@opensoha/contracts 0.1.16 → 0.1.18

package/auth/permission-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "authorization.opensoha.io/v1",
   "catalogVersion": "2.0.0",
-  "contentHash": "sha256:5aa6fa361c2ab8d987415fb1eb93218510deb9359a68212dfe86655dbfaeea5e",
+  "contentHash": "sha256:5b4c9eed71c549d61a6fd538db542681cb2932619d66ab031c74fcbaaa0c9867",
   "permissions": [
     {
       "key": "access.directory.create",
@@ -2468,6 +2468,22 @@
       "status": "active",
       "assignable": true
     },
+    {
+      "key": "delivery.application-environments.approve",
+      "domain": "delivery",
+      "resource": "application-environments",
+      "action": "approve",
+      "displayName": "审批应用环境发布",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "workspace",
+        "project",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
     {
       "key": "delivery.application-environments.create",
       "domain": "delivery",
@@ -2830,6 +2846,62 @@
       "status": "active",
       "assignable": true
     },
+    {
+      "key": "delivery.deployment-templates.create",
+      "domain": "delivery",
+      "resource": "deployment-templates",
+      "action": "create",
+      "displayName": "创建构建模板",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.deployment-templates.delete",
+      "domain": "delivery",
+      "resource": "deployment-templates",
+      "action": "delete",
+      "displayName": "删除构建模板",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "workspace"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.deployment-templates.update",
+      "domain": "delivery",
+      "resource": "deployment-templates",
+      "action": "update",
+      "displayName": "修改构建模板",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.deployment-templates.view",
+      "domain": "delivery",
+      "resource": "deployment-templates",
+      "action": "view",
+      "displayName": "查看构建模板",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "workspace"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
     {
       "key": "delivery.execution-tasks.cancel",
       "domain": "delivery",
@@ -3306,6 +3378,126 @@
       "status": "active",
       "assignable": true
     },
+    {
+      "key": "delivery.template-sources.create",
+      "domain": "delivery",
+      "resource": "template-sources",
+      "action": "create",
+      "displayName": "创建交付模板来源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.template-sources.delete",
+      "domain": "delivery",
+      "resource": "template-sources",
+      "action": "delete",
+      "displayName": "移除交付模板来源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.template-sources.sync",
+      "domain": "delivery",
+      "resource": "template-sources",
+      "action": "sync",
+      "displayName": "同步交付模板来源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.template-sources.update",
+      "domain": "delivery",
+      "resource": "template-sources",
+      "action": "update",
+      "displayName": "修改交付模板来源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.template-sources.view",
+      "domain": "delivery",
+      "resource": "template-sources",
+      "action": "view",
+      "displayName": "查看交付模板来源",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.triggers.create",
+      "domain": "delivery",
+      "resource": "triggers",
+      "action": "create",
+      "displayName": "创建交付触发器",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.triggers.update",
+      "domain": "delivery",
+      "resource": "triggers",
+      "action": "update",
+      "displayName": "修改交付触发器",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "delivery.triggers.view",
+      "domain": "delivery",
+      "resource": "triggers",
+      "action": "view",
+      "displayName": "查看交付触发器",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
     {
       "key": "delivery.workflow-templates.create",
       "domain": "delivery",
@@ -4108,36 +4300,774 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.applications.manage"
-      ]
+      "assignable": true,
+      "legacyAliases": [
+        "identity.applications.manage"
+      ]
+    },
+    {
+      "key": "identity.applications.delete",
+      "domain": "identity",
+      "resource": "applications",
+      "action": "delete",
+      "displayName": "删除身份应用目录",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.applications.manage"
+      ]
+    },
+    {
+      "key": "identity.applications.manage",
+      "domain": "identity",
+      "resource": "applications",
+      "action": "manage",
+      "displayName": "管理身份应用目录",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "legacy",
+      "assignable": false,
+      "replacedBy": [
+        "identity.applications.create",
+        "identity.applications.delete",
+        "identity.applications.update"
+      ]
+    },
+    {
+      "key": "identity.applications.update",
+      "domain": "identity",
+      "resource": "applications",
+      "action": "update",
+      "displayName": "修改身份应用目录",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.applications.manage"
+      ]
+    },
+    {
+      "key": "identity.applications.view",
+      "domain": "identity",
+      "resource": "applications",
+      "action": "view",
+      "displayName": "查看身份应用目录",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "identity.audit.view",
+      "domain": "identity",
+      "resource": "audit",
+      "action": "view",
+      "displayName": "查看身份审计",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "identity.outposts.create",
+      "domain": "identity",
+      "resource": "outposts",
+      "action": "create",
+      "displayName": "创建身份 Outpost",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.outposts.manage"
+      ]
+    },
+    {
+      "key": "identity.outposts.delete",
+      "domain": "identity",
+      "resource": "outposts",
+      "action": "delete",
+      "displayName": "删除身份 Outpost",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.outposts.manage"
+      ]
+    },
+    {
+      "key": "identity.outposts.manage",
+      "domain": "identity",
+      "resource": "outposts",
+      "action": "manage",
+      "displayName": "管理身份 Outpost",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "legacy",
+      "assignable": false,
+      "replacedBy": [
+        "identity.outposts.create",
+        "identity.outposts.delete",
+        "identity.outposts.rotate",
+        "identity.outposts.update"
+      ]
+    },
+    {
+      "key": "identity.outposts.rotate",
+      "domain": "identity",
+      "resource": "outposts",
+      "action": "rotate",
+      "displayName": "轮换身份 Outpost",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.outposts.manage"
+      ]
+    },
+    {
+      "key": "identity.outposts.update",
+      "domain": "identity",
+      "resource": "outposts",
+      "action": "update",
+      "displayName": "修改身份 Outpost",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.outposts.manage"
+      ]
+    },
+    {
+      "key": "identity.outposts.view",
+      "domain": "identity",
+      "resource": "outposts",
+      "action": "view",
+      "displayName": "查看身份 Outpost",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "identity.policies.manage",
+      "domain": "identity",
+      "resource": "policies",
+      "action": "manage",
+      "displayName": "管理身份访问策略",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "legacy",
+      "assignable": false,
+      "replacedBy": [
+        "identity.policies.update"
+      ]
+    },
+    {
+      "key": "identity.policies.update",
+      "domain": "identity",
+      "resource": "policies",
+      "action": "update",
+      "displayName": "修改身份访问策略",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.policies.manage"
+      ]
+    },
+    {
+      "key": "identity.policies.view",
+      "domain": "identity",
+      "resource": "policies",
+      "action": "view",
+      "displayName": "查看身份访问策略",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "identity.portal.view",
+      "domain": "identity",
+      "resource": "portal",
+      "action": "view",
+      "displayName": "访问 Provider Portal",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "identity.providers.create",
+      "domain": "identity",
+      "resource": "providers",
+      "action": "create",
+      "displayName": "创建身份 Provider",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.providers.manage"
+      ]
+    },
+    {
+      "key": "identity.providers.delete",
+      "domain": "identity",
+      "resource": "providers",
+      "action": "delete",
+      "displayName": "删除身份 Provider",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.providers.manage"
+      ]
+    },
+    {
+      "key": "identity.providers.manage",
+      "domain": "identity",
+      "resource": "providers",
+      "action": "manage",
+      "displayName": "管理身份 Provider",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "legacy",
+      "assignable": false,
+      "replacedBy": [
+        "identity.providers.create",
+        "identity.providers.delete",
+        "identity.providers.rotate",
+        "identity.providers.update"
+      ]
+    },
+    {
+      "key": "identity.providers.rotate",
+      "domain": "identity",
+      "resource": "providers",
+      "action": "rotate",
+      "displayName": "轮换身份 Provider",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.providers.manage"
+      ]
+    },
+    {
+      "key": "identity.providers.update",
+      "domain": "identity",
+      "resource": "providers",
+      "action": "update",
+      "displayName": "修改身份 Provider",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true,
+      "legacyAliases": [
+        "identity.providers.manage"
+      ]
+    },
+    {
+      "key": "identity.providers.view",
+      "domain": "identity",
+      "resource": "providers",
+      "action": "view",
+      "displayName": "查看身份 Provider",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.access_grants.create",
+      "domain": "network_access",
+      "resource": "access_grants",
+      "action": "create",
+      "displayName": "申请受保护网络资源访问",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.access_grants.revoke",
+      "domain": "network_access",
+      "resource": "access_grants",
+      "action": "revoke",
+      "displayName": "撤销受保护网络资源访问凭证",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.access_grants.view",
+      "domain": "network_access",
+      "resource": "access_grants",
+      "action": "view",
+      "displayName": "查看受保护网络资源访问凭证",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.endpoint_devices.update",
+      "domain": "network_access",
+      "resource": "endpoint_devices",
+      "action": "update",
+      "displayName": "修改网络接入设备",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.endpoint_devices.view",
+      "domain": "network_access",
+      "resource": "endpoint_devices",
+      "action": "view",
+      "displayName": "查看网络接入设备",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.enrollments.create",
+      "domain": "network_access",
+      "resource": "enrollments",
+      "action": "create",
+      "displayName": "创建网络运行时注册令牌",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.enrollments.revoke",
+      "domain": "network_access",
+      "resource": "enrollments",
+      "action": "revoke",
+      "displayName": "撤销网络运行时注册",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.enrollments.view",
+      "domain": "network_access",
+      "resource": "enrollments",
+      "action": "view",
+      "displayName": "查看网络运行时注册",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.gateways.create",
+      "domain": "network_access",
+      "resource": "gateways",
+      "action": "create",
+      "displayName": "创建网络接入网关",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.gateways.update",
+      "domain": "network_access",
+      "resource": "gateways",
+      "action": "update",
+      "displayName": "更新网络接入网关",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.gateways.view",
+      "domain": "network_access",
+      "resource": "gateways",
+      "action": "view",
+      "displayName": "查看网络接入网关",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.mihomo_profiles.create",
+      "domain": "network_access",
+      "resource": "mihomo_profiles",
+      "action": "create",
+      "displayName": "创建 mihomo 代理配置",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.mihomo_profiles.delete",
+      "domain": "network_access",
+      "resource": "mihomo_profiles",
+      "action": "delete",
+      "displayName": "删除 mihomo 代理配置",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.mihomo_profiles.update",
+      "domain": "network_access",
+      "resource": "mihomo_profiles",
+      "action": "update",
+      "displayName": "更新 mihomo 代理配置",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.mihomo_profiles.view",
+      "domain": "network_access",
+      "resource": "mihomo_profiles",
+      "action": "view",
+      "displayName": "查看 mihomo 代理配置",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.policy.create",
+      "domain": "network_access",
+      "resource": "policy",
+      "action": "create",
+      "displayName": "创建网络访问策略",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.policy.delete",
+      "domain": "network_access",
+      "resource": "policy",
+      "action": "delete",
+      "displayName": "删除网络访问策略",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.policy.update",
+      "domain": "network_access",
+      "resource": "policy",
+      "action": "update",
+      "displayName": "修改和发布网络访问策略",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.policy.view",
+      "domain": "network_access",
+      "resource": "policy",
+      "action": "view",
+      "displayName": "查看和预演网络访问策略",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.resources.create",
+      "domain": "network_access",
+      "resource": "resources",
+      "action": "create",
+      "displayName": "创建网络资源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.resources.delete",
+      "domain": "network_access",
+      "resource": "resources",
+      "action": "delete",
+      "displayName": "删除网络资源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.resources.update",
+      "domain": "network_access",
+      "resource": "resources",
+      "action": "update",
+      "displayName": "修改网络资源",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
     },
     {
-      "key": "identity.applications.delete",
-      "domain": "identity",
-      "resource": "applications",
-      "action": "delete",
-      "displayName": "删除身份应用目录",
-      "riskLevel": "high",
+      "key": "network_access.resources.view",
+      "domain": "network_access",
+      "resource": "resources",
+      "action": "view",
+      "displayName": "查看网络资源",
+      "riskLevel": "read",
       "scopeKinds": [
         "tenant",
         "workspace",
         "resource"
       ],
-      "approvalPolicy": "eligible",
+      "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.applications.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.applications.manage",
-      "domain": "identity",
-      "resource": "applications",
-      "action": "manage",
-      "displayName": "管理身份应用目录",
+      "key": "network_access.sites.create",
+      "domain": "network_access",
+      "resource": "sites",
+      "action": "create",
+      "displayName": "创建网络站点",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4145,20 +5075,15 @@
         "resource"
       ],
       "approvalPolicy": "never",
-      "status": "legacy",
-      "assignable": false,
-      "replacedBy": [
-        "identity.applications.create",
-        "identity.applications.delete",
-        "identity.applications.update"
-      ]
+      "status": "active",
+      "assignable": true
     },
     {
-      "key": "identity.applications.update",
-      "domain": "identity",
-      "resource": "applications",
-      "action": "update",
-      "displayName": "修改身份应用目录",
+      "key": "network_access.sites.delete",
+      "domain": "network_access",
+      "resource": "sites",
+      "action": "delete",
+      "displayName": "删除网络站点",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4167,18 +5092,15 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.applications.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.applications.view",
-      "domain": "identity",
-      "resource": "applications",
-      "action": "view",
-      "displayName": "查看身份应用目录",
-      "riskLevel": "read",
+      "key": "network_access.sites.update",
+      "domain": "network_access",
+      "resource": "sites",
+      "action": "update",
+      "displayName": "修改网络站点",
+      "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
         "workspace",
@@ -4189,11 +5111,11 @@
       "assignable": true
     },
     {
-      "key": "identity.audit.view",
-      "domain": "identity",
-      "resource": "audit",
+      "key": "network_access.sites.view",
+      "domain": "network_access",
+      "resource": "sites",
       "action": "view",
-      "displayName": "查看身份审计",
+      "displayName": "查看网络站点",
       "riskLevel": "read",
       "scopeKinds": [
         "tenant",
@@ -4205,11 +5127,11 @@
       "assignable": true
     },
     {
-      "key": "identity.outposts.create",
-      "domain": "identity",
-      "resource": "outposts",
+      "key": "network_access.spaces.create",
+      "domain": "network_access",
+      "resource": "spaces",
       "action": "create",
-      "displayName": "创建身份 Outpost",
+      "displayName": "创建网络空间",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4218,36 +5140,30 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.outposts.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.outposts.delete",
-      "domain": "identity",
-      "resource": "outposts",
+      "key": "network_access.spaces.delete",
+      "domain": "network_access",
+      "resource": "spaces",
       "action": "delete",
-      "displayName": "删除身份 Outpost",
-      "riskLevel": "high",
+      "displayName": "删除网络空间",
+      "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
         "workspace",
         "resource"
       ],
-      "approvalPolicy": "eligible",
+      "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.outposts.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.outposts.manage",
-      "domain": "identity",
-      "resource": "outposts",
-      "action": "manage",
-      "displayName": "管理身份 Outpost",
+      "key": "network_access.spaces.update",
+      "domain": "network_access",
+      "resource": "spaces",
+      "action": "update",
+      "displayName": "修改网络空间",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4255,41 +5171,32 @@
         "resource"
       ],
       "approvalPolicy": "never",
-      "status": "legacy",
-      "assignable": false,
-      "replacedBy": [
-        "identity.outposts.create",
-        "identity.outposts.delete",
-        "identity.outposts.rotate",
-        "identity.outposts.update"
-      ]
+      "status": "active",
+      "assignable": true
     },
     {
-      "key": "identity.outposts.rotate",
-      "domain": "identity",
-      "resource": "outposts",
-      "action": "rotate",
-      "displayName": "轮换身份 Outpost",
-      "riskLevel": "high",
+      "key": "network_access.spaces.view",
+      "domain": "network_access",
+      "resource": "spaces",
+      "action": "view",
+      "displayName": "查看网络空间",
+      "riskLevel": "read",
       "scopeKinds": [
         "tenant",
         "workspace",
         "resource"
       ],
-      "approvalPolicy": "eligible",
+      "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.outposts.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.outposts.update",
-      "domain": "identity",
-      "resource": "outposts",
-      "action": "update",
-      "displayName": "修改身份 Outpost",
-      "riskLevel": "mutate",
+      "key": "network_access.telemetry.view",
+      "domain": "network_access",
+      "resource": "telemetry",
+      "action": "view",
+      "displayName": "查看网络遥测汇总",
+      "riskLevel": "read",
       "scopeKinds": [
         "tenant",
         "workspace",
@@ -4297,17 +5204,14 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.outposts.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.outposts.view",
-      "domain": "identity",
-      "resource": "outposts",
+      "key": "network_access.vpn_dashboard.view",
+      "domain": "network_access",
+      "resource": "vpn_dashboard",
       "action": "view",
-      "displayName": "查看身份 Outpost",
+      "displayName": "查看VPN 连接看板",
       "riskLevel": "read",
       "scopeKinds": [
         "tenant",
@@ -4319,11 +5223,11 @@
       "assignable": true
     },
     {
-      "key": "identity.policies.manage",
-      "domain": "identity",
-      "resource": "policies",
-      "action": "manage",
-      "displayName": "管理身份访问策略",
+      "key": "network_access.vpn_profiles.create",
+      "domain": "network_access",
+      "resource": "vpn_profiles",
+      "action": "create",
+      "displayName": "创建VPN 连接方案",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4331,18 +5235,15 @@
         "resource"
       ],
       "approvalPolicy": "never",
-      "status": "legacy",
-      "assignable": false,
-      "replacedBy": [
-        "identity.policies.update"
-      ]
+      "status": "active",
+      "assignable": true
     },
     {
-      "key": "identity.policies.update",
-      "domain": "identity",
-      "resource": "policies",
-      "action": "update",
-      "displayName": "修改身份访问策略",
+      "key": "network_access.vpn_profiles.delete",
+      "domain": "network_access",
+      "resource": "vpn_profiles",
+      "action": "delete",
+      "displayName": "删除VPN 连接方案",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4351,18 +5252,15 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.policies.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.policies.view",
-      "domain": "identity",
-      "resource": "policies",
-      "action": "view",
-      "displayName": "查看身份访问策略",
-      "riskLevel": "read",
+      "key": "network_access.vpn_profiles.publish",
+      "domain": "network_access",
+      "resource": "vpn_profiles",
+      "action": "publish",
+      "displayName": "发布VPN 连接方案",
+      "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
         "workspace",
@@ -4373,11 +5271,27 @@
       "assignable": true
     },
     {
-      "key": "identity.portal.view",
-      "domain": "identity",
-      "resource": "portal",
+      "key": "network_access.vpn_profiles.update",
+      "domain": "network_access",
+      "resource": "vpn_profiles",
+      "action": "update",
+      "displayName": "修改VPN 连接方案",
+      "riskLevel": "mutate",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.vpn_profiles.view",
+      "domain": "network_access",
+      "resource": "vpn_profiles",
       "action": "view",
-      "displayName": "访问 Provider Portal",
+      "displayName": "查看VPN 连接方案",
       "riskLevel": "read",
       "scopeKinds": [
         "tenant",
@@ -4389,11 +5303,11 @@
       "assignable": true
     },
     {
-      "key": "identity.providers.create",
-      "domain": "identity",
-      "resource": "providers",
+      "key": "network_access.vpn_selection_policies.create",
+      "domain": "network_access",
+      "resource": "vpn_selection_policies",
       "action": "create",
-      "displayName": "创建身份 Provider",
+      "displayName": "创建VPN 选择策略",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4402,77 +5316,62 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.providers.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.providers.delete",
-      "domain": "identity",
-      "resource": "providers",
+      "key": "network_access.vpn_selection_policies.delete",
+      "domain": "network_access",
+      "resource": "vpn_selection_policies",
       "action": "delete",
-      "displayName": "删除身份 Provider",
-      "riskLevel": "high",
+      "displayName": "删除VPN 选择策略",
+      "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
         "workspace",
         "resource"
       ],
-      "approvalPolicy": "eligible",
+      "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.providers.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.providers.manage",
-      "domain": "identity",
-      "resource": "providers",
-      "action": "manage",
-      "displayName": "管理身份 Provider",
-      "riskLevel": "mutate",
+      "key": "network_access.vpn_selection_policies.preview",
+      "domain": "network_access",
+      "resource": "vpn_selection_policies",
+      "action": "preview",
+      "displayName": "模拟VPN 选择策略",
+      "riskLevel": "read",
       "scopeKinds": [
         "tenant",
         "workspace",
         "resource"
       ],
       "approvalPolicy": "never",
-      "status": "legacy",
-      "assignable": false,
-      "replacedBy": [
-        "identity.providers.create",
-        "identity.providers.delete",
-        "identity.providers.rotate",
-        "identity.providers.update"
-      ]
+      "status": "active",
+      "assignable": true
     },
     {
-      "key": "identity.providers.rotate",
-      "domain": "identity",
-      "resource": "providers",
-      "action": "rotate",
-      "displayName": "轮换身份 Provider",
-      "riskLevel": "high",
+      "key": "network_access.vpn_selection_policies.publish",
+      "domain": "network_access",
+      "resource": "vpn_selection_policies",
+      "action": "publish",
+      "displayName": "发布VPN 选择策略",
+      "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
         "workspace",
         "resource"
       ],
-      "approvalPolicy": "eligible",
+      "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.providers.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.providers.update",
-      "domain": "identity",
-      "resource": "providers",
+      "key": "network_access.vpn_selection_policies.update",
+      "domain": "network_access",
+      "resource": "vpn_selection_policies",
       "action": "update",
-      "displayName": "修改身份 Provider",
+      "displayName": "修改VPN 选择策略",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -4481,17 +5380,14 @@
       ],
       "approvalPolicy": "never",
       "status": "active",
-      "assignable": true,
-      "legacyAliases": [
-        "identity.providers.manage"
-      ]
+      "assignable": true
     },
     {
-      "key": "identity.providers.view",
-      "domain": "identity",
-      "resource": "providers",
+      "key": "network_access.vpn_selection_policies.view",
+      "domain": "network_access",
+      "resource": "vpn_selection_policies",
       "action": "view",
-      "displayName": "查看身份 Provider",
+      "displayName": "查看VPN 选择策略",
       "riskLevel": "read",
       "scopeKinds": [
         "tenant",
@@ -8256,6 +9152,20 @@
         "platform.network.topology.view"
       ]
     },
+    {
+      "key": "platform.nodes.create",
+      "domain": "platform",
+      "resource": "nodes",
+      "action": "create",
+      "displayName": "创建 Kubernetes Node",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "cluster"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
     {
       "key": "platform.nodes.delete",
       "domain": "platform",