@ethernity-cloud/sdk-js 1.4.0 → 1.5.0

package/nodenithy/build/securelock/src/task_status.js

@@ -11,6 +11,10 @@ class TaskStatus {
     // Extended diagnostic (matches the trustedzone's extended enum): the
     // serverless backend failed to load, so none of its functions exist.
     static IMPORT_ERROR = 28;
+    // A required enclave config value is present but EMPTY (e.g. an ESR
+    // address that was never baked into the sealed image). Reported eagerly
+    // with the variable named, instead of a confusing downstream crash.
+    static CONFIG_ERROR = 32;
 }
 
 module.exports = {

package/nodenithy/build.mjs

@@ -156,9 +156,27 @@ if (!fs.existsSync('src/sgx_report.node')) {
   console.error('       securelock/src/ (see src/README-keygen.md) before building.');
   process.exit(1);
 }
+// ESR fail-fast gate (RFC §5.4), mirroring the Python SDK's validate_esr_config:
+// never build an ESR-enabled enclave with an unresolved registry address. The
+// enclave is SEALED -- a missing value bakes in as empty, and every task then
+// fails at runtime after gas is already spent. ESR is opt-in: absent/false
+// ESR_ENABLED means the build behaves exactly as it did before ESR existed.
+const ESR_ENABLED = /^(1|true|yes)$/i.test(String(process.env.ESR_ENABLED || '').trim());
+const ESR_CONTRACT_ADDRESS = String(process.env.ESR_CONTRACT_ADDRESS || '').trim();
+if (ESR_ENABLED && !/^0x[0-9a-fA-F]{40}$/.test(ESR_CONTRACT_ADDRESS)) {
+  console.error('ERROR: ESR is enabled but ESR_CONTRACT_ADDRESS is not a valid address'
+    + ` (got ${JSON.stringify(ESR_CONTRACT_ADDRESS)}).`);
+  console.error('       The enclave is sealed: a missing value bakes in as EMPTY and every');
+  console.error('       task fails at runtime after gas is spent. Set it with:');
+  console.error('         ecld-init (ESR step) or ESR_CONTRACT_ADDRESS in .env');
+  process.exit(1);
+}
+// Rendered only when enabled, so non-ESR images keep byte-identical layers.
+const esrEnvBlock = ESR_ENABLED ? `ENV ESR_CONTRACT_ADDRESS=${ESR_CONTRACT_ADDRESS}` : '';
+
 // runCommand(`cat Dockerfile.tmpl | sed s/"__ENCLAVE_NAME_SECURELOCK__"/"${ENCLAVE_NAME_SECURELOCK}"/g > Dockerfile`);
 const dockerfileSecureTemplate = fs.readFileSync('Dockerfile.tmpl', 'utf8');
-let dockerfileSecureContent = dockerfileSecureTemplate.replace(/__ENCLAVE_NAME_SECURELOCK__/g, ENCLAVE_NAME_SECURELOCK).replace(/__BUCKET_NAME__/g, templateName + "-v3").replace(/__SMART_CONTRACT_ADDRESS__/g, ECRunner[templateName][0]).replace(/__IMAGE_REGISTRY_ADDRESS__/g, ECRunner[templateName][1]).replace(/__RPC_URL__/g, ECRunner[templateName][2]).replace(/__CHAIN_ID__/g, ECRunner[templateName][3]).replace(/__TRUSTED_ZONE_IMAGE__/g, templateName);
+let dockerfileSecureContent = dockerfileSecureTemplate.replace(/__ENCLAVE_NAME_SECURELOCK__/g, ENCLAVE_NAME_SECURELOCK).replace(/__BUCKET_NAME__/g, templateName + "-v3").replace(/__SMART_CONTRACT_ADDRESS__/g, ECRunner[templateName][0]).replace(/__IMAGE_REGISTRY_ADDRESS__/g, ECRunner[templateName][1]).replace(/__RPC_URL__/g, ECRunner[templateName][2]).replace(/__CHAIN_ID__/g, ECRunner[templateName][3]).replace(/__TRUSTED_ZONE_IMAGE__/g, templateName).replace(/^__ESR_ENV__\n/m, esrEnvBlock ? `${esrEnvBlock}\n` : '');
 
 // Amount of enclave heap to allocate (SCONE_HEAP). Kept in sync with the
 // run/docker-compose securelock service; overridable via ECLD_MEMORY_TO_ALLOCATE.

package/nodenithy/run/public_key_service.js

@@ -78,6 +78,17 @@ console.log("Docker Composer Hash:", dockerComposerHash);
                 console.log("Public Key:", checkResponse.publicKey);
                 // Save public key to file
                 fs.writeFileSync('PUBLIC_KEY.txt', checkResponse.publicKey);
+                // ESR (RFC §5.2): the enclave also prints ESR_WALLET_ADDRESS on the
+                // cert channel. The service currently returns only "publicKey"; when
+                // it starts relaying the enclave's output (or adds an
+                // "esrWalletAddress" field) it is picked up here and written to a
+                // sibling file the caller reads -- no other changes needed. Until
+                // then, ESR projects extract locally on an SGX host once to learn
+                // the address (publish then persists it).
+                if (checkResponse.esrWalletAddress) {
+                    console.log("ESR Wallet Address:", checkResponse.esrWalletAddress);
+                    fs.writeFileSync('ESR_WALLET_ADDRESS.txt', checkResponse.esrWalletAddress);
+                }
                 break;
             }
         } else {

package/nodenithy/run.js

@@ -497,6 +497,28 @@ const main = async () => {
                 console.error("Error: Could not fetch PUBLIC_KEY_SECURELOCK");
                 process.exit(1);
             }
+            // ESR (RFC §5.2): if the extraction relayed the enclave's ESR wallet
+            // address (public_key_service writes ESR_WALLET_ADDRESS.txt when the
+            // service provides it), persist it to .env so a dApp can read/fund the
+            // enclave wallet. Absent file => not an ESR project, or the (mainnet)
+            // address must be learned from a local SGX extraction — either way,
+            // silently skip. Parity with the Python SDK's esr.wallet_address.
+            try {
+                if (fs.existsSync('ESR_WALLET_ADDRESS.txt')) {
+                    const esrAddr = fs.readFileSync('ESR_WALLET_ADDRESS.txt', 'utf8').trim();
+                    if (/^0x[0-9a-fA-F]{40}$/.test(esrAddr)) {
+                        writeEnv('ESR_WALLET_ADDRESS', esrAddr);
+                        console.log(`ESR_WALLET_ADDRESS: ${esrAddr}`);
+                        // Manual funding by the data owner is the default path;
+                        // publishing never transfers value on its own. Say so, or
+                        // the first task needing gas fails with no clue why.
+                        console.log('   This wallet starts EMPTY. Fund it from your own wallet with');
+                        console.log('   whatever your payload needs; publishing never transfers value.');
+                    }
+                }
+            } catch (e) {
+                console.warn(`Could not persist ESR_WALLET_ADDRESS: ${e && e.message ? e.message : e}`);
+            }
         };
     }
 

package/package.json

@@ -1,50 +1,50 @@
-{
-  "name": "@ethernity-cloud/sdk-js",
-  "version": "1.4.0",
-  "description": "A package to run ethernity cloud build scripts",
-  "scripts": {
-    "ecld-build": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/build.js",
-    "ecld-publish": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/publish.js",
-    "ecld-init": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/init.js",
-    "ecld-run": "cross-env ecld-run",
-    "postinstall": "node postinstall.js",
-    "ecld-test": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/test.js"
-  },
-  "bin": {
-    "ecld-build": "./build.js",
-    "ecld-publish": "./publish.js",
-    "ecld-init": "./init.js",
-    "postinstall": "./postinstall.js",
-    "ecld-test": "./test.js"
-  },
-  "files": [
-    "nodenithy/*",
-    "pynithy/*",
-    "build.js",
-    "init.js",
-    "publish.js",
-    "postinstall.js"
-  ],
-  "dependencies": {
-    "@ethernity-cloud/runner": "^0.0.26",
-    "axios": "^1.7.2",
-    "commander": "^12.1.0",
-    "dotenv": "^16.4.5",
-    "eth-lib": "^0.1.29",
-    "ethers": "^5.5.4",
-    "kubo-rpc-client": "^4.1.1",
-    "web3": "^4.9.0",
-    "cross-env": "^7.0.3",
-    "shelljs": "^0.8.5",
-    "shx": "^0.3.4",
-    "node-forge": "^1.3.1",
-    "cli-progress": "^3.12.0",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "react-scripts": "^5.0.1",
-    "web-vitals": "^2.1.4",
-    "adm-zip": "^0.5.14"
-  },
-  "author": "Alexandru Luca",
-  "license": "AGPL-3.0"
+{
+  "name": "@ethernity-cloud/sdk-js",
+  "version": "1.5.0",
+  "description": "A package to run ethernity cloud build scripts",
+  "scripts": {
+    "ecld-build": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/build.js",
+    "ecld-publish": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/publish.js",
+    "ecld-init": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/init.js",
+    "ecld-run": "cross-env ecld-run",
+    "postinstall": "node postinstall.js",
+    "ecld-test": "cross-env node ./node_modules/@ethernity-cloud/sdk-js/test.js"
+  },
+  "bin": {
+    "ecld-build": "./build.js",
+    "ecld-publish": "./publish.js",
+    "ecld-init": "./init.js",
+    "postinstall": "./postinstall.js",
+    "ecld-test": "./test.js"
+  },
+  "files": [
+    "nodenithy/*",
+    "pynithy/*",
+    "build.js",
+    "init.js",
+    "publish.js",
+    "postinstall.js"
+  ],
+  "dependencies": {
+    "@ethernity-cloud/runner": "^0.0.26",
+    "axios": "^1.7.2",
+    "commander": "^12.1.0",
+    "dotenv": "^16.4.5",
+    "eth-lib": "^0.1.29",
+    "ethers": "^5.5.4",
+    "kubo-rpc-client": "^4.1.1",
+    "web3": "^4.9.0",
+    "cross-env": "^7.0.3",
+    "shelljs": "^0.8.5",
+    "shx": "^0.3.4",
+    "node-forge": "^1.3.1",
+    "cli-progress": "^3.12.0",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "react-scripts": "^5.0.1",
+    "web-vitals": "^2.1.4",
+    "adm-zip": "^0.5.14"
+  },
+  "author": "Alexandru Luca",
+  "license": "AGPL-3.0"
 }