@le-space/shared-types 0.9.9 → 0.11.0

package/index.d.ts

@@ -86,6 +86,23 @@ interface CrnRecord {
     resolved_ip?: string | null;
     geo_source?: string | null;
     system_usage?: CrnSystemUsage | null;
+    /** Registered owner of the node (corechannel aggregate). */
+    owner?: string | null;
+    /** Where the node's rewards go (crns.json); names the operator when owner is absent. */
+    payment_receiver_address?: string | null;
+    /** aleph-vm version, from crns.json or the node's /status/config. */
+    version?: string | null;
+    /** crns.json's flag; does not say whether SEV-SNP or only SEV / SEV-ES. */
+    confidential_support?: boolean;
+    /** CPU features from /about/usage/system, e.g. ["sev", "sev_es", "sev_snp"]. */
+    cpu_features?: string[] | null;
+    /** TEE properties from /about/usage/system; present for SEV-SNP nodes. */
+    tee?: CrnTeeProperties | null;
+}
+interface CrnTeeProperties {
+    sev_snp?: {
+        supported_vcpu_types?: string[];
+    };
 }
 type ReferenceStatus = 'processed' | 'pending' | 'rejected' | 'removing' | 'removed' | 'unknown' | 'missing';
 interface RuntimeMetadata {
@@ -184,7 +201,7 @@ interface DeploymentResult {
     response?: AlephBroadcastResponse;
     rejectionReason?: string | null;
 }
-type DeploymentProgressStage = "idle" | "validating" | "loading-manifest" | "verifying-rootfs" | "loading-pricing" | "loading-balance" | "selecting-crn" | "building-message" | "signing-message" | "broadcasting" | "notifying-crn" | "waiting-for-aleph" | "deployment-confirmed" | "deployment-rejected" | "publishing-bootstrap" | "building-delete-message" | "signing-delete-message" | "broadcasting-delete" | "delete-completed" | "refreshing-instances" | "completed" | "error";
+type DeploymentProgressStage = "idle" | "validating" | "loading-manifest" | "verifying-rootfs" | "loading-pricing" | "loading-balance" | "selecting-crn" | "building-message" | "signing-message" | "broadcasting" | "notifying-crn" | "preparing-confidential" | "attesting-guest" | "unlocking-guest" | "waiting-for-aleph" | "deployment-confirmed" | "deployment-rejected" | "publishing-bootstrap" | "building-delete-message" | "signing-delete-message" | "broadcasting-delete" | "delete-completed" | "refreshing-instances" | "completed" | "error";
 interface DeploymentProgressEvent {
     stage: DeploymentProgressStage;
     label: string;
@@ -224,6 +241,33 @@ interface AlephAggregateContent<T = Record<string, unknown>> {
     content: T;
     time: number;
 }
+/** TEE mode on the wire; absent or "sev" is the legacy SEV / SEV-ES flow. */
+type TeeMode = "sev" | "sev_snp" | "tdx";
+/** Expected launch registers of a measured mode (sev_snp declares `launch`). */
+interface LaunchMeasurement {
+    platform: "sev_snp" | "tdx";
+    registers: Record<string, string>;
+    /** QEMU CPU model the registers were computed for, e.g. "EPYC-v4". */
+    vcpu_type?: string;
+}
+/**
+ * `environment.trusted_execution` of a confidential instance, as aleph-rs
+ * (`aleph-types`, TrustedExecutionEnvironment) serialises it. Legacy SEV uses
+ * `firmware` and `policy`; the measured modes (sev_snp, tdx) need `runtime`
+ * and `measurements` instead.
+ */
+interface TrustedExecution {
+    /** OVMF firmware item hash (legacy SEV only). */
+    firmware?: string;
+    /** AMD SEV policy bits (legacy) or the SEV-SNP 64-bit guest policy. */
+    policy?: number;
+    mode?: TeeMode;
+    /** STORE item hash of the measured runtime bundle (measured modes only). */
+    runtime?: string;
+    measurements?: LaunchMeasurement[];
+    /** In-guest attestation port; the runtime bundle's default (8443) if absent. */
+    attestation_port?: number;
+}
 interface AlephInstanceContent {
     address: string;
     time: number;
@@ -239,7 +283,7 @@ interface AlephInstanceContent {
         reproducible?: boolean;
         shared_cache?: boolean;
         hypervisor: "qemu";
-        trusted_execution?: Record<string, unknown>;
+        trusted_execution?: TrustedExecution;
     };
     resources: {
         vcpus: number;
@@ -354,4 +398,4 @@ interface UcanStoreBootstrapValidationResult {
 }
 declare function validateUcanStoreBootstrapPackage(value: unknown): UcanStoreBootstrapValidationResult;
 
-export { type AlephAggregateContent, type AlephBroadcastMessage, type AlephBroadcastResponse, type AlephInstanceContent, type AlephMessageType, type AlephSenderChain, type CrnRecord, type CrnSystemUsage, type DeploymentInspectionResult, type DeploymentIntent, type DeploymentIntentEnvelope, type DeploymentProgressEvent, type DeploymentProgressListener, type DeploymentProgressStage, type DeploymentResult, type GatewayProbeStatus, type InstanceAllocation, type InstanceAllocationNode, type InstanceAllocationPeriod, type InstanceExecution, type InstanceExecutionNetworking, type InstanceExecutionStatus, type InstanceRuntimeDetails, type InstanceWebAccess, type MessageHasher, type MessageInspectionResult, type MessageReference, type MessageSigner, type MessageStatus, type PortForwardAggregate, type PortForwardAggregateEntry, type PortForwardFlags, type PortMapping, type ReferenceStatus, type RootfsInstallStrategy, type RootfsManifest, type RootfsManifestState, type RootfsRequiredPortForward, type RootfsResolution, type RuntimeDiagnostics, type RuntimeMetadata, type UcanStoreBootstrapPackage, type UcanStoreBootstrapValidationResult, type VmBootstrapConfigAggregate, type VmBootstrapConfigBootstrap, type VmBootstrapConfigRecord, type VmBootstrapConfigRuntime, type VmBootstrapConfigSignalRecord, type VmBootstrapConfigSignalType, type VmBootstrapConfigStatus, validateUcanStoreBootstrapPackage };
+export { type AlephAggregateContent, type AlephBroadcastMessage, type AlephBroadcastResponse, type AlephInstanceContent, type AlephMessageType, type AlephSenderChain, type CrnRecord, type CrnSystemUsage, type CrnTeeProperties, type DeploymentInspectionResult, type DeploymentIntent, type DeploymentIntentEnvelope, type DeploymentProgressEvent, type DeploymentProgressListener, type DeploymentProgressStage, type DeploymentResult, type GatewayProbeStatus, type InstanceAllocation, type InstanceAllocationNode, type InstanceAllocationPeriod, type InstanceExecution, type InstanceExecutionNetworking, type InstanceExecutionStatus, type InstanceRuntimeDetails, type InstanceWebAccess, type LaunchMeasurement, type MessageHasher, type MessageInspectionResult, type MessageReference, type MessageSigner, type MessageStatus, type PortForwardAggregate, type PortForwardAggregateEntry, type PortForwardFlags, type PortMapping, type ReferenceStatus, type RootfsInstallStrategy, type RootfsManifest, type RootfsManifestState, type RootfsRequiredPortForward, type RootfsResolution, type RuntimeDiagnostics, type RuntimeMetadata, type TeeMode, type TrustedExecution, type UcanStoreBootstrapPackage, type UcanStoreBootstrapValidationResult, type VmBootstrapConfigAggregate, type VmBootstrapConfigBootstrap, type VmBootstrapConfigRecord, type VmBootstrapConfigRuntime, type VmBootstrapConfigSignalRecord, type VmBootstrapConfigSignalType, type VmBootstrapConfigStatus, validateUcanStoreBootstrapPackage };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@le-space/shared-types",
-  "version": "0.9.9",
+  "version": "0.11.0",
   "description": "Shared type contracts for the Relay Button tooling monorepo.",
   "license": "MIT",
   "type": "module",