feat(kms): add root/app key epochs, SealedEnv and epoch-scoped authorization

.github/workflows/foundry-test.yml

@@ -57,7 +57,11 @@ jobs:
         id: build
 
       - name: Install OpenZeppelin upgrades validator
-        run: npm install --no-save --package-lock=false @openzeppelin/upgrades-core@^1.37.0
+        # The upgrade-safety tests run `npx @openzeppelin/upgrades-core@^1.37.0`;
+        # warm the npx cache with that spec once so parallel tests reuse it.
+        # `npm install` here would also resolve the webhook server's
+        # package.json, which is managed by Bun.
+        run: npx --yes @openzeppelin/upgrades-core@^1.37.0 --help > /dev/null
 
       - name: Run Forge tests
         # The upgrade-safety validator rejects a contract found in more than one

.github/workflows/kms-auth-eth-bun.yml → .github/workflows/kms-auth-eth.yml

@@ -2,39 +2,41 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: KMS auth-eth-bun
+name: KMS auth-eth
 
-# The auth-eth-bun webhook ships on its own cadence, separate from the KMS
-# image: a `kms-auth-eth-bun-v*` tag publishes
-# ghcr.io/dstack-tee/dstack-kms-auth-eth-bun:<version>. Pull requests and
+# The auth-eth webhook ships on its own cadence, separate from the KMS
+# image: a `kms-auth-eth-v*` tag publishes
+# ghcr.io/dstack-tee/dstack-kms-auth-eth:<version>. Pull requests and
 # pushes that touch the backend run the checks and build the image without
 # pushing it.
 on:
   workflow_dispatch:
     inputs:
       version:
-        description: Existing release tag version without the kms-auth-eth-bun-v prefix
+        description: Existing release tag version without the kms-auth-eth-v prefix
         required: true
         type: string
   push:
     branches: [ next, 'release/**' ]
     tags:
-      - 'kms-auth-eth-bun-v*'
+      - 'kms-auth-eth-v*'
+    # Top-level files only: the server lives next to the Foundry project, whose
+    # contracts/, lib/, test/ and script/ are covered by foundry-test.yml.
     paths:
-      - 'dstack/kms/auth-eth-bun/**'
-      - '.github/workflows/kms-auth-eth-bun.yml'
+      - 'dstack/kms/auth-eth/*'
+      - '.github/workflows/kms-auth-eth.yml'
   pull_request:
     branches: [ next, 'release/**' ]
     paths:
-      - 'dstack/kms/auth-eth-bun/**'
-      - '.github/workflows/kms-auth-eth-bun.yml'
+      - 'dstack/kms/auth-eth/*'
+      - '.github/workflows/kms-auth-eth.yml'
 
 permissions:
   contents: read
 
 env:
-  IMAGE: ghcr.io/dstack-tee/dstack-kms-auth-eth-bun
-  BACKEND_DIR: dstack/kms/auth-eth-bun
+  IMAGE: ghcr.io/dstack-tee/dstack-kms-auth-eth
+  BACKEND_DIR: dstack/kms/auth-eth
 
 jobs:
   check:
@@ -43,7 +45,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
         with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && format('kms-auth-eth-bun-v{0}', inputs.version) || github.sha }}
+          ref: ${{ github.event_name == 'workflow_dispatch' && format('kms-auth-eth-v{0}', inputs.version) || github.sha }}
           persist-credentials: false
 
       - name: Set up Bun
@@ -88,7 +90,7 @@ jobs:
             VERSION=$DISPATCH_VERSION
           else
             case "$GITHUB_REF" in
-              refs/tags/kms-auth-eth-bun-v*) VERSION=${GITHUB_REF#refs/tags/kms-auth-eth-bun-v} ;;
+              refs/tags/kms-auth-eth-v*) VERSION=${GITHUB_REF#refs/tags/kms-auth-eth-v} ;;
             esac
           fi
           if [ -n "$VERSION" ]; then
@@ -107,7 +109,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5
         with:
-          ref: ${{ github.event_name == 'workflow_dispatch' && format('kms-auth-eth-bun-v{0}', inputs.version) || github.sha }}
+          ref: ${{ github.event_name == 'workflow_dispatch' && format('kms-auth-eth-v{0}', inputs.version) || github.sha }}
           persist-credentials: false
 
       - name: Resolve the revision to build
@@ -151,12 +153,12 @@ jobs:
           IMAGE_DIGEST: ${{ steps.build.outputs.digest }}
         run: |
           token=$(curl -fsSL \
-            "https://ghcr.io/token?scope=repository:dstack-tee/dstack-kms-auth-eth-bun:pull" \
+            "https://ghcr.io/token?scope=repository:dstack-tee/dstack-kms-auth-eth:pull" \
             | jq -er .token)
           curl -fsSL -o /dev/null \
             -H "Authorization: Bearer $token" \
             -H "Accept: application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json" \
-            "https://ghcr.io/v2/dstack-tee/dstack-kms-auth-eth-bun/manifests/$IMAGE_DIGEST"
+            "https://ghcr.io/v2/dstack-tee/dstack-kms-auth-eth/manifests/$IMAGE_DIGEST"
 
       - name: Generate artifact attestation
         if: env.PUBLISH == '1'

.github/workflows/sdk.yaml

@@ -84,6 +84,12 @@ jobs:
           # the entries that are actually shared.
           save-if: ${{ github.event_name == 'push' }}
 
+      - name: Set up Python
+        if: steps.changes.outputs.relevant == 'true'
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
       - name: SDK tests
         if: steps.changes.outputs.relevant == 'true'
         run: cd sdk && ./run-tests.sh

CHANGELOG.md

@@ -7,28 +7,89 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- KMS root and application key epochs, epoch-scoped authorization, SealedEnv
+  HPKE encryption, automatic environment migration, and epoch-aware SDK key
+  selection.
+- dstack-auth: opt-in `allowedTcbStatuses` and `allowedAdvisoryIds` allowlists,
+  applied to app and KMS requests on `/authorize*` and `/bootAuth/*`. When set,
+  a `tcbStatus` outside the list, or any advisory ID outside the list, denies;
+  when absent, neither is checked. `GET /` reports the configured `chainId` and
+  `appImplementation`, and each decision is logged with the device ID,
+  measurements and TCB status.
+
 ### Changed
 
+- KMS: `core.onboard.public_key_handover` defaults to `false`, so
+  `KMS.GetKmsKey` is no longer served on the public port. Onboard through the
+  source's admin listener with `source_token`; a source that still onboards
+  0.5.x KMS nodes must set the option to `true` until they are upgraded.
+- KMS: onboarding refuses a source whose certificate carries no OS image hash,
+  which drops the fallback for KMS 0.5.x sources. Join only from a 0.6+ source;
+  upgrade a 0.5.x cluster to 0.6.x first.
+- dstack-auth: an empty `devices` list no longer allows any device; set
+  `allowAnyDevice: true` for that. An empty `osImages` list now denies every
+  app instead of skipping the OS image check. Allowlists generated by
+  `dstack-cli` already set both explicitly.
+- Auth backends: once a root epoch other than 0 is activated, `/bootAuth/kms`
+  denies a KMS that reports no root epoch, as `/bootAuth/app` already did, so
+  KMS binaries predating root epochs stop serving at activation. Upgrade every
+  KMS before activating a new root epoch.
+- auth-eth, auth-eth-bun: policy is read at the `finalized` block by default
+  instead of `latest`, so on-chain changes, including revocations, take effect
+  only once finalized. Set `ETH_BLOCK_TAG=latest` (or `safe`) to override; an
+  OP-stack chain read through the Helios light client requires `latest`. The
+  server refuses to start if the RPC cannot serve the configured tag. In
+  auth-eth-bun, `ETH_FINALITY_CONFIRMATIONS` now counts back from that block.
+- KMS: retain `GetTempCaCert`, temporary CA files and legacy handover fields so
+  KMS nodes can be upgraded before existing OS images.
+
 - dstack-util, cert-client: guests mint self-issued RA-TLS client
   certificates for KMS calls instead of fetching the temp CA and minting from
   it; the KMS authenticates the quote inside the certificate, not its issuer.
-  The KMS root CA now comes from `GetMeta`, over the same unauthenticated
-  connection `GetTempCaCert` used, so the trust posture is unchanged: relying
-  parties bind the KMS through the `key-provider` launch event (RTMR3/PCR14)
-  against the on-chain `kmsInfo` or a pinned key, and `verify_key_provider_id`
-  also enforces it in-guest when the app pins `key_provider_id`. A guest built
-  from this change needs KMS 0.6.0 or later; older KMS releases pin the temp CA
-  and refuse the certificate at the TLS handshake
+  Guests fetch the root CA with the key response and bind it to the attested
+  RPC certificate, without a metadata preflight. Provider pins and the
+  `key-provider` launch event (RTMR3/PCR14) retain the root identity binding.
+  The new flow requires an attested KMS that accepts self-issued certificates.
 - dstack-types: `KeyProvider::Kms` drops `tmp_ca_key` and `tmp_ca_cert`, so
   `.appkeys.json` no longer carries them. Files written by older images still
   parse, but out-of-tree readers that require those fields fail on new files
 
+- KMS: `auth-eth-bun` is renamed to `auth-eth`. The Bun webhook server moves
+  from `dstack/kms/auth-eth-bun` into `dstack/kms/auth-eth`, next to the
+  contracts. New releases are tagged `kms-auth-eth-v*` and published as
+  `ghcr.io/dstack-tee/dstack-kms-auth-eth`; images already published as
+  `ghcr.io/dstack-tee/dstack-kms-auth-eth-bun` remain available. Update image
+  references and source paths in deployments.
+
+### Removed
+
+- KMS: the `auth-mock` webhook backend. For development, use the built-in
+  `[core.auth_api] type = "dev"`, which allows everything.
+- `auth-simple` (`dstack/kms/auth-simple`). Use `dstack-auth`, which reads the
+  same config file. Differences: the TCB status and advisories are not checked
+  unless `allowedTcbStatuses` / `allowedAdvisoryIds` are set (auth-simple
+  defaulted to `["UpToDate"]` and `[]`); `/authorize*` requires
+  `kmsContractAddr`; KMS requests are not matched against `osImages`; the
+  config path and port are `--config` / `--port` flags instead of
+  `AUTH_CONFIG_PATH` / `PORT`, and it binds to `127.0.0.1` by default. See
+  `docs/dstack-auth-operations.md#migrating-from-auth-simple`.
+- KMS: the Node `auth-eth` webhook server (`dstack/kms/auth-eth/src`) is
+  removed. Use the Bun server (formerly `auth-eth-bun`, now in the same
+  directory, see Changed), which serves the same webhook API and reads the
+  same environment variables, except that it binds all interfaces and ignores
+  `HOST`, and `PORT` defaults to 3000 from source (8000 in its image). The
+  `DstackKms`/`DstackApp` contracts, Foundry tests and deployment scripts stay
+  in `dstack/kms/auth-eth`. `kms/dstack-app/compose-dev.yaml` now builds
+  the Bun server.
+
 ### Fixed
 
-- kms: onboarding from a source older than 0.6.0 (no `source_token`) now
-  verifies the source's attestation on the connection that returns the root
-  keys, and checks it against local policy before using them. It used to
-  verify the source only on the earlier `GetTempCaCert` connection
+- kms: onboarding with or without `source_token` verifies the source's
+  attestation on the connection that returns the root keys and checks local
+  policy before using them. Legacy sources requiring temp-CA-issued clients
+  must be upgraded.
 
 ## [0.6.3] - 2026-11-01
 

CLAUDE.md

@@ -70,22 +70,24 @@ cargo clippy -- -D warnings --allow unused_variables
 
 ```bash
 cd dstack/kms/auth-eth
-npm install       # Install Node.js dependencies for bootAuth server
-forge install     # Install Foundry dependencies (submodules)
+git submodule update --init --recursive lib/forge-std \
+  lib/openzeppelin-contracts-upgradeable lib/openzeppelin-foundry-upgrades
+# Upgrade-safety validator called by `forge test --ffi`
+npx --yes @openzeppelin/upgrades-core@^1.37.0 --help > /dev/null
 
 # Build
 forge build       # Compile smart contracts
-npm run build     # Build TypeScript server
 
 # Test
-forge test --ffi      # Run Foundry contract tests
-npm test              # Run TypeScript server tests
-npm run test:coverage # Run TypeScript tests with coverage
+forge clean && forge test --ffi   # Run Foundry contract tests
 
 # Local development
 anvil             # Start local Ethereum node
 ```
 
+The KMS webhook server for these contracts lives in the same directory
+(`bun install && bun run check`).
+
 ### Python SDK
 
 ```bash
@@ -130,7 +132,7 @@ cargo test --all-features -- --show-output --test-threads=1
 cd dstack/kms/auth-eth
 
 # Run all Foundry tests
-forge test
+forge test --ffi
 
 # Run with verbosity
 forge test -vv

REUSE.toml

@@ -34,17 +34,15 @@ path = [
     "**/tsconfig.json",
     "**/tsconfig.node.json",
     "**/tsconfig.browser.json",
-    "dstack/kms/auth-eth-bun/.oxlintrc.json",
+    "dstack/kms/auth-eth/.oxlintrc.json",
     "dstack/kms/auth-eth/slither.config.json",
     "**/package-lock.json",
     "dstack/kms/auth-eth/.openzeppelin/unknown-2035.json",
-    "dstack/kms/auth-mock/.oxlintrc.json",
-    "dstack/kms/auth-simple/.oxlintrc.json",
-    "dstack/kms/auth-simple/auth-config.example.json",
     "tools/sca/examples/heartbeat/config.json",
     "tools/sca/examples/hello-c/config.json",
     "tools/sca/examples/heartbeat/rootfs/etc/heartbeat/interval",
     "sdk/simulator/*.json",
+    "sdk/fixtures/sealed-env/*.json",
     "sdk/go/go.sum",
     "sdk/go/ratls/go.sum",
     "dstack/kms/dstack-app/builder/shared/builder-pinned-packages.txt",
@@ -194,11 +192,6 @@ precedence = "override"
 
 # Generated files
 
-[[annotations]]
-path = "dstack/kms/auth-eth/typechain-types/**"
-SPDX-FileCopyrightText = "NONE"
-SPDX-License-Identifier = "CC0-1.0"
-
 [[annotations]]
 path = "**/*.lock"
 SPDX-FileCopyrightText = "NONE"