applyBootstrap(input: BootstrapConfig, host?: BootstrapHost, secrets?: BootstrapSecrets, dependencies?: {
     fetcher?: typeof fetch;