@chainlink/cre-sdk 1.6.0 → 1.7.0-alpha.1

package/dist/sdk/errors.d.ts

@@ -10,6 +10,11 @@ export declare class SecretsError extends Error {
     error: string;
     constructor(secretRequest: SecretRequest, error: string);
 }
+export declare class SecretsBatchError extends Error {
+    readonly secretRequests: SecretRequest[];
+    readonly error: string;
+    constructor(secretRequests: SecretRequest[], error: string);
+}
 export declare class NullReportError extends Error {
     constructor();
 }

package/dist/sdk/errors.js

@@ -20,6 +20,16 @@ export class SecretsError extends Error {
         this.name = 'SecretsError';
     }
 }
+export class SecretsBatchError extends Error {
+    secretRequests;
+    error;
+    constructor(secretRequests, error) {
+        super(`batch secret retrieval failed for ${secretRequests.length} request(s): ${error}. Verify the host response is complete and that the workflow has access to the requested secrets`);
+        this.secretRequests = secretRequests;
+        this.error = error;
+        this.name = 'SecretsBatchError';
+    }
+}
 export class NullReportError extends Error {
     constructor() {
         super('null report');

package/dist/sdk/impl/runtime-impl.d.ts

@@ -1,5 +1,5 @@
 import { type Message } from '@bufbuild/protobuf';
-import { type AwaitCapabilitiesRequest, type AwaitCapabilitiesResponse, type AwaitSecretsRequest, type AwaitSecretsResponse, type CapabilityRequest, type GetSecretsRequest, Mode, type Secret, type SecretRequest, type SecretRequestJson } from '../../generated/sdk/v1alpha/sdk_pb';
+import { type AwaitCapabilitiesRequest, type AwaitCapabilitiesResponse, type AwaitSecretsRequest, type AwaitSecretsResponse, type CapabilityRequest, type GetSecretsRequest, Mode, type Secret, type SecretRequest, type SecretRequestJson, type SecretResponse } from '../../generated/sdk/v1alpha/sdk_pb';
 import type { BaseRuntime, CallCapabilityParams, NodeRuntime, ReportRequest, ReportRequestJson, Runtime } from '..';
 import type { Report } from '../report';
 import { type ConsensusAggregation, type PrimitiveTypes, type UnwrapOptions } from '../utils';
@@ -82,10 +82,14 @@ export declare class RuntimeImpl<C> extends BaseRuntimeImpl<C> implements Runtim
     private captureError;
     private restoreDonMode;
     private runConsensusAndWrap;
+    getSecrets(requests: Array<SecretRequest | SecretRequestJson>): {
+        result: () => SecretResponse[];
+    };
     getSecret(request: SecretRequest | SecretRequestJson): {
         result: () => Secret;
     };
-    private awaitAndUnwrapSecret;
+    private awaitAndUnwrapSecrets;
+    private unwrapSingleSecretResult;
     /**
      * Generates a report via consensus mechanism.
      */
@@ -102,8 +106,8 @@ export interface RuntimeHelpers {
     call(request: CapabilityRequest): boolean;
     /** Awaits capability responses. Blocks until responses are ready. */
     await(request: AwaitCapabilitiesRequest, maxResponseSize: bigint): AwaitCapabilitiesResponse;
-    /** Requests secrets from host. Returns false if host rejects request. */
-    getSecrets(request: GetSecretsRequest, maxResponseSize: bigint): boolean;
+    /** Requests secrets from host. Throws if host rejects the request. */
+    getSecrets(request: GetSecretsRequest, maxResponseSize: bigint): void;
     /** Awaits secret responses. Blocks until secrets are ready. */
     awaitSecrets(request: AwaitSecretsRequest, maxResponseSize: bigint): AwaitSecretsResponse;
     /** Switches execution mode (DON vs Node). Affects available operations. */

package/dist/sdk/impl/runtime-impl.js

@@ -4,7 +4,7 @@ import { AwaitCapabilitiesRequestSchema, AwaitSecretsRequestSchema, CapabilityRe
 import { ConsensusCapability } from '../../generated-sdk/capabilities/internal/consensus/v1alpha/consensus_sdk_gen';
 import { Value, } from '../utils';
 import { CapabilityError } from '../utils/capabilities/capability-error';
-import { DonModeError, NodeModeError, SecretsError } from '../errors';
+import { DonModeError, NodeModeError, SecretsBatchError, SecretsError } from '../errors';
 /**
  * Base implementation shared by DON and Node runtimes.
  *
@@ -245,7 +245,7 @@ export class RuntimeImpl extends BaseRuntimeImpl {
             },
         };
     }
-    getSecret(request) {
+    getSecrets(requests) {
         // Enforce mode restrictions
         if (this.modeError) {
             return {
@@ -254,48 +254,90 @@ export class RuntimeImpl extends BaseRuntimeImpl {
                 },
             };
         }
-        // Normalize request (accept both protobuf and JSON formats)
-        const secretRequest = request.$typeName
+        // Normalize requests (accept both protobuf and JSON formats)
+        const normalizedRequests = requests.map((request) => request.$typeName
             ? request
-            : create(SecretRequestSchema, request);
+            : create(SecretRequestSchema, request));
+        if (normalizedRequests.length === 0) {
+            return {
+                result: () => [],
+            };
+        }
         // Allocate callback ID and send request
         const id = this.nextCallId;
         this.nextCallId++;
         const secretsReq = create(GetSecretsRequestSchema, {
             callbackId: id,
-            requests: [secretRequest],
+            requests: normalizedRequests,
         });
-        if (!this.helpers.getSecrets(secretsReq, this.maxResponseSize)) {
+        try {
+            this.helpers.getSecrets(secretsReq, this.maxResponseSize);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
             return {
                 result: () => {
-                    throw new SecretsError(secretRequest, 'host is not making the secrets request');
+                    throw new SecretsBatchError(normalizedRequests, message);
                 },
             };
         }
         // Return lazy result
         return {
-            result: () => this.awaitAndUnwrapSecret(id, secretRequest),
+            result: () => this.awaitAndUnwrapSecrets(id, normalizedRequests),
         };
     }
-    awaitAndUnwrapSecret(id, secretRequest) {
+    getSecret(request) {
+        const secretRequest = request.$typeName
+            ? request
+            : create(SecretRequestSchema, request);
+        const getSecretsCall = this.getSecrets([secretRequest]);
+        return {
+            result: () => {
+                let responseList;
+                try {
+                    responseList = getSecretsCall.result();
+                }
+                catch (err) {
+                    if (err instanceof SecretsBatchError) {
+                        throw new SecretsError(secretRequest, err.error);
+                    }
+                    throw err;
+                }
+                return this.unwrapSingleSecretResult(responseList, secretRequest);
+            },
+        };
+    }
+    awaitAndUnwrapSecrets(id, requests) {
         const awaitRequest = create(AwaitSecretsRequestSchema, { ids: [id] });
-        const awaitResponse = this.helpers.awaitSecrets(awaitRequest, this.maxResponseSize);
+        let awaitResponse;
+        try {
+            awaitResponse = this.helpers.awaitSecrets(awaitRequest, this.maxResponseSize);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            throw new SecretsBatchError(requests, message);
+        }
         const secretsResponse = awaitResponse.responses[id];
         if (!secretsResponse) {
-            throw new SecretsError(secretRequest, 'no response');
+            throw new SecretsBatchError(requests, 'no response');
         }
-        const responses = secretsResponse.responses;
-        if (responses.length !== 1) {
-            throw new SecretsError(secretRequest, 'invalid value returned from host');
+        if (secretsResponse.responses.length !== requests.length) {
+            throw new SecretsBatchError(requests, 'invalid value returned from host');
+        }
+        return secretsResponse.responses;
+    }
+    unwrapSingleSecretResult(responseList, request) {
+        if (responseList.length !== 1) {
+            throw new SecretsError(request, 'invalid value returned from host');
         }
-        const response = responses[0].response;
+        const response = responseList[0].response;
         switch (response.case) {
             case 'secret':
                 return response.value;
             case 'error':
-                throw new SecretsError(secretRequest, response.value.error);
+                throw new SecretsError(request, response.value.error);
             default:
-                throw new SecretsError(secretRequest, 'cannot unmarshal returned value from host');
+                throw new SecretsError(request, 'cannot unmarshal returned value from host');
         }
     }
     /**

package/dist/sdk/testutils/test-runtime.js

@@ -217,7 +217,6 @@ function createTestRuntimeHelpers(registry, secrets, testWriter, state, _maxResp
                 }
             }
             pendingSecrets.set(req.callbackId, resp);
-            return true;
         },
         awaitSecrets(request, _maxResponseSize) {
             const responses = {};

package/dist/sdk/wasm/runner.js

@@ -41,6 +41,7 @@ export class Runner {
         let result;
         try {
             const workflow = await initFn(this.config, {
+                getSecrets: runtime.getSecrets.bind(runtime),
                 getSecret: runtime.getSecret.bind(runtime),
             });
             switch (this.request.request.case) {

package/dist/sdk/wasm/runtime.js

@@ -42,7 +42,7 @@ class WasmRuntimeHelpers {
     }
     getSecrets(request, maxResponseSize) {
         const responseSize = toI32ResponseSize(maxResponseSize);
-        return hostBindings.getSecrets(toBinary(GetSecretsRequestSchema, request), responseSize) >= 0;
+        hostBindings.getSecrets(toBinary(GetSecretsRequestSchema, request), responseSize);
     }
     awaitSecrets(request, maxResponseSize) {
         const responseSize = toI32ResponseSize(maxResponseSize);

package/dist/sdk/workflow.d.ts

@@ -1,6 +1,6 @@
 import type { Message } from '@bufbuild/protobuf';
-import type { Secret, SecretRequest, SecretRequestJson } from '../generated/sdk/v1alpha/sdk_pb';
-import { type Runtime } from './runtime';
+import type { Secret, SecretRequest, SecretRequestJson, SecretResponse } from '../generated/sdk/v1alpha/sdk_pb';
+import type { Runtime } from './runtime';
 import type { Trigger } from './utils/triggers/trigger-interface';
 import type { CreSerializable } from './utils';
 export type HandlerFn<TConfig, TTriggerOutput, TResult> = (runtime: Runtime<TConfig>, triggerOutput: TTriggerOutput) => Promise<CreSerializable<TResult>> | CreSerializable<TResult>;
@@ -11,6 +11,9 @@ export interface HandlerEntry<TConfig, TRawTriggerOutput extends Message<string>
 export type Workflow<TConfig> = ReadonlyArray<HandlerEntry<TConfig, any, any, any>>;
 export declare const handler: <TRawTriggerOutput extends Message<string>, TTriggerOutput, TConfig, TResult>(trigger: Trigger<TRawTriggerOutput, TTriggerOutput>, fn: HandlerFn<TConfig, TTriggerOutput, TResult>) => HandlerEntry<TConfig, TRawTriggerOutput, TTriggerOutput, TResult>;
 export type SecretsProvider = {
+    getSecrets(requests: Array<SecretRequest | SecretRequestJson>): {
+        result: () => SecretResponse[];
+    };
     getSecret(request: SecretRequest | SecretRequestJson): {
         result: () => Secret;
     };

package/dist/sdk/workflow.js

@@ -1,4 +1,3 @@
-import {} from './runtime';
 export const handler = (trigger, fn) => ({
     trigger,
     fn,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@chainlink/cre-sdk",
-	"version": "1.6.0",
+	"version": "1.7.0-alpha.1",
 	"type": "module",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",

package/dist/sdk/utils/secrets-error.d.ts

@@ -1,3 +0,0 @@
-export declare class SecretsError extends Error {
-    constructor(message: string);
-}

package/dist/sdk/utils/secrets-error.js

@@ -1,6 +0,0 @@
-export class SecretsError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'SecretsError';
-    }
-}