@forgezero/agent 0.1.94 → 0.1.95

package/dist/agent-heartbeat.js

@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
 }
 
 // src/version.ts
-var VERSION3 = "0.1.94";
+var VERSION3 = "0.1.95";
 
 // src/agent-heartbeat.ts
 function readAgentHostMetrics() {

package/dist/bootstrap.d.ts

@@ -192,6 +192,13 @@ export declare function validateBootstrapConfig(value: BootstrapConfig): Bootstr
 export declare function planBootstrap(input: BootstrapConfig, initialized?: boolean): BootstrapPlan;
 export declare function bootstrapIdentityDigest(config: BootstrapConfig): string;
 export declare const legacyBootstrapIdentityDigest: (config: BootstrapConfig) => string;
+/**
+ * Exact, reviewed identity migrations for an already-installed platform host.
+ * This is deliberately not a generic "stored coordinates match" escape hatch:
+ * only the development collector transition from the retired external OTLP
+ * placeholder to the supervised loopback sink is accepted.
+ */
+export declare function approvedPlatformRepairIdentityDigests(config: PlatformBootstrapConfig): readonly string[];
 /** Exact prior-release identities accepted only while generation one is still unenrolled. */
 export declare function interruptedPlatformReleaseIdentityDigests(config: PlatformBootstrapConfig, releaseEvidence: {
     revision: string;

package/dist/bootstrap.js

@@ -1420,7 +1420,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.94";
+var VERSION = "0.1.95";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -4290,6 +4290,14 @@ function bootstrapIdentityDigest(config) {
   return createHash2("sha256").update(JSON.stringify(bootstrapIdentity(config))).digest("hex");
 }
 var legacyBootstrapIdentityDigest = (config) => createHash2("sha256").update(JSON.stringify(bootstrapIdentity(config, true))).digest("hex");
+function approvedPlatformRepairIdentityDigests(config) {
+  if (config.environment !== "development" || config.telemetryEndpoint !== LOCAL_DEBUG_OTEL_EXPORT || config.runtime.environment.agentOtlpEndpoint !== "http://127.0.0.1:4318")
+    return [];
+  const previous = structuredClone(config);
+  previous.telemetryEndpoint = "https://otel.forgezero.net";
+  previous.runtime.environment.agentOtlpEndpoint = "https://otel.forgezero.net";
+  return [bootstrapIdentityDigest(previous), legacyBootstrapIdentityDigest(previous)];
+}
 function interruptedPlatformReleaseIdentityDigests(config, releaseEvidence, bootstrapManifest) {
   if (!config.runtime.environment.initialInventory)
     return [];
@@ -4610,10 +4618,11 @@ async function applyBootstrap(input, host = localBootstrapHost(), secrets, depen
   if (installed) {
     const exactIdentity = installed.kind === config.kind && installed.identityDigest === bootstrapIdentityDigest(config);
     const boundedReleaseResume = config.kind === "platform" && !host.exists("/var/lib/forgezero/enrolment.json") && host.exists(BOOTSTRAP_RELEASE_EVIDENCE) && storedPlatformCoordinatesMatch(installed, config);
-    if (!exactIdentity && !boundedReleaseResume) {
+    const approvedIdentityMigration = config.kind === "platform" && storedPlatformCoordinatesMatch(installed, config) && approvedPlatformRepairIdentityDigests(config).includes(installed.identityDigest);
+    if (!exactIdentity && !boundedReleaseResume && !approvedIdentityMigration) {
       throw new Error("bootstrap repair coordinates do not match the installed host identity");
     }
-    allowInterruptedReleaseRebind = !exactIdentity && boundedReleaseResume;
+    allowInterruptedReleaseRebind = !exactIdentity && (boundedReleaseResume || approvedIdentityMigration);
   }
   const platformPrivate = config.kind === "platform" ? (() => {
     if (!secrets)
@@ -5219,6 +5228,7 @@ export {
   interruptedPlatformReleaseIdentityDigests,
   bootstrapStatus,
   bootstrapIdentityDigest,
+  approvedPlatformRepairIdentityDigests,
   applyBootstrap,
   PLATFORM_BOOTSTRAP_PROFILES,
   BOOTSTRAP_STATE_PATH

package/dist/fz-agent.js

@@ -9496,7 +9496,7 @@ async function writeAndCloseProcessInput(input, value) {
 }
 
 // src/version.ts
-var VERSION2 = "0.1.94";
+var VERSION2 = "0.1.95";
 
 // src/ssh-bootstrap.ts
 class SshBootstrapError extends Error {

package/dist/fz.js

@@ -4841,7 +4841,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION2 = "0.1.94";
+var VERSION2 = "0.1.95";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -14675,6 +14675,14 @@ function bootstrapIdentityDigest(config) {
   return createHash4("sha256").update(JSON.stringify(bootstrapIdentity(config))).digest("hex");
 }
 var legacyBootstrapIdentityDigest = (config) => createHash4("sha256").update(JSON.stringify(bootstrapIdentity(config, true))).digest("hex");
+function approvedPlatformRepairIdentityDigests(config) {
+  if (config.environment !== "development" || config.telemetryEndpoint !== LOCAL_DEBUG_OTEL_EXPORT || config.runtime.environment.agentOtlpEndpoint !== "http://127.0.0.1:4318")
+    return [];
+  const previous = structuredClone(config);
+  previous.telemetryEndpoint = "https://otel.forgezero.net";
+  previous.runtime.environment.agentOtlpEndpoint = "https://otel.forgezero.net";
+  return [bootstrapIdentityDigest(previous), legacyBootstrapIdentityDigest(previous)];
+}
 function interruptedPlatformReleaseIdentityDigests(config, releaseEvidence, bootstrapManifest) {
   if (!config.runtime.environment.initialInventory)
     return [];
@@ -14995,10 +15003,11 @@ async function applyBootstrap(input, host = localBootstrapHost(), secrets, depen
   if (installed) {
     const exactIdentity = installed.kind === config.kind && installed.identityDigest === bootstrapIdentityDigest(config);
     const boundedReleaseResume = config.kind === "platform" && !host.exists("/var/lib/forgezero/enrolment.json") && host.exists(BOOTSTRAP_RELEASE_EVIDENCE) && storedPlatformCoordinatesMatch(installed, config);
-    if (!exactIdentity && !boundedReleaseResume) {
+    const approvedIdentityMigration = config.kind === "platform" && storedPlatformCoordinatesMatch(installed, config) && approvedPlatformRepairIdentityDigests(config).includes(installed.identityDigest);
+    if (!exactIdentity && !boundedReleaseResume && !approvedIdentityMigration) {
       throw new Error("bootstrap repair coordinates do not match the installed host identity");
     }
-    allowInterruptedReleaseRebind = !exactIdentity && boundedReleaseResume;
+    allowInterruptedReleaseRebind = !exactIdentity && (boundedReleaseResume || approvedIdentityMigration);
   }
   const platformPrivate = config.kind === "platform" ? (() => {
     if (!secrets)

package/dist/metal-bootstrap.js

@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
 }
 
 // src/version.ts
-var VERSION = "0.1.94";
+var VERSION = "0.1.95";
 
 // src/otel-collector.ts
 var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";

package/dist/operator-bootstrap.js

@@ -1420,7 +1420,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
 var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
 
 // src/version.ts
-var VERSION = "0.1.94";
+var VERSION = "0.1.95";
 
 // src/software.ts
 var PINNED_BUN_VERSION = "1.3.14";
@@ -4290,6 +4290,14 @@ function bootstrapIdentityDigest(config) {
   return createHash2("sha256").update(JSON.stringify(bootstrapIdentity(config))).digest("hex");
 }
 var legacyBootstrapIdentityDigest = (config) => createHash2("sha256").update(JSON.stringify(bootstrapIdentity(config, true))).digest("hex");
+function approvedPlatformRepairIdentityDigests(config) {
+  if (config.environment !== "development" || config.telemetryEndpoint !== LOCAL_DEBUG_OTEL_EXPORT || config.runtime.environment.agentOtlpEndpoint !== "http://127.0.0.1:4318")
+    return [];
+  const previous = structuredClone(config);
+  previous.telemetryEndpoint = "https://otel.forgezero.net";
+  previous.runtime.environment.agentOtlpEndpoint = "https://otel.forgezero.net";
+  return [bootstrapIdentityDigest(previous), legacyBootstrapIdentityDigest(previous)];
+}
 function interruptedPlatformReleaseIdentityDigests(config, releaseEvidence, bootstrapManifest) {
   if (!config.runtime.environment.initialInventory)
     return [];
@@ -4610,10 +4618,11 @@ async function applyBootstrap(input, host = localBootstrapHost(), secrets, depen
   if (installed) {
     const exactIdentity = installed.kind === config.kind && installed.identityDigest === bootstrapIdentityDigest(config);
     const boundedReleaseResume = config.kind === "platform" && !host.exists("/var/lib/forgezero/enrolment.json") && host.exists(BOOTSTRAP_RELEASE_EVIDENCE) && storedPlatformCoordinatesMatch(installed, config);
-    if (!exactIdentity && !boundedReleaseResume) {
+    const approvedIdentityMigration = config.kind === "platform" && storedPlatformCoordinatesMatch(installed, config) && approvedPlatformRepairIdentityDigests(config).includes(installed.identityDigest);
+    if (!exactIdentity && !boundedReleaseResume && !approvedIdentityMigration) {
       throw new Error("bootstrap repair coordinates do not match the installed host identity");
     }
-    allowInterruptedReleaseRebind = !exactIdentity && boundedReleaseResume;
+    allowInterruptedReleaseRebind = !exactIdentity && (boundedReleaseResume || approvedIdentityMigration);
   }
   const platformPrivate = config.kind === "platform" ? (() => {
     if (!secrets)

package/dist/platform-fleet-verification.js

@@ -2908,7 +2908,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.94";
+var VERSION3 = "0.1.95";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/provision.js

@@ -2908,7 +2908,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
 }
 
 // src/version.ts
-var VERSION3 = "0.1.94";
+var VERSION3 = "0.1.95";
 
 // src/egress-policy.ts
 import { realpathSync as realpathSync3 } from "node:fs";

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** One package version shared by both public binaries. Pinned to package.json by tests. */
-export declare const VERSION = "0.1.94";
+export declare const VERSION = "0.1.95";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgezero/agent",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "type": "module",
   "scripts": {
     "check": "tsc --noEmit",