feat(vmm): expose event_log_version in vmm-cli and Web UI

- vmm-cli.py compose: add --event-log-version {1,2} flag.
  Omitting the flag keeps the field out of app-compose.json, so
  existing compose hashes are unchanged when the flag isn't used.
- Web UI CreateVmDialog: add a dropdown under Networking with
  V1 (legacy binary) / V2 (JCS canonical JSON); v2 is only written
  into the generated app-compose when explicitly selected.
- useVmManager: thread event_log_version through VmFormState and
  the clone-config path so re-creating a VM preserves the selection.

Author: kvinwang

vmm/src/vmm-cli.py

@@ -818,6 +818,8 @@ def create_app_compose(self, args) -> None:
                 app_compose["swap_size"] = swap_bytes
             else:
                 app_compose.pop("swap_size", None)
+        if args.event_log_version is not None:
+            app_compose["event_log_version"] = args.event_log_version
 
         compose_file = json.dumps(app_compose, indent=4, ensure_ascii=False).encode(
             "utf-8"
@@ -1684,6 +1686,13 @@ def _patched_format_help():
         default=None,
         help="Swap size (e.g. 4G). Set to 0 to disable",
     )
+    compose_parser.add_argument(
+        "--event-log-version",
+        type=int,
+        choices=[1, 2],
+        default=None,
+        help="RTMR3 runtime event-log digest format (1: legacy binary, 2: JCS canonical JSON). Omit to use the guest default (1).",
+    )
     compose_parser.add_argument(
         "--output", required=True, help="Path to output app-compose.json file"
     )

vmm/ui/src/components/CreateVmDialog.ts

@@ -156,6 +156,16 @@ const CreateVmDialogComponent = {
               </select>
             </div>
 
+            <div class="form-group">
+              <label for="eventLogVersion">Event log format
+                <span class="help-icon" title="V2 (JCS canonical JSON) enables per-event policy evaluation. V1 is the legacy binary format. Requires guest image with v2 support.">?</span>
+              </label>
+              <select id="eventLogVersion" v-model.number="form.event_log_version">
+                <option :value="1">V1 (legacy binary)</option>
+                <option :value="2">V2 (JCS canonical JSON)</option>
+              </select>
+            </div>
+
             <div class="form-group full-width">
               <label>Features</label>
               <div class="feature-checkboxes">

vmm/ui/src/composables/useVmManager.ts

@@ -31,6 +31,7 @@ type AppCompose = {
   launch_token_hash?: string;
   pre_launch_script?: string;
   init_script?: string;
+  event_log_version?: number;
 };
 
 type KeyProviderKind = 'none' | 'kms' | 'local' | 'tpm';
@@ -111,6 +112,7 @@ type VmFormState = {
   kms_urls: string[];
   gateway_urls: string[];
   stopped: boolean;
+  event_log_version: number;
 };
 
 type UpdateDialogState = {
@@ -194,6 +196,7 @@ function createVmFormState(preLaunchScript: string): VmFormState {
     kms_urls: [],
     gateway_urls: [],
     stopped: false,
+    event_log_version: 1,
   };
 }
 
@@ -754,6 +757,10 @@ type CreateVmPayloadSource = {
       appCompose.swap_size = swapBytes;
     }
 
+    if (vmForm.value.event_log_version && vmForm.value.event_log_version !== 1) {
+      appCompose.event_log_version = vmForm.value.event_log_version;
+    }
+
     const launchToken = vmForm.value.encryptedEnvs.find((env) => env.key === 'APP_LAUNCH_TOKEN');
     if (launchToken) {
       appCompose.launch_token_hash = await calcComposeHash(launchToken.value);
@@ -1134,6 +1141,7 @@ type CreateVmPayloadSource = {
       net_mode: config.networking?.mode || '',
       user_config: config.user_config || '',
       stopped: !!config.stopped,
+      event_log_version: theVm.appCompose?.event_log_version || 1,
     };
 
     // Show Create VM dialog instead of Clone Config dialog