confidentialworkflow

type ConfidentialWorkflowRequest struct {
	VaultDonSecrets []*SecretIdentifier `protobuf:"bytes,1,rep,name=vault_don_secrets,json=vaultDonSecrets,proto3" json:"vault_don_secrets,omitempty"`
	Execution       *WorkflowExecution  `protobuf:"bytes,2,opt,name=execution,proto3" json:"execution,omitempty"`
	// Deprecated: the per-node pre-signed URL approach is superseded. binary_url
	// now travels inside WorkflowExecution (PublicData) as a canonical locator,
	// with authentication to the storage service handled out of band by the fetch
	// sidecar. Retained for back-compat; no longer populated.
	//
	// Deprecated: Marked as deprecated in capabilities/compute/confidentialworkflow/v1alpha/client.proto.
	BinaryUrl string `protobuf:"bytes,3,opt,name=binary_url,json=binaryUrl,proto3" json:"binary_url,omitempty"`
	// contains filtered or unexported fields
}

type ConfidentialWorkflowResponse struct {

	// execution_result is a serialized sdk.v1alpha.ExecutionResult proto.
	ExecutionResult []byte `protobuf:"bytes,1,opt,name=execution_result,json=executionResult,proto3" json:"execution_result,omitempty"`
	// sdk_execution_result is the structured form of execution_result. It carries
	// the same sdk.v1alpha.ExecutionResult as the serialized execution_result
	// bytes field; the two are independent on the wire.
	SdkExecutionResult *sdk.ExecutionResult `protobuf:"bytes,2,opt,name=sdk_execution_result,json=sdkExecutionResult,proto3" json:"sdk_execution_result,omitempty"`
	// contains filtered or unexported fields
}

type ProvidedTeesResponse struct {
	Tee []*sdk.TeeTypeAndRegions `protobuf:"bytes,1,rep,name=tee,proto3" json:"tee,omitempty"`
	// contains filtered or unexported fields
}

type SecretIdentifier struct {
	Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	// namespace defaults to "main" when unset.
	Namespace *string `protobuf:"bytes,2,opt,name=namespace,proto3,oneof" json:"namespace,omitempty"`
	// contains filtered or unexported fields
}

type WorkflowExecution struct {

	// workflow_id identifies the workflow to execute.
	WorkflowId string `protobuf:"bytes,1,opt,name=workflow_id,json=workflowId,proto3" json:"workflow_id,omitempty"`
	// binary_url is the URL from which the enclave fetches the compiled WASM
	// binary. It lives inside WorkflowExecution (PublicData), covered by
	// ComputeRequest.Hash() for F+1 quorum, so every node agrees on the same
	// canonical locator. Authentication to the storage service is handled out of
	// band by the fetch sidecar, so this is a stable, node-agnostic locator
	// rather than a per-node pre-signed URL.
	BinaryUrl string `protobuf:"bytes,2,opt,name=binary_url,json=binaryUrl,proto3" json:"binary_url,omitempty"`
	// binary_hash is the expected SHA-256 hash of the WASM binary, for integrity verification.
	BinaryHash []byte `protobuf:"bytes,3,opt,name=binary_hash,json=binaryHash,proto3" json:"binary_hash,omitempty"`
	// execute_request is a serialized sdk.v1alpha.ExecuteRequest proto.
	// Contains either a subscribe request or a trigger execution request.
	ExecuteRequest []byte `protobuf:"bytes,4,opt,name=execute_request,json=executeRequest,proto3" json:"execute_request,omitempty"`
	// owner is the on-chain owner address of the workflow (hex, 0x-prefixed).
	// Used by the enclave for runtime secret fetching from VaultDON.
	Owner string `protobuf:"bytes,5,opt,name=owner,proto3" json:"owner,omitempty"`
	// execution_id is the unique execution identifier (64 hex chars, 32 bytes).
	// Used by the enclave for runtime secret fetching from VaultDON.
	ExecutionId string `protobuf:"bytes,6,opt,name=execution_id,json=executionId,proto3" json:"execution_id,omitempty"`
	// org_id is the organization identifier for the workflow owner.
	// Used by the enclave when fetching secrets from VaultDON with org-based ownership.
	OrgId string `protobuf:"bytes,7,opt,name=org_id,json=orgId,proto3" json:"org_id,omitempty"`
	// requirements describes what is needed to run this workflow (e.g. TEE type
	// and regions).
	Requirements *sdk.Requirements `protobuf:"bytes,8,opt,name=requirements,proto3" json:"requirements,omitempty"`
	// sdk_execute_request is the structured form of execute_request. It carries
	// the same sdk.v1alpha.ExecuteRequest as the serialized execute_request bytes
	// field; the two are independent on the wire (setting one does not populate
	// the other). Consumers that want the typed message read this; legacy
	// consumers continue to unmarshal execute_request.
	SdkExecuteRequest *sdk.ExecuteRequest `protobuf:"bytes,9,opt,name=sdk_execute_request,json=sdkExecuteRequest,proto3" json:"sdk_execute_request,omitempty"`
	// restrictions on the capabilities and the secrets.bool
	// This is sent to avoid overhead when a TEE is not compromised, the DON will verify the restrictions on its end as well.
	Restrictions *sdk.Restrictions `protobuf:"bytes,10,opt,name=restrictions,proto3" json:"restrictions,omitempty"`
	// contains filtered or unexported fields
}