@nosana/node 1.0.1 → 1.0.3-rc

package/dist/package.json

@@ -0,0 +1,102 @@
+{
+    "name": "@nosana/node",
+    "version": "1.0.3-rc",
+    "description": "",
+    "bin": {
+        "nosana-node": "./dist/src/index.js"
+    },
+    "type": "module",
+    "scripts": {
+        "dev": "APP_ENV=development node --no-warnings --loader ts-node/esm src/index.ts",
+        "build": "npm run prepare && tsc && cp .env ./dist/ && cp .env.prd ./dist/ && cp .env.dev ./dist/",
+        "generate": "openapi-typescript http://dashboard.k8s.prd.nos.ci/api/swagger/json -o ./src/NodeManager/client/schema.d.ts",
+        "test": "APP_ENV=development DOCKER_CERT_PATH= vitest run",
+        "ci:test": "APP_ENV=development DOCKER_CERT_PATH= vitest run --coverage --reporter=junit --outputFile=./test-report.xml",
+        "test:watch": "APP_ENV=development DOCKER_CERT_PATH= vitest",
+        "test:coverage": "APP_ENV=development DOCKER_CERT_PATH= vitest run --coverage",
+        "publish:next": "npm run build && npm publish --tag=next --access public",
+        "publish:public": "npm run build && npm publish --access public",
+        "prepare": "npm run generate && ts-patch install && typia patch",
+        "prettier": "prettier --check ./src",
+        "prettier:fix": "prettier --write ./src",
+        "eslint": "eslint ./src",
+        "eslint:fix": "eslint --fix ./src",
+        "lint": " npm run eslint",
+        "lint:fix": "npm run prettier:fix && npm run eslint:fix"
+    },
+    "keywords": [],
+    "files": [
+        "dist",
+        "LICENSE",
+        "README.md",
+        "package.json",
+        "npm-shrinkwrap.json"
+    ],
+    "author": "Laurens Verspeek",
+    "license": "ISC",
+    "devDependencies": {
+        "@ryoppippi/unplugin-typia": "^2.6.5",
+        "@types/bn.js": "^5.1.6",
+        "@types/cli-progress": "^3.11.6",
+        "@types/cors": "^2.8.17",
+        "@types/dockerode": "^3.3.23",
+        "@types/eventsource": "^1.1.15",
+        "@types/express": "^4.17.21",
+        "@types/figlet": "^1.5.6",
+        "@types/inquirer": "^9.0.3",
+        "@types/node": "^20.3.2",
+        "@types/shell-quote": "^1.7.5",
+        "@types/tar": "^6.1.6",
+        "@typescript-eslint/eslint-plugin": "^5.50.0",
+        "@vitest/coverage-v8": "^4.0.7",
+        "eslint": "^8.0.1",
+        "eslint-config-prettier": "^8.8.0",
+        "eslint-config-standard-with-typescript": "^35.0.0",
+        "eslint-plugin-import": "^2.25.2",
+        "eslint-plugin-n": "^15.0.0",
+        "eslint-plugin-prettier": "^4.2.1",
+        "eslint-plugin-promise": "^6.0.0",
+        "husky": "^9.1.7",
+        "prettier": "^2.8.8",
+        "ts-node": "^10.9.2",
+        "typescript": "^5.3.2",
+        "vite": "^7.2.4",
+        "vitest": "^4.0.7",
+        "vitest-mock-extended": "^3.1.0"
+    },
+    "dependencies": {
+        "@coral-xyz/anchor": "^0.28.1-beta.1",
+        "@inquirer/prompts": "^4.3.0",
+        "@nosana/sdk": "^0.4.81",
+        "@solana/web3.js": "^1.78.0",
+        "bn.js": "^5.2.1",
+        "chalk": "^5.3.0",
+        "cli-progress": "^3.12.0",
+        "commander": "^11.0.0",
+        "console-table-printer": "^2.14.6",
+        "cors": "^2.8.5",
+        "cron": "^3.1.6",
+        "dockerode": "^4.0.2",
+        "dotenv": "^16.4.5",
+        "eventsource": "^2.0.2",
+        "express": "^4.19.2",
+        "figlet": "^1.6.0",
+        "inquirer": "^11.0.2",
+        "lowdb": "^7.0.1",
+        "openapi-fetch": "^0.10.2",
+        "openapi-typescript": "^7.1.2",
+        "ora": "^8.0.1",
+        "rpc-websockets": "7.9.0",
+        "shell-quote": "^1.8.1",
+        "socket.io-client": "^4.7.5",
+        "stream": "^0.0.2",
+        "tar": "^6.2.0",
+        "tar-buffer": "^1.3.0",
+        "ts-patch": "^3.2.1",
+        "tweetnacl": "^1.0.3",
+        "typia": "^10.1.0",
+        "undici": "^6.14.1",
+        "util": "^0.12.5",
+        "yaml": "^2.8.0"
+    }
+}

package/dist/{NodeManager → src/NodeManager}/node/Node.js

@@ -29,7 +29,7 @@ export class BasicNode {
         this.sdk = getSDK();
         const db = new DB(options.config).db;
         this.repository = new NodeRepository(db);
-        this.containerOrchestration = selectContainerOrchestrationProvider(options.provider, options.podman, options.gpu);
+        this.containerOrchestration = selectContainerOrchestrationProvider(options.provider, options.podman, options.gpu, options.trustedExecutionRuntime);
         this.resourceManager = new ResourceManager(this.containerOrchestration, this.repository);
         this.provider = new Provider(this.containerOrchestration, this.repository, this.resourceManager);
         this.apiHandler = new ApiHandler(this.sdk, this.repository, this.provider, options.port);

package/dist/{NodeManager → src/NodeManager}/node/api/routes/post/node-validation.js

@@ -135,8 +135,8 @@ export async function postNodeValidation(req, res) {
             return false;
         const a = Number(match[1]), b = Number(match[2]);
         return a < b;
-    })() || typeof elem === "string" && /^%%(ops|global).[^%]+%%$/.test(elem)) || "object" === typeof elem && null !== elem && _iu0(elem, true && _exceptionable)))) || "object" === typeof input.expose && null !== input.expose && _io14(input.expose, true && _exceptionable)))) && (undefined === input["private"] || "boolean" === typeof input["private"]) && (undefined === input.gpu || "boolean" === typeof input.gpu) && (undefined === input.work_dir || "string" === typeof input.work_dir) && (undefined === input.output || "string" === typeof input.output) && (null !== input.entrypoint && (undefined === input.entrypoint || "string" === typeof input.entrypoint || Array.isArray(input.entrypoint) && input.entrypoint.every((elem, _index6) => "string" === typeof elem))) && (undefined === input.env || "object" === typeof input.env && null !== input.env && false === Array.isArray(input.env) && _io19(input.env, true && _exceptionable)) && (null !== input.restart_policy && (undefined === input.restart_policy || "no" === input.restart_policy || "always" === input.restart_policy || "unless-stopped" === input.restart_policy || "on-failure" === input.restart_policy || "object" === typeof input.restart_policy && null !== input.restart_policy && _io20(input.restart_policy, true && _exceptionable))) && (undefined === input.required_vram || "number" === typeof input.required_vram) && (undefined === input.resources || Array.isArray(input.resources) && input.resources.every((elem, _index7) => null !== elem && undefined !== elem && ("__remove-if-empty__" === elem || "object" === typeof elem && null !== elem && _iu2(elem, true && _exceptionable)))) && (undefined === input.authentication || "object" === typeof input.authentication && null !== input.authentication && false === Array.isArray(input.authentication) && _io28(input.authentication, true && _exceptionable)) && (1 === Object.keys(input).length || Object.keys(input).every(key => {
-        if (["image", "aliases", "cmd", "volumes", "expose", "private", "gpu", "work_dir", "output", "entrypoint", "env", "restart_policy", "required_vram", "resources", "authentication"].some(prop => key === prop))
+    })() || typeof elem === "string" && /^%%(ops|global).[^%]+%%$/.test(elem)) || "object" === typeof elem && null !== elem && _iu0(elem, true && _exceptionable)))) || "object" === typeof input.expose && null !== input.expose && _io14(input.expose, true && _exceptionable)))) && (undefined === input["private"] || "boolean" === typeof input["private"]) && (undefined === input.gpu || "boolean" === typeof input.gpu) && (undefined === input.work_dir || "string" === typeof input.work_dir) && (undefined === input.output || "string" === typeof input.output) && (null !== input.entrypoint && (undefined === input.entrypoint || "string" === typeof input.entrypoint || Array.isArray(input.entrypoint) && input.entrypoint.every((elem, _index6) => "string" === typeof elem))) && (undefined === input.env || "object" === typeof input.env && null !== input.env && false === Array.isArray(input.env) && _io19(input.env, true && _exceptionable)) && (null !== input.restart_policy && (undefined === input.restart_policy || "no" === input.restart_policy || "always" === input.restart_policy || "unless-stopped" === input.restart_policy || "on-failure" === input.restart_policy || "object" === typeof input.restart_policy && null !== input.restart_policy && _io20(input.restart_policy, true && _exceptionable))) && (undefined === input.required_vram || "number" === typeof input.required_vram) && (undefined === input.resources || Array.isArray(input.resources) && input.resources.every((elem, _index7) => null !== elem && undefined !== elem && ("__remove-if-empty__" === elem || "object" === typeof elem && null !== elem && _iu2(elem, true && _exceptionable)))) && (undefined === input.authentication || "object" === typeof input.authentication && null !== input.authentication && false === Array.isArray(input.authentication) && _io28(input.authentication, true && _exceptionable)) && (undefined === input.trusted_execution_env || "SEV-SNP" === input.trusted_execution_env) && (1 === Object.keys(input).length || Object.keys(input).every(key => {
+        if (["image", "aliases", "cmd", "volumes", "expose", "private", "gpu", "work_dir", "output", "entrypoint", "env", "restart_policy", "required_vram", "resources", "authentication", "trusted_execution_env"].some(prop => key === prop))
             return true;
         const value = input[key];
         if (undefined === value)
@@ -659,11 +659,11 @@ export async function postNodeValidation(req, res) {
             value: input.id
         }), ("object" === typeof input.args && null !== input.args || _report(_exceptionable, {
             path: _path + ".args",
-            expected: "(__type.o19 | __type.o8)",
+            expected: "((__type.o8 & TagBase<__type>) | __type.o20)",
             value: input.args
         })) && _vu3(input.args, _path + ".args", true && _exceptionable) || _report(_exceptionable, {
             path: _path + ".args",
-            expected: "(__type.o19 | __type.o8)",
+            expected: "((__type.o8 & TagBase<__type>) | __type.o20)",
             value: input.args
         }), undefined === input.results || ("object" === typeof input.results && null !== input.results && false === Array.isArray(input.results) || _report(_exceptionable, {
             path: _path + ".results",
@@ -930,8 +930,12 @@ export async function postNodeValidation(req, res) {
             path: _path + ".authentication",
             expected: "(__type.o18 | undefined)",
             value: input.authentication
+        }), undefined === input.trusted_execution_env || "SEV-SNP" === input.trusted_execution_env || _report(_exceptionable, {
+            path: _path + ".trusted_execution_env",
+            expected: "(\"SEV-SNP\" | undefined)",
+            value: input.trusted_execution_env
         }), 1 === Object.keys(input).length || (false === _exceptionable || Object.keys(input).map(key => {
-            if (["image", "aliases", "cmd", "volumes", "expose", "private", "gpu", "work_dir", "output", "entrypoint", "env", "restart_policy", "required_vram", "resources", "authentication"].some(prop => key === prop))
+            if (["image", "aliases", "cmd", "volumes", "expose", "private", "gpu", "work_dir", "output", "entrypoint", "env", "restart_policy", "required_vram", "resources", "authentication", "trusted_execution_env"].some(prop => key === prop))
                 return true;
             const value = input[key];
             if (undefined === value)
@@ -1706,7 +1710,7 @@ export async function postNodeValidation(req, res) {
         else
             return _report(_exceptionable, {
                 path: _path,
-                expected: "(__type.o8 | __type.o19)",
+                expected: "(__type.o8 | __type.o20)",
                 value: input
             });
     })(); const _vu4 = (input, _path, _exceptionable = true) => (() => {

package/dist/{NodeManager → src/NodeManager}/node/job/jobHandler.js

@@ -83,6 +83,15 @@ export class JobHandler {
             });
             return false;
         }
+        if (jobDefinition.ops.some(op => op.type === "container/run" && op.args.trusted_execution_env)) {
+            if (!await this.provider.hasTrustedExecutionEnvCapability("SEV-SNP")) {
+                this.repository.updateflowStateError(this.jobId(), {
+                    status: 'validation-error',
+                    error: 'Node does not support Trusted Execution Environments',
+                });
+                return false;
+            }
+        }
         return true;
     }
     listenForAccountChanges() {

package/dist/{NodeManager → src/NodeManager}/provider/Provider.d.ts

@@ -1,5 +1,5 @@
 /// <reference types="node" />
-import { Flow, Operation, OperationArgsMap, OperationType } from '@nosana/sdk';
+import { Flow, Operation, OperationArgsMap, OperationType, TrustedExecutionEnv } from '@nosana/sdk';
 import EventEmitter from 'events';
 import { NodeRepository } from '../repository/NodeRepository.js';
 import { ResourceManager } from '../node/resource/resourceManager.js';
@@ -11,6 +11,7 @@ export declare class Provider {
     private readonly frpcImage;
     private proxyStartupAbortController;
     constructor(containerOrchestration: ContainerOrchestrationInterface, repository: NodeRepository, resourceManager: ResourceManager);
+    hasTrustedExecutionEnvCapability(required_environment: TrustedExecutionEnv): Promise<boolean>;
     stopReverseProxyApi(address: string): Promise<boolean>;
     setUpReverseProxyApi(address: string, port: string): Promise<boolean>;
     taskManagerContainerRunOperation(flow: Flow, op: Operation<'container/run'>, controller: AbortController, emitter: EventEmitter): Promise<void>;

package/dist/{NodeManager → src/NodeManager}/provider/Provider.js

@@ -16,6 +16,9 @@ export class Provider {
         this.proxyStartupAbortController = undefined;
         applyLoggingProxyToClass(this);
     }
+    async hasTrustedExecutionEnvCapability(required_environment) {
+        return this.containerOrchestration.teeRuntime === required_environment;
+    }
     async stopReverseProxyApi(address) {
         const frpc_name = `frpc-api-${address}`;
         const networkName = `api-${address}`;
@@ -221,6 +224,7 @@ export class Provider {
                     volumes,
                     aliases,
                     restart_policy: op.args.restart_policy,
+                    runtime: op.args.trusted_execution_env
                 });
                 emitter.emit('updateOpState', { providerId: container.id });
                 stateManager = new ContainerStateManager(container, controller, emitter, op.args.restart_policy);

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/docker/createDockerRunOptions.d.ts

@@ -1,3 +1,3 @@
 import { ContainerCreateOptions } from "dockerode";
 import { RunContainerArgs } from "../interface";
-export declare function createDockerRunOptions(image: string, { name, cmd, gpu, volumes, env, work_dir, entrypoint, aliases, restart_policy, }: RunContainerArgs, gpuOption: string): ContainerCreateOptions;
+export declare function createDockerRunOptions(image: string, { name, cmd, gpu, volumes, env, work_dir, entrypoint, aliases, restart_policy, runtime }: RunContainerArgs, gpuOption: string): ContainerCreateOptions;

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/docker/createDockerRunOptions.js

@@ -10,7 +10,7 @@ function parseRestartPolicy(restart_policy) {
     }
     return undefined;
 }
-export function createDockerRunOptions(image, { name, cmd, gpu, volumes, env, work_dir, entrypoint, aliases, restart_policy, }, gpuOption) {
+export function createDockerRunOptions(image, { name, cmd, gpu, volumes, env, work_dir, entrypoint, aliases, restart_policy, runtime }, gpuOption) {
     const devices = [];
     if (gpu) {
         devices.push({
@@ -56,6 +56,7 @@ export function createDockerRunOptions(image, { name, cmd, gpu, volumes, env, wo
             NetworkMode: 'bridge',
             DeviceRequests: devices,
             RestartPolicy: parseRestartPolicy(restart_policy),
+            ...(runtime ? { Runtime: runtime } : {}),
         },
     };
 }

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/docker/index.d.ts

@@ -10,8 +10,10 @@ export declare class DockerContainerOrchestration implements ContainerOrchestrat
     protocol: 'https' | 'http' | 'ssh' | 'socket';
     name: string;
     gpu: string;
+    teeRuntime?: string;
     listeners: Map<string, (() => Promise<void>)[]>;
-    constructor(server: string, gpu: string);
+    constructor(server: string, gpu: string, teeRuntime?: string);
+    checkCustomRuntimeAvailability(runtime: string): Promise<boolean>;
     getContainerByName(name: string): Promise<Container | undefined>;
     getContainersByName(names: string[]): Promise<Container[]>;
     getConnection(): DockerExtended;
@@ -34,7 +36,7 @@ export declare class DockerContainerOrchestration implements ContainerOrchestrat
     getProtocol(): string;
     setupContainerAbortListener(containerId: string, controller: AbortController): void;
     runContainer(args: ContainerCreateOptions, controller?: AbortController): Promise<Container>;
-    runFlowContainer(image: string, args: RunContainerArgs, controller?: AbortController): Promise<Container>;
+    runFlowContainer(image: string, args: RunContainerArgs): Promise<Container>;
     stopContainer(id: string, controller?: AbortController): Promise<void>;
     stopAndDeleteContainer(id: string, controller?: AbortController): Promise<ContainerInspectInfo | undefined>;
     isContainerExited(id: string): Promise<boolean>;

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/docker/index.js

@@ -4,11 +4,12 @@ import { createSeverObject } from './utils/createServerObject.js';
 import { checkDeprecationDeadline } from './utils/deadline.js';
 import { createDockerRunOptions } from './createDockerRunOptions.js';
 export class DockerContainerOrchestration {
-    constructor(server, gpu) {
+    constructor(server, gpu, teeRuntime) {
         this.name = 'docker';
         this.gpu = 'all';
         this.listeners = new Map();
         this.gpu = gpu;
+        this.teeRuntime = teeRuntime;
         if (server.startsWith('http') || server.startsWith('ssh')) {
             const { host, port, protocol } = createSeverObject(server);
             this.host = host;
@@ -31,6 +32,19 @@ export class DockerContainerOrchestration {
             this.docker = new DockerExtended({ socketPath: this.host });
         }
     }
+    async checkCustomRuntimeAvailability(runtime) {
+        // TODO: implement a better check for custom runtimes by creating and starting a basic container with the runtime
+        try {
+            const info = await this.docker.info();
+            if (info.Runtimes && info.Runtimes[runtime]) {
+                return true;
+            }
+            return false;
+        }
+        catch (error) {
+            return false;
+        }
+    }
     async getContainerByName(name) {
         const containers = await this.docker
             .listContainers({ all: true })
@@ -219,19 +233,12 @@ export class DockerContainerOrchestration {
             throw error;
         }
     }
-    async runFlowContainer(image, args, controller) {
+    async runFlowContainer(image, args) {
         try {
-            if (controller?.signal.aborted) {
-                throw controller.signal.reason;
-            }
             const container = await this.docker.createContainer({
                 ...createDockerRunOptions(image, args, this.gpu),
-                abortSignal: controller?.signal,
             });
             await container.start();
-            if (controller) {
-                this.setupContainerAbortListener(container.id, controller);
-            }
             return container;
         }
         catch (error) {

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/interface.d.ts

@@ -21,8 +21,10 @@ export type RunContainerArgs = {
     entrypoint?: string | string[];
     restart_policy?: RestartPolicy;
     aliases?: string[] | undefined;
+    runtime?: string;
 };
 export interface ContainerOrchestrationInterface {
+    teeRuntime?: string;
     getConnection(): any;
     pullImage(image: string, auth?: DockerAuth, controller?: AbortController): Promise<void>;
     hasImage(image: string): Promise<boolean>;
@@ -42,7 +44,7 @@ export interface ContainerOrchestrationInterface {
     getContainersByName(names: string[]): Promise<Container[]>;
     getContainer(id: string): Promise<Container>;
     runContainer(args: ContainerCreateOptions, controller?: AbortController): Promise<Container>;
-    runFlowContainer(image: string, args: RunContainerArgs, controller?: AbortController): Promise<Container>;
+    runFlowContainer(image: string, args: RunContainerArgs): Promise<Container>;
     stopContainer(id: string, controller?: AbortController): Promise<void>;
     stopAndDeleteContainer(id: string, controller?: AbortController): Promise<ContainerInspectInfo | undefined>;
     isContainerExited(id: string): Promise<boolean>;

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/podman/index.d.ts

@@ -5,8 +5,8 @@ import { RequestInit, Response } from 'undici';
 export declare class PodmanContainerOrchestration extends DockerContainerOrchestration {
     private api;
     name: string;
-    constructor(server: string, gpu: string);
+    constructor(server: string, gpu: string, _teeRuntime?: string);
     libPodAPICall(path: string, options: RequestInit): Promise<Response>;
     createNetwork(_name: string, controller?: AbortController): Promise<void>;
-    runFlowContainer(image: string, args: RunContainerArgs, controller?: AbortController): Promise<Container>;
+    runFlowContainer(image: string, args: RunContainerArgs): Promise<Container>;
 }

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/podman/index.js

@@ -2,7 +2,7 @@ import { DockerContainerOrchestration } from '../docker/index.js';
 import { createPodmanRunOptions } from './utils/createPodmanRunOptions.js';
 import { fetch, Agent } from 'undici';
 export class PodmanContainerOrchestration extends DockerContainerOrchestration {
-    constructor(server, gpu) {
+    constructor(server, gpu, _teeRuntime) {
         super(server, gpu);
         this.name = 'podman';
         if (this.protocol === 'socket') {
@@ -42,7 +42,7 @@ export class PodmanContainerOrchestration extends DockerContainerOrchestration {
             throw error;
         }
     }
-    async runFlowContainer(image, args, controller) {
+    async runFlowContainer(image, args) {
         try {
             let error;
             // Incase of error, retry 3 times
@@ -63,9 +63,6 @@ export class PodmanContainerOrchestration extends DockerContainerOrchestration {
                     });
                     if (start.status === 204) {
                         const container = this.docker.getContainer(createResult.Id);
-                        if (controller) {
-                            this.setupContainerAbortListener(container.id, controller);
-                        }
                         return container;
                     }
                     else {

package/dist/{NodeManager → src/NodeManager}/provider/containerOrchestration/selectContainerOrchestration.d.ts

@@ -1,2 +1,2 @@
 import type { ContainerOrchestrationInterface } from './interface.js';
-export declare function selectContainerOrchestrationProvider(provider: string, url: string, gpu: string): ContainerOrchestrationInterface;
+export declare function selectContainerOrchestrationProvider(provider: string, url: string, gpu: string, teeRuntime: string | undefined): ContainerOrchestrationInterface;

package/dist/src/NodeManager/provider/containerOrchestration/selectContainerOrchestration.js

@@ -0,0 +1,14 @@
+import { DockerContainerOrchestration } from './docker/index.js';
+import { PodmanContainerOrchestration } from './podman/index.js';
+export function selectContainerOrchestrationProvider(provider, url, gpu, teeRuntime) {
+    if (provider !== 'docker' && teeRuntime) {
+        throw new Error('Custom runtimes are only supported with the Docker provider.');
+    }
+    switch (provider) {
+        case 'podman':
+            return new PodmanContainerOrchestration(url, gpu, undefined);
+        case 'docker':
+        default:
+            return new DockerContainerOrchestration(url, gpu, teeRuntime);
+    }
+}

package/dist/{cli → src/cli}/commands/prune/action.js

@@ -8,7 +8,7 @@ export async function pruneResources(options) {
     try {
         const db = new DB(options.config).db;
         const repository = new NodeRepository(db);
-        const containerOrchestration = selectContainerOrchestrationProvider(options.provider, options.podman, options.gpu);
+        const containerOrchestration = selectContainerOrchestrationProvider(options.provider, options.podman, options.gpu, undefined);
         const resourceManager = new ResourceManager(containerOrchestration, repository);
         await resourceManager.prune();
         console.log('Finished pruning system');

package/dist/{cli → src/cli}/commands/run/action.js

@@ -29,7 +29,7 @@ export async function runJob(jobDefinitionFile, options) {
         log();
         const db = new DB(options.config).db;
         const repository = createLoggingProxy(new NodeRepository(db));
-        const containerOrchestration = selectContainerOrchestrationProvider(options.provider, options.podman, options.gpu);
+        const containerOrchestration = selectContainerOrchestrationProvider(options.provider, options.podman, options.gpu, options.trustedExecutionRuntime);
         const resourceManager = new ResourceManager(containerOrchestration, repository);
         const provider = new Provider(containerOrchestration, repository, resourceManager);
         const logger = new ConsoleLogger(false);

package/dist/src/cli/commands/sharedOptions/--tee-runtime.d.ts

@@ -0,0 +1,2 @@
+import { Option } from 'commander';
+export declare const teeRuntimeOption: Option;

package/dist/src/cli/commands/sharedOptions/--tee-runtime.js

@@ -0,0 +1,5 @@
+import { TrustedExecutionEnv } from '@nosana/sdk';
+import { Option } from 'commander';
+export const teeRuntimeOption = new Option('--trusted-execution-runtime <runtime>', 'specify the container runtime to use for TEE containers')
+    .choices(Object.values(TrustedExecutionEnv))
+    .default(undefined);

package/dist/{cli → src/cli}/commands/sharedOptions/index.d.ts

@@ -4,4 +4,5 @@ export * from './--wallet.js';
 export * from './--format.js';
 export * from './--port.js';
 export * from './--gpu.js';
+export * from './--tee-runtime.js';
 export * from './--verbose.js';

package/dist/{cli → src/cli}/commands/sharedOptions/index.js

@@ -5,4 +5,5 @@ export * from './--wallet.js';
 export * from './--format.js';
 export * from './--port.js';
 export * from './--gpu.js';
+export * from './--tee-runtime.js';
 export * from './--verbose.js';

package/dist/{cli → src/cli}/commands/start/command.js

@@ -1,6 +1,6 @@
 import { Command, Option } from 'commander';
 import { startNode } from './action.js';
-import { networkOption, portOption, rpcOption, walletOption, verboseOption, gpuOption } from '../sharedOptions/index.js';
+import { networkOption, portOption, rpcOption, walletOption, verboseOption, gpuOption, teeRuntimeOption, } from '../sharedOptions/index.js';
 export * from './action.js';
 export const startNodeCommand = new Command('start')
     .description('Start Nosana Node')
@@ -10,6 +10,7 @@ export const startNodeCommand = new Command('start')
     .addOption(walletOption)
     .addOption(new Option('--docker, --podman <URI>', 'Podman/Docker connection URI').default('~/.nosana/podman/podman.sock'))
     .addOption(new Option('-c, --config <path>', 'Config path (to store the flows database and other config)').default('~/.nosana/'))
+    .addOption(teeRuntimeOption)
     .addOption(gpuOption)
     .addOption(portOption)
     .addOption(verboseOption)

package/dist/{index.d.ts → src/index.d.ts}

@@ -1,3 +1,3 @@
 #!/usr/bin/env -S node --no-warnings
-/// <reference path="../src/global.d.ts" />
+/// <reference path="../../src/global.d.ts" />
 export * from './cli/createNosanaCli.js';

package/dist/src/static/specs-and-network-job.json

@@ -0,0 +1,52 @@
+{
+    "version": "0.1",
+    "type": "container",
+    "meta": {
+        "trigger": "cli"
+    },
+    "ops": [
+        {
+            "type": "container/run",
+            "id": "system-info",
+            "args": {
+                "cmd": ["./system.sh"],
+                "image": "registry.hub.docker.com/nosana/stats:v1.2.1",
+                "env": {
+                    "DEBUG": "1"
+                }
+            },
+            "execution": {
+                "group": "spec"
+            }
+        },
+        {
+            "type": "container/run",
+            "id": "network-info",
+            "args": {
+                "cmd": ["./network.sh"],
+                "image": "registry.hub.docker.com/nosana/stats:v1.2.1",
+                "env": {
+                    "DEBUG": "1"
+                }
+            },
+            "execution": {
+                "group": "network"
+            }
+        },
+        {
+            "type": "container/run",
+            "id": "gpu-info",
+            "args": {
+                "cmd": ["./cuda_check"],
+                "image": "registry.hub.docker.com/nosana/stats:v1.2.1",
+                "env": {
+                    "DEBUG": "1"
+                },
+                "gpu": true
+            },
+            "execution": {
+                "group": "spec"
+            }
+        }
+    ]
+}

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@nosana/node",
-  "version": "1.0.1",
+  "version": "1.0.3-rc",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@nosana/node",
-      "version": "1.0.1",
+      "version": "1.0.3-rc",
       "license": "ISC",
       "dependencies": {
         "@coral-xyz/anchor": "^0.28.1-beta.1",
         "@inquirer/prompts": "^4.3.0",
-        "@nosana/sdk": "^0.4.80",
+        "@nosana/sdk": "^0.4.81",
         "@solana/web3.js": "^1.78.0",
         "bn.js": "^5.2.1",
         "chalk": "^5.3.0",
@@ -1580,9 +1580,9 @@
       }
     },
     "node_modules/@nosana/sdk": {
-      "version": "0.4.80",
-      "resolved": "https://registry.npmjs.org/@nosana/sdk/-/sdk-0.4.80.tgz",
-      "integrity": "sha512-S/N/q2odXfQHEAahZKTbaFiOvcAo3+GoFpHfVcz6YnUUlgot0y/dtBvmPZWt56Cddq2YIvEUBuHF0VVru2kToQ==",
+      "version": "0.4.81",
+      "resolved": "https://registry.npmjs.org/@nosana/sdk/-/sdk-0.4.81.tgz",
+      "integrity": "sha512-xviLJyO/MPYKnMHDDMum/t2yXrsVzS8lC325Ru/HfRc4GXz7IkD7/UoahmD8YNGGDZV570zdmasTnaT9N9BkIQ==",
       "license": "ISC",
       "dependencies": {
         "@coral-xyz/anchor": "^0.28.1-beta.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nosana/node",
-  "version": "1.0.1",
+  "version": "1.0.3-rc",
   "description": "",
   "bin": {
     "nosana-node": "./dist/src/index.js"
@@ -67,7 +67,7 @@
   "dependencies": {
     "@coral-xyz/anchor": "^0.28.1-beta.1",
     "@inquirer/prompts": "^4.3.0",
-    "@nosana/sdk": "^0.4.80",
+    "@nosana/sdk": "^0.4.81",
     "@solana/web3.js": "^1.78.0",
     "bn.js": "^5.2.1",
     "chalk": "^5.3.0",

package/dist/NodeManager/configs/__tests__/NodeConfigs.spec.d.ts

@@ -1 +0,0 @@
-export {};