@ethernity-cloud/sdk-js 1.7.10 → 1.7.11

package/README.md

@@ -59,20 +59,26 @@ The sdk has been tested on the following operating systems:
       validator set (SessionRegistry `0xfA70B5Df...`, ValidatorRegistry
       `0xbE3759f3...`).
     - LiteForge Unsafe - the unsafe network beside LiteForge (see below).
+- Ethereum:
+    - Sepolia - CAS-attested the same way, by Sepolia's own ethernity-cas
+      validator set (SessionRegistry `0xDbB249E1...`, ValidatorRegistry
+      `0x8ad24b3F...`), on the PoX family of 2026-10-14.
+    - Sepolia Unsafe - the unsafe network beside Sepolia (see below).
 - Polyhon:
     - Amoy Testnet - to be provided during the following updates
     - Mainnet - to be provided during the following updates
 
-The remaining testnets (Amoy, IoTeX, Sepolia) have no ethernity-cas
+The remaining testnets (Amoy, IoTeX) have no ethernity-cas
 deployment: their enclaves are debug-signed and sign their own certificates
 from their measurement, and `ecld-publish` registers no CAS session for them.
 
 ### The testnets and their unsafe networks
-`Bloxberg Testnet` and `LitVM LiteForge` run your securelock in an enclave
+`Bloxberg Testnet`, `LitVM LiteForge` and `Ethereum Sepolia` run your securelock in an enclave
 attested through that chain's ethernity-cas validator set, on nodes whose
 platform the CAS can attest (DCAP). Each has an unsafe network beside it,
-`Bloxberg Testnet Unsafe` (`Bloxberg_Testnet_Unsafe`) and `LitVM LiteForge
-Unsafe` (`LitVM_LiteForge_Unsafe`): the same chain and contracts, for hardware
+`Bloxberg Testnet Unsafe` (`Bloxberg_Testnet_Unsafe`), `LitVM LiteForge
+Unsafe` (`LitVM_LiteForge_Unsafe`) and `Ethereum Sepolia Unsafe`
+(`Ethereum_Sepolia_Unsafe`): the same chain and contracts, for hardware
 SGX platforms the CAS cannot attest (EPID-only, SGX1). No CAS and no LAS: the
 enclaves are debug-signed and sign their own certificates from their
 measurement, so a result proves which image ran but not that an enclave ran
@@ -82,7 +88,8 @@ always says so in the network it names. A dApp publishes one securelock per
 network from two project directories with the same project name: the unsafe
 one is registered as `<project>-unsafe` and runs on the
 `etny-<nodenithy|pynithy>-testnet-unsafe`
-(`ecld-<nodenithy|pynithy>-litvm-testnet-unsafe`) trustedzone. Both dApp types
+(`ecld-<nodenithy|pynithy>-litvm-testnet-unsafe`,
+`ecld-<nodenithy|pynithy>-ethereum-sepolia-unsafe`) trustedzone. Both dApp types
 build for both networks. Mainnet has no unsafe network.
 
 ### Pynithy dApps
@@ -176,8 +183,8 @@ sets the enclave heap (default `1024M`).
   that IPFS RPC API instead, with `ECLD_IPFS_TOKEN` (or `IPFS_TOKEN`) as its
   Authorization header, and a URL naming the public API is refused without one.
   The intake serves the networks the bootnode's agent runs, today the bloxberg
-  testnet and LitVM LiteForge, each with its unsafe twin: a dApp on any other
-  network (Bloxberg mainnet, Polygon, IoTeX, Sepolia) needs an IPFS API of its
+  testnet, LitVM LiteForge and Ethereum Sepolia, each with its unsafe twin: a dApp on any other
+  network (Bloxberg mainnet, Polygon, IoTeX) needs an IPFS API of its
   own (`IPFS_ENDPOINT` for the Hello World template, `--ipfs <url>` for `ecld-run`).
   Exit code 0 on a `SUCCESS` task result, 1 otherwise. `--unsafe` runs the
   network's unsafe variant; on an unsafe network the securelock and

package/cas/config.js

@@ -18,6 +18,8 @@ const VALIDATOR_REGISTRY = {
   'etny-nodenithy-testnet': '0x0014aB102FEa6b02e3D793FF4b9a0Af309fB4E14',
   'ecld-pynithy-litvm-testnet': '0xbE3759f327e8643fC5A1717fb2072A0dAcBAD29E',
   'ecld-nodenithy-litvm-testnet': '0xbE3759f327e8643fC5A1717fb2072A0dAcBAD29E',
+  'ecld-pynithy-ethereum-sepolia': '0x8ad24b3F406A41a0F8D3440021792EB203957F43',
+  'ecld-nodenithy-ethereum-sepolia': '0x8ad24b3F406A41a0F8D3440021792EB203957F43',
 };
 
 const SESSION_REGISTRY = {
@@ -25,14 +27,20 @@ const SESSION_REGISTRY = {
   'etny-nodenithy-testnet': '0x444429681fCb26470Cb12B5436E48402cF7478A3',
   'ecld-pynithy-litvm-testnet': '0xfA70B5Df7C773A21164cAc5413704117e4dEaB76',
   'ecld-nodenithy-litvm-testnet': '0xfA70B5Df7C773A21164cAc5413704117e4dEaB76',
+  // Bound to Sepolia's ECImageRegistryV3 of 2026-10-14.
+  'ecld-pynithy-ethereum-sepolia': '0xDbB249E108d19fC1691483Bf897bA8BA0dA99c06',
+  'ecld-nodenithy-ethereum-sepolia': '0xDbB249E108d19fC1691483Bf897bA8BA0dA99c06',
 };
 
-// The chain the registries above live on.
+// The chain the registries above live on. Sepolia's RPC is Tenderly's gateway:
+// publicnode caps eth_getLogs at 50,000 blocks and prunes older ranges.
 const CHAIN = {
   'etny-pynithy-testnet': { rpcUrl: 'https://bloxberg.ethernity.cloud', chainId: 8995 },
   'etny-nodenithy-testnet': { rpcUrl: 'https://bloxberg.ethernity.cloud', chainId: 8995 },
   'ecld-pynithy-litvm-testnet': { rpcUrl: 'https://liteforge.rpc.caldera.xyz/infra-partner-http', chainId: 4441 },
   'ecld-nodenithy-litvm-testnet': { rpcUrl: 'https://liteforge.rpc.caldera.xyz/infra-partner-http', chainId: 4441 },
+  'ecld-pynithy-ethereum-sepolia': { rpcUrl: 'https://sepolia.gateway.tenderly.co', chainId: 11155111 },
+  'ecld-nodenithy-ethereum-sepolia': { rpcUrl: 'https://sepolia.gateway.tenderly.co', chainId: 11155111 },
 };
 
 // Whether the securelock takes its certificate from a CAS session: mainnet
@@ -55,6 +63,7 @@ const isMainnetNetwork = (network) =>
 const UNSAFE_NETWORKS = {
   Bloxberg_Testnet_Unsafe: 'Bloxberg_Testnet',
   LitVM_LiteForge_Unsafe: 'LitVM_LiteForge',
+  Ethereum_Sepolia_Unsafe: 'Ethereum_Sepolia',
 };
 
 // Case-insensitive: ecld-init writes Bloxberg_Testnet_Unsafe, a --network

package/info.js

@@ -55,6 +55,14 @@ const NETWORKS = {
     imageRegistry: '0xAf8Ce29103E1f59feDD49688ff070Ffc2346AF1D',
     esr: '0x709052Fe77Af543d3d9FE2Ac06a15c635c8D4Be5',
   },
+  // The family of 2026-10-14, owned by 0xA247...; the previous PoX 0x29D3eC87...
+  // and V1 registry 0x55e0ad45... are abandoned.
+  ETHEREUM_SEPOLIA: {
+    type: 'testnet', chainId: 11155111, rpc: 'https://sepolia.gateway.tenderly.co',
+    protocol: '0x798975F9FdD90A21Cb11Ac26F1377e1542c58f9c',
+    imageRegistry: '0xa7E43a269E3307cf9d246b07df2B89CAA1b4C42F',
+    esr: '0x9927809B61122B2af3f3b3A3303875e0687b8eE3',
+  },
 };
 // The -unsafe networks: the chain and contracts of the network each is the
 // unsafe variant of, without a CAS.

package/init.js

@@ -214,6 +214,7 @@ const main = async () => {
     "LitVM LiteForge",
     "Bloxberg Testnet Unsafe",
     "LitVM LiteForge Unsafe",
+    "Ethereum Sepolia Unsafe",
   ];
   const blockchainNetwork = await promptOptions(
     "On which Blockchain network do you want to have the app set up, as a starting point? (default is Bloxberg Testnet): ",
@@ -390,6 +391,7 @@ const main = async () => {
     "LitVM LiteForge": `ecld-${svc}-litvm-testnet`,
     "Bloxberg Testnet Unsafe": `etny-${svc}-testnet-unsafe`,
     "LitVM LiteForge Unsafe": `ecld-${svc}-litvm-testnet-unsafe`,
+    "Ethereum Sepolia Unsafe": `ecld-${svc}-ethereum-sepolia-unsafe`,
   };
   const trustedZoneImage = imageByNetwork[blockchainNetwork] || `etny-${svc}-testnet`;
   writeEnv("TRUSTED_ZONE_IMAGE", trustedZoneImage);

package/network.js

@@ -31,6 +31,7 @@ function networkFor({ ECAddress, ECNetworkByChainId }, raw) {
     IOTEX_TESTNET: { address: ECAddress.IOTEX.TESTNET_ADDRESS, chainId: ECNetworkByChainId.IOTEX.TESTNET },
     ETHEREUM_SEPOLIA: sepolia,
     SEPOLIA: sepolia,
+    ETHEREUM_SEPOLIA_UNSAFE: { ...sepolia, unsafe: ['SEPOLIA', 'TESTNET_UNSAFE'] },
     LITVM_LITEFORGE: litvm,
     LITVM: litvm,
     LITVM_LITEFORGE_UNSAFE: { ...litvm, unsafe: ['LITVM', 'TESTNET_UNSAFE'] },

package/nodenithy/run/image_registry.js

@@ -41,6 +41,17 @@ function setVars(network = "") {
         NETWORK_RPC = "https://liteforge.rpc.caldera.xyz/infra-partner-http";
         IMAGE_REGISTRY_ADDRESS = "0xAf8Ce29103E1f59feDD49688ff070Ffc2346AF1D";
         CHAIN_ID = 4441;
+    } else if (BLOCKCHAIN_NETWORK.includes("Sepolia")) {
+        // Sepolia's ECImageRegistryV3 of 2026-10-14; Tenderly's gateway serves
+        // the log ranges publicnode prunes.
+        NETWORK_RPC = "https://sepolia.gateway.tenderly.co";
+        IMAGE_REGISTRY_ADDRESS = "0xa7E43a269E3307cf9d246b07df2B89CAA1b4C42F";
+        CHAIN_ID = 11155111;
+        // Sepolia's EVM charges storage-heavy calls several times the local
+        // EVM's gas (a contract creation about seven times); the base fee is
+        // under 0.0001 gwei, so 0.1 gwei is paid in full as the tip.
+        GAS = 20000000;
+        GAS_PRICE = 100000000;
     }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ethernity-cloud/sdk-js",
-  "version": "1.7.10",
+  "version": "1.7.11",
   "description": "A package to run ethernity cloud build scripts",
   "scripts": {
     "test": "node --test \"test/**/*.test.js\"",
@@ -39,7 +39,7 @@
     "!**/*.pyc"
   ],
   "dependencies": {
-    "@ethernity-cloud/runner": "^0.6.5",
+    "@ethernity-cloud/runner": "^0.6.6",
     "acorn": "^8.11.0",
     "adm-zip": "^0.5.14",
     "axios": "^1.7.2",

package/pynithy/run/image_registry.js

@@ -41,6 +41,17 @@ function setVars(network = "") {
         NETWORK_RPC = "https://liteforge.rpc.caldera.xyz/infra-partner-http";
         IMAGE_REGISTRY_ADDRESS = "0xAf8Ce29103E1f59feDD49688ff070Ffc2346AF1D";
         CHAIN_ID = 4441;
+    } else if (BLOCKCHAIN_NETWORK.includes("Sepolia")) {
+        // Sepolia's ECImageRegistryV3 of 2026-10-14; Tenderly's gateway serves
+        // the log ranges publicnode prunes.
+        NETWORK_RPC = "https://sepolia.gateway.tenderly.co";
+        IMAGE_REGISTRY_ADDRESS = "0xa7E43a269E3307cf9d246b07df2B89CAA1b4C42F";
+        CHAIN_ID = 11155111;
+        // Sepolia's EVM charges storage-heavy calls several times the local
+        // EVM's gas (a contract creation about seven times); the base fee is
+        // under 0.0001 gwei, so 0.1 gwei is paid in full as the tip.
+        GAS = 20000000;
+        GAS_PRICE = 100000000;
     }
 }
 

package/run.js

@@ -90,7 +90,7 @@ usage: ecld-run 'hello("World")' | ecld-run --file payload.js | ecld-run --input
 payload:   a code string, or --file <path>; input via --input <file> / --input-text <str>
 network:   --network BLOXBERG_TESTNET (default: BLOCKCHAIN_NETWORK from .env)
            --unsafe: the network's -unsafe variant, which runs without a CAS
-           (BLOXBERG_TESTNET_UNSAFE, LITVM_LITEFORGE_UNSAFE)
+           (BLOXBERG_TESTNET_UNSAFE, LITVM_LITEFORGE_UNSAFE, ETHEREUM_SEPOLIA_UNSAFE)
 enclaves:  --securelock <name> (default PROJECT_NAME), --trustedzone <name> (default TRUSTED_ZONE_IMAGE);
            on an -unsafe network the default is each one's -unsafe variant
 key:       PRIVATE_KEY (a funded 0x key) from .env / env, or ECLD_PRIVATE_KEY