@le-space/ui 0.3.21 → 0.3.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@le-space/ui",
-  "version": "0.3.21",
+  "version": "0.3.23",
   "description": "Floating Aleph sponsor relay UI components for Svelte and React.",
   "license": "MIT",
   "type": "module",
@@ -36,8 +36,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@le-space/browser": "0.3.21",
-    "@le-space/core": "0.3.21",
+    "@le-space/browser": "0.3.23",
+    "@le-space/core": "0.3.23",
     "viem": "^2.38.5"
   },
   "peerDependencies": {

package/react/index.js

@@ -39,7 +39,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.3.21";
+var UI_PACKAGE_VERSION = "0.3.23";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -2152,6 +2152,31 @@ var DEFAULT_ALEPH_BOOTSTRAP_REF = "simple-todo-bootstrap";
 var DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE = "relay-bootstrap";
 var DEFAULT_BOOTSTRAP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 var DEFAULT_BOOTSTRAP_PAGINATION = 50;
+var RELAY_BOOTSTRAP_SIGNATURE_SCHEME = "personal_sign";
+function serializeOwnerAuthorizationPayload(payload) {
+  return JSON.stringify({
+    ownerAddress: payload.ownerAddress,
+    publisherAddress: payload.publisherAddress,
+    peerId: payload.peerId,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    instanceItemHash: payload.instanceItemHash,
+    issuedAt: payload.issuedAt,
+    expiresAt: payload.expiresAt
+  });
+}
+function serializeRelayProofPayload(payload) {
+  return JSON.stringify({
+    peerId: payload.peerId,
+    multiaddrs: dedupeMultiaddrs(payload.multiaddrs),
+    browserMultiaddrs: payload.browserMultiaddrs ? dedupeMultiaddrs(payload.browserMultiaddrs) : void 0,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    updatedAt: payload.updatedAt
+  });
+}
 function asTrimmedString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -2163,9 +2188,48 @@ function asNumber4(value) {
   }
   return null;
 }
+function normalizeHost(host) {
+  return host.trim().toLowerCase();
+}
 function normalizeAddress(address) {
   return address.trim().toLowerCase();
 }
+function normalizeSignature(signature) {
+  const trimmed = signature.trim();
+  return trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
+}
+function splitMultiaddr(addr) {
+  return addr.split("/").filter(Boolean);
+}
+function isPrivateIpv4(ip) {
+  const parts = ip.split(".").map((part) => Number(part));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  if (parts[0] === 10) return true;
+  if (parts[0] === 127) return true;
+  if (parts[0] === 0) return true;
+  if (parts[0] === 169 && parts[1] === 254) return true;
+  if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) return true;
+  if (parts[0] === 192 && parts[1] === 168) return true;
+  if (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127) return true;
+  return false;
+}
+function isPrivateIpv6(ip) {
+  const normalized = ip.trim().toLowerCase();
+  return normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe8") || normalized.startsWith("fe9") || normalized.startsWith("fea") || normalized.startsWith("feb");
+}
+function isLocalHostname(host) {
+  const normalized = normalizeHost(host);
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local");
+}
+function hasPeerId(addr) {
+  return splitMultiaddr(addr).includes("p2p");
+}
+function isBrowserDialableMultiaddr(addr) {
+  const normalized = addr.toLowerCase();
+  return normalized.includes("/ws") || normalized.includes("/wss") || normalized.includes("/webtransport") || normalized.includes("/webrtc-direct");
+}
 function dedupeMultiaddrs(addrs) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
@@ -2177,6 +2241,33 @@ function dedupeMultiaddrs(addrs) {
   }
   return result;
 }
+function isPublicMultiaddr(addr) {
+  const parts = splitMultiaddr(addr);
+  for (let index = 0; index < parts.length; index += 1) {
+    const protocol = parts[index];
+    const value = parts[index + 1];
+    if (protocol === "ip4" && value) {
+      return !isPrivateIpv4(value);
+    }
+    if (protocol === "ip6" && value) {
+      return !isPrivateIpv6(value);
+    }
+    if ((protocol === "dns4" || protocol === "dns6" || protocol === "dnsaddr") && value) {
+      return !isLocalHostname(value);
+    }
+  }
+  return false;
+}
+function filterPublicMultiaddrs(addrs, options = {}) {
+  return dedupeMultiaddrs(addrs).filter((addr) => {
+    if (!isPublicMultiaddr(addr)) return false;
+    if (options.requirePeerId !== false && !hasPeerId(addr)) return false;
+    if (options.browserDialableOnly && !isBrowserDialableMultiaddr(addr)) {
+      return false;
+    }
+    return true;
+  });
+}
 function normalizeRelayBootstrapContent(value) {
   if (!value || typeof value !== "object") return null;
   const content = value;
@@ -2271,6 +2362,104 @@ function normalizeRelayBootstrapPostRecord(value) {
     content: normalizeRelayBootstrapContent(entry.content)
   };
 }
+function buildRelayBootstrapPostContent(args) {
+  const now = args.now ?? Date.now() / 1e3;
+  const updatedAt = args.now ?? Date.now();
+  return {
+    type: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    address: args.sender,
+    ...args.ref ? { ref: args.ref } : {},
+    content: {
+      peerId: args.peerId,
+      multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+      browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+        browserDialableOnly: true
+      }) : void 0,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      ownerAddress: args.ownerAddress,
+      publisherAddress: args.publisherAddress,
+      authorization: args.authorization,
+      relayProof: args.relayProof,
+      updatedAt: Math.round(updatedAt)
+    },
+    time: now
+  };
+}
+async function createRelayBootstrapPost(args) {
+  const nowMillis = args.now ?? Date.now();
+  const nowSeconds = nowMillis / 1e3;
+  const itemContent = buildRelayBootstrapPostContent({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    ref: args.ref ?? DEFAULT_ALEPH_BOOTSTRAP_REF,
+    postType: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    authorization: args.authorization,
+    relayProof: args.relayProof,
+    now: nowMillis
+  });
+  itemContent.time = nowSeconds;
+  const serialized = JSON.stringify(itemContent);
+  const itemHash = await args.hasher(serialized);
+  return {
+    channel: args.channel ?? DEFAULT_ALEPH_BOOTSTRAP_CHANNEL,
+    sender: args.sender,
+    chain: "ETH",
+    type: "POST",
+    time: nowSeconds,
+    item_type: "inline",
+    item_content: serialized,
+    item_hash: itemHash
+  };
+}
+async function signRelayBootstrapAuthorization(args) {
+  const payload = {
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    peerId: args.peerId,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    instanceItemHash: args.instanceItemHash,
+    issuedAt: args.issuedAt ?? Date.now(),
+    expiresAt: args.expiresAt
+  };
+  const serialized = serializeOwnerAuthorizationPayload(payload);
+  const signature = await args.signer(args.ownerAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
+async function signRelayBootstrapProof(args) {
+  const payload = {
+    peerId: args.peerId,
+    multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+    browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+      browserDialableOnly: true
+    }) : void 0,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    updatedAt: args.updatedAt ?? Date.now()
+  };
+  const serialized = serializeRelayProofPayload(payload);
+  const signature = await args.signer(args.publisherAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
 async function fetchAlephBootstrapPosts(options = {}) {
   const fetchImpl = options.fetch ?? globalThis.fetch?.bind(globalThis);
   if (typeof fetchImpl !== "function") {
@@ -2389,6 +2578,109 @@ async function waitForRelayBootstrapRegistration(args) {
   }
   return null;
 }
+async function publishRelayBootstrapRegistration(args) {
+  const publisherAddress = args.publisherAddress ?? args.sender;
+  const ownerAddress = args.ownerAddress;
+  let ownerAuthorization = args.ownerAuthorization;
+  let relayProof = args.relayProof;
+  if (!ownerAuthorization && ownerAddress && args.ownerSigner) {
+    ownerAuthorization = await signRelayBootstrapAuthorization({
+      ownerAddress,
+      publisherAddress,
+      peerId: args.peerId,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      instanceItemHash: args.instanceItemHash,
+      issuedAt: args.authorizationIssuedAt ?? args.now ?? Date.now(),
+      expiresAt: args.authorizationExpiresAt,
+      signer: args.ownerSigner
+    });
+  }
+  if (!relayProof && args.publisherSigner) {
+    relayProof = await signRelayBootstrapProof({
+      publisherAddress,
+      peerId: args.peerId,
+      multiaddrs: args.multiaddrs,
+      browserMultiaddrs: args.browserMultiaddrs,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      updatedAt: args.now ?? Date.now(),
+      signer: args.publisherSigner
+    });
+  }
+  const unsigned = await createRelayBootstrapPost({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    channel: args.channel,
+    ref: args.ref,
+    postType: args.postType,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress,
+    publisherAddress,
+    authorization: ownerAuthorization,
+    relayProof,
+    now: args.now,
+    hasher: args.hasher
+  });
+  const content = JSON.parse(unsigned.item_content);
+  if ((content.content?.multiaddrs?.length ?? 0) === 0) {
+    return {
+      status: "skipped",
+      reason: "No public relay multiaddrs remained after filtering.",
+      publishedMultiaddrs: [],
+      publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? []
+    };
+  }
+  const message = await signAlephMessage(unsigned, args.signer);
+  const { response, httpStatus } = await broadcastAlephMessage2(message, {
+    apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+    sync: args.sync ?? true,
+    fetch: args.fetch
+  });
+  let forgottenHashes = [];
+  let forgetResult;
+  if (args.forgetPrevious && args.registrationId) {
+    const previousPosts = await fetchAlephBootstrapPosts({
+      apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+      channel: args.channel,
+      ref: args.ref,
+      postType: args.postType,
+      fetch: args.fetch
+    });
+    forgottenHashes = previousPosts.filter(
+      (post) => post.address?.toLowerCase() === args.sender.toLowerCase() && post.content?.registrationId === args.registrationId && (post.itemHash ?? post.hash) != null && (post.itemHash ?? post.hash) !== unsigned.item_hash
+    ).map((post) => post.itemHash ?? post.hash ?? "").filter(Boolean);
+    if (forgottenHashes.length > 0) {
+      forgetResult = await forgetAlephMessages({
+        sender: args.sender,
+        hashes: forgottenHashes,
+        reason: args.forgetPreviousReason ?? `Replace older relay bootstrap records for ${args.registrationId}`,
+        signer: args.signer,
+        hasher: args.hasher,
+        fetch: args.fetch,
+        apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+        sync: args.sync ?? true
+      });
+    }
+  }
+  return {
+    status: "published",
+    itemHash: unsigned.item_hash,
+    message,
+    response,
+    httpStatus,
+    publishedMultiaddrs: content.content?.multiaddrs ?? [],
+    publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? [],
+    forgottenHashes,
+    forgetResult
+  };
+}
 
 // ../core/src/bootstrap-config.ts
 var VM_BOOTSTRAP_CONFIG_AGGREGATE_KEY = "vm-bootstrap-config";
@@ -3216,9 +3508,61 @@ var SponsorRelayController = class {
       visibleRegistration
     });
     if (!visibleRegistration) {
-      throw new Error(
-        "Relay bootstrap registration did not become visible on Aleph."
-      );
+      this.trace("deploy:bootstrap-registration-fallback-start", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        probeMultiaddrCount: relayMetadata.probeMultiaddrs.length,
+        browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
+      });
+      this.emitProgress({
+        stage: "publishing-bootstrap",
+        label: "Publishing bootstrap fallback",
+        progress: 98,
+        status: "warning",
+        itemHash: args.itemHash,
+        detail: "Guest bootstrap registration was delayed. Publishing the relay bootstrap record from the browser."
+      });
+      const fallbackPublication = await publishRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        signer: personalSign,
+        hasher: sha256Hex,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        peerId,
+        multiaddrs: relayMetadata.probeMultiaddrs,
+        browserMultiaddrs: relayMetadata.browserBootstrapMultiaddrs,
+        registrationId,
+        profile,
+        sync: true,
+        forgetPrevious: true
+      });
+      this.trace("deploy:bootstrap-registration-fallback-published", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackPublication
+      });
+      const fallbackVisibleRegistration = await waitForRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        registrationId,
+        peerId,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        attempts: 24,
+        delayMs: 2500
+      });
+      this.trace("deploy:bootstrap-registration-fallback-visible", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackVisibleRegistration
+      });
+      if (!fallbackVisibleRegistration) {
+        throw new Error(
+          "Relay bootstrap registration did not become visible on Aleph."
+        );
+      }
     }
     if (profile === "uc-go-peer" && args.deploymentToken) {
       await deleteVmBootstrapConfig({
@@ -4200,6 +4544,12 @@ function progressBadgeLabel(stage) {
   }
 }
 var COMPLETED_PROGRESS_VISIBLE_MS = 12e3;
+var POLLING_STAGES = /* @__PURE__ */ new Set([
+  "waiting-for-aleph",
+  "deployment-confirmed",
+  "publishing-bootstrap",
+  "refreshing-instances"
+]);
 function isDeploymentProgressVisible(state) {
   const stage = state.deploymentProgress.stage;
   if (stage === "idle") {
@@ -4213,6 +4563,21 @@ function isDeploymentProgressVisible(state) {
   }
   return true;
 }
+function pollingIndicator(state) {
+  if (state.busy.refreshing) {
+    return {
+      label: "Checking relay state",
+      detail: state.statusText || "Refreshing relay sponsor data from Aleph and the selected CRN."
+    };
+  }
+  if (!POLLING_STAGES.has(state.deploymentProgress.stage)) {
+    return null;
+  }
+  return {
+    label: state.deploymentProgress.label || "Polling relay state",
+    detail: state.deploymentProgress.detail || state.statusText || "Waiting for the next confirmed relay state from Aleph."
+  };
+}
 function launcherIndicator(state) {
   if (state.deploymentProgress.stage !== "idle" && state.deploymentProgress.stage !== "completed") {
     return {
@@ -4354,6 +4719,7 @@ function SponsorRelayFab(props) {
   }, [launcherMode]);
   const progressActive = state.deploymentProgress.stage !== "idle" && state.deploymentProgress.stage !== "completed" && state.deploymentProgress.stage !== "error";
   const deploymentProgressVisible = isDeploymentProgressVisible(state);
+  const pollingState = pollingIndicator(state);
   const pulseScale = progressActive ? 1.03 : hovered ? 1.015 : 1;
   const pulseShadow = progressActive ? `0 0 0 4px ${progressToneColor(indicator.tone)}22, 0 12px 28px rgba(15, 23, 42, 0.22)` : successFlash ? `0 0 0 5px rgba(55, 214, 122, 0.22), 0 14px 32px rgba(55, 214, 122, 0.22)` : launcherMode === "inline" ? hovered ? "var(--le-space-sponsor-relay-launcher-hover-shadow, 0 14px 30px rgba(79, 70, 229, 0.28))" : "var(--le-space-sponsor-relay-launcher-shadow, 0 10px 24px rgba(99, 102, 241, 0.22))" : void 0;
   const inlineButtonBackground = themedLauncherBackground;
@@ -4374,6 +4740,7 @@ function SponsorRelayFab(props) {
   };
   const launcherLabel = launcherMode === "inline" && compactInlineLabel ? "Relay" : "Sponsor Relay";
   return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx("style", { children: `@keyframes leSpaceRelayPulse { 0%, 100% { transform: scale(1); opacity: 0.74; } 50% { transform: scale(1.22); opacity: 1; } }` }),
     /* @__PURE__ */ jsxs(
       "button",
       {
@@ -4468,7 +4835,8 @@ function SponsorRelayFab(props) {
                       background: progressToneColor(indicator.tone),
                       boxShadow: `0 0 0 ${progressActive ? "4px" : "3px"} ${progressToneColor(indicator.tone)}22`,
                       transform: `scale(${progressActive ? 1.12 : successFlash ? 1.18 : 1})`,
-                      transition: "transform 180ms ease, box-shadow 220ms ease"
+                      transition: "transform 180ms ease, box-shadow 220ms ease",
+                      animation: pollingState ? "leSpaceRelayPulse 1.6s ease-in-out infinite" : void 0
                     }
                   }
                 ),
@@ -4550,6 +4918,52 @@ function SponsorRelayFab(props) {
         ),
         /* @__PURE__ */ jsx("p", { style: { color: "#9fb2ca" }, children: state.statusText }),
         state.errorText ? /* @__PURE__ */ jsx("p", { style: { color: "#ffd9d9" }, children: state.errorText }) : null,
+        pollingState ? /* @__PURE__ */ jsxs(
+          "div",
+          {
+            "aria-live": "polite",
+            style: {
+              marginTop: "0.25rem",
+              marginBottom: "0.8rem",
+              padding: "0.7rem 0.8rem",
+              borderRadius: "1rem",
+              border: "1px solid rgba(125, 211, 252, 0.18)",
+              background: "linear-gradient(180deg, rgba(59, 130, 246, 0.12), rgba(59, 130, 246, 0.05))",
+              display: "grid",
+              gap: "0.28rem"
+            },
+            children: [
+              /* @__PURE__ */ jsxs(
+                "div",
+                {
+                  style: {
+                    display: "inline-flex",
+                    alignItems: "center",
+                    gap: "0.45rem"
+                  },
+                  children: [
+                    /* @__PURE__ */ jsx(
+                      "span",
+                      {
+                        "aria-hidden": "true",
+                        style: {
+                          width: "0.62rem",
+                          height: "0.62rem",
+                          borderRadius: "999px",
+                          background: progressToneColor("info"),
+                          boxShadow: `0 0 0 3px ${progressToneColor("info")}22`,
+                          animation: "leSpaceRelayPulse 1.6s ease-in-out infinite"
+                        }
+                      }
+                    ),
+                    /* @__PURE__ */ jsx("strong", { style: { fontSize: "0.88rem" }, children: pollingState.label })
+                  ]
+                }
+              ),
+              /* @__PURE__ */ jsx("small", { style: { color: "#9fb2ca", lineHeight: 1.35 }, children: pollingState.detail })
+            ]
+          }
+        ) : null,
         deploymentProgressVisible ? /* @__PURE__ */ jsxs(
           "div",
           {

package/shared/index.d.ts

@@ -304,7 +304,7 @@ declare const STALE_INSTANCE_ALLOCATION_COOLDOWN_MS: number;
 declare const RECENT_INSTANCE_RUNTIME_GRACE_MS: number;
 declare const DEPLOYMENT_PENDING_WARNING_MS: number;
 
-declare const UI_PACKAGE_VERSION = "0.3.21";
+declare const UI_PACKAGE_VERSION = "0.3.23";
 
 interface RootfsRequiredPortForward {
     port: number;

package/shared/index.js

@@ -38,7 +38,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.3.21";
+var UI_PACKAGE_VERSION = "0.3.23";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -2151,6 +2151,31 @@ var DEFAULT_ALEPH_BOOTSTRAP_REF = "simple-todo-bootstrap";
 var DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE = "relay-bootstrap";
 var DEFAULT_BOOTSTRAP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 var DEFAULT_BOOTSTRAP_PAGINATION = 50;
+var RELAY_BOOTSTRAP_SIGNATURE_SCHEME = "personal_sign";
+function serializeOwnerAuthorizationPayload(payload) {
+  return JSON.stringify({
+    ownerAddress: payload.ownerAddress,
+    publisherAddress: payload.publisherAddress,
+    peerId: payload.peerId,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    instanceItemHash: payload.instanceItemHash,
+    issuedAt: payload.issuedAt,
+    expiresAt: payload.expiresAt
+  });
+}
+function serializeRelayProofPayload(payload) {
+  return JSON.stringify({
+    peerId: payload.peerId,
+    multiaddrs: dedupeMultiaddrs(payload.multiaddrs),
+    browserMultiaddrs: payload.browserMultiaddrs ? dedupeMultiaddrs(payload.browserMultiaddrs) : void 0,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    updatedAt: payload.updatedAt
+  });
+}
 function asTrimmedString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -2162,9 +2187,48 @@ function asNumber4(value) {
   }
   return null;
 }
+function normalizeHost(host) {
+  return host.trim().toLowerCase();
+}
 function normalizeAddress(address) {
   return address.trim().toLowerCase();
 }
+function normalizeSignature(signature) {
+  const trimmed = signature.trim();
+  return trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
+}
+function splitMultiaddr(addr) {
+  return addr.split("/").filter(Boolean);
+}
+function isPrivateIpv4(ip) {
+  const parts = ip.split(".").map((part) => Number(part));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  if (parts[0] === 10) return true;
+  if (parts[0] === 127) return true;
+  if (parts[0] === 0) return true;
+  if (parts[0] === 169 && parts[1] === 254) return true;
+  if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) return true;
+  if (parts[0] === 192 && parts[1] === 168) return true;
+  if (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127) return true;
+  return false;
+}
+function isPrivateIpv6(ip) {
+  const normalized = ip.trim().toLowerCase();
+  return normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe8") || normalized.startsWith("fe9") || normalized.startsWith("fea") || normalized.startsWith("feb");
+}
+function isLocalHostname(host) {
+  const normalized = normalizeHost(host);
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local");
+}
+function hasPeerId(addr) {
+  return splitMultiaddr(addr).includes("p2p");
+}
+function isBrowserDialableMultiaddr(addr) {
+  const normalized = addr.toLowerCase();
+  return normalized.includes("/ws") || normalized.includes("/wss") || normalized.includes("/webtransport") || normalized.includes("/webrtc-direct");
+}
 function dedupeMultiaddrs(addrs) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
@@ -2176,6 +2240,33 @@ function dedupeMultiaddrs(addrs) {
   }
   return result;
 }
+function isPublicMultiaddr(addr) {
+  const parts = splitMultiaddr(addr);
+  for (let index = 0; index < parts.length; index += 1) {
+    const protocol = parts[index];
+    const value = parts[index + 1];
+    if (protocol === "ip4" && value) {
+      return !isPrivateIpv4(value);
+    }
+    if (protocol === "ip6" && value) {
+      return !isPrivateIpv6(value);
+    }
+    if ((protocol === "dns4" || protocol === "dns6" || protocol === "dnsaddr") && value) {
+      return !isLocalHostname(value);
+    }
+  }
+  return false;
+}
+function filterPublicMultiaddrs(addrs, options = {}) {
+  return dedupeMultiaddrs(addrs).filter((addr) => {
+    if (!isPublicMultiaddr(addr)) return false;
+    if (options.requirePeerId !== false && !hasPeerId(addr)) return false;
+    if (options.browserDialableOnly && !isBrowserDialableMultiaddr(addr)) {
+      return false;
+    }
+    return true;
+  });
+}
 function normalizeRelayBootstrapContent(value) {
   if (!value || typeof value !== "object") return null;
   const content = value;
@@ -2270,6 +2361,104 @@ function normalizeRelayBootstrapPostRecord(value) {
     content: normalizeRelayBootstrapContent(entry.content)
   };
 }
+function buildRelayBootstrapPostContent(args) {
+  const now = args.now ?? Date.now() / 1e3;
+  const updatedAt = args.now ?? Date.now();
+  return {
+    type: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    address: args.sender,
+    ...args.ref ? { ref: args.ref } : {},
+    content: {
+      peerId: args.peerId,
+      multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+      browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+        browserDialableOnly: true
+      }) : void 0,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      ownerAddress: args.ownerAddress,
+      publisherAddress: args.publisherAddress,
+      authorization: args.authorization,
+      relayProof: args.relayProof,
+      updatedAt: Math.round(updatedAt)
+    },
+    time: now
+  };
+}
+async function createRelayBootstrapPost(args) {
+  const nowMillis = args.now ?? Date.now();
+  const nowSeconds = nowMillis / 1e3;
+  const itemContent = buildRelayBootstrapPostContent({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    ref: args.ref ?? DEFAULT_ALEPH_BOOTSTRAP_REF,
+    postType: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    authorization: args.authorization,
+    relayProof: args.relayProof,
+    now: nowMillis
+  });
+  itemContent.time = nowSeconds;
+  const serialized = JSON.stringify(itemContent);
+  const itemHash = await args.hasher(serialized);
+  return {
+    channel: args.channel ?? DEFAULT_ALEPH_BOOTSTRAP_CHANNEL,
+    sender: args.sender,
+    chain: "ETH",
+    type: "POST",
+    time: nowSeconds,
+    item_type: "inline",
+    item_content: serialized,
+    item_hash: itemHash
+  };
+}
+async function signRelayBootstrapAuthorization(args) {
+  const payload = {
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    peerId: args.peerId,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    instanceItemHash: args.instanceItemHash,
+    issuedAt: args.issuedAt ?? Date.now(),
+    expiresAt: args.expiresAt
+  };
+  const serialized = serializeOwnerAuthorizationPayload(payload);
+  const signature = await args.signer(args.ownerAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
+async function signRelayBootstrapProof(args) {
+  const payload = {
+    peerId: args.peerId,
+    multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+    browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+      browserDialableOnly: true
+    }) : void 0,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    updatedAt: args.updatedAt ?? Date.now()
+  };
+  const serialized = serializeRelayProofPayload(payload);
+  const signature = await args.signer(args.publisherAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
 async function fetchAlephBootstrapPosts(options = {}) {
   const fetchImpl = options.fetch ?? globalThis.fetch?.bind(globalThis);
   if (typeof fetchImpl !== "function") {
@@ -2388,6 +2577,109 @@ async function waitForRelayBootstrapRegistration(args) {
   }
   return null;
 }
+async function publishRelayBootstrapRegistration(args) {
+  const publisherAddress = args.publisherAddress ?? args.sender;
+  const ownerAddress = args.ownerAddress;
+  let ownerAuthorization = args.ownerAuthorization;
+  let relayProof = args.relayProof;
+  if (!ownerAuthorization && ownerAddress && args.ownerSigner) {
+    ownerAuthorization = await signRelayBootstrapAuthorization({
+      ownerAddress,
+      publisherAddress,
+      peerId: args.peerId,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      instanceItemHash: args.instanceItemHash,
+      issuedAt: args.authorizationIssuedAt ?? args.now ?? Date.now(),
+      expiresAt: args.authorizationExpiresAt,
+      signer: args.ownerSigner
+    });
+  }
+  if (!relayProof && args.publisherSigner) {
+    relayProof = await signRelayBootstrapProof({
+      publisherAddress,
+      peerId: args.peerId,
+      multiaddrs: args.multiaddrs,
+      browserMultiaddrs: args.browserMultiaddrs,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      updatedAt: args.now ?? Date.now(),
+      signer: args.publisherSigner
+    });
+  }
+  const unsigned = await createRelayBootstrapPost({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    channel: args.channel,
+    ref: args.ref,
+    postType: args.postType,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress,
+    publisherAddress,
+    authorization: ownerAuthorization,
+    relayProof,
+    now: args.now,
+    hasher: args.hasher
+  });
+  const content = JSON.parse(unsigned.item_content);
+  if ((content.content?.multiaddrs?.length ?? 0) === 0) {
+    return {
+      status: "skipped",
+      reason: "No public relay multiaddrs remained after filtering.",
+      publishedMultiaddrs: [],
+      publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? []
+    };
+  }
+  const message = await signAlephMessage(unsigned, args.signer);
+  const { response, httpStatus } = await broadcastAlephMessage2(message, {
+    apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+    sync: args.sync ?? true,
+    fetch: args.fetch
+  });
+  let forgottenHashes = [];
+  let forgetResult;
+  if (args.forgetPrevious && args.registrationId) {
+    const previousPosts = await fetchAlephBootstrapPosts({
+      apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+      channel: args.channel,
+      ref: args.ref,
+      postType: args.postType,
+      fetch: args.fetch
+    });
+    forgottenHashes = previousPosts.filter(
+      (post) => post.address?.toLowerCase() === args.sender.toLowerCase() && post.content?.registrationId === args.registrationId && (post.itemHash ?? post.hash) != null && (post.itemHash ?? post.hash) !== unsigned.item_hash
+    ).map((post) => post.itemHash ?? post.hash ?? "").filter(Boolean);
+    if (forgottenHashes.length > 0) {
+      forgetResult = await forgetAlephMessages({
+        sender: args.sender,
+        hashes: forgottenHashes,
+        reason: args.forgetPreviousReason ?? `Replace older relay bootstrap records for ${args.registrationId}`,
+        signer: args.signer,
+        hasher: args.hasher,
+        fetch: args.fetch,
+        apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+        sync: args.sync ?? true
+      });
+    }
+  }
+  return {
+    status: "published",
+    itemHash: unsigned.item_hash,
+    message,
+    response,
+    httpStatus,
+    publishedMultiaddrs: content.content?.multiaddrs ?? [],
+    publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? [],
+    forgottenHashes,
+    forgetResult
+  };
+}
 
 // ../core/src/bootstrap-config.ts
 var VM_BOOTSTRAP_CONFIG_AGGREGATE_KEY = "vm-bootstrap-config";
@@ -3215,9 +3507,61 @@ var SponsorRelayController = class {
       visibleRegistration
     });
     if (!visibleRegistration) {
-      throw new Error(
-        "Relay bootstrap registration did not become visible on Aleph."
-      );
+      this.trace("deploy:bootstrap-registration-fallback-start", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        probeMultiaddrCount: relayMetadata.probeMultiaddrs.length,
+        browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
+      });
+      this.emitProgress({
+        stage: "publishing-bootstrap",
+        label: "Publishing bootstrap fallback",
+        progress: 98,
+        status: "warning",
+        itemHash: args.itemHash,
+        detail: "Guest bootstrap registration was delayed. Publishing the relay bootstrap record from the browser."
+      });
+      const fallbackPublication = await publishRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        signer: personalSign,
+        hasher: sha256Hex,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        peerId,
+        multiaddrs: relayMetadata.probeMultiaddrs,
+        browserMultiaddrs: relayMetadata.browserBootstrapMultiaddrs,
+        registrationId,
+        profile,
+        sync: true,
+        forgetPrevious: true
+      });
+      this.trace("deploy:bootstrap-registration-fallback-published", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackPublication
+      });
+      const fallbackVisibleRegistration = await waitForRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        registrationId,
+        peerId,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        attempts: 24,
+        delayMs: 2500
+      });
+      this.trace("deploy:bootstrap-registration-fallback-visible", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackVisibleRegistration
+      });
+      if (!fallbackVisibleRegistration) {
+        throw new Error(
+          "Relay bootstrap registration did not become visible on Aleph."
+        );
+      }
     }
     if (profile === "uc-go-peer" && args.deploymentToken) {
       await deleteVmBootstrapConfig({

package/svelte/SponsorRelayFab.svelte

@@ -42,6 +42,15 @@ export let apiHost = undefined
   const versionLabel = resolvedVersion.trim()
     ? (resolvedVersion.trim().startsWith('v') ? resolvedVersion.trim() : `v${resolvedVersion.trim()}`)
     : ''
+  const pollingStages = new Set(['waiting-for-aleph', 'deployment-confirmed', 'publishing-bootstrap', 'refreshing-instances'])
+
+  $: pollingActive = state.busy.refreshing || pollingStages.has(state.deploymentProgress.stage)
+  $: pollingLabel = state.busy.refreshing
+    ? 'Checking relay state'
+    : (state.deploymentProgress.label || 'Polling relay state')
+  $: pollingDetail = state.busy.refreshing
+    ? (state.statusText || 'Refreshing relay sponsor data from Aleph and the selected CRN.')
+    : (state.deploymentProgress.detail || state.statusText || 'Waiting for the next confirmed relay state from Aleph.')
 
   onMount(async () => {
     const unsubscribe = controller.subscribe((next) => {
@@ -113,6 +122,16 @@ export let apiHost = undefined
     {/if}
     <p class="status-text">{state.statusText}</p>
 
+    {#if pollingActive}
+      <div class="polling-row" aria-live="polite">
+        <div class="polling-head">
+          <StatusLed tone="idle" pulse={true} />
+          <strong>{pollingLabel}</strong>
+        </div>
+        <small>{pollingDetail}</small>
+      </div>
+    {/if}
+
     <div class="grid">
       <label class="field">
         <span>Instance Name</span>
@@ -319,6 +338,31 @@ export let apiHost = undefined
     justify-content: space-between;
   }
 
+  .polling-row {
+    display: grid;
+    gap: 0.28rem;
+    margin: 0.25rem 0 0.8rem;
+    padding: 0.7rem 0.85rem;
+    border-radius: 1rem;
+    background: linear-gradient(180deg, rgba(59, 130, 246, 0.12), rgba(59, 130, 246, 0.05));
+    border: 1px solid rgba(125, 211, 252, 0.18);
+  }
+
+  .polling-head {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.45rem;
+  }
+
+  .polling-row strong {
+    font-size: 0.88rem;
+  }
+
+  .polling-row small {
+    color: var(--relay-text-dim);
+    line-height: 1.35;
+  }
+
   .eyebrow,
   .mini-label,
   .field span,