@le-space/ui 0.6.37 → 0.6.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@le-space/ui",
-  "version": "0.6.37",
+  "version": "0.6.38",
   "description": "Floating Aleph Relay Button UI components for Svelte and React.",
   "license": "MIT",
   "type": "module",
@@ -44,8 +44,8 @@
     "url": "https://github.com/NiKrause/relay-button/issues"
   },
   "dependencies": {
-    "@le-space/browser": "0.6.37",
-    "@le-space/core": "0.6.37",
+    "@le-space/browser": "0.6.38",
+    "@le-space/core": "0.6.38",
     "viem": "^2.53.1"
   },
   "peerDependencies": {

package/react/index.js

@@ -43,7 +43,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.6.37";
+var UI_PACKAGE_VERSION = "0.6.38";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -4545,7 +4545,13 @@ var SponsorRelayController = class {
         instanceItemHash: args.itemHash,
         fetch: asJsonFetch,
         apiHost: this.client.apiHost,
-        attempts: 40,
+        // The guest publishes this signal only after its describe step has a
+        // browser-dialable address, which waits on AutoTLS for up to ~240 s.
+        // Wait comfortably longer than that (100 × 3 s = 300 s) so the complete
+        // signal arrives instead of timing out — a timeout here drops into the
+        // recovery path, which used to poll the guest over plain HTTP (mixed
+        // content on an HTTPS origin).
+        attempts: 100,
         delayMs: 3e3
       });
       this.trace("deploy:bootstrap-config-signal-visible", {
@@ -4597,6 +4603,12 @@ var SponsorRelayController = class {
         browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
       });
     } else {
+      const canReadMetadataSecurely = profile === "uc-go-peer" && Boolean(runtime.proxyUrl);
+      if (usesBootstrapConfigAggregate(this.state.manifest) && !canReadMetadataSecurely) {
+        throw new Error(
+          "The relay applied its bootstrap config but the acknowledgement did not carry its final multiaddrs, and this image exposes no HTTPS metadata endpoint. Reading them over plain HTTP would be blocked as mixed content on an HTTPS origin, so the deployment cannot be completed."
+        );
+      }
       this.emitProgress({
         stage: "publishing-bootstrap",
         label: "Waiting for secure relay metadata",
@@ -4608,7 +4620,7 @@ var SponsorRelayController = class {
       relayMetadata = await fetchRelayMetadataForRuntime({
         runtime,
         fetch: (url, init) => fetch(url, init),
-        preferSecureMetadata: profile === "uc-go-peer" && Boolean(runtime.proxyUrl),
+        preferSecureMetadata: canReadMetadataSecurely,
         attempts: 80,
         delayMs: 3e3,
         timeoutMs: 24e4,
@@ -5710,11 +5722,13 @@ var SponsorRelayController = class {
                 crnListUrl: this.props.crnListUrl,
                 requirePublicGuestIpv6ForProxy: true
               });
-              if (latestRuntime.diagnostics?.state === "ready") {
+              const canReconcileMetadataSecurely = attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl);
+              const mayReadMetadata = canReconcileMetadataSecurely || !usesBootstrapConfigAggregate(this.state.manifest);
+              if (latestRuntime.diagnostics?.state === "ready" && mayReadMetadata) {
                 const reconciledRelayMetadata = await fetchRelayMetadataForRuntime({
                   runtime: latestRuntime,
                   fetch: (url, init) => fetch(url, init),
-                  preferSecureMetadata: attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl),
+                  preferSecureMetadata: canReconcileMetadataSecurely,
                   attempts: 3,
                   delayMs: 1e3,
                   timeoutMs: 15e3

package/shared/index.d.ts

@@ -341,7 +341,7 @@ declare const STALE_INSTANCE_ALLOCATION_COOLDOWN_MS: number;
 declare const RECENT_INSTANCE_RUNTIME_GRACE_MS: number;
 declare const DEPLOYMENT_PENDING_WARNING_MS: number;
 
-declare const UI_PACKAGE_VERSION = "0.6.37";
+declare const UI_PACKAGE_VERSION = "0.6.38";
 
 interface RootfsRequiredPortForward {
     port: number;

package/shared/index.js

@@ -42,7 +42,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.6.37";
+var UI_PACKAGE_VERSION = "0.6.38";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -4544,7 +4544,13 @@ var SponsorRelayController = class {
         instanceItemHash: args.itemHash,
         fetch: asJsonFetch,
         apiHost: this.client.apiHost,
-        attempts: 40,
+        // The guest publishes this signal only after its describe step has a
+        // browser-dialable address, which waits on AutoTLS for up to ~240 s.
+        // Wait comfortably longer than that (100 × 3 s = 300 s) so the complete
+        // signal arrives instead of timing out — a timeout here drops into the
+        // recovery path, which used to poll the guest over plain HTTP (mixed
+        // content on an HTTPS origin).
+        attempts: 100,
         delayMs: 3e3
       });
       this.trace("deploy:bootstrap-config-signal-visible", {
@@ -4596,6 +4602,12 @@ var SponsorRelayController = class {
         browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
       });
     } else {
+      const canReadMetadataSecurely = profile === "uc-go-peer" && Boolean(runtime.proxyUrl);
+      if (usesBootstrapConfigAggregate(this.state.manifest) && !canReadMetadataSecurely) {
+        throw new Error(
+          "The relay applied its bootstrap config but the acknowledgement did not carry its final multiaddrs, and this image exposes no HTTPS metadata endpoint. Reading them over plain HTTP would be blocked as mixed content on an HTTPS origin, so the deployment cannot be completed."
+        );
+      }
       this.emitProgress({
         stage: "publishing-bootstrap",
         label: "Waiting for secure relay metadata",
@@ -4607,7 +4619,7 @@ var SponsorRelayController = class {
       relayMetadata = await fetchRelayMetadataForRuntime({
         runtime,
         fetch: (url, init) => fetch(url, init),
-        preferSecureMetadata: profile === "uc-go-peer" && Boolean(runtime.proxyUrl),
+        preferSecureMetadata: canReadMetadataSecurely,
         attempts: 80,
         delayMs: 3e3,
         timeoutMs: 24e4,
@@ -5709,11 +5721,13 @@ var SponsorRelayController = class {
                 crnListUrl: this.props.crnListUrl,
                 requirePublicGuestIpv6ForProxy: true
               });
-              if (latestRuntime.diagnostics?.state === "ready") {
+              const canReconcileMetadataSecurely = attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl);
+              const mayReadMetadata = canReconcileMetadataSecurely || !usesBootstrapConfigAggregate(this.state.manifest);
+              if (latestRuntime.diagnostics?.state === "ready" && mayReadMetadata) {
                 const reconciledRelayMetadata = await fetchRelayMetadataForRuntime({
                   runtime: latestRuntime,
                   fetch: (url, init) => fetch(url, init),
-                  preferSecureMetadata: attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl),
+                  preferSecureMetadata: canReconcileMetadataSecurely,
                   attempts: 3,
                   delayMs: 1e3,
                   timeoutMs: 15e3