@le-space/ui 0.9.8 → 0.10.0

package/shared/index.d.ts

@@ -1,6 +1,17 @@
+import { AttestWasm } from '@le-space/attest-wasm/instance';
+
 type CrnSource = 'list' | 'aggregate';
 type CrnSourcePreference = 'auto' | 'aggregate' | 'list';
 
+interface EthereumProviderLike {
+    isMetaMask?: boolean;
+    request<T = unknown>(args: {
+        method: string;
+        params?: unknown[] | Record<string, unknown>;
+    }): Promise<T>;
+    on?(event: string, listener: (...args: unknown[]) => void): void;
+    removeListener?(event: string, listener: (...args: unknown[]) => void): void;
+}
 type MessageStatus = 'processed' | 'pending' | 'rejected' | 'removing' | 'removed' | 'unknown';
 interface BalanceResponse {
     address: string;
@@ -64,7 +75,17 @@ interface Crn {
     gpu_support?: boolean;
     system_usage?: CrnUsage | null;
     payment_receiver_address?: string | null;
+    /** Registered owner (corechannel aggregate). */
+    owner?: string | null;
     version?: string | null;
+    /** CPU features from the node's /about/usage/system, e.g. ["sev", "sev_es", "sev_snp"]. */
+    cpu_features?: string[] | null;
+    /** TEE properties from /about/usage/system; present on SEV-SNP nodes. */
+    tee?: {
+        sev_snp?: {
+            supported_vcpu_types?: string[];
+        };
+    } | null;
     city?: string | null;
     region?: string | null;
     country?: string | null;
@@ -184,7 +205,7 @@ interface RootfsResolution {
     gatewayError?: string | null;
 }
 
-type DeploymentProgressStage = "idle" | "validating" | "loading-manifest" | "verifying-rootfs" | "loading-pricing" | "loading-balance" | "selecting-crn" | "building-message" | "signing-message" | "broadcasting" | "notifying-crn" | "waiting-for-aleph" | "deployment-confirmed" | "deployment-rejected" | "publishing-bootstrap" | "building-delete-message" | "signing-delete-message" | "broadcasting-delete" | "delete-completed" | "refreshing-instances" | "completed" | "error";
+type DeploymentProgressStage = "idle" | "validating" | "loading-manifest" | "verifying-rootfs" | "loading-pricing" | "loading-balance" | "selecting-crn" | "building-message" | "signing-message" | "broadcasting" | "notifying-crn" | "preparing-confidential" | "attesting-guest" | "unlocking-guest" | "waiting-for-aleph" | "deployment-confirmed" | "deployment-rejected" | "publishing-bootstrap" | "building-delete-message" | "signing-delete-message" | "broadcasting-delete" | "delete-completed" | "refreshing-instances" | "completed" | "error";
 interface DeploymentProgressEvent {
     stage: DeploymentProgressStage;
     label: string;
@@ -278,6 +299,27 @@ interface SponsorRelayUcanStoreBootstrapInput {
     pwaOrigin: string;
     serviceOrigin: string;
 }
+interface SponsorRelayConfidentialStart {
+    /** STORE item hash of the LUKS-encrypted rootfs (aleph-confidential-rootfs, or the reusable workflow's confidential_rootfs_item_hash). */
+    rootfsItemHash: string;
+    /** Its size in MiB, if larger than the manifest's rootfs. */
+    rootfsSizeMiB?: number;
+    /** `wss://…/attest` of an attest relay (@le-space/attest-relay). */
+    relayUrl: string;
+    /**
+     * Loads the attestation WASM, e.g.
+     * `async () => { const m = await import('@le-space/attest-wasm/pkg/relay_button_attest.js'); await m.default(); return m }`.
+     */
+    loadWasm: () => Promise<AttestWasm>;
+    /** An SNP instance runtime by name (vm-images); the network's default if absent. */
+    runtimeName?: string;
+    /**
+     * localStorage key under which nodes AMD cannot vouch for (KDS has no VCEK
+     * for their chip) are remembered for a week and tried last. Omit it and
+     * they are remembered for the page only.
+     */
+    refusedNodesStorageKey?: string;
+}
 interface SponsorRelayProps {
     debug?: boolean;
     manifestUrl?: string;
@@ -298,6 +340,21 @@ interface SponsorRelayProps {
      * fallback. `localStorage.LE_SPACE_CRN_SOURCE` overrides this at runtime.
      */
     crnSource?: CrnSourcePreference;
+    /**
+     * Ask for a confidential VM (AMD SEV-SNP): only nodes that report SEV-SNP and
+     * run a patched aleph-vm are offered, and pricing uses Aleph's
+     * `instance_confidential` entry. The person can switch it in the panel too.
+     * Starting one needs `confidentialStart`; without it the panel refuses.
+     */
+    confidential?: boolean;
+    /**
+     * What a confidential start needs (relay-button#169): the encrypted rootfs,
+     * an attest relay, and the attestation WASM. The browser computes the
+     * launch measurements for the connected wallet, signs the INSTANCE with
+     * them, verifies the guest through the relay against AMD, and unlocks it
+     * with the passphrase the person enters, signed by their wallet.
+     */
+    confidentialStart?: SponsorRelayConfidentialStart;
     schedulerApiHost?: string;
     twoN6ApiHost?: string;
     /**
@@ -416,6 +473,12 @@ interface SponsorRelayState {
     instanceName: string;
     ucanStoreBootstrap: SponsorRelayUcanStoreBootstrapInput;
     tierId: string;
+    /** Confidential VM requested (AMD SEV-SNP); see the `confidential` prop. */
+    confidential: boolean;
+    /** Whether the host set `confidentialStart`, so a confidential VM can start. */
+    confidentialStartAvailable: boolean;
+    /** The encrypted rootfs's passphrase, held only until the unlock; never stored. */
+    confidentialPassphrase: string;
     showAdvanced: boolean;
     showInstances: boolean;
     showPasteManifest: boolean;
@@ -443,6 +506,12 @@ interface SponsorRelayState {
         hash: string;
         name: string | null;
         score: number | null;
+        /** ISO country code, when known. */
+        country: string | null;
+        /** aleph-vm version, when known. */
+        version: string | null;
+        /** Shortened owner / reward address: nodes of one operator share it. */
+        operator: string | null;
     }>;
     crnPinnedByUser: boolean;
     instances: CompactInstanceRecord[];
@@ -480,7 +549,7 @@ declare const STALE_INSTANCE_ALLOCATION_COOLDOWN_MS: number;
 declare const RECENT_INSTANCE_RUNTIME_GRACE_MS: number;
 declare const DEPLOYMENT_PENDING_WARNING_MS: number;
 
-declare const UI_PACKAGE_VERSION = "0.9.8";
+declare const UI_PACKAGE_VERSION = "0.10.0";
 
 interface RootfsRequiredPortForward {
     port: number;
@@ -496,25 +565,35 @@ declare function formatTierSpecLabel(vcpus: number | null | undefined, memoryMiB
 declare function buildSshCommand(hostIpv4: string | null, mappedPorts: CompactInstanceRecord["details"]["mappedPorts"]): string | null;
 declare function joinMappedPorts(mappedPorts: CompactInstanceRecord["details"]["mappedPorts"]): string;
 declare function joinRequiredPortForwards(portForwards: ReadonlyArray<RootfsRequiredPortForward> | null | undefined): string;
+/**
+ * One line per node in the CRN picker: name and score, and for a confidential
+ * VM also country, aleph-vm version and operator — few nodes qualify, often
+ * several from one operator, and the person should see that.
+ */
+declare function formatCrnOptionLabel(option: {
+    hash: string;
+    name: string | null;
+    score: number | null;
+    country?: string | null;
+    version?: string | null;
+    operator?: string | null;
+}, confidential?: boolean): string;
 
 declare function resolveManifestSource(args: {
     manifestJson: string;
 }): RootfsManifestState | null;
 
-interface EthereumProviderLike {
-    isMetaMask?: boolean;
-    request<T = unknown>(args: {
-        method: string;
-        params?: unknown[] | Record<string, unknown>;
-    }): Promise<T>;
-    on?(event: string, listener: (...args: unknown[]) => void): void;
-    removeListener?(event: string, listener: (...args: unknown[]) => void): void;
-}
+declare function personalSign(address: string, message: string, provider?: EthereumProviderLike | null | undefined): Promise<string>;
+
 declare function getEthereumProvider(): EthereumProviderLike | null;
+declare function watchWallet(onChange: () => void, provider?: EthereumProviderLike | null | undefined): () => void;
+
 declare function toChecksumAddress(address: string): string;
+/**
+ * The wallet helpers live in `@le-space/browser`, which carries no runtime
+ * dependencies. Checksumming needs viem, so this package supplies it.
+ */
 declare function connectWallet(provider?: EthereumProviderLike | null): Promise<SponsorRelayWalletState>;
-declare function personalSign(address: string, message: string, provider?: EthereumProviderLike | null): Promise<string>;
-declare function watchWallet(onChange: () => void, provider?: EthereumProviderLike | null): () => void;
 
 /**
  * What a request was, for an error that otherwise says nothing.
@@ -615,6 +694,16 @@ declare class SponsorRelayController {
     setUcanStoreBootstrapField(field: keyof SponsorRelayUcanStoreBootstrapInput, value: string): void;
     setTierId(tierId: string): void;
     private recomputePricingSummary;
+    /**
+     * Switch between a normal and a confidential VM. Pricing and the node list
+     * differ between the two, so both are loaded again.
+     */
+    setConfidential(confidential: boolean): Promise<void>;
+    /**
+     * The encrypted rootfs's passphrase for a confidential start. Kept in
+     * memory only until the unlock, then cleared; never persisted.
+     */
+    setConfidentialPassphrase(passphrase: string): void;
     /** Pin a specific CRN as the first deploy attempt (null = automatic). */
     selectCrn(hash: string | null): void;
     private queueManifestRefresh;
@@ -646,4 +735,16 @@ interface DeploymentProgressEmitter {
 }
 declare function createDeploymentProgressEmitter(): DeploymentProgressEmitter;
 
-export { type CompactBootstrapRegistrationRecord, type CompactInstanceDetails, type CompactInstanceRecord, DEFAULT_FAB_CORNER, DEFAULT_INSTANCE_NAME, DEFAULT_MANIFEST_URL, DEFAULT_TIER_ID, DEFAULT_UCAN_STORE_ALLOWED_CAPABILITIES, DEFAULT_UCAN_STORE_MAX_DELEGATION_EXPIRATION_SECONDS, DEFAULT_UCAN_STORE_PWA_ORIGIN, DEFAULT_UCAN_STORE_SERVICE_DID, DEFAULT_UCAN_STORE_SERVICE_ORIGIN, DEFAULT_UCAN_STORE_USER_DELEGATION_EXPIRATION_SECONDS, DEPLOYMENT_PENDING_WARNING_MS, type DeploymentProgressEmitter, type EthereumProviderLike, FAB_DRAG_THRESHOLD, FAB_EDGE_MARGIN, type FabCorner, type FabPanelPlacement, type FabPanelSide, type FabPlacement, type FabPoint, type FabSize, type FabViewport, IDLE_DEPLOYMENT_PROGRESS, INSTANCE_RUNTIME_PENDING_REFRESH_MS, INSTANCE_RUNTIME_READY_REFRESH_MS, INSTANCE_RUNTIME_STALE_REFRESH_MS, MANIFEST_SOURCE_REFRESH_DEBOUNCE_MS, RECENT_INSTANCE_RUNTIME_GRACE_MS, REFRESH_INTERVAL_MS, ROOTFS_MISSING_STATE, STALE_INSTANCE_ALLOCATION_COOLDOWN_MS, type SponsorRelayAddressGroup, SponsorRelayController, type SponsorRelayHealthTone, type SponsorRelayInstanceAddresses, type SponsorRelayPricingSummary, type SponsorRelayProps, type SponsorRelayRootfsHealth, type SponsorRelayState, type SponsorRelaySubscriber, type SponsorRelayUcanStoreBootstrapInput, type SponsorRelayWalletState, UI_PACKAGE_VERSION, anchorPanelToLauncher, buildSshCommand, clampToViewport, connectWallet, createDeploymentProgressEmitter, createSponsorRelayController, deploymentFailureMessage, describeRequest, describeThrown, dragExceedsThreshold, formatDateTime, formatNumber, formatTierSpecLabel, getEthereumProvider, joinMappedPorts, joinRequiredPortForwards, parseInstanceAddressPayload, personalSign, readStoredPosition, resolveCornerPlacement, resolveManifestSource, rootfsHealth, shortHash, toChecksumAddress, watchWallet, writeStoredPosition };
+/** The verdict that means "AMD has no certificate for this chip". */
+declare function isUnverifiableNodeError(message: string): boolean;
+/** Hashes of nodes refused within the last week. */
+declare function unverifiableCrnHashes(storageKey?: string, now?: number): Set<string>;
+declare function rememberUnverifiableCrn(hash: string, storageKey?: string, now?: number): void;
+/** `crns` with the remembered nodes moved to the end, except one the person pinned. */
+declare function demoteUnverifiableCrns<T extends {
+    hash: string;
+}>(crns: T[], refused: Set<string>, pinned: string | null): T[];
+/** Tests only. */
+declare function forgetUnverifiableCrns(): void;
+
+export { type CompactBootstrapRegistrationRecord, type CompactInstanceDetails, type CompactInstanceRecord, DEFAULT_FAB_CORNER, DEFAULT_INSTANCE_NAME, DEFAULT_MANIFEST_URL, DEFAULT_TIER_ID, DEFAULT_UCAN_STORE_ALLOWED_CAPABILITIES, DEFAULT_UCAN_STORE_MAX_DELEGATION_EXPIRATION_SECONDS, DEFAULT_UCAN_STORE_PWA_ORIGIN, DEFAULT_UCAN_STORE_SERVICE_DID, DEFAULT_UCAN_STORE_SERVICE_ORIGIN, DEFAULT_UCAN_STORE_USER_DELEGATION_EXPIRATION_SECONDS, DEPLOYMENT_PENDING_WARNING_MS, type DeploymentProgressEmitter, type EthereumProviderLike, FAB_DRAG_THRESHOLD, FAB_EDGE_MARGIN, type FabCorner, type FabPanelPlacement, type FabPanelSide, type FabPlacement, type FabPoint, type FabSize, type FabViewport, IDLE_DEPLOYMENT_PROGRESS, INSTANCE_RUNTIME_PENDING_REFRESH_MS, INSTANCE_RUNTIME_READY_REFRESH_MS, INSTANCE_RUNTIME_STALE_REFRESH_MS, MANIFEST_SOURCE_REFRESH_DEBOUNCE_MS, RECENT_INSTANCE_RUNTIME_GRACE_MS, REFRESH_INTERVAL_MS, ROOTFS_MISSING_STATE, STALE_INSTANCE_ALLOCATION_COOLDOWN_MS, type SponsorRelayAddressGroup, type SponsorRelayConfidentialStart, SponsorRelayController, type SponsorRelayHealthTone, type SponsorRelayInstanceAddresses, type SponsorRelayPricingSummary, type SponsorRelayProps, type SponsorRelayRootfsHealth, type SponsorRelayState, type SponsorRelaySubscriber, type SponsorRelayUcanStoreBootstrapInput, type SponsorRelayWalletState, UI_PACKAGE_VERSION, anchorPanelToLauncher, buildSshCommand, clampToViewport, connectWallet, createDeploymentProgressEmitter, createSponsorRelayController, demoteUnverifiableCrns, deploymentFailureMessage, describeRequest, describeThrown, dragExceedsThreshold, forgetUnverifiableCrns, formatCrnOptionLabel, formatDateTime, formatNumber, formatTierSpecLabel, getEthereumProvider, isUnverifiableNodeError, joinMappedPorts, joinRequiredPortForwards, parseInstanceAddressPayload, personalSign, readStoredPosition, rememberUnverifiableCrn, resolveCornerPlacement, resolveManifestSource, rootfsHealth, shortHash, toChecksumAddress, unverifiableCrnHashes, watchWallet, writeStoredPosition };