@le-space/ui 0.6.1 → 0.6.2

package/react/index.js

@@ -28,7 +28,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.6.1";
+var UI_PACKAGE_VERSION = "0.6.2";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -2274,6 +2274,45 @@ async function configureOrbitdbRelaySetup2(args) {
     clearTimeout(timeout);
   }
 }
+async function configureUcanStore(args) {
+  const controller = new AbortController();
+  const timeout = setTimeout(
+    () => controller.abort(),
+    Number(args.timeoutMs ?? 18e4)
+  );
+  const payload = {
+    public_ipv4: args.hostIpv4,
+    public_ipv6: args.publicIpv6 ?? void 0,
+    proxy_url: args.proxyUrl ?? void 0,
+    webauthn_origin: args.webauthnOrigin ?? void 0,
+    webauthn_origin_fallbacks: args.webauthnOriginFallbacks ?? void 0,
+    admin_did: args.adminDid ?? void 0,
+    bootstrap_package: args.bootstrapPackage ?? void 0,
+    no_start: args.noStart === true ? true : void 0
+  };
+  try {
+    const response = await args.fetch(
+      `http://${args.hostIpv4}:${args.setupPort}/configure`,
+      {
+        method: "POST",
+        headers: {
+          "content-type": "application/json"
+        },
+        body: JSON.stringify(payload),
+        signal: controller.signal
+      }
+    );
+    const responsePayload = await response.json().catch(() => null);
+    if (!response.ok) {
+      throw new Error(
+        `Service setup request failed: ${response.status} ${typeof responsePayload === "string" ? responsePayload : JSON.stringify(responsePayload ?? {})}`
+      );
+    }
+    return responsePayload;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 async function fetchUcGoPeerMetadata(args) {
   const attempts = Math.max(1, Number(args.attempts ?? 60));
   const delayMs = Math.max(0, Number(args.delayMs ?? 3e3));
@@ -2341,7 +2380,7 @@ async function fetchUcGoPeerMetadata(args) {
     }
   }
   throw new Error(
-    `Relay metadata did not become ready after ${attempts} attempts: ${lastError ? lastError : typeof lastPayload === "string" ? lastPayload : JSON.stringify(lastPayload ?? {})}`
+    `Guest metadata did not become ready after ${attempts} attempts: ${lastError ? lastError : typeof lastPayload === "string" ? lastPayload : JSON.stringify(lastPayload ?? {})}`
   );
 }
 
@@ -3273,7 +3312,130 @@ function createDeploymentProgressEmitter() {
   };
 }
 
+// ../shared-types/src/ucan-store-bootstrap.ts
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeNonEmptyString(value) {
+  if (typeof value !== "string") return null;
+  const normalized = value.trim();
+  return normalized ? normalized : null;
+}
+function normalizeDid(value) {
+  const did = normalizeNonEmptyString(value);
+  return did && did.startsWith("did:") ? did : null;
+}
+function normalizeOrigin(value) {
+  const raw = normalizeNonEmptyString(value);
+  if (!raw) return null;
+  try {
+    const parsed = new URL(raw);
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:" || !parsed.hostname || parsed.pathname && parsed.pathname !== "/" || parsed.search || parsed.hash) {
+      return null;
+    }
+    return parsed.origin;
+  } catch {
+    return null;
+  }
+}
+function normalizeExpiration(value) {
+  if (value == null) return void 0;
+  if (value === null) return null;
+  if (!Number.isInteger(value) || Number(value) < 0) return void 0;
+  return Number(value);
+}
+function validateUcanStoreBootstrapPackage(value) {
+  if (!isRecord(value)) {
+    return {
+      valid: false,
+      errors: ["Bootstrap package must be a JSON object."],
+      bootstrapPackage: null
+    };
+  }
+  const errors = [];
+  const operatorAddress = normalizeNonEmptyString(value.operatorAddress);
+  if (!operatorAddress || !/^0x[a-fA-F0-9]{40}$/.test(operatorAddress)) {
+    errors.push("operatorAddress must be a 0x-prefixed 20-byte Ethereum address.");
+  }
+  const adminDid = normalizeDid(value.adminDid);
+  if (!adminDid) {
+    errors.push("adminDid must be a non-empty DID string.");
+  }
+  const serviceDidRaw = value.serviceDid;
+  const serviceDid = serviceDidRaw == null || serviceDidRaw === "" ? null : normalizeDid(serviceDidRaw);
+  if (serviceDidRaw != null && serviceDidRaw !== "" && !serviceDid) {
+    errors.push("serviceDid must be empty or a non-empty DID string.");
+  }
+  const spaceDid = normalizeDid(value.spaceDid);
+  if (!spaceDid) {
+    errors.push("spaceDid must be a non-empty DID string.");
+  }
+  const rootDelegationProof = normalizeNonEmptyString(value.rootDelegationProof);
+  if (!rootDelegationProof) {
+    errors.push("rootDelegationProof must be a non-empty proof string.");
+  }
+  const allowedCapabilities = Array.isArray(value.allowedCapabilities) ? value.allowedCapabilities.map((entry) => normalizeNonEmptyString(entry)).filter((entry) => Boolean(entry)) : [];
+  if (allowedCapabilities.length === 0) {
+    errors.push("allowedCapabilities must contain at least one capability string.");
+  }
+  const defaultUserDelegationExpiration = normalizeExpiration(
+    value.defaultUserDelegationExpiration
+  );
+  if (value.defaultUserDelegationExpiration != null && defaultUserDelegationExpiration === void 0) {
+    errors.push(
+      "defaultUserDelegationExpiration must be null or a non-negative integer number of seconds."
+    );
+  }
+  const maxUserDelegationExpiration = normalizeExpiration(
+    value.maxUserDelegationExpiration
+  );
+  if (value.maxUserDelegationExpiration != null && maxUserDelegationExpiration === void 0) {
+    errors.push(
+      "maxUserDelegationExpiration must be null or a non-negative integer number of seconds."
+    );
+  }
+  if (typeof defaultUserDelegationExpiration === "number" && typeof maxUserDelegationExpiration === "number" && defaultUserDelegationExpiration > maxUserDelegationExpiration) {
+    errors.push(
+      "defaultUserDelegationExpiration cannot exceed maxUserDelegationExpiration."
+    );
+  }
+  const pwaOrigin = normalizeOrigin(value.pwaOrigin);
+  if (!pwaOrigin) {
+    errors.push("pwaOrigin must be an http(s) origin without path, query, or hash.");
+  }
+  const serviceOrigin = normalizeOrigin(value.serviceOrigin);
+  if (!serviceOrigin) {
+    errors.push("serviceOrigin must be an http(s) origin without path, query, or hash.");
+  }
+  if (errors.length > 0) {
+    return {
+      valid: false,
+      errors,
+      bootstrapPackage: null
+    };
+  }
+  return {
+    valid: true,
+    errors: [],
+    bootstrapPackage: {
+      operatorAddress,
+      adminDid,
+      serviceDid,
+      spaceDid,
+      rootDelegationProof,
+      allowedCapabilities,
+      defaultUserDelegationExpiration,
+      maxUserDelegationExpiration,
+      pwaOrigin,
+      serviceOrigin
+    }
+  };
+}
+
 // src/shared/controller.ts
+function deploymentNoun(profile) {
+  return profile === "ucan-store" ? "service" : "relay";
+}
 function asJsonFetch(input, init) {
   return fetch(input, init).then(async (response) => ({
     ok: response.ok,
@@ -3281,11 +3443,122 @@ function asJsonFetch(input, init) {
     json: async () => await response.json()
   }));
 }
-function isConfirmedRelaySetupResult(value) {
+function isConfirmedGuestSetupResult(value) {
   return Boolean(
     value && typeof value === "object" && "status" in value && value.status === "configured"
   );
 }
+function defaultUcanStoreBootstrapInput(props) {
+  return {
+    adminDid: props.ucanStoreBootstrap?.adminDid ?? "",
+    serviceDid: props.ucanStoreBootstrap?.serviceDid ?? "",
+    spaceDid: props.ucanStoreBootstrap?.spaceDid ?? "",
+    rootDelegationProof: props.ucanStoreBootstrap?.rootDelegationProof ?? "",
+    allowedCapabilities: props.ucanStoreBootstrap?.allowedCapabilities ?? "",
+    defaultUserDelegationExpiration: props.ucanStoreBootstrap?.defaultUserDelegationExpiration ?? "",
+    maxUserDelegationExpiration: props.ucanStoreBootstrap?.maxUserDelegationExpiration ?? "",
+    pwaOrigin: props.ucanStoreBootstrap?.pwaOrigin ?? "",
+    serviceOrigin: props.ucanStoreBootstrap?.serviceOrigin ?? ""
+  };
+}
+function currentPageOrigin() {
+  try {
+    const origin = globalThis.location?.origin?.trim();
+    return origin ? origin : null;
+  } catch {
+    return null;
+  }
+}
+function parseOptionalExpiration(value) {
+  const normalized = value.trim();
+  if (!normalized) return void 0;
+  const parsed = Number.parseInt(normalized, 10);
+  if (!Number.isInteger(parsed) || parsed < 0) {
+    return null;
+  }
+  return parsed;
+}
+function parseAllowedCapabilities(value) {
+  return value.split(/[\n,]/).map((entry) => entry.trim()).filter(Boolean);
+}
+function draftUcanStoreBootstrapErrors(args) {
+  const errors = [];
+  const { input } = args;
+  if (!args.operatorAddress) {
+    errors.push("Connect MetaMask before configuring the ucan-store bootstrap package.");
+  }
+  if (!input.adminDid.trim().startsWith("did:")) {
+    errors.push("Admin DID must be a non-empty DID string.");
+  }
+  if (input.serviceDid.trim() && !input.serviceDid.trim().startsWith("did:")) {
+    errors.push("Service DID must be empty or a non-empty DID string.");
+  }
+  if (!input.spaceDid.trim().startsWith("did:")) {
+    errors.push("Space DID must be a non-empty DID string.");
+  }
+  if (!input.rootDelegationProof.trim()) {
+    errors.push("Root delegation proof is required.");
+  }
+  if (parseAllowedCapabilities(input.allowedCapabilities).length === 0) {
+    errors.push("Add at least one allowed capability.");
+  }
+  const defaultExpiration = parseOptionalExpiration(
+    input.defaultUserDelegationExpiration
+  );
+  if (defaultExpiration === null) {
+    errors.push(
+      "Default user delegation expiration must be a non-negative integer number of seconds."
+    );
+  }
+  const maxExpiration = parseOptionalExpiration(
+    input.maxUserDelegationExpiration
+  );
+  if (maxExpiration === null) {
+    errors.push(
+      "Max user delegation expiration must be a non-negative integer number of seconds."
+    );
+  }
+  if (typeof defaultExpiration === "number" && typeof maxExpiration === "number" && defaultExpiration > maxExpiration) {
+    errors.push(
+      "Default user delegation expiration cannot exceed the max user delegation expiration."
+    );
+  }
+  const pwaOrigin = input.pwaOrigin.trim() || currentPageOrigin() || "";
+  if (!pwaOrigin) {
+    errors.push("PWA origin is required for the ucan-store bootstrap package.");
+  }
+  return errors;
+}
+function buildUcanStoreBootstrapPackage(args) {
+  const candidate = {
+    operatorAddress: args.operatorAddress,
+    adminDid: args.input.adminDid.trim(),
+    serviceDid: args.input.serviceDid.trim() || null,
+    spaceDid: args.input.spaceDid.trim(),
+    rootDelegationProof: args.input.rootDelegationProof.trim(),
+    allowedCapabilities: parseAllowedCapabilities(args.input.allowedCapabilities),
+    defaultUserDelegationExpiration: parseOptionalExpiration(
+      args.input.defaultUserDelegationExpiration
+    ),
+    maxUserDelegationExpiration: parseOptionalExpiration(
+      args.input.maxUserDelegationExpiration
+    ),
+    pwaOrigin: args.input.pwaOrigin.trim() || args.pwaOriginFallback?.trim() || currentPageOrigin() || "",
+    serviceOrigin: args.input.serviceOrigin.trim() || args.serviceOriginFallback?.trim() || ""
+  };
+  if (candidate.defaultUserDelegationExpiration === void 0) {
+    delete candidate.defaultUserDelegationExpiration;
+  }
+  if (candidate.maxUserDelegationExpiration === void 0) {
+    delete candidate.maxUserDelegationExpiration;
+  }
+  if (candidate.serviceDid === null) {
+    delete candidate.serviceDid;
+  }
+  return validateUcanStoreBootstrapPackage(
+    candidate
+  );
+}
 function defaultState(props = {}) {
   return {
     ready: false,
@@ -3300,6 +3573,7 @@ function defaultState(props = {}) {
     manifestJson: props.manifestJson ?? "",
     sshPublicKey: props.sshPublicKey ?? "",
     instanceName: props.instanceName ?? DEFAULT_INSTANCE_NAME,
+    ucanStoreBootstrap: defaultUcanStoreBootstrapInput(props),
     tierId: DEFAULT_TIER_ID,
     showAdvanced: Boolean(props.manifestJson?.trim() || props.sshPublicKey?.trim()),
     showInstances: props.showInstances ?? true,
@@ -3434,13 +3708,33 @@ async function resolveManifest(args) {
   if (pasted) return pasted;
   return loadRootfsManifest(args.manifestUrl);
 }
-function relayProfileForManifest(manifest) {
+function deploymentProfileForManifest(manifest) {
   if (manifest?.profile === "uc-go-peer") return "uc-go-peer";
   if (manifest?.profile === "orbitdb-relay") {
     return manifest.profile;
   }
+  if (manifest?.profile === "ucan-store") return "ucan-store";
   return null;
 }
+function bootstrapRelayProfileForManifest(manifest) {
+  const profile = deploymentProfileForManifest(manifest);
+  if (profile === "uc-go-peer" || profile === "orbitdb-relay") {
+    return profile;
+  }
+  return null;
+}
+function supportsBootstrapRegistrationsForManifest(manifest) {
+  return bootstrapRelayProfileForManifest(manifest) != null;
+}
+function deploymentReadyLabel(profile) {
+  return profile === "ucan-store" ? "Service ready" : "Relay ready";
+}
+function deploymentReadyDetail(profile, fallback) {
+  if (profile === "ucan-store") {
+    return "The upload service runtime is available and the deployment finished successfully.";
+  }
+  return fallback;
+}
 function registrationIdInstanceItemHash(registrationId) {
   const normalized = String(registrationId ?? "").trim();
   if (!normalized) return null;
@@ -3689,19 +3983,148 @@ var SponsorRelayController = class {
     this.progressEmitter.emit(nextEvent);
   }
   async configureRelayBootstrapRegistration(args) {
-    const profile = relayProfileForManifest(this.state.manifest);
-    if (!profile) return;
-    if (!this.state.wallet.address) {
+    const deploymentProfile = deploymentProfileForManifest(this.state.manifest);
+    const profile = bootstrapRelayProfileForManifest(this.state.manifest);
+    if (!profile && deploymentProfile !== "ucan-store") return;
+    if (profile && !this.state.wallet.address) {
       throw new Error("A connected wallet is required to register relay bootstrap addresses.");
     }
-    if (!args.runtime.hostIpv4) {
-      throw new Error("Relay runtime did not expose a host IPv4 address.");
+    const runtimeHostIpv4 = args.runtime.hostIpv4;
+    if (!runtimeHostIpv4) {
+      throw new Error(
+        `${deploymentProfile === "ucan-store" ? "Service" : "Relay"} runtime did not expose a host IPv4 address.`
+      );
     }
     let runtime = args.runtime;
     let mappedPorts2 = runtime.mappedPorts ?? {};
     const setupPort = mappedPorts2["80"]?.host ?? null;
     if (!setupPort) {
-      throw new Error("Relay runtime did not expose the temporary setup endpoint.");
+      throw new Error(
+        `${deploymentProfile === "ucan-store" ? "Service" : "Relay"} runtime did not expose the temporary setup endpoint.`
+      );
+    }
+    if (deploymentProfile === "ucan-store") {
+      const serviceHostIpv4 = runtimeHostIpv4;
+      const serviceProxyUrl = runtime.proxyUrl;
+      if (!serviceProxyUrl) {
+        throw new Error("Service runtime did not expose a proxy URL.");
+      }
+      const walletAddress2 = this.state.wallet.address;
+      if (!walletAddress2) {
+        throw new Error("A connected wallet is required to configure the ucan-store bootstrap package.");
+      }
+      const bootstrapValidation = buildUcanStoreBootstrapPackage({
+        input: this.state.ucanStoreBootstrap,
+        operatorAddress: walletAddress2,
+        serviceOriginFallback: serviceProxyUrl,
+        pwaOriginFallback: currentPageOrigin()
+      });
+      if (!bootstrapValidation.valid || !bootstrapValidation.bootstrapPackage) {
+        throw new Error(
+          bootstrapValidation.errors[0] ?? "The ucan-store bootstrap package is invalid."
+        );
+      }
+      this.emitProgress({
+        stage: "deployment-confirmed",
+        label: "Configuring service",
+        progress: 93,
+        status: "info",
+        itemHash: args.itemHash,
+        detail: "Waiting for the guest setup endpoint before applying the upload service configuration."
+      });
+      const setupHealth = await waitForSetupEndpoint({
+        hostIpv4: serviceHostIpv4,
+        setupPort,
+        fetch: (url, init) => fetch(url, init),
+        attempts: 15,
+        delayMs: 4e3,
+        httpTimeoutMs: 1e4,
+        onAttempt: (result, attempt, attempts) => {
+          this.emitProgress({
+            stage: "deployment-confirmed",
+            label: "Waiting for guest setup",
+            progress: 93,
+            status: result.ok ? "success" : "info",
+            itemHash: args.itemHash,
+            detail: result.ok ? `Setup endpoint ${attempt}/${attempts}: ready at http://${serviceHostIpv4}:${setupPort}/health.` : `Setup endpoint ${attempt}/${attempts}: waiting for http://${serviceHostIpv4}:${setupPort}/health.`
+          });
+        }
+      });
+      if (!setupHealth.ok) {
+        throw new Error(
+          `Service setup endpoint did not become reachable at http://${serviceHostIpv4}:${setupPort}/health.`
+        );
+      }
+      this.emitProgress({
+        stage: "deployment-confirmed",
+        label: "Applying service config",
+        progress: 94,
+        status: "info",
+        itemHash: args.itemHash,
+        detail: "Publishing the public HTTPS origin into the guest upload service configuration."
+      });
+      const configureResult = await configureUcanStore({
+        hostIpv4: serviceHostIpv4,
+        publicIpv6: runtime.ipv6,
+        setupPort,
+        proxyUrl: serviceProxyUrl,
+        webauthnOrigin: serviceProxyUrl,
+        adminDid: bootstrapValidation.bootstrapPackage.adminDid,
+        bootstrapPackage: bootstrapValidation.bootstrapPackage,
+        fetch: (url, init) => fetch(url, init),
+        timeoutMs: 18e4
+      });
+      if (!isConfirmedGuestSetupResult(configureResult)) {
+        throw new Error(
+          `Service guest configuration could not be confirmed at http://${serviceHostIpv4}:${setupPort}/configure.`
+        );
+      }
+      this.emitProgress({
+        stage: "deployment-confirmed",
+        label: "Waiting for service metadata",
+        progress: 95,
+        status: "info",
+        itemHash: args.itemHash,
+        detail: "Waiting for the upload service metadata endpoint to report the public service DID and PWA environment."
+      });
+      const serviceMetadata = await fetchUcGoPeerMetadata({
+        hostIpv4: serviceHostIpv4,
+        setupPort,
+        fetch: (url, init) => fetch(url, init),
+        attempts: 80,
+        delayMs: 3e3,
+        timeoutMs: 24e4,
+        isReady: ({ payload, ok }) => {
+          if (!ok || !payload || typeof payload !== "object") return false;
+          const metadata2 = payload.metadata && typeof payload.metadata === "object" ? payload.metadata : null;
+          const pwaEnv = metadata2?.pwa_env && typeof metadata2.pwa_env === "object" ? metadata2.pwa_env : null;
+          return Boolean(
+            typeof metadata2?.upload_service_did === "string" && metadata2.upload_service_did.length > 0 && typeof pwaEnv?.VITE_UPLOAD_SERVICE_URL === "string" && pwaEnv.VITE_UPLOAD_SERVICE_URL.length > 0
+          );
+        },
+        onAttempt: ({ ready, attempt, attempts, requestUrl }) => {
+          this.emitProgress({
+            stage: "deployment-confirmed",
+            label: ready ? "Service metadata ready" : "Waiting for service metadata",
+            progress: 95,
+            status: ready ? "success" : "info",
+            itemHash: args.itemHash,
+            detail: ready ? `Service metadata ${attempt}/${attempts}: public upload service wiring is ready.` : `Service metadata ${attempt}/${attempts}: waiting for ${requestUrl}.`
+          });
+        }
+      });
+      const metadata = serviceMetadata && typeof serviceMetadata === "object" ? serviceMetadata.metadata ?? null : null;
+      if (!metadata || typeof metadata !== "object" || typeof metadata.upload_service_did !== "string") {
+        throw new Error(
+          "Service metadata did not include the public upload service DID."
+        );
+      }
+      return;
+    }
+    if (!profile) return;
+    const walletAddress = this.state.wallet.address;
+    if (!walletAddress) {
+      throw new Error("A connected wallet is required to register relay bootstrap addresses.");
     }
     let bootstrapSignalRelayMetadata = null;
     if (profile === "orbitdb-relay") {
@@ -3714,7 +4137,7 @@ var SponsorRelayController = class {
         detail: "Waiting for the guest setup endpoint before collecting relay metadata."
       });
       const setupHealth = await waitForSetupEndpoint({
-        hostIpv4: args.runtime.hostIpv4,
+        hostIpv4: runtimeHostIpv4,
         setupPort,
         fetch: (url, init) => fetch(url, init),
         attempts: 15,
@@ -3727,13 +4150,13 @@ var SponsorRelayController = class {
             progress: 93,
             status: result.ok ? "success" : "info",
             itemHash: args.itemHash,
-            detail: result.ok ? `Setup endpoint ${attempt}/${attempts}: ready at http://${args.runtime.hostIpv4}:${setupPort}/health.` : `Setup endpoint ${attempt}/${attempts}: waiting for http://${args.runtime.hostIpv4}:${setupPort}/health.`
+            detail: result.ok ? `Setup endpoint ${attempt}/${attempts}: ready at http://${runtimeHostIpv4}:${setupPort}/health.` : `Setup endpoint ${attempt}/${attempts}: waiting for http://${runtimeHostIpv4}:${setupPort}/health.`
           });
         }
       });
       if (!setupHealth.ok) {
         throw new Error(
-          `Relay setup endpoint did not become reachable at http://${args.runtime.hostIpv4}:${setupPort}/health.`
+          `Relay setup endpoint did not become reachable at http://${runtimeHostIpv4}:${setupPort}/health.`
         );
       }
       this.emitProgress({
@@ -3750,7 +4173,7 @@ var SponsorRelayController = class {
         throw new Error("OrbitDB relay runtime is missing required mapped TCP/WS ports.");
       }
       const configureResult = await configureOrbitdbRelaySetup2({
-        hostIpv4: args.runtime.hostIpv4,
+        hostIpv4: runtimeHostIpv4,
         publicIpv6: args.runtime.ipv6,
         setupPort,
         tcpPort,
@@ -3763,7 +4186,7 @@ var SponsorRelayController = class {
         fetch: (url, init) => fetch(url, init),
         timeoutMs: 18e4
       });
-      if (!isConfirmedRelaySetupResult(configureResult)) {
+      if (!isConfirmedGuestSetupResult(configureResult)) {
         throw new Error(
           `Relay guest configuration could not be confirmed at http://${args.runtime.hostIpv4}:${setupPort}/configure.`
         );
@@ -3821,7 +4244,7 @@ var SponsorRelayController = class {
           "Relay runtime lost its host IPv4 address while waiting for HTTPS activation."
         );
       }
-      const runtimeHostIpv4 = runtime.hostIpv4;
+      const runtimeHostIpv42 = runtime.hostIpv4;
       const activeProxyUrl = runtime.webAccess?.active === true ? runtime.proxyUrl ?? null : null;
       this.emitProgress({
         stage: "deployment-confirmed",
@@ -3834,13 +4257,13 @@ var SponsorRelayController = class {
       const record = {
         deploymentToken: args.deploymentToken,
         profile,
-        ownerAddress: this.state.wallet.address,
+        ownerAddress: walletAddress,
         instanceItemHash: args.itemHash,
         createdAt: (/* @__PURE__ */ new Date()).toISOString(),
         expiresAt: new Date(Date.now() + 30 * 6e4).toISOString(),
         status: "pending",
         runtime: {
-          publicIpv4: runtimeHostIpv4,
+          publicIpv4: runtimeHostIpv42,
           publicIpv6: runtime.ipv6 ?? null,
           proxyUrl: activeProxyUrl,
           mappedPorts: mappedPorts2
@@ -3854,7 +4277,7 @@ var SponsorRelayController = class {
         }
       };
       const bootstrapConfigPublication = await publishVmBootstrapConfig({
-        sender: this.state.wallet.address,
+        sender: walletAddress,
         record,
         signer: personalSign,
         hasher: sha256Hex,
@@ -3881,7 +4304,7 @@ var SponsorRelayController = class {
       });
       const bootstrapConfigSignal = await waitForVmBootstrapConfigSignal({
         deploymentToken: args.deploymentToken,
-        ownerAddress: this.state.wallet.address,
+        ownerAddress: walletAddress,
         instanceItemHash: args.itemHash,
         fetch: asJsonFetch,
         apiHost: this.client.apiHost,
@@ -4053,7 +4476,7 @@ var SponsorRelayController = class {
         detail: "Guest bootstrap registration was delayed. Publishing the relay bootstrap record from the browser."
       });
       const fallbackPublication = await publishRelayBootstrapRegistration({
-        sender: this.state.wallet.address,
+        sender: walletAddress,
         signer: personalSign,
         hasher: sha256Hex,
         fetch: asJsonFetch,
@@ -4073,7 +4496,7 @@ var SponsorRelayController = class {
         fallbackPublication
       });
       const fallbackVisibleRegistration = await waitForRelayBootstrapRegistration({
-        sender: this.state.wallet.address,
+        sender: walletAddress,
         registrationId,
         peerId,
         fetch: asJsonFetch,
@@ -4106,7 +4529,7 @@ var SponsorRelayController = class {
     if (profile === "uc-go-peer" && args.deploymentToken) {
       let cleanupAggregateItemHash = null;
       await deleteVmBootstrapConfig({
-        sender: this.state.wallet.address,
+        sender: walletAddress,
         deploymentToken: args.deploymentToken,
         signer: personalSign,
         hasher: sha256Hex,
@@ -4272,17 +4695,35 @@ var SponsorRelayController = class {
       });
       return;
     }
+    const currentProfile = deploymentProfileForManifest(this.state.manifest);
     const hasConfirmedBootstrapRegistration = this.state.bootstrapRegistrations.some(
       (entry) => entry.instanceItemHash === itemHash && entry.confirmed
     );
+    if (currentProfile === "ucan-store") {
+      this.emitProgress({
+        stage: "completed",
+        label: deploymentReadyLabel(currentProfile),
+        progress: 100,
+        status: "success",
+        itemHash,
+        detail: deploymentReadyDetail(
+          currentProfile,
+          "Runtime networking is available and the deployment finished successfully."
+        )
+      });
+      return;
+    }
     if (hasConfirmedBootstrapRegistration) {
       this.emitProgress({
         stage: "completed",
-        label: "Relay ready",
+        label: deploymentReadyLabel(currentProfile),
         progress: 100,
         status: "success",
         itemHash,
-        detail: "Runtime networking is available and the relay bootstrap registration is confirmed on Aleph."
+        detail: deploymentReadyDetail(
+          currentProfile,
+          "Runtime networking is available and the relay bootstrap registration is confirmed on Aleph."
+        )
       });
       return;
     }
@@ -4292,7 +4733,7 @@ var SponsorRelayController = class {
       progress: 92,
       status: "info",
       itemHash,
-      detail: "Deployment processed and runtime networking is available. Finishing relay setup and bootstrap verification."
+      detail: `Deployment processed and runtime networking is available. Finishing ${deploymentNoun(currentProfile)} setup and verification.`
     });
   }
   canSkipRuntimeRefresh(instance) {
@@ -4405,6 +4846,15 @@ var SponsorRelayController = class {
   setInstanceName(instanceName) {
     this.patch({ instanceName });
   }
+  setUcanStoreBootstrapField(field, value) {
+    this.patch({
+      ucanStoreBootstrap: {
+        ...this.state.ucanStoreBootstrap,
+        [field]: value
+      },
+      showAdvanced: this.state.showAdvanced || Boolean(value.trim())
+    });
+  }
   setTierId(tierId) {
     this.patch({ tierId });
     this.recomputePricingSummary();
@@ -4490,6 +4940,7 @@ var SponsorRelayController = class {
     }
   }
   async refresh() {
+    const currentProfile = deploymentProfileForManifest(this.state.manifest);
     this.trace("refresh:start", {
       wallet: this.state.wallet.address,
       manifestUrl: this.state.manifestUrl,
@@ -4498,7 +4949,7 @@ var SponsorRelayController = class {
     this.patch({
       busy: { refreshing: true },
       errorText: null,
-      statusText: "Refreshing relay sponsor data"
+      statusText: currentProfile === "ucan-store" ? "Refreshing service deployment data" : "Refreshing relay deployment data"
     });
     try {
       const [pricingSummary, crns] = await Promise.all([
@@ -4510,6 +4961,8 @@ var SponsorRelayController = class {
         manifestJson: this.state.manifestJson
       }).catch((error) => manifestLoadErrorState(error));
       const manifest = manifestState.manifest;
+      const resolvedProfile = deploymentProfileForManifest(manifest);
+      const bootstrapEnabled = supportsBootstrapRegistrationsForManifest(manifest);
       let balance = this.state.balance;
       let instances = [];
       let bootstrapRegistrations = [];
@@ -4518,10 +4971,10 @@ var SponsorRelayController = class {
         const [nextBalance, rawInstances, rawBootstrapPosts] = await Promise.all([
           this.client.fetchBalance(this.state.wallet.address),
           this.state.showInstances ? this.client.fetchInstances(this.state.wallet.address) : Promise.resolve([]),
-          fetchAlephBootstrapPosts({
+          bootstrapEnabled ? fetchAlephBootstrapPosts({
             apiHost: this.client.apiHost,
             fetch
-          }).catch(() => [])
+          }).catch(() => []) : Promise.resolve([])
         ]);
         balance = nextBalance;
         instances = await Promise.all(
@@ -4651,7 +5104,7 @@ var SponsorRelayController = class {
         bootstrapRegistrations,
         orphanBootstrapRegistrations,
         busy: { refreshing: false },
-        statusText: "Relay sponsor data ready"
+        statusText: resolvedProfile === "ucan-store" ? "Service deployment data ready" : "Relay deployment data ready"
       });
       this.trace("refresh:success", {
         manifestValid: manifestState.valid,
@@ -4688,6 +5141,16 @@ var SponsorRelayController = class {
       });
       return;
     }
+    if (deploymentProfileForManifest(this.state.manifest) === "ucan-store") {
+      const draftErrors = draftUcanStoreBootstrapErrors({
+        input: this.state.ucanStoreBootstrap,
+        operatorAddress: this.state.wallet.address
+      });
+      if (draftErrors.length > 0) {
+        this.patch({ errorText: draftErrors[0] });
+        return;
+      }
+    }
     this.patch({
       busy: { deploying: true },
       errorText: null,
@@ -4737,7 +5200,7 @@ var SponsorRelayController = class {
           detail: `Trying ${crnDisplayName}`
         });
         try {
-          const profile = relayProfileForManifest(this.state.manifest);
+          const profile = deploymentProfileForManifest(this.state.manifest);
           attemptProfile = profile;
           const sshPublicKey = profile === "uc-go-peer" ? appendDeploymentTokenToSshPublicKey(
             this.state.sshPublicKey.trim(),
@@ -4956,11 +5419,14 @@ var SponsorRelayController = class {
           this.lastCompletedDeploymentHash = result.itemHash;
           this.emitProgress({
             stage: "completed",
-            label: "Relay ready",
+            label: deploymentReadyLabel(attemptProfile),
             progress: 100,
             status: "success",
             itemHash: result.itemHash,
-            detail: "Relay runtime, setup, metadata, and bootstrap registration are confirmed."
+            detail: deploymentReadyDetail(
+              attemptProfile,
+              "Relay runtime, setup, metadata, and bootstrap registration are confirmed."
+            )
           });
           return;
         } catch (error) {
@@ -5034,11 +5500,14 @@ var SponsorRelayController = class {
                     this.lastCompletedDeploymentHash = attemptItemHash;
                     this.emitProgress({
                       stage: "completed",
-                      label: "Relay ready",
+                      label: deploymentReadyLabel(attemptProfile),
                       progress: 100,
                       status: "success",
                       itemHash: attemptItemHash,
-                      detail: "The relay completed startup after a transient UI polling error. Runtime and bootstrap registration are confirmed."
+                      detail: deploymentReadyDetail(
+                        attemptProfile,
+                        "The relay completed startup after a transient UI polling error. Runtime and bootstrap registration are confirmed."
+                      )
                     });
                     return;
                   }
@@ -5065,11 +5534,14 @@ var SponsorRelayController = class {
               this.lastCompletedDeploymentHash = attemptItemHash;
               this.emitProgress({
                 stage: "completed",
-                label: "Relay ready",
+                label: deploymentReadyLabel(attemptProfile),
                 progress: 100,
                 status: "success",
                 itemHash: attemptItemHash,
-                detail: "The relay completed startup after a transient browser-side polling error. Runtime and bootstrap registration are confirmed."
+                detail: deploymentReadyDetail(
+                  attemptProfile,
+                  "The relay completed startup after a transient browser-side polling error. Runtime and bootstrap registration are confirmed."
+                )
               });
               return;
             }
@@ -5384,7 +5856,8 @@ function useSponsorRelayController(props) {
       props.schedulerApiHost,
       props.showInstances,
       props.sshPublicKey,
-      props.twoN6ApiHost
+      props.twoN6ApiHost,
+      props.ucanStoreBootstrap
     ]
   );
   useEffect(() => {
@@ -5518,6 +5991,27 @@ var POLLING_STAGES = /* @__PURE__ */ new Set([
   "publishing-bootstrap",
   "refreshing-instances"
 ]);
+function stateDeploymentProfile(state) {
+  return state.manifest?.profile === "ucan-store" ? "ucan-store" : "relay";
+}
+function supportsBootstrapUi(state) {
+  return stateDeploymentProfile(state) !== "ucan-store";
+}
+function deploymentPanelTitle(state) {
+  return stateDeploymentProfile(state) === "ucan-store" ? "Sponsor Service" : "Sponsor Relay";
+}
+function deploymentLauncherLabel(state, compactInlineLabel, launcherMode) {
+  if (launcherMode === "inline" && compactInlineLabel) {
+    return stateDeploymentProfile(state) === "ucan-store" ? "Service" : "Relay";
+  }
+  return deploymentPanelTitle(state);
+}
+function deploymentInstanceFallbackLabel(state) {
+  return stateDeploymentProfile(state) === "ucan-store" ? "service" : "relay";
+}
+function deploymentButtonLabel(state) {
+  return stateDeploymentProfile(state) === "ucan-store" ? "Deploy Service" : "Deploy Relay";
+}
 function isDeploymentProgressVisible(state) {
   const stage = state.deploymentProgress.stage;
   if (stage === "idle") {
@@ -5533,17 +6027,19 @@ function isDeploymentProgressVisible(state) {
 }
 function pollingIndicator(state) {
   if (state.busy.refreshing) {
+    const isService2 = stateDeploymentProfile(state) === "ucan-store";
     return {
-      label: "Checking relay state",
-      detail: state.statusText || "Refreshing relay sponsor data from Aleph and the selected CRN."
+      label: isService2 ? "Checking deployment state" : "Checking relay state",
+      detail: state.statusText || (isService2 ? "Refreshing service deployment data from Aleph and the selected CRN." : "Refreshing relay deployment data from Aleph and the selected CRN.")
     };
   }
   if (!POLLING_STAGES.has(state.deploymentProgress.stage)) {
     return null;
   }
+  const isService = stateDeploymentProfile(state) === "ucan-store";
   return {
-    label: state.deploymentProgress.label || "Polling relay state",
-    detail: state.deploymentProgress.detail || state.statusText || "Waiting for the next confirmed relay state from Aleph."
+    label: state.deploymentProgress.label || (isService ? "Polling deployment state" : "Polling relay state"),
+    detail: state.deploymentProgress.detail || state.statusText || (isService ? "Waiting for the next confirmed deployment state from Aleph." : "Waiting for the next confirmed relay state from Aleph.")
   };
 }
 function launcherIndicator(state) {
@@ -5592,7 +6088,7 @@ function launcherIndicator(state) {
   if (state.busy.refreshing) {
     return {
       label: "SYNC",
-      detail: "Refreshing relay state",
+      detail: stateDeploymentProfile(state) === "ucan-store" ? "Refreshing deployment state" : "Refreshing relay state",
       tone: "info"
     };
   }
@@ -5609,6 +6105,7 @@ function SponsorRelayFab(props) {
   const versionLabel = resolvedVersion.startsWith("v") ? resolvedVersion : `v${resolvedVersion}`;
   const launcherMode = props.launcherMode ?? "floating";
   const indicator = launcherIndicator(state);
+  const bootstrapUiEnabled = supportsBootstrapUi(state);
   const confirmedRegistrationByInstanceHash = new Map(
     (state.bootstrapRegistrations ?? []).filter((entry) => entry.confirmed && entry.instanceItemHash).map((entry) => [entry.instanceItemHash, entry])
   );
@@ -5710,7 +6207,8 @@ function SponsorRelayFab(props) {
     bottom: "11.5rem",
     maxHeight: "calc(100vh - 12.5rem)"
   };
-  const launcherLabel = launcherMode === "inline" && compactInlineLabel ? "Relay" : "Sponsor Relay";
+  const launcherLabel = deploymentLauncherLabel(state, compactInlineLabel, launcherMode);
+  const deployCallToAction = state.wallet.connected ? state.busy.deploying ? "Deploying\u2026" : deploymentButtonLabel(state) : "Connect MetaMask";
   return /* @__PURE__ */ jsxs(Fragment, { children: [
     /* @__PURE__ */ jsx("style", { children: `@keyframes leSpaceRelayPulse { 0%, 100% { transform: scale(1); opacity: 0.74; } 50% { transform: scale(1.22); opacity: 1; } }` }),
     /* @__PURE__ */ jsxs(
@@ -5723,7 +6221,7 @@ function SponsorRelayFab(props) {
         onMouseLeave: () => setHovered(false),
         onFocus: () => setHovered(true),
         onBlur: () => setHovered(false),
-        title: indicator.detail ?? "Sponsor Relay",
+        title: indicator.detail ?? deploymentPanelTitle(state),
         style: {
           position: launcherMode === "floating" ? "fixed" : "relative",
           right: launcherMode === "floating" ? "1.4rem" : void 0,
@@ -5880,7 +6378,7 @@ function SponsorRelayFab(props) {
                       margin: "0.2rem 0 0",
                       fontFamily: '"Epilogue", sans-serif'
                     },
-                    children: "Sponsor Relay"
+                    children: deploymentPanelTitle(state)
                   }
                 )
               ] }),
@@ -6217,7 +6715,156 @@ function SponsorRelayFab(props) {
                                 )
                               ]
                             }
-                          )
+                          ),
+                          stateDeploymentProfile(state) === "ucan-store" ? /* @__PURE__ */ jsxs("details", { open: true, children: [
+                            /* @__PURE__ */ jsx("summary", { children: "UCAN Store Bootstrap" }),
+                            /* @__PURE__ */ jsxs(
+                              "div",
+                              {
+                                style: {
+                                  display: "grid",
+                                  gap: "0.75rem",
+                                  marginTop: "0.65rem"
+                                },
+                                children: [
+                                  /* @__PURE__ */ jsx(
+                                    "input",
+                                    {
+                                      style: fieldStyle,
+                                      value: state.ucanStoreBootstrap.adminDid,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "adminDid",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "Admin DID"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "input",
+                                    {
+                                      style: fieldStyle,
+                                      value: state.ucanStoreBootstrap.serviceDid,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "serviceDid",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "Service DID override (optional)"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "input",
+                                    {
+                                      style: fieldStyle,
+                                      value: state.ucanStoreBootstrap.spaceDid,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "spaceDid",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "Space DID"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "textarea",
+                                    {
+                                      style: fieldStyle,
+                                      rows: 5,
+                                      value: state.ucanStoreBootstrap.rootDelegationProof,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "rootDelegationProof",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "Root delegation proof"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "textarea",
+                                    {
+                                      style: fieldStyle,
+                                      rows: 4,
+                                      value: state.ucanStoreBootstrap.allowedCapabilities,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "allowedCapabilities",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "Allowed capabilities, one per line or comma-separated\nspace/blob/add\nspace/blob/list"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsxs(
+                                    "div",
+                                    {
+                                      style: {
+                                        display: "grid",
+                                        gap: "0.75rem",
+                                        gridTemplateColumns: "repeat(auto-fit, minmax(10rem, 1fr))"
+                                      },
+                                      children: [
+                                        /* @__PURE__ */ jsx(
+                                          "input",
+                                          {
+                                            style: fieldStyle,
+                                            value: state.ucanStoreBootstrap.defaultUserDelegationExpiration,
+                                            onChange: (event) => controller.setUcanStoreBootstrapField(
+                                              "defaultUserDelegationExpiration",
+                                              event.currentTarget.value
+                                            ),
+                                            placeholder: "Default expiration (seconds)"
+                                          }
+                                        ),
+                                        /* @__PURE__ */ jsx(
+                                          "input",
+                                          {
+                                            style: fieldStyle,
+                                            value: state.ucanStoreBootstrap.maxUserDelegationExpiration,
+                                            onChange: (event) => controller.setUcanStoreBootstrapField(
+                                              "maxUserDelegationExpiration",
+                                              event.currentTarget.value
+                                            ),
+                                            placeholder: "Max expiration (seconds)"
+                                          }
+                                        )
+                                      ]
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "input",
+                                    {
+                                      style: fieldStyle,
+                                      value: state.ucanStoreBootstrap.pwaOrigin,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "pwaOrigin",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "PWA origin override (optional, defaults to current page origin)"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "input",
+                                    {
+                                      style: fieldStyle,
+                                      value: state.ucanStoreBootstrap.serviceOrigin,
+                                      onChange: (event) => controller.setUcanStoreBootstrapField(
+                                        "serviceOrigin",
+                                        event.currentTarget.value
+                                      ),
+                                      placeholder: "Service origin override (optional, defaults to runtime proxy URL)"
+                                    }
+                                  ),
+                                  /* @__PURE__ */ jsx(
+                                    "div",
+                                    {
+                                      style: {
+                                        color: "#9fb2ca",
+                                        fontSize: "0.74rem",
+                                        lineHeight: 1.35,
+                                        marginTop: "-0.15rem"
+                                      },
+                                      children: "Operator address comes from the connected MetaMask account. If you leave service origin empty, `relay-button` will use the runtime proxy URL during guest configuration."
+                                    }
+                                  )
+                                ]
+                              }
+                            )
+                          ] }) : null
                         ]
                       }
                     )
@@ -6253,7 +6900,7 @@ function SponsorRelayFab(props) {
             onClick: () => void (state.wallet.connected ? controller.deploy() : controller.connectWallet()),
             disabled: state.wallet.connected ? state.busy.deploying || state.rootfsHealth.tone !== "ok" : state.busy.connectingWallet,
             style: { ...primaryButtonStyle, width: "100%", marginTop: "1rem" },
-            children: state.wallet.connected ? state.busy.deploying ? "Deploying\u2026" : "Deploy Relay" : "Connect MetaMask"
+            children: deployCallToAction
           }
         ),
         state.lastDeploymentHash ? /* @__PURE__ */ jsxs("p", { children: [
@@ -6280,8 +6927,8 @@ function SponsorRelayFab(props) {
                         flexWrap: "wrap"
                       },
                       children: [
-                        (entry.instance.content?.metadata?.name ?? "relay") + " \xB7 " + shortHash(entry.instance.item_hash),
-                        confirmedRegistration ? /* @__PURE__ */ jsxs(
+                        (entry.instance.content?.metadata?.name ?? deploymentInstanceFallbackLabel(state)) + " \xB7 " + shortHash(entry.instance.item_hash),
+                        bootstrapUiEnabled && confirmedRegistration ? /* @__PURE__ */ jsxs(
                           "span",
                           {
                             style: {
@@ -6329,7 +6976,7 @@ function SponsorRelayFab(props) {
                           "Status: ",
                           entry.details.messageStatus
                         ] }),
-                        confirmedRegistration ? /* @__PURE__ */ jsxs("div", { children: [
+                        bootstrapUiEnabled && confirmedRegistration ? /* @__PURE__ */ jsxs("div", { children: [
                           "Bootstrap registration:",
                           " ",
                           shortHash(
@@ -6381,7 +7028,7 @@ function SponsorRelayFab(props) {
                   )
                 ] }, entry.instance.item_hash);
               }),
-              orphanRegistrations.length > 0 ? /* @__PURE__ */ jsxs(
+              bootstrapUiEnabled && orphanRegistrations.length > 0 ? /* @__PURE__ */ jsxs(
                 "div",
                 {
                   style: {