@le-space/ui 0.6.37 → 0.6.39

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@le-space/ui",
-  "version": "0.6.37",
+  "version": "0.6.39",
   "description": "Floating Aleph Relay Button UI components for Svelte and React.",
   "license": "MIT",
   "type": "module",
@@ -44,8 +44,8 @@
     "url": "https://github.com/NiKrause/relay-button/issues"
   },
   "dependencies": {
-    "@le-space/browser": "0.6.37",
-    "@le-space/core": "0.6.37",
+    "@le-space/browser": "0.6.39",
+    "@le-space/core": "0.6.39",
     "viem": "^2.53.1"
   },
   "peerDependencies": {

package/react/index.d.ts

@@ -346,6 +346,7 @@ declare class SponsorRelayController {
     private patch;
     private emitProgress;
     private configureRelayBootstrapRegistration;
+    private probeRelayReachableOverProxy;
     private cleanupStaleVmBootstrapConfigHistory;
     private syncLatestDeploymentProgress;
     private canSkipRuntimeRefresh;

package/react/index.js

@@ -43,7 +43,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.6.37";
+var UI_PACKAGE_VERSION = "0.6.39";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -4545,7 +4545,13 @@ var SponsorRelayController = class {
         instanceItemHash: args.itemHash,
         fetch: asJsonFetch,
         apiHost: this.client.apiHost,
-        attempts: 40,
+        // The guest publishes this signal only after its describe step has a
+        // browser-dialable address, which waits on AutoTLS for up to ~240 s.
+        // Wait comfortably longer than that (100 × 3 s = 300 s) so the complete
+        // signal arrives instead of timing out — a timeout here drops into the
+        // recovery path, which used to poll the guest over plain HTTP (mixed
+        // content on an HTTPS origin).
+        attempts: 100,
         delayMs: 3e3
       });
       this.trace("deploy:bootstrap-config-signal-visible", {
@@ -4597,6 +4603,12 @@ var SponsorRelayController = class {
         browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
       });
     } else {
+      const canReadMetadataSecurely = profile === "uc-go-peer" && Boolean(runtime.proxyUrl);
+      if (usesBootstrapConfigAggregate(this.state.manifest) && !canReadMetadataSecurely) {
+        throw new Error(
+          "The relay applied its bootstrap config but the acknowledgement did not carry its final multiaddrs, and this image exposes no HTTPS metadata endpoint. Reading them over plain HTTP would be blocked as mixed content on an HTTPS origin, so the deployment cannot be completed."
+        );
+      }
       this.emitProgress({
         stage: "publishing-bootstrap",
         label: "Waiting for secure relay metadata",
@@ -4608,7 +4620,7 @@ var SponsorRelayController = class {
       relayMetadata = await fetchRelayMetadataForRuntime({
         runtime,
         fetch: (url, init) => fetch(url, init),
-        preferSecureMetadata: profile === "uc-go-peer" && Boolean(runtime.proxyUrl),
+        preferSecureMetadata: canReadMetadataSecurely,
         attempts: 80,
         delayMs: 3e3,
         timeoutMs: 24e4,
@@ -4775,6 +4787,27 @@ var SponsorRelayController = class {
         );
       }
     }
+    if (profile === "orbitdb-relay") {
+      const proxyHostname = (() => {
+        try {
+          return runtime.proxyUrl ? new URL(runtime.proxyUrl).hostname : null;
+        } catch {
+          return null;
+        }
+      })();
+      if (proxyHostname) {
+        const reachable = await this.probeRelayReachableOverProxy({
+          proxyHostname,
+          peerId,
+          itemHash: args.itemHash
+        });
+        if (!reachable) {
+          throw new Error(
+            `Relay ${peerId} never became reachable over its HTTPS proxy (https://${proxyHostname}/health) within the readiness window \u2014 the CRN's proxy is not forwarding to the relay. Failing this attempt so another host can be tried.`
+          );
+        }
+      }
+    }
     if (profile === "uc-go-peer" && args.deploymentToken) {
       let cleanupAggregateItemHash = null;
       await deleteVmBootstrapConfig({
@@ -4808,6 +4841,49 @@ var SponsorRelayController = class {
       });
     }
   }
+  async probeRelayReachableOverProxy(args) {
+    const healthUrl = `https://${args.proxyHostname}/health`;
+    const attempts = 30;
+    const delayMs = 4e3;
+    for (let attempt = 1; attempt <= attempts; attempt += 1) {
+      try {
+        const abort = new AbortController();
+        const timeout = globalThis.setTimeout(() => abort.abort(), 1e4);
+        const response = await fetch(healthUrl, {
+          cache: "no-cache",
+          signal: abort.signal
+        });
+        globalThis.clearTimeout(timeout);
+        if (response.ok) {
+          const payload = await response.json().catch(() => null);
+          if (typeof payload?.peerId === "string" && payload.peerId === args.peerId) {
+            this.emitProgress({
+              stage: "publishing-bootstrap",
+              label: "Relay reachable over HTTPS",
+              progress: 98,
+              status: "success",
+              itemHash: args.itemHash,
+              detail: `Relay answered on ${healthUrl} with its peer id (attempt ${attempt}/${attempts}).`
+            });
+            return true;
+          }
+        }
+      } catch {
+      }
+      this.emitProgress({
+        stage: "publishing-bootstrap",
+        label: "Waiting for relay to be reachable",
+        progress: 98,
+        status: "warning",
+        itemHash: args.itemHash,
+        detail: `Relay not yet reachable over ${healthUrl} (attempt ${attempt}/${attempts}).`
+      });
+      if (attempt < attempts) {
+        await new Promise((resolve) => globalThis.setTimeout(resolve, delayMs));
+      }
+    }
+    return false;
+  }
   async cleanupStaleVmBootstrapConfigHistory(args) {
     if (!this.state.wallet.address || !args.currentAggregateItemHash) {
       return;
@@ -5710,11 +5786,13 @@ var SponsorRelayController = class {
                 crnListUrl: this.props.crnListUrl,
                 requirePublicGuestIpv6ForProxy: true
               });
-              if (latestRuntime.diagnostics?.state === "ready") {
+              const canReconcileMetadataSecurely = attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl);
+              const mayReadMetadata = canReconcileMetadataSecurely || !usesBootstrapConfigAggregate(this.state.manifest);
+              if (latestRuntime.diagnostics?.state === "ready" && mayReadMetadata) {
                 const reconciledRelayMetadata = await fetchRelayMetadataForRuntime({
                   runtime: latestRuntime,
                   fetch: (url, init) => fetch(url, init),
-                  preferSecureMetadata: attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl),
+                  preferSecureMetadata: canReconcileMetadataSecurely,
                   attempts: 3,
                   delayMs: 1e3,
                   timeoutMs: 15e3

package/shared/index.d.ts

@@ -341,7 +341,7 @@ declare const STALE_INSTANCE_ALLOCATION_COOLDOWN_MS: number;
 declare const RECENT_INSTANCE_RUNTIME_GRACE_MS: number;
 declare const DEPLOYMENT_PENDING_WARNING_MS: number;
 
-declare const UI_PACKAGE_VERSION = "0.6.37";
+declare const UI_PACKAGE_VERSION = "0.6.39";
 
 interface RootfsRequiredPortForward {
     port: number;
@@ -405,6 +405,7 @@ declare class SponsorRelayController {
     private patch;
     private emitProgress;
     private configureRelayBootstrapRegistration;
+    private probeRelayReachableOverProxy;
     private cleanupStaleVmBootstrapConfigHistory;
     private syncLatestDeploymentProgress;
     private canSkipRuntimeRefresh;

package/shared/index.js

@@ -42,7 +42,7 @@ var RECENT_INSTANCE_RUNTIME_GRACE_MS = 10 * 60 * 1e3;
 var DEPLOYMENT_PENDING_WARNING_MS = 3 * 60 * 1e3;
 
 // src/shared/package-version.ts
-var UI_PACKAGE_VERSION = "0.6.37";
+var UI_PACKAGE_VERSION = "0.6.39";
 
 // src/shared/format.ts
 function shortHash(value, head = 8, tail = 6) {
@@ -4544,7 +4544,13 @@ var SponsorRelayController = class {
         instanceItemHash: args.itemHash,
         fetch: asJsonFetch,
         apiHost: this.client.apiHost,
-        attempts: 40,
+        // The guest publishes this signal only after its describe step has a
+        // browser-dialable address, which waits on AutoTLS for up to ~240 s.
+        // Wait comfortably longer than that (100 × 3 s = 300 s) so the complete
+        // signal arrives instead of timing out — a timeout here drops into the
+        // recovery path, which used to poll the guest over plain HTTP (mixed
+        // content on an HTTPS origin).
+        attempts: 100,
         delayMs: 3e3
       });
       this.trace("deploy:bootstrap-config-signal-visible", {
@@ -4596,6 +4602,12 @@ var SponsorRelayController = class {
         browserBootstrapMultiaddrCount: relayMetadata.browserBootstrapMultiaddrs.length
       });
     } else {
+      const canReadMetadataSecurely = profile === "uc-go-peer" && Boolean(runtime.proxyUrl);
+      if (usesBootstrapConfigAggregate(this.state.manifest) && !canReadMetadataSecurely) {
+        throw new Error(
+          "The relay applied its bootstrap config but the acknowledgement did not carry its final multiaddrs, and this image exposes no HTTPS metadata endpoint. Reading them over plain HTTP would be blocked as mixed content on an HTTPS origin, so the deployment cannot be completed."
+        );
+      }
       this.emitProgress({
         stage: "publishing-bootstrap",
         label: "Waiting for secure relay metadata",
@@ -4607,7 +4619,7 @@ var SponsorRelayController = class {
       relayMetadata = await fetchRelayMetadataForRuntime({
         runtime,
         fetch: (url, init) => fetch(url, init),
-        preferSecureMetadata: profile === "uc-go-peer" && Boolean(runtime.proxyUrl),
+        preferSecureMetadata: canReadMetadataSecurely,
         attempts: 80,
         delayMs: 3e3,
         timeoutMs: 24e4,
@@ -4774,6 +4786,27 @@ var SponsorRelayController = class {
         );
       }
     }
+    if (profile === "orbitdb-relay") {
+      const proxyHostname = (() => {
+        try {
+          return runtime.proxyUrl ? new URL(runtime.proxyUrl).hostname : null;
+        } catch {
+          return null;
+        }
+      })();
+      if (proxyHostname) {
+        const reachable = await this.probeRelayReachableOverProxy({
+          proxyHostname,
+          peerId,
+          itemHash: args.itemHash
+        });
+        if (!reachable) {
+          throw new Error(
+            `Relay ${peerId} never became reachable over its HTTPS proxy (https://${proxyHostname}/health) within the readiness window \u2014 the CRN's proxy is not forwarding to the relay. Failing this attempt so another host can be tried.`
+          );
+        }
+      }
+    }
     if (profile === "uc-go-peer" && args.deploymentToken) {
       let cleanupAggregateItemHash = null;
       await deleteVmBootstrapConfig({
@@ -4807,6 +4840,49 @@ var SponsorRelayController = class {
       });
     }
   }
+  async probeRelayReachableOverProxy(args) {
+    const healthUrl = `https://${args.proxyHostname}/health`;
+    const attempts = 30;
+    const delayMs = 4e3;
+    for (let attempt = 1; attempt <= attempts; attempt += 1) {
+      try {
+        const abort = new AbortController();
+        const timeout = globalThis.setTimeout(() => abort.abort(), 1e4);
+        const response = await fetch(healthUrl, {
+          cache: "no-cache",
+          signal: abort.signal
+        });
+        globalThis.clearTimeout(timeout);
+        if (response.ok) {
+          const payload = await response.json().catch(() => null);
+          if (typeof payload?.peerId === "string" && payload.peerId === args.peerId) {
+            this.emitProgress({
+              stage: "publishing-bootstrap",
+              label: "Relay reachable over HTTPS",
+              progress: 98,
+              status: "success",
+              itemHash: args.itemHash,
+              detail: `Relay answered on ${healthUrl} with its peer id (attempt ${attempt}/${attempts}).`
+            });
+            return true;
+          }
+        }
+      } catch {
+      }
+      this.emitProgress({
+        stage: "publishing-bootstrap",
+        label: "Waiting for relay to be reachable",
+        progress: 98,
+        status: "warning",
+        itemHash: args.itemHash,
+        detail: `Relay not yet reachable over ${healthUrl} (attempt ${attempt}/${attempts}).`
+      });
+      if (attempt < attempts) {
+        await new Promise((resolve) => globalThis.setTimeout(resolve, delayMs));
+      }
+    }
+    return false;
+  }
   async cleanupStaleVmBootstrapConfigHistory(args) {
     if (!this.state.wallet.address || !args.currentAggregateItemHash) {
       return;
@@ -5709,11 +5785,13 @@ var SponsorRelayController = class {
                 crnListUrl: this.props.crnListUrl,
                 requirePublicGuestIpv6ForProxy: true
               });
-              if (latestRuntime.diagnostics?.state === "ready") {
+              const canReconcileMetadataSecurely = attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl);
+              const mayReadMetadata = canReconcileMetadataSecurely || !usesBootstrapConfigAggregate(this.state.manifest);
+              if (latestRuntime.diagnostics?.state === "ready" && mayReadMetadata) {
                 const reconciledRelayMetadata = await fetchRelayMetadataForRuntime({
                   runtime: latestRuntime,
                   fetch: (url, init) => fetch(url, init),
-                  preferSecureMetadata: attemptProfile === "uc-go-peer" && Boolean(latestRuntime.proxyUrl),
+                  preferSecureMetadata: canReconcileMetadataSecurely,
                   attempts: 3,
                   delayMs: 1e3,
                   timeoutMs: 15e3