npm - @opensoha/contracts - Versions diffs - 0.1.16 → 0.1.18 - Mend

@opensoha/contracts 0.1.16 → 0.1.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (391) hide show

package/fixtures/openapi/NetworkPolicySnapshot/valid/published.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "contentHash": "sha256:4ca9f285bf5f0ac81f7fdb14fdac6f7388a9ee5dba0b39d9bcc8b55ed49e65df",
+  "policyCount": 3,
+  "policyVersion": 7,
+  "protectedResourceCount": 2,
+  "publishedAt": "2026-09-02T05:30:00Z"
+}

package/fixtures/openapi/NetworkResourceInput/invalid/invalid-port.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "spaceId": "space-corp",
+  "name": "Git service",
+  "kind": "cidr",
+  "target": "10.42.8.0/24",
+  "protected": true,
+  "protocol": "tcp",
+  "ports": [70000],
+  "pathMode": "wireguard_ztna"
+}

package/fixtures/openapi/NetworkResourceInput/valid/protected-cidr.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "spaceId": "space-corp",
+  "name": "Git service",
+  "kind": "cidr",
+  "target": "10.42.8.0/24",
+  "protected": true,
+  "protocol": "tcp",
+  "ports": [443],
+  "pathMode": "wireguard_ztna"
+}

package/fixtures/openapi/NetworkRuntimeEnrollmentInput/invalid/excessive-ttl.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "runtimeId": "endpoint-shanghai-001",
+  "runtimeKind": "endpoint",
+  "deviceId": "device-shanghai-001",
+  "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+  "ttlSeconds": 601
+}

package/fixtures/openapi/NetworkRuntimeEnrollmentInput/valid/endpoint.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "runtimeId": "endpoint-shanghai-001",
+  "runtimeKind": "endpoint",
+  "deviceId": "device-shanghai-001",
+  "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+  "ttlSeconds": 600
+}

package/fixtures/openapi/NetworkRuntimeEnrollmentSecret/invalid/short-token.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "enrollment": {
+    "id": "enrollment-01",
+    "challengeId": "challenge-01",
+    "runtimeId": "endpoint-shanghai-001",
+    "runtimeKind": "endpoint",
+    "deviceId": "device-shanghai-001",
+    "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+    "status": "pending",
+    "expiresAt": "2026-09-02T10:10:00Z",
+    "createdBy": "1f449d94-682c-4fe7-a73b-df2741380197",
+    "createdAt": "2026-09-02T10:00:00Z"
+  },
+  "token": "too-short"
+}

package/fixtures/openapi/NetworkRuntimeEnrollmentSecret/valid/pending.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "enrollment": {
+    "id": "enrollment-01",
+    "challengeId": "challenge-01",
+    "runtimeId": "endpoint-shanghai-001",
+    "runtimeKind": "endpoint",
+    "deviceId": "device-shanghai-001",
+    "subjectId": "f7f87a34-077d-4601-af8d-c142a34755f2",
+    "status": "pending",
+    "expiresAt": "2026-09-02T10:10:00Z",
+    "createdBy": "1f449d94-682c-4fe7-a73b-df2741380197",
+    "createdAt": "2026-09-02T10:00:00Z"
+  },
+  "token": "0123456789abcdef0123456789abcdef"
+}

package/fixtures/openapi/NetworkSession/invalid/unknown-status.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "id": "session-01",
+  "subjectId": "user-01",
+  "deviceId": "device-01",
+  "mode": "external_vpn",
+  "path": "wireguard",
+  "accessProfile": "full",
+  "status": "connected",
+  "policyVersion": 9,
+  "networkLeaseIds": ["network-lease-01"],
+  "resourceLeaseIds": [],
+  "startedAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T09:00:00Z"
+}

package/fixtures/openapi/NetworkSession/valid/restricted-vpn-ztna.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "id": "session-01",
+  "subjectId": "user-01",
+  "deviceId": "device-01",
+  "siteId": "site-shanghai",
+  "gatewayId": "gateway-shanghai",
+  "mode": "external_vpn_ztna",
+  "path": "wireguard_ztna",
+  "accessProfile": "restricted",
+  "status": "restricted",
+  "policyVersion": 9,
+  "networkLeaseIds": ["network-lease-01"],
+  "resourceLeaseIds": ["resource-lease-01"],
+  "startedAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T09:00:00Z"
+}

package/fixtures/openapi/NetworkSessionActionExecuteInput/invalid/short-hash.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "action": "coa",
+  "targetAccessProfile": "restricted",
+  "reasonCode": "device_posture_changed",
+  "planHash": "sha256:short"
+}

package/fixtures/openapi/NetworkSessionActionExecuteInput/valid/restrict.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "action": "coa",
+  "targetAccessProfile": "restricted",
+  "reasonCode": "device_posture_changed",
+  "planHash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+}

package/fixtures/openapi/NetworkSessionActionInput/invalid/unknown-action.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "action": "vendor-coa",
+  "targetAccessProfile": "restricted",
+  "reasonCode": "device_posture_changed"
+}

package/fixtures/openapi/NetworkSessionActionInput/valid/restrict.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "action": "coa",
+  "targetAccessProfile": "restricted",
+  "reasonCode": "device_posture_changed"
+}

package/fixtures/openapi/NetworkSessionActionPlan/invalid/missing-hash.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "sessionId": "session-1",
+  "runtimeId": "freeradius-hq",
+  "nasId": "nas-hq",
+  "requestedAction": "coa",
+  "effectiveAction": "coa",
+  "currentAccessProfile": "full",
+  "targetAccessProfile": "restricted",
+  "reasonCode": "device_posture_changed",
+  "willDisconnect": false,
+  "commandExpiresAt": "2026-09-02T08:05:00Z"
+}

package/fixtures/openapi/NetworkSessionActionPlan/valid/fallback-disconnect.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "sessionId": "session-1",
+  "runtimeId": "freeradius-hq",
+  "nasId": "nas-hq",
+  "requestedAction": "coa",
+  "effectiveAction": "disconnect",
+  "currentAccessProfile": "full",
+  "targetAccessProfile": "restricted",
+  "reasonCode": "device_posture_changed",
+  "willDisconnect": true,
+  "commandExpiresAt": "2026-09-02T08:05:00Z",
+  "planHash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+}

package/fixtures/openapi/NetworkSessionCommand/invalid/unknown-status.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "id": "command-1",
+  "sessionId": "session-1",
+  "runtimeId": "freeradius-hq",
+  "nasId": "nas-hq",
+  "action": "coa",
+  "targetAccessProfile": "restricted",
+  "policyVersion": 7,
+  "status": "running",
+  "reasonCode": "device_posture_changed",
+  "effectiveAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "createdAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkSessionCommand/valid/pending.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "id": "command-1",
+  "sessionId": "session-1",
+  "runtimeId": "freeradius-hq",
+  "nasId": "nas-hq",
+  "action": "coa",
+  "targetAccessProfile": "restricted",
+  "policyVersion": 7,
+  "status": "pending",
+  "reasonCode": "device_posture_changed",
+  "effectiveAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "createdAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkSiteInput/invalid/unknown-status.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "name": "Shanghai Office",
+  "status": "unknown"
+}

package/fixtures/openapi/NetworkSiteInput/valid/shanghai.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "name": "Shanghai Office",
+  "status": "active",
+  "location": "Shanghai"
+}

package/fixtures/openapi/NetworkSiteProfileBinding/invalid/vlan.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "id": "site-a-full",
+  "siteId": "site-a",
+  "accessProfile": "full",
+  "vlanId": 4095,
+  "sessionTimeoutSeconds": 3600,
+  "createdAt": "2026-09-02T08:00:00Z",
+  "updatedAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkSiteProfileBinding/valid/default.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "id": "site-a-full",
+  "siteId": "site-a",
+  "accessProfile": "full",
+  "vlanId": 20,
+  "filterId": "soha-full",
+  "sessionTimeoutSeconds": 3600,
+  "createdAt": "2026-09-02T08:00:00Z",
+  "updatedAt": "2026-09-02T08:00:00Z"
+}

package/fixtures/openapi/NetworkSiteProfileBindingInput/invalid/timeout.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "siteId": "site-a",
+  "accessProfile": "quarantine",
+  "vlanId": 90,
+  "filterId": "soha-quarantine",
+  "sessionTimeoutSeconds": 0
+}

package/fixtures/openapi/NetworkSiteProfileBindingInput/valid/default.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "siteId": "site-a",
+  "accessProfile": "quarantine",
+  "vlanId": 90,
+  "filterId": "soha-quarantine",
+  "sessionTimeoutSeconds": 300
+}

package/fixtures/openapi/NetworkSpaceInput/invalid/empty-cidrs.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "siteId": "site-shanghai",
+  "name": "Corporate LAN",
+  "status": "active",
+  "cidrs": []
+}

package/fixtures/openapi/NetworkSpaceInput/invalid/malformed-cidr.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "siteId": "site-shanghai",
+  "name": "Corporate LAN",
+  "status": "active",
+  "cidrs": ["10.999.0.0/16"]
+}

package/fixtures/openapi/NetworkSpaceInput/valid/corp.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "siteId": "site-shanghai",
+  "name": "Corporate LAN",
+  "status": "active",
+  "cidrs": ["10.42.0.0/16"]
+}

package/fixtures/openapi/NetworkTelemetrySummary/invalid/raw-destination.json ADDED Viewed

@@ -0,0 +1,29 @@
+{
+  "from": "2026-09-03T00:00:00Z",
+  "to": "2026-09-03T01:00:00Z",
+  "eventCount": 1,
+  "heartbeatCount": 0,
+  "radiusAccountingCount": 0,
+  "networkFlowCount": 0,
+  "connectionSummaryCount": 0,
+  "proxyFlowCount": 1,
+  "uploadBytes": 1,
+  "downloadBytes": 2,
+  "activeConnections": 1,
+  "producers": [],
+  "proxyFlows": [
+    {
+      "producerId": "endpoint-01",
+      "engine": "mihomo",
+      "profileId": "profile-01",
+      "profileRevision": 1,
+      "mode": "managed_follow",
+      "selectedProxy": "edge-a",
+      "uploadBytes": 1,
+      "downloadBytes": 2,
+      "activeConnections": 1,
+      "lastOccurredAt": "2026-09-03T00:59:00Z",
+      "destinationHost": "must-not-leave-ingest"
+    }
+  ]
+}

package/fixtures/openapi/NetworkTelemetrySummary/valid/proxy-flow.json ADDED Viewed

@@ -0,0 +1,36 @@
+{
+  "from": "2026-09-03T00:00:00Z",
+  "to": "2026-09-03T01:00:00Z",
+  "eventCount": 8,
+  "heartbeatCount": 4,
+  "radiusAccountingCount": 1,
+  "networkFlowCount": 0,
+  "connectionSummaryCount": 1,
+  "proxyFlowCount": 2,
+  "uploadBytes": 1024,
+  "downloadBytes": 4096,
+  "activeConnections": 3,
+  "producers": [
+    {
+      "producerId": "endpoint-shanghai-01",
+      "producerKind": "endpoint",
+      "lastSeenAt": "2026-09-03T00:59:00Z",
+      "gapCount": 0,
+      "regressionCount": 0
+    }
+  ],
+  "proxyFlows": [
+    {
+      "producerId": "endpoint-shanghai-01",
+      "engine": "mihomo",
+      "profileId": "profile-01",
+      "profileRevision": 2,
+      "mode": "app_subscription",
+      "selectedProxy": "edge-a",
+      "uploadBytes": 1024,
+      "downloadBytes": 4096,
+      "activeConnections": 3,
+      "lastOccurredAt": "2026-09-03T00:59:00Z"
+    }
+  ]
+}

package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/auto-with-gateway.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "deviceId": "device-1",
+  "profileId": "profile-1",
+  "selection": "auto",
+  "gatewayId": "gateway-a"
+}

package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/missing-manual-gateway.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "deviceId": "device-1",
+  "profileId": "profile-1",
+  "selection": "manual"
+}

package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/mode-override.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "deviceId": "device-1",
+  "profileId": "profile-1",
+  "selection": "manual",
+  "gatewayId": "gateway-a",
+  "mode": "external_vpn"
+}

package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/auto-intent.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "deviceId": "device-1",
+  "profileId": "profile-1",
+  "selection": "auto"
+}

package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/manual-intent.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "deviceId": "device-1",
+  "profileId": "profile-1",
+  "selection": "manual",
+  "gatewayId": "gateway-a"
+}

package/fixtures/openapi/NetworkVPNProfileInput/invalid/unknown-private-key.json ADDED Viewed

@@ -0,0 +1,25 @@
+{
+  "expectedRevision": 0,
+  "configuration": {
+    "name": "Office network",
+    "siteId": "site-1",
+    "networkSpaceId": "space-1",
+    "mode": "external_vpn",
+    "resourceIds": [],
+    "gatewayIds": [
+      "gateway-a",
+      "gateway-b"
+    ],
+    "selectionPolicyId": "policy-1",
+    "allowManualSelection": true,
+    "enabled": true,
+    "assignments": {
+      "userIds": [
+        "user-1"
+      ],
+      "teamIds": [],
+      "deviceIds": []
+    },
+    "privateKey": "not-permitted"
+  }
+}

package/fixtures/openapi/NetworkVPNProfileInput/valid/assigned-profile.json ADDED Viewed

@@ -0,0 +1,24 @@
+{
+  "expectedRevision": 0,
+  "configuration": {
+    "name": "Office network",
+    "siteId": "site-1",
+    "networkSpaceId": "space-1",
+    "mode": "external_vpn",
+    "resourceIds": [],
+    "gatewayIds": [
+      "gateway-a",
+      "gateway-b"
+    ],
+    "selectionPolicyId": "policy-1",
+    "allowManualSelection": true,
+    "enabled": true,
+    "assignments": {
+      "userIds": [
+        "user-1"
+      ],
+      "teamIds": [],
+      "deviceIds": []
+    }
+  }
+}

package/fixtures/openapi/NetworkVPNSelectionPolicyInput/invalid/unbounded-attempts.json ADDED Viewed

@@ -0,0 +1,21 @@
+{
+  "expectedRevision": 0,
+  "configuration": {
+    "name": "Carrier preference",
+    "strategy": "provider",
+    "providerOrder": [
+      "telecom",
+      "unicom"
+    ],
+    "providerPreference": "prefer",
+    "maxLatencyMs": 200,
+    "maxTimeoutPercent": 50,
+    "maxSampleAgeSeconds": 60,
+    "minSamples": 2,
+    "missingMeasurements": "priority",
+    "maxAttempts": 999,
+    "retryCooldownSeconds": 30,
+    "failoverOnDisconnect": true,
+    "allowManualFallback": false
+  }
+}

package/fixtures/openapi/NetworkVPNSelectionPolicyInput/valid/provider-policy.json ADDED Viewed

@@ -0,0 +1,21 @@
+{
+  "expectedRevision": 0,
+  "configuration": {
+    "name": "Carrier preference",
+    "strategy": "provider",
+    "providerOrder": [
+      "telecom",
+      "unicom"
+    ],
+    "providerPreference": "prefer",
+    "maxLatencyMs": 200,
+    "maxTimeoutPercent": 50,
+    "maxSampleAgeSeconds": 60,
+    "minSamples": 2,
+    "missingMeasurements": "priority",
+    "maxAttempts": 3,
+    "retryCooldownSeconds": 30,
+    "failoverOnDisconnect": true,
+    "allowManualFallback": false
+  }
+}

package/fixtures/openapi/ObservabilityMetricAssessmentInput/invalid/arbitrary-expression.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "dataSourceId": "metrics-dev",
+  "metricKey": "error_rate",
+  "scope": {},
+  "windowStart": "2026-09-15T10:05:00Z",
+  "windowEnd": "2026-09-15T10:10:00Z",
+  "unit": "ratio",
+  "threshold": { "operator": "lte", "value": 0.01 },
+  "expression": "arbitrary_expression"
+}

package/fixtures/openapi/ObservabilityMetricAssessmentInput/valid/metric-window.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "dataSourceId": "metrics-dev",
+  "metricKey": "error_rate",
+  "scope": { "clusterId": "dev", "namespace": "web", "service": "api" },
+  "windowStart": "2026-09-15T10:05:00Z",
+  "windowEnd": "2026-09-15T10:10:00Z",
+  "notBefore": "2026-09-15T10:00:00Z",
+  "unit": "ratio",
+  "threshold": { "operator": "lte", "value": 0.01 }
+}

package/fixtures/openapi/PluginManifest/valid/hermes-api.json ADDED Viewed

@@ -0,0 +1,53 @@
+{
+  "id": "opensoha.hermes-api",
+  "name": "Hermes Chat",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "ai-provider-adapter",
+  "description": "Hermes Runs API adapter for governed chat sessions. Requires a chat-only API profile and an HTTPS endpoint.",
+  "compatibility": {
+    "soha": ">=0.1.8 <1.0.0",
+    "contracts": ">=0.1.17 <1.0.0"
+  },
+  "runtime": {
+    "mode": "manifest-only"
+  },
+  "configSchema": {
+    "type": "object",
+    "required": [
+      "endpoint"
+    ],
+    "properties": {
+      "endpoint": {
+        "type": "string",
+        "title": "Hermes HTTPS endpoint",
+        "pattern": "^https://[^/@]+(/[^?#]*)?$"
+      }
+    },
+    "additionalProperties": false
+  },
+  "extensionPoints": {
+    "ai": {
+      "agentProviders": [
+        {
+          "id": "hermes-api",
+          "label": "Hermes Chat",
+          "metadata": {
+            "providerId": "hermes-api",
+            "kind": "hermes-api",
+            "providerVersion": "0.1.0",
+            "adapterProtocol": "opensoha.agent-provider.hermes-api/v1",
+            "capabilities": [
+              "general"
+            ],
+            "runtime": {
+              "kind": "remote",
+              "endpointConfigKey": "endpoint",
+              "healthPath": "/health/detailed"
+            }
+          }
+        }
+      ]
+    }
+  }
+}

package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/missing-identity.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "action": "promote",
+  "uid": "",
+  "resourceVersion": "18"
+}

package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/skip-analysis.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "action": "promote_full",
+  "uid": "rollout-uid",
+  "resourceVersion": "18"
+}

package/fixtures/openapi/ProgressiveRolloutControlInput/valid/pause.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "action": "pause",
+  "uid": "rollout-uid",
+  "resourceVersion": "18"
+}

package/fixtures/openapi/ReleaseTargetInput/invalid/missing-required-field.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "clusterId": "",
+  "namespace": "",
+  "workloadName": "project-1",
+  "targetKind": "host_service",
+  "executorKind": "docker_compose",
+  "enabled": true,
+  "docker": {
+    "hostId": "host-1",
+    "projectId": "project-1",
+    "imageMappings": {
+      "api": "main"
+    }
+  }
+}

package/fixtures/openapi/ReleaseTargetInput/valid/docker-compose.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "clusterId": "",
+  "namespace": "",
+  "workloadKind": "DockerProject",
+  "workloadName": "project-1",
+  "targetKind": "host_service",
+  "executorKind": "docker_compose",
+  "enabled": true,
+  "docker": {
+    "hostId": "host-1",
+    "projectId": "project-1",
+    "imageMappings": {
+      "api": "main"
+    }
+  }
+}

package/fixtures/openapi/RepositoryAnalysis/invalid/moving-ref.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "applicationId": "app",
+  "repositoryId": "repo",
+  "projectPath": ".",
+  "resolvedCommit": "main",
+  "ruleVersion": "1",
+  "status": "unrecognized",
+  "candidates": [],
+  "evidencePaths": [],
+  "warnings": []
+}