added external templates. Added attestation w/ sdk example

Author: soc1024

README.md

@@ -9,7 +9,7 @@
 
 **Example applications for [dstack](https://github.com/Dstack-TEE/dstack) - Deploy containerized apps to TEEs with end-to-end security in minutes**
 
-[Use Cases](#use-cases) • [Core Patterns](#core-patterns) • [Dev Tools](#dev-scaffolding) • [Documentation](#documentation)
+[Getting Started](#getting-started) • [Use Cases](#use-cases) • [Core Patterns](#core-patterns) • [Dev Tools](#dev-scaffolding) • [Other Use Cases](#other-use-cases)
 
 </div>
 
@@ -19,18 +19,46 @@
 
 This repository contains ready-to-deploy examples demonstrating how to build and run applications on [dstack](https://github.com/Dstack-TEE/dstack), the developer-friendly SDK for deploying containerized apps in Trusted Execution Environments (TEE).
 
-## Prerequisites
+## Getting Started
 
-- Access to a dstack environment (self-hosted or [Phala Cloud](https://cloud.phala.network))
-- Basic understanding of [TEE concepts](https://docs.phala.network/dstack)
-- Basic familiarity with Docker Compose
-- Git for cloning the repository
+### Prerequisites
+
+- Docker and Docker Compose
+- Node.js (for Phala CLI)
+- Git
+
+### Setup
 
 ```bash
+# Clone the repo
 git clone https://github.com/Dstack-TEE/dstack-examples.git
 cd dstack-examples
+
+# Install Phala CLI
+npm install -g phala
+
+# Start the local simulator (no TEE hardware needed)
+phala simulator start
+```
+
+### Run an Example Locally
+
+```bash
+cd attestation-with-sdk
+docker compose run --rm \
+  -v ~/.phala-cloud/simulator/0.5.3/dstack.sock:/var/run/dstack.sock \
+  app
+```
+
+### Deploy to Phala Cloud
+
+```bash
+phala auth login
+phala deploy -n my-app -c docker-compose.yaml
 ```
 
+See [Phala Cloud](https://cloud.phala.network) for production TEE deployment.
+
 ---
 
 ## Use Cases
@@ -52,14 +80,26 @@ Key building blocks for dstack applications.
 
 ### Attestation
 
-How to get and verify TEE attestations.
+Request TEE attestations via the SDK. Mount `/var/run/dstack.sock` in your compose file to access the TEE.
+
+```javascript
+import { DstackClient } from '@phala/dstack-sdk'
+const client = new DstackClient()
+const info = await client.info()              // app_id, instance_id, tcb_info
+const quote = await client.getQuote(data)     // TDX quote with custom report_data
+const key = await client.getKey('/my/path')   // deterministic key derivation
+```
+
+```yaml
+volumes:
+  - /var/run/dstack.sock:/var/run/dstack.sock
+```
 
 | Example | Description | Status |
 |---------|-------------|--------|
-| [trust-center](./refs/trust-center) | Full attestation verification platform — **start here** for production attestation patterns | Reference |
-| [attestation-sdk](./attestation-sdk) | Using Dstack client SDK to fetch attestations | Coming Soon |
-| [timelock-nts](./timelock-nts) | Shows raw `/var/run/dstack.sock` usage (what the SDK wraps) | Available |
-| [attestation/configid-based](./attestation/configid-based) | ConfigID-based verification (demonstrates current format) | Available |
+| [attestation-with-sdk](./attestation-with-sdk) | Complete SDK example with HTTP server | Available |
+| [timelock-nts](./timelock-nts) | Raw socket usage (what the SDK wraps) | Available |
+| [attestation/configid-based](./attestation/configid-based) | ConfigID-based verification | Available |
 
 ### Gateway & Domains
 
@@ -110,6 +150,27 @@ Interesting demonstrations.
 
 ---
 
+## Other Use Cases
+
+External projects and templates worth exploring. These are maintained elsewhere but demonstrate interesting TEE patterns.
+
+| Project | Description | Link |
+|---------|-------------|------|
+| **Oracle Template** | Price aggregator with verifiable networking (hardened TLS) and multi-source validation | [Gldywn/phala-cloud-oracle-template](https://github.com/Gldywn/phala-cloud-oracle-template) |
+| **VRF Template** | Verifiable Random Function — hardware-backed cryptographic randomness | [Phala-Network/phala-cloud-vrf-template](https://github.com/Phala-Network/phala-cloud-vrf-template) |
+| **Open WebUI** | Self-hosted AI chat interface in TEE | [phala-cloud/templates/openwebui](https://github.com/Phala-Network/phala-cloud/tree/main/templates/prebuilt/openwebui) |
+| **n8n Automation** | Workflow automation (400+ integrations) with OAuth in TEE | [Marvin-Cypher/phala-n8n-template](https://github.com/Marvin-Cypher/phala-n8n-template) |
+| **Primus Attestor** | zkTLS node — TEE + zero-knowledge proofs | [primus-labs/primus-network-startup](https://github.com/primus-labs/primus-network-startup) |
+| **NEAR Shade Agent** | Blockchain oracle/agent for NEAR with TEE attestation | [phala-cloud/templates/near-shade-agent](https://github.com/Phala-Network/phala-cloud/tree/main/templates/prebuilt/near-shade-agent) |
+| **Presidio** | Microsoft's PII de-identification running in TEE | [HashWarlock/presidio](https://github.com/HashWarlock/presidio/tree/phala-cloud) |
+| **ByteBot** | AI desktop agent — computer control in isolated TEE sandbox | [phala-cloud/templates/bytebot](https://github.com/Phala-Network/phala-cloud/tree/main/templates/prebuilt/bytebot) |
+
+> **Note**: These templates use pre-built Docker images. For full auditability, review their source repos before deployment.
+
+See the full [Phala Cloud templates](https://github.com/Phala-Network/phala-cloud#templates) for more options.
+
+---
+
 ## Details
 
 Implementation details and infrastructure patterns.

attestation-with-sdk/README.md

@@ -0,0 +1,54 @@
+# Attestation SDK Example
+
+Minimal example showing how to use the [Dstack client SDK](https://github.com/Dstack-TEE/dstack/tree/master/sdk) to fetch TEE attestations.
+
+## What it does
+
+```javascript
+import { DstackClient } from '@phala/dstack-sdk'
+
+const client = new DstackClient()
+const info = await client.info()           // App info (app_id, tcb_info, etc)
+const quote = await client.getQuote(data)  // TDX quote with custom report_data
+const key = await client.getKey(path)      // Derive deterministic key from path
+```
+
+The SDK wraps the raw `/var/run/dstack.sock` API. Results are served at `http://localhost:8080`.
+
+## Local Development
+
+Test locally using the dstack simulator:
+
+```bash
+# Start the simulator
+phala simulator start
+
+# Run the example (mounts simulator socket)
+docker compose run --rm \
+  -v ~/.phala-cloud/simulator/0.5.3/dstack.sock:/var/run/dstack.sock \
+  app
+```
+
+## Deploy to Phala Cloud
+
+```bash
+phala deploy -n attestation-with-sdk -c docker-compose.yaml
+```
+
+**Note**: Requires dstack OS 0.5.x+ (uses `/var/run/dstack.sock`). Older 0.3.x images use `/var/run/tappd.sock` which is not compatible with the current SDK.
+
+## Verify with Trust Center
+
+Once deployed, verify your attestation using [trust-center](https://github.com/Phala-Network/trust-center):
+
+1. Get your app's attestation endpoint (e.g., `https://your-app.phala.network/`)
+2. Submit to trust-center for verification
+3. Trust-center validates: hardware quote → OS integrity → compose hash → domain (if applicable)
+
+## SDK Reference
+
+- **JS/TS**: `npm install @phala/dstack-sdk` — [docs](https://github.com/Dstack-TEE/dstack/tree/master/sdk/js)
+- **Python**: `pip install dstack-sdk` — [docs](https://github.com/Dstack-TEE/dstack/tree/master/sdk/python)
+- **Go**: [docs](https://github.com/Dstack-TEE/dstack/tree/master/sdk/go)
+- **Rust**: [docs](https://github.com/Dstack-TEE/dstack/tree/master/sdk/rust)
+- **Raw curl**: [API docs](https://github.com/Dstack-TEE/dstack/tree/master/sdk/curl)

attestation-with-sdk/docker-compose.yaml

@@ -0,0 +1,33 @@
+services:
+  app:
+    build:
+      context: .
+      dockerfile_inline: |
+        FROM node:22-slim
+        WORKDIR /app
+        RUN npm init -y && npm install @phala/dstack-sdk
+        RUN cat > index.mjs <<'SCRIPT'
+        import { DstackClient } from "@phala/dstack-sdk"
+        import { createServer } from "http"
+        const client = new DstackClient()
+        const [info, quote, key] = await Promise.all([
+          client.info(),
+          client.getQuote("example-report-data"),
+          client.getKey("/example/key/path"),
+        ])
+        const results = {
+          info,
+          quote: { rtmrs: quote.rtmrs, reportData: quote.report_data },
+          key: { path: "/example/key/path", hex: key.key?.slice(0, 64) + "..." },
+        }
+        console.log("Attestation results:", JSON.stringify(results, null, 2))
+        createServer((req, res) => {
+          res.writeHead(200, { "Content-Type": "application/json" })
+          res.end(JSON.stringify(results, null, 2))
+        }).listen(8080, () => console.log("Serving at http://localhost:8080"))
+        SCRIPT
+        CMD ["node", "index.mjs"]
+    ports:
+      - "8080:8080"
+    volumes:
+      - /var/run/dstack.sock:/var/run/dstack.sock