npm - @opensoha/contracts - Versions diffs - 0.1.16 → 0.1.18 - Mend

@opensoha/contracts 0.1.16 → 0.1.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (391) hide show

package/fixtures/openapi/NetworkAccessGrant/invalid/token-digest.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "id": "grant-payroll-01",
+  "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+  "deviceId": "device-shanghai-001",
+  "siteId": "site-shanghai",
+  "networkSpaceId": "space-corp",
+  "mode": "external_direct_ztna",
+  "resourceIds": ["resource-payroll"],
+  "policyVersion": 12,
+  "status": "issued",
+  "createdBy": "f7f87a34-077d-4601-af8d-c142a34755f2",
+  "createdAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "tokenHash": "sha256:secret"
+}

package/fixtures/openapi/NetworkAccessGrant/valid/issued.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "id": "grant-payroll-01",
+  "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+  "deviceId": "device-shanghai-001",
+  "siteId": "site-shanghai",
+  "networkSpaceId": "space-corp",
+  "mode": "external_direct_ztna",
+  "resourceIds": ["resource-payroll"],
+  "policyVersion": 12,
+  "status": "issued",
+  "createdBy": "f7f87a34-077d-4601-af8d-c142a34755f2",
+  "createdAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z"
+}

package/fixtures/openapi/NetworkAccessGrantInput/invalid/no-resources.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "deviceId": "device-shanghai-001",
+  "siteId": "site-shanghai",
+  "networkSpaceId": "space-corp",
+  "mode": "external_direct_ztna",
+  "resourceIds": []
+}

package/fixtures/openapi/NetworkAccessGrantInput/valid/direct-ztna.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "deviceId": "device-shanghai-001",
+  "siteId": "site-shanghai",
+  "networkSpaceId": "space-corp",
+  "mode": "external_direct_ztna",
+  "resourceIds": ["resource-payroll"],
+  "ttlSeconds": 300
+}

package/fixtures/openapi/NetworkAccessGrantSecret/invalid/short-token.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "grant": {
+    "id": "grant-payroll-01",
+    "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+    "deviceId": "device-shanghai-001",
+    "siteId": "site-shanghai",
+    "networkSpaceId": "space-corp",
+    "mode": "external_direct_ztna",
+    "resourceIds": ["resource-payroll"],
+    "policyVersion": 12,
+    "status": "issued",
+    "createdBy": "f7f87a34-077d-4601-af8d-c142a34755f2",
+    "createdAt": "2026-09-03T08:00:00Z",
+    "expiresAt": "2026-09-03T08:05:00Z"
+  },
+  "token": "too-short"
+}

package/fixtures/openapi/NetworkAccessGrantSecret/valid/issued.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "grant": {
+    "id": "grant-payroll-01",
+    "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+    "deviceId": "device-shanghai-001",
+    "siteId": "site-shanghai",
+    "networkSpaceId": "space-corp",
+    "mode": "external_direct_ztna",
+    "resourceIds": ["resource-payroll"],
+    "policyVersion": 12,
+    "status": "issued",
+    "createdBy": "f7f87a34-077d-4601-af8d-c142a34755f2",
+    "createdAt": "2026-09-03T08:00:00Z",
+    "expiresAt": "2026-09-03T08:05:00Z"
+  },
+  "token": "0123456789abcdef0123456789abcdef"
+}

package/fixtures/openapi/NetworkAccessPolicy/invalid/missing-version.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "accessProfile": "full",
+  "createdAt": "2026-09-02T05:00:00Z",
+  "deviceStatuses": ["active"],
+  "effect": "allow",
+  "enabled": true,
+  "id": "policy-engineering",
+  "modes": ["internal_ztna"],
+  "name": "Missing version",
+  "postureStatuses": ["compliant"],
+  "priority": 100,
+  "resourceIds": [],
+  "siteIds": [],
+  "subjects": {
+    "tags": [],
+    "teams": [],
+    "users": []
+  },
+  "updatedAt": "2026-09-02T05:20:00Z"
+}

package/fixtures/openapi/NetworkAccessPolicy/valid/published-draft.json ADDED Viewed

@@ -0,0 +1,21 @@
+{
+  "accessProfile": "full",
+  "createdAt": "2026-09-02T05:00:00Z",
+  "deviceStatuses": ["active"],
+  "effect": "allow",
+  "enabled": true,
+  "id": "policy-engineering",
+  "modes": ["internal_ztna", "external_vpn_ztna"],
+  "name": "Engineering protected access",
+  "postureStatuses": ["compliant"],
+  "priority": 100,
+  "resourceIds": ["resource-git"],
+  "siteIds": ["site-hq"],
+  "subjects": {
+    "tags": ["employee"],
+    "teams": ["team-engineering"],
+    "users": []
+  },
+  "updatedAt": "2026-09-02T05:20:00Z",
+  "version": 2
+}

package/fixtures/openapi/NetworkAccessPolicyInput/invalid/duplicate-team.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "accessProfile": "full",
+  "deviceStatuses": ["active"],
+  "effect": "allow",
+  "enabled": true,
+  "modes": ["internal_ztna"],
+  "name": "Duplicate team selector",
+  "postureStatuses": ["compliant"],
+  "priority": 100,
+  "resourceIds": [],
+  "siteIds": [],
+  "subjects": {
+    "tags": [],
+    "teams": ["team-engineering", "team-engineering"],
+    "users": []
+  }
+}

package/fixtures/openapi/NetworkAccessPolicyInput/valid/team-and-tag-allow.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "accessProfile": "full",
+  "deviceStatuses": ["active"],
+  "effect": "allow",
+  "enabled": true,
+  "modes": ["internal_ztna", "external_vpn_ztna"],
+  "name": "Engineering protected access",
+  "postureStatuses": ["compliant"],
+  "priority": 100,
+  "resourceIds": ["resource-git"],
+  "siteIds": ["site-hq"],
+  "subjects": {
+    "tags": ["employee"],
+    "teams": ["team-engineering"],
+    "users": []
+  }
+}

package/fixtures/openapi/NetworkConflictAnalysisRequest/invalid/ipv6-range.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "runtimeRanges": [
+    {
+      "cidr": "fd00::/64",
+      "name": "Unsupported IPv6 overlay",
+      "sourceType": "wireguard_overlay"
+    }
+  ]
+}

package/fixtures/openapi/NetworkConflictAnalysisRequest/valid/runtime-ranges.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "runtimeRanges": [
+    {
+      "cidr": "100.96.0.0/12",
+      "name": "WireGuard overlay",
+      "sourceId": "gateway-hq",
+      "sourceType": "wireguard_overlay"
+    },
+    {
+      "cidr": "198.18.0.0/15",
+      "name": "mihomo fake IP",
+      "sourceType": "mihomo_fake_ip"
+    }
+  ]
+}

package/fixtures/openapi/NetworkConnectionOption/invalid/secret.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "siteId": "site-a",
+  "siteName": "上海总部",
+  "accessMedium": "wifi",
+  "ssid": "Soha-Staff",
+  "authentication": "radius_802_1x",
+  "accessProfile": "full",
+  "policyVersion": 7,
+  "password": "must-never-enter-public-dtos"
+}

package/fixtures/openapi/NetworkConnectionOption/valid/wifi.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "siteId": "site-a",
+  "siteName": "上海总部",
+  "accessMedium": "wifi",
+  "ssid": "Soha-Staff",
+  "authentication": "radius_802_1x",
+  "accessProfile": "full",
+  "policyVersion": 7
+}

package/fixtures/openapi/NetworkConnectionOption/valid/wired.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "siteId": "site-a",
+  "siteName": "上海总部",
+  "accessMedium": "wired",
+  "authentication": "radius_802_1x",
+  "accessProfile": "restricted",
+  "policyVersion": 7
+}

package/fixtures/openapi/NetworkGateway/invalid/missing-site.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "id": "gateway-01",
+  "name": "Shanghai Gateway",
+  "status": "online",
+  "createdAt": "2026-09-01T08:00:00Z",
+  "updatedAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkGateway/valid/online.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "id": "gateway-01",
+  "runtimeId": "gateway-site-a",
+  "siteId": "site-shanghai",
+  "name": "Shanghai Gateway",
+  "administrativeStatus": "active",
+  "status": "online",
+  "publicEndpointHost": "vpn.example.com",
+  "publicEndpointPort": 51820,
+  "overlayCidr": "100.96.10.0/24",
+  "routingMode": "routed",
+  "advertisedCidrs": ["10.20.0.0/16"],
+  "mtu": 1380,
+  "persistentKeepaliveSeconds": 25,
+  "dnsServers": ["10.20.0.53"],
+  "wireguardPublicKey": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+  "version": "0.1.0",
+  "policyVersion": 7,
+  "capabilities": ["wireguard", "access_proxy"],
+  "lastHeartbeatAt": "2026-09-02T08:00:00Z",
+  "createdAt": "2026-09-01T08:00:00Z",
+  "updatedAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkGatewayInput/invalid/default-route-overlay.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "runtimeId": "gateway-site-a",
+  "siteId": "site-shanghai",
+  "name": "Shanghai Gateway",
+  "administrativeStatus": "active",
+  "publicEndpointHost": "vpn.example.com",
+  "publicEndpointPort": 51820,
+  "overlayCidr": "0.0.0.0/0",
+  "routingMode": "routed",
+  "mtu": 1380,
+  "persistentKeepaliveSeconds": 25,
+  "dnsServers": []
+}

package/fixtures/openapi/NetworkGatewayInput/valid/routed.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "runtimeId": "gateway-site-a",
+  "siteId": "site-shanghai",
+  "name": "Shanghai Gateway",
+  "administrativeStatus": "active",
+  "publicEndpointHost": "vpn.example.com",
+  "publicEndpointPort": 51820,
+  "overlayCidr": "100.96.10.0/24",
+  "routingMode": "routed",
+  "advertisedCidrs": ["10.20.0.0/16"],
+  "mtu": 1380,
+  "persistentKeepaliveSeconds": 25,
+  "dnsServers": ["10.20.0.53"]
+}

package/fixtures/openapi/NetworkLease/invalid/empty-cidrs.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "id": "network-lease-01",
+  "sessionId": "session-01",
+  "subjectId": "user-01",
+  "deviceId": "device-01",
+  "networkSpaceId": "space-corp",
+  "cidrs": [],
+  "policyVersion": 9,
+  "status": "active",
+  "issuedAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T09:00:00Z"
+}

package/fixtures/openapi/NetworkLease/valid/active.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "id": "network-lease-01",
+  "sessionId": "session-01",
+  "subjectId": "user-01",
+  "deviceId": "device-01",
+  "networkSpaceId": "space-corp",
+  "cidrs": ["10.20.0.0/16"],
+  "policyVersion": 9,
+  "status": "active",
+  "issuedAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T09:00:00Z"
+}

package/fixtures/openapi/NetworkMihomoProfile/invalid/subscription-leak.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "id": "profile-corporate-egress",
+  "deviceId": "device-alice-laptop",
+  "name": "Corporate egress",
+  "mode": "managed_follow",
+  "status": "active",
+  "subscriptionConfigured": true,
+  "subscriptionUrl": "https://subscriptions.example.com/must-not-leak",
+  "revision": 4,
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "disabled",
+  "selectorGroup": "SOHA",
+  "selectedProxy": "corporate-hk",
+  "bypassCidrs": [],
+  "bypassHosts": [],
+  "failClosed": true,
+  "createdAt": "2026-09-03T08:00:00Z",
+  "updatedAt": "2026-09-03T08:05:00Z"
+}

package/fixtures/openapi/NetworkMihomoProfile/valid/managed.json ADDED Viewed

@@ -0,0 +1,21 @@
+{
+  "id": "profile-corporate-egress",
+  "deviceId": "device-alice-laptop",
+  "name": "Corporate egress",
+  "mode": "managed_follow",
+  "sourceType": "managed_subscription",
+  "status": "active",
+  "subscriptionConfigured": true,
+  "manualNodeConfigured": false,
+  "revision": 4,
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "disabled",
+  "selectorGroup": "SOHA",
+  "selectedProxy": "corporate-hk",
+  "bypassCidrs": ["10.20.0.0/16"],
+  "bypassHosts": ["network-control.example.com"],
+  "failClosed": true,
+  "createdAt": "2026-09-03T08:00:00Z",
+  "updatedAt": "2026-09-03T08:05:00Z"
+}

package/fixtures/openapi/NetworkMihomoProfileInput/invalid/app-subscription-secret.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "deviceId": "device-bob-laptop",
+  "name": "Personal subscription",
+  "mode": "app_subscription",
+  "status": "active",
+  "subscriptionUrl": "https://subscriptions.example.com/should-stay-local",
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "disabled",
+  "selectorGroup": "SOHA",
+  "bypassCidrs": [],
+  "bypassHosts": [],
+  "failClosed": false
+}

package/fixtures/openapi/NetworkMihomoProfileInput/invalid/manual-node-with-subscription.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "deviceId": "device-alice-laptop",
+  "name": "Invalid mixed source",
+  "mode": "managed_follow",
+  "sourceType": "manual_node",
+  "status": "active",
+  "subscriptionUrl": "https://subscriptions.example.com/mihomo/token-value",
+  "manualNode": {
+    "protocol": "socks5",
+    "server": "proxy.example.com",
+    "port": 1080
+  },
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "disabled",
+  "selectorGroup": "SOHA",
+  "bypassCidrs": [],
+  "bypassHosts": [],
+  "failClosed": true
+}

package/fixtures/openapi/NetworkMihomoProfileInput/valid/app-subscription.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "deviceId": "device-bob-laptop",
+  "name": "Personal subscription",
+  "mode": "app_subscription",
+  "status": "active",
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "fake_ip",
+  "fakeIpRange": "198.18.0.0/15",
+  "selectorGroup": "SOHA",
+  "bypassCidrs": [],
+  "bypassHosts": ["network-control.example.com"],
+  "failClosed": false
+}

package/fixtures/openapi/NetworkMihomoProfileInput/valid/managed.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "deviceId": "device-alice-laptop",
+  "name": "Corporate egress",
+  "mode": "managed_follow",
+  "sourceType": "managed_subscription",
+  "status": "active",
+  "subscriptionUrl": "https://subscriptions.example.com/mihomo/token-value",
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "disabled",
+  "selectorGroup": "SOHA",
+  "selectedProxy": "corporate-hk",
+  "bypassCidrs": ["10.20.0.0/16"],
+  "bypassHosts": ["network-control.example.com"],
+  "failClosed": true
+}

package/fixtures/openapi/NetworkMihomoProfileInput/valid/manual-node.json ADDED Viewed

@@ -0,0 +1,21 @@
+{
+  "deviceId": "device-alice-laptop",
+  "name": "Branch proxy",
+  "mode": "managed_follow",
+  "sourceType": "manual_node",
+  "status": "active",
+  "manualNode": {
+    "protocol": "https",
+    "server": "proxy.example.com",
+    "port": 8443,
+    "username": "alice",
+    "password": "secret"
+  },
+  "mixedPort": 7890,
+  "controllerPort": 9090,
+  "dnsMode": "disabled",
+  "selectorGroup": "SOHA",
+  "bypassCidrs": ["10.20.0.0/16"],
+  "bypassHosts": ["network-control.example.com"],
+  "failClosed": true
+}

package/fixtures/openapi/NetworkNASBinding/invalid/secret.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "id": "nas-binding-site-a-wifi",
+  "nasId": "nas-site-a-wifi",
+  "runtimeId": "freeradius-site-a",
+  "siteId": "site-a",
+  "name": "Site A Wi-Fi",
+  "status": "active",
+  "coaSupported": true,
+  "disconnectSupported": true,
+  "sharedSecret": "must-never-enter-public-dtos",
+  "createdAt": "2026-09-02T08:00:00Z",
+  "updatedAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkNASBinding/valid/default.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "id": "nas-binding-site-a-wifi",
+  "nasId": "nas-site-a-wifi",
+  "runtimeId": "freeradius-site-a",
+  "siteId": "site-a",
+  "name": "Site A Wi-Fi",
+  "accessMedium": "wifi",
+  "deviceType": "wireless_controller",
+  "ssid": "Soha-Staff",
+  "managementAddress": "10.0.10.2",
+  "status": "active",
+  "coaSupported": true,
+  "disconnectSupported": true,
+  "createdAt": "2026-09-02T08:00:00Z",
+  "updatedAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkNASBindingInput/invalid/secret.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "nasId": "nas-site-a-wifi",
+  "runtimeId": "freeradius-site-a",
+  "siteId": "site-a",
+  "name": "Site A Wi-Fi",
+  "status": "active",
+  "coaSupported": true,
+  "disconnectSupported": true,
+  "sharedSecret": "must-never-enter-public-dtos"
+}

package/fixtures/openapi/NetworkNASBindingInput/valid/default.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "nasId": "nas-site-a-wifi",
+  "runtimeId": "freeradius-site-a",
+  "siteId": "site-a",
+  "name": "Site A Wi-Fi",
+  "accessMedium": "wifi",
+  "deviceType": "wireless_controller",
+  "ssid": "Soha-Staff",
+  "managementAddress": "10.0.10.2",
+  "status": "active",
+  "coaSupported": true,
+  "disconnectSupported": true
+}

package/fixtures/openapi/NetworkPolicyPreviewRequest/invalid/unknown-mode.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "subjectUserId": "user-01",
+  "deviceId": "device-01",
+  "resourceId": "resource-git",
+  "mode": "implicit_trust"
+}

package/fixtures/openapi/NetworkPolicyPreviewRequest/valid/external-direct-ztna.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "subjectUserId": "user-01",
+  "deviceId": "device-01",
+  "resourceId": "resource-git",
+  "mode": "external_direct_ztna"
+}

package/fixtures/openapi/NetworkPolicyPreviewRequest/valid/external-vpn-ztna.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "subjectUserId": "user-01",
+  "deviceId": "device-01",
+  "resourceId": "resource-git",
+  "mode": "external_vpn_ztna"
+}

package/fixtures/openapi/NetworkPolicyPreviewRequest/valid/external-vpn.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "subjectUserId": "user-01",
+  "deviceId": "device-01",
+  "resourceId": "resource-intranet",
+  "mode": "external_vpn"
+}

package/fixtures/openapi/NetworkPolicyPreviewRequest/valid/internal-direct.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "subjectUserId": "user-01",
+  "deviceId": "device-01",
+  "resourceId": "resource-intranet",
+  "siteId": "site-shanghai",
+  "mode": "internal_direct"
+}

package/fixtures/openapi/NetworkPolicyPreviewRequest/valid/internal-ztna.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "subjectUserId": "user-01",
+  "deviceId": "device-01",
+  "resourceId": "resource-git",
+  "siteId": "site-shanghai",
+  "mode": "internal_ztna"
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/invalid/bypass-path.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "decision": "allow",
+  "path": "bypass",
+  "policyVersion": 7,
+  "protected": true,
+  "networkLeaseRequired": false,
+  "resourceLeaseRequired": false,
+  "reasons": []
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/valid/onboarding.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "decision": "allow",
+  "path": "site_direct",
+  "policyVersion": 8,
+  "protected": false,
+  "networkProfile": "onboarding",
+  "networkLeaseRequired": false,
+  "resourceLeaseRequired": false,
+  "reasons": ["policy_allow:onboarding"]
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/valid/protected-broad-path-denied.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "decision": "deny",
+  "path": "deny",
+  "policyVersion": 8,
+  "protected": true,
+  "networkLeaseRequired": false,
+  "resourceLeaseRequired": false,
+  "reasons": ["protected_resource_requires_ztna"]
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/valid/protected-resource.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "decision": "allow",
+  "path": "wireguard_ztna",
+  "policyVersion": 7,
+  "protected": true,
+  "networkLeaseRequired": true,
+  "resourceLeaseRequired": true,
+  "reasons": ["team_allowed", "device_compliant", "protected_resource"]
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/valid/quarantine.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "decision": "allow",
+  "path": "wireguard_ztna",
+  "policyVersion": 8,
+  "protected": true,
+  "networkProfile": "quarantine",
+  "networkLeaseRequired": false,
+  "resourceLeaseRequired": true,
+  "reasons": ["policy_allow:quarantine"]
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/valid/restricted.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "decision": "allow",
+  "path": "wireguard",
+  "policyVersion": 8,
+  "protected": false,
+  "networkProfile": "restricted",
+  "networkLeaseRequired": true,
+  "resourceLeaseRequired": false,
+  "reasons": ["policy_allow:restricted"]
+}

package/fixtures/openapi/NetworkPolicySnapshot/invalid/zero-version.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "contentHash": "sha256:4ca9f285bf5f0ac81f7fdb14fdac6f7388a9ee5dba0b39d9bcc8b55ed49e65df",
+  "policyCount": 0,
+  "policyVersion": 0,
+  "protectedResourceCount": 0,
+  "publishedAt": "2026-09-02T05:30:00Z"
+}