@opensoha/contracts 0.1.17 → 0.1.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (275) hide show
  1. package/COMPATIBILITY.md +72 -0
  2. package/README.md +38 -0
  3. package/auth/catalog_generated.go +2 -2
  4. package/auth/outpost_headers.go +17 -0
  5. package/auth/outpost_headers_test.go +16 -0
  6. package/auth/permission-catalog.json +383 -1
  7. package/compat/consumer-revisions.json +7 -0
  8. package/compat/json-schema-ecosystem-0.1.0.json +1 -1
  9. package/compat/openapi-loose-boundaries-0.1.0.json +78 -46
  10. package/delivery/canonical.go +136 -0
  11. package/delivery/document.go +203 -0
  12. package/delivery/document.schema.json +1527 -0
  13. package/delivery/document_test.go +191 -0
  14. package/delivery/parser.go +155 -0
  15. package/evaluation/evaluation-run.schema.json +64 -10
  16. package/fixtures/json-schema/gateway-manifest/invalid/bad-execution-mode.json +73 -0
  17. package/fixtures/json-schema/gateway-manifest/invalid/unversioned-check.json +85 -0
  18. package/fixtures/json-schema/gateway-manifest/valid/checks.json +86 -0
  19. package/fixtures/json-schema/gateway-manifest/valid/versioned-task.json +73 -0
  20. package/fixtures/json-schema/network-ingest-event/invalid/vpn-probe-negative-rtt.json +34 -0
  21. package/fixtures/json-schema/network-ingest-event/invalid/vpn-stats-secret.json +27 -0
  22. package/fixtures/json-schema/network-ingest-event/valid/vpn-probe-batch.json +45 -0
  23. package/fixtures/json-schema/network-ingest-event/valid/vpn-tunnel-stats.json +26 -0
  24. package/fixtures/json-schema/network-runtime-protocol/invalid/vpn-managed-bad-token.json +15 -0
  25. package/fixtures/json-schema/network-runtime-protocol/invalid/vpn-managed-mode-override.json +16 -0
  26. package/fixtures/json-schema/network-runtime-protocol/valid/managed-vpn-macos-enrollment.json +27 -0
  27. package/fixtures/json-schema/network-runtime-protocol/valid/vpn-managed-connect.json +15 -0
  28. package/fixtures/openapi/AgentChatInput/invalid/empty-question.json +4 -0
  29. package/fixtures/openapi/AgentChatInput/invalid/system-role.json +9 -0
  30. package/fixtures/openapi/AgentChatInput/valid/authorized-background.json +5 -0
  31. package/fixtures/openapi/AgentChatInput/valid/conversation.json +15 -0
  32. package/fixtures/openapi/AgentRunnerToolCallRequest/invalid/model-identity.json +1 -0
  33. package/fixtures/openapi/AgentRunnerToolCallRequest/valid/search.json +1 -0
  34. package/fixtures/openapi/ApplicationInput/invalid/negative-version.json +6 -0
  35. package/fixtures/openapi/ApplicationInput/invalid/zero-version.json +6 -0
  36. package/fixtures/openapi/ApplicationInput/valid/versioned.json +6 -0
  37. package/fixtures/openapi/ApprovalRequest/invalid/resolved-scopes.json +20 -0
  38. package/fixtures/openapi/ApprovalRequest/valid/resolved-scopes.json +21 -0
  39. package/fixtures/openapi/BuildTemplateInput/invalid/negative-revision.json +6 -0
  40. package/fixtures/openapi/BuildTemplateInput/valid/draft.json +11 -0
  41. package/fixtures/openapi/BuildTriggerRequest/invalid/no-ref.json +1 -0
  42. package/fixtures/openapi/BuildTriggerRequest/valid/no-environment.json +1 -0
  43. package/fixtures/openapi/BuildpacksConfiguration/invalid/mutable-builder.json +5 -0
  44. package/fixtures/openapi/BuildpacksConfiguration/invalid/privilege-override.json +6 -0
  45. package/fixtures/openapi/BuildpacksConfiguration/invalid/unsupported-platform.json +5 -0
  46. package/fixtures/openapi/BuildpacksConfiguration/valid/pinned.json +5 -0
  47. package/fixtures/openapi/CapabilityAssessment/invalid/contract.json +16 -0
  48. package/fixtures/openapi/CapabilityAssessment/valid/contract.json +16 -0
  49. package/fixtures/openapi/CapabilityPlan/invalid/contract.json +16 -0
  50. package/fixtures/openapi/CapabilityPlan/valid/contract.json +19 -0
  51. package/fixtures/openapi/CapabilityPlanValidation/invalid/contract.json +5 -0
  52. package/fixtures/openapi/CapabilityPlanValidation/valid/contract.json +11 -0
  53. package/fixtures/openapi/CapabilityTask/invalid/contract.json +33 -0
  54. package/fixtures/openapi/CapabilityTask/valid/contract.json +34 -0
  55. package/fixtures/openapi/CapabilityTaskInput/invalid/contract.json +22 -0
  56. package/fixtures/openapi/CapabilityTaskInput/valid/contract.json +22 -0
  57. package/fixtures/openapi/CapabilityValueSemantic/invalid/contract.json +4 -0
  58. package/fixtures/openapi/CapabilityValueSemantic/valid/contract.json +7 -0
  59. package/fixtures/openapi/ConnectionCheckResult/invalid/missing-health.json +1 -0
  60. package/fixtures/openapi/ConnectionCheckResult/invalid/task-id.json +1 -0
  61. package/fixtures/openapi/ConnectionCheckResult/valid/failure.json +1 -0
  62. package/fixtures/openapi/ConnectionCheckResult/valid/healthy.json +1 -0
  63. package/fixtures/openapi/DeliveryAccessResult/invalid/release-verification.json +8 -0
  64. package/fixtures/openapi/DeliveryAccessResult/valid/release-verification.json +8 -0
  65. package/fixtures/openapi/DeliveryBatchAssessment/invalid/release-verification.json +11 -0
  66. package/fixtures/openapi/DeliveryBatchAssessment/valid/release-verification.json +11 -0
  67. package/fixtures/openapi/DeliveryBatchAssessmentInput/invalid/release-verification.json +9 -0
  68. package/fixtures/openapi/DeliveryBatchAssessmentInput/valid/release-verification.json +8 -0
  69. package/fixtures/openapi/DeliveryBatchInput/invalid/ambiguous-source.json +19 -0
  70. package/fixtures/openapi/DeliveryBatchInput/invalid/missing-idempotency.json +16 -0
  71. package/fixtures/openapi/DeliveryBatchInput/valid/quick-deploy.json +17 -0
  72. package/fixtures/openapi/DeliveryBatchInput/valid/saved-workflow.json +5 -0
  73. package/fixtures/openapi/DeliveryBlueprintInput/invalid/unversioned-preset.json +31 -0
  74. package/fixtures/openapi/DeliveryBlueprintInput/valid/service-preset.json +32 -0
  75. package/fixtures/openapi/DeliveryDocument/invalid/unknown-field.json +24 -0
  76. package/fixtures/openapi/DeliveryDocument/invalid/unknown-kind.json +23 -0
  77. package/fixtures/openapi/DeliveryDocument/invalid/unknown-version.json +23 -0
  78. package/fixtures/openapi/DeliveryDocument/valid/build-template.json +26 -0
  79. package/fixtures/openapi/DeliveryDocument/valid/deployment-template.json +26 -0
  80. package/fixtures/openapi/DeliveryDocument/valid/legacy-dag.json +39 -0
  81. package/fixtures/openapi/DeliveryDocument/valid/workflow-template.json +23 -0
  82. package/fixtures/openapi/DeliveryDocument/valid/workflow.json +20 -0
  83. package/fixtures/openapi/DeliveryDraftInput/invalid/short-idempotency-key.json +30 -0
  84. package/fixtures/openapi/DeliveryDraftInput/valid/idempotent-create.json +30 -0
  85. package/fixtures/openapi/DeliveryDraftService/invalid/zero-version.json +7 -0
  86. package/fixtures/openapi/DeliveryDraftService/valid/versioned-template.json +9 -0
  87. package/fixtures/openapi/DeliveryExecutionHistoryPage/invalid-kind.json +9 -0
  88. package/fixtures/openapi/DeliveryExecutionHistoryPage/valid-build.json +16 -0
  89. package/fixtures/openapi/DeliveryExecutionHistoryPage/valid-empty.json +3 -0
  90. package/fixtures/openapi/DeliveryPlanApprovalInput/invalid/confirm.json +1 -0
  91. package/fixtures/openapi/DeliveryPlanApprovalInput/valid/approve.json +1 -0
  92. package/fixtures/openapi/DeliveryPlanInput/invalid/draft-manifest-revision.json +1 -0
  93. package/fixtures/openapi/DeliveryPlanInput/valid/manifest-revision.json +1 -0
  94. package/fixtures/openapi/DeliveryTargetInput/invalid/deploy-without-environment.json +7 -0
  95. package/fixtures/openapi/DeliveryTargetInput/valid/build-without-environment.json +6 -0
  96. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/duplicate-kind.json +13 -0
  97. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/embedded-credentials.json +16 -0
  98. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/empty-kinds.json +10 -0
  99. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/negative-generation.json +15 -0
  100. package/fixtures/openapi/DeliveryTemplateSourceInput/invalid/unknown-kind.json +12 -0
  101. package/fixtures/openapi/DeliveryTemplateSourceInput/valid/manual-source.json +15 -0
  102. package/fixtures/openapi/DeliveryWorkflowDefinition/invalid/unversioned-template.json +15 -0
  103. package/fixtures/openapi/DeliveryWorkflowDefinition/valid/cross-app.json +24 -0
  104. package/fixtures/openapi/DeliveryWorkflowInput/invalid/short-key.json +1 -0
  105. package/fixtures/openapi/DeliveryWorkflowInput/valid/idempotent-create.json +1 -0
  106. package/fixtures/openapi/DeploymentTemplatePreviewInput/invalid/invalid-target-override.json +7 -0
  107. package/fixtures/openapi/DeploymentTemplatePreviewInput/invalid/invalid-zero-version.json +6 -0
  108. package/fixtures/openapi/DeploymentTemplatePreviewInput/valid/valid.json +6 -0
  109. package/fixtures/openapi/DockerDeliveryConfiguration/invalid/empty-mappings.json +5 -0
  110. package/fixtures/openapi/DockerDeliveryConfiguration/valid/compose.json +7 -0
  111. package/fixtures/openapi/DockerDeliverySnapshot/invalid/missing-required-field.json +19 -0
  112. package/fixtures/openapi/DockerDeliverySnapshot/valid/frozen-project.json +20 -0
  113. package/fixtures/openapi/DockerOperationCallbackRequest/invalid/cancellation-acknowledged-not-boolean.json +13 -0
  114. package/fixtures/openapi/DockerOperationCallbackRequest/valid/cancellation-acknowledged.json +13 -0
  115. package/fixtures/openapi/DockerProjectInput/invalid/empty-host.json +4 -0
  116. package/fixtures/openapi/DockerProjectInput/valid/inline-idempotent.json +7 -0
  117. package/fixtures/openapi/DockerQuickCreateHostInput/invalid/capacity-type.json +1 -0
  118. package/fixtures/openapi/DockerQuickCreateHostInput/valid/capacity.json +1 -0
  119. package/fixtures/openapi/HelmDeliveryConfiguration/invalid/plain-credential.json +21 -0
  120. package/fixtures/openapi/HelmDeliveryConfiguration/invalid/release-name.json +20 -0
  121. package/fixtures/openapi/HelmDeliveryConfiguration/valid/private-oci.json +20 -0
  122. package/fixtures/openapi/HelmDeliverySnapshot/invalid/secret-plan.json +31 -0
  123. package/fixtures/openapi/HelmDeliverySnapshot/invalid/unknown-operation.json +28 -0
  124. package/fixtures/openapi/HelmDeliverySnapshot/valid/first-install.json +28 -0
  125. package/fixtures/openapi/IdentityApplication/invalid/outpost-status.json +1 -0
  126. package/fixtures/openapi/IdentityApplicationOnboardingInput/invalid/missing-access.json +12 -0
  127. package/fixtures/openapi/IdentityApplicationOnboardingInput/valid/link.json +13 -0
  128. package/fixtures/openapi/IdentityOutpost/invalid/missing-runtime-status.json +9 -0
  129. package/fixtures/openapi/IdentityOutpost/valid/healthy.json +17 -0
  130. package/fixtures/openapi/IdentityOutpost/valid/unregistered.json +12 -0
  131. package/fixtures/openapi/IdentityOutpostDeployment/invalid/missing-protocol.json +3 -0
  132. package/fixtures/openapi/IdentityOutpostDeployment/valid/remote.json +6 -0
  133. package/fixtures/openapi/IdentityOutpostInput/invalid/forged-observation.json +7 -0
  134. package/fixtures/openapi/IdentityOutpostInput/valid/forward-auth.json +6 -0
  135. package/fixtures/openapi/IdentityOutpostInput/valid/legacy.json +8 -0
  136. package/fixtures/openapi/IdentityProviderSetup/invalid/fake-verification.json +1 -0
  137. package/fixtures/openapi/IdentityProviderSetup/valid/incomplete.json +1 -0
  138. package/fixtures/openapi/IdentityProviderSetup/valid/remote.json +1 -0
  139. package/fixtures/openapi/IdentityProviderUserMetadata/invalid/attributes.json +8 -0
  140. package/fixtures/openapi/IdentityProviderUserMetadata/valid/attributes.json +13 -0
  141. package/fixtures/openapi/KubernetesCustomResource/invalid/negative-generation.json +1 -0
  142. package/fixtures/openapi/KubernetesCustomResource/valid/deleting-operator.json +1 -0
  143. package/fixtures/openapi/KubernetesResourceCreationReceipt/invalid/manifest-content.json +20 -0
  144. package/fixtures/openapi/KubernetesResourceCreationReceipt/valid/confirmed.json +20 -0
  145. package/fixtures/openapi/KubernetesResourceCreationReceipt/valid/unknown.json +19 -0
  146. package/fixtures/openapi/ManifestDeploymentEnvelope/invalid/negative-resource-observation.json +57 -0
  147. package/fixtures/openapi/ManifestDeploymentEnvelope/valid/operator-deleting.json +57 -0
  148. package/fixtures/openapi/ManifestExecutionTaskPayload/invalid/gitops-empty.json +7 -0
  149. package/fixtures/openapi/ManifestExecutionTaskPayload/valid/gitops-frozen-children.json +18 -0
  150. package/fixtures/openapi/ManifestKustomizeOptions/invalid/escaping-entry.json +1 -0
  151. package/fixtures/openapi/ManifestKustomizeOptions/invalid/mutable-image.json +1 -0
  152. package/fixtures/openapi/ManifestKustomizeOptions/valid/overlay-images.json +7 -0
  153. package/fixtures/openapi/ManifestRevisionInput/invalid/missing-version.json +1 -0
  154. package/fixtures/openapi/ManifestRevisionInput/valid/current-draft.json +1 -0
  155. package/fixtures/openapi/ManifestServiceTemplateInputs/invalid/mutable-image.json +8 -0
  156. package/fixtures/openapi/ManifestServiceTemplateInputs/valid/frozen-service-image.json +9 -0
  157. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/auto-with-gateway.json +6 -0
  158. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/missing-manual-gateway.json +5 -0
  159. package/fixtures/openapi/NetworkVPNConnectionIntentInput/invalid/mode-override.json +7 -0
  160. package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/auto-intent.json +5 -0
  161. package/fixtures/openapi/NetworkVPNConnectionIntentInput/valid/manual-intent.json +6 -0
  162. package/fixtures/openapi/NetworkVPNProfileInput/invalid/unknown-private-key.json +25 -0
  163. package/fixtures/openapi/NetworkVPNProfileInput/valid/assigned-profile.json +24 -0
  164. package/fixtures/openapi/NetworkVPNSelectionPolicyInput/invalid/unbounded-attempts.json +21 -0
  165. package/fixtures/openapi/NetworkVPNSelectionPolicyInput/valid/provider-policy.json +21 -0
  166. package/fixtures/openapi/ObservabilityMetricAssessmentInput/invalid/arbitrary-expression.json +10 -0
  167. package/fixtures/openapi/ObservabilityMetricAssessmentInput/valid/metric-window.json +10 -0
  168. package/fixtures/openapi/PluginManifest/valid/hermes-api.json +53 -0
  169. package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/missing-identity.json +5 -0
  170. package/fixtures/openapi/ProgressiveRolloutControlInput/invalid/skip-analysis.json +5 -0
  171. package/fixtures/openapi/ProgressiveRolloutControlInput/valid/pause.json +5 -0
  172. package/fixtures/openapi/ReleaseTargetInput/invalid/missing-required-field.json +15 -0
  173. package/fixtures/openapi/ReleaseTargetInput/valid/docker-compose.json +16 -0
  174. package/fixtures/openapi/RepositoryAnalysis/invalid/moving-ref.json +11 -0
  175. package/fixtures/openapi/RepositoryAnalysis/valid/go.json +29 -0
  176. package/fixtures/openapi/RepositoryAnalysisInput/invalid/arbitrary-source-url.json +6 -0
  177. package/fixtures/openapi/RepositoryAnalysisInput/invalid/missing-ref.json +4 -0
  178. package/fixtures/openapi/RepositoryAnalysisInput/valid/nested-project.json +6 -0
  179. package/fixtures/openapi/ServiceDeploymentTemplateBinding/invalid/invalid-unpinned.json +4 -0
  180. package/fixtures/openapi/ServiceDeploymentTemplateBinding/valid/valid.json +7 -0
  181. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-executable-schema.json +25 -0
  182. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-missing-schema.json +21 -0
  183. package/fixtures/openapi/ServiceDeploymentTemplateInput/invalid/invalid-mixed-renderers.json +40 -0
  184. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/valid-nested-parameters.json +41 -0
  185. package/fixtures/openapi/ServiceDeploymentTemplateInput/valid/valid-yaml.json +34 -0
  186. package/fixtures/openapi/TemplatePublishInput/invalid/missing-revision.json +1 -0
  187. package/fixtures/openapi/TemplatePublishInput/invalid/unknown-field.json +4 -0
  188. package/fixtures/openapi/TemplatePublishInput/invalid/zero-revision.json +3 -0
  189. package/fixtures/openapi/TemplatePublishInput/valid/revision.json +3 -0
  190. package/fixtures/openapi/ToolCapability/invalid/bad-idempotency.json +35 -0
  191. package/fixtures/openapi/ToolCapability/invalid/unversioned-check.json +47 -0
  192. package/fixtures/openapi/ToolCapability/valid/checks.json +48 -0
  193. package/fixtures/openapi/ToolCapability/valid/versioned-task.json +35 -0
  194. package/fixtures/openapi/ToolInvocationRequest/invalid/empty-version.json +8 -0
  195. package/fixtures/openapi/ToolInvocationRequest/valid/versioned.json +8 -0
  196. package/fixtures/openapi/ToolInvocationResult/invalid/missing-status-call.json +13 -0
  197. package/fixtures/openapi/ToolInvocationResult/valid/task.json +20 -0
  198. package/fixtures/openapi/UpdateBrandingSettingsRequest/invalid/dark-logo-type.json +9 -0
  199. package/fixtures/openapi/UpdateBrandingSettingsRequest/valid/dark-logos.json +10 -0
  200. package/fixtures/openapi/VirtualMachineCreateInput/invalid/capacity-type.json +1 -0
  201. package/fixtures/openapi/VirtualMachineCreateInput/valid/capacity.json +1 -0
  202. package/fixtures/openapi/VirtualizationCapacityInput/invalid/missing-disk.json +1 -0
  203. package/fixtures/openapi/VirtualizationCapacityInput/valid/running-vm.json +1 -0
  204. package/fixtures/openapi/VirtualizationCapacityResult/invalid/invented-status.json +1 -0
  205. package/fixtures/openapi/VirtualizationCapacityResult/valid/available.json +1 -0
  206. package/fixtures/openapi/VirtualizationWorkerCreateInput/invalid/secret-input.json +5 -0
  207. package/fixtures/openapi/VirtualizationWorkerCreateInput/valid/one-worker.json +4 -0
  208. package/fixtures/openapi/VirtualizationWorkerPoolInput/invalid/external-owner.json +27 -0
  209. package/fixtures/openapi/VirtualizationWorkerPoolInput/invalid/zero-budget.json +27 -0
  210. package/fixtures/openapi/VirtualizationWorkerPoolInput/valid/registered.json +27 -0
  211. package/fixtures/openapi/VirtualizationWorkerPoolListEnvelope/invalid/nested-data.json +5 -0
  212. package/fixtures/openapi/VirtualizationWorkerPoolListEnvelope/valid/empty.json +3 -0
  213. package/fixtures/openapi/WorkbenchContextSelection/invalid/missing-file-content.json +8 -0
  214. package/fixtures/openapi/WorkbenchContextSelection/invalid/unknown-reference-kind.json +8 -0
  215. package/fixtures/openapi/WorkbenchContextSelection/valid/text-and-resource.json +17 -0
  216. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/trigger-without-plan.json +10 -0
  217. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/unknown-trigger.json +28 -0
  218. package/fixtures/openapi/WorkbenchInspectionTaskInput/invalid/zero-interval.json +28 -0
  219. package/fixtures/openapi/WorkbenchInspectionTaskInput/valid/alert-capability.json +30 -0
  220. package/fixtures/openapi/WorkbenchInspectionTaskInput/valid/scheduled-capability.json +28 -0
  221. package/fixtures/openapi/WorkbenchInspectionTrigger/invalid/missing-rule.json +3 -0
  222. package/fixtures/openapi/WorkbenchInspectionTrigger/invalid/schedule-alert-selector.json +4 -0
  223. package/fixtures/openapi/WorkbenchInspectionTrigger/valid/schedule.json +3 -0
  224. package/fixtures/openapi/WorkbenchModelPreferences/invalid/unknown-effort.json +1 -0
  225. package/fixtures/openapi/WorkbenchModelPreferences/valid/selected.json +1 -0
  226. package/fixtures/openapi/WorkflowCatalogPage/invalid/unsupported-kind.json +6 -0
  227. package/fixtures/openapi/WorkflowCatalogPage/valid/build-without-environment.json +6 -0
  228. package/fixtures/openapi/WorkflowTemplateInput/invalid/zero-revision.json +6 -0
  229. package/fixtures/openapi/WorkflowTemplateInput/valid/draft.json +10 -0
  230. package/gen/go/sohaapi/client.go +11 -3
  231. package/gen/go/sohaapi/client_test.go +26 -3
  232. package/gen/go/sohaapi/types.go +8103 -863
  233. package/gen/go/sohaapi/types_test.go +100 -1
  234. package/gen/go/sohaapi/vpn_models_test.go +21 -0
  235. package/gen/ts/sohaapi/index.ts +20390 -13160
  236. package/go.mod +107 -5
  237. package/go.sum +379 -16
  238. package/helmrelease/delivery.go +283 -0
  239. package/helmrelease/delivery_test.go +102 -0
  240. package/helmrelease/frozen_chart.go +91 -0
  241. package/helmrelease/result.go +27 -0
  242. package/helmrelease/runtime/delivery.go +508 -0
  243. package/helmrelease/runtime/delivery_test.go +236 -0
  244. package/helmrelease/runtime/resources_test.go +60 -0
  245. package/helmrelease/values.go +99 -0
  246. package/knowledge/context-envelope.schema.json +1 -0
  247. package/mcp/gateway-manifest.schema.json +387 -72
  248. package/network/README.md +40 -0
  249. package/network/network-ingest-event.schema.json +228 -0
  250. package/network/network-runtime-protocol.schema.json +457 -1
  251. package/openapi/soha-api.json +54874 -38722
  252. package/openapi/soha-api.yaml +12199 -4982
  253. package/openapi/spec_generated.go +3 -3
  254. package/package.json +3 -1
  255. package/resource/manifest_health.go +155 -0
  256. package/resource/manifest_health_test.go +37 -0
  257. package/resource/models.go +14 -0
  258. package/resource/runtime/argocd.go +166 -0
  259. package/resource/runtime/argocd_integration_test.go +142 -0
  260. package/resource/runtime/argocd_observation.go +143 -0
  261. package/resource/runtime/argocd_operation.go +253 -0
  262. package/resource/runtime/argocd_resources.go +115 -0
  263. package/resource/runtime/argocd_resources_test.go +107 -0
  264. package/resource/runtime/argocd_test.go +386 -0
  265. package/resource/runtime/health.go +115 -0
  266. package/resource/runtime/health_test.go +78 -0
  267. package/resource/runtime/operator_integration_test.go +174 -0
  268. package/resource/runtime/ownership.go +178 -0
  269. package/resource/runtime/ownership_test.go +178 -0
  270. package/resource/runtime/rollout_integration_test.go +287 -0
  271. package/resource/runtime/rollout_observation.go +252 -0
  272. package/resource/runtime/rollout_operation.go +398 -0
  273. package/resource/runtime/rollout_resources.go +385 -0
  274. package/resource/runtime/rollout_task.go +165 -0
  275. package/resource/runtime/rollout_test.go +450 -0
@@ -0,0 +1,57 @@
1
+ {
2
+ "data": {
3
+ "id": "manifest-deployment-prod",
4
+ "packageId": "manifest-package-ingress",
5
+ "bindingId": "manifest-binding-prod",
6
+ "generation": 7,
7
+ "spec": {
8
+ "desiredRevision": 12,
9
+ "desiredDigest": "sha256:0123456789abcdef",
10
+ "reconcilePolicy": "continuous",
11
+ "driftPolicy": "report",
12
+ "deletionPolicy": "orphan"
13
+ },
14
+ "status": {
15
+ "observedGeneration": 7,
16
+ "appliedRevision": 12,
17
+ "appliedDigest": "sha256:0123456789abcdef",
18
+ "lastKnownGoodRevision": 11,
19
+ "phase": "deleting",
20
+ "conditions": [
21
+ {
22
+ "type": "Healthy",
23
+ "status": "true",
24
+ "reason": "ResourcesHealthy",
25
+ "message": "All managed resources are healthy.",
26
+ "observedGeneration": 7,
27
+ "lastTransitionAt": "2026-07-30T00:00:00Z",
28
+ "evidenceRefs": []
29
+ }
30
+ ],
31
+ "inventory": [
32
+ {
33
+ "deploymentId": "manifest-deployment-prod",
34
+ "generation": 7,
35
+ "apiVersion": "workloads.soha.io/v1alpha1",
36
+ "kind": "WorkloadCronJob",
37
+ "namespace": "test",
38
+ "name": "periodic",
39
+ "uid": "operator-uid",
40
+ "resourceVersion": "42",
41
+ "resourceGeneration": 3,
42
+ "observedResourceGeneration": -1,
43
+ "deletingAt": "2026-09-14T00:00:00Z",
44
+ "finalizers": [
45
+ "test.soha.io/cleanup"
46
+ ],
47
+ "desiredObjectDigest": "sha256:desired",
48
+ "observedObjectDigest": "sha256:observed",
49
+ "health": "degraded",
50
+ "lastObservedAt": "2026-09-14T00:00:00Z"
51
+ }
52
+ ]
53
+ },
54
+ "createdAt": "2026-07-30T00:00:00Z",
55
+ "updatedAt": "2026-07-30T00:05:00Z"
56
+ }
57
+ }
@@ -0,0 +1,57 @@
1
+ {
2
+ "data": {
3
+ "id": "manifest-deployment-prod",
4
+ "packageId": "manifest-package-ingress",
5
+ "bindingId": "manifest-binding-prod",
6
+ "generation": 7,
7
+ "spec": {
8
+ "desiredRevision": 12,
9
+ "desiredDigest": "sha256:0123456789abcdef",
10
+ "reconcilePolicy": "continuous",
11
+ "driftPolicy": "report",
12
+ "deletionPolicy": "orphan"
13
+ },
14
+ "status": {
15
+ "observedGeneration": 7,
16
+ "appliedRevision": 12,
17
+ "appliedDigest": "sha256:0123456789abcdef",
18
+ "lastKnownGoodRevision": 11,
19
+ "phase": "deleting",
20
+ "conditions": [
21
+ {
22
+ "type": "Healthy",
23
+ "status": "true",
24
+ "reason": "ResourcesHealthy",
25
+ "message": "All managed resources are healthy.",
26
+ "observedGeneration": 7,
27
+ "lastTransitionAt": "2026-07-30T00:00:00Z",
28
+ "evidenceRefs": []
29
+ }
30
+ ],
31
+ "inventory": [
32
+ {
33
+ "deploymentId": "manifest-deployment-prod",
34
+ "generation": 7,
35
+ "apiVersion": "workloads.soha.io/v1alpha1",
36
+ "kind": "WorkloadCronJob",
37
+ "namespace": "test",
38
+ "name": "periodic",
39
+ "uid": "operator-uid",
40
+ "resourceVersion": "42",
41
+ "resourceGeneration": 3,
42
+ "observedResourceGeneration": 0,
43
+ "deletingAt": "2026-09-14T00:00:00Z",
44
+ "finalizers": [
45
+ "test.soha.io/cleanup"
46
+ ],
47
+ "desiredObjectDigest": "sha256:desired",
48
+ "observedObjectDigest": "sha256:observed",
49
+ "health": "degraded",
50
+ "lastObservedAt": "2026-09-14T00:00:00Z"
51
+ }
52
+ ]
53
+ },
54
+ "createdAt": "2026-07-30T00:00:00Z",
55
+ "updatedAt": "2026-07-30T00:05:00Z"
56
+ }
57
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "action": "apply",
3
+ "packageId": "package-1",
4
+ "generation": 1,
5
+ "idempotencyKey": "operation-1",
6
+ "gitOpsDocuments": []
7
+ }
@@ -0,0 +1,18 @@
1
+ {
2
+ "action": "apply",
3
+ "packageId": "package-1",
4
+ "generation": 1,
5
+ "idempotencyKey": "operation-1",
6
+ "gitOpsDocuments": [
7
+ {
8
+ "index": 0,
9
+ "path": "deployment.yaml",
10
+ "apiVersion": "apps/v1",
11
+ "kind": "Deployment",
12
+ "namespace": "test",
13
+ "name": "web",
14
+ "content": "{}",
15
+ "contentDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
16
+ }
17
+ ]
18
+ }
@@ -0,0 +1 @@
1
+ {"entryPath":"overlays/../../outside"}
@@ -0,0 +1 @@
1
+ {"images":[{"name":"api","digest":"latest"}]}
@@ -0,0 +1,7 @@
1
+ {
2
+ "entryPath": "overlays/prod",
3
+ "images": [
4
+ { "name": "api", "newName": "registry.example.com/team/api", "digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" },
5
+ { "name": "worker", "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }
6
+ ]
7
+ }
@@ -0,0 +1 @@
1
+ {"note":"No concurrency token"}
@@ -0,0 +1 @@
1
+ {"expectedUpdatedAt":"2026-09-12T00:00:00Z","note":"Service configuration"}
@@ -0,0 +1,8 @@
1
+ {
2
+ "serviceVersion": 3,
3
+ "templateId": "http",
4
+ "templateVersion": 1,
5
+ "templateDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
6
+ "parameters": {},
7
+ "artifactImages": { "main": "registry.example/api:latest" }
8
+ }
@@ -0,0 +1,9 @@
1
+ {
2
+ "serviceVersion": 3,
3
+ "templateId": "http",
4
+ "templateVersion": 1,
5
+ "templateDigest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
6
+ "parameters": { "replicas": 0, "enabled": false },
7
+ "artifactImages": { "main": "registry.example/api@sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" },
8
+ "releaseBundleId": "bundle"
9
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "deviceId": "device-1",
3
+ "profileId": "profile-1",
4
+ "selection": "auto",
5
+ "gatewayId": "gateway-a"
6
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "deviceId": "device-1",
3
+ "profileId": "profile-1",
4
+ "selection": "manual"
5
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "deviceId": "device-1",
3
+ "profileId": "profile-1",
4
+ "selection": "manual",
5
+ "gatewayId": "gateway-a",
6
+ "mode": "external_vpn"
7
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "deviceId": "device-1",
3
+ "profileId": "profile-1",
4
+ "selection": "auto"
5
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "deviceId": "device-1",
3
+ "profileId": "profile-1",
4
+ "selection": "manual",
5
+ "gatewayId": "gateway-a"
6
+ }
@@ -0,0 +1,25 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "configuration": {
4
+ "name": "Office network",
5
+ "siteId": "site-1",
6
+ "networkSpaceId": "space-1",
7
+ "mode": "external_vpn",
8
+ "resourceIds": [],
9
+ "gatewayIds": [
10
+ "gateway-a",
11
+ "gateway-b"
12
+ ],
13
+ "selectionPolicyId": "policy-1",
14
+ "allowManualSelection": true,
15
+ "enabled": true,
16
+ "assignments": {
17
+ "userIds": [
18
+ "user-1"
19
+ ],
20
+ "teamIds": [],
21
+ "deviceIds": []
22
+ },
23
+ "privateKey": "not-permitted"
24
+ }
25
+ }
@@ -0,0 +1,24 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "configuration": {
4
+ "name": "Office network",
5
+ "siteId": "site-1",
6
+ "networkSpaceId": "space-1",
7
+ "mode": "external_vpn",
8
+ "resourceIds": [],
9
+ "gatewayIds": [
10
+ "gateway-a",
11
+ "gateway-b"
12
+ ],
13
+ "selectionPolicyId": "policy-1",
14
+ "allowManualSelection": true,
15
+ "enabled": true,
16
+ "assignments": {
17
+ "userIds": [
18
+ "user-1"
19
+ ],
20
+ "teamIds": [],
21
+ "deviceIds": []
22
+ }
23
+ }
24
+ }
@@ -0,0 +1,21 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "configuration": {
4
+ "name": "Carrier preference",
5
+ "strategy": "provider",
6
+ "providerOrder": [
7
+ "telecom",
8
+ "unicom"
9
+ ],
10
+ "providerPreference": "prefer",
11
+ "maxLatencyMs": 200,
12
+ "maxTimeoutPercent": 50,
13
+ "maxSampleAgeSeconds": 60,
14
+ "minSamples": 2,
15
+ "missingMeasurements": "priority",
16
+ "maxAttempts": 999,
17
+ "retryCooldownSeconds": 30,
18
+ "failoverOnDisconnect": true,
19
+ "allowManualFallback": false
20
+ }
21
+ }
@@ -0,0 +1,21 @@
1
+ {
2
+ "expectedRevision": 0,
3
+ "configuration": {
4
+ "name": "Carrier preference",
5
+ "strategy": "provider",
6
+ "providerOrder": [
7
+ "telecom",
8
+ "unicom"
9
+ ],
10
+ "providerPreference": "prefer",
11
+ "maxLatencyMs": 200,
12
+ "maxTimeoutPercent": 50,
13
+ "maxSampleAgeSeconds": 60,
14
+ "minSamples": 2,
15
+ "missingMeasurements": "priority",
16
+ "maxAttempts": 3,
17
+ "retryCooldownSeconds": 30,
18
+ "failoverOnDisconnect": true,
19
+ "allowManualFallback": false
20
+ }
21
+ }
@@ -0,0 +1,10 @@
1
+ {
2
+ "dataSourceId": "metrics-dev",
3
+ "metricKey": "error_rate",
4
+ "scope": {},
5
+ "windowStart": "2026-09-15T10:05:00Z",
6
+ "windowEnd": "2026-09-15T10:10:00Z",
7
+ "unit": "ratio",
8
+ "threshold": { "operator": "lte", "value": 0.01 },
9
+ "expression": "arbitrary_expression"
10
+ }
@@ -0,0 +1,10 @@
1
+ {
2
+ "dataSourceId": "metrics-dev",
3
+ "metricKey": "error_rate",
4
+ "scope": { "clusterId": "dev", "namespace": "web", "service": "api" },
5
+ "windowStart": "2026-09-15T10:05:00Z",
6
+ "windowEnd": "2026-09-15T10:10:00Z",
7
+ "notBefore": "2026-09-15T10:00:00Z",
8
+ "unit": "ratio",
9
+ "threshold": { "operator": "lte", "value": 0.01 }
10
+ }
@@ -0,0 +1,53 @@
1
+ {
2
+ "id": "opensoha.hermes-api",
3
+ "name": "Hermes Chat",
4
+ "version": "0.1.0",
5
+ "publisher": "opensoha",
6
+ "type": "ai-provider-adapter",
7
+ "description": "Hermes Runs API adapter for governed chat sessions. Requires a chat-only API profile and an HTTPS endpoint.",
8
+ "compatibility": {
9
+ "soha": ">=0.1.8 <1.0.0",
10
+ "contracts": ">=0.1.17 <1.0.0"
11
+ },
12
+ "runtime": {
13
+ "mode": "manifest-only"
14
+ },
15
+ "configSchema": {
16
+ "type": "object",
17
+ "required": [
18
+ "endpoint"
19
+ ],
20
+ "properties": {
21
+ "endpoint": {
22
+ "type": "string",
23
+ "title": "Hermes HTTPS endpoint",
24
+ "pattern": "^https://[^/@]+(/[^?#]*)?$"
25
+ }
26
+ },
27
+ "additionalProperties": false
28
+ },
29
+ "extensionPoints": {
30
+ "ai": {
31
+ "agentProviders": [
32
+ {
33
+ "id": "hermes-api",
34
+ "label": "Hermes Chat",
35
+ "metadata": {
36
+ "providerId": "hermes-api",
37
+ "kind": "hermes-api",
38
+ "providerVersion": "0.1.0",
39
+ "adapterProtocol": "opensoha.agent-provider.hermes-api/v1",
40
+ "capabilities": [
41
+ "general"
42
+ ],
43
+ "runtime": {
44
+ "kind": "remote",
45
+ "endpointConfigKey": "endpoint",
46
+ "healthPath": "/health/detailed"
47
+ }
48
+ }
49
+ }
50
+ ]
51
+ }
52
+ }
53
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "action": "promote",
3
+ "uid": "",
4
+ "resourceVersion": "18"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "action": "promote_full",
3
+ "uid": "rollout-uid",
4
+ "resourceVersion": "18"
5
+ }
@@ -0,0 +1,5 @@
1
+ {
2
+ "action": "pause",
3
+ "uid": "rollout-uid",
4
+ "resourceVersion": "18"
5
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "clusterId": "",
3
+ "namespace": "",
4
+ "workloadName": "project-1",
5
+ "targetKind": "host_service",
6
+ "executorKind": "docker_compose",
7
+ "enabled": true,
8
+ "docker": {
9
+ "hostId": "host-1",
10
+ "projectId": "project-1",
11
+ "imageMappings": {
12
+ "api": "main"
13
+ }
14
+ }
15
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "clusterId": "",
3
+ "namespace": "",
4
+ "workloadKind": "DockerProject",
5
+ "workloadName": "project-1",
6
+ "targetKind": "host_service",
7
+ "executorKind": "docker_compose",
8
+ "enabled": true,
9
+ "docker": {
10
+ "hostId": "host-1",
11
+ "projectId": "project-1",
12
+ "imageMappings": {
13
+ "api": "main"
14
+ }
15
+ }
16
+ }
@@ -0,0 +1,11 @@
1
+ {
2
+ "applicationId": "app",
3
+ "repositoryId": "repo",
4
+ "projectPath": ".",
5
+ "resolvedCommit": "main",
6
+ "ruleVersion": "1",
7
+ "status": "unrecognized",
8
+ "candidates": [],
9
+ "evidencePaths": [],
10
+ "warnings": []
11
+ }
@@ -0,0 +1,29 @@
1
+ {
2
+ "applicationId": "app",
3
+ "repositoryId": "repo",
4
+ "projectPath": ".",
5
+ "resolvedCommit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
6
+ "ruleVersion": "1",
7
+ "status": "identified",
8
+ "candidates": [
9
+ {
10
+ "projectPath": ".",
11
+ "language": "go",
12
+ "packageManager": "go",
13
+ "versionRange": "1.26",
14
+ "buildMethods": [
15
+ "repo_dockerfile",
16
+ "repo_buildpacks"
17
+ ],
18
+ "evidencePaths": [
19
+ "go.mod",
20
+ "Dockerfile"
21
+ ]
22
+ }
23
+ ],
24
+ "evidencePaths": [
25
+ "go.mod",
26
+ "Dockerfile"
27
+ ],
28
+ "warnings": []
29
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "repositoryId": "repo",
3
+ "refType": "branch",
4
+ "refName": "main",
5
+ "url": "https://unmapped.example/repo"
6
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "repositoryId": "repo",
3
+ "refType": "branch"
4
+ }
@@ -0,0 +1,6 @@
1
+ {
2
+ "repositoryId": "repo",
3
+ "refType": "branch",
4
+ "refName": "main",
5
+ "projectPath": "services/api"
6
+ }
@@ -0,0 +1,4 @@
1
+ {
2
+ "templateId": "http",
3
+ "parameters": {}
4
+ }
@@ -0,0 +1,7 @@
1
+ {
2
+ "templateId": "http",
3
+ "version": 1,
4
+ "parameters": {
5
+ "port": 80
6
+ }
7
+ }
@@ -0,0 +1,25 @@
1
+ {
2
+ "key": "http",
3
+ "name": "HTTP service",
4
+ "source": {
5
+ "renderer": "raw_yaml",
6
+ "files": [
7
+ {
8
+ "path": "deployment.yaml",
9
+ "content": "kind: Deployment\napiVersion: apps/v1\n"
10
+ }
11
+ ]
12
+ },
13
+ "parameterSchema": {
14
+ "type": "object",
15
+ "$ref": "file:///etc/passwd"
16
+ },
17
+ "defaults": {
18
+ "port": 8080
19
+ },
20
+ "health": {
21
+ "mode": "workload_ready",
22
+ "timeoutSeconds": 300
23
+ },
24
+ "enabled": true
25
+ }
@@ -0,0 +1,21 @@
1
+ {
2
+ "key": "http",
3
+ "name": "HTTP service",
4
+ "source": {
5
+ "renderer": "raw_yaml",
6
+ "files": [
7
+ {
8
+ "path": "deployment.yaml",
9
+ "content": "kind: Deployment\napiVersion: apps/v1\n"
10
+ }
11
+ ]
12
+ },
13
+ "defaults": {
14
+ "port": 8080
15
+ },
16
+ "health": {
17
+ "mode": "workload_ready",
18
+ "timeoutSeconds": 300
19
+ },
20
+ "enabled": true
21
+ }
@@ -0,0 +1,40 @@
1
+ {
2
+ "key": "http",
3
+ "name": "HTTP service",
4
+ "source": {
5
+ "renderer": "raw_yaml",
6
+ "files": [
7
+ {
8
+ "path": "deployment.yaml",
9
+ "content": "kind: Deployment\napiVersion: apps/v1\n"
10
+ }
11
+ ],
12
+ "helm": {
13
+ "repositoryUrl": "https://charts.example.test",
14
+ "chart": "web",
15
+ "version": "1.0.0",
16
+ "values": {}
17
+ }
18
+ },
19
+ "parameterSchema": {
20
+ "type": "object",
21
+ "properties": {
22
+ "port": {
23
+ "type": "integer",
24
+ "minimum": 1,
25
+ "maximum": 65535
26
+ }
27
+ },
28
+ "required": [
29
+ "port"
30
+ ]
31
+ },
32
+ "defaults": {
33
+ "port": 8080
34
+ },
35
+ "health": {
36
+ "mode": "workload_ready",
37
+ "timeoutSeconds": 300
38
+ },
39
+ "enabled": true
40
+ }