@opensoha/contracts 0.1.17 → 0.1.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (275) hide show
  1. package/COMPATIBILITY.md +72 -0
  2. package/README.md +38 -0
  3. package/auth/catalog_generated.go +2 -2
  4. package/auth/outpost_headers.go +17 -0
  5. package/auth/outpost_headers_test.go +16 -0
  6. package/auth/permission-catalog.json +383 -1
  7. package/compat/consumer-revisions.json +7 -0
  8. package/compat/json-schema-ecosystem-0.1.0.json +1 -1
  9. package/compat/openapi-loose-boundaries-0.1.0.json +78 -46
  10. package/delivery/canonical.go +136 -0
  11. package/delivery/document.go +203 -0
  12. package/delivery/document.schema.json +1527 -0
  13. package/delivery/document_test.go +191 -0
  14. package/delivery/parser.go +155 -0
  15. package/evaluation/evaluation-run.schema.json +64 -10
  16. package/fixtures/json-schema/gateway-manifest/invalid/bad-execution-mode.json +73 -0
  17. package/fixtures/json-schema/gateway-manifest/invalid/unversioned-check.json +85 -0
  18. package/fixtures/json-schema/gateway-manifest/valid/checks.json +86 -0
  19. package/fixtures/json-schema/gateway-manifest/valid/versioned-task.json +73 -0
  20. package/fixtures/json-schema/network-ingest-event/invalid/vpn-probe-negative-rtt.json +34 -0
  21. package/fixtures/json-schema/network-ingest-event/invalid/vpn-stats-secret.json +27 -0
  22. package/fixtures/json-schema/network-ingest-event/valid/vpn-probe-batch.json +45 -0
  23. package/fixtures/json-schema/network-ingest-event/valid/vpn-tunnel-stats.json +26 -0
  24. package/fixtures/json-schema/network-runtime-protocol/invalid/vpn-managed-bad-token.json +15 -0
  25. package/fixtures/json-schema/network-runtime-protocol/invalid/vpn-managed-mode-override.json +16 -0
  26. package/fixtures/json-schema/network-runtime-protocol/valid/managed-vpn-macos-enrollment.json +27 -0
  27. package/fixtures/json-schema/network-runtime-protocol/valid/vpn-managed-connect.json +15 -0
  28. package/fixtures/openapi/AgentChatInput/invalid/empty-question.json +4 -0
  29. package/fixtures/openapi/AgentChatInput/invalid/system-role.json +9 -0
  30. package/fixtures/openapi/AgentChatInput/valid/authorized-background.json +5 -0
  31. package/fixtures/openapi/AgentChatInput/valid/conversation.json +15 -0
  32. package/fixtures/openapi/AgentRunnerToolCallRequest/invalid/model-identity.json +1 -0
  33. package/fixtures/openapi/AgentRunnerToolCallRequest/valid/search.json +1 -0
  34. package/fixtures/openapi/ApplicationInput/invalid/negative-version.json +6 -0
  35. package/fixtures/openapi/ApplicationInput/invalid/zero-version.json +6 -0
  36. package/fixtures/openapi/ApplicationInput/valid/versioned.json +6 -0
  37. package/fixtures/openapi/ApprovalRequest/invalid/resolved-scopes.json +20 -0
  38. package/fixtures/openapi/ApprovalRequest/valid/resolved-scopes.json +21 -0
  39. package/fixtures/openapi/BuildTemplateInput/invalid/negative-revision.json +6 -0
  40. package/fixtures/openapi/BuildTemplateInput/valid/draft.json +11 -0
  41. package/fixtures/openapi/BuildTriggerRequest/invalid/no-ref.json +1 -0
  42. package/fixtures/openapi/BuildTriggerRequest/valid/no-environment.json +1 -0
  43. package/fixtures/openapi/BuildpacksConfiguration/invalid/mutable-builder.json +5 -0
  44. package/fixtures/openapi/BuildpacksConfiguration/invalid/privilege-override.json +6 -0
  45. package/fixtures/openapi/BuildpacksConfiguration/invalid/unsupported-platform.json +5 -0
  46. package/fixtures/openapi/BuildpacksConfiguration/valid/pinned.json +5 -0
  47. package/fixtures/openapi/CapabilityAssessment/invalid/contract.json +16 -0
  48. package/fixtures/openapi/CapabilityAssessment/valid/contract.json +16 -0
  49. package/fixtures/openapi/CapabilityPlan/invalid/contract.json +16 -0
  50. package/fixtures/openapi/CapabilityPlan/valid/contract.json +19 -0
  51. package/fixtures/openapi/CapabilityPlanValidation/invalid/contract.json +5 -0
  52. package/fixtures/openapi/CapabilityPlanValidation/valid/contract.json +11 -0
  53. package/fixtures/openapi/CapabilityTask/invalid/contract.json +33 -0
  54. package/fixtures/openapi/CapabilityTask/valid/contract.json +34 -0
  55. package/fixtures/openapi/CapabilityTaskInput/invalid/contract.json +22 -0
  56. package/fixtures/openapi/CapabilityTaskInput/valid/contract.json +22 -0
  57. package/fixtures/openapi/CapabilityValueSemantic/invalid/contract.json +4 -0
  58. package/fixtures/openapi/CapabilityValueSemantic/valid/contract.json +7 -0
  59. package/fixtures/openapi/ConnectionCheckResult/invalid/missing-health.json +1 -0
  60. package/fixtures/openapi/ConnectionCheckResult/invalid/task-id.json +1 -0
  61. package/fixtures/openapi/ConnectionCheckResult/valid/failure.json +1 -0
  62. package/fixtures/openapi/ConnectionCheckResult/valid/healthy.json +1 -0
  63. package/fixtures/openapi/DeliveryAccessResult/invalid/release-verification.json +8 -0
  64. package/fixtures/openapi/DeliveryAccessResult/valid/release-verification.json +8 -0
  65. package/fixtures/openapi/DeliveryBatchAssessment/invalid/release-verification.json +11 -0
  66. package/fixtures/openapi/DeliveryBatchAssessment/valid/release-verification.json +11 -0
  67. package/fixtures/openapi/DeliveryBatchAssessmentInput/invalid/release-verification.json +9 -0
  68. package/fixtures/openapi/DeliveryBatchAssessmentInput/valid/release-verification.json +8 -0
  69. package/fixtures/openapi/DeliveryBatchInput/invalid/ambiguous-source.json +19 -0
  70. package/fixtures/openapi/DeliveryBatchInput/invalid/missing-idempotency.json +16 -0
  71. package/fixtures/openapi/DeliveryBatchInput/valid/quick-deploy.json +17 -0
  72. package/fixtures/openapi/DeliveryBatchInput/valid/saved-workflow.json +5 -0
  73. package/fixtures/openapi/DeliveryBlueprintInput/invalid/unversioned-preset.json +31 -0
  74. package/fixtures/openapi/DeliveryBlueprintInput/valid/service-preset.json +32 -0
  75. package/fixtures/openapi/DeliveryDocument/invalid/unknown-field.json +24 -0
  76. package/fixtures/openapi/DeliveryDocument/invalid/unknown-kind.json +23 -0
  77. package/fixtures/openapi/DeliveryDocument/invalid/unknown-version.json +23 -0
  78. package/fixtures/openapi/DeliveryDocument/valid/build-template.json +26 -0
  79. package/fixtures/openapi/DeliveryDocument/valid/deployment-template.json +26 -0
  80. package/fixtures/openapi/DeliveryDocument/valid/legacy-dag.json +39 -0
  81. package/fixtures/openapi/DeliveryDocument/valid/workflow-template.json +23 -0
  82. package/fixtures/openapi/DeliveryDocument/valid/workflow.json +20 -0
  83. package/fixtures/openapi/DeliveryDraftInput/invalid/short-idempotency-key.json +30 -0
  84. package/fixtures/openapi/DeliveryDraftInput/valid/idempotent-create.json +30 -0
  85. package/fixtures/openapi/DeliveryDraftService/invalid/zero-version.json +7 -0
  86. package/fixtures/openapi/DeliveryDraftService/valid/versioned-template.json +9 -0
  87. package/fixtures/openapi/DeliveryExecutionHistoryPage/invalid-kind.json +9 -0
  88. package/fixtures/openapi/DeliveryExecutionHistoryPage/valid-build.json +16 -0
  89. package/fixtures/openapi/DeliveryExecutionHistoryPage/valid-empty.json +3 -0
  90. package/fixtures/openapi/DeliveryPlanApprovalInput/invalid/confirm.json +1 -0
  91. package/fixtures/openapi/DeliveryPlanApprovalInput/valid/approve.json +1 -0
  92. package/fixtures/openapi/DeliveryPlanInput/invalid/draft-manifest-revision.json +1 -0
  93. package/fixtures/openapi/DeliveryPlanInput/valid/manifest-revision.json +1 -0
  94. package/fixtures/openapi/DeliveryTargetInput/invalid/deploy-without-environment.json +7 -0
  95. package/fixtures/openapi/DeliveryTargetInput/valid/build-without-environment.json +6 -0
  96. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/duplicate-kind.json +13 -0
  97. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/embedded-credentials.json +16 -0
  98. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/empty-kinds.json +10 -0
  99. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/negative-generation.json +15 -0
  100. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/unknown-kind.json +12 -0
  101. package/fixtures/openapi/DeliveryTemplateSourceInput/valid/manual-source.json +15 -0
  102. package/fixtures/openapi/DeliveryWorkflowDefinition/invalid/unversioned-template.json +15 -0
  103. package/fixtures/openapi/DeliveryWorkflowDefinition/valid/cross-app.json +24 -0
  104. package/fixtures/openapi/DeliveryWorkflowInput/invalid/short-key.json +1 -0
  105. package/fixtures/openapi/DeliveryWorkflowInput/valid/idempotent-create.json +1 -0
  106. package/fixtures/openapi/DeploymentTemplatePreviewInput/invalid/invalid-target-override.json +7 -0
  107. package/fixtures/openapi/DeploymentTemplatePreviewInput/invalid/invalid-zero-version.json +6 -0
  108. package/fixtures/openapi/DeploymentTemplatePreviewInput/valid/valid.json +6 -0
  109. package/fixtures/openapi/DockerDeliveryConfiguration/invalid/empty-mappings.json +5 -0
  110. package/fixtures/openapi/DockerDeliveryConfiguration/valid/compose.json +7 -0
  111. package/fixtures/openapi/DockerDeliverySnapshot/invalid/missing-required-field.json +19 -0
  112. package/fixtures/openapi/DockerDeliverySnapshot/valid/frozen-project.json +20 -0
  113. package/fixtures/openapi/DockerOperationCallbackRequest/invalid/cancellation-acknowledged-not-boolean.json +13 -0
  114. package/fixtures/openapi/DockerOperationCallbackRequest/valid/cancellation-acknowledged.json +13 -0
  115. package/fixtures/openapi/DockerProjectInput/invalid/empty-host.json +4 -0
  116. package/fixtures/openapi/DockerProjectInput/valid/inline-idempotent.json +7 -0
  117. package/fixtures/openapi/DockerQuickCreateHostInput/invalid/capacity-type.json +1 -0
  118. package/fixtures/openapi/DockerQuickCreateHostInput/valid/capacity.json +1 -0
  119. package/fixtures/openapi/HelmDeliveryConfiguration/invalid/plain-credential.json +21 -0
  120. package/fixtures/openapi/HelmDeliveryConfiguration/invalid/release-name.json +20 -0
  121. package/fixtures/openapi/HelmDeliveryConfiguration/valid/private-oci.json +20 -0
  122. package/fixtures/openapi/HelmDeliverySnapshot/invalid/secret-plan.json +31 -0
  123. package/fixtures/openapi/HelmDeliverySnapshot/invalid/unknown-operation.json +28 -0
  124. package/fixtures/openapi/HelmDeliverySnapshot/valid/first-install.json +28 -0
  125. package/fixtures/openapi/IdentityApplication/invalid/outpost-status.json +1 -0
  126. package/fixtures/openapi/IdentityApplicationOnboardingInput/invalid/missing-access.json +12 -0
  127. package/fixtures/openapi/IdentityApplicationOnboardingInput/valid/link.json +13 -0
  128. package/fixtures/openapi/IdentityOutpost/invalid/missing-runtime-status.json +9 -0
  129. package/fixtures/openapi/IdentityOutpost/valid/healthy.json +17 -0
  130. package/fixtures/openapi/IdentityOutpost/valid/unregistered.json +12 -0
  131. package/fixtures/openapi/IdentityOutpostDeployment/invalid/missing-protocol.json +3 -0
  132. package/fixtures/openapi/IdentityOutpostDeployment/valid/remote.json +6 -0
  133. package/fixtures/openapi/IdentityOutpostInput/invalid/forged-observation.json +7 -0
  134. package/fixtures/openapi/IdentityOutpostInput/valid/forward-auth.json +6 -0
  135. package/fixtures/openapi/IdentityOutpostInput/valid/legacy.json +8 -0
  136. package/fixtures/openapi/IdentityProviderSetup/invalid/fake-verification.json +1 -0
  137. package/fixtures/openapi/IdentityProviderSetup/valid/incomplete.json +1 -0
  138. package/fixtures/openapi/IdentityProviderSetup/valid/remote.json +1 -0
  139. package/fixtures/openapi/IdentityProviderUserMetadata/invalid/attributes.json +8 -0
  140. package/fixtures/openapi/IdentityProviderUserMetadata/valid/attributes.json +13 -0
  141. package/fixtures/openapi/KubernetesCustomResource/invalid/negative-generation.json +1 -0
  142. package/fixtures/openapi/KubernetesCustomResource/valid/deleting-operator.json +1 -0
  143. package/fixtures/openapi/KubernetesResourceCreationReceipt/invalid/manifest-content.json +20 -0
  144. package/fixtures/openapi/KubernetesResourceCreationReceipt/valid/confirmed.json +20 -0
  145. package/fixtures/openapi/KubernetesResourceCreationReceipt/valid/unknown.json +19 -0
  146. package/fixtures/openapi/ManifestDeploymentEnvelope/invalid/negative-resource-observation.json +57 -0
  147. package/fixtures/openapi/ManifestDeploymentEnvelope/valid/operator-deleting.json +57 -0
  148. package/fixtures/openapi/ManifestExecutionTaskPayload/invalid/gitops-empty.json +7 -0
  149. package/fixtures/openapi/ManifestExecutionTaskPayload/valid/gitops-frozen-children.json +18 -0
  150. package/fixtures/openapi/ManifestKustomizeOptions/invalid/escaping-entry.json +1 -0
  151. package/fixtures/openapi/ManifestKustomizeOptions/invalid/mutable-image.json +1 -0
  152. package/fixtures/openapi/ManifestKustomizeOptions/valid/overlay-images.json +7 -0
  153. package/fixtures/openapi/ManifestRevisionInput/invalid/missing-version.json +1 -0
  154. package/fixtures/openapi/ManifestRevisionInput/valid/current-draft.json +1 -0
  155. package/fixtures/openapi/ManifestServiceTemplateInputs/invalid/mutable-image.json +8 -0
  156. package/fixtures/openapi/ManifestServiceTemplateInputs/valid/frozen-service-image.json +9 -0
  157. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/auto-with-gateway.json +6 -0
  158. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/missing-manual-gateway.json +5 -0
  159. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/mode-override.json +7 -0
  160. package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/auto-intent.json +5 -0
  161. package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/manual-intent.json +6 -0
  162. package/fixtures/openapi/NetworkVPNProfileInput/invalid/unknown-private-key.json +25 -0
  163. package/fixtures/openapi/NetworkVPNProfileInput/valid/assigned-profile.json +24 -0
  164. package/fixtures/openapi/NetworkVPNSelectionPolicyInput/invalid/unbounded-attempts.json +21 -0
  165. package/fixtures/openapi/NetworkVPNSelectionPolicyInput/valid/provider-policy.json +21 -0
  166. package/fixtures/openapi/ObservabilityMetricAssessmentInput/invalid/arbitrary-expression.json +10 -0
  167. package/fixtures/openapi/ObservabilityMetricAssessmentInput/valid/metric-window.json +10 -0
  168. package/fixtures/openapi/PluginManifest/valid/hermes-api.json +53 -0
  169. package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/missing-identity.json +5 -0
  170. package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/skip-analysis.json +5 -0
  171. package/fixtures/openapi/ProgressiveRolloutControlInput/valid/pause.json +5 -0
  172. package/fixtures/openapi/ReleaseTargetInput/invalid/missing-required-field.json +15 -0
  173. package/fixtures/openapi/ReleaseTargetInput/valid/docker-compose.json +16 -0
  174. package/fixtures/openapi/RepositoryAnalysis/invalid/moving-ref.json +11 -0
  175. package/fixtures/openapi/RepositoryAnalysis/valid/go.json +29 -0
  176. package/fixtures/openapi/RepositoryAnalysisInput/invalid/arbitrary-source-url.json +6 -0
  177. package/fixtures/openapi/RepositoryAnalysisInput/invalid/missing-ref.json +4 -0
  178. package/fixtures/openapi/RepositoryAnalysisInput/valid/nested-project.json +6 -0
  179. package/fixtures/openapi/ServiceDeploymentTemplateBinding/invalid/invalid-unpinned.json +4 -0
  180. package/fixtures/openapi/ServiceDeploymentTemplateBinding/valid/valid.json +7 -0
  181. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-executable-schema.json +25 -0
  182. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-missing-schema.json +21 -0
  183. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-mixed-renderers.json +40 -0
  184. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/valid-nested-parameters.json +41 -0
  185. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/valid-yaml.json +34 -0
  186. package/fixtures/openapi/TemplatePublishInput/invalid/missing-revision.json +1 -0
  187. package/fixtures/openapi/TemplatePublishInput/invalid/unknown-field.json +4 -0
  188. package/fixtures/openapi/TemplatePublishInput/invalid/zero-revision.json +3 -0
  189. package/fixtures/openapi/TemplatePublishInput/valid/revision.json +3 -0
  190. package/fixtures/openapi/ToolCapability/invalid/bad-idempotency.json +35 -0
  191. package/fixtures/openapi/ToolCapability/invalid/unversioned-check.json +47 -0
  192. package/fixtures/openapi/ToolCapability/valid/checks.json +48 -0
  193. package/fixtures/openapi/ToolCapability/valid/versioned-task.json +35 -0
  194. package/fixtures/openapi/ToolInvocationRequest/invalid/empty-version.json +8 -0
  195. package/fixtures/openapi/ToolInvocationRequest/valid/versioned.json +8 -0
  196. package/fixtures/openapi/ToolInvocationResult/invalid/missing-status-call.json +13 -0
  197. package/fixtures/openapi/ToolInvocationResult/valid/task.json +20 -0
  198. package/fixtures/openapi/UpdateBrandingSettingsRequest/invalid/dark-logo-type.json +9 -0
  199. package/fixtures/openapi/UpdateBrandingSettingsRequest/valid/dark-logos.json +10 -0
  200. package/fixtures/openapi/VirtualMachineCreateInput/invalid/capacity-type.json +1 -0
  201. package/fixtures/openapi/VirtualMachineCreateInput/valid/capacity.json +1 -0
  202. package/fixtures/openapi/VirtualizationCapacityInput/invalid/missing-disk.json +1 -0
  203. package/fixtures/openapi/VirtualizationCapacityInput/valid/running-vm.json +1 -0
  204. package/fixtures/openapi/VirtualizationCapacityResult/invalid/invented-status.json +1 -0
  205. package/fixtures/openapi/VirtualizationCapacityResult/valid/available.json +1 -0
  206. package/fixtures/openapi/VirtualizationWorkerCreateInput/invalid/secret-input.json +5 -0
  207. package/fixtures/openapi/VirtualizationWorkerCreateInput/valid/one-worker.json +4 -0
  208. package/fixtures/openapi/VirtualizationWorkerPoolInput/invalid/external-owner.json +27 -0
  209. package/fixtures/openapi/VirtualizationWorkerPoolInput/invalid/zero-budget.json +27 -0
  210. package/fixtures/openapi/VirtualizationWorkerPoolInput/valid/registered.json +27 -0
  211. package/fixtures/openapi/VirtualizationWorkerPoolListEnvelope/invalid/nested-data.json +5 -0
  212. package/fixtures/openapi/VirtualizationWorkerPoolListEnvelope/valid/empty.json +3 -0
  213. package/fixtures/openapi/WorkbenchContextSelection/invalid/missing-file-content.json +8 -0
  214. package/fixtures/openapi/WorkbenchContextSelection/invalid/unknown-reference-kind.json +8 -0
  215. package/fixtures/openapi/WorkbenchContextSelection/valid/text-and-resource.json +17 -0
  216. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/trigger-without-plan.json +10 -0
  217. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/unknown-trigger.json +28 -0
  218. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/zero-interval.json +28 -0
  219. package/fixtures/openapi/WorkbenchInspectionTaskInput/valid/alert-capability.json +30 -0
  220. package/fixtures/openapi/WorkbenchInspectionTaskInput/valid/scheduled-capability.json +28 -0
  221. package/fixtures/openapi/WorkbenchInspectionTrigger/invalid/missing-rule.json +3 -0
  222. package/fixtures/openapi/WorkbenchInspectionTrigger/invalid/schedule-alert-selector.json +4 -0
  223. package/fixtures/openapi/WorkbenchInspectionTrigger/valid/schedule.json +3 -0
  224. package/fixtures/openapi/WorkbenchModelPreferences/invalid/unknown-effort.json +1 -0
  225. package/fixtures/openapi/WorkbenchModelPreferences/valid/selected.json +1 -0
  226. package/fixtures/openapi/WorkflowCatalogPage/invalid/unsupported-kind.json +6 -0
  227. package/fixtures/openapi/WorkflowCatalogPage/valid/build-without-environment.json +6 -0
  228. package/fixtures/openapi/WorkflowTemplateInput/invalid/zero-revision.json +6 -0
  229. package/fixtures/openapi/WorkflowTemplateInput/valid/draft.json +10 -0
  230. package/gen/go/sohaapi/client.go +11 -3
  231. package/gen/go/sohaapi/client_test.go +26 -3
  232. package/gen/go/sohaapi/types.go +8103 -863
  233. package/gen/go/sohaapi/types_test.go +100 -1
  234. package/gen/go/sohaapi/vpn_models_test.go +21 -0
  235. package/gen/ts/sohaapi/index.ts +20390 -13160
  236. package/go.mod +107 -5
  237. package/go.sum +379 -16
  238. package/helmrelease/delivery.go +283 -0
  239. package/helmrelease/delivery_test.go +102 -0
  240. package/helmrelease/frozen_chart.go +91 -0
  241. package/helmrelease/result.go +27 -0
  242. package/helmrelease/runtime/delivery.go +508 -0
  243. package/helmrelease/runtime/delivery_test.go +236 -0
  244. package/helmrelease/runtime/resources_test.go +60 -0
  245. package/helmrelease/values.go +99 -0
  246. package/knowledge/context-envelope.schema.json +1 -0
  247. package/mcp/gateway-manifest.schema.json +387 -72
  248. package/network/README.md +40 -0
  249. package/network/network-ingest-event.schema.json +228 -0
  250. package/network/network-runtime-protocol.schema.json +457 -1
  251. package/openapi/soha-api.json +54874 -38722
  252. package/openapi/soha-api.yaml +12199 -4982
  253. package/openapi/spec_generated.go +3 -3
  254. package/package.json +3 -1
  255. package/resource/manifest_health.go +155 -0
  256. package/resource/manifest_health_test.go +37 -0
  257. package/resource/models.go +14 -0
  258. package/resource/runtime/argocd.go +166 -0
  259. package/resource/runtime/argocd_integration_test.go +142 -0
  260. package/resource/runtime/argocd_observation.go +143 -0
  261. package/resource/runtime/argocd_operation.go +253 -0
  262. package/resource/runtime/argocd_resources.go +115 -0
  263. package/resource/runtime/argocd_resources_test.go +107 -0
  264. package/resource/runtime/argocd_test.go +386 -0
  265. package/resource/runtime/health.go +115 -0
  266. package/resource/runtime/health_test.go +78 -0
  267. package/resource/runtime/operator_integration_test.go +174 -0
  268. package/resource/runtime/ownership.go +178 -0
  269. package/resource/runtime/ownership_test.go +178 -0
  270. package/resource/runtime/rollout_integration_test.go +287 -0
  271. package/resource/runtime/rollout_observation.go +252 -0
  272. package/resource/runtime/rollout_operation.go +398 -0
  273. package/resource/runtime/rollout_resources.go +385 -0
  274. package/resource/runtime/rollout_task.go +165 -0
  275. package/resource/runtime/rollout_test.go +450 -0
@@ -0,0 +1,15 @@
1
+ {
2
+ "name": "Team delivery catalog",
3
+ "repositoryId": "repo-catalog",
4
+ "refType": "branch",
5
+ "refValue": "main",
6
+ "path": "templates",
7
+ "kinds": [
8
+ "BuildTemplate",
9
+ "DeploymentTemplate",
10
+ "WorkflowTemplate",
11
+ "Workflow"
12
+ ],
13
+ "enabled": true,
14
+ "expectedGeneration": -1
15
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "name": "Team delivery catalog",
3
+ "repositoryId": "repo-catalog",
4
+ "refType": "branch",
5
+ "refValue": "main",
6
+ "path": "templates",
7
+ "kinds": [
8
+ "Blueprint"
9
+ ],
10
+ "enabled": true,
11
+ "expectedGeneration": 0
12
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "name": "Team delivery catalog",
3
+ "repositoryId": "repo-catalog",
4
+ "refType": "branch",
5
+ "refValue": "main",
6
+ "path": "templates",
7
+ "kinds": [
8
+ "BuildTemplate",
9
+ "DeploymentTemplate",
10
+ "WorkflowTemplate",
11
+ "Workflow"
12
+ ],
13
+ "enabled": true,
14
+ "expectedGeneration": 0
15
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "name": "Commerce release",
3
+ "mode": "service_serial",
4
+ "stopOnFailure": false,
5
+ "targets": [
6
+ {
7
+ "id": "web-dev",
8
+ "applicationId": "app-web",
9
+ "serviceId": "web",
10
+ "applicationEnvironmentId": "dev",
11
+ "action": "build_deploy"
12
+ }
13
+ ],
14
+ "workflowTemplateId": "recipe"
15
+ }
@@ -0,0 +1,24 @@
1
+ {
2
+ "name": "Commerce release",
3
+ "mode": "service_serial",
4
+ "stopOnFailure": false,
5
+ "targets": [
6
+ {
7
+ "id": "web-dev",
8
+ "applicationId": "app-web",
9
+ "serviceId": "web",
10
+ "applicationEnvironmentId": "dev",
11
+ "action": "build_deploy"
12
+ },
13
+ {
14
+ "id": "pay-prod",
15
+ "applicationId": "app-pay",
16
+ "serviceId": "pay",
17
+ "applicationEnvironmentId": "prod",
18
+ "action": "build_deploy",
19
+ "dependsOn": [
20
+ "web-dev"
21
+ ]
22
+ }
23
+ ]
24
+ }
@@ -0,0 +1 @@
1
+ {"idempotencyKey":"short","definition":{"name":"Build","targets":[{"id":"build","applicationId":"app","serviceId":"service","action":"build"}]}}
@@ -0,0 +1 @@
1
+ {"idempotencyKey":"create-workflow-1","definition":{"name":"Build","targets":[{"id":"build","applicationId":"app","serviceId":"service","action":"build"}]}}
@@ -0,0 +1,7 @@
1
+ {
2
+ "templateId": "http",
3
+ "version": 1,
4
+ "serviceKey": "api",
5
+ "parameters": {},
6
+ "namespace": "production"
7
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "templateId": "http",
3
+ "version": 0,
4
+ "serviceKey": "api",
5
+ "parameters": {}
6
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "templateId": "http",
3
+ "version": 1,
4
+ "serviceKey": "api",
5
+ "parameters": {}
6
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "hostId": "host-1",
3
+ "projectId": "project-1",
4
+ "imageMappings": {}
5
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "hostId": "host-1",
3
+ "projectId": "project-1",
4
+ "imageMappings": {
5
+ "api": "main"
6
+ }
7
+ }
@@ -0,0 +1,19 @@
1
+ {
2
+ "deliveryPlanId": "plan-1",
3
+ "applicationId": "app-1",
4
+ "applicationEnvironmentId": "env-1",
5
+ "serviceId": "service-1",
6
+ "targetId": "target-1",
7
+ "hostId": "host-1",
8
+ "projectId": "project-1",
9
+ "projectDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
10
+ "renderedDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
11
+ "releaseBundleId": "bundle-1",
12
+ "preflightOperationId": "check-1",
13
+ "expectedServices": [
14
+ "api"
15
+ ],
16
+ "images": {
17
+ "api": "registry.example/api@sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
18
+ }
19
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "deliveryPlanId": "plan-1",
3
+ "applicationId": "app-1",
4
+ "applicationEnvironmentId": "env-1",
5
+ "serviceId": "service-1",
6
+ "targetId": "target-1",
7
+ "hostId": "host-1",
8
+ "projectId": "project-1",
9
+ "projectDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
10
+ "renderedDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
11
+ "releaseBundleId": "bundle-1",
12
+ "preflightOperationId": "check-1",
13
+ "deployOperationId": "deploy-1",
14
+ "expectedServices": [
15
+ "api"
16
+ ],
17
+ "images": {
18
+ "api": "registry.example/api@sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
19
+ }
20
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "operationId": "op-1",
3
+ "workerId": "worker-1",
4
+ "status": "canceled",
5
+ "payload": {
6
+ "containerId": "container-1"
7
+ },
8
+ "logs": [
9
+ "pulled image",
10
+ "started container"
11
+ ],
12
+ "cancellationAcknowledged": "true"
13
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "operationId": "op-1",
3
+ "workerId": "worker-1",
4
+ "status": "canceled",
5
+ "payload": {
6
+ "containerId": "container-1"
7
+ },
8
+ "logs": [
9
+ "pulled image",
10
+ "started container"
11
+ ],
12
+ "cancellationAcknowledged": true
13
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "hostId": "",
3
+ "name": "api"
4
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "hostId": "host",
3
+ "name": "api",
4
+ "sourceKind": "compose",
5
+ "idempotencyKey": "project-create-key",
6
+ "composeContent": "services:\n api:\n image: nginx:stable\n"
7
+ }
@@ -0,0 +1 @@
1
+ {"name":"development","requireCapacity":"true"}
@@ -0,0 +1 @@
1
+ {"name":"development","virtualizationConnectionId":"pve-dev","cpuCoreCount":2,"memoryBytes":4294967296,"diskBytes":42949672960,"requireCapacity":true}
@@ -0,0 +1,21 @@
1
+ {
2
+ "source": {
3
+ "repositoryUrl": "oci://registry.example/charts",
4
+ "chart": "http",
5
+ "version": "1.2.3",
6
+ "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
7
+ "values": {},
8
+ "secretRefs": {
9
+ "CHART_PASSWORD": "soha://secrets/chart-registry/versions/2"
10
+ },
11
+ "password": "forbidden"
12
+ },
13
+ "releaseName": "api",
14
+ "imageMappings": [
15
+ {
16
+ "containerName": "main",
17
+ "path": "/workload/image",
18
+ "value": "image"
19
+ }
20
+ ]
21
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "source": {
3
+ "repositoryUrl": "oci://registry.example/charts",
4
+ "chart": "http",
5
+ "version": "1.2.3",
6
+ "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
7
+ "values": {},
8
+ "secretRefs": {
9
+ "CHART_PASSWORD": "soha://secrets/chart-registry/versions/2"
10
+ }
11
+ },
12
+ "releaseName": "Other/namespace",
13
+ "imageMappings": [
14
+ {
15
+ "containerName": "main",
16
+ "path": "/workload/image",
17
+ "value": "image"
18
+ }
19
+ ]
20
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "source": {
3
+ "repositoryUrl": "oci://registry.example/charts",
4
+ "chart": "http",
5
+ "version": "1.2.3",
6
+ "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
7
+ "values": {},
8
+ "secretRefs": {
9
+ "CHART_PASSWORD": "soha://secrets/chart-registry/versions/2"
10
+ }
11
+ },
12
+ "releaseName": "api",
13
+ "imageMappings": [
14
+ {
15
+ "containerName": "main",
16
+ "path": "/workload/image",
17
+ "value": "image"
18
+ }
19
+ ]
20
+ }
@@ -0,0 +1,31 @@
1
+ {
2
+ "deliveryPlanId": "plan-1",
3
+ "targetId": "target-1",
4
+ "applicationId": "app-1",
5
+ "applicationEnvironmentId": "app-dev",
6
+ "serviceId": "api",
7
+ "serviceVersion": 1,
8
+ "clusterId": "cluster-1",
9
+ "namespace": "dev",
10
+ "releaseName": "api",
11
+ "operation": "install",
12
+ "chart": "http",
13
+ "chartVersion": "1.2.3",
14
+ "chartDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
15
+ "configurationDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
16
+ "valuesDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
17
+ "renderedDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
18
+ "expectedRevision": 0,
19
+ "resources": [
20
+ {
21
+ "apiVersion": "apps/v1",
22
+ "kind": "Deployment",
23
+ "namespace": "dev",
24
+ "name": "api"
25
+ }
26
+ ],
27
+ "preflightTaskId": "task-1",
28
+ "values": {
29
+ "password": "not-public"
30
+ }
31
+ }
@@ -0,0 +1,28 @@
1
+ {
2
+ "deliveryPlanId": "plan-1",
3
+ "targetId": "target-1",
4
+ "applicationId": "app-1",
5
+ "applicationEnvironmentId": "app-dev",
6
+ "serviceId": "api",
7
+ "serviceVersion": 1,
8
+ "clusterId": "cluster-1",
9
+ "namespace": "dev",
10
+ "releaseName": "api",
11
+ "operation": "adopt",
12
+ "chart": "http",
13
+ "chartVersion": "1.2.3",
14
+ "chartDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
15
+ "configurationDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
16
+ "valuesDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
17
+ "renderedDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
18
+ "expectedRevision": 0,
19
+ "resources": [
20
+ {
21
+ "apiVersion": "apps/v1",
22
+ "kind": "Deployment",
23
+ "namespace": "dev",
24
+ "name": "api"
25
+ }
26
+ ],
27
+ "preflightTaskId": "task-1"
28
+ }
@@ -0,0 +1,28 @@
1
+ {
2
+ "deliveryPlanId": "plan-1",
3
+ "targetId": "target-1",
4
+ "applicationId": "app-1",
5
+ "applicationEnvironmentId": "app-dev",
6
+ "serviceId": "api",
7
+ "serviceVersion": 1,
8
+ "clusterId": "cluster-1",
9
+ "namespace": "dev",
10
+ "releaseName": "api",
11
+ "operation": "install",
12
+ "chart": "http",
13
+ "chartVersion": "1.2.3",
14
+ "chartDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
15
+ "configurationDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
16
+ "valuesDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
17
+ "renderedDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
18
+ "expectedRevision": 0,
19
+ "resources": [
20
+ {
21
+ "apiVersion": "apps/v1",
22
+ "kind": "Deployment",
23
+ "namespace": "dev",
24
+ "name": "api"
25
+ }
26
+ ],
27
+ "preflightTaskId": "task-1"
28
+ }
@@ -0,0 +1 @@
1
+ {"id":"app-1","name":"Demo","slug":"demo","status":"degraded","createdAt":"2026-09-16T00:00:00Z","updatedAt":"2026-09-16T00:00:00Z"}
@@ -0,0 +1,12 @@
1
+ {
2
+ "application": {
3
+ "name": "Example",
4
+ "slug": "example",
5
+ "providerType": "link",
6
+ "status": "enabled",
7
+ "portalVisible": true,
8
+ "featured": false,
9
+ "sortOrder": 0,
10
+ "launchUrl": "https://app.example.com"
11
+ }
12
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "application": {
3
+ "name": "Example",
4
+ "slug": "example",
5
+ "providerType": "link",
6
+ "status": "enabled",
7
+ "portalVisible": true,
8
+ "featured": false,
9
+ "sortOrder": 0,
10
+ "launchUrl": "https://app.example.com"
11
+ },
12
+ "accessMode": "all_authenticated"
13
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "id": "outpost-new",
3
+ "name": "Office edge",
4
+ "mode": "agent",
5
+ "status": "offline",
6
+ "configurationVersion": 0,
7
+ "createdAt": "2026-09-13T00:00:00Z",
8
+ "updatedAt": "2026-09-13T00:00:00Z"
9
+ }
@@ -0,0 +1,17 @@
1
+ {
2
+ "id": "outpost-office",
3
+ "name": "Office edge",
4
+ "mode": "agent",
5
+ "status": "online",
6
+ "configurationVersion": 3,
7
+ "appliedConfigurationVersion": 3,
8
+ "runtimeStatus": "available",
9
+ "protocolVersion": "v1",
10
+ "runtimeVersion": "0.1.17",
11
+ "claimedAgentId": "outpost-office",
12
+ "lastHeartbeatAt": "2026-09-13T00:01:00Z",
13
+ "configurationExpiresAt": "2026-09-13T00:10:00Z",
14
+ "metadata": { "site": "office" },
15
+ "createdAt": "2026-09-13T00:00:00Z",
16
+ "updatedAt": "2026-09-13T00:01:00Z"
17
+ }
@@ -0,0 +1,12 @@
1
+ {
2
+ "id": "outpost-new",
3
+ "name": "Office edge",
4
+ "mode": "agent",
5
+ "status": "offline",
6
+ "configurationVersion": 0,
7
+ "runtimeStatus": "unavailable",
8
+ "runtimeReason": "awaiting_registration",
9
+ "forwardAuthUrl": "https://edge.example.com/api/v1/outpost/forward-auth",
10
+ "createdAt": "2026-09-13T00:00:00Z",
11
+ "updatedAt": "2026-09-13T00:00:00Z"
12
+ }
@@ -0,0 +1,3 @@
1
+ {
2
+ "controlPlaneUrl": "https://soha.example.com"
3
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "protocolVersion": "v1",
3
+ "controlPlaneUrl": "https://soha.example.com",
4
+ "trustKeyId": "key1",
5
+ "trustPublicKey": "public-key"
6
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "name": "Office edge",
3
+ "mode": "agent",
4
+ "status": "online",
5
+ "runtimeStatus": "available",
6
+ "lastHeartbeatAt": "2099-01-01T00:00:00Z"
7
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "name": "Office edge",
3
+ "mode": "agent",
4
+ "status": "offline",
5
+ "forwardAuthUrl": "https://edge.example.com/api/v1/outpost/forward-auth"
6
+ }
@@ -0,0 +1,8 @@
1
+ {
2
+ "name": "Office edge",
3
+ "mode": "agent",
4
+ "status": "online",
5
+ "endpoint": "https://edge.example.com",
6
+ "version": "legacy-input-is-ignored",
7
+ "metadata": { "site": "office" }
8
+ }
@@ -0,0 +1 @@
1
+ {"providerId":"oidc-1","configurationStatus":"running","issues":[],"endpoints":{},"requiresOutpostToken":false,"migrationRequired":false}
@@ -0,0 +1 @@
1
+ {"providerId":"oidc-1","configurationStatus":"incomplete","issues":["public_url_unconfigured","oidc_client_missing"],"endpoints":{},"requiresOutpostToken":false,"migrationRequired":false}
@@ -0,0 +1 @@
1
+ {"providerId":"proxy-1","configurationStatus":"complete","issues":[],"endpoints":{"forwardAuthUrl":"https://edge.example.com/api/v1/outpost/forward-auth","loginUrl":"https://soha.example.com/api/v1/provider/proxy/start?provider_id=proxy-1"},"requiresOutpostToken":true,"migrationRequired":false,"outpostId":"edge-1","outpostName":"Office","outpostRuntimeStatus":"unavailable","outpostRuntimeReason":"awaiting_registration"}
@@ -0,0 +1,8 @@
1
+ {
2
+ "providerId": "provider-oidc",
3
+ "userId": "user-1",
4
+ "protocol": "oidc",
5
+ "attributes": {
6
+ "roles": "viewer"
7
+ }
8
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "providerId": "provider-oidc",
3
+ "userId": "user-1",
4
+ "protocol": "oidc",
5
+ "attributes": {
6
+ "sub": [
7
+ "user-1"
8
+ ],
9
+ "roles": [
10
+ "viewer"
11
+ ]
12
+ }
13
+ }
@@ -0,0 +1 @@
1
+ {"kind":"WorkloadCronJob","name":"daily-report","ageSeconds":120,"generation":-1}
@@ -0,0 +1 @@
1
+ {"apiVersion":"workloads.soha.io/v1alpha1","kind":"WorkloadCronJob","name":"daily-report","namespace":"demo","ageSeconds":120,"uid":"observed-root-uid","generation":3,"deletingAt":"2026-09-14T00:00:00Z","finalizers":["operator.example/cleanup"]}
@@ -0,0 +1,20 @@
1
+ {
2
+ "operationId": "create-1",
3
+ "clusterId": "cluster-1",
4
+ "contentHash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
5
+ "status": "running",
6
+ "documents": [
7
+ {
8
+ "index": 0,
9
+ "resource": {
10
+ "apiVersion": "v1",
11
+ "kind": "Service",
12
+ "name": "api",
13
+ "namespace": "team",
14
+ "namespaced": true,
15
+ "content": "must not return manifest"
16
+ },
17
+ "status": "not_started"
18
+ }
19
+ ]
20
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "operationId": "create-1",
3
+ "clusterId": "cluster-1",
4
+ "contentHash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
5
+ "status": "succeeded",
6
+ "documents": [
7
+ {
8
+ "index": 0,
9
+ "resource": {
10
+ "apiVersion": "v1",
11
+ "kind": "Service",
12
+ "name": "api",
13
+ "namespace": "team",
14
+ "namespaced": true,
15
+ "uid": "original-uid"
16
+ },
17
+ "status": "succeeded"
18
+ }
19
+ ]
20
+ }
@@ -0,0 +1,19 @@
1
+ {
2
+ "operationId": "create-1",
3
+ "clusterId": "cluster-1",
4
+ "contentHash": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
5
+ "status": "running",
6
+ "documents": [
7
+ {
8
+ "index": 0,
9
+ "resource": {
10
+ "apiVersion": "v1",
11
+ "kind": "Service",
12
+ "name": "api",
13
+ "namespace": "team",
14
+ "namespaced": true
15
+ },
16
+ "status": "not_started"
17
+ }
18
+ ]
19
+ }