@chainlink/cre-sdk 1.9.0 → 1.10.0

package/dist/generated-sdk/capabilities/networking/confidentialhttp/v1alpha/client_sdk_gen.d.ts

@@ -1,5 +1,6 @@
 import { type ConfidentialHTTPRequest, type ConfidentialHTTPRequestJson, type HTTPResponse } from '../../../../../generated/capabilities/networking/confidentialhttp/v1alpha/client_pb';
 import type { Runtime } from '../../../../../sdk';
+import type { CapabilityInput } from '../../../../../sdk/utils/types/no-excess';
 /**
  * Client Capability
  *
@@ -12,7 +13,7 @@ export declare class ClientCapability {
     static readonly CAPABILITY_ID = "confidential-http@1.0.0-alpha";
     static readonly CAPABILITY_NAME = "confidential-http";
     static readonly CAPABILITY_VERSION = "1.0.0-alpha";
-    sendRequest(runtime: Runtime<unknown>, input: ConfidentialHTTPRequest | ConfidentialHTTPRequestJson): {
+    sendRequest<TInput>(runtime: Runtime<unknown>, input: CapabilityInput<TInput, ConfidentialHTTPRequest, ConfidentialHTTPRequestJson>): {
         result: () => HTTPResponse;
     };
 }

package/dist/generated-sdk/capabilities/networking/http/v1alpha/client_sdk_gen.d.ts

@@ -1,11 +1,12 @@
 import { type Request, type RequestJson, type Response } from '../../../../../generated/capabilities/networking/http/v1alpha/client_pb';
 import type { NodeRuntime, Runtime } from '../../../../../sdk';
 import type { ConsensusAggregation, PrimitiveTypes, UnwrapOptions } from '../../../../../sdk/utils';
+import type { CapabilityInput } from '../../../../../sdk/utils/types/no-excess';
 export declare class SendRequester {
     private readonly runtime;
     private readonly client;
     constructor(runtime: NodeRuntime<unknown>, client: ClientCapability);
-    sendRequest(input: Request | RequestJson): {
+    sendRequest<TInput>(input: CapabilityInput<TInput, Request, RequestJson>): {
         result: () => Response;
     };
 }
@@ -21,7 +22,7 @@ export declare class ClientCapability {
     static readonly CAPABILITY_ID = "http-actions@1.0.0-alpha";
     static readonly CAPABILITY_NAME = "http-actions";
     static readonly CAPABILITY_VERSION = "1.0.0-alpha";
-    sendRequest(runtime: NodeRuntime<unknown>, input: Request | RequestJson): {
+    sendRequest<TInput>(runtime: NodeRuntime<unknown>, input: CapabilityInput<TInput, Request, RequestJson>): {
         result: () => Response;
     };
     sendRequest<TArgs extends unknown[], TOutput>(runtime: Runtime<unknown>, fn: (sendRequester: SendRequester, ...args: TArgs) => TOutput, consensusAggregation: ConsensusAggregation<TOutput, true>, unwrapOptions?: TOutput extends PrimitiveTypes ? never : UnwrapOptions<TOutput>): (...args: TArgs) => {

package/dist/generated-sdk/capabilities/networking/http/v1alpha/http_sdk_gen.d.ts

@@ -1,6 +1,7 @@
 import { type Any } from '@bufbuild/protobuf/wkt';
 import { type Config, type ConfigJson, type Payload } from '../../../../../generated/capabilities/networking/http/v1alpha/trigger_pb';
 import type { Trigger } from '../../../../../sdk/utils/triggers/trigger-interface';
+import type { NoExcess } from '../../../../../sdk/utils/types/no-excess';
 /**
  * HTTP Capability
  *
@@ -13,7 +14,7 @@ export declare class HTTPCapability {
     static readonly CAPABILITY_ID = "http-trigger@1.0.0-alpha";
     static readonly CAPABILITY_NAME = "http-trigger";
     static readonly CAPABILITY_VERSION = "1.0.0-alpha";
-    trigger(config: ConfigJson): HTTPTrigger;
+    trigger<TConfig extends ConfigJson>(config: NoExcess<TConfig, ConfigJson>): HTTPTrigger;
 }
 /**
  * Trigger implementation for Trigger

package/dist/generated-sdk/capabilities/scheduler/cron/v1/cron_sdk_gen.d.ts

@@ -1,6 +1,7 @@
 import { type Any } from '@bufbuild/protobuf/wkt';
 import { type Config, type ConfigJson, type Payload } from '../../../../../generated/capabilities/scheduler/cron/v1/trigger_pb';
 import type { Trigger } from '../../../../../sdk/utils/triggers/trigger-interface';
+import type { NoExcess } from '../../../../../sdk/utils/types/no-excess';
 /**
  * Cron Capability
  *
@@ -13,7 +14,7 @@ export declare class CronCapability {
     static readonly CAPABILITY_ID = "cron-trigger@1.0.0";
     static readonly CAPABILITY_NAME = "cron-trigger";
     static readonly CAPABILITY_VERSION = "1.0.0";
-    trigger(config: ConfigJson): CronTrigger;
+    trigger<TConfig extends ConfigJson>(config: NoExcess<TConfig, ConfigJson>): CronTrigger;
 }
 /**
  * Trigger implementation for Trigger

package/dist/pb.d.ts

@@ -1,4 +1,5 @@
 export * as EVM_PB from './generated/capabilities/blockchain/evm/v1alpha/client_pb';
+export * as SOLANA_PB from './generated/capabilities/blockchain/solana/v1alpha/client_pb';
 export * as CONFIDENTIAL_HTTP_CLIENT_PB from './generated/capabilities/networking/confidentialhttp/v1alpha/client_pb';
 export * as HTTP_CLIENT_PB from './generated/capabilities/networking/http/v1alpha/client_pb';
 export * as HTTP_TRIGGER_PB from './generated/capabilities/networking/http/v1alpha/trigger_pb';

package/dist/pb.js

@@ -1,4 +1,5 @@
 export * as EVM_PB from './generated/capabilities/blockchain/evm/v1alpha/client_pb';
+export * as SOLANA_PB from './generated/capabilities/blockchain/solana/v1alpha/client_pb';
 export * as CONFIDENTIAL_HTTP_CLIENT_PB from './generated/capabilities/networking/confidentialhttp/v1alpha/client_pb';
 export * as HTTP_CLIENT_PB from './generated/capabilities/networking/http/v1alpha/client_pb';
 export * as HTTP_TRIGGER_PB from './generated/capabilities/networking/http/v1alpha/trigger_pb';

package/dist/sdk/cre/index.d.ts

@@ -2,6 +2,7 @@
  * Public API for the CRE SDK.
  */
 import { ClientCapability as EVMClient } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
+import { ClientCapability as SolanaClient } from '../../generated-sdk/capabilities/blockchain/solana/v1alpha/client_sdk_gen';
 import { ClientCapability as ConfidentialHTTPClient } from '../../generated-sdk/capabilities/networking/confidentialhttp/v1alpha/client_sdk_gen';
 import { ClientCapability as HTTPClient } from '../../generated-sdk/capabilities/networking/http/v1alpha/client_sdk_gen';
 import { HTTPCapability } from '../../generated-sdk/capabilities/networking/http/v1alpha/http_sdk_gen';
@@ -10,9 +11,11 @@ import { CronCapability } from '../../generated-sdk/capabilities/scheduler/cron/
  * Public exports for the CRE SDK.
  */
 export { type Log as EVMLog, TxStatus, } from '../../generated/capabilities/blockchain/evm/v1alpha/client_pb';
+export { ReceiverContractExecutionStatus as SolanaReceiverContractExecutionStatus, TxStatus as SolanaTxStatus, } from '../../generated/capabilities/blockchain/solana/v1alpha/client_pb';
 export type { Payload as HTTPPayload } from '../../generated/capabilities/networking/http/v1alpha/trigger_pb';
 export type { Payload as CronPayload } from '../../generated/capabilities/scheduler/cron/v1/trigger_pb';
 export { ClientCapability as EVMClient, type WriteCreReportRequest, type WriteCreReportRequestJson, } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
+export { ClientCapability as SolanaClient, type WriteCreReportRequest as SolanaWriteCreReportRequest, type WriteCreReportRequestJson as SolanaWriteCreReportRequestJson, } from '../../generated-sdk/capabilities/blockchain/solana/v1alpha/client_sdk_gen';
 export { ClientCapability as ConfidentialHTTPClient } from '../../generated-sdk/capabilities/networking/confidentialhttp/v1alpha/client_sdk_gen';
 export { ClientCapability as HTTPClient, type SendRequester as HTTPSendRequester, } from '../../generated-sdk/capabilities/networking/http/v1alpha/client_sdk_gen';
 export { HTTPCapability } from '../../generated-sdk/capabilities/networking/http/v1alpha/http_sdk_gen';
@@ -26,6 +29,7 @@ export declare const cre: {
         ConfidentialHTTPClient: typeof ConfidentialHTTPClient;
         HTTPClient: typeof HTTPClient;
         EVMClient: typeof EVMClient;
+        SolanaClient: typeof SolanaClient;
     };
     handler: <TRawTriggerOutput extends import("@bufbuild/protobuf").Message<string>, TTriggerOutput, TConfig, TResult>(trigger: import("../utils/triggers/trigger-interface").Trigger<TRawTriggerOutput, TTriggerOutput>, fn: import("../workflow").HandlerFn<TConfig, TTriggerOutput, TResult>) => import("../workflow").HandlerEntry<TConfig, TRawTriggerOutput, TTriggerOutput, TResult>;
 };

package/dist/sdk/cre/index.js

@@ -2,6 +2,7 @@
  * Public API for the CRE SDK.
  */
 import { ClientCapability as EVMClient } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
+import { ClientCapability as SolanaClient } from '../../generated-sdk/capabilities/blockchain/solana/v1alpha/client_sdk_gen';
 import { ClientCapability as ConfidentialHTTPClient } from '../../generated-sdk/capabilities/networking/confidentialhttp/v1alpha/client_sdk_gen';
 import { ClientCapability as HTTPClient } from '../../generated-sdk/capabilities/networking/http/v1alpha/client_sdk_gen';
 import { HTTPCapability } from '../../generated-sdk/capabilities/networking/http/v1alpha/http_sdk_gen';
@@ -12,8 +13,11 @@ import { handler } from '../workflow';
  * Public exports for the CRE SDK.
  */
 export { TxStatus, } from '../../generated/capabilities/blockchain/evm/v1alpha/client_pb';
+export { ReceiverContractExecutionStatus as SolanaReceiverContractExecutionStatus, TxStatus as SolanaTxStatus, } from '../../generated/capabilities/blockchain/solana/v1alpha/client_pb';
 // EVM Capability
 export { ClientCapability as EVMClient, } from '../../generated-sdk/capabilities/blockchain/evm/v1alpha/client_sdk_gen';
+// Solana Capability
+export { ClientCapability as SolanaClient, } from '../../generated-sdk/capabilities/blockchain/solana/v1alpha/client_sdk_gen';
 // Confidential HTTP Capability
 export { ClientCapability as ConfidentialHTTPClient } from '../../generated-sdk/capabilities/networking/confidentialhttp/v1alpha/client_sdk_gen';
 // HTTP Capability
@@ -30,6 +34,7 @@ export const cre = {
         ConfidentialHTTPClient,
         HTTPClient,
         EVMClient,
+        SolanaClient,
     },
     handler,
 };

package/dist/sdk/impl/runtime-impl.d.ts

@@ -42,6 +42,7 @@ export declare class BaseRuntimeImpl<C> implements BaseRuntime<C> {
     private awaitAndUnwrapCapabilityResponse;
     getNextCallId(): number;
     now(): Date;
+    sleep(ms: number): void;
     log(message: string): void;
 }
 /**
@@ -110,6 +111,8 @@ export interface RuntimeHelpers {
     switchModes(mode: Mode): void;
     /** Returns current time in milliseconds since Unix epoch. */
     now(): number;
+    /** Sleeps for the specified duration. */
+    sleep(ms: number): void;
     /** Logs a message to the host environment. */
     log(message: string): void;
 }

package/dist/sdk/impl/runtime-impl.js

@@ -5,6 +5,7 @@ import { ConsensusCapability } from '../../generated-sdk/capabilities/internal/c
 import { Value, } from '../utils';
 import { CapabilityError } from '../utils/capabilities/capability-error';
 import { DonModeError, NodeModeError, SecretsError } from '../errors';
+const DEFAULT_SECRET_NAMESPACE = 'main';
 /**
  * Base implementation shared by DON and Node runtimes.
  *
@@ -136,6 +137,9 @@ export class BaseRuntimeImpl {
         // date is already in milliseconds
         return new Date(this.helpers.now());
     }
+    sleep(ms) {
+        this.helpers.sleep(ms);
+    }
     log(message) {
         this.helpers.log(message);
     }
@@ -254,10 +258,10 @@ export class RuntimeImpl extends BaseRuntimeImpl {
                 },
             };
         }
-        // Normalize request (accept both protobuf and JSON formats)
-        const secretRequest = request.$typeName
-            ? request
-            : create(SecretRequestSchema, request);
+        const secretRequest = create(SecretRequestSchema, {
+            id: request.id,
+            namespace: request.namespace || DEFAULT_SECRET_NAMESPACE,
+        });
         // Allocate callback ID and send request
         const id = this.nextCallId;
         this.nextCallId++;
@@ -314,6 +318,7 @@ export class RuntimeImpl extends BaseRuntimeImpl {
      */
     report(input) {
         const consensus = new ConsensusCapability();
+        // Cast to native overload signature - the impl dispatches on $typeName.
         const call = consensus.report(this, input);
         return {
             result: () => call.result(),

package/dist/sdk/index.d.ts

@@ -6,6 +6,7 @@ export type * from './runtime';
 export * from './runtime';
 export * from './types/bufbuild-types';
 export * from './utils';
+export * from './utils/capabilities/confidentialhttp/confidential-http-helpers';
 export * from './utils/capabilities/http/http-helpers';
 export * from './wasm';
 export * from './workflow';

package/dist/sdk/index.js

@@ -6,6 +6,7 @@ export * from './runtime';
 export * from './types/bufbuild-types';
 export * from './utils';
 // Export HTTP response helpers
+export * from './utils/capabilities/confidentialhttp/confidential-http-helpers';
 export * from './utils/capabilities/http/http-helpers';
 export * from './wasm';
 export * from './workflow';

package/dist/sdk/test/generated/capabilities/blockchain/solana/v1alpha/solana_mock_gen.d.ts

@@ -0,0 +1,17 @@
+import { type WriteReportReply, type WriteReportReplyJson, type WriteReportRequest } from '../../../../../../../generated/capabilities/blockchain/solana/v1alpha/client_pb';
+/**
+ * Mock for ClientCapability. Use testInstance() to obtain an instance; do not construct directly.
+ * Set per-method properties (e.g. performAction) to define return values. If a method is invoked without a handler set, an error is thrown.
+ */
+export declare class SolanaMock {
+    static readonly CAPABILITY_ID = "solana@1.0.0";
+    /** Set to define the return value for WriteReport. May return a plain object (WriteReportReplyJson) or the message type. */
+    writeReport?: (input: WriteReportRequest) => WriteReportReply | WriteReportReplyJson;
+    private constructor();
+    /**
+     * Returns the mock instance for this capability and the specified tags.
+     * Multiple calls with the same tag values return the same instance.
+     * Must be called within the test framework's test() method.
+     */
+    static testInstance(chainSelector: bigint): SolanaMock;
+}

package/dist/sdk/test/generated/capabilities/blockchain/solana/v1alpha/solana_mock_gen.js

@@ -0,0 +1,53 @@
+import { fromJson } from '@bufbuild/protobuf';
+import { anyPack, anyUnpack } from '@bufbuild/protobuf/wkt';
+import { WriteReportReplySchema, WriteReportRequestSchema, } from '../../../../../../../generated/capabilities/blockchain/solana/v1alpha/client_pb';
+import { __getTestMockInstance, __setTestMockInstance, registerTestCapability, } from '../../../../../../testutils/test-runtime';
+/**
+ * Mock for ClientCapability. Use testInstance() to obtain an instance; do not construct directly.
+ * Set per-method properties (e.g. performAction) to define return values. If a method is invoked without a handler set, an error is thrown.
+ */
+export class SolanaMock {
+    static CAPABILITY_ID = 'solana@1.0.0';
+    /** Set to define the return value for WriteReport. May return a plain object (WriteReportReplyJson) or the message type. */
+    writeReport;
+    constructor(chainSelector) {
+        const self = this;
+        const qualifiedId = `solana:ChainSelector:${chainSelector}@1.0.0`;
+        try {
+            registerTestCapability(qualifiedId, (req) => {
+                switch (req.method) {
+                    case 'WriteReport': {
+                        const input = anyUnpack(req.payload, WriteReportRequestSchema);
+                        const handler = self.writeReport;
+                        if (typeof handler !== 'function')
+                            throw new Error("WriteReport: no implementation provided; set the mock's writeReport property to define the return value.");
+                        const raw = handler(input);
+                        const output = raw && typeof raw.$typeName === 'string'
+                            ? raw
+                            : fromJson(WriteReportReplySchema, raw);
+                        return { response: { case: 'payload', value: anyPack(WriteReportReplySchema, output) } };
+                    }
+                    default:
+                        return { response: { case: 'error', value: `unknown method ${req.method}` } };
+                }
+            });
+        }
+        catch {
+            throw new Error("Capability mocks must be used within the CRE test framework's test() method.");
+        }
+    }
+    /**
+     * Returns the mock instance for this capability and the specified tags.
+     * Multiple calls with the same tag values return the same instance.
+     * Must be called within the test framework's test() method.
+     */
+    static testInstance(chainSelector) {
+        const qualifiedId = `solana:ChainSelector:${chainSelector}@1.0.0`;
+        let instance = __getTestMockInstance(qualifiedId);
+        if (!instance) {
+            instance = new SolanaMock(chainSelector);
+            __setTestMockInstance(qualifiedId, instance);
+        }
+        return instance;
+    }
+}

package/dist/sdk/test/generated/index.d.ts

@@ -1,5 +1,6 @@
 /** Auto-generated barrel of capability mocks. Do not edit. */
 export { EvmMock } from './capabilities/blockchain/evm/v1alpha/evm_mock_gen';
+export { SolanaMock } from './capabilities/blockchain/solana/v1alpha/solana_mock_gen';
 export { BasicTestActionTriggerMock } from './capabilities/internal/actionandtrigger/v1/basic_test_action_trigger_mock_gen';
 export { BasicTestActionMock } from './capabilities/internal/basicaction/v1/basic_test_action_mock_gen';
 export { ConsensusMock } from './capabilities/internal/consensus/v1alpha/consensus_mock_gen';

package/dist/sdk/test/generated/index.js

@@ -1,5 +1,6 @@
 /** Auto-generated barrel of capability mocks. Do not edit. */
 export { EvmMock } from './capabilities/blockchain/evm/v1alpha/evm_mock_gen';
+export { SolanaMock } from './capabilities/blockchain/solana/v1alpha/solana_mock_gen';
 export { BasicTestActionTriggerMock } from './capabilities/internal/actionandtrigger/v1/basic_test_action_trigger_mock_gen';
 export { BasicTestActionMock } from './capabilities/internal/basicaction/v1/basic_test_action_mock_gen';
 export { ConsensusMock } from './capabilities/internal/consensus/v1alpha/consensus_mock_gen';

package/dist/sdk/testutils/test-runtime.js

@@ -143,6 +143,9 @@ function createTestRuntimeHelpers(registry, secrets, testWriter, state, _maxResp
     function now() {
         return state.timeProvider ? state.timeProvider() : Date.now();
     }
+    function sleep(ms) {
+        return;
+    }
     return {
         call(request) {
             const handler = registry.get(request.id);
@@ -232,6 +235,7 @@ function createTestRuntimeHelpers(registry, secrets, testWriter, state, _maxResp
         },
         switchModes(_mode) { },
         now,
+        sleep,
         log(message) {
             testWriter.log(message);
         },
@@ -287,7 +291,11 @@ export function newTestRuntime(secrets, options = {}) {
     const state = {
         timeProvider: options.timeProvider,
     };
-    const maxResponseSize = BigInt(options.maxResponseSize ?? DEFAULT_MAX_RESPONSE_SIZE_BYTES);
+    const configuredMaxResponseSize = options.maxResponseSize ?? DEFAULT_MAX_RESPONSE_SIZE_BYTES;
+    if (!Number.isSafeInteger(configuredMaxResponseSize) || configuredMaxResponseSize < 0) {
+        throw new Error('newTestRuntime maxResponseSize must be a non-negative safe integer number');
+    }
+    const maxResponseSize = BigInt(configuredMaxResponseSize);
     const helpers = createTestRuntimeHelpers(registry, secretsMap, testWriter, state, maxResponseSize);
     return new TestRuntime(helpers, maxResponseSize, testWriter, state);
 }

package/dist/sdk/types/global.d.ts

@@ -82,6 +82,12 @@ declare global {
 	 */
 	function now(): number
 
+	/**
+	 * Sleeps for the specified duration.
+	 * @param ms - Duration in milliseconds
+	 */
+	function sleep(ms: number): void
+
 	/**
 	 * Console API available in the QuickJS runtime
 	 */

package/dist/sdk/utils/capabilities/blockchain/blockchain-helpers.js

@@ -2,6 +2,7 @@ import { create, toJson } from '@bufbuild/protobuf';
 import { BigIntSchema } from '../../../../generated/values/v1/values_pb';
 import { EVMClient } from '../../../cre';
 import { bigintToBytes, bytesToBigint, hexToBase64, hexToBytes } from '../../hex-utils';
+import { assertSafeIntegerNumber } from '../../safe-integer';
 /**
  * Converts a native JS bigint to a protobuf BigInt JSON representation.
  * Use this when passing bigint values to SDK methods.
@@ -16,8 +17,8 @@ import { bigintToBytes, bytesToBigint, hexToBase64, hexToBytes } from '../../hex
  * @returns The protobuf BigInt JSON representation.
  */
 export const bigintToProtoBigInt = (n) => {
-    if (typeof n === 'number' && (!Number.isFinite(n) || !Number.isInteger(n))) {
-        throw new Error(`bigintToProtoBigInt requires an integer number, received ${n}`);
+    if (typeof n === 'number') {
+        assertSafeIntegerNumber(n, 'bigintToProtoBigInt');
     }
     const val = BigInt(n);
     const abs = val < 0n ? -val : val;

package/dist/sdk/utils/capabilities/confidentialhttp/confidential-http-helpers.d.ts

@@ -0,0 +1,43 @@
+import type { DurationJson } from '@bufbuild/protobuf/wkt';
+import type { HTTPRequestJson as ConfidentialHTTPRequestJson, HeaderValuesJson } from '../../../../generated/capabilities/networking/confidentialhttp/v1alpha/client_pb';
+/**
+ * Build an HTTPRequest JSON shape for the confidential-http capability.
+ *
+ * The proto defines `oneof body { string body_string = 3; bytes body_bytes = 8 }`,
+ * so the JSON wire keys are `bodyString` / `bodyBytes` — never plain `body`.
+ * Three mutually-exclusive ways to set the body, in order of preference:
+ *
+ *   - `body`        ergonomic; coerces by runtime type:
+ *                     - `string`     -> bodyString (verbatim)
+ *                     - `Uint8Array` -> bodyBytes (base64)
+ *                     - object       -> JSON.stringify -> bodyString
+ *                                       (bigints as strings)
+ *   - `bodyString`  pass-through to the canonical proto field
+ *   - `bodyBytes`   `Uint8Array` is base64-encoded; a `string` is treated as
+ *                   already-encoded base64 and passed through verbatim
+ *
+ * Supplying more than one of these fields throws — the underlying proto is a
+ * oneof, so the call would otherwise be ambiguous.
+ *
+ * Headers can be passed in two ways:
+ *   - `headers`: flat record with single or repeated values, mapped onto the
+ *     `multiHeaders` shape under the hood.
+ *   - `multiHeaders`: native proto shape `{ [name]: { values: string[] } }` —
+ *     useful when forwarding headers already in canonical form.
+ *
+ * If both are supplied, `multiHeaders` is applied first and `headers` entries
+ * merge on top per-name (replacing the values list for that name).
+ */
+export interface HttpRequestOptions {
+    url: string;
+    method?: string;
+    body?: string | Uint8Array | object;
+    bodyString?: string;
+    bodyBytes?: Uint8Array | string;
+    headers?: Record<string, string | string[]>;
+    multiHeaders?: Record<string, HeaderValuesJson>;
+    templateValues?: Record<string, string>;
+    timeout?: DurationJson;
+    encryptOutput?: boolean;
+}
+export declare function httpRequest(opts: HttpRequestOptions): ConfidentialHTTPRequestJson;

package/dist/sdk/utils/capabilities/confidentialhttp/confidential-http-helpers.js

@@ -0,0 +1,58 @@
+export function httpRequest(opts) {
+    const out = {
+        url: opts.url,
+        method: opts.method ?? 'GET',
+    };
+    const bodyFieldsSet = (opts.body !== undefined ? 1 : 0) +
+        (opts.bodyString !== undefined ? 1 : 0) +
+        (opts.bodyBytes !== undefined ? 1 : 0);
+    if (bodyFieldsSet > 1) {
+        throw new Error('httpRequest: specify the request body using only one of: body, bodyString or bodyBytes');
+    }
+    if (opts.bodyString !== undefined) {
+        out.bodyString = opts.bodyString;
+    }
+    else if (opts.bodyBytes !== undefined) {
+        out.bodyBytes =
+            typeof opts.bodyBytes === 'string'
+                ? opts.bodyBytes
+                : Buffer.from(opts.bodyBytes).toString('base64');
+    }
+    else if (typeof opts.body === 'string') {
+        out.bodyString = opts.body;
+    }
+    else if (opts.body instanceof Uint8Array) {
+        out.bodyBytes = Buffer.from(opts.body).toString('base64');
+    }
+    else if (opts.body !== undefined) {
+        // Compact JSON encoding; bigints serialise as strings.
+        try {
+            out.bodyString = JSON.stringify(opts.body, (_k, v) => typeof v === 'bigint' ? v.toString() : v);
+        }
+        catch (cause) {
+            throw new Error('httpRequest: failed to serialize body as JSON', {
+                cause,
+            });
+        }
+    }
+    if (opts.multiHeaders || opts.headers) {
+        const merged = {};
+        for (const [name, value] of Object.entries(opts.multiHeaders ?? {})) {
+            merged[name] = { values: value.values ?? [] };
+        }
+        for (const [name, value] of Object.entries(opts.headers ?? {})) {
+            merged[name] = { values: Array.isArray(value) ? value : [value] };
+        }
+        out.multiHeaders = merged;
+    }
+    if (opts.templateValues) {
+        out.templatePublicValues = { ...opts.templateValues };
+    }
+    if (opts.timeout) {
+        out.timeout = opts.timeout;
+    }
+    if (opts.encryptOutput) {
+        out.encryptOutput = true;
+    }
+    return out;
+}

package/dist/sdk/utils/capabilities/http/http-helpers.d.ts

@@ -3,6 +3,7 @@ import type { Request, RequestJson, Response } from '../../../../generated/capab
 import type { ReportResponse } from '../../../../generated/sdk/v1alpha/sdk_pb';
 import type { NodeRuntime } from '../../..';
 import type { Report } from '../../../report';
+type HeaderCapableResponse = Response | ConfidentialHTTPResponse;
 /**
  * HTTP Response Helper Functions
  *
@@ -81,20 +82,32 @@ export declare function json(responseFn: () => {
     result: () => unknown;
 };
 /**
- * Gets a specific header value
+ * Returns all values for a header (case-insensitive).
+ * Reads `multiHeaders` first; falls back to the deprecated single-value `headers` map.
  * @param response - The Response object
  * @param name - The header name (case-insensitive)
- * @returns The header value or undefined if not found
+ * @returns Array of header values; empty if not present
  */
-export declare function getHeader(response: Response, name: string): string | undefined;
+export declare function getHeaders(response: HeaderCapableResponse, name: string): string[];
 /**
- * Gets a specific header value
+ * Returns all values for a header (case-insensitive).
+ * Reads `multiHeaders` first; falls back to the deprecated single-value `headers` map.
  * @param responseFn - Function that returns an object with result function that returns Response
  * @param name - The header name (case-insensitive)
- * @returns Object with result function that returns the header value or undefined if not found
+ * @returns Object with result function that returns array of header values; empty if not present
  */
+export declare function getHeaders(responseFn: () => {
+    result: HeaderCapableResponse;
+}, name: string): {
+    result: () => string[];
+};
+/**
+ * Returns a header value (case-insensitive). Multiple values are joined with `, `;
+ * use `getHeaders` when boundaries between values must be preserved.
+ */
+export declare function getHeader(response: HeaderCapableResponse, name: string): string | undefined;
 export declare function getHeader(responseFn: () => {
-    result: Response;
+    result: HeaderCapableResponse;
 }, name: string): {
     result: () => string | undefined;
 };
@@ -147,3 +160,4 @@ declare module '../../../../generated-sdk/capabilities/networking/http/v1alpha/c
         };
     }
 }
+export {};

package/dist/sdk/utils/capabilities/http/http-helpers.js

@@ -1,4 +1,10 @@
 import { decodeJson } from '../../decode-json';
+function findCaseInsensitive(map, name) {
+    if (!map)
+        return undefined;
+    const lowerName = name.toLowerCase();
+    return Object.entries(map).find(([key]) => key.toLowerCase() === lowerName)?.[1];
+}
 export function text(responseOrFn) {
     if (typeof responseOrFn === 'function') {
         return {
@@ -18,16 +24,27 @@ export function json(responseOrFn) {
     }
     return decodeJson(responseOrFn.body);
 }
+export function getHeaders(responseOrFn, name) {
+    if (typeof responseOrFn === 'function') {
+        return {
+            result: () => getHeaders(responseOrFn().result, name),
+        };
+    }
+    const multiHeader = findCaseInsensitive(responseOrFn.multiHeaders, name);
+    if (multiHeader) {
+        return [...multiHeader.values];
+    }
+    const singleHeader = findCaseInsensitive('headers' in responseOrFn ? responseOrFn.headers : undefined, name);
+    return singleHeader === undefined ? [] : [singleHeader];
+}
 export function getHeader(responseOrFn, name) {
     if (typeof responseOrFn === 'function') {
         return {
             result: () => getHeader(responseOrFn().result, name),
         };
     }
-    else {
-        const lowerName = name.toLowerCase();
-        return Object.entries(responseOrFn.headers).find(([key]) => key.toLowerCase() === lowerName)?.[1];
-    }
+    const values = getHeaders(responseOrFn, name);
+    return values.length === 0 ? undefined : values.join(', ');
 }
 export function ok(responseOrFn) {
     if (typeof responseOrFn === 'function') {
@@ -56,6 +73,7 @@ export function ok(responseOrFn) {
 function sendReport(runtime, report, fn) {
     const rawReport = report.x_generatedCodeOnly_unwrap();
     const request = fn(rawReport);
+    // Cast to native overload signature - the impl dispatches on $typeName.
     return this.sendRequest(runtime, request);
 }
 /**
@@ -71,6 +89,7 @@ function sendReport(runtime, report, fn) {
 function sendRequesterSendReport(report, fn) {
     const rawReport = report.x_generatedCodeOnly_unwrap();
     const request = fn(rawReport);
+    // Cast to native overload signature - the impl dispatches on $typeName.
     return this.sendRequest(request);
 }
 // ============================================================================

package/dist/sdk/utils/safe-integer.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Validates that a JS `number` represents a safe integer.
+ *
+ * The two failure modes are kept distinct so callers can tell apart
+ * "not an integer at all" (e.g. `1.5`, `NaN`) from "outside Number's safe
+ * integer range" (e.g. `2 ** 54`), which require different remediation.
+ */
+export declare function assertSafeIntegerNumber(value: number, label: string): void;

package/dist/sdk/utils/safe-integer.js

@@ -0,0 +1,15 @@
+/**
+ * Validates that a JS `number` represents a safe integer.
+ *
+ * The two failure modes are kept distinct so callers can tell apart
+ * "not an integer at all" (e.g. `1.5`, `NaN`) from "outside Number's safe
+ * integer range" (e.g. `2 ** 54`), which require different remediation.
+ */
+export function assertSafeIntegerNumber(value, label) {
+    if (!Number.isFinite(value) || !Number.isInteger(value)) {
+        throw new Error(`${label} requires an integer number, received ${value}`);
+    }
+    if (!Number.isSafeInteger(value)) {
+        throw new Error(`${label} requires a safe integer number, received ${value}. Pass a bigint or string for larger values`);
+    }
+}