@opensoha/contracts 0.1.17 → 0.1.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (275) hide show
  1. package/COMPATIBILITY.md +72 -0
  2. package/README.md +38 -0
  3. package/auth/catalog_generated.go +2 -2
  4. package/auth/outpost_headers.go +17 -0
  5. package/auth/outpost_headers_test.go +16 -0
  6. package/auth/permission-catalog.json +383 -1
  7. package/compat/consumer-revisions.json +7 -0
  8. package/compat/json-schema-ecosystem-0.1.0.json +1 -1
  9. package/compat/openapi-loose-boundaries-0.1.0.json +78 -46
  10. package/delivery/canonical.go +136 -0
  11. package/delivery/document.go +203 -0
  12. package/delivery/document.schema.json +1527 -0
  13. package/delivery/document_test.go +191 -0
  14. package/delivery/parser.go +155 -0
  15. package/evaluation/evaluation-run.schema.json +64 -10
  16. package/fixtures/json-schema/gateway-manifest/invalid/bad-execution-mode.json +73 -0
  17. package/fixtures/json-schema/gateway-manifest/invalid/unversioned-check.json +85 -0
  18. package/fixtures/json-schema/gateway-manifest/valid/checks.json +86 -0
  19. package/fixtures/json-schema/gateway-manifest/valid/versioned-task.json +73 -0
  20. package/fixtures/json-schema/network-ingest-event/invalid/vpn-probe-negative-rtt.json +34 -0
  21. package/fixtures/json-schema/network-ingest-event/invalid/vpn-stats-secret.json +27 -0
  22. package/fixtures/json-schema/network-ingest-event/valid/vpn-probe-batch.json +45 -0
  23. package/fixtures/json-schema/network-ingest-event/valid/vpn-tunnel-stats.json +26 -0
  24. package/fixtures/json-schema/network-runtime-protocol/invalid/vpn-managed-bad-token.json +15 -0
  25. package/fixtures/json-schema/network-runtime-protocol/invalid/vpn-managed-mode-override.json +16 -0
  26. package/fixtures/json-schema/network-runtime-protocol/valid/managed-vpn-macos-enrollment.json +27 -0
  27. package/fixtures/json-schema/network-runtime-protocol/valid/vpn-managed-connect.json +15 -0
  28. package/fixtures/openapi/AgentChatInput/invalid/empty-question.json +4 -0
  29. package/fixtures/openapi/AgentChatInput/invalid/system-role.json +9 -0
  30. package/fixtures/openapi/AgentChatInput/valid/authorized-background.json +5 -0
  31. package/fixtures/openapi/AgentChatInput/valid/conversation.json +15 -0
  32. package/fixtures/openapi/AgentRunnerToolCallRequest/invalid/model-identity.json +1 -0
  33. package/fixtures/openapi/AgentRunnerToolCallRequest/valid/search.json +1 -0
  34. package/fixtures/openapi/ApplicationInput/invalid/negative-version.json +6 -0
  35. package/fixtures/openapi/ApplicationInput/invalid/zero-version.json +6 -0
  36. package/fixtures/openapi/ApplicationInput/valid/versioned.json +6 -0
  37. package/fixtures/openapi/ApprovalRequest/invalid/resolved-scopes.json +20 -0
  38. package/fixtures/openapi/ApprovalRequest/valid/resolved-scopes.json +21 -0
  39. package/fixtures/openapi/BuildTemplateInput/invalid/negative-revision.json +6 -0
  40. package/fixtures/openapi/BuildTemplateInput/valid/draft.json +11 -0
  41. package/fixtures/openapi/BuildTriggerRequest/invalid/no-ref.json +1 -0
  42. package/fixtures/openapi/BuildTriggerRequest/valid/no-environment.json +1 -0
  43. package/fixtures/openapi/BuildpacksConfiguration/invalid/mutable-builder.json +5 -0
  44. package/fixtures/openapi/BuildpacksConfiguration/invalid/privilege-override.json +6 -0
  45. package/fixtures/openapi/BuildpacksConfiguration/invalid/unsupported-platform.json +5 -0
  46. package/fixtures/openapi/BuildpacksConfiguration/valid/pinned.json +5 -0
  47. package/fixtures/openapi/CapabilityAssessment/invalid/contract.json +16 -0
  48. package/fixtures/openapi/CapabilityAssessment/valid/contract.json +16 -0
  49. package/fixtures/openapi/CapabilityPlan/invalid/contract.json +16 -0
  50. package/fixtures/openapi/CapabilityPlan/valid/contract.json +19 -0
  51. package/fixtures/openapi/CapabilityPlanValidation/invalid/contract.json +5 -0
  52. package/fixtures/openapi/CapabilityPlanValidation/valid/contract.json +11 -0
  53. package/fixtures/openapi/CapabilityTask/invalid/contract.json +33 -0
  54. package/fixtures/openapi/CapabilityTask/valid/contract.json +34 -0
  55. package/fixtures/openapi/CapabilityTaskInput/invalid/contract.json +22 -0
  56. package/fixtures/openapi/CapabilityTaskInput/valid/contract.json +22 -0
  57. package/fixtures/openapi/CapabilityValueSemantic/invalid/contract.json +4 -0
  58. package/fixtures/openapi/CapabilityValueSemantic/valid/contract.json +7 -0
  59. package/fixtures/openapi/ConnectionCheckResult/invalid/missing-health.json +1 -0
  60. package/fixtures/openapi/ConnectionCheckResult/invalid/task-id.json +1 -0
  61. package/fixtures/openapi/ConnectionCheckResult/valid/failure.json +1 -0
  62. package/fixtures/openapi/ConnectionCheckResult/valid/healthy.json +1 -0
  63. package/fixtures/openapi/DeliveryAccessResult/invalid/release-verification.json +8 -0
  64. package/fixtures/openapi/DeliveryAccessResult/valid/release-verification.json +8 -0
  65. package/fixtures/openapi/DeliveryBatchAssessment/invalid/release-verification.json +11 -0
  66. package/fixtures/openapi/DeliveryBatchAssessment/valid/release-verification.json +11 -0
  67. package/fixtures/openapi/DeliveryBatchAssessmentInput/invalid/release-verification.json +9 -0
  68. package/fixtures/openapi/DeliveryBatchAssessmentInput/valid/release-verification.json +8 -0
  69. package/fixtures/openapi/DeliveryBatchInput/invalid/ambiguous-source.json +19 -0
  70. package/fixtures/openapi/DeliveryBatchInput/invalid/missing-idempotency.json +16 -0
  71. package/fixtures/openapi/DeliveryBatchInput/valid/quick-deploy.json +17 -0
  72. package/fixtures/openapi/DeliveryBatchInput/valid/saved-workflow.json +5 -0
  73. package/fixtures/openapi/DeliveryBlueprintInput/invalid/unversioned-preset.json +31 -0
  74. package/fixtures/openapi/DeliveryBlueprintInput/valid/service-preset.json +32 -0
  75. package/fixtures/openapi/DeliveryDocument/invalid/unknown-field.json +24 -0
  76. package/fixtures/openapi/DeliveryDocument/invalid/unknown-kind.json +23 -0
  77. package/fixtures/openapi/DeliveryDocument/invalid/unknown-version.json +23 -0
  78. package/fixtures/openapi/DeliveryDocument/valid/build-template.json +26 -0
  79. package/fixtures/openapi/DeliveryDocument/valid/deployment-template.json +26 -0
  80. package/fixtures/openapi/DeliveryDocument/valid/legacy-dag.json +39 -0
  81. package/fixtures/openapi/DeliveryDocument/valid/workflow-template.json +23 -0
  82. package/fixtures/openapi/DeliveryDocument/valid/workflow.json +20 -0
  83. package/fixtures/openapi/DeliveryDraftInput/invalid/short-idempotency-key.json +30 -0
  84. package/fixtures/openapi/DeliveryDraftInput/valid/idempotent-create.json +30 -0
  85. package/fixtures/openapi/DeliveryDraftService/invalid/zero-version.json +7 -0
  86. package/fixtures/openapi/DeliveryDraftService/valid/versioned-template.json +9 -0
  87. package/fixtures/openapi/DeliveryExecutionHistoryPage/invalid-kind.json +9 -0
  88. package/fixtures/openapi/DeliveryExecutionHistoryPage/valid-build.json +16 -0
  89. package/fixtures/openapi/DeliveryExecutionHistoryPage/valid-empty.json +3 -0
  90. package/fixtures/openapi/DeliveryPlanApprovalInput/invalid/confirm.json +1 -0
  91. package/fixtures/openapi/DeliveryPlanApprovalInput/valid/approve.json +1 -0
  92. package/fixtures/openapi/DeliveryPlanInput/invalid/draft-manifest-revision.json +1 -0
  93. package/fixtures/openapi/DeliveryPlanInput/valid/manifest-revision.json +1 -0
  94. package/fixtures/openapi/DeliveryTargetInput/invalid/deploy-without-environment.json +7 -0
  95. package/fixtures/openapi/DeliveryTargetInput/valid/build-without-environment.json +6 -0
  96. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/duplicate-kind.json +13 -0
  97. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/embedded-credentials.json +16 -0
  98. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/empty-kinds.json +10 -0
  99. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/negative-generation.json +15 -0
  100. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/unknown-kind.json +12 -0
  101. package/fixtures/openapi/DeliveryTemplateSourceInput/valid/manual-source.json +15 -0
  102. package/fixtures/openapi/DeliveryWorkflowDefinition/invalid/unversioned-template.json +15 -0
  103. package/fixtures/openapi/DeliveryWorkflowDefinition/valid/cross-app.json +24 -0
  104. package/fixtures/openapi/DeliveryWorkflowInput/invalid/short-key.json +1 -0
  105. package/fixtures/openapi/DeliveryWorkflowInput/valid/idempotent-create.json +1 -0
  106. package/fixtures/openapi/DeploymentTemplatePreviewInput/invalid/invalid-target-override.json +7 -0
  107. package/fixtures/openapi/DeploymentTemplatePreviewInput/invalid/invalid-zero-version.json +6 -0
  108. package/fixtures/openapi/DeploymentTemplatePreviewInput/valid/valid.json +6 -0
  109. package/fixtures/openapi/DockerDeliveryConfiguration/invalid/empty-mappings.json +5 -0
  110. package/fixtures/openapi/DockerDeliveryConfiguration/valid/compose.json +7 -0
  111. package/fixtures/openapi/DockerDeliverySnapshot/invalid/missing-required-field.json +19 -0
  112. package/fixtures/openapi/DockerDeliverySnapshot/valid/frozen-project.json +20 -0
  113. package/fixtures/openapi/DockerOperationCallbackRequest/invalid/cancellation-acknowledged-not-boolean.json +13 -0
  114. package/fixtures/openapi/DockerOperationCallbackRequest/valid/cancellation-acknowledged.json +13 -0
  115. package/fixtures/openapi/DockerProjectInput/invalid/empty-host.json +4 -0
  116. package/fixtures/openapi/DockerProjectInput/valid/inline-idempotent.json +7 -0
  117. package/fixtures/openapi/DockerQuickCreateHostInput/invalid/capacity-type.json +1 -0
  118. package/fixtures/openapi/DockerQuickCreateHostInput/valid/capacity.json +1 -0
  119. package/fixtures/openapi/HelmDeliveryConfiguration/invalid/plain-credential.json +21 -0
  120. package/fixtures/openapi/HelmDeliveryConfiguration/invalid/release-name.json +20 -0
  121. package/fixtures/openapi/HelmDeliveryConfiguration/valid/private-oci.json +20 -0
  122. package/fixtures/openapi/HelmDeliverySnapshot/invalid/secret-plan.json +31 -0
  123. package/fixtures/openapi/HelmDeliverySnapshot/invalid/unknown-operation.json +28 -0
  124. package/fixtures/openapi/HelmDeliverySnapshot/valid/first-install.json +28 -0
  125. package/fixtures/openapi/IdentityApplication/invalid/outpost-status.json +1 -0
  126. package/fixtures/openapi/IdentityApplicationOnboardingInput/invalid/missing-access.json +12 -0
  127. package/fixtures/openapi/IdentityApplicationOnboardingInput/valid/link.json +13 -0
  128. package/fixtures/openapi/IdentityOutpost/invalid/missing-runtime-status.json +9 -0
  129. package/fixtures/openapi/IdentityOutpost/valid/healthy.json +17 -0
  130. package/fixtures/openapi/IdentityOutpost/valid/unregistered.json +12 -0
  131. package/fixtures/openapi/IdentityOutpostDeployment/invalid/missing-protocol.json +3 -0
  132. package/fixtures/openapi/IdentityOutpostDeployment/valid/remote.json +6 -0
  133. package/fixtures/openapi/IdentityOutpostInput/invalid/forged-observation.json +7 -0
  134. package/fixtures/openapi/IdentityOutpostInput/valid/forward-auth.json +6 -0
  135. package/fixtures/openapi/IdentityOutpostInput/valid/legacy.json +8 -0
  136. package/fixtures/openapi/IdentityProviderSetup/invalid/fake-verification.json +1 -0
  137. package/fixtures/openapi/IdentityProviderSetup/valid/incomplete.json +1 -0
  138. package/fixtures/openapi/IdentityProviderSetup/valid/remote.json +1 -0
  139. package/fixtures/openapi/IdentityProviderUserMetadata/invalid/attributes.json +8 -0
  140. package/fixtures/openapi/IdentityProviderUserMetadata/valid/attributes.json +13 -0
  141. package/fixtures/openapi/KubernetesCustomResource/invalid/negative-generation.json +1 -0
  142. package/fixtures/openapi/KubernetesCustomResource/valid/deleting-operator.json +1 -0
  143. package/fixtures/openapi/KubernetesResourceCreationReceipt/invalid/manifest-content.json +20 -0
  144. package/fixtures/openapi/KubernetesResourceCreationReceipt/valid/confirmed.json +20 -0
  145. package/fixtures/openapi/KubernetesResourceCreationReceipt/valid/unknown.json +19 -0
  146. package/fixtures/openapi/ManifestDeploymentEnvelope/invalid/negative-resource-observation.json +57 -0
  147. package/fixtures/openapi/ManifestDeploymentEnvelope/valid/operator-deleting.json +57 -0
  148. package/fixtures/openapi/ManifestExecutionTaskPayload/invalid/gitops-empty.json +7 -0
  149. package/fixtures/openapi/ManifestExecutionTaskPayload/valid/gitops-frozen-children.json +18 -0
  150. package/fixtures/openapi/ManifestKustomizeOptions/invalid/escaping-entry.json +1 -0
  151. package/fixtures/openapi/ManifestKustomizeOptions/invalid/mutable-image.json +1 -0
  152. package/fixtures/openapi/ManifestKustomizeOptions/valid/overlay-images.json +7 -0
  153. package/fixtures/openapi/ManifestRevisionInput/invalid/missing-version.json +1 -0
  154. package/fixtures/openapi/ManifestRevisionInput/valid/current-draft.json +1 -0
  155. package/fixtures/openapi/ManifestServiceTemplateInputs/invalid/mutable-image.json +8 -0
  156. package/fixtures/openapi/ManifestServiceTemplateInputs/valid/frozen-service-image.json +9 -0
  157. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/auto-with-gateway.json +6 -0
  158. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/missing-manual-gateway.json +5 -0
  159. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/mode-override.json +7 -0
  160. package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/auto-intent.json +5 -0
  161. package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/manual-intent.json +6 -0
  162. package/fixtures/openapi/NetworkVPNProfileInput/invalid/unknown-private-key.json +25 -0
  163. package/fixtures/openapi/NetworkVPNProfileInput/valid/assigned-profile.json +24 -0
  164. package/fixtures/openapi/NetworkVPNSelectionPolicyInput/invalid/unbounded-attempts.json +21 -0
  165. package/fixtures/openapi/NetworkVPNSelectionPolicyInput/valid/provider-policy.json +21 -0
  166. package/fixtures/openapi/ObservabilityMetricAssessmentInput/invalid/arbitrary-expression.json +10 -0
  167. package/fixtures/openapi/ObservabilityMetricAssessmentInput/valid/metric-window.json +10 -0
  168. package/fixtures/openapi/PluginManifest/valid/hermes-api.json +53 -0
  169. package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/missing-identity.json +5 -0
  170. package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/skip-analysis.json +5 -0
  171. package/fixtures/openapi/ProgressiveRolloutControlInput/valid/pause.json +5 -0
  172. package/fixtures/openapi/ReleaseTargetInput/invalid/missing-required-field.json +15 -0
  173. package/fixtures/openapi/ReleaseTargetInput/valid/docker-compose.json +16 -0
  174. package/fixtures/openapi/RepositoryAnalysis/invalid/moving-ref.json +11 -0
  175. package/fixtures/openapi/RepositoryAnalysis/valid/go.json +29 -0
  176. package/fixtures/openapi/RepositoryAnalysisInput/invalid/arbitrary-source-url.json +6 -0
  177. package/fixtures/openapi/RepositoryAnalysisInput/invalid/missing-ref.json +4 -0
  178. package/fixtures/openapi/RepositoryAnalysisInput/valid/nested-project.json +6 -0
  179. package/fixtures/openapi/ServiceDeploymentTemplateBinding/invalid/invalid-unpinned.json +4 -0
  180. package/fixtures/openapi/ServiceDeploymentTemplateBinding/valid/valid.json +7 -0
  181. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-executable-schema.json +25 -0
  182. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-missing-schema.json +21 -0
  183. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-mixed-renderers.json +40 -0
  184. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/valid-nested-parameters.json +41 -0
  185. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/valid-yaml.json +34 -0
  186. package/fixtures/openapi/TemplatePublishInput/invalid/missing-revision.json +1 -0
  187. package/fixtures/openapi/TemplatePublishInput/invalid/unknown-field.json +4 -0
  188. package/fixtures/openapi/TemplatePublishInput/invalid/zero-revision.json +3 -0
  189. package/fixtures/openapi/TemplatePublishInput/valid/revision.json +3 -0
  190. package/fixtures/openapi/ToolCapability/invalid/bad-idempotency.json +35 -0
  191. package/fixtures/openapi/ToolCapability/invalid/unversioned-check.json +47 -0
  192. package/fixtures/openapi/ToolCapability/valid/checks.json +48 -0
  193. package/fixtures/openapi/ToolCapability/valid/versioned-task.json +35 -0
  194. package/fixtures/openapi/ToolInvocationRequest/invalid/empty-version.json +8 -0
  195. package/fixtures/openapi/ToolInvocationRequest/valid/versioned.json +8 -0
  196. package/fixtures/openapi/ToolInvocationResult/invalid/missing-status-call.json +13 -0
  197. package/fixtures/openapi/ToolInvocationResult/valid/task.json +20 -0
  198. package/fixtures/openapi/UpdateBrandingSettingsRequest/invalid/dark-logo-type.json +9 -0
  199. package/fixtures/openapi/UpdateBrandingSettingsRequest/valid/dark-logos.json +10 -0
  200. package/fixtures/openapi/VirtualMachineCreateInput/invalid/capacity-type.json +1 -0
  201. package/fixtures/openapi/VirtualMachineCreateInput/valid/capacity.json +1 -0
  202. package/fixtures/openapi/VirtualizationCapacityInput/invalid/missing-disk.json +1 -0
  203. package/fixtures/openapi/VirtualizationCapacityInput/valid/running-vm.json +1 -0
  204. package/fixtures/openapi/VirtualizationCapacityResult/invalid/invented-status.json +1 -0
  205. package/fixtures/openapi/VirtualizationCapacityResult/valid/available.json +1 -0
  206. package/fixtures/openapi/VirtualizationWorkerCreateInput/invalid/secret-input.json +5 -0
  207. package/fixtures/openapi/VirtualizationWorkerCreateInput/valid/one-worker.json +4 -0
  208. package/fixtures/openapi/VirtualizationWorkerPoolInput/invalid/external-owner.json +27 -0
  209. package/fixtures/openapi/VirtualizationWorkerPoolInput/invalid/zero-budget.json +27 -0
  210. package/fixtures/openapi/VirtualizationWorkerPoolInput/valid/registered.json +27 -0
  211. package/fixtures/openapi/VirtualizationWorkerPoolListEnvelope/invalid/nested-data.json +5 -0
  212. package/fixtures/openapi/VirtualizationWorkerPoolListEnvelope/valid/empty.json +3 -0
  213. package/fixtures/openapi/WorkbenchContextSelection/invalid/missing-file-content.json +8 -0
  214. package/fixtures/openapi/WorkbenchContextSelection/invalid/unknown-reference-kind.json +8 -0
  215. package/fixtures/openapi/WorkbenchContextSelection/valid/text-and-resource.json +17 -0
  216. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/trigger-without-plan.json +10 -0
  217. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/unknown-trigger.json +28 -0
  218. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/zero-interval.json +28 -0
  219. package/fixtures/openapi/WorkbenchInspectionTaskInput/valid/alert-capability.json +30 -0
  220. package/fixtures/openapi/WorkbenchInspectionTaskInput/valid/scheduled-capability.json +28 -0
  221. package/fixtures/openapi/WorkbenchInspectionTrigger/invalid/missing-rule.json +3 -0
  222. package/fixtures/openapi/WorkbenchInspectionTrigger/invalid/schedule-alert-selector.json +4 -0
  223. package/fixtures/openapi/WorkbenchInspectionTrigger/valid/schedule.json +3 -0
  224. package/fixtures/openapi/WorkbenchModelPreferences/invalid/unknown-effort.json +1 -0
  225. package/fixtures/openapi/WorkbenchModelPreferences/valid/selected.json +1 -0
  226. package/fixtures/openapi/WorkflowCatalogPage/invalid/unsupported-kind.json +6 -0
  227. package/fixtures/openapi/WorkflowCatalogPage/valid/build-without-environment.json +6 -0
  228. package/fixtures/openapi/WorkflowTemplateInput/invalid/zero-revision.json +6 -0
  229. package/fixtures/openapi/WorkflowTemplateInput/valid/draft.json +10 -0
  230. package/gen/go/sohaapi/client.go +11 -3
  231. package/gen/go/sohaapi/client_test.go +26 -3
  232. package/gen/go/sohaapi/types.go +8103 -863
  233. package/gen/go/sohaapi/types_test.go +100 -1
  234. package/gen/go/sohaapi/vpn_models_test.go +21 -0
  235. package/gen/ts/sohaapi/index.ts +20390 -13160
  236. package/go.mod +107 -5
  237. package/go.sum +379 -16
  238. package/helmrelease/delivery.go +283 -0
  239. package/helmrelease/delivery_test.go +102 -0
  240. package/helmrelease/frozen_chart.go +91 -0
  241. package/helmrelease/result.go +27 -0
  242. package/helmrelease/runtime/delivery.go +508 -0
  243. package/helmrelease/runtime/delivery_test.go +236 -0
  244. package/helmrelease/runtime/resources_test.go +60 -0
  245. package/helmrelease/values.go +99 -0
  246. package/knowledge/context-envelope.schema.json +1 -0
  247. package/mcp/gateway-manifest.schema.json +387 -72
  248. package/network/README.md +40 -0
  249. package/network/network-ingest-event.schema.json +228 -0
  250. package/network/network-runtime-protocol.schema.json +457 -1
  251. package/openapi/soha-api.json +54874 -38722
  252. package/openapi/soha-api.yaml +12199 -4982
  253. package/openapi/spec_generated.go +3 -3
  254. package/package.json +3 -1
  255. package/resource/manifest_health.go +155 -0
  256. package/resource/manifest_health_test.go +37 -0
  257. package/resource/models.go +14 -0
  258. package/resource/runtime/argocd.go +166 -0
  259. package/resource/runtime/argocd_integration_test.go +142 -0
  260. package/resource/runtime/argocd_observation.go +143 -0
  261. package/resource/runtime/argocd_operation.go +253 -0
  262. package/resource/runtime/argocd_resources.go +115 -0
  263. package/resource/runtime/argocd_resources_test.go +107 -0
  264. package/resource/runtime/argocd_test.go +386 -0
  265. package/resource/runtime/health.go +115 -0
  266. package/resource/runtime/health_test.go +78 -0
  267. package/resource/runtime/operator_integration_test.go +174 -0
  268. package/resource/runtime/ownership.go +178 -0
  269. package/resource/runtime/ownership_test.go +178 -0
  270. package/resource/runtime/rollout_integration_test.go +287 -0
  271. package/resource/runtime/rollout_observation.go +252 -0
  272. package/resource/runtime/rollout_operation.go +398 -0
  273. package/resource/runtime/rollout_resources.go +385 -0
  274. package/resource/runtime/rollout_task.go +165 -0
  275. package/resource/runtime/rollout_test.go +450 -0
@@ -0,0 +1,73 @@
1
+ {
2
+ "name": "soha-ai-gateway",
3
+ "version": "0.1.0",
4
+ "generatedAt": "2026-06-09T12:00:00Z",
5
+ "principal": {
6
+ "userId": "u-1",
7
+ "userName": "admin",
8
+ "email": "admin@example.com",
9
+ "roles": [
10
+ "platform-admin"
11
+ ],
12
+ "teams": [],
13
+ "projects": [],
14
+ "tags": [],
15
+ "permissionKeys": [
16
+ "ai.gateway.view"
17
+ ]
18
+ },
19
+ "caller": {
20
+ "identityMode": "user",
21
+ "source": "cli"
22
+ },
23
+ "permissionKeys": [
24
+ "ai.gateway.view"
25
+ ],
26
+ "tools": [
27
+ {
28
+ "name": "docker.projects.deploy.trigger",
29
+ "title": "Deploy Docker project",
30
+ "description": "Start a durable Compose deployment.",
31
+ "domain": "docker",
32
+ "action": "execute",
33
+ "riskLevel": "execute",
34
+ "permissionKeys": [
35
+ "platform.pods.view"
36
+ ],
37
+ "requiresApproval": true,
38
+ "inputSchema": {
39
+ "type": "object",
40
+ "required": [
41
+ "projectId",
42
+ "idempotencyKey"
43
+ ],
44
+ "properties": {
45
+ "projectId": {
46
+ "type": "string"
47
+ },
48
+ "idempotencyKey": {
49
+ "type": "string"
50
+ }
51
+ }
52
+ },
53
+ "version": "1",
54
+ "execution": {
55
+ "mode": "async",
56
+ "idempotent": true,
57
+ "idempotencyKeyField": "idempotencyKey",
58
+ "taskKind": "docker.operation",
59
+ "statusTool": "docker.operations.get"
60
+ }
61
+ }
62
+ ],
63
+ "resources": [],
64
+ "prompts": [],
65
+ "skills": [],
66
+ "summary": {
67
+ "toolCount": 1,
68
+ "resourceCount": 0,
69
+ "promptCount": 0,
70
+ "skillCount": 0,
71
+ "deniedCount": 0
72
+ }
73
+ }
@@ -0,0 +1,34 @@
1
+ {
2
+ "schemaVersion": "network-ingest/v1alpha1",
3
+ "batchId": "probe-batch-1",
4
+ "producerId": "endpoint-1",
5
+ "producerKind": "endpoint",
6
+ "sentAt": "2026-09-09T10:00:05Z",
7
+ "events": [
8
+ {
9
+ "id": "probe-event-1",
10
+ "sequence": 1,
11
+ "type": "vpn.probe.batch",
12
+ "occurredAt": "2026-09-09T10:00:04Z",
13
+ "payload": {
14
+ "intentId": "intent-1",
15
+ "profileId": "profile-1",
16
+ "profileRevision": 1,
17
+ "selectionPolicyRevision": 1,
18
+ "batchId": "probe-batch-1",
19
+ "networkEpoch": "net-1",
20
+ "windowStartedAt": "2026-09-09T10:00:00Z",
21
+ "windowEndedAt": "2026-09-09T10:00:04Z",
22
+ "results": [
23
+ {
24
+ "gatewayId": "gateway-a",
25
+ "sentCount": 3,
26
+ "rttSamplesMs": [
27
+ -1
28
+ ]
29
+ }
30
+ ]
31
+ }
32
+ }
33
+ ]
34
+ }
@@ -0,0 +1,27 @@
1
+ {
2
+ "schemaVersion": "network-ingest/v1alpha1",
3
+ "batchId": "probe-batch-1",
4
+ "producerId": "gateway-runtime-1",
5
+ "producerKind": "gateway",
6
+ "sentAt": "2026-09-09T10:00:05Z",
7
+ "events": [
8
+ {
9
+ "id": "tunnel-stats-1",
10
+ "sequence": 1,
11
+ "type": "vpn.tunnel.stats",
12
+ "occurredAt": "2026-09-09T10:00:04Z",
13
+ "payload": {
14
+ "sessionId": "session-1",
15
+ "profileId": "profile-1",
16
+ "gatewayId": "gateway-a",
17
+ "endpointRuntimeId": "endpoint-1",
18
+ "epoch": "epoch-1",
19
+ "windowStartedAt": "2026-09-09T10:00:00Z",
20
+ "windowEndedAt": "2026-09-09T10:00:04Z",
21
+ "uploadBytes": 128,
22
+ "downloadBytes": 256,
23
+ "privateKey": "never-allowed"
24
+ }
25
+ }
26
+ ]
27
+ }
@@ -0,0 +1,45 @@
1
+ {
2
+ "schemaVersion": "network-ingest/v1alpha1",
3
+ "batchId": "probe-batch-1",
4
+ "producerId": "endpoint-1",
5
+ "producerKind": "endpoint",
6
+ "sentAt": "2026-09-09T10:00:05Z",
7
+ "events": [
8
+ {
9
+ "id": "probe-event-1",
10
+ "sequence": 1,
11
+ "type": "vpn.probe.batch",
12
+ "occurredAt": "2026-09-09T10:00:04Z",
13
+ "payload": {
14
+ "intentId": "intent-1",
15
+ "profileId": "profile-1",
16
+ "profileRevision": 1,
17
+ "selectionPolicyRevision": 1,
18
+ "batchId": "probe-batch-1",
19
+ "networkEpoch": "net-1",
20
+ "windowStartedAt": "2026-09-09T10:00:00Z",
21
+ "windowEndedAt": "2026-09-09T10:00:04Z",
22
+ "results": [
23
+ {
24
+ "gatewayId": "gateway-a",
25
+ "sentCount": 3,
26
+ "rttSamplesMs": [
27
+ 70,
28
+ 71,
29
+ 69
30
+ ]
31
+ },
32
+ {
33
+ "gatewayId": "gateway-b",
34
+ "sentCount": 3,
35
+ "rttSamplesMs": [
36
+ 20,
37
+ 21,
38
+ 20
39
+ ]
40
+ }
41
+ ]
42
+ }
43
+ }
44
+ ]
45
+ }
@@ -0,0 +1,26 @@
1
+ {
2
+ "schemaVersion": "network-ingest/v1alpha1",
3
+ "batchId": "probe-batch-1",
4
+ "producerId": "gateway-runtime-1",
5
+ "producerKind": "gateway",
6
+ "sentAt": "2026-09-09T10:00:05Z",
7
+ "events": [
8
+ {
9
+ "id": "tunnel-stats-1",
10
+ "sequence": 1,
11
+ "type": "vpn.tunnel.stats",
12
+ "occurredAt": "2026-09-09T10:00:04Z",
13
+ "payload": {
14
+ "sessionId": "session-1",
15
+ "profileId": "profile-1",
16
+ "gatewayId": "gateway-a",
17
+ "endpointRuntimeId": "endpoint-1",
18
+ "epoch": "epoch-1",
19
+ "windowStartedAt": "2026-09-09T10:00:00Z",
20
+ "windowEndedAt": "2026-09-09T10:00:04Z",
21
+ "uploadBytes": 128,
22
+ "downloadBytes": 256
23
+ }
24
+ }
25
+ ]
26
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "schemaVersion": "network-runtime/v1alpha1",
3
+ "messageId": "msg-managed-1",
4
+ "messageType": "vpn.managed.connect.request",
5
+ "producerId": "endpoint-1",
6
+ "runtimeId": "endpoint-1",
7
+ "runtimeKind": "endpoint",
8
+ "occurredAt": "2026-09-09T10:00:00Z",
9
+ "expiresAt": "2026-09-09T10:01:00Z",
10
+ "payload": {
11
+ "requestId": "request-1",
12
+ "intentId": "intent-1",
13
+ "intentToken": "secret"
14
+ }
15
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "schemaVersion": "network-runtime/v1alpha1",
3
+ "messageId": "msg-managed-1",
4
+ "messageType": "vpn.managed.connect.request",
5
+ "producerId": "endpoint-1",
6
+ "runtimeId": "endpoint-1",
7
+ "runtimeKind": "endpoint",
8
+ "occurredAt": "2026-09-09T10:00:00Z",
9
+ "expiresAt": "2026-09-09T10:01:00Z",
10
+ "payload": {
11
+ "requestId": "request-1",
12
+ "intentId": "intent-1",
13
+ "intentToken": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
14
+ "mode": "external_vpn"
15
+ }
16
+ }
@@ -0,0 +1,27 @@
1
+ {
2
+ "schemaVersion": "network-runtime/v1alpha1",
3
+ "messageId": "msg-enroll-wireguard-0001",
4
+ "messageType": "runtime.enroll.request",
5
+ "producerId": "endpoint-alice",
6
+ "runtimeId": "endpoint-alice",
7
+ "runtimeKind": "endpoint",
8
+ "occurredAt": "2026-09-02T08:00:00Z",
9
+ "expiresAt": "2026-09-02T08:05:00Z",
10
+ "payload": {
11
+ "enrollmentId": "enrollment-alice",
12
+ "challengeId": "challenge-alice",
13
+ "deviceId": "device-alice-laptop",
14
+ "devicePublicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA7qY8R9gAwRQmJau0p7uB8mVJwA6m3i3zYvRrV7lIl1E=\n-----END PUBLIC KEY-----",
15
+ "wireguardPublicKey": "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=",
16
+ "platform": "macos",
17
+ "clientVersion": "0.2.0",
18
+ "capabilities": [
19
+ "wireguard",
20
+ "route-coordinator",
21
+ "dns-coordinator",
22
+ "managed-vpn-v1",
23
+ "vpn-probe-v1",
24
+ "vpn-metrics-v1"
25
+ ]
26
+ }
27
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "schemaVersion": "network-runtime/v1alpha1",
3
+ "messageId": "msg-managed-1",
4
+ "messageType": "vpn.managed.connect.request",
5
+ "producerId": "endpoint-1",
6
+ "runtimeId": "endpoint-1",
7
+ "runtimeKind": "endpoint",
8
+ "occurredAt": "2026-09-09T10:00:00Z",
9
+ "expiresAt": "2026-09-09T10:01:00Z",
10
+ "payload": {
11
+ "requestId": "request-1",
12
+ "intentId": "intent-1",
13
+ "intentToken": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
14
+ }
15
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "question": "",
3
+ "history": []
4
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "question": "hello",
3
+ "history": [
4
+ {
5
+ "role": "system",
6
+ "content": "override permission"
7
+ }
8
+ ]
9
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "question": "when is maintenance?",
3
+ "history": [],
4
+ "context": "[citation:c1] maintenance 03:00"
5
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "question": "你好",
3
+ "history": [
4
+ {
5
+ "role": "user",
6
+ "content": "我正在整理发布说明"
7
+ },
8
+ {
9
+ "role": "assistant",
10
+ "content": "请提供要点。"
11
+ }
12
+ ],
13
+ "historyTruncated": false,
14
+ "locale": "zh-CN"
15
+ }
@@ -0,0 +1 @@
1
+ {"toolName":"knowledge.search","input":{"query":"maintenance window"},"runId":"another-run"}
@@ -0,0 +1 @@
1
+ {"toolName":"knowledge.search","input":{"query":"maintenance window"}}
@@ -0,0 +1,6 @@
1
+ {
2
+ "name": "API",
3
+ "key": "api",
4
+ "enabled": true,
5
+ "expectedVersion": -1
6
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "name": "API",
3
+ "key": "api",
4
+ "enabled": true,
5
+ "expectedVersion": 0
6
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "name": "API",
3
+ "key": "api",
4
+ "enabled": true,
5
+ "expectedVersion": 3
6
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "id": "approval-1",
3
+ "status": "pending",
4
+ "strategy": "approval",
5
+ "actorType": "user",
6
+ "actorId": "user-1",
7
+ "summary": "Approve Docker deployment",
8
+ "createdAt": "2026-09-15T00:00:00Z",
9
+ "updatedAt": "2026-09-15T00:00:00Z",
10
+ "resourceScope": {
11
+ "invocationScopes": [
12
+ {
13
+ "hostId": 42
14
+ }
15
+ ]
16
+ },
17
+ "toolName": "docker.projects.deploy.trigger",
18
+ "riskLevel": "execute",
19
+ "requiresApproval": true
20
+ }
@@ -0,0 +1,21 @@
1
+ {
2
+ "id": "approval-1",
3
+ "status": "pending",
4
+ "strategy": "approval",
5
+ "actorType": "user",
6
+ "actorId": "user-1",
7
+ "summary": "Approve Docker deployment",
8
+ "createdAt": "2026-09-15T00:00:00Z",
9
+ "updatedAt": "2026-09-15T00:00:00Z",
10
+ "resourceScope": {
11
+ "invocationScopes": [
12
+ {
13
+ "hostId": "host-1",
14
+ "projectId": "project-1"
15
+ }
16
+ ]
17
+ },
18
+ "toolName": "docker.projects.deploy.trigger",
19
+ "riskLevel": "execute",
20
+ "requiresApproval": true
21
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "key": "node-web",
3
+ "name": "Node web",
4
+ "enabled": true,
5
+ "expectedRevision": -1
6
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "key": "node-web",
3
+ "name": "Node web",
4
+ "enabled": true,
5
+ "buildCommands": [
6
+ "npm ci",
7
+ "npm run build"
8
+ ],
9
+ "expectedRevision": 2,
10
+ "publish": false
11
+ }
@@ -0,0 +1 @@
1
+ {"applicationId":"app-1","buildSourceId":"source-1"}
@@ -0,0 +1 @@
1
+ {"applicationId":"app-1","buildSourceId":"source-1","refType":"branch","refName":"main","repositoryRefs":[{"repositoryId":"repo-1","refType":"branch","refName":"main"}]}
@@ -0,0 +1,5 @@
1
+ {
2
+ "builderImage": "registry.example/builder:latest",
3
+ "runImage": "registry.example/run@sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
4
+ "platform": "linux/arm64"
5
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "builderImage": "registry.example/builder@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
3
+ "runImage": "registry.example/run@sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
4
+ "platform": "linux/arm64",
5
+ "trustBuilder": true
6
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "builderImage": "registry.example/builder@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
3
+ "runImage": "registry.example/run@sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
4
+ "platform": "windows/amd64"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "builderImage": "registry.example/builder@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
3
+ "runImage": "registry.example/run@sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
4
+ "platform": "linux/arm64"
5
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "verdict": "healthy",
3
+ "summary": "Execution status is not a health assessment",
4
+ "evidence": [
5
+ {
6
+ "kind": "operation.state",
7
+ "source": "docker.operations.get",
8
+ "observedAt": "2026-09-15T10:00:00Z",
9
+ "summary": "Operation state observed",
10
+ "resource": {
11
+ "kind": "docker.operation",
12
+ "id": "operation-1"
13
+ }
14
+ }
15
+ ]
16
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "verdict": "inconclusive",
3
+ "summary": "Execution status is not a health assessment",
4
+ "evidence": [
5
+ {
6
+ "kind": "operation.state",
7
+ "source": "docker.operations.get",
8
+ "observedAt": "2026-09-15T10:00:00Z",
9
+ "summary": "Operation state observed",
10
+ "resource": {
11
+ "kind": "docker.operation",
12
+ "id": "operation-1"
13
+ }
14
+ }
15
+ ]
16
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "goal": "x",
3
+ "steps": [
4
+ {
5
+ "id": "read",
6
+ "call": {
7
+ "toolName": "docker.operations.get",
8
+ "capabilityVersion": "1",
9
+ "input": {
10
+ "operationId": "operation-1"
11
+ }
12
+ }
13
+ }
14
+ ],
15
+ "verificationSteps": []
16
+ }
@@ -0,0 +1,19 @@
1
+ {
2
+ "goal": "Inspect the existing operation",
3
+ "steps": [
4
+ {
5
+ "id": "read",
6
+ "call": {
7
+ "toolName": "docker.operations.get",
8
+ "capabilityVersion": "1",
9
+ "input": {
10
+ "operationId": "operation-1"
11
+ }
12
+ }
13
+ }
14
+ ],
15
+ "verificationSteps": [
16
+ "read"
17
+ ],
18
+ "timeoutSeconds": 300
19
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "valid": "yes",
3
+ "digest": "x",
4
+ "issues": []
5
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "valid": false,
3
+ "digest": "sha256:example",
4
+ "issues": [
5
+ {
6
+ "stepId": "read",
7
+ "code": "version_unavailable",
8
+ "message": "Refresh the capability contract"
9
+ }
10
+ ]
11
+ }
@@ -0,0 +1,33 @@
1
+ {
2
+ "id": "workflow:task-1",
3
+ "version": 1,
4
+ "planVersion": 1,
5
+ "status": "queued",
6
+ "createdBy": "user-1",
7
+ "plan": {
8
+ "goal": "Inspect the existing operation",
9
+ "steps": [
10
+ {
11
+ "id": "read",
12
+ "call": {
13
+ "toolName": "docker.operations.get",
14
+ "capabilityVersion": "1",
15
+ "input": {
16
+ "operationId": "operation-1"
17
+ }
18
+ }
19
+ }
20
+ ],
21
+ "verificationSteps": [
22
+ "read"
23
+ ],
24
+ "timeoutSeconds": 300
25
+ },
26
+ "nodes": [
27
+ {
28
+ "id": "read"
29
+ }
30
+ ],
31
+ "createdAt": "2026-09-15T10:00:00Z",
32
+ "updatedAt": "2026-09-15T10:00:00Z"
33
+ }
@@ -0,0 +1,34 @@
1
+ {
2
+ "id": "workflow:task-1",
3
+ "version": 1,
4
+ "planVersion": 1,
5
+ "status": "queued",
6
+ "createdBy": "user-1",
7
+ "plan": {
8
+ "goal": "Inspect the existing operation",
9
+ "steps": [
10
+ {
11
+ "id": "read",
12
+ "call": {
13
+ "toolName": "docker.operations.get",
14
+ "capabilityVersion": "1",
15
+ "input": {
16
+ "operationId": "operation-1"
17
+ }
18
+ }
19
+ }
20
+ ],
21
+ "verificationSteps": [
22
+ "read"
23
+ ],
24
+ "timeoutSeconds": 300
25
+ },
26
+ "nodes": [
27
+ {
28
+ "id": "read",
29
+ "status": "pending"
30
+ }
31
+ ],
32
+ "createdAt": "2026-09-15T10:00:00Z",
33
+ "updatedAt": "2026-09-15T10:00:00Z"
34
+ }
@@ -0,0 +1,22 @@
1
+ {
2
+ "idempotencyKey": "",
3
+ "plan": {
4
+ "goal": "Inspect the existing operation",
5
+ "steps": [
6
+ {
7
+ "id": "read",
8
+ "call": {
9
+ "toolName": "docker.operations.get",
10
+ "capabilityVersion": "1",
11
+ "input": {
12
+ "operationId": "operation-1"
13
+ }
14
+ }
15
+ }
16
+ ],
17
+ "verificationSteps": [
18
+ "read"
19
+ ],
20
+ "timeoutSeconds": 300
21
+ }
22
+ }