Regions with any is allowed too, and let the TEE say everything it is, not just region.

Author: nolag

go.mod

@@ -43,7 +43,7 @@ require (
 	github.com/smartcontractkit/chain-selectors v1.0.89
 	github.com/smartcontractkit/chainlink-common/pkg/chipingress v0.0.10
 	github.com/smartcontractkit/chainlink-protos/billing/go v0.0.0-20251024234028-0988426d98f4
-	github.com/smartcontractkit/chainlink-protos/cre/go v0.0.0-20260501133512-474ca53a440a
+	github.com/smartcontractkit/chainlink-protos/cre/go v0.0.0-20260501160256-5806971948f2
 	github.com/smartcontractkit/chainlink-protos/linking-service/go v0.0.0-20251002192024-d2ad9222409b
 	github.com/smartcontractkit/chainlink-protos/node-platform v0.0.0-20260205130626-db2a2aab956b
 	github.com/smartcontractkit/chainlink-protos/storage-service v0.3.0

go.sum

@@ -510,8 +510,8 @@ func TestRequirementSelectingModule_TriggerCache(t *testing.T) {
 	t.Run("different triggers route to different modules", func(t *testing.T) {
 		// subscription 0: TEE required → additional; subscription 1: no requirements → main
 		teeReqs := &sdk.Requirements{Tee: &sdk.Tee{
-			Type: &sdk.Tee_TypeSelection{TypeSelection: &sdk.TeeTypeSelection{
-				Types: []*sdk.TeeTypeAndRegions{{Type: sdk.TeeType_TEE_TYPE_AWS_NITRO}},
+			Item: &sdk.Tee_TeeTypesAndRegions{TeeTypesAndRegions: &sdk.TeeTypesAndRegions{
+				TeeTypeAndRegions: []*sdk.TeeTypeAndRegions{{Type: sdk.TeeType_TEE_TYPE_AWS_NITRO}},
 			}},
 		}}
 		var mainTriggerCalls int32

pkg/capabilities/v2/actions/confidentialworkflow/client.pb.go

@@ -1,52 +1,48 @@
 package host
 
-import (
-	"context"
-	"sync"
-
-	sdkpb "github.com/smartcontractkit/chainlink-protos/cre/go/sdk"
-)
+import sdkpb "github.com/smartcontractkit/chainlink-protos/cre/go/sdk"
 
 type teeProvider struct {
 	sdkpb.TeeType
-	regionsFn func(ctx context.Context) map[string]bool
-	once      sync.Once
+	regions map[string]bool
 }
 
-func NewTeeProvider(tpe sdkpb.TeeType, regionsFn func(ctx context.Context) []string) func(context.Context, *sdkpb.Tee) bool {
-	p := &teeProvider{
-		TeeType: tpe,
-		regionsFn: func(ctx context.Context) map[string]bool {
-			regions := regionsFn(ctx)
-			rMap := make(map[string]bool, len(regions))
-			for _, region := range regions {
-				rMap[region] = true
-			}
-			return rMap
-		},
+func NewTeeProvider(tpe sdkpb.TeeType, regions []string) func(tee *sdkpb.Tee) bool {
+	supportedRegions := map[string]bool{}
+	for _, region := range regions {
+		supportedRegions[region] = true
 	}
-	return p.Provides
+	return (&teeProvider{TeeType: tpe, regions: supportedRegions}).Provides
 }
 
-func (t *teeProvider) Provides(ctx context.Context, tee *sdkpb.Tee) bool {
-	switch teet := tee.Type.(type) {
-	case *sdkpb.Tee_Any:
-		return true
-	case *sdkpb.Tee_TypeSelection:
-		for _, selection := range teet.TypeSelection.Types {
-			if selection.Type == t.TeeType {
-				if len(selection.Regions) == 0 {
-					return true
-				}
-
-				regions := t.regionsFn(ctx)
-				for _, region := range selection.Regions {
-					if regions[region] {
-						return true
-					}
-				}
+func (t *teeProvider) Provides(tee *sdkpb.Tee) bool {
+	var regions []string
+	switch teet := tee.Item.(type) {
+	case *sdkpb.Tee_AnyRegions:
+		regions = teet.AnyRegions.Regions
+	case *sdkpb.Tee_TeeTypesAndRegions:
+		if teet.TeeTypesAndRegions == nil {
+			return false
+		}
+
+		found := false
+		for _, tr := range teet.TeeTypesAndRegions.TeeTypeAndRegions {
+			if tr.Type == t.TeeType {
+				found = true
+				regions = tr.Regions
+				break
 			}
 		}
+
+		if !found {
+			return false
+		}
+	}
+
+	for _, region := range regions {
+		if t.regions[region] {
+			return true
+		}
 	}
 
 	return false