@le-space/ui 0.3.22 → 0.3.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@le-space/ui",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "description": "Floating Aleph sponsor relay UI components for Svelte and React.",
   "license": "MIT",
   "type": "module",
@@ -36,8 +36,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@le-space/browser": "0.3.22",
-    "@le-space/core": "0.3.22",
+    "@le-space/browser": "0.3.24",
+    "@le-space/core": "0.3.24",
     "viem": "^2.38.5"
   },
   "peerDependencies": {

package/react/index.js

@@ -39,7 +39,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.3.22";
+var UI_PACKAGE_VERSION = "0.3.24";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -2152,6 +2152,31 @@ var DEFAULT_ALEPH_BOOTSTRAP_REF = "simple-todo-bootstrap";
 var DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE = "relay-bootstrap";
 var DEFAULT_BOOTSTRAP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 var DEFAULT_BOOTSTRAP_PAGINATION = 50;
+var RELAY_BOOTSTRAP_SIGNATURE_SCHEME = "personal_sign";
+function serializeOwnerAuthorizationPayload(payload) {
+  return JSON.stringify({
+    ownerAddress: payload.ownerAddress,
+    publisherAddress: payload.publisherAddress,
+    peerId: payload.peerId,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    instanceItemHash: payload.instanceItemHash,
+    issuedAt: payload.issuedAt,
+    expiresAt: payload.expiresAt
+  });
+}
+function serializeRelayProofPayload(payload) {
+  return JSON.stringify({
+    peerId: payload.peerId,
+    multiaddrs: dedupeMultiaddrs(payload.multiaddrs),
+    browserMultiaddrs: payload.browserMultiaddrs ? dedupeMultiaddrs(payload.browserMultiaddrs) : void 0,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    updatedAt: payload.updatedAt
+  });
+}
 function asTrimmedString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -2163,9 +2188,48 @@ function asNumber4(value) {
   }
   return null;
 }
+function normalizeHost(host) {
+  return host.trim().toLowerCase();
+}
 function normalizeAddress(address) {
   return address.trim().toLowerCase();
 }
+function normalizeSignature(signature) {
+  const trimmed = signature.trim();
+  return trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
+}
+function splitMultiaddr(addr) {
+  return addr.split("/").filter(Boolean);
+}
+function isPrivateIpv4(ip) {
+  const parts = ip.split(".").map((part) => Number(part));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  if (parts[0] === 10) return true;
+  if (parts[0] === 127) return true;
+  if (parts[0] === 0) return true;
+  if (parts[0] === 169 && parts[1] === 254) return true;
+  if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) return true;
+  if (parts[0] === 192 && parts[1] === 168) return true;
+  if (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127) return true;
+  return false;
+}
+function isPrivateIpv6(ip) {
+  const normalized = ip.trim().toLowerCase();
+  return normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe8") || normalized.startsWith("fe9") || normalized.startsWith("fea") || normalized.startsWith("feb");
+}
+function isLocalHostname(host) {
+  const normalized = normalizeHost(host);
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local");
+}
+function hasPeerId(addr) {
+  return splitMultiaddr(addr).includes("p2p");
+}
+function isBrowserDialableMultiaddr(addr) {
+  const normalized = addr.toLowerCase();
+  return normalized.includes("/ws") || normalized.includes("/wss") || normalized.includes("/webtransport") || normalized.includes("/webrtc-direct");
+}
 function dedupeMultiaddrs(addrs) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
@@ -2177,6 +2241,33 @@ function dedupeMultiaddrs(addrs) {
   }
   return result;
 }
+function isPublicMultiaddr(addr) {
+  const parts = splitMultiaddr(addr);
+  for (let index = 0; index < parts.length; index += 1) {
+    const protocol = parts[index];
+    const value = parts[index + 1];
+    if (protocol === "ip4" && value) {
+      return !isPrivateIpv4(value);
+    }
+    if (protocol === "ip6" && value) {
+      return !isPrivateIpv6(value);
+    }
+    if ((protocol === "dns4" || protocol === "dns6" || protocol === "dnsaddr") && value) {
+      return !isLocalHostname(value);
+    }
+  }
+  return false;
+}
+function filterPublicMultiaddrs(addrs, options = {}) {
+  return dedupeMultiaddrs(addrs).filter((addr) => {
+    if (!isPublicMultiaddr(addr)) return false;
+    if (options.requirePeerId !== false && !hasPeerId(addr)) return false;
+    if (options.browserDialableOnly && !isBrowserDialableMultiaddr(addr)) {
+      return false;
+    }
+    return true;
+  });
+}
 function normalizeRelayBootstrapContent(value) {
   if (!value || typeof value !== "object") return null;
   const content = value;
@@ -2271,6 +2362,104 @@ function normalizeRelayBootstrapPostRecord(value) {
     content: normalizeRelayBootstrapContent(entry.content)
   };
 }
+function buildRelayBootstrapPostContent(args) {
+  const now = args.now ?? Date.now() / 1e3;
+  const updatedAt = args.now ?? Date.now();
+  return {
+    type: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    address: args.sender,
+    ...args.ref ? { ref: args.ref } : {},
+    content: {
+      peerId: args.peerId,
+      multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+      browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+        browserDialableOnly: true
+      }) : void 0,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      ownerAddress: args.ownerAddress,
+      publisherAddress: args.publisherAddress,
+      authorization: args.authorization,
+      relayProof: args.relayProof,
+      updatedAt: Math.round(updatedAt)
+    },
+    time: now
+  };
+}
+async function createRelayBootstrapPost(args) {
+  const nowMillis = args.now ?? Date.now();
+  const nowSeconds = nowMillis / 1e3;
+  const itemContent = buildRelayBootstrapPostContent({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    ref: args.ref ?? DEFAULT_ALEPH_BOOTSTRAP_REF,
+    postType: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    authorization: args.authorization,
+    relayProof: args.relayProof,
+    now: nowMillis
+  });
+  itemContent.time = nowSeconds;
+  const serialized = JSON.stringify(itemContent);
+  const itemHash = await args.hasher(serialized);
+  return {
+    channel: args.channel ?? DEFAULT_ALEPH_BOOTSTRAP_CHANNEL,
+    sender: args.sender,
+    chain: "ETH",
+    type: "POST",
+    time: nowSeconds,
+    item_type: "inline",
+    item_content: serialized,
+    item_hash: itemHash
+  };
+}
+async function signRelayBootstrapAuthorization(args) {
+  const payload = {
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    peerId: args.peerId,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    instanceItemHash: args.instanceItemHash,
+    issuedAt: args.issuedAt ?? Date.now(),
+    expiresAt: args.expiresAt
+  };
+  const serialized = serializeOwnerAuthorizationPayload(payload);
+  const signature = await args.signer(args.ownerAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
+async function signRelayBootstrapProof(args) {
+  const payload = {
+    peerId: args.peerId,
+    multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+    browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+      browserDialableOnly: true
+    }) : void 0,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    updatedAt: args.updatedAt ?? Date.now()
+  };
+  const serialized = serializeRelayProofPayload(payload);
+  const signature = await args.signer(args.publisherAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
 async function fetchAlephBootstrapPosts(options = {}) {
   const fetchImpl = options.fetch ?? globalThis.fetch?.bind(globalThis);
   if (typeof fetchImpl !== "function") {
@@ -2389,6 +2578,109 @@ async function waitForRelayBootstrapRegistration(args) {
   }
   return null;
 }
+async function publishRelayBootstrapRegistration(args) {
+  const publisherAddress = args.publisherAddress ?? args.sender;
+  const ownerAddress = args.ownerAddress;
+  let ownerAuthorization = args.ownerAuthorization;
+  let relayProof = args.relayProof;
+  if (!ownerAuthorization && ownerAddress && args.ownerSigner) {
+    ownerAuthorization = await signRelayBootstrapAuthorization({
+      ownerAddress,
+      publisherAddress,
+      peerId: args.peerId,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      instanceItemHash: args.instanceItemHash,
+      issuedAt: args.authorizationIssuedAt ?? args.now ?? Date.now(),
+      expiresAt: args.authorizationExpiresAt,
+      signer: args.ownerSigner
+    });
+  }
+  if (!relayProof && args.publisherSigner) {
+    relayProof = await signRelayBootstrapProof({
+      publisherAddress,
+      peerId: args.peerId,
+      multiaddrs: args.multiaddrs,
+      browserMultiaddrs: args.browserMultiaddrs,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      updatedAt: args.now ?? Date.now(),
+      signer: args.publisherSigner
+    });
+  }
+  const unsigned = await createRelayBootstrapPost({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    channel: args.channel,
+    ref: args.ref,
+    postType: args.postType,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress,
+    publisherAddress,
+    authorization: ownerAuthorization,
+    relayProof,
+    now: args.now,
+    hasher: args.hasher
+  });
+  const content = JSON.parse(unsigned.item_content);
+  if ((content.content?.multiaddrs?.length ?? 0) === 0) {
+    return {
+      status: "skipped",
+      reason: "No public relay multiaddrs remained after filtering.",
+      publishedMultiaddrs: [],
+      publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? []
+    };
+  }
+  const message = await signAlephMessage(unsigned, args.signer);
+  const { response, httpStatus } = await broadcastAlephMessage2(message, {
+    apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+    sync: args.sync ?? true,
+    fetch: args.fetch
+  });
+  let forgottenHashes = [];
+  let forgetResult;
+  if (args.forgetPrevious && args.registrationId) {
+    const previousPosts = await fetchAlephBootstrapPosts({
+      apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+      channel: args.channel,
+      ref: args.ref,
+      postType: args.postType,
+      fetch: args.fetch
+    });
+    forgottenHashes = previousPosts.filter(
+      (post) => post.address?.toLowerCase() === args.sender.toLowerCase() && post.content?.registrationId === args.registrationId && (post.itemHash ?? post.hash) != null && (post.itemHash ?? post.hash) !== unsigned.item_hash
+    ).map((post) => post.itemHash ?? post.hash ?? "").filter(Boolean);
+    if (forgottenHashes.length > 0) {
+      forgetResult = await forgetAlephMessages({
+        sender: args.sender,
+        hashes: forgottenHashes,
+        reason: args.forgetPreviousReason ?? `Replace older relay bootstrap records for ${args.registrationId}`,
+        signer: args.signer,
+        hasher: args.hasher,
+        fetch: args.fetch,
+        apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+        sync: args.sync ?? true
+      });
+    }
+  }
+  return {
+    status: "published",
+    itemHash: unsigned.item_hash,
+    message,
+    response,
+    httpStatus,
+    publishedMultiaddrs: content.content?.multiaddrs ?? [],
+    publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? [],
+    forgottenHashes,
+    forgetResult
+  };
+}
 
 // ../core/src/bootstrap-config.ts
 var VM_BOOTSTRAP_CONFIG_AGGREGATE_KEY = "vm-bootstrap-config";
@@ -3216,9 +3508,61 @@ var SponsorRelayController = class {
       visibleRegistration
     });
     if (!visibleRegistration) {
-      throw new Error(
-        "Relay bootstrap registration did not become visible on Aleph."
-      );
+      this.trace("deploy:bootstrap-registration-fallback-start", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        probeMultiaddrCount: relayMetadata.probeMultiaddrs.length,
+        browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
+      });
+      this.emitProgress({
+        stage: "publishing-bootstrap",
+        label: "Publishing bootstrap fallback",
+        progress: 98,
+        status: "warning",
+        itemHash: args.itemHash,
+        detail: "Guest bootstrap registration was delayed. Publishing the relay bootstrap record from the browser."
+      });
+      const fallbackPublication = await publishRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        signer: personalSign,
+        hasher: sha256Hex,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        peerId,
+        multiaddrs: relayMetadata.probeMultiaddrs,
+        browserMultiaddrs: relayMetadata.browserBootstrapMultiaddrs,
+        registrationId,
+        profile,
+        sync: true,
+        forgetPrevious: true
+      });
+      this.trace("deploy:bootstrap-registration-fallback-published", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackPublication
+      });
+      const fallbackVisibleRegistration = await waitForRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        registrationId,
+        peerId,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        attempts: 24,
+        delayMs: 2500
+      });
+      this.trace("deploy:bootstrap-registration-fallback-visible", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackVisibleRegistration
+      });
+      if (!fallbackVisibleRegistration) {
+        throw new Error(
+          "Relay bootstrap registration did not become visible on Aleph."
+        );
+      }
     }
     if (profile === "uc-go-peer" && args.deploymentToken) {
       await deleteVmBootstrapConfig({

package/shared/index.d.ts

@@ -304,7 +304,7 @@ declare const STALE_INSTANCE_ALLOCATION_COOLDOWN_MS: number;
 declare const RECENT_INSTANCE_RUNTIME_GRACE_MS: number;
 declare const DEPLOYMENT_PENDING_WARNING_MS: number;
 
-declare const UI_PACKAGE_VERSION = "0.3.22";
+declare const UI_PACKAGE_VERSION = "0.3.24";
 
 interface RootfsRequiredPortForward {
     port: number;

package/shared/index.js

@@ -38,7 +38,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.3.22";
+var UI_PACKAGE_VERSION = "0.3.24";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -2151,6 +2151,31 @@ var DEFAULT_ALEPH_BOOTSTRAP_REF = "simple-todo-bootstrap";
 var DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE = "relay-bootstrap";
 var DEFAULT_BOOTSTRAP_MAX_AGE_MS = 7 * 24 * 60 * 60 * 1e3;
 var DEFAULT_BOOTSTRAP_PAGINATION = 50;
+var RELAY_BOOTSTRAP_SIGNATURE_SCHEME = "personal_sign";
+function serializeOwnerAuthorizationPayload(payload) {
+  return JSON.stringify({
+    ownerAddress: payload.ownerAddress,
+    publisherAddress: payload.publisherAddress,
+    peerId: payload.peerId,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    instanceItemHash: payload.instanceItemHash,
+    issuedAt: payload.issuedAt,
+    expiresAt: payload.expiresAt
+  });
+}
+function serializeRelayProofPayload(payload) {
+  return JSON.stringify({
+    peerId: payload.peerId,
+    multiaddrs: dedupeMultiaddrs(payload.multiaddrs),
+    browserMultiaddrs: payload.browserMultiaddrs ? dedupeMultiaddrs(payload.browserMultiaddrs) : void 0,
+    registrationId: payload.registrationId,
+    profile: payload.profile,
+    version: payload.version,
+    updatedAt: payload.updatedAt
+  });
+}
 function asTrimmedString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
@@ -2162,9 +2187,48 @@ function asNumber4(value) {
   }
   return null;
 }
+function normalizeHost(host) {
+  return host.trim().toLowerCase();
+}
 function normalizeAddress(address) {
   return address.trim().toLowerCase();
 }
+function normalizeSignature(signature) {
+  const trimmed = signature.trim();
+  return trimmed.startsWith("0x") ? trimmed : `0x${trimmed}`;
+}
+function splitMultiaddr(addr) {
+  return addr.split("/").filter(Boolean);
+}
+function isPrivateIpv4(ip) {
+  const parts = ip.split(".").map((part) => Number(part));
+  if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+    return false;
+  }
+  if (parts[0] === 10) return true;
+  if (parts[0] === 127) return true;
+  if (parts[0] === 0) return true;
+  if (parts[0] === 169 && parts[1] === 254) return true;
+  if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31) return true;
+  if (parts[0] === 192 && parts[1] === 168) return true;
+  if (parts[0] === 100 && parts[1] >= 64 && parts[1] <= 127) return true;
+  return false;
+}
+function isPrivateIpv6(ip) {
+  const normalized = ip.trim().toLowerCase();
+  return normalized === "::1" || normalized.startsWith("fc") || normalized.startsWith("fd") || normalized.startsWith("fe8") || normalized.startsWith("fe9") || normalized.startsWith("fea") || normalized.startsWith("feb");
+}
+function isLocalHostname(host) {
+  const normalized = normalizeHost(host);
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local");
+}
+function hasPeerId(addr) {
+  return splitMultiaddr(addr).includes("p2p");
+}
+function isBrowserDialableMultiaddr(addr) {
+  const normalized = addr.toLowerCase();
+  return normalized.includes("/ws") || normalized.includes("/wss") || normalized.includes("/webtransport") || normalized.includes("/webrtc-direct");
+}
 function dedupeMultiaddrs(addrs) {
   const seen = /* @__PURE__ */ new Set();
   const result = [];
@@ -2176,6 +2240,33 @@ function dedupeMultiaddrs(addrs) {
   }
   return result;
 }
+function isPublicMultiaddr(addr) {
+  const parts = splitMultiaddr(addr);
+  for (let index = 0; index < parts.length; index += 1) {
+    const protocol = parts[index];
+    const value = parts[index + 1];
+    if (protocol === "ip4" && value) {
+      return !isPrivateIpv4(value);
+    }
+    if (protocol === "ip6" && value) {
+      return !isPrivateIpv6(value);
+    }
+    if ((protocol === "dns4" || protocol === "dns6" || protocol === "dnsaddr") && value) {
+      return !isLocalHostname(value);
+    }
+  }
+  return false;
+}
+function filterPublicMultiaddrs(addrs, options = {}) {
+  return dedupeMultiaddrs(addrs).filter((addr) => {
+    if (!isPublicMultiaddr(addr)) return false;
+    if (options.requirePeerId !== false && !hasPeerId(addr)) return false;
+    if (options.browserDialableOnly && !isBrowserDialableMultiaddr(addr)) {
+      return false;
+    }
+    return true;
+  });
+}
 function normalizeRelayBootstrapContent(value) {
   if (!value || typeof value !== "object") return null;
   const content = value;
@@ -2270,6 +2361,104 @@ function normalizeRelayBootstrapPostRecord(value) {
     content: normalizeRelayBootstrapContent(entry.content)
   };
 }
+function buildRelayBootstrapPostContent(args) {
+  const now = args.now ?? Date.now() / 1e3;
+  const updatedAt = args.now ?? Date.now();
+  return {
+    type: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    address: args.sender,
+    ...args.ref ? { ref: args.ref } : {},
+    content: {
+      peerId: args.peerId,
+      multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+      browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+        browserDialableOnly: true
+      }) : void 0,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      ownerAddress: args.ownerAddress,
+      publisherAddress: args.publisherAddress,
+      authorization: args.authorization,
+      relayProof: args.relayProof,
+      updatedAt: Math.round(updatedAt)
+    },
+    time: now
+  };
+}
+async function createRelayBootstrapPost(args) {
+  const nowMillis = args.now ?? Date.now();
+  const nowSeconds = nowMillis / 1e3;
+  const itemContent = buildRelayBootstrapPostContent({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    ref: args.ref ?? DEFAULT_ALEPH_BOOTSTRAP_REF,
+    postType: args.postType ?? DEFAULT_ALEPH_BOOTSTRAP_POST_TYPE,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    authorization: args.authorization,
+    relayProof: args.relayProof,
+    now: nowMillis
+  });
+  itemContent.time = nowSeconds;
+  const serialized = JSON.stringify(itemContent);
+  const itemHash = await args.hasher(serialized);
+  return {
+    channel: args.channel ?? DEFAULT_ALEPH_BOOTSTRAP_CHANNEL,
+    sender: args.sender,
+    chain: "ETH",
+    type: "POST",
+    time: nowSeconds,
+    item_type: "inline",
+    item_content: serialized,
+    item_hash: itemHash
+  };
+}
+async function signRelayBootstrapAuthorization(args) {
+  const payload = {
+    ownerAddress: args.ownerAddress,
+    publisherAddress: args.publisherAddress,
+    peerId: args.peerId,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    instanceItemHash: args.instanceItemHash,
+    issuedAt: args.issuedAt ?? Date.now(),
+    expiresAt: args.expiresAt
+  };
+  const serialized = serializeOwnerAuthorizationPayload(payload);
+  const signature = await args.signer(args.ownerAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
+async function signRelayBootstrapProof(args) {
+  const payload = {
+    peerId: args.peerId,
+    multiaddrs: filterPublicMultiaddrs(args.multiaddrs),
+    browserMultiaddrs: args.browserMultiaddrs ? filterPublicMultiaddrs(args.browserMultiaddrs, {
+      browserDialableOnly: true
+    }) : void 0,
+    registrationId: args.registrationId,
+    profile: args.profile,
+    version: args.version,
+    updatedAt: args.updatedAt ?? Date.now()
+  };
+  const serialized = serializeRelayProofPayload(payload);
+  const signature = await args.signer(args.publisherAddress, serialized);
+  return {
+    scheme: RELAY_BOOTSTRAP_SIGNATURE_SCHEME,
+    payload,
+    signature: normalizeSignature(signature)
+  };
+}
 async function fetchAlephBootstrapPosts(options = {}) {
   const fetchImpl = options.fetch ?? globalThis.fetch?.bind(globalThis);
   if (typeof fetchImpl !== "function") {
@@ -2388,6 +2577,109 @@ async function waitForRelayBootstrapRegistration(args) {
   }
   return null;
 }
+async function publishRelayBootstrapRegistration(args) {
+  const publisherAddress = args.publisherAddress ?? args.sender;
+  const ownerAddress = args.ownerAddress;
+  let ownerAuthorization = args.ownerAuthorization;
+  let relayProof = args.relayProof;
+  if (!ownerAuthorization && ownerAddress && args.ownerSigner) {
+    ownerAuthorization = await signRelayBootstrapAuthorization({
+      ownerAddress,
+      publisherAddress,
+      peerId: args.peerId,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      instanceItemHash: args.instanceItemHash,
+      issuedAt: args.authorizationIssuedAt ?? args.now ?? Date.now(),
+      expiresAt: args.authorizationExpiresAt,
+      signer: args.ownerSigner
+    });
+  }
+  if (!relayProof && args.publisherSigner) {
+    relayProof = await signRelayBootstrapProof({
+      publisherAddress,
+      peerId: args.peerId,
+      multiaddrs: args.multiaddrs,
+      browserMultiaddrs: args.browserMultiaddrs,
+      registrationId: args.registrationId,
+      profile: args.profile,
+      version: args.version,
+      updatedAt: args.now ?? Date.now(),
+      signer: args.publisherSigner
+    });
+  }
+  const unsigned = await createRelayBootstrapPost({
+    sender: args.sender,
+    peerId: args.peerId,
+    multiaddrs: args.multiaddrs,
+    browserMultiaddrs: args.browserMultiaddrs,
+    registrationId: args.registrationId,
+    channel: args.channel,
+    ref: args.ref,
+    postType: args.postType,
+    profile: args.profile,
+    version: args.version,
+    ownerAddress,
+    publisherAddress,
+    authorization: ownerAuthorization,
+    relayProof,
+    now: args.now,
+    hasher: args.hasher
+  });
+  const content = JSON.parse(unsigned.item_content);
+  if ((content.content?.multiaddrs?.length ?? 0) === 0) {
+    return {
+      status: "skipped",
+      reason: "No public relay multiaddrs remained after filtering.",
+      publishedMultiaddrs: [],
+      publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? []
+    };
+  }
+  const message = await signAlephMessage(unsigned, args.signer);
+  const { response, httpStatus } = await broadcastAlephMessage2(message, {
+    apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+    sync: args.sync ?? true,
+    fetch: args.fetch
+  });
+  let forgottenHashes = [];
+  let forgetResult;
+  if (args.forgetPrevious && args.registrationId) {
+    const previousPosts = await fetchAlephBootstrapPosts({
+      apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+      channel: args.channel,
+      ref: args.ref,
+      postType: args.postType,
+      fetch: args.fetch
+    });
+    forgottenHashes = previousPosts.filter(
+      (post) => post.address?.toLowerCase() === args.sender.toLowerCase() && post.content?.registrationId === args.registrationId && (post.itemHash ?? post.hash) != null && (post.itemHash ?? post.hash) !== unsigned.item_hash
+    ).map((post) => post.itemHash ?? post.hash ?? "").filter(Boolean);
+    if (forgottenHashes.length > 0) {
+      forgetResult = await forgetAlephMessages({
+        sender: args.sender,
+        hashes: forgottenHashes,
+        reason: args.forgetPreviousReason ?? `Replace older relay bootstrap records for ${args.registrationId}`,
+        signer: args.signer,
+        hasher: args.hasher,
+        fetch: args.fetch,
+        apiHost: args.apiHost ?? DEFAULT_ALEPH_API_HOST3,
+        sync: args.sync ?? true
+      });
+    }
+  }
+  return {
+    status: "published",
+    itemHash: unsigned.item_hash,
+    message,
+    response,
+    httpStatus,
+    publishedMultiaddrs: content.content?.multiaddrs ?? [],
+    publishedBrowserMultiaddrs: content.content?.browserMultiaddrs ?? [],
+    forgottenHashes,
+    forgetResult
+  };
+}
 
 // ../core/src/bootstrap-config.ts
 var VM_BOOTSTRAP_CONFIG_AGGREGATE_KEY = "vm-bootstrap-config";
@@ -3215,9 +3507,61 @@ var SponsorRelayController = class {
       visibleRegistration
     });
     if (!visibleRegistration) {
-      throw new Error(
-        "Relay bootstrap registration did not become visible on Aleph."
-      );
+      this.trace("deploy:bootstrap-registration-fallback-start", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        probeMultiaddrCount: relayMetadata.probeMultiaddrs.length,
+        browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
+      });
+      this.emitProgress({
+        stage: "publishing-bootstrap",
+        label: "Publishing bootstrap fallback",
+        progress: 98,
+        status: "warning",
+        itemHash: args.itemHash,
+        detail: "Guest bootstrap registration was delayed. Publishing the relay bootstrap record from the browser."
+      });
+      const fallbackPublication = await publishRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        signer: personalSign,
+        hasher: sha256Hex,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        peerId,
+        multiaddrs: relayMetadata.probeMultiaddrs,
+        browserMultiaddrs: relayMetadata.browserBootstrapMultiaddrs,
+        registrationId,
+        profile,
+        sync: true,
+        forgetPrevious: true
+      });
+      this.trace("deploy:bootstrap-registration-fallback-published", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackPublication
+      });
+      const fallbackVisibleRegistration = await waitForRelayBootstrapRegistration({
+        sender: this.state.wallet.address,
+        registrationId,
+        peerId,
+        fetch: asJsonFetch,
+        apiHost: this.client.apiHost,
+        attempts: 24,
+        delayMs: 2500
+      });
+      this.trace("deploy:bootstrap-registration-fallback-visible", {
+        itemHash: args.itemHash,
+        registrationId,
+        peerId,
+        fallbackVisibleRegistration
+      });
+      if (!fallbackVisibleRegistration) {
+        throw new Error(
+          "Relay bootstrap registration did not become visible on Aleph."
+        );
+      }
     }
     if (profile === "uc-go-peer" && args.deploymentToken) {
       await deleteVmBootstrapConfig({