@chainlink/cre-sdk 0.0.9-alpha → 0.0.10-alpha

package/dist/sdk/cre/index.d.ts

@@ -11,7 +11,7 @@ import { CronCapability } from '../../generated-sdk/capabilities/scheduler/cron/
 export { type Log as EVMLog, TxStatus, } from '../../generated/capabilities/blockchain/evm/v1alpha/client_pb';
 export type { Payload as HTTPPayload } from '../../generated/capabilities/networking/http/v1alpha/trigger_pb';
 export type { Payload as CronPayload } from '../../generated/capabilities/scheduler/cron/v1/trigger_pb';
-export { ClientCapability as EVMClient } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
+export { ClientCapability as EVMClient, type WriteCreReportRequest, type WriteCreReportRequestJson, } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
 export { ClientCapability as HTTPClient, type SendRequester as HTTPSendRequester, } from '../../generated-sdk/capabilities/networking/http/v1alpha/client_sdk_gen';
 export { HTTPCapability } from '../../generated-sdk/capabilities/networking/http/v1alpha/http_sdk_gen';
 export { CronCapability } from '../../generated-sdk/capabilities/scheduler/cron/v1/cron_sdk_gen';

package/dist/sdk/cre/index.js

@@ -12,7 +12,7 @@ import { handler } from '../workflow';
  */
 export { TxStatus, } from '../../generated/capabilities/blockchain/evm/v1alpha/client_pb';
 // EVM Capability
-export { ClientCapability as EVMClient } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
+export { ClientCapability as EVMClient, } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
 // HTTP Capability
 export { ClientCapability as HTTPClient, } from '../../generated-sdk/capabilities/networking/http/v1alpha/client_sdk_gen';
 export { HTTPCapability } from '../../generated-sdk/capabilities/networking/http/v1alpha/http_sdk_gen';

package/dist/sdk/errors.d.ts

@@ -6,7 +6,7 @@ export declare class NodeModeError extends Error {
     constructor();
 }
 export declare class SecretsError extends Error {
-    sceretRequest: SecretRequest;
+    secretRequest: SecretRequest;
     error: String;
-    constructor(sceretRequest: SecretRequest, error: String);
+    constructor(secretRequest: SecretRequest, error: String);
 }

package/dist/sdk/errors.js

@@ -11,11 +11,11 @@ export class NodeModeError extends Error {
     }
 }
 export class SecretsError extends Error {
-    sceretRequest;
+    secretRequest;
     error;
-    constructor(sceretRequest, error) {
-        super(`error fetching ${sceretRequest}: ${error}`);
-        this.sceretRequest = sceretRequest;
+    constructor(secretRequest, error) {
+        super(`error fetching ${secretRequest}: ${error}`);
+        this.secretRequest = secretRequest;
         this.error = error;
     }
 }

package/dist/sdk/impl/runtime-impl.d.ts

@@ -25,7 +25,7 @@ export declare class NodeRuntimeImpl<C> extends BaseRuntimeImpl<C> implements No
 export declare class RuntimeImpl<C> extends BaseRuntimeImpl<C> implements Runtime<C> {
     private nextNodeCallId;
     constructor(config: C, nextCallId: number, helpers: RuntimeHelpers, maxResponseSize: bigint);
-    runInNodeMode<TArgs extends unknown[], TOutput>(fn: (nodeRuntime: NodeRuntime<C>, ...args: TArgs) => TOutput, consesusAggretation: ConsensusAggregation<TOutput, true>, unwrapOptions?: TOutput extends PrimitiveTypes ? never : UnwrapOptions<TOutput>): (...args: TArgs) => {
+    runInNodeMode<TArgs extends unknown[], TOutput>(fn: (nodeRuntime: NodeRuntime<C>, ...args: TArgs) => TOutput, consensusAggretation: ConsensusAggregation<TOutput, true>, unwrapOptions?: TOutput extends PrimitiveTypes ? never : UnwrapOptions<TOutput>): (...args: TArgs) => {
         result: () => TOutput;
     };
     getSecret(request: SecretRequest | SecretRequestJson): {

package/dist/sdk/impl/runtime-impl.js

@@ -77,8 +77,18 @@ export class BaseRuntimeImpl {
                 }
                 const response = capabilityResponse.response;
                 switch (response.case) {
-                    case 'payload':
-                        return anyUnpack(response.value, outputSchema);
+                    case 'payload': {
+                        try {
+                            return anyUnpack(response.value, outputSchema);
+                        }
+                        catch {
+                            throw new CapabilityError(`Error cannot unwrap payload`, {
+                                capabilityId,
+                                method,
+                                callbackId,
+                            });
+                        }
+                    }
                     case 'error':
                         throw new CapabilityError(`Error ${response.value}`, {
                             capabilityId,
@@ -119,16 +129,16 @@ export class RuntimeImpl extends BaseRuntimeImpl {
         helpers.switchModes(Mode.DON);
         super(config, nextCallId, helpers, maxResponseSize, Mode.DON);
     }
-    runInNodeMode(fn, consesusAggretation, unwrapOptions) {
+    runInNodeMode(fn, consensusAggretation, unwrapOptions) {
         return (...args) => {
             this.modeError = new DonModeError();
             const nodeRuntime = new NodeRuntimeImpl(this.config, this.nextNodeCallId, this.helpers, this.maxResponseSize);
             const consensusInput = create(SimpleConsensusInputsSchema, {
-                descriptors: consesusAggretation.descriptor,
+                descriptors: consensusAggretation.descriptor,
             });
-            if (consesusAggretation.defaultValue) {
+            if (consensusAggretation.defaultValue) {
                 // This cast is safe, since ConsensusAggregation can only have true its second argument if T extends CreSerializable<TOutput>
-                consensusInput.default = Value.from(consesusAggretation.defaultValue).proto();
+                consensusInput.default = Value.from(consensusAggretation.defaultValue).proto();
             }
             try {
                 const observation = fn(nodeRuntime, ...args);
@@ -173,13 +183,13 @@ export class RuntimeImpl extends BaseRuntimeImpl {
             };
         }
         const secretRequest = request.$typeName
-            ? create(SecretRequestSchema, request)
-            : request;
+            ? request
+            : create(SecretRequestSchema, request);
         const id = this.nextCallId;
         this.nextCallId++;
         const secretsReq = create(GetSecretsRequestSchema, {
             callbackId: id,
-            requests: [request],
+            requests: [secretRequest],
         });
         if (!this.helpers.getSecrets(secretsReq, this.maxResponseSize)) {
             return {
@@ -207,7 +217,7 @@ export class RuntimeImpl extends BaseRuntimeImpl {
                     case 'error':
                         throw new SecretsError(secretRequest, response.value.error);
                     default:
-                        throw new SecretsError(secretRequest, 'cannot unmashal returned value from host');
+                        throw new SecretsError(secretRequest, 'cannot unmarshal returned value from host');
                 }
             },
         };

package/dist/sdk/types/restricted-apis.js

@@ -0,0 +1,3 @@
+// This file ensures the module is properly loaded for TypeScript global augmentations
+// The actual type definitions are in restricted-apis.d.ts
+export {};

package/dist/sdk/utils/config/index.js

@@ -15,7 +15,18 @@ const defaultJsonParser = (config) => JSON.parse(Buffer.from(config).toString())
 export const configHandler = async (request, { configParser, configSchema } = {}) => {
     const config = request.config;
     const parser = configParser || defaultJsonParser;
-    const intermediateConfig = parser(config);
+    let intermediateConfig;
+    try {
+        intermediateConfig = parser(config);
+    }
+    catch (error) {
+        if (error instanceof Error) {
+            throw new Error(`Failed to parse configuration: ${error.message}`);
+        }
+        else {
+            throw new Error(`Failed to parse configuration: unknown error`);
+        }
+    }
     return configSchema
         ? standardValidate(configSchema, intermediateConfig)
         : intermediateConfig;

package/dist/sdk/utils/hex-utils.js

@@ -5,10 +5,18 @@ export const hexToBytes = (hexStr) => {
     if (!hexStr.startsWith('0x')) {
         throw new Error(`Invalid hex string: ${hexStr}`);
     }
+    // Validate hexadecimal characters
+    if (!/^0x[0-9a-fA-F]*$/.test(hexStr)) {
+        throw new Error(`Invalid hex string: ${hexStr}`);
+    }
+    // Validate even length
+    if ((hexStr.length - 2) % 2 !== 0) {
+        throw new Error(`Hex string must have an even number of characters: ${hexStr}`);
+    }
     const hex = hexStr.slice(2);
     const bytes = new Uint8Array(hex.length / 2);
     for (let i = 0; i < hex.length; i += 2) {
-        bytes[i / 2] = Number.parseInt(hex.substr(i, 2), 16);
+        bytes[i / 2] = Number.parseInt(hex.slice(i, i + 2), 16);
     }
     return bytes;
 };

package/dist/sdk/wasm/runner.js

@@ -19,7 +19,13 @@ export class Runner {
     }
     static getRequest() {
         const argsString = hostBindings.getWasiArgs();
-        const args = JSON.parse(argsString);
+        let args;
+        try {
+            args = JSON.parse(argsString);
+        }
+        catch (e) {
+            throw new Error('Invalid request: could not parse arguments');
+        }
         // SDK expects exactly 2 args:
         // 1st is the script name
         // 2nd is the base64 encoded request
@@ -44,6 +50,8 @@ export class Runner {
                 case 'trigger':
                     result = this.handleExecutionPhase(this.request, workflow, runtime);
                     break;
+                default:
+                    throw new Error('Unknown request type');
             }
         }
         catch (e) {
@@ -60,6 +68,11 @@ export class Runner {
             throw new Error('cannot handle non-trigger request as a trigger');
         }
         const triggerMsg = req.request.value;
+        // We're about to cast bigint to number, so we need to check if it's safe
+        const id = BigInt(triggerMsg.id);
+        if (id > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new Error(`Trigger ID ${id} exceeds safe integer range`);
+        }
         const index = Number(triggerMsg.id);
         if (Number.isFinite(index) && index >= 0 && index < workflow.length) {
             const entry = workflow[index];

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@chainlink/cre-sdk",
-	"version": "0.0.9-alpha",
+	"version": "0.0.10-alpha",
 	"type": "module",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
@@ -10,7 +10,8 @@
 			"import": "./dist/index.js"
 		},
 		"./restricted-apis": {
-			"types": "./dist/sdk/types/restricted-apis.d.ts"
+			"types": "./dist/sdk/types/restricted-apis.d.ts",
+			"import": "./dist/sdk/types/restricted-apis.js"
 		},
 		"./pb": {
 			"types": "./dist/pb.d.ts",
@@ -54,7 +55,7 @@
 	"dependencies": {
 		"@bufbuild/protobuf": "2.6.3",
 		"@bufbuild/protoc-gen-es": "2.6.3",
-		"@chainlink/cre-sdk-javy-plugin": "0.0.6-alpha",
+		"@chainlink/cre-sdk-javy-plugin": "0.0.7-alpha",
 		"@standard-schema/spec": "1.0.0",
 		"viem": "2.34.0",
 		"zod": "3.25.76"