Add TEEs to the CRE runtime - #298
Merged
Merged
Conversation
nolag
force-pushed
the
tee-prehooks-from-main
branch
2 times, most recently
from
August 5, 2026 15:14
e7cbcf4 to
945943d
Compare
russell-stern
previously approved these changes
Aug 5, 2026
Pin submodules/chainlink-protos to c1accce ("Merge TEE code to main"),
bump COMMON_VERSION to cre-std-tests@0.10.0, and regenerate protobufs
and capability SDKs against the new protos.
Adjustments required by the new protos:
- Rename AdditionalEnironments -> AdditionalEnvironments and use the
generated enum member AdditionalEnvironments.TEE.
- Drop the Aptos client/restrictor entries from the SDK index; aptos
protos are no longer published, so no aptos SDK is generated.
- Implement getSecrets on TeeRuntimeImpl, which the TeeRuntime
interface now requires.
A TEE-enabled capability previously emitted three public declarations: TeeRuntime-only, DON/Node-runtime-only, and the union of the two. The union subsumes the other two, so drop them. The union is the one that has to stay: it accepts each runtime individually and also accepts a union-typed variable, which separate overloads reject because overload resolution does not distribute over a union argument. Type safety at the call boundary is unchanged - the declaration keeps <TInput> and CapabilityInput, so a DON Runtime is still rejected and excess JSON keys still fail. Relative to main this only widens a parameter, which is source-compatible for callers. Also refresh api-baseline.d.ts, which the breaking-changes workflow compares against. The delta is additive or defaulted generics only: TeeRuntime, Hooks, handlerInTee, and the TRuntime parameter on HandlerFn/HandlerEntry.
nolag
force-pushed
the
tee-prehooks-from-main
branch
from
August 5, 2026 17:00
02e6aea to
5c20409
Compare
russell-stern
previously approved these changes
Aug 5, 2026
…pescript into tee-prehooks-from-main
russell-stern
approved these changes
Aug 5, 2026
russell-stern
marked this pull request as ready for review
August 5, 2026 20:03
product-security-plaid-production
Bot
requested review from
TJBigelow and
bolekk
August 5, 2026 20:04
prashantkumar1982
approved these changes
Aug 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.