v0

type ActionCheckpoint struct {

	// checkpoint_id is the durable checkpoint identity.
	CheckpointId string `protobuf:"bytes,1,opt,name=checkpoint_id,json=checkpointId,proto3" json:"checkpoint_id,omitempty"`
	// operation is the host-owned operation identity.
	Operation *OperationIdentity `protobuf:"bytes,2,opt,name=operation,proto3" json:"operation,omitempty"`
	// delivery is the pre-send delivery state.
	Delivery DeliveryState `protobuf:"varint,3,opt,name=delivery,proto3,enum=codefly.services.provider.v0.DeliveryState" json:"delivery,omitempty"`
	// idempotency_key is stable across retries.
	IdempotencyKey string `protobuf:"bytes,4,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
	// prospective_remote_id survives uncertain create outcomes.
	ProspectiveRemoteId string `protobuf:"bytes,5,opt,name=prospective_remote_id,json=prospectiveRemoteId,proto3" json:"prospective_remote_id,omitempty"`
	// recorded_at is the durable checkpoint time.
	RecordedAt *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=recorded_at,json=recordedAt,proto3" json:"recorded_at,omitempty"`
	// recovery_fields are safe provider-neutral recovery facts.
	RecoveryFields map[string]*PublicValue `` /* 177-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ActionPrecondition struct {

	// name is the stable precondition name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// expected is the canonical expected value.
	Expected *PublicValue `protobuf:"bytes,2,opt,name=expected,proto3" json:"expected,omitempty"`
	// contains filtered or unexported fields
}

type ActionReceipt struct {

	// receipt_id is the host-generated receipt identity.
	ReceiptId string `protobuf:"bytes,1,opt,name=receipt_id,json=receiptId,proto3" json:"receipt_id,omitempty"`
	// operation is the host-owned operation identity.
	Operation *OperationIdentity `protobuf:"bytes,2,opt,name=operation,proto3" json:"operation,omitempty"`
	// action is the exact action that was attempted.
	Action *PlanAction `protobuf:"bytes,3,opt,name=action,proto3" json:"action,omitempty"`
	// delivery records the request delivery boundary.
	Delivery DeliveryState `protobuf:"varint,4,opt,name=delivery,proto3,enum=codefly.services.provider.v0.DeliveryState" json:"delivery,omitempty"`
	// certainty records complete, partial, or uncertain outcome.
	Certainty OutcomeCertainty `protobuf:"varint,5,opt,name=certainty,proto3,enum=codefly.services.provider.v0.OutcomeCertainty" json:"certainty,omitempty"`
	// started_at is the host-attested action start.
	StartedAt *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=started_at,json=startedAt,proto3" json:"started_at,omitempty"`
	// completed_at is the host-attested action completion when known.
	CompletedAt *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=completed_at,json=completedAt,proto3" json:"completed_at,omitempty"`
	// artifact_digest binds the executing provider package.
	ArtifactDigest string `protobuf:"bytes,8,opt,name=artifact_digest,json=artifactDigest,proto3" json:"artifact_digest,omitempty"`
	// safe_result contains only filtered safe result fields.
	SafeResult map[string]*PublicValue `` /* 165-byte string literal not displayed */
	// capture_references are opaque durable sink references.
	CaptureReferences []*OpaqueReference `protobuf:"bytes,10,rep,name=capture_references,json=captureReferences,proto3" json:"capture_references,omitempty"`
	// diagnostics are bounded neutral diagnostics.
	Diagnostics []*v0.FailureDiagnostic `protobuf:"bytes,11,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type ActionType int32

type AdmittedOrigin struct {

	// origin_rule_id binds this origin to the manifest ceiling.
	OriginRuleId string `protobuf:"bytes,1,opt,name=origin_rule_id,json=originRuleId,proto3" json:"origin_rule_id,omitempty"`
	// scheme is the admitted lowercase scheme.
	Scheme string `protobuf:"bytes,2,opt,name=scheme,proto3" json:"scheme,omitempty"`
	// host is the admitted canonical host.
	Host string `protobuf:"bytes,3,opt,name=host,proto3" json:"host,omitempty"`
	// port is the admitted concrete port.
	Port uint32 `protobuf:"varint,4,opt,name=port,proto3" json:"port,omitempty"`
	// private_network_class is attested after host resolution.
	PrivateNetworkClass PrivateNetworkClass `` /* 175-byte string literal not displayed */
	// admission_digest binds the rule, endpoint, and concrete origin.
	AdmissionDigest string `protobuf:"bytes,6,opt,name=admission_digest,json=admissionDigest,proto3" json:"admission_digest,omitempty"`
	// contains filtered or unexported fields
}

type AgentArtifactIdentity struct {

	// publisher is the agent publisher namespace.
	Publisher string `protobuf:"bytes,1,opt,name=publisher,proto3" json:"publisher,omitempty"`
	// name is the provider agent name.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// version is the concrete agent version.
	Version string `protobuf:"bytes,3,opt,name=version,proto3" json:"version,omitempty"`
	// artifact_digest is the verified package digest.
	ArtifactDigest string `protobuf:"bytes,4,opt,name=artifact_digest,json=artifactDigest,proto3" json:"artifact_digest,omitempty"`
	// manifest_digest is the packaged provider manifest digest.
	ManifestDigest string `protobuf:"bytes,5,opt,name=manifest_digest,json=manifestDigest,proto3" json:"manifest_digest,omitempty"`
	// contains filtered or unexported fields
}

type ApplyActionRequest struct {

	// context carries admitted handles, identities, and budget.
	Context *ProviderContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`
	// plan is the exact bound plan.
	Plan *OrderedPlan `protobuf:"bytes,2,opt,name=plan,proto3" json:"plan,omitempty"`
	// action is the single host-selected action.
	Action *PlanAction `protobuf:"bytes,3,opt,name=action,proto3" json:"action,omitempty"`
	// prior_checkpoint carries durable recovery state.
	PriorCheckpoint *ActionCheckpoint `protobuf:"bytes,4,opt,name=prior_checkpoint,json=priorCheckpoint,proto3" json:"prior_checkpoint,omitempty"`
	// state is the current safe provider state.
	State *ProviderState `protobuf:"bytes,5,opt,name=state,proto3" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type ApplyActionResponse struct {

	// receipt is the durable action result.
	Receipt *ActionReceipt `protobuf:"bytes,1,opt,name=receipt,proto3" json:"receipt,omitempty"`
	// next_state is safe provider state after this action.
	NextState *ProviderState `protobuf:"bytes,2,opt,name=next_state,json=nextState,proto3" json:"next_state,omitempty"`
	// contains filtered or unexported fields
}

type BindingAddress struct {

	// workspace_id is the stable workspace identity.
	WorkspaceId string `protobuf:"bytes,1,opt,name=workspace_id,json=workspaceId,proto3" json:"workspace_id,omitempty"`
	// environment_id is the stable environment identity.
	EnvironmentId string `protobuf:"bytes,2,opt,name=environment_id,json=environmentId,proto3" json:"environment_id,omitempty"`
	// binding_id is the stable binding identity.
	BindingId string `protobuf:"bytes,3,opt,name=binding_id,json=bindingId,proto3" json:"binding_id,omitempty"`
	// contains filtered or unexported fields
}

type BindingDesiredState struct {

	// binding is the exact binding address.
	Binding *BindingAddress `protobuf:"bytes,1,opt,name=binding,proto3" json:"binding,omitempty"`
	// deletion_policy defaults to retain at the manifest boundary.
	DeletionPolicy string `protobuf:"bytes,2,opt,name=deletion_policy,json=deletionPolicy,proto3" json:"deletion_policy,omitempty"`
	// input is normalized non-secret desired input.
	Input map[string]*PublicValue `` /* 137-byte string literal not displayed */
	// credential_references bind purpose to inactive opaque references.
	CredentialReferences []*OpaqueReference `protobuf:"bytes,4,rep,name=credential_references,json=credentialReferences,proto3" json:"credential_references,omitempty"`
	// contains filtered or unexported fields
}

type CaptureResult struct {

	// capture_id is the host capture identity.
	CaptureId string `protobuf:"bytes,1,opt,name=capture_id,json=captureId,proto3" json:"capture_id,omitempty"`
	// selector is the manifest capture selector.
	Selector string `protobuf:"bytes,2,opt,name=selector,proto3" json:"selector,omitempty"`
	// sink_reference is opaque and never reveals captured bytes.
	SinkReference *OpaqueReference `protobuf:"bytes,3,opt,name=sink_reference,json=sinkReference,proto3" json:"sink_reference,omitempty"`
	// captured reports whether Put became durable.
	Captured bool `protobuf:"varint,4,opt,name=captured,proto3" json:"captured,omitempty"`
	// contains filtered or unexported fields
}

type CredentialHandle struct {

	// handle is meaningful only to the host broker.
	Handle string `protobuf:"bytes,1,opt,name=handle,proto3" json:"handle,omitempty"`
	// purpose is the host-admitted credential purpose.
	Purpose CredentialPurpose `protobuf:"varint,2,opt,name=purpose,proto3,enum=codefly.services.provider.v0.CredentialPurpose" json:"purpose,omitempty"`
	// contains filtered or unexported fields
}

type CredentialPurpose int32

type DeliveryState int32

type DoctorRequest struct {

	// context carries admitted read-only handles and budget.
	Context *ProviderContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`
	// state is the current safe provider state.
	State *ProviderState `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type DoctorResponse struct {

	// healthy reports whether provider prerequisites are ready.
	Healthy bool `protobuf:"varint,1,opt,name=healthy,proto3" json:"healthy,omitempty"`
	// diagnostics are bounded neutral diagnostics.
	Diagnostics []*v0.FailureDiagnostic `protobuf:"bytes,2,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type ExecuteRequestRequest struct {

	// context binds the request to the operation and admitted origin.
	Context *ProviderContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`
	// request_id is the provider-generated callback identity.
	RequestId string `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// request is byte-for-byte material from the admitted plan.
	Request *PlannedRequest `protobuf:"bytes,3,opt,name=request,proto3" json:"request,omitempty"`
	// origin is the host-admitted concrete origin.
	Origin *AdmittedOrigin `protobuf:"bytes,4,opt,name=origin,proto3" json:"origin,omitempty"`
	// credential_handles select host-admitted credential purposes.
	CredentialHandles []*CredentialHandle `protobuf:"bytes,5,rep,name=credential_handles,json=credentialHandles,proto3" json:"credential_handles,omitempty"`
	// requested_at is the provider request timestamp.
	RequestedAt *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=requested_at,json=requestedAt,proto3" json:"requested_at,omitempty"`
	// contains filtered or unexported fields
}

type ExecuteRequestResponse struct {

	// request_id matches the callback identity.
	RequestId string `protobuf:"bytes,1,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// delivery records whether request bytes crossed the boundary.
	Delivery DeliveryState `protobuf:"varint,2,opt,name=delivery,proto3,enum=codefly.services.provider.v0.DeliveryState" json:"delivery,omitempty"`
	// status_code is the remote HTTP response code when received.
	StatusCode uint32 `protobuf:"varint,3,opt,name=status_code,json=statusCode,proto3" json:"status_code,omitempty"`
	// forwarded contains only FORWARD_SAFE filtered fields.
	Forwarded []*FilteredField `protobuf:"bytes,4,rep,name=forwarded,proto3" json:"forwarded,omitempty"`
	// suppressed_presence reports presence without forwarding a value.
	SuppressedPresence []string `protobuf:"bytes,5,rep,name=suppressed_presence,json=suppressedPresence,proto3" json:"suppressed_presence,omitempty"`
	// captures are durable sink results.
	Captures []*CaptureResult `protobuf:"bytes,6,rep,name=captures,proto3" json:"captures,omitempty"`
	// certainty records complete, partial, or uncertain outcome.
	Certainty OutcomeCertainty `protobuf:"varint,7,opt,name=certainty,proto3,enum=codefly.services.provider.v0.OutcomeCertainty" json:"certainty,omitempty"`
	// response_received_at is host-attested when a response arrived.
	ResponseReceivedAt *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=response_received_at,json=responseReceivedAt,proto3" json:"response_received_at,omitempty"`
	// diagnostics are bounded neutral diagnostics.
	Diagnostics []*v0.FailureDiagnostic `protobuf:"bytes,9,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type FilteredField struct {

	// selector is the manifest response selector.
	Selector string `protobuf:"bytes,1,opt,name=selector,proto3" json:"selector,omitempty"`
	// value is the filtered safe value.
	Value *PublicValue `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type GetProviderInformationRequest struct {

	// artifact is the verified agent package identity.
	Artifact *AgentArtifactIdentity `protobuf:"bytes,1,opt,name=artifact,proto3" json:"artifact,omitempty"`
	// contains filtered or unexported fields
}

type GetProviderInformationResponse struct {

	// artifact must exactly match the request identity.
	Artifact *AgentArtifactIdentity `protobuf:"bytes,1,opt,name=artifact,proto3" json:"artifact,omitempty"`
	// catalog is the runtime subset of the packaged manifest.
	Catalog *RuntimeCatalog `protobuf:"bytes,2,opt,name=catalog,proto3" json:"catalog,omitempty"`
	// capabilities are provider-neutral supported operations.
	Capabilities *ProviderCapabilities `protobuf:"bytes,3,opt,name=capabilities,proto3" json:"capabilities,omitempty"`
	// readiness separates production observation and mutation.
	Readiness *ProviderReadiness `protobuf:"bytes,4,opt,name=readiness,proto3" json:"readiness,omitempty"`
	// diagnostics are bounded neutral diagnostics.
	Diagnostics []*v0.FailureDiagnostic `protobuf:"bytes,5,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type HTTPMethod int32

type HostMode int32

type MaterialObservation struct {

	// account_identity is the exact safe account identity.
	AccountIdentity string `protobuf:"bytes,1,opt,name=account_identity,json=accountIdentity,proto3" json:"account_identity,omitempty"`
	// mode is host-attested.
	Mode HostMode `protobuf:"varint,2,opt,name=mode,proto3,enum=codefly.services.provider.v0.HostMode" json:"mode,omitempty"`
	// complete is explicit even for single-page observations.
	Complete bool `protobuf:"varint,3,opt,name=complete,proto3" json:"complete,omitempty"`
	// next_cursor is present only when the observation is incomplete.
	NextCursor string `protobuf:"bytes,4,opt,name=next_cursor,json=nextCursor,proto3" json:"next_cursor,omitempty"`
	// resources are canonicalized independently of retrieval order.
	Resources []*MaterialResourceObservation `protobuf:"bytes,5,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type MaterialResourceObservation struct {

	// identity is the exact remote identity.
	Identity *RemoteIdentity `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	// ownership is the provider relationship to this object.
	Ownership Ownership `protobuf:"varint,2,opt,name=ownership,proto3,enum=codefly.services.provider.v0.Ownership" json:"ownership,omitempty"`
	// revision is a material remote revision or ETag.
	Revision string `protobuf:"bytes,3,opt,name=revision,proto3" json:"revision,omitempty"`
	// provider_owned_fields are safe fields managed by this provider.
	ProviderOwnedFields map[string]*PublicValue `` /* 194-byte string literal not displayed */
	// secret_reference_status records only reference or presence state.
	SecretReferenceStatus map[string]string `` /* 200-byte string literal not displayed */
	// action_preconditions are stable preconditions for planning.
	ActionPreconditions map[string]*PublicValue `` /* 192-byte string literal not displayed */
	// contains filtered or unexported fields
}

type MethodEffect int32

type MethodNetworkMode int32

type ObserveRequest struct {

	// context carries admitted read-only handles and budget.
	Context *ProviderContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`
	// state is the current safe provider state.
	State *ProviderState `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	// cursor continues an explicitly incomplete observation.
	Cursor string `protobuf:"bytes,3,opt,name=cursor,proto3" json:"cursor,omitempty"`
	// contains filtered or unexported fields
}

type ObserveResponse struct {

	// material is the digest-bearing observation.
	Material *MaterialObservation `protobuf:"bytes,1,opt,name=material,proto3" json:"material,omitempty"`
	// volatile is excluded from material identity.
	Volatile *VolatileObservation `protobuf:"bytes,2,opt,name=volatile,proto3" json:"volatile,omitempty"`
	// contains filtered or unexported fields
}

type OfflineProviderContext struct {

	// binding is the environment-scoped binding address.
	Binding *BindingAddress `protobuf:"bytes,1,opt,name=binding,proto3" json:"binding,omitempty"`
	// artifact is the concrete verified agent package.
	Artifact *AgentArtifactIdentity `protobuf:"bytes,2,opt,name=artifact,proto3" json:"artifact,omitempty"`
	// input is normalized non-secret desired input.
	Input map[string]*PublicValue `` /* 137-byte string literal not displayed */
	// mode is host-attested and cannot be selected by provider code.
	Mode HostMode `protobuf:"varint,4,opt,name=mode,proto3,enum=codefly.services.provider.v0.HostMode" json:"mode,omitempty"`
	// account_identity is a safe host-known account identity when available.
	AccountIdentity string `protobuf:"bytes,5,opt,name=account_identity,json=accountIdentity,proto3" json:"account_identity,omitempty"`
	// contains filtered or unexported fields
}

type OpaqueReference struct {

	// reference is meaningful only to the host subsystem that issued it.
	Reference string `protobuf:"bytes,1,opt,name=reference,proto3" json:"reference,omitempty"`
	// purpose is the declared reference purpose.
	Purpose CredentialPurpose `protobuf:"varint,2,opt,name=purpose,proto3,enum=codefly.services.provider.v0.CredentialPurpose" json:"purpose,omitempty"`
	// safe_fingerprint is non-reversible and safe for drift comparison.
	SafeFingerprint string `protobuf:"bytes,3,opt,name=safe_fingerprint,json=safeFingerprint,proto3" json:"safe_fingerprint,omitempty"`
	// contains filtered or unexported fields
}

type OperationIdentity struct {

	// operation_id is stable across coordinator retries.
	OperationId string `protobuf:"bytes,1,opt,name=operation_id,json=operationId,proto3" json:"operation_id,omitempty"`
	// attempt_id identifies the host-owned attempt.
	AttemptId string `protobuf:"bytes,2,opt,name=attempt_id,json=attemptId,proto3" json:"attempt_id,omitempty"`
	// action_id identifies one exact plan action.
	ActionId string `protobuf:"bytes,3,opt,name=action_id,json=actionId,proto3" json:"action_id,omitempty"`
	// plan_id identifies the exact ordered plan.
	PlanId string `protobuf:"bytes,4,opt,name=plan_id,json=planId,proto3" json:"plan_id,omitempty"`
	// approval_id identifies host admission when required.
	ApprovalId string `protobuf:"bytes,5,opt,name=approval_id,json=approvalId,proto3" json:"approval_id,omitempty"`
	// checkpoint_id identifies the latest durable checkpoint.
	CheckpointId string `protobuf:"bytes,6,opt,name=checkpoint_id,json=checkpointId,proto3" json:"checkpoint_id,omitempty"`
	// contains filtered or unexported fields
}

type OrderedPlan struct {

	// plan_id is the host-visible plan identity.
	PlanId string `protobuf:"bytes,1,opt,name=plan_id,json=planId,proto3" json:"plan_id,omitempty"`
	// artifact_digest binds the concrete provider package.
	ArtifactDigest string `protobuf:"bytes,2,opt,name=artifact_digest,json=artifactDigest,proto3" json:"artifact_digest,omitempty"`
	// manifest_digest binds the packaged ceiling.
	ManifestDigest string `protobuf:"bytes,3,opt,name=manifest_digest,json=manifestDigest,proto3" json:"manifest_digest,omitempty"`
	// catalog_digest binds the runtime subset.
	CatalogDigest string `protobuf:"bytes,4,opt,name=catalog_digest,json=catalogDigest,proto3" json:"catalog_digest,omitempty"`
	// desired_digest binds normalized desired state.
	DesiredDigest string `protobuf:"bytes,5,opt,name=desired_digest,json=desiredDigest,proto3" json:"desired_digest,omitempty"`
	// observation_digest binds material observation only.
	ObservationDigest string `protobuf:"bytes,6,opt,name=observation_digest,json=observationDigest,proto3" json:"observation_digest,omitempty"`
	// output_target_digest binds output generation.
	OutputTargetDigest string `protobuf:"bytes,7,opt,name=output_target_digest,json=outputTargetDigest,proto3" json:"output_target_digest,omitempty"`
	// state_generation_digest binds prior durable state.
	StateGenerationDigest string `` /* 126-byte string literal not displayed */
	// policy_input_digest binds host policy and approval.
	PolicyInputDigest string `protobuf:"bytes,9,opt,name=policy_input_digest,json=policyInputDigest,proto3" json:"policy_input_digest,omitempty"`
	// actions retain exact execution order.
	Actions []*PlanAction `protobuf:"bytes,10,rep,name=actions,proto3" json:"actions,omitempty"`
	// plan_digest is computed with this field cleared.
	PlanDigest string `protobuf:"bytes,11,opt,name=plan_digest,json=planDigest,proto3" json:"plan_digest,omitempty"`
	// contains filtered or unexported fields
}

type OutcomeCertainty int32

type OutputProposal struct {

	// contract is the exact versioned generic configuration contract.
	Contract string `protobuf:"bytes,1,opt,name=contract,proto3" json:"contract,omitempty"`
	// target_generation is the host-selected target generation.
	TargetGeneration uint64 `protobuf:"varint,2,opt,name=target_generation,json=targetGeneration,proto3" json:"target_generation,omitempty"`
	// values are declared contract keys only.
	Values map[string]*OutputValue `` /* 139-byte string literal not displayed */
	// digest binds the contract, generation, and values.
	Digest string `protobuf:"bytes,4,opt,name=digest,proto3" json:"digest,omitempty"`
	// contains filtered or unexported fields
}

type OutputTarget struct {

	// contract is the generic configuration contract identity.
	Contract string `protobuf:"bytes,1,opt,name=contract,proto3" json:"contract,omitempty"`
	// target_generation is the desired host output generation.
	TargetGeneration uint64 `protobuf:"varint,2,opt,name=target_generation,json=targetGeneration,proto3" json:"target_generation,omitempty"`
	// current_generation is the currently durable output generation.
	CurrentGeneration uint64 `protobuf:"varint,3,opt,name=current_generation,json=currentGeneration,proto3" json:"current_generation,omitempty"`
	// current_digest is the currently durable output digest.
	CurrentDigest string `protobuf:"bytes,4,opt,name=current_digest,json=currentDigest,proto3" json:"current_digest,omitempty"`
	// contains filtered or unexported fields
}

type OutputValue struct {

	// kind is the only output representation available to providers.
	//
	// Types that are valid to be assigned to Kind:
	//
	//	*OutputValue_PublicValue
	//	*OutputValue_OpaqueReference
	Kind isOutputValue_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type OutputValue_OpaqueReference struct {
	// opaque_reference is a host-owned reference.
	OpaqueReference *OpaqueReference `protobuf:"bytes,2,opt,name=opaque_reference,json=opaqueReference,proto3,oneof"`
}

type OutputValue_PublicValue struct {
	// public_value is a schema-admitted public value.
	PublicValue *PublicValue `protobuf:"bytes,1,opt,name=public_value,json=publicValue,proto3,oneof"`
}

type Ownership int32

type PlanAction struct {

	// action_id is unique within the plan.
	ActionId string `protobuf:"bytes,1,opt,name=action_id,json=actionId,proto3" json:"action_id,omitempty"`
	// position is the zero-based exact plan position.
	Position uint32 `protobuf:"varint,2,opt,name=position,proto3" json:"position,omitempty"`
	// type is the closed lifecycle action.
	Type ActionType `protobuf:"varint,3,opt,name=type,proto3,enum=codefly.services.provider.v0.ActionType" json:"type,omitempty"`
	// resource_type is the manifest resource type.
	ResourceType string `protobuf:"bytes,4,opt,name=resource_type,json=resourceType,proto3" json:"resource_type,omitempty"`
	// remote_identity is known for existing objects.
	RemoteIdentity *RemoteIdentity `protobuf:"bytes,5,opt,name=remote_identity,json=remoteIdentity,proto3" json:"remote_identity,omitempty"`
	// prospective_remote_id survives create lost-response recovery.
	ProspectiveRemoteId string `protobuf:"bytes,6,opt,name=prospective_remote_id,json=prospectiveRemoteId,proto3" json:"prospective_remote_id,omitempty"`
	// ownership is the resulting ownership.
	Ownership Ownership `protobuf:"varint,7,opt,name=ownership,proto3,enum=codefly.services.provider.v0.Ownership" json:"ownership,omitempty"`
	// requests are the exact broker requests admitted for this action.
	Requests []*PlannedRequest `protobuf:"bytes,8,rep,name=requests,proto3" json:"requests,omitempty"`
	// output is the exact host-executed projection for PROJECT_OUTPUT.
	Output *OutputProposal `protobuf:"bytes,9,opt,name=output,proto3" json:"output,omitempty"`
	// preconditions are exact material action preconditions.
	Preconditions []*ActionPrecondition `protobuf:"bytes,10,rep,name=preconditions,proto3" json:"preconditions,omitempty"`
	// summary is a safe human-readable action summary.
	Summary string `protobuf:"bytes,11,opt,name=summary,proto3" json:"summary,omitempty"`
	// contains filtered or unexported fields
}

type PlanRequest struct {

	// context contains identity and normalized non-secret input.
	Context *OfflineProviderContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`
	// desired is canonical binding desired state.
	Desired *BindingDesiredState `protobuf:"bytes,2,opt,name=desired,proto3" json:"desired,omitempty"`
	// observation is material observation only.
	Observation *MaterialObservation `protobuf:"bytes,3,opt,name=observation,proto3" json:"observation,omitempty"`
	// output_target is the host output generation target.
	OutputTarget *OutputTarget `protobuf:"bytes,4,opt,name=output_target,json=outputTarget,proto3" json:"output_target,omitempty"`
	// state_generation binds prior state.
	StateGeneration *StateGeneration `protobuf:"bytes,5,opt,name=state_generation,json=stateGeneration,proto3" json:"state_generation,omitempty"`
	// policy_input is the host policy and approval input.
	PolicyInput *PolicyApprovalInput `protobuf:"bytes,6,opt,name=policy_input,json=policyInput,proto3" json:"policy_input,omitempty"`
	// state is the current safe provider state.
	State *ProviderState `protobuf:"bytes,7,opt,name=state,proto3" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type PlanResponse struct {

	// plan is the exact canonical action sequence.
	Plan *OrderedPlan `protobuf:"bytes,1,opt,name=plan,proto3" json:"plan,omitempty"`
	// diagnostics are bounded neutral diagnostics.
	Diagnostics []*v0.FailureDiagnostic `protobuf:"bytes,2,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type PlannedRequest struct {

	// request_descriptor_id selects one packaged descriptor.
	RequestDescriptorId string `protobuf:"bytes,1,opt,name=request_descriptor_id,json=requestDescriptorId,proto3" json:"request_descriptor_id,omitempty"`
	// request_descriptor_digest binds the exact descriptor.
	RequestDescriptorDigest string `` /* 132-byte string literal not displayed */
	// method must match the descriptor.
	Method HTTPMethod `protobuf:"varint,3,opt,name=method,proto3,enum=codefly.services.provider.v0.HTTPMethod" json:"method,omitempty"`
	// admitted_origin_digest binds the exact host-attested origin.
	AdmittedOriginDigest string `protobuf:"bytes,4,opt,name=admitted_origin_digest,json=admittedOriginDigest,proto3" json:"admitted_origin_digest,omitempty"`
	// path_parameters bind every concrete path placeholder.
	PathParameters map[string]*PublicValue `` /* 177-byte string literal not displayed */
	// query contains only descriptor-allowed fields.
	Query map[string]*PublicValue `` /* 137-byte string literal not displayed */
	// body contains only descriptor-allowed structured fields.
	Body map[string]*PublicValue `` /* 135-byte string literal not displayed */
	// credential_purposes bind the purposes of the handles supplied at execution.
	CredentialPurposes []CredentialPurpose `` /* 175-byte string literal not displayed */
	// response_policy_digest binds filtering and capture policy.
	ResponsePolicyDigest string `protobuf:"bytes,9,opt,name=response_policy_digest,json=responsePolicyDigest,proto3" json:"response_policy_digest,omitempty"`
	// idempotency_key is stable across coordinator retries.
	IdempotencyKey string `protobuf:"bytes,10,opt,name=idempotency_key,json=idempotencyKey,proto3" json:"idempotency_key,omitempty"`
	// request_digest is computed over every field above with this field cleared.
	RequestDigest string `protobuf:"bytes,11,opt,name=request_digest,json=requestDigest,proto3" json:"request_digest,omitempty"`
	// contains filtered or unexported fields
}

type PolicyApprovalInput struct {

	// principal_id is the host-selected principal.
	PrincipalId string `protobuf:"bytes,1,opt,name=principal_id,json=principalId,proto3" json:"principal_id,omitempty"`
	// permission is the admitted action permission.
	Permission string `protobuf:"bytes,2,opt,name=permission,proto3" json:"permission,omitempty"`
	// concrete_resource is the expanded concrete resource.
	ConcreteResource string `protobuf:"bytes,3,opt,name=concrete_resource,json=concreteResource,proto3" json:"concrete_resource,omitempty"`
	// credential_purpose is the admitted credential purpose.
	CredentialPurpose CredentialPurpose `` /* 165-byte string literal not displayed */
	// response_policy_digest binds filtering and capture policy.
	ResponsePolicyDigest string `protobuf:"bytes,5,opt,name=response_policy_digest,json=responsePolicyDigest,proto3" json:"response_policy_digest,omitempty"`
	// approval_id is the host-issued approval identity.
	ApprovalId string `protobuf:"bytes,6,opt,name=approval_id,json=approvalId,proto3" json:"approval_id,omitempty"`
	// contains filtered or unexported fields
}

type PrivateNetworkClass int32

type ProposeOutputRequest struct {

	// operation binds the proposal to one exact plan action.
	Operation *OperationIdentity `protobuf:"bytes,1,opt,name=operation,proto3" json:"operation,omitempty"`
	// proposal is the schema-bound generic output.
	Proposal *OutputProposal `protobuf:"bytes,2,opt,name=proposal,proto3" json:"proposal,omitempty"`
	// contains filtered or unexported fields
}

type ProposeOutputResponse struct {

	// durable reports whether the projection committed.
	Durable bool `protobuf:"varint,1,opt,name=durable,proto3" json:"durable,omitempty"`
	// generation is the committed output generation.
	Generation uint64 `protobuf:"varint,2,opt,name=generation,proto3" json:"generation,omitempty"`
	// digest is the committed output digest.
	Digest string `protobuf:"bytes,3,opt,name=digest,proto3" json:"digest,omitempty"`
	// contains filtered or unexported fields
}

type ProviderCapabilities struct {

	// supports_import declares import support.
	SupportsImport bool `protobuf:"varint,1,opt,name=supports_import,json=supportsImport,proto3" json:"supports_import,omitempty"`
	// supports_replace declares replacement support.
	SupportsReplace bool `protobuf:"varint,2,opt,name=supports_replace,json=supportsReplace,proto3" json:"supports_replace,omitempty"`
	// supports_delete declares deletion support.
	SupportsDelete bool `protobuf:"varint,3,opt,name=supports_delete,json=supportsDelete,proto3" json:"supports_delete,omitempty"`
	// supports_state_upgrade declares stepwise state upgrade support.
	SupportsStateUpgrade bool `protobuf:"varint,4,opt,name=supports_state_upgrade,json=supportsStateUpgrade,proto3" json:"supports_state_upgrade,omitempty"`
	// contains filtered or unexported fields
}

type ProviderClient interface {
	// GetProviderInformation returns immutable advertisement and catalog identity.
	GetProviderInformation(ctx context.Context, in *GetProviderInformationRequest, opts ...grpc.CallOption) (*GetProviderInformationResponse, error)
	// Validate checks normalized desired input without broker access.
	Validate(ctx context.Context, in *ValidateRequest, opts ...grpc.CallOption) (*ValidateResponse, error)
	// Observe reads admitted remote state.
	Observe(ctx context.Context, in *ObserveRequest, opts ...grpc.CallOption) (*ObserveResponse, error)
	// Plan produces an exact ordered plan without broker access.
	Plan(ctx context.Context, in *PlanRequest, opts ...grpc.CallOption) (*PlanResponse, error)
	// ApplyAction applies exactly one action selected from the bound plan.
	ApplyAction(ctx context.Context, in *ApplyActionRequest, opts ...grpc.CallOption) (*ApplyActionResponse, error)
	// Doctor performs admitted read-only diagnostics.
	Doctor(ctx context.Context, in *DoctorRequest, opts ...grpc.CallOption) (*DoctorResponse, error)
	// UpgradeState performs one offline state-schema upgrade step.
	UpgradeState(ctx context.Context, in *UpgradeStateRequest, opts ...grpc.CallOption) (*UpgradeStateResponse, error)
}

type ProviderContext struct {

	// offline is the identity and normalized non-secret input.
	Offline *OfflineProviderContext `protobuf:"bytes,1,opt,name=offline,proto3" json:"offline,omitempty"`
	// credentials are opaque host-minted handles only.
	Credentials []*CredentialHandle `protobuf:"bytes,2,rep,name=credentials,proto3" json:"credentials,omitempty"`
	// endpoints are semantic endpoint references.
	Endpoints []*SemanticEndpointReference `protobuf:"bytes,3,rep,name=endpoints,proto3" json:"endpoints,omitempty"`
	// admitted_origins are concrete host-attested origins.
	AdmittedOrigins []*AdmittedOrigin `protobuf:"bytes,4,rep,name=admitted_origins,json=admittedOrigins,proto3" json:"admitted_origins,omitempty"`
	// operation binds this invocation to host-owned identities.
	Operation *OperationIdentity `protobuf:"bytes,5,opt,name=operation,proto3" json:"operation,omitempty"`
	// budget is the host-enforced callback and deadline budget.
	Budget *RequestBudget `protobuf:"bytes,6,opt,name=budget,proto3" json:"budget,omitempty"`
	// contains filtered or unexported fields
}

type ProviderHostClient interface {
	// ExecuteRequest executes one manifest-declared and host-admitted request.
	ExecuteRequest(ctx context.Context, in *ExecuteRequestRequest, opts ...grpc.CallOption) (*ExecuteRequestResponse, error)
	// RecordCheckpoint durably records pre-send or recovery state.
	RecordCheckpoint(ctx context.Context, in *RecordCheckpointRequest, opts ...grpc.CallOption) (*RecordCheckpointResponse, error)
	// ResolveCapture returns an opaque reference for a durable capture.
	ResolveCapture(ctx context.Context, in *ResolveCaptureRequest, opts ...grpc.CallOption) (*ResolveCaptureResponse, error)
	// ProposeOutput asks the host to execute one PROJECT_OUTPUT action.
	ProposeOutput(ctx context.Context, in *ProposeOutputRequest, opts ...grpc.CallOption) (*ProposeOutputResponse, error)
}