agentv1

type AgentServiceClient interface {
	// Agent exchanges its bootstrap credential for a task-scoped agent JWT
	// (ADR 0055 Fix #3). Called once at startup ONLY when the pod was given a
	// projected ServiceAccount token instead of a plaintext token: the agent
	// presents that projected token in metadata, the Control Plane validates it
	// with a Kubernetes TokenReview, resolves the pod to its task instance, and
	// returns the task-scoped JWT the agent uses as its bearer thereafter. The
	// default (env-var) transport never calls this.
	ExchangeToken(ctx context.Context, in *ExchangeTokenRequest, opts ...grpc.CallOption) (*ExchangeTokenResponse, error)
	// Agent registers with the Control Plane on container startup.
	// The JWT in metadata identifies the task instance.
	Register(ctx context.Context, in *RegisterRequest, opts ...grpc.CallOption) (*RegisterResponse, error)
	// Agent fetches the task specification.
	GetTaskSpec(ctx context.Context, in *GetTaskSpecRequest, opts ...grpc.CallOption) (*TaskSpec, error)
	// Agent pulls XCom values declared as inputs.
	FetchXCom(ctx context.Context, in *FetchXComRequest, opts ...grpc.CallOption) (*FetchXComResponse, error)
	// Agent pulls several XCom values in one call. Each item is authorized and
	// scoped exactly like FetchXCom. An older control plane answers Unimplemented
	// and the agent falls back to FetchXCom per value.
	FetchXComBatch(ctx context.Context, in *FetchXComBatchRequest, opts ...grpc.CallOption) (*FetchXComBatchResponse, error)
	// Agent pushes an XCom value (typically the task return value).
	PushXCom(ctx context.Context, in *PushXComRequest, opts ...grpc.CallOption) (*PushXComResponse, error)
	// Agent streams log lines back to the Control Plane.
	// Bidirectional: server sends acks; client streams logs.
	StreamLogs(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[LogLine, LogAck], error)
	// Agent reports task state transitions (running, success, failed).
	ReportState(ctx context.Context, in *ReportStateRequest, opts ...grpc.CallOption) (*ReportStateResponse, error)
	// Agent sends periodic heartbeats during long-running tasks.
	Heartbeat(ctx context.Context, in *HeartbeatRequest, opts ...grpc.CallOption) (*HeartbeatResponse, error)
	// Agent fetches the tenant's Variables to export as AIRFLOW_VAR_* env vars,
	// so user code resolves them via Airflow's native env secrets backend.
	GetVariables(ctx context.Context, in *GetVariablesRequest, opts ...grpc.CallOption) (*GetVariablesResponse, error)
	// Agent fetches the tenant's Connections (as Airflow connection URIs) to
	// export as AIRFLOW_CONN_* env vars.
	GetConnections(ctx context.Context, in *GetConnectionsRequest, opts ...grpc.CallOption) (*GetConnectionsResponse, error)
	// A warm worker awaits per-attempt assignments over a long-lived bidi stream
	// (ADR 0058 N1b). Down: the control plane pushes WorkAssignments. Up: the
	// worker sends its initial WorkerRegister, per-assignment AssignmentAcks, and
	// SlotFree signals. Gated on execution.warm_pools_enabled — the handler
	// returns FailedPrecondition when warm pools are off, so the transport is
	// inert by default.
	AwaitAssignment(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[WorkerMessage, WorkAssignment], error)
}

type AgentServiceServer interface {
	// Agent exchanges its bootstrap credential for a task-scoped agent JWT
	// (ADR 0055 Fix #3). Called once at startup ONLY when the pod was given a
	// projected ServiceAccount token instead of a plaintext token: the agent
	// presents that projected token in metadata, the Control Plane validates it
	// with a Kubernetes TokenReview, resolves the pod to its task instance, and
	// returns the task-scoped JWT the agent uses as its bearer thereafter. The
	// default (env-var) transport never calls this.
	ExchangeToken(context.Context, *ExchangeTokenRequest) (*ExchangeTokenResponse, error)
	// Agent registers with the Control Plane on container startup.
	// The JWT in metadata identifies the task instance.
	Register(context.Context, *RegisterRequest) (*RegisterResponse, error)
	// Agent fetches the task specification.
	GetTaskSpec(context.Context, *GetTaskSpecRequest) (*TaskSpec, error)
	// Agent pulls XCom values declared as inputs.
	FetchXCom(context.Context, *FetchXComRequest) (*FetchXComResponse, error)
	// Agent pulls several XCom values in one call. Each item is authorized and
	// scoped exactly like FetchXCom. An older control plane answers Unimplemented
	// and the agent falls back to FetchXCom per value.
	FetchXComBatch(context.Context, *FetchXComBatchRequest) (*FetchXComBatchResponse, error)
	// Agent pushes an XCom value (typically the task return value).
	PushXCom(context.Context, *PushXComRequest) (*PushXComResponse, error)
	// Agent streams log lines back to the Control Plane.
	// Bidirectional: server sends acks; client streams logs.
	StreamLogs(grpc.BidiStreamingServer[LogLine, LogAck]) error
	// Agent reports task state transitions (running, success, failed).
	ReportState(context.Context, *ReportStateRequest) (*ReportStateResponse, error)
	// Agent sends periodic heartbeats during long-running tasks.
	Heartbeat(context.Context, *HeartbeatRequest) (*HeartbeatResponse, error)
	// Agent fetches the tenant's Variables to export as AIRFLOW_VAR_* env vars,
	// so user code resolves them via Airflow's native env secrets backend.
	GetVariables(context.Context, *GetVariablesRequest) (*GetVariablesResponse, error)
	// Agent fetches the tenant's Connections (as Airflow connection URIs) to
	// export as AIRFLOW_CONN_* env vars.
	GetConnections(context.Context, *GetConnectionsRequest) (*GetConnectionsResponse, error)
	// A warm worker awaits per-attempt assignments over a long-lived bidi stream
	// (ADR 0058 N1b). Down: the control plane pushes WorkAssignments. Up: the
	// worker sends its initial WorkerRegister, per-assignment AssignmentAcks, and
	// SlotFree signals. Gated on execution.warm_pools_enabled — the handler
	// returns FailedPrecondition when warm pools are off, so the transport is
	// inert by default.
	AwaitAssignment(grpc.BidiStreamingServer[WorkerMessage, WorkAssignment]) error
	// contains filtered or unexported methods
}

type AgentService_AwaitAssignmentClient = grpc.BidiStreamingClient[WorkerMessage, WorkAssignment]

type AgentService_AwaitAssignmentServer = grpc.BidiStreamingServer[WorkerMessage, WorkAssignment]

type AgentService_StreamLogsClient = grpc.BidiStreamingClient[LogLine, LogAck]

type AgentService_StreamLogsServer = grpc.BidiStreamingServer[LogLine, LogAck]

type AssignmentAck struct {
	AssignmentId string `protobuf:"bytes,1,opt,name=assignment_id,json=assignmentId,proto3" json:"assignment_id,omitempty"`
	Started      bool   `protobuf:"varint,2,opt,name=started,proto3" json:"started,omitempty"`
	// contains filtered or unexported fields
}

type ExchangeTokenRequest struct {
	// contains filtered or unexported fields
}

type ExchangeTokenResponse struct {

	// A freshly minted, task-scoped agent JWT — the same identity scoped and
	// liveness-checked on the secret path. The agent swaps its bearer to this
	// value for every subsequent RPC. Never logged.
	AgentToken string `protobuf:"bytes,1,opt,name=agent_token,json=agentToken,proto3" json:"agent_token,omitempty"`
	// contains filtered or unexported fields
}

type FetchXComBatchItem struct {
	UpstreamTaskId string                 `protobuf:"bytes,1,opt,name=upstream_task_id,json=upstreamTaskId,proto3" json:"upstream_task_id,omitempty"`
	Key            string                 `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"`            // the resolved key ('return_value' when the request left it empty)
	Found          bool                   `protobuf:"varint,3,opt,name=found,proto3" json:"found,omitempty"`       // false when the value is absent or expired (FetchXCom's NotFound)
	Deferred       bool                   `protobuf:"varint,4,opt,name=deferred,proto3" json:"deferred,omitempty"` // true when the value did not fit the response size budget; fetch it with FetchXCom
	Value          []byte                 `protobuf:"bytes,5,opt,name=value,proto3" json:"value,omitempty"`        // JSON-encoded payload, set only when found and not deferred
	ContentType    string                 `protobuf:"bytes,6,opt,name=content_type,json=contentType,proto3" json:"content_type,omitempty"`
	SizeBytes      int32                  `protobuf:"varint,7,opt,name=size_bytes,json=sizeBytes,proto3" json:"size_bytes,omitempty"`
	CreatedAt      *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type FetchXComBatchRequest struct {
	Items []*FetchXComRequest `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"` // at most 256 items
	// contains filtered or unexported fields
}

type FetchXComBatchResponse struct {
	Items []*FetchXComBatchItem `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"` // one per request item, in request order
	// contains filtered or unexported fields
}

type FetchXComRequest struct {
	UpstreamTaskId string `protobuf:"bytes,1,opt,name=upstream_task_id,json=upstreamTaskId,proto3" json:"upstream_task_id,omitempty"`
	Key            string `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"` // defaults to 'return_value'
	// contains filtered or unexported fields
}

type FetchXComResponse struct {
	Value       []byte                 `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`                                // JSON-encoded payload
	ContentType string                 `protobuf:"bytes,2,opt,name=content_type,json=contentType,proto3" json:"content_type,omitempty"` // 'application/json' by default
	SizeBytes   int32                  `protobuf:"varint,3,opt,name=size_bytes,json=sizeBytes,proto3" json:"size_bytes,omitempty"`
	CreatedAt   *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type GetConnectionsRequest struct {
	// contains filtered or unexported fields
}

type GetConnectionsResponse struct {

	// conn_id -> Airflow connection URI, exported as AIRFLOW_CONN_<CONN_ID>.
	ConnectionUris map[string]string `` /* 177-byte string literal not displayed */
	// contains filtered or unexported fields
}

type GetTaskSpecRequest struct {
	// contains filtered or unexported fields
}

type GetVariablesRequest struct {
	// contains filtered or unexported fields
}

type GetVariablesResponse struct {

	// key -> value, exported by the agent as AIRFLOW_VAR_<KEY>.
	Variables map[string]string `` /* 145-byte string literal not displayed */
	// contains filtered or unexported fields
}

type HeartbeatRequest struct {
	SentAt        *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=sent_at,json=sentAt,proto3" json:"sent_at,omitempty"`
	CustomMetrics map[string]float64     `` // optional task-reported metrics
	/* 176-byte string literal not displayed */
	// contains filtered or unexported fields
}

type HeartbeatResponse struct {
	ShouldTerminate bool                   `protobuf:"varint,1,opt,name=should_terminate,json=shouldTerminate,proto3" json:"should_terminate,omitempty"`
	ServerTime      *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=server_time,json=serverTime,proto3" json:"server_time,omitempty"`
	// A freshly minted, task-scoped agent token the control plane issues when the
	// heartbeat proves the attempt is still live (ADR 0055 Fix #4). When non-empty
	// the agent atomically swaps its bearer to this value, so a long task keeps a
	// working credential while the short per-attempt TTL bounds a stolen/finished
	// one. Empty means "keep the current token" (no renewal this beat, or the
	// attempt is superseded/past its lifetime ceiling). Never logged.
	RenewedToken string `protobuf:"bytes,3,opt,name=renewed_token,json=renewedToken,proto3" json:"renewed_token,omitempty"`
	// contains filtered or unexported fields
}

type LogAck struct {
	AcknowledgedThroughLine int64 `` /* 133-byte string literal not displayed */
	// contains filtered or unexported fields
}

type LogLevel int32

type LogLine struct {
	Time       *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=time,proto3" json:"time,omitempty"`
	Level      LogLevel               `protobuf:"varint,2,opt,name=level,proto3,enum=leoflow.agent.v1.LogLevel" json:"level,omitempty"`
	Message    string                 `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	Stream     string                 `protobuf:"bytes,4,opt,name=stream,proto3" json:"stream,omitempty"` // 'stdout' or 'stderr'
	LineNumber int64                  `protobuf:"varint,5,opt,name=line_number,json=lineNumber,proto3" json:"line_number,omitempty"`
	// contains filtered or unexported fields
}

type PushXComRequest struct {
	Key         string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`     // defaults to 'return_value'
	Value       []byte `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"` // JSON-encoded payload, max 256KB
	ContentType string `protobuf:"bytes,3,opt,name=content_type,json=contentType,proto3" json:"content_type,omitempty"`
	// contains filtered or unexported fields
}

type PushXComResponse struct {
	Accepted        bool   `protobuf:"varint,1,opt,name=accepted,proto3" json:"accepted,omitempty"`
	RejectionReason string `protobuf:"bytes,2,opt,name=rejection_reason,json=rejectionReason,proto3" json:"rejection_reason,omitempty"` // empty if accepted
	TtlSeconds      int32  `protobuf:"varint,3,opt,name=ttl_seconds,json=ttlSeconds,proto3" json:"ttl_seconds,omitempty"`               // server-set TTL
	// contains filtered or unexported fields
}

type RegisterRequest struct {
	AgentVersion string            `protobuf:"bytes,1,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
	Hostname     string            `protobuf:"bytes,2,opt,name=hostname,proto3" json:"hostname,omitempty"`
	Environment  map[string]string `` // selected env vars for diagnostics
	/* 149-byte string literal not displayed */
	// contains filtered or unexported fields
}

type RegisterResponse struct {

	// Server-assigned correlation token for subsequent calls.
	SessionId string `protobuf:"bytes,1,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// Server clock for skew detection.
	ServerTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=server_time,json=serverTime,proto3" json:"server_time,omitempty"`
	// contains filtered or unexported fields
}

type ReportStateRequest struct {
	State        TaskState              `protobuf:"varint,1,opt,name=state,proto3,enum=leoflow.agent.v1.TaskState" json:"state,omitempty"`
	ExitCode     int32                  `protobuf:"varint,2,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`            // for terminal states
	ErrorMessage string                 `protobuf:"bytes,3,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"` // for failed state
	OccurredAt   *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=occurred_at,json=occurredAt,proto3" json:"occurred_at,omitempty"`
	// For TASK_STATE_UP_FOR_RESCHEDULE: the earliest time the scheduler may
	// re-dispatch this task instance (a reschedule-mode sensor poked not-ready).
	RescheduleAt *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=reschedule_at,json=rescheduleAt,proto3" json:"reschedule_at,omitempty"`
	// contains filtered or unexported fields
}

type ReportStateResponse struct {
	Acknowledged bool `protobuf:"varint,1,opt,name=acknowledged,proto3" json:"acknowledged,omitempty"`
	// If the Control Plane wants the task to stop (cancellation), it signals here.
	ShouldTerminate bool `protobuf:"varint,2,opt,name=should_terminate,json=shouldTerminate,proto3" json:"should_terminate,omitempty"`
	// contains filtered or unexported fields
}

type SlotFree struct {
	// contains filtered or unexported fields
}

type TaskSpec struct {
	TenantId         string                    `protobuf:"bytes,1,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	DagId            string                    `protobuf:"bytes,2,opt,name=dag_id,json=dagId,proto3" json:"dag_id,omitempty"`
	DagVersion       string                    `protobuf:"bytes,3,opt,name=dag_version,json=dagVersion,proto3" json:"dag_version,omitempty"`
	RunId            string                    `protobuf:"bytes,4,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	TaskId           string                    `protobuf:"bytes,5,opt,name=task_id,json=taskId,proto3" json:"task_id,omitempty"`
	TryNumber        int32                     `protobuf:"varint,6,opt,name=try_number,json=tryNumber,proto3" json:"try_number,omitempty"`
	Operator         string                    `protobuf:"bytes,7,opt,name=operator,proto3" json:"operator,omitempty"` // 'python', 'bash', 'airflow_operator'
	Entrypoint       string                    `protobuf:"bytes,8,opt,name=entrypoint,proto3" json:"entrypoint,omitempty"`
	Environment      map[string]string         `` /* 149-byte string literal not displayed */
	XcomInputMapping map[string]*XComUpstreams `` // param_name -> ordered list of upstream task_ids (1 = single, N = fan-in)
	/* 186-byte string literal not displayed */
	ExecutionTimeoutSeconds int32            ``                                                                                                                        /* 134-byte string literal not displayed */
	Extra                   *structpb.Struct `protobuf:"bytes,12,opt,name=extra,proto3" json:"extra,omitempty"`                                                        // operator-specific fields
	CallArgsJson            string           `protobuf:"bytes,13,opt,name=call_args_json,json=callArgsJson,proto3" json:"call_args_json,omitempty"`                    // TaskFlow literal call args, JSON-encoded (#115). Named call_args to leave 'params' free for Airflow's DAG-run params (#148).
	OperatorClass           string           `protobuf:"bytes,14,opt,name=operator_class,json=operatorClass,proto3" json:"operator_class,omitempty"`                   // For operator='airflow_operator': the dotted provider operator/sensor class the runtime imports and executes (ADR 0040).
	OperatorArgsJson        string           `protobuf:"bytes,15,opt,name=operator_args_json,json=operatorArgsJson,proto3" json:"operator_args_json,omitempty"`        // For operator='airflow_operator': the operator's constructor kwargs, JSON-encoded. Delivered to the runtime as LEOFLOW_OPERATOR_ARGS.
	LogicalDate             string           `protobuf:"bytes,16,opt,name=logical_date,json=logicalDate,proto3" json:"logical_date,omitempty"`                         // The DagRun's logical date, RFC3339. The agent derives the runtime's LEOFLOW_TS (this value) and LEOFLOW_DS (the date) so the standalone operator context has a real ds/ts (ADR 0040). Empty leaves them unset.
	DependsOn               []string         `protobuf:"bytes,17,rep,name=depends_on,json=dependsOn,proto3" json:"depends_on,omitempty"`                               // The task's upstream task_ids. The agent fetches each one's return_value and delivers them as the LEOFLOW_XCOM_BY_TASK map so a captured operator's ti.xcom_pull(<id>) resolves it (chained operators, ADR 0040).
	DataIntervalStart       string           `protobuf:"bytes,18,opt,name=data_interval_start,json=dataIntervalStart,proto3" json:"data_interval_start,omitempty"`     // The DagRun's data interval start, RFC3339. The agent stamps LEOFLOW_DATA_INTERVAL_START so the standalone operator context exposes data_interval_start (ADR 0040). Empty leaves it unset.
	DataIntervalEnd         string           `protobuf:"bytes,19,opt,name=data_interval_end,json=dataIntervalEnd,proto3" json:"data_interval_end,omitempty"`           // The DagRun's data interval end, RFC3339. Stamped as LEOFLOW_DATA_INTERVAL_END -> context data_interval_end. Empty leaves it unset.
	ParamsJson              string           `protobuf:"bytes,20,opt,name=params_json,json=paramsJson,proto3" json:"params_json,omitempty"`                            // The DagRun's params/conf, JSON-encoded (#148). Stamped as LEOFLOW_PARAMS so the standalone operator context exposes context['params'] / {{ params.X }}. Empty leaves params={}.
	FirstRescheduleAt       string           `protobuf:"bytes,21,opt,name=first_reschedule_at,json=firstRescheduleAt,proto3" json:"first_reschedule_at,omitempty"`     // For a reschedule-mode sensor re-dispatched after poking not-ready (#380): the time it FIRST entered reschedule, RFC3339. Stamped as LEOFLOW_FIRST_RESCHEDULE_AT so get_first_reschedule_date returns the real value and the sensor honors its cumulative timeout. Empty on the first attempt.
	MaxTries                int32            `protobuf:"varint,22,opt,name=max_tries,json=maxTries,proto3" json:"max_tries,omitempty"`                                 // The task's total attempt budget (retries + 1). The agent stamps LEOFLOW_MAX_TRIES so the runtime fires on_failure_callback only on the terminal attempt (try_number == max_tries), never on an intermediate retry (#424).
	OnFailureCallback       bool             `protobuf:"varint,23,opt,name=on_failure_callback,json=onFailureCallback,proto3" json:"on_failure_callback,omitempty"`    // The task declares an Airflow on_failure_callback (#424). The agent stamps LEOFLOW_ON_FAILURE_CALLBACK=1 so the runtime re-imports dag.py and runs it in-process on the task's final failure. The callable itself is not carried.
	DeclaredVariables       []string         `protobuf:"bytes,24,rep,name=declared_variables,json=declaredVariables,proto3" json:"declared_variables,omitempty"`       // The variable names this task declared (dexaflow.yaml). The agent asks a pod-side external secret resolver only for declared names, so declaration stays the scope authority for externally-sourced secrets too (ADR 0060 / ADR 0055).
	DeclaredConnections     []string         `protobuf:"bytes,25,rep,name=declared_connections,json=declaredConnections,proto3" json:"declared_connections,omitempty"` // The connection ids this task declared (dexaflow.yaml). Same role as declared_variables for connections.
	AttemptEpoch            int64            `protobuf:"varint,26,opt,name=attempt_epoch,json=attemptEpoch,proto3" json:"attempt_epoch,omitempty"`                     // Which execution of this try the agent is (ADR 0051 amendment), read from its verified token; 0 for a token minted before the epoch existed. Informational for the agent: the control plane fences on the token, never on this field.
	RunConfJson             string           `protobuf:"bytes,27,opt,name=run_conf_json,json=runConfJson,proto3" json:"run_conf_json,omitempty"`                       // The DagRun's conf alone, JSON-encoded ("{}" for a run without one), not layered with param defaults as params_json is (#1843). Stamped as LEOFLOW_RUN_CONF -> context dag_run.conf. Empty from a control plane that predates the field; the runtime then reports dag_run.conf as not provided.
	RunType                 string           `protobuf:"bytes,28,opt,name=run_type,json=runType,proto3" json:"run_type,omitempty"`                                     // The DagRun's type in the Task SDK's DagRunType vocabulary (manual, scheduled, backfill, asset_triggered) (#1843). Stamped as LEOFLOW_RUN_TYPE -> context dag_run.run_type. Empty leaves it unset.
	// contains filtered or unexported fields
}

type TaskState int32

type UnimplementedAgentServiceServer struct{}

type UnsafeAgentServiceServer interface {
	// contains filtered or unexported methods
}

type WorkAssignment struct {
	AssignmentId string `protobuf:"bytes,1,opt,name=assignment_id,json=assignmentId,proto3" json:"assignment_id,omitempty"` // control-plane-generated correlation id for this hand-off
	AttemptToken string `protobuf:"bytes,2,opt,name=attempt_token,json=attemptToken,proto3" json:"attempt_token,omitempty"` // per-attempt agent JWT the worker adopts for this attempt; NEVER logged
	DagRunId     string `protobuf:"bytes,3,opt,name=dag_run_id,json=dagRunId,proto3" json:"dag_run_id,omitempty"`
	TaskId       string `protobuf:"bytes,4,opt,name=task_id,json=taskId,proto3" json:"task_id,omitempty"`
	TryNumber    int32  `protobuf:"varint,5,opt,name=try_number,json=tryNumber,proto3" json:"try_number,omitempty"`
	DagVersionId string `protobuf:"bytes,6,opt,name=dag_version_id,json=dagVersionId,proto3" json:"dag_version_id,omitempty"` // the pool identity this assignment belongs to
	LeaseSeconds int64  `protobuf:"varint,7,opt,name=lease_seconds,json=leaseSeconds,proto3" json:"lease_seconds,omitempty"`  // ack deadline: unacked within it => the attempt is reclaimed
	AttemptEpoch int64  `protobuf:"varint,8,opt,name=attempt_epoch,json=attemptEpoch,proto3" json:"attempt_epoch,omitempty"`  // the execution of try_number this assignment is (ADR 0051 amendment); also carried in attempt_token, which is what the control plane fences on
	// dag_source is the version's dag.py when the version runs in source mode
	// (ADR 0067 §3, ADR 0095), empty otherwise. The worker writes it as dag.py
	// into a per-attempt directory and runs the attempt from there, as a
	// dedicated source-mode pod runs from its projected dag.py. Only a worker
	// that registered with source_delivery is sent one. At most
	// MaxSourceModeBytes (128 KiB), the cap register and dispatch apply.
	DagSource []byte `protobuf:"bytes,9,opt,name=dag_source,json=dagSource,proto3" json:"dag_source,omitempty"`
	// dag_source_sha256 is the lowercase hex SHA-256 of dag_source, set with
	// it. The worker refuses the assignment when the text it received does not
	// match.
	DagSourceSha256 string `protobuf:"bytes,10,opt,name=dag_source_sha256,json=dagSourceSha256,proto3" json:"dag_source_sha256,omitempty"`
	// contains filtered or unexported fields
}

type WorkerMessage struct {

	// Types that are valid to be assigned to Msg:
	//
	//	*WorkerMessage_Register
	//	*WorkerMessage_Ack
	//	*WorkerMessage_SlotFree
	Msg isWorkerMessage_Msg `protobuf_oneof:"msg"`
	// contains filtered or unexported fields
}

type WorkerMessage_Ack struct {
	Ack *AssignmentAck `protobuf:"bytes,2,opt,name=ack,proto3,oneof"`
}

type WorkerMessage_Register struct {
	Register *WorkerRegister `protobuf:"bytes,1,opt,name=register,proto3,oneof"`
}

type WorkerMessage_SlotFree struct {
	SlotFree *SlotFree `protobuf:"bytes,3,opt,name=slot_free,json=slotFree,proto3,oneof"`
}

type WorkerRegister struct {
	DagVersionId string `protobuf:"bytes,1,opt,name=dag_version_id,json=dagVersionId,proto3" json:"dag_version_id,omitempty"`
	// pod_name is the worker's OWN Kubernetes pod name, delivered to the
	// container via the downward API (LEOFLOW_POD_NAME). It is the durable key
	// the control plane binds a started attempt to (warm_worker_id on the running
	// TI) so a later reaper can match bound attempts against the live warm-pod set
	// ListWarmPods returns, even after a leader failover. Unlike an identity, it
	// is a locator, not a credential: the worker's authenticated identity still
	// comes from its bearer token on the stream context, never from this field.
	PodName string `protobuf:"bytes,2,opt,name=pod_name,json=podName,proto3" json:"pod_name,omitempty"`
	// attempt_home_sweep confirms that this worker runs with a per-attempt HOME
	// and empties /tmp and /dev/shm before and after every attempt (the
	// read-only-root isolation mode, LEOFLOW_WARM_ATTEMPT_HOME=1). A worker
	// built on an older runtime never sets it. With
	// execution.warm_read_only_root_filesystem on, the control plane logs and
	// meters a registration that does not confirm the sweep, and refuses it
	// when execution.warm_require_attempt_home_sweep is on too, so attempts run
	// on dedicated pods instead of on a worker that would leak those paths.
	AttemptHomeSweep bool `protobuf:"varint,3,opt,name=attempt_home_sweep,json=attemptHomeSweep,proto3" json:"attempt_home_sweep,omitempty"`
	// source_delivery confirms that this worker writes a WorkAssignment's
	// dag_source as dag.py and runs the attempt from it (ADR 0095). A worker
	// built on an older runtime never sets it, and the control plane never
	// places a source-mode attempt on such a worker: the attempt takes a
	// dedicated pod instead.
	SourceDelivery bool `protobuf:"varint,4,opt,name=source_delivery,json=sourceDelivery,proto3" json:"source_delivery,omitempty"`
	// contains filtered or unexported fields
}

type XComUpstreams struct {
	TaskIds []string `protobuf:"bytes,1,rep,name=task_ids,json=taskIds,proto3" json:"task_ids,omitempty"`
	// contains filtered or unexported fields
}