@layr-labs/ecloud-sdk 0.0.1-rfc.1 → 0.1.0-dev.1

package/package.json

@@ -1,12 +1,14 @@
 {
   "name": "@layr-labs/ecloud-sdk",
-  "version": "0.0.1-rfc.1",
+  "version": "0.1.0-dev.1",
   "type": "module",
   "main": "dist/index.js",
   "module": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
     "dist",
+    "tools",
+    "VERSION",
     "README.md"
   ],
   "exports": {
@@ -17,12 +19,12 @@
     }
   },
   "scripts": {
-    "build": "tsup && npm run build:copy-templates",
-    "build:copy-templates": "node scripts/copy-templates.js",
-    "test:build-type": "node test-build-type.js",
+    "build": "tsup",
+    "prepublishOnly": "cp ../../README.md .",
     "lint": "eslint .",
     "format": "prettier --check .",
-    "format:fix": "prettier --write ."
+    "format:fix": "prettier --write .",
+    "typecheck": "tsc --noEmit"
   },
   "dependencies": {
     "@inquirer/prompts": "^7.10.1",
@@ -34,7 +36,7 @@
     "handlebars": "^4.7.8",
     "jose": "^6.1.2",
     "js-yaml": "^4.1.1",
-    "node-forge": "^1.3.1",
+    "node-forge": "^1.3.2",
     "viem": "^2.38.6"
   },
   "devDependencies": {

package/dist/keys/mainnet-alpha/prod/kms-encryption-public-key.pem

@@ -1,14 +0,0 @@
------BEGIN PUBLIC KEY-----
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0kHU86k17ofCIGcJKDcf
-AFurFhSLeWmOL0bwWLCeVnTPG0MMHtJOq+woE0XXSWw6lzm+jzavBBTwKde1dgal
-Ap91vULAZFMUpiUdd2dNUVtvU89qW0Pgf1Eu5FDj7BkY/SnyECbWJM4ga0BmpiGy
-nQwLNN9mMGhjVoVLn2zwEGZ7JzS9Nz11EZKO/k/9DcO6LaoIFmKuvVf3jl6lvZg8
-aeA0LoZXjkycHlRUt/kfKwZnhakUaYHP1ksV7ZNmolS5GYDTSKGB2KPPNR1s4/Xu
-u8zeEFC8HuGRU8XuuBeaAunitnGhbNVREUNJGff6HZOGB6CIFNXjbQETeZ3p5uro
-0v+hd1QqQYBv7+DEaMCmGnJNGAyIMr2mn4vr7wGsIj0HonlSHmQ8rmdUhL2ocNTc
-LhKgZiZmBuDpSbFW/r53R2G7CHcqaqGeUBnT54QCH4zsYKw0/4dOtwFxQpTyBf9/
-+k+KaWEJYKkx9d9OzKGyAvzrTDVOFoajddiJ6LPvRlMdOUQr3hl4IAC0/nh9lhHq
-D0R+i5WAU96TkdAe7B7iTGH2D22k0KUPR6Q9W3aF353SLxQAMPNrgG4QQufAdRJn
-AF+8ntun5TkTqjTWRSwAsUJZ1z4wb96DympWJbDi0OciJRZ3Fz3j9+amC43yCHGg
-aaEMjdt35ewbztUSc04F10MCAwEAAQ==
------END PUBLIC KEY-----

package/dist/keys/mainnet-alpha/prod/kms-signing-public-key.pem

@@ -1,4 +0,0 @@
------BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfxbhXJjH4D0DH/iW5/rK1HzWS+f9
-EyooZTrCYjCfezuOEmRuOWNaZLvwXN8SdzrvjWA7gSvOS85hLzp4grANRQ==
------END PUBLIC KEY-----

package/dist/keys/sepolia/dev/kms-encryption-public-key.pem

@@ -1,14 +0,0 @@
------BEGIN PUBLIC KEY-----
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr/vqttU6aXX35HtsXavU
-5teysunDzZB3HyaFM4qcuRnqj+70KxqLOwZsERN5SwZ/56Jm8T2ds1CcXsQCMUMw
-+MPlsF6KMGfzghLtYHONwvKLnn+U9y886aAay6W8a0A7O7YCZehNYD3kQnCXjOIc
-Mj6v8AEvMw+w/lNabjRXnwSBMKVIGp/cSL0hGwt8fGoC3TsxQN9opzvU1Z4rAw9K
-a119l6dlPnqezDva378TCaXDjqKe/jSZOI1CcYpaSK2SJ+95Wbvte5j3lXbg1oT2
-0rXeJUHEJ68QxMtJplfw0Sg+Ek4CUJ2c/kbdg0u7sIIO5wcB4WHL/Lfbw2XPmcBI
-t0r0EC575D3iHF/aI01Ms2IRA0GDeHnNcr5FJLWJljTjNLEt4tFITrXwBe1Ealm3
-NCxamApl5bBSwQ72Gb5fiQFwB8Fl2/XG3wfGTFInFEvWE4c/H8dtu1wHTsyEFZcG
-B47IkD5GBSZq90Hd9xuZva55dxGpqUVrEJO88SqHGP9Oa+HLTYdEe5AR5Hitw4Mu
-dk1cCH+X5OqY9dfpdoCNbKAM0N2SJvNAnDTU2JKGYheXrnDslXR6atBmU5gDkH+W
-QVryDYl9xbwWIACMQsAQjrrtKw5xqJ4V89+06FN/wyEVF7KWAcJ4AhKiVnCvLqzb
-BbISc+gOkRsefhCDJVPEKDkCAwEAAQ==
------END PUBLIC KEY-----

package/dist/keys/sepolia/dev/kms-signing-public-key.pem

@@ -1,4 +0,0 @@
------BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb2Q88/cxdic2xi4jS2V0dtYHjLwq
-4wVFBFmaY8TTXoMXNggKEdU6PuE8EovocVKMpw3SIlaM27z9uxksNVL2xw==
------END PUBLIC KEY-----

package/dist/keys/sepolia/prod/kms-encryption-public-key.pem

@@ -1,14 +0,0 @@
------BEGIN PUBLIC KEY-----
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApDvk8pAivkgtiC5li5MP
-xMTJDduTeorBl18ynrooTxp2BwwgPwXfXbJaCA0qRubvc0aO2uh2VDrPM27CqMLH
-o2S9YLtpLii4A1Nl7SE/MdWKWdG6v94xNGpc2YyPP7yWtHfqOkgDWp8sokl3Uq/9
-MS0pjUaI7RyS5boCTy8Qw90BxGMpucjOmqm+luw4EdPWZCrgriUR2bbGRRgAmrT1
-K4ou4IgPp799r120hwHbCWxnOvLdQdpiv2507b900xS/3yZahhnHCAn66146LU/f
-BrRpQKSM0qSpktXrrc9MH/ru2VLR5cGLp89ZcZMQA9cRGglWM5XWVY3Ti2TPJ6Kd
-An1d7qNkGJaSdVa3x3HkOf6c6HeTyqis5/L/6L+PFhUsTRbmKg1FtwD+3xxdyf7h
-abFxryE9rv+WatHL6r6z5ztV0znJ/Fpfs5A45FWA6pfb28fA59RGpi/DQ8RxgdCH
-nZRNvdz8dTgRaXSPgkfGXBcCFqb/QhFmad7XbWDthGzfhbPOxNPtiaGRQ1Dr/Pgq
-n0ugdLbRQLmDOAFgaQcnr0U4y1TUlWJnvoZMETkVN7gmITtXA4F324ALT7Rd+Lgk
-HikW5vG+NjAEwXfPsK0YzT+VbHd7o1lbru9UxiDlN03XVEkz/oRQi47CvSTo3FSr
-5dB4lz8kov3UUcNJfQFZolMCAwEAAQ==
------END PUBLIC KEY-----

package/dist/keys/sepolia/prod/kms-signing-public-key.pem

@@ -1,4 +0,0 @@
------BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEsk6ZdmmvBqFfKHs+1cYjIemRGN7h
-1NatIEitFRyx+3q8wmTJ9LknTE1FwWBLcCNTseJDti8Rh+SaVxfGOyJuuA==
------END PUBLIC KEY-----

package/dist/templates/Dockerfile.layered.tmpl

@@ -1,58 +0,0 @@
-{{#if includeTLS}}
-# Get Caddy from official image
-FROM caddy:2.10.2-alpine AS caddy
-{{/if}}
-
-FROM {{baseImage}}
-
-{{#if originalUser}}
-# Switch to root to perform setup (base image has non-root USER: {{originalUser}})
-USER root
-{{/if}}
-
-# Copy core TEE components
-COPY compute-source-env.sh /usr/local/bin/
-COPY kms-client /usr/local/bin/
-COPY kms-signing-public-key.pem /usr/local/bin/
-
-{{#if includeTLS}}
-# Copy Caddy from official image
-COPY --from=caddy /usr/bin/caddy /usr/local/bin/caddy
-
-# Copy TLS components
-COPY tls-keygen /usr/local/bin/
-COPY Caddyfile /etc/caddy/
-{{/if}}
-
-{{#if originalUser}}
-# Make binaries executable (755 for executables, 644 for keys)
-RUN chmod 755 /usr/local/bin/compute-source-env.sh \
-    && chmod 755 /usr/local/bin/kms-client{{#if includeTLS}} \
-    && chmod 755 /usr/local/bin/tls-keygen \
-    && chmod 755 /usr/local/bin/caddy{{/if}} \
-    && chmod 644 /usr/local/bin/kms-signing-public-key.pem
-
-# Switch back to the original user from base image
-USER {{originalUser}}
-{{else}}
-# Make binaries executable (preserve existing permissions, just add execute)
-RUN chmod +x /usr/local/bin/compute-source-env.sh \
-    && chmod +x /usr/local/bin/kms-client{{#if includeTLS}} \
-    && chmod +x /usr/local/bin/tls-keygen{{/if}}
-{{/if}}
-
-{{#if logRedirect}}
-
-LABEL tee.launch_policy.log_redirect={{logRedirect}}
-{{/if}}
-
-LABEL eigenx_cli_version={{ecloudCLIVersion}}
-LABEL eigenx_use_ita=True
-
-{{#if includeTLS}}
-# Expose both HTTP and HTTPS ports for Caddy
-EXPOSE 80 443
-{{/if}}
-
-ENTRYPOINT ["/usr/local/bin/compute-source-env.sh"]
-CMD {{{originalCmd}}}

package/dist/templates/compute-source-env.sh.tmpl

@@ -1,110 +0,0 @@
-#!/bin/sh
-echo "compute-source-env.sh: Running setup script..."
-
-# Fetch and source environment variables from KMS
-echo "Fetching secrets from KMS..."
-if /usr/local/bin/kms-client \
-  --kms-server-url "{{kmsServerURL}}" \
-  --kms-signing-key-file /usr/local/bin/kms-signing-public-key.pem \
-  --userapi-url "{{userAPIURL}}" \
-  --output /tmp/.env; then
-    echo "compute-source-env.sh: Successfully fetched environment variables from KMS"
-    set -a && . /tmp/.env && set +a
-    rm -f /tmp/.env
-else
-    echo "compute-source-env.sh: ERROR - Failed to fetch environment variables from KMS"
-    echo "compute-source-env.sh: Exiting - cannot start user workload without KMS secrets"
-    exit 1
-fi
-
-# Setup TLS if tls-keygen is present (which means TLS was configured at build time)
-setup_tls() {
-    # If tls-keygen isn't present, TLS wasn't configured during build
-    if [ ! -x /usr/local/bin/tls-keygen ]; then
-        echo "compute-source-env.sh: TLS not configured (no tls-keygen binary)"
-        return 0
-    fi
-    
-    local domain="${DOMAIN:-}"
-    local mnemonic="${MNEMONIC:-}"
-    
-    # Since tls-keygen is present, TLS is expected - validate requirements
-    if [ -z "$domain" ] || [ "$domain" = "localhost" ]; then
-        echo "compute-source-env.sh: ERROR - TLS binary present but DOMAIN not configured or is localhost"
-        echo "compute-source-env.sh: Set DOMAIN environment variable to a valid domain"
-        exit 1
-    fi
-    
-    if [ -z "$mnemonic" ]; then
-        echo "compute-source-env.sh: ERROR - TLS binary present but MNEMONIC not available"
-        echo "compute-source-env.sh: Cannot obtain TLS certificate without mnemonic"
-        exit 1
-    fi
-    
-    if [ ! -x /usr/local/bin/caddy ]; then
-        echo "compute-source-env.sh: ERROR - TLS binary present but Caddy not found"
-        exit 1
-    fi
-    
-    echo "compute-source-env.sh: Setting up TLS for domain: $domain"
-    
-    # Obtain TLS certificate using ACME
-    # Default to http-01, but allow override via ACME_CHALLENGE env var
-    local challenge="${ACME_CHALLENGE:-http-01}"
-    
-    # Check if we should use staging (for testing)
-    local staging_flag=""
-    if [ "${ACME_STAGING:-false}" = "true" ]; then
-        staging_flag="-staging"
-        echo "compute-source-env.sh: Using Let's Encrypt STAGING environment (certificates won't be trusted)"
-    fi
-    
-    echo "compute-source-env.sh: Obtaining TLS certificate using $challenge challenge..."
-    # Pass the API URL for certificate persistence
-    if ! MNEMONIC="$mnemonic" DOMAIN="$domain" API_URL="{{userAPIURL}}" /usr/local/bin/tls-keygen \
-        -challenge "$challenge" \
-        $staging_flag; then
-        echo "compute-source-env.sh: ERROR - Failed to obtain TLS certificate"
-        echo "compute-source-env.sh: Certificate issuance failed for $domain"
-        exit 1
-    fi
-    
-    echo "compute-source-env.sh: TLS certificate obtained successfully"
-    
-    # Validate Caddyfile before starting
-    if ! /usr/local/bin/caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile 2>/dev/null; then
-        echo "compute-source-env.sh: ERROR - Invalid Caddyfile"
-        echo "compute-source-env.sh: TLS was requested (DOMAIN=$domain) but setup failed"
-        exit 1
-    fi
-    
-    # Start Caddy in background
-    echo "compute-source-env.sh: Starting Caddy reverse proxy..."
-    
-    # Check if Caddy logs should be enabled
-    if [ "${ENABLE_CADDY_LOGS:-false}" = "true" ]; then
-        if ! /usr/local/bin/caddy start --config /etc/caddy/Caddyfile --adapter caddyfile 2>&1; then
-            echo "compute-source-env.sh: ERROR - Failed to start Caddy"
-            echo "compute-source-env.sh: TLS was requested (DOMAIN=$domain) but setup failed"
-            exit 1
-        fi
-    else
-        # Redirect Caddy output to /dev/null to silence logs
-        if ! /usr/local/bin/caddy start --config /etc/caddy/Caddyfile --adapter caddyfile >/dev/null 2>&1; then
-            echo "compute-source-env.sh: ERROR - Failed to start Caddy"
-            echo "compute-source-env.sh: TLS was requested (DOMAIN=$domain) but setup failed"
-            exit 1
-        fi
-    fi
-    
-    # Give Caddy a moment to fully initialize
-    sleep 2
-    echo "compute-source-env.sh: Caddy started successfully"
-    return 0
-}
-
-# Run TLS setup
-setup_tls
-
-echo "compute-source-env.sh: Environment sourced."
-exec "$@"