From 0f929ebe3627517841cd12cb8d84b68300f43590 Mon Sep 17 00:00:00 2001 From: Bolek Kulbabinski <1416262+bolekk@users.noreply.github.com> Date: Thu, 15 Oct 2026 23:01:40 -0400 Subject: [PATCH] cre-6798: add DonName to confidential relay request params With ShardIndex alone the gateway cannot tell which DON's shard is meant when a service has several DONs. DonName is the node's GatewayConnector DonID minus the _shard-N suffix. Co-Authored-By: Claude Sonnet 5.5 --- .../v2/actions/confidentialrelay/types.go | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/pkg/capabilities/v2/actions/confidentialrelay/types.go b/pkg/capabilities/v2/actions/confidentialrelay/types.go index 0380ecdb17..1c77a271f3 100644 --- a/pkg/capabilities/v2/actions/confidentialrelay/types.go +++ b/pkg/capabilities/v2/actions/confidentialrelay/types.go @@ -96,10 +96,10 @@ type SecretsRequestParams struct { // Attestation, it is authorization input and is excluded from the response hash. SignedComputeRequests []SignedComputeRequest `json:"signed_compute_requests,omitempty"` - // ShardIndex selects which gateway DON shard relays this request. It is gateway - // routing metadata: the relay DON does not read it and it is excluded from - // the response hash. A request that omits it defaults to shard 0. - ShardIndex int `json:"shard_index,omitempty"` + // Name and shard index of the workflow DON that started current execution. + // Need to match the name and index configured on Gateway nodes. + WorkflowDonName string `json:"workflow_don_name,omitempty"` + WorkflowDONShardIndex int `json:"workflow_don_shard_index,omitempty"` } // SecretEntry is a single secret in the relay DON's response. @@ -234,8 +234,10 @@ type CapabilityRequestParams struct { EnclaveConfig *EnclaveConfig `json:"enclave_config,omitempty"` Attestation string `json:"attestation,omitempty"` - // ShardIndex selects which gateway DON shard relays this request. - ShardIndex int `json:"shard_index,omitempty"` + // Name and shard index of the workflow DON that started current execution. + // Need to match the name and index configured on Gateway nodes. + WorkflowDonName string `json:"workflow_don_name,omitempty"` + WorkflowDONShardIndex int `json:"workflow_don_shard_index,omitempty"` } // CapabilityResponseResult is the JSON-RPC result for "confidential.capability.execute".